777jal Privacy Policy —
How We Collect, Use & Protect Your Data

1 Information We Collect

777jal collects personal data through several channels: directly from you when you register an account or complete KYC verification, automatically as you use the platform, and from third-party payment processors when you make a deposit or request a withdrawal. The categories of information we collect are described below.

Information you provide directly:

• Identity data: Full legal name, date of birth, National Identification Card (NID) number or passport number, and selfie or document photograph submitted for KYC verification.
• Contact data: Email address and Bangladesh mobile number used to register and secure your account.
• Financial data: bKash, Nagad, Rocket, or Upay mobile wallet numbers; Visa or Mastercard details (card number, expiry, billing name) submitted for deposit or withdrawal processing. Full card numbers are never stored on 777jal servers — they are tokenised by our payment processor.
• Account preferences: Responsible gaming limits you voluntarily set, notification preferences, and any self-exclusion periods you activate.
• Communications: Records of your interactions with our live chat support team, emails you send to [email protected], and feedback or complaint submissions.

Information collected automatically:

• Device and technical data: IP address, browser type and version, operating system, device model, screen resolution, and time zone (Bangladesh Standard Time, UTC+6).
• Usage data: Pages visited, games played, wager amounts and frequencies, session duration, navigation paths, and click patterns within the platform.
• Geolocation data: Approximate geographic location derived from your IP address, used solely to detect access from restricted jurisdictions and to apply appropriate platform settings.
• Cookie and tracking data: Session identifiers, authentication tokens, and analytics identifiers as described in Section 4 of this policy.

2 How We Use Your Information

777jal uses the personal data we collect for clearly defined purposes, each of which is necessary either to deliver our services to you, to fulfil legal and regulatory obligations, or to protect the safety and integrity of the platform. We do not use your data for any purpose not listed here.

Where we rely on your consent to process data — most notably for promotional email and SMS communications — you may withdraw that consent at any time by updating your notification preferences within your account dashboard or by contacting our support team. Withdrawal of consent does not affect the lawfulness of any processing carried out before the withdrawal.

3 Data Sharing & Disclosure

777jal does not sell, rent, or trade your personal data to any third party. We share personal data only in the limited circumstances described below, and always with appropriate contractual safeguards in place to protect your information.

• Payment processors: When you make a deposit or request a withdrawal, your financial data is transmitted to our payment processing partners (including operators of bKash, Nagad, Rocket, Upay, and card scheme networks). These partners receive only the data strictly necessary to complete your transaction and are contractually prohibited from using it for any other purpose.
• KYC and identity verification providers: Identity documents submitted during KYC verification may be processed by trusted third-party verification services operating under strict data processing agreements. These providers are bound by the same data protection standards that apply to 777jal itself.
• Fraud prevention and security services: Anonymised or pseudonymised device and behavioural data may be shared with specialised fraud detection providers to identify and prevent account abuse, money laundering, and underage access attempts.
• Game software providers: When you play games powered by third-party studios (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Ezugi), your player identifier and game session data are shared with those providers to deliver the game. These providers do not receive your full identity or financial information.
• Legal and regulatory disclosure: We may disclose personal data where required to do so by applicable law, court order, or lawful request from a competent authority. In such cases, we will disclose only the minimum information required to satisfy the legal obligation.
• Business transfers: In the event of a merger, acquisition, or sale of all or a material part of 777jal's assets, your personal data may be transferred to the successor entity. You will be notified of any such transfer via the email address on your account before your data is subject to a different privacy policy.

4 Cookies & Tracking Technologies

777jal uses cookies and similar technologies — including local storage tokens and session identifiers — to operate core platform functions, maintain your logged-in session, and understand how players interact with our services. The table below describes the types of cookies we use.

777jal does not use third-party advertising cookies, retargeting pixels, or social media tracking scripts. The cookies we set are all first-party (i.e., set by the 777jal.app domain itself) with the exception of cookies set by our payment processing partners during the deposit or withdrawal flow.

