jay77 Privacy Policy — How We Collect, Use, and Protect Your Data

1.1 jay77 ("the Platform", "we", "us", "our") is committed to protecting the privacy and personal data of all players and visitors who interact with our online casino and sports betting platform. This Privacy Policy describes our practices with respect to the collection, use, storage, sharing, and protection of personal information.

1.2 jay77 operates as an offshore betting platform serving the Bangladesh market. Our platform is available in English and is designed for players aged 21 and above. We serve players across Bangladesh including Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar.

1.3 This Policy should be read alongside the jay77 Terms & Conditions and the Responsible Gaming Policy, both of which are available on this website. In the event of any conflict between this Privacy Policy and the Terms & Conditions on privacy matters, this Privacy Policy shall prevail.

1.4 We may update this Privacy Policy from time to time to reflect changes in our data practices, operational requirements, or applicable legal obligations. All updates will be posted on this page with a revised effective date. For material changes, we will notify registered players by email at least 7 days in advance.

2.1 Data You Provide Directly. When you register an account, verify your identity, make deposits or withdrawals, contact our support team, or interact with promotional features on jay77, you actively provide us with personal data. This includes:

• Registration information: full legal name, date of birth, residential address, email address, mobile phone number, and chosen username;
• Identity verification documents: national identity card, passport, driving licence, and a live selfie photograph for biometric verification purposes;
• Financial information: mobile wallet numbers (bKash, Nagad, Rocket, Upay), bank account details (Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank), and transaction records;
• Communications: the content of messages you send to our customer support team via live chat or email, including any attachments you share;
• Survey and feedback responses where you voluntarily participate in player satisfaction programmes.

2.2 Data Collected Automatically. When you access or use the jay77 platform, certain technical and usage data is collected automatically by our servers and analytics systems:

• Device and technical data: IP address, device type and model, operating system version, browser type and version, screen resolution, and unique device identifiers;
• Usage and behavioural data: pages and game categories visited, games launched and played, bet amounts and outcomes, session start and end times, click-path data, and feature interaction logs;
• Log data: server access logs, error logs, and security event logs generated by platform infrastructure;
• Location data: approximate geographic location derived from IP address (city and country level only — jay77 does not collect GPS or precise location data).

2.3 Data from Third Parties. In certain circumstances jay77 may receive personal data about you from third-party sources, including:

• KYC and identity verification service providers who cross-reference the documents you submit against official databases;
• Payment processors who confirm the status and outcome of deposit and withdrawal transactions;
• Fraud prevention and anti-money laundering screening services that provide risk scores or flagging information related to your account;
• Game studios (including Pragmatic Play, Evolution Gaming, and Spribe) who may share session and game-outcome data necessary for dispute resolution.

3.1 jay77 uses the personal data we collect for the following defined purposes:

• Account creation and management: to register your player account, authenticate your identity at login, and manage your account settings and preferences;
• Age and identity verification: to confirm that you are 21 years of age or older and that the personal details you have provided are accurate and genuine;
• Payment processing: to facilitate deposits from and withdrawals to your registered bKash, Nagad, Rocket, Upay, or bank account in Bangladeshi Taka (BDT);
• Customer support: to respond to your queries, investigate complaints, resolve disputes, and improve the quality of our support service;
• Fraud prevention and security: to detect, investigate, and prevent fraudulent transactions, account takeovers, bonus abuse, collusion, and other prohibited activities;
• Anti-money laundering (AML) compliance: to screen transactions against applicable watchlists, monitor for suspicious transaction patterns, and file regulatory reports as required by law;
• Responsible gaming: to monitor player betting patterns for indicators of problem gambling, to apply and enforce deposit limits and self-exclusion instructions, and to contact players who may benefit from support resources;
• Platform improvement: to analyse usage data in aggregate to identify performance issues, improve game and feature offerings, and enhance the overall player experience;
• Marketing communications: to send you promotional offers, bonus notifications, and seasonal campaign information, but only where you have explicitly opted in to receive such communications;
• Legal compliance: to meet our obligations under applicable laws, respond to lawful requests from regulatory or law enforcement authorities, and maintain records as required by anti-money laundering legislation.

3.2 jay77 does not use automated decision-making that produces legal or similarly significant effects on players without human review. Where algorithmic tools are used for fraud scoring or responsible gaming monitoring, the outputs are reviewed by trained staff before any account action is taken.

4.1 jay77 processes personal data only where a recognised lawful basis exists for doing so. The primary legal bases we rely on are:

• Performance of a contract: processing necessary to create and manage your account, process your transactions, and deliver the gaming and betting services you have contracted with us to provide;
• Legal obligation: processing required to comply with anti-money laundering laws, age verification obligations, financial record-keeping requirements, and responses to lawful regulatory or law enforcement requests;
• Legitimate interests: processing for fraud prevention, platform security, service analytics, and responsible gaming monitoring, where these interests are not overridden by your privacy rights and freedoms;
• Consent: processing for marketing communications and for any non-essential cookies or tracking technologies, where you have given us freely given, informed, and specific consent that you can withdraw at any time.

