777jya Privacy Policy — How We Protect Your Data

777jya is committed to safeguarding the privacy of all individuals who interact with our platform. We understand that the personal data you share with us is sensitive, and we take seriously our obligation to handle that data responsibly, transparently, and securely. This Policy applies to all personal data processed in connection with your use of the 777jya platform, including data collected during account registration, deposits, withdrawals, gameplay, customer support interactions, and general browsing of the website.

This Policy should be read alongside the 777jya Terms & Conditions and the Responsible Gaming Policy, both of which form part of the overall agreement governing your use of the Platform. In the event of any conflict between this Policy and those documents on matters relating specifically to data privacy, this Policy shall prevail.

We periodically review and update this Policy to reflect changes in our data practices, applicable law, or the services we offer. The effective date of the current version is stated at the top of this document. We encourage you to revisit this page regularly to stay informed of any changes.

777jya collects personal data in several categories depending on how you interact with the Platform. The categories of data we may collect are described below:

We collect personal data through the following channels and mechanisms:

• Direct submission: Data you provide when creating an account, completing KYC verification, submitting a deposit or withdrawal request, or contacting the support team via email at [email protected].
• Automated technical collection: Data collected automatically when you access the Platform, including IP addresses, device fingerprints, browser identifiers, and session logs gathered via server-side logging and first-party cookies.
• Payment processor data: Transaction-level data shared with 777jya by payment partners such as bKash, Nagad, Rocket, Upay, and card networks (Visa, Mastercard) when you initiate a financial transaction on the Platform.
• KYC and identity verification: Documents and biometric data (e.g., selfie photographs) submitted by you during the account verification process.
• Gameplay data: Records of your betting activity, game sessions, win/loss outcomes, and use of responsible gaming tools, generated automatically by the Platform's gaming infrastructure.
• Third-party game providers: Anonymised or aggregated technical data shared by certified game studios (such as Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, and Spribe) regarding game session integrity and RNG certification status.

3.1 Cookies and Similar Technologies. A more detailed explanation of cookies used on the Platform and how to manage your cookie preferences is provided in Section 8 of this Policy.

777jya processes personal data for the following specific and legitimate purposes:

• Account management: Creating, maintaining, and securing your 777jya player account, including authentication, OTP delivery, and password reset functionality.
• Transaction processing: Executing deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, and City Bank in Bangladeshi Taka (৳ BDT).
• Identity verification (KYC): Confirming that all players are at least 18 years of age and that account information is accurate, as required prior to processing withdrawals.
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent transactions, bonus abuse, multi-accounting, money laundering, and other prohibited activities described in the Terms & Conditions.
• Responsible gaming: Monitoring gameplay patterns to identify potential problem gambling behaviour and enabling the provision of deposit limits, session reminders, cooling-off periods, and self-exclusion tools.
• Customer support: Responding to account enquiries, payment disputes, technical issues, and responsible gaming requests submitted via [email protected].
• Legal and regulatory compliance: Fulfilling any obligation imposed by applicable law, including responding to lawful requests from competent authorities.
• Platform improvement: Analysing aggregated usage data to enhance game offerings, improve website performance, and optimise the overall user experience.
• Direct communications: Sending account-related notifications, deposit confirmations, withdrawal status updates, and — where you have given separate consent — promotional communications about bonuses and offers available on the 777jya platform.

777jya processes personal data only where a valid legal basis exists for doing so. The applicable legal bases are as follows:

• Contractual necessity: Processing is necessary to fulfil the contract between 777jya and the Player — specifically, to operate the account, process transactions, and deliver gaming services as described in the Terms & Conditions.
• Legitimate interests: Processing is necessary for the legitimate interests of 777jya, including fraud prevention, platform security, anti-money-laundering monitoring, and general business improvement, provided those interests are not overridden by your fundamental rights and freedoms.
• Legal obligation: Processing is required to comply with applicable legal or regulatory obligations, including responding to lawful requests from competent governmental or judicial authorities.
• Consent: For processing activities that are not strictly necessary for the contract or our legitimate interests — most notably, the sending of marketing communications — we rely on your freely given, specific, informed, and unambiguous consent. You may withdraw this consent at any time.
• Vital interests: In exceptional circumstances, processing may be necessary to protect the vital interests of a data subject — for example, where a player's communications indicate a risk to their safety in the context of problem gambling.