You may manage or delete cookies at any time through your browser settings. Please note that disabling essential cookies will prevent you from logging in to your 777jal account and accessing most platform features. Disabling analytics or preference cookies will not affect your ability to play games or conduct financial transactions.

5 Data Security & Storage

Protecting your personal data is a core operational responsibility at 777jal. We implement a layered security architecture that includes both technical and organisational safeguards designed to prevent unauthorised access, accidental loss, destruction, or disclosure of personal data.

Technical safeguards include:

• TLS 1.3 encryption for all data in transit between your browser or mobile device and our servers.
• AES-256 encryption for all sensitive personal data stored in our databases, including identity documents and financial information.
• Tokenisation of payment card data — raw card numbers are never stored on 777jal infrastructure.
• Multi-factor authentication (MFA) enforced for all internal staff accounts with access to player data systems.
• Regular third-party penetration testing and vulnerability assessments of our platform infrastructure.
• Intrusion detection systems and 24/7 security monitoring of server environments.

Organisational safeguards include:

• Strict role-based access controls limiting staff access to personal data on a need-to-know basis only.
• Mandatory data protection training for all staff with access to player information.
• Documented data breach response procedures with a target notification timeline of 72 hours for material incidents.

Notwithstanding the above, no online platform can guarantee absolute security against all possible threats. In the event of a data security incident that materially affects your personal data, 777jal will notify you without undue delay via the email address registered to your account and will provide full details of the nature of the incident, the data affected, and the steps we have taken to remediate it.

6 Your Privacy Rights

As a 777jal player, you hold meaningful rights over the personal data we hold about you. These rights are not theoretical — they are practical entitlements you can exercise at any time by contacting our support team at [email protected] or through the live chat function on the platform.

• Right of Access: You may request a copy of all personal data we hold about you. We will provide this in a structured, commonly used, machine-readable format within 14 days of a valid request.
• Right to Rectification: If any personal data we hold is inaccurate or incomplete, you have the right to request that we correct it. You can update most account information directly within your account dashboard; for identity document corrections, please contact support.
• Right to Erasure: You may request deletion of your personal data. We will honour erasure requests where no legal obligation requires us to retain the data (for example, financial transaction records must be retained for a minimum period for anti-money-laundering compliance purposes).
• Right to Restriction of Processing: You may request that we restrict how we use your data while a dispute or correction request is being resolved.
• Right to Data Portability: You may request that we transfer your personal data to another service provider in a structured digital format where technically feasible.
• Right to Object: You may object to processing based on legitimate interests, including profiling for responsible gaming monitoring. We will assess each objection on its merits and respond within 14 days.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, please write to us at [email protected] with the subject line "Data Rights Request" and include your full registered name and account email address for verification purposes. We will acknowledge your request within 48 hours and complete it within 14 calendar days.

7 Data Retention

777jal retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply to the main categories of personal data we hold:

Once a retention period expires, personal data is securely deleted or irreversibly anonymised. Where anonymisation is applied, the resulting data no longer constitutes personal data and may be retained indefinitely for aggregate statistical purposes.

8 Policy Updates & Contact

777jal reviews and updates this Privacy Policy periodically to reflect changes in our data practices, legal requirements, or platform features. The "Last Updated" date at the top of this page indicates when the most recent revision was made. We encourage you to revisit this page regularly to stay informed about how we handle your personal data.

Where a change to this policy is material — for example, introducing a new category of data collection, a new third-party data processor, or a change to your rights — we will notify all registered players via the email address on their account at least 14 days before the change takes effect. Your continued use of 777jal following such notification constitutes acceptance of the revised policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or the personal data 777jal holds about you, please contact our Data Support team using the details below:

• Email: [email protected] (subject line: "Privacy Enquiry")
• Live Chat: Available 24/7 via the 777jal platform — select "Privacy & Data" from the support topic menu
• Response Time: We aim to acknowledge all privacy enquiries within 48 hours and resolve them within 14 calendar days