4.2 Where we rely on legitimate interests as our lawful basis, we conduct and document a balancing test to ensure that our legitimate interests are not outweighed by the potential impact on your rights. The results of these assessments are available on request by emailing [email protected].

5.1 jay77 does not sell, rent, or trade your personal data to any third party for their own commercial purposes. We share personal data with third parties only in the following defined circumstances:

• Payment service providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, and Sonali Bank receive transaction data necessary to process your deposits and withdrawals. Each provider is subject to its own privacy obligations under applicable financial services regulations;
• KYC and identity verification providers: we share identity documents and personal details with certified third-party verification services solely for the purpose of confirming your identity and age. These providers are contractually prohibited from using your data for any other purpose;
• Game studios and content providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other licensed game studios receive session identifiers and game-outcome data necessary to deliver their games and to resolve disputes. They do not receive your full identity or financial data;
• Fraud prevention and AML screening services: your account and transaction data may be screened through third-party risk and compliance platforms for the purpose of detecting and preventing fraud and money laundering. These services operate under strict data processing agreements;
• IT infrastructure and hosting providers: our platform is hosted on secure cloud infrastructure. Our hosting provider processes data on our behalf under a binding data processing agreement and has no independent right to access or use your data;
• Legal and regulatory authorities: we may be required to disclose personal data to law enforcement agencies, regulatory bodies, or courts of competent jurisdiction in response to a lawful legal process. Where permitted by law, we will endeavour to notify you of such a disclosure in advance.

5.2 In the event that jay77 undergoes a business restructuring, merger, acquisition, or asset sale, player personal data may be transferred to the successor entity. We will notify registered players of any such transfer that materially affects the processing of their personal data prior to the transfer taking effect.

6.1 jay77 operates as an offshore platform and its server infrastructure may be located in jurisdictions outside Bangladesh. As a result, your personal data may be transferred to and processed in countries that have different data protection standards from those in force in Bangladesh.

6.2 Where personal data is transferred internationally, jay77 takes steps to ensure that adequate protections are in place, including the use of standard contractual clauses, binding corporate rules, or other recognised transfer mechanisms that require the receiving party to protect your data to a standard equivalent to the protections described in this Privacy Policy.

6.3 By registering a jay77 account and using our platform, you acknowledge and consent to the potential transfer of your personal data to jurisdictions outside Bangladesh for the purposes described in this Privacy Policy. If you have concerns about a specific data transfer, please contact us at [email protected].

7.1 jay77 retains personal data for no longer than is necessary to fulfil the purposes for which it was collected, unless a longer retention period is required or permitted by applicable law. The following retention schedule applies:

• Active account data: retained for the duration of the player's active account relationship with jay77, plus five (5) years following account closure, to satisfy anti-money laundering record-keeping requirements;
• Transaction and financial records: retained for a minimum of seven (7) years from the date of each transaction in accordance with financial record-keeping obligations;
• KYC and identity verification documents: retained for five (5) years following account closure, or longer if required by applicable law or ongoing legal proceedings;
• Support and communications data: retained for two (2) years following resolution of the relevant query or dispute;
• Marketing and consent records: retained for the duration of the marketing relationship plus two (2) years following withdrawal of consent, to demonstrate compliance with consent requirements;
• Technical and log data: retained for twelve (12) months from the date of collection, unless required for longer for the purposes of an active security investigation.

7.2 When the applicable retention period expires, personal data is securely deleted or anonymised so that it can no longer be associated with an identifiable individual. Anonymised and aggregated data may be retained indefinitely for statistical and analytical purposes.

8.1 jay77 uses cookies and similar tracking technologies (including pixel tags, local storage, and session identifiers) to operate the platform, remember your preferences, prevent fraud, and (where you have consented) serve relevant promotional content.

8.2 The categories of cookies we use are as follows:

• Strictly necessary cookies: essential for platform operation, authentication, session management, and security. These cookies cannot be disabled without rendering the platform non-functional;
• Functional cookies: used to remember your language preferences, display settings, and other personalisation choices across sessions;
• Analytics cookies: used to collect aggregate data about how players navigate and use the platform, enabling us to identify and resolve performance issues and improve the user experience. Analytics data is anonymised where possible;
• Marketing cookies: used only where you have provided explicit consent, to track your interaction with promotional content and to measure the effectiveness of marketing campaigns. You can withdraw consent to marketing cookies at any time via the cookie preference centre in your account settings.

8.3 Most web browsers allow you to control cookies through browser settings. Restricting or blocking cookies may affect the functionality of certain features on the jay77 platform, particularly those that rely on session management or authentication tokens.

9.1 As a jay77 player you hold the following rights with respect to your personal data. To exercise any of these rights, please contact us at [email protected] with the subject line "Privacy Request" and provide sufficient information for us to identify your account.

