Privacy Policy — How 777jja Collects, Uses, and Protects Your Data
At 777jja, protecting the personal data of our players across Bangladesh is a responsibility we take seriously. This Privacy Policy explains what information we collect when you use our platform, why we collect it, how it is stored and processed, who we may share it with, and the rights you hold over your own data. We encourage all players to read this document in full before creating an account.
Every page and transaction on 777jja is protected by 256-bit SSL encryption, ensuring your personal data travels securely between your device and our servers.
777jja does not sell, rent, or trade your personal information to any third-party marketer or data broker, under any circumstances.
You retain the right to access, correct, export, or request deletion of your personal data at any time by contacting our support team.
We explain every category of cookie we use, what it does, and how long it persists — so you always know what is running in your browser.
Where data is shared with third-party game studios or payment processors, those partners are contractually bound to strict data-handling standards.
Although based in Bangladesh, 777jja voluntarily adheres to GDPR-aligned data minimisation, purpose limitation, and storage limitation principles.
Data We Collect
777jja collects personal data from you in three primary ways: directly from information you provide during registration and account usage, automatically through your interaction with the platform, and occasionally from third-party sources such as payment processors and identity verification partners. We collect only the data that is necessary to deliver and improve our services and to meet our legal obligations.
Information you provide directly:
- Registration data: Full name, date of birth, phone number, email address, and residential address at the time of account creation.
- Identity verification (KYC) data: A copy of a government-issued photo ID (National ID card, passport, or birth certificate) and, where required, proof of your registered payment method. This data is used solely for identity and age verification purposes.
- Payment data: The mobile financial service account number (bKash, Nagad, Rocket, or Upay) linked to your 777jja wallet. Full payment credentials are not stored on 777jja servers — transactions are routed through the respective payment provider's secure infrastructure.
- Support communications: The content of any messages, complaints, or requests you submit to the 777jja support team via live chat or email.
- Responsible gaming preferences: Any deposit limits, session time limits, cooling-off periods, or self-exclusion requests you set through your account settings.
Information collected automatically:
- Device and browser data: IP address, browser type and version, operating system, device model, screen resolution, and device identifiers.
- Usage and activity data: Pages visited, games played, bets placed, session duration, clickstream data, feature interactions, and timestamps of all activity on the platform.
- Geolocation data: Approximate location derived from your IP address. We do not collect precise GPS-level location data unless explicitly requested and consented to.
- Cookie and tracking data: See Section 3 (Cookies & Tracking) for full details on the categories of cookies and tracking technologies used.
Information from third parties:
- Payment confirmation data: Transaction reference numbers, timestamps, and status updates from bKash, Nagad, Rocket, and Upay to reconcile deposits and withdrawals against your account wallet.
- Fraud and risk data: Where fraud prevention or AML (anti-money laundering) checks are necessary, 777jja may receive limited risk-flag data from specialist third-party screening services.
How We Use Your Data
All personal data collected by 777jja is processed for one or more of the lawful purposes described below. We do not use your data for purposes that are incompatible with the original reason it was collected, and we do not engage in automated decision-making that produces significant legal effects on any individual user without human oversight.
| Purpose | Data Used | Lawful Basis |
|---|---|---|
| Account creation and management | Registration data, contact details | Contract performance |
| Identity and age verification (KYC) | KYC documents, date of birth | Legal obligation; contract |
| Processing deposits and withdrawals | Payment account number, transaction data | Contract performance |
| Customer support | Support communications, account history | Contract performance; legitimate interest |
| Fraud prevention and AML compliance | Usage data, IP address, payment data | Legal obligation; legitimate interest |
| Responsible gaming monitoring | Betting activity, session data, limits set | Legal obligation; legitimate interest |
| Platform improvement and analytics | Usage data, device data, cookie data | Legitimate interest |
| Personalised promotions and offers | Activity history, preferences | Consent (you may opt out at any time) |
| Security and platform integrity | IP address, device identifiers, session data | Legitimate interest |
Where we rely on your consent as a lawful basis (for example, sending you promotional communications about new games, seasonal offers, or BPL cricket betting promotions), you may withdraw that consent at any time by updating your communication preferences within your account settings or by contacting support. Withdrawal of consent does not affect the lawfulness of processing that occurred prior to the withdrawal.
