ja777 Privacy Policy
This Privacy Policy explains what personal data ja777 collects from players in Bangladesh, how that data is used, who it may be shared with, and what rights you hold over your own information. We are committed to handling your data with transparency and care.
Our Core Privacy Principles
Six commitments that shape how ja777 approaches the collection, storage, and use of player data across the Platform.
Data Minimisation
We collect only the personal data that is strictly necessary for account registration, age verification, payment processing, and regulatory compliance. We do not collect data speculatively or beyond what each specific purpose requires.
Full Transparency
This Privacy Policy sets out in plain English exactly what data we collect, why we collect it, and who may receive it. We do not use hidden data collection methods. If our practices change, we will update this document and notify you before the changes take effect.
Security First
All data transmissions between your device and ja777 are encrypted using SSL/TLS. Passwords are stored in cryptographically hashed form. Sensitive identity documents uploaded for KYC are stored in access-controlled environments with restricted staff access.
Your Rights, Respected
You have the right to access, correct, export, and request deletion of the personal data we hold about you. Requests are handled by our support team and processed within the timeframes set out in Section 9 of this Policy.
No Data Selling
ja777 does not sell, rent, or trade your personal data to third-party marketers or data brokers under any circumstances. Data shared with third parties is limited to payment processors and game technology providers under strict contractual confidentiality obligations.
Defined Retention Periods
We retain personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable legal and regulatory obligations. Retention periods by data category are specified in Section 7 of this Policy.
1 Definitions
In this Privacy Policy, the following terms have the meanings set out below:
- "ja777", "we", "us", or "our" refers to the ja777 online casino and sports betting platform accessible at ja777.asia.
- "Player", "you", or "your" refers to any individual who registers an account on or otherwise accesses the ja777 platform.
- "Personal Data" means any information that identifies or can reasonably be used to identify a specific individual, including name, date of birth, mobile number, device identifiers, and payment account details.
- "Processing" means any operation performed on Personal Data, including collection, storage, retrieval, use, disclosure, or deletion.
- "KYC" means Know Your Customer — the identity and age verification process required before withdrawal of funds.
- "MFS" means Mobile Financial Services, referring to bKash, Nagad, Rocket, Upay, and other mobile wallet payment providers integrated with the Platform.
- "Cookie" means a small text file placed on your device by the Platform to store session or preference information.
- "BST" means Bangladesh Standard Time (UTC+6), the time zone under which this Platform operates.
2 Data Controller
ja777 acts as the data controller for all Personal Data collected through the Platform. As data controller, ja777 determines the purposes and means by which Personal Data is processed. If you have any questions or concerns regarding the processing of your Personal Data, you may contact us directly using the details provided in Section 13 of this Policy.
Contact for Data Matters: All privacy-related enquiries and data subject requests should be directed to [email protected] with the subject line "Privacy Request". Our team will acknowledge your request within 48 hours on Bangladesh Standard Time (BST, UTC+6).
3 Data We Collect
ja777 collects the following categories of Personal Data from players. We collect only what is necessary for each defined purpose.
3.1 Registration Data
When you create a ja777 account, we collect:
- Full legal name (as it appears on your national identity document)
- Date of birth (for mandatory age verification — players must be 21 years or older)
- Bangladeshi mobile phone number (used as your primary account identifier)
- Password (stored in cryptographically hashed form — never accessible in plain text)
- District or city of residence (optional, used for regional personalisation)
3.2 KYC Verification Data
To comply with our age verification and anti-money laundering obligations, we collect at the point of first withdrawal:
- National Identity Card (NID) number and a scanned image or clear photograph of the NID
- Alternatively: passport biographical data page, or birth certificate
- A selfie or live photograph for facial verification against the submitted identity document
3.3 Financial & Payment Data
To process deposits and withdrawals via MFS providers, we collect:
- Your registered bKash, Nagad, Rocket, or Upay mobile wallet number
- Transaction reference numbers for deposit and withdrawal tracking
- Account balance history and wagering transaction records (retained for audit and dispute resolution)
We do not store full credit card numbers, bank account numbers, or any payment credential beyond the MFS wallet number registered to your account.
3.4 Technical & Device Data
When you access the Platform, our servers automatically record:
- IP address and approximate geographic location derived from IP
- Device type, operating system, and browser version
- Session timestamps (login time, logout time, session duration)
- Pages visited, games launched, and betting activity logs
- Referral URL (if you arrived at ja777 via a tracked link)
3.5 Communications Data
If you contact our support team via live chat or email, we retain:
- The content of your support messages and our responses
- The date, time, and channel of each communication
- Any attachments or screenshots you submit as part of a support request
4 How We Collect Data
ja777 collects Personal Data through the following channels:
- Directly from you: Registration forms, KYC document uploads, deposit/withdrawal requests, and support communications.