• Right of Access: you have the right to request a copy of the personal data we hold about you, along with information about how and why it is being processed. We will respond to verified access requests within 14 business days;
• Right of Rectification: if any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it without undue delay;
• Right to Erasure ("Right to be Forgotten"): you may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent (and no other lawful basis exists), or where the data has been unlawfully processed. Note that this right is subject to our legal record-keeping obligations, which may require us to retain certain data for defined periods even after account closure;
• Right to Restrict Processing: you may request that we restrict the processing of your personal data in certain circumstances, for example while a rectification request is being assessed;
• Right to Data Portability: where processing is based on your consent or the performance of a contract, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format;
• Right to Object: you have the right to object to processing carried out on the basis of legitimate interests, including profiling for marketing purposes. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your rights;
• Right to Withdraw Consent: where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

9.2 jay77 will not discriminate against any player for exercising their privacy rights. Exercising these rights will not affect the quality of service you receive or your ability to use the platform, except where the exercise of a right (such as erasure) necessitates account closure.

10.1 jay77 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security programme includes:

• TLS 1.3 encryption for all data in transit between your device and our servers;
• AES-256 encryption for sensitive data at rest, including identity documents and financial records;
• Multi-factor authentication options for player accounts, including SMS OTP;
• Role-based access controls limiting staff access to personal data on a strict need-to-know basis;
• Regular third-party penetration testing and vulnerability assessments of our platform infrastructure;
• 24/7 automated security monitoring and anomaly detection on all production systems;
• Documented incident response procedures with defined escalation paths and notification timelines.

10.2 While jay77 maintains rigorous security practices, no online platform can guarantee absolute security against all possible threats. Players can reduce their personal risk by using a strong, unique password, enabling two-factor authentication, and promptly notifying [email protected] if they suspect unauthorised access to their account.

10.3 In the event of a data breach that poses a risk to the rights and freedoms of players, jay77 will notify affected players without undue delay and will take all reasonable steps to mitigate the impact of the breach.

11.1 jay77 is strictly an adults-only platform. Our services are available exclusively to individuals who are 21 years of age or older. We do not knowingly collect, process, or retain personal data from any person under the age of 21.

11.2 As part of our registration and KYC verification process, all players are required to submit proof of age documentation before a fully functional account can be activated. Any account found to belong to a person under 21 will be immediately suspended, all associated funds will be returned where possible, and all personal data collected in connection with that account will be securely deleted.

11.3 If you are a parent or guardian and believe that a minor in your care has registered a jay77 account or submitted personal data to our platform, please contact us immediately at [email protected] with the subject line "Minor Account Report". We will investigate and take appropriate action within 2 business days of receiving your report.

12.1 jay77 uses player behavioural and usage data as part of our responsible gaming programme. This includes monitoring patterns such as frequency of play, session duration, bet escalation, and deposit frequency to identify players who may be experiencing difficulty with their gambling behaviour.

12.2 Where our responsible gaming monitoring systems flag a player's account, a member of our trained support team may contact that player to offer information about support resources, cooling-off periods, deposit limits, or self-exclusion options. This processing is carried out on the basis of our legitimate interest in promoting safe and responsible gambling.

12.3 Self-exclusion and deposit limit instructions are stored and enforced as a priority data processing obligation. If you request self-exclusion, your data will be retained on our exclusion register for the duration of your self-exclusion period to prevent accidental or deliberate re-registration. Visit our Responsible Gaming page for full details on the tools available to you.

12.4 jay77 does not use responsible gaming data for marketing purposes. Information about your gambling behaviour collected for the purposes of responsible gaming monitoring will not be used to send you promotional offers or to profile you for commercial purposes.

13.1 jay77 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or business operations. The most current version of this Policy will always be available at jay77.io/privacy-policy.

13.2 For material changes — meaning changes that significantly affect how we process your personal data or your rights under this Policy — we will provide at least 7 days advance notice to registered players by email to the address on file for their account. Continued use of the jay77 platform after the effective date of any update constitutes acceptance of the revised Privacy Policy.

13.3 We recommend that you review this Privacy Policy periodically to stay informed about how jay77 protects your personal data. The version number and effective date at the top of this document indicate when it was last updated.

14.1 If you have any questions, concerns, or requests relating to this Privacy Policy or the way jay77 processes your personal data, please contact our privacy team using the details below:

• Email: [email protected] (subject line: "Privacy Request")
• Response time: we aim to acknowledge all privacy-related enquiries within 2 business days and to provide a substantive response within 14 business days of receiving a verified request.
• Languages: our privacy team can handle enquiries submitted in English.
• Business hours: support is available 24 hours a day, 7 days a week, Bangladesh Standard Time (BST, UTC+6).

14.2 If you are not satisfied with our response to a privacy enquiry or complaint, you may have the right to escalate the matter to a relevant data protection supervisory authority in the jurisdiction applicable to your circumstances. jay77 is committed to working cooperatively with competent supervisory authorities to resolve any privacy complaints that cannot be resolved directly with us.

14.3 For urgent matters relating to suspected unauthorised access to your account, potential identity theft, or data breach notification, please email [email protected] immediately with the subject line "Security Emergency" and our security team will prioritise your case.