Cookies & Tracking
777jja uses cookies and similar tracking technologies (local storage, session tokens, pixel tags) to operate the platform reliably, remember your preferences, measure how the site is used, and detect fraudulent behaviour. A cookie is a small text file placed on your device by the website when you visit. Cookies do not contain executable code and cannot harm your device.
The following categories of cookies are used on 777jja:
| Category | Purpose | Duration | Required? |
|---|---|---|---|
| Strictly Necessary | Session management, login state, CSRF protection, load balancing | Session | Yes — cannot be disabled |
| Functional | Remembering language preference, game display settings, responsible gaming limits set | Up to 1 year | Recommended |
| Analytics | Measuring page views, session duration, feature usage, error logging for platform improvement | Up to 2 years | Optional (consent-based) |
| Security & Fraud Detection | Device fingerprinting, anomaly detection, bot identification, duplicate account detection | Up to 1 year | Yes — required for platform integrity |
You can manage or delete cookies through your browser settings at any time. Please note that disabling strictly necessary or security cookies may prevent you from logging in or using certain features of the 777jja platform. Analytics cookies can be disabled without affecting core platform functionality.
777jja does not use third-party advertising cookies or tracking pixels that report your browsing activity to external advertising networks. The tracking technologies deployed on this site serve only the purposes listed in the table above and are governed by this Privacy Policy.
Data Sharing & Third Parties
777jja does not sell your personal data. We share your information only with the categories of third parties described below, and only to the minimum extent necessary to fulfil the stated purpose. All third-party partners who receive personal data from 777jja are required to process that data in accordance with strict contractual data-handling obligations.
- Payment Service Providers (bKash, Nagad, Rocket, Upay): To process deposits and withdrawals, your mobile financial service account number and the transaction amount are shared with the relevant payment provider. The payment provider's own privacy policy governs their handling of your data once received. 777jja does not store full payment credentials on its own servers.
- Game Studio Partners: When you launch a game provided by a third-party studio — such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Ezugi — a session token and your anonymised player ID are passed to the game provider's platform. These studios operate under their own data agreements and are selected on the basis that they maintain high data security standards.
- Identity Verification Services: Where KYC checks require external document verification, your submitted identity documents may be passed to a specialist identity verification provider. These providers are bound by contractual confidentiality obligations and may not use your data for any purpose other than verification.
- Fraud Prevention and AML Screening: IP addresses, device identifiers, and transaction patterns may be shared with fraud detection and anti-money laundering screening services to protect the platform and all of its users.
- Legal and Regulatory Authorities: 777jja will disclose personal data to law enforcement, government bodies, or other competent authorities when required to do so by applicable law, a valid court order, or where disclosure is necessary to protect the safety of users or the platform.
- Business Transfers: In the event that 777jja undergoes a merger, acquisition, or sale of assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer via a prominent notice on the platform or by direct communication before your data is subject to a materially different privacy policy.
Data Retention
777jja retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable laws and regulations. The retention periods below reflect both operational necessity and standard record-keeping obligations for online gaming and financial service platforms operating in the Bangladesh market.
| Data Category | Retention Period | Reason |
|---|---|---|
| Account registration data | Duration of account + 5 years after closure | Legal obligation; fraud prevention |
| KYC identity documents | Duration of account + 5 years after closure | AML and identity verification obligations |
| Transaction and payment records | 7 years from transaction date | Financial record-keeping; AML compliance |
| Betting and gaming activity logs | 3 years from date of activity | Dispute resolution; responsible gaming monitoring |
| Support communications | 3 years from last interaction | Complaint records; service improvement |
| Analytics and usage data | 2 years | Platform performance monitoring |
| Cookie and tracking data | Up to 2 years (per cookie category) | Platform functionality and security |
| Self-exclusion records | Minimum 5 years from exclusion date | Responsible gaming obligation; re-registration prevention |
When data reaches the end of its retention period, it is securely deleted or anonymised so that it can no longer be associated with any individual. Anonymised aggregate data (for example, aggregate game popularity statistics) may be retained indefinitely for business analytics purposes, as it cannot be used to identify any individual user.