6.1 General Principle. 777jya does not sell, rent, or trade your personal data to any third party for their own commercial purposes. Data is shared only in the specific, limited circumstances described below.

6.2 Payment Processors. Financial data is shared with the payment service providers required to execute your transaction (e.g., bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, City Bank). These providers process your data under their own privacy policies and in accordance with applicable financial regulations.

6.3 Game Content Providers. Where technically necessary for the delivery of a game, anonymised session data (such as player ID tokens and stake values) may be transmitted to the relevant game studio (e.g., Pragmatic Play, Evolution Gaming, Ezugi, Spribe). These studios do not receive your full identity data.

6.4 Identity Verification Services. KYC documents and identity data may be shared with authorised third-party identity verification providers who assist 777jya in confirming the accuracy of player registration data and confirming that players meet the 18+ age requirement.

6.5 Legal and Regulatory Authorities. We may disclose personal data to law enforcement agencies, regulatory bodies, courts, or other competent authorities where required or permitted by applicable law — for example, in response to an anti-money-laundering investigation or a court order.

6.6 Business Transfers. In the event that 777jya undergoes a merger, acquisition, restructuring, or sale of all or a substantial portion of its assets, player data may be transferred to the acquiring entity as part of that transaction. In such circumstances, we will endeavour to notify affected players via the contact details held on their accounts prior to the transfer taking effect.

7.1 Retention Periods. 777jya retains personal data for as long as is necessary to fulfil the purposes described in this Policy and to comply with applicable legal, regulatory, and operational obligations. The general retention periods applied by the Platform are as follows:

7.2 Post-Retention Deletion. Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Anonymised, aggregated data (from which no individual can be identified) may be retained indefinitely for statistical and analytical purposes.

8.1 What Are Cookies. Cookies are small text files placed on your device when you visit a website. The 777jya platform uses first-party cookies only — we do not deploy third-party advertising cookies or cross-site tracking pixels. The cookies used by 777jya fall into the following categories:

• Strictly necessary cookies: Required for the Platform to function correctly. These include session authentication tokens, load-balancing cookies, and security cookies. These cookies cannot be disabled without impairing the functionality of your account.
• Functional cookies: Used to remember your preferences, such as language settings and game lobby view preferences, in order to provide a more personalised experience.
• Analytical cookies: Used on an aggregated, anonymised basis to understand how players navigate the Platform, which features are most used, and where technical errors occur. This data is used solely to improve the Platform.

8.2 Managing Cookies. You may manage or disable non-essential cookies via your browser settings. Disabling functional or analytical cookies will not prevent you from using the Platform, but may limit certain personalisation features. Instructions for managing cookies in the most commonly used browsers are available in the help documentation for those browsers.

8.3 No Third-Party Advertising Cookies. 777jya does not permit third-party advertising networks to place tracking cookies on the Platform. No player behavioural data is shared with advertising platforms for the purpose of retargeted advertising.

9.1 Technical Safeguards. 777jya implements industry-standard technical and organisational security measures to protect personal data against unauthorised access, loss, destruction, alteration, or disclosure. These measures include:

• Transport Layer Security (TLS / SSL) encryption for all data transmitted between your device and the Platform's servers.
• Encryption at rest for sensitive personal data, including identity documents and financial records, stored on 777jya's secure server infrastructure.
• OTP-based two-factor authentication (2FA) available to all registered players to protect account login.
• Automated anomaly detection systems that flag unusual login locations, devices, or transaction patterns for investigation.
• Regular internal security reviews and access control audits to ensure that personal data is accessible only to authorised personnel with a legitimate operational need.
• Segregation of duties — no single individual within the 777jya team has unrestricted access to the full set of player personal data.