If you request deletion of your account and personal data (see Section 6 — Your Privacy Rights), 777jja will delete or anonymise your data promptly, subject to the legal minimum retention periods described in the table above. Where legal obligations require us to retain certain records, we will inform you of the applicable retention period at the time your deletion request is processed.
Your Privacy Rights
As a user of the 777jja platform, you hold a number of rights over your personal data. 777jja is committed to honouring these rights promptly and without unnecessary barriers. To exercise any of the rights listed below, please contact our support team via live chat or by email (plain text, non-clickable): [email protected]
- Right to Access: You have the right to request a copy of all personal data 777jja holds about you. We will provide this information within a reasonable timeframe, typically within 30 days of your request. The data will be provided in a clear, readable format.
- Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. For account details such as phone number or address, you may be able to update these directly within your account settings.
- Right to Erasure ("Right to be Forgotten"): You may request that 777jja delete your personal data. We will comply where there is no legal obligation to retain the data. Where minimum retention periods apply (see Section 5), we will inform you of the residual retention period at the time of your request.
- Right to Restrict Processing: In certain circumstances — such as while a data accuracy dispute is being investigated — you may request that we restrict processing of your data. During a restriction period, your data will be stored but not actively processed for other purposes.
- Right to Data Portability: Where data has been provided by you and is processed on the basis of consent or contract, you may request a copy of that data in a structured, machine-readable format (such as CSV or JSON) so that it can be transferred to another service if you choose.
- Right to Object: You may object to processing carried out on the basis of legitimate interest, including direct marketing and profiling for personalised offers. Where you object to marketing, we will cease that processing immediately.
- Right to Withdraw Consent: Where processing is based on your consent (for example, receiving promotional emails about seasonal offers or new game launches), you may withdraw consent at any time. This does not affect the lawfulness of processing carried out before the withdrawal.
Data Security
777jja implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Security is not an afterthought at 777jja — it is a foundational component of our platform architecture.
- 256-bit SSL/TLS Encryption: All data transmitted between your device and 777jja servers is encrypted using TLS 1.2 or higher. The padlock symbol in your browser address bar confirms that your connection is secure at all times.
- Password Hashing: Account passwords are never stored in plain text. They are hashed using industry-standard one-way cryptographic algorithms, meaning that even 777jja staff cannot retrieve your password — only reset it.
- Access Controls: Internal access to personal data is restricted on a strict need-to-know basis. Staff members are granted access only to the data required to fulfil their specific role and are subject to confidentiality obligations.
- Intrusion Detection and Monitoring: Our infrastructure is monitored continuously for unusual activity, unauthorised access attempts, and anomalies that may indicate a security incident. Alerts are reviewed by our security team around the clock.
- Secure Data Storage: Personal data and KYC documents are stored on encrypted servers with access audit trails. Document storage environments are physically and logically separated from public-facing platform infrastructure.
- Incident Response: In the event of a data breach that poses a risk to your rights and freedoms, 777jja will notify affected users within a reasonable timeframe, describe the nature of the breach, and outline the steps being taken to mitigate it.
While 777jja takes all reasonable steps to protect your personal data, no internet-based platform can guarantee absolute security. You also play a role in keeping your account secure: use a strong, unique password, never share your login credentials with anyone, and contact our support team immediately if you suspect your account has been accessed by an unauthorised party.
Changes to This Policy
777jja reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the features and services available on the platform. When material changes are made, we will provide notice by posting a prominent announcement on the 777jja homepage, updating the "Last updated" date at the top of this page, and — where appropriate — sending a direct notification to your registered contact details.
Your continued use of the 777jja platform after any such update has been posted constitutes your acceptance of the revised Privacy Policy. If you do not agree with a revised version of this Policy, you should discontinue use of the platform and contact our support team to close your account and request deletion of your personal data where legally permissible.
We recommend bookmarking this page and reviewing it periodically — particularly before making a deposit or submitting KYC documents — to ensure you remain informed of how your data is being handled. Previous versions of this Privacy Policy are available on request by contacting our support team.
Ready to Play Responsibly at 777jja?
Now that you know how we protect your data, explore our full range of casino games, live cricket betting, and slots — all secured with industry-leading encryption and built for Bangladesh players.