9.2 Data Breach Response. In the event of a personal data breach that poses a risk to the rights and freedoms of affected players, 777jya will take immediate steps to contain the breach, assess its scope, and notify affected individuals as soon as reasonably practicable. The notification will describe the nature of the breach, the categories and approximate number of records affected, and the steps being taken to address it.

9.3 Player Responsibility. While 777jya takes all reasonable steps to protect your data on our systems, the security of data in transit from your device to the internet is also partially dependent on the security practices you observe on your own devices. You are responsible for keeping your login credentials confidential and for using the Platform only on secure, trusted networks and devices.

As a data subject, you hold the following rights with respect to personal data that 777jya holds about you. To exercise any of these rights, contact the support team at [email protected] with the subject line "Data Rights Request". We will respond within 30 days of receiving a valid, verified request.

• Right of access: You have the right to request a copy of the personal data that 777jya holds about you, together with information about how that data is being used and the legal basis for processing it.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or completed without undue delay.
• Right to erasure ("right to be forgotten"): In certain circumstances — for example, where data is no longer necessary for the purpose it was collected — you may request that your personal data be deleted. This right is subject to our legal obligation to retain certain records (see Section 7).
• Right to restriction of processing: You may request that we restrict the processing of your data while a rectification request is pending, while you object to a processing activity, or in other specific circumstances defined by applicable data protection law.
• Right to data portability: Where processing is carried out by automated means on the basis of your consent or contractual necessity, you have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to request that it be transmitted to another data controller where technically feasible.
• Right to object: You have the right to object to the processing of your personal data where 777jya relies on legitimate interests as the legal basis. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to the withdrawal.

11.1 Age Restriction. The 777jya platform is strictly intended for adults aged 18 and above. We do not knowingly collect, process, or retain personal data belonging to individuals under the age of 18. All account registrations are subject to age verification, and any account discovered to belong to a minor will be suspended immediately, with all associated data handled in accordance with our obligations under applicable law.

11.2 Reporting Under-Age Access. If you believe that a person under the age of 18 has registered an account on the 777jya platform or has accessed the Platform using an adult's credentials, please notify us immediately at [email protected]. We take under-age access seriously and will act on all such reports as a matter of priority.

11.3 Parental Controls. Parents and guardians who are concerned about a minor's access to online gambling platforms are encouraged to make use of device-level parental control software and internet filtering tools. 777jya supports initiatives that promote responsible use of digital services by families across Bangladesh.

12.1 Right to Update. 777jya reserves the right to update, revise, or replace this Privacy Policy at any time. The most current version will always be accessible at https://777jya.app/privacy-policy. The "Last reviewed" date at the top of this document will be updated each time a new version is published.

12.2 Material Changes. Where a proposed change is material — meaning it significantly affects how we collect, use, share, or retain your personal data — we will endeavour to provide advance notice to registered players via the contact details held on their accounts. This notice will describe the nature of the change and the date on which it takes effect.

12.3 Continued Use as Acceptance. Your continued use of the 777jya platform following the publication of an updated Privacy Policy constitutes your acknowledgement and acceptance of the revised terms. If you do not agree with any material change, you should cease using the Platform and contact [email protected] to request account closure and the deletion or return of your data in accordance with Section 10.

If you have any questions, concerns, or requests relating to this Privacy Policy, or if you wish to exercise any of your data rights as described in Section 10, please reach out to the 777jya support team using the details below. All privacy-related communications are handled with strict confidentiality.

• Support Email: [email protected] (plain text — not a clickable link)
• Subject Line for Data Requests: "Data Rights Request" or "Privacy Enquiry"
• Website: https://777jya.app
• Response Time: Within 30 days for data rights requests; within 24 hours for general privacy enquiries
• Language: English