- Automatically via the Platform: Server logs, session tracking, and cookie-based analytics when you access and navigate the website or mobile interface.
- From MFS payment providers: Transaction confirmation data shared by bKash, Nagad, Rocket, or Upay upon processing a deposit or withdrawal instruction initiated by you.
- From identity verification services: Where a third-party KYC verification service is used to validate an identity document, that service may return a verification result to ja777.
5 Purposes & Legal Basis for Processing
The table below sets out each purpose for which ja777 processes Personal Data and the legal basis on which each processing activity rests.
| Purpose | Data Categories Used | Legal Basis |
|---|---|---|
| Account creation and management | Registration Data | Performance of contract |
| Age verification (21+ requirement) | Registration Data, KYC Data | Legal obligation; legitimate interest |
| Deposit and withdrawal processing | Financial & Payment Data | Performance of contract |
| Fraud prevention and AML compliance | KYC Data, Financial Data, Technical Data | Legal obligation; legitimate interest |
| Platform security and access control | Technical & Device Data | Legitimate interest |
| Customer support and dispute resolution | Communications Data, Financial Data | Performance of contract; legitimate interest |
| Responsible gaming monitoring | Wagering activity, session data | Legal obligation; legitimate interest |
| Platform analytics and improvement | Technical & Device Data (aggregated) | Legitimate interest |
| Bonus eligibility verification | Registration Data, wagering history | Performance of contract |
| Regulatory reporting | Registration Data, Financial Data, KYC Data | Legal obligation |
Note on Marketing: ja777 does not send unsolicited marketing messages to players. Where we communicate promotional offers, these are delivered exclusively through in-platform notifications and are limited to players who have an active account. You may opt out of promotional communications at any time by contacting support.
6 Third-Party Sharing
ja777 does not sell, rent, or trade your Personal Data. We share data with third parties only in the circumstances described below, and only to the minimum extent necessary for each stated purpose.
6.1 MFS Payment Providers
To process deposits and withdrawals, we share your mobile wallet number and transaction amounts with your chosen MFS provider (bKash, Nagad, Rocket, or Upay). These providers operate under their own privacy policies and are independently regulated. ja777 is not responsible for the data practices of MFS providers once data has been transmitted for payment processing.
6.2 Game Technology Providers
Casino games and live dealer tables on the Platform are powered by certified third-party studios including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Hacksaw Gaming. These providers receive a pseudonymous player identifier (not your name or mobile number) along with game round data necessary to deliver the gaming experience and calculate outcomes. No directly identifiable Personal Data is transmitted to game studios unless explicitly required for a specific integration.
6.3 KYC Verification Services
Where ja777 uses a third-party identity verification provider to validate KYC documents, your identity document images and facial verification photograph may be transmitted to that provider under a strict data processing agreement. Verification providers are contractually prohibited from using your data for any purpose other than completing the verification requested by ja777.
6.4 Legal and Regulatory Disclosure
ja777 may disclose Personal Data to relevant authorities, law enforcement agencies, or regulatory bodies where we are legally required to do so, or where disclosure is necessary to prevent or investigate fraud, money laundering, or other criminal activity. We will not disclose data beyond the minimum required for such purposes.
6.5 Business Transfers
In the event that ja777 undergoes a business restructuring, merger, or acquisition, player Personal Data may be transferred to a successor entity as part of that transaction. In such an event, we will notify players via a prominent notice on the Platform and the privacy policy of the successor entity will apply from the date of transfer.
7 Data Retention
We retain Personal Data for the minimum period necessary to fulfil the purpose for which it was collected, subject to any longer retention required by legal or regulatory obligation. The following retention schedule applies:
| Data Category | Retention Period | Reason |
|---|---|---|
| Registration Data | Duration of account + 5 years after closure | Regulatory and audit obligation |
| KYC Identity Documents | Duration of account + 5 years after closure | Anti-money laundering compliance |
| Financial Transaction Records | Duration of account + 7 years after closure | Financial audit and dispute resolution |
| Wagering Activity Logs | Duration of account + 3 years after closure | Responsible gaming monitoring; dispute resolution |
| Technical & Device Logs | 13 months from collection | Security monitoring and fraud detection |
| Support Communications | 3 years from last interaction | Dispute resolution and quality assurance |
| Cookie & Analytics Data | Up to 13 months | Platform analytics and performance improvement |
Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised so that it can no longer be linked to an individual.
8 Cookies & Tracking Technologies
ja777 uses cookies and similar tracking technologies to operate the Platform, maintain your session, and analyse usage patterns. The following categories of cookies are used:
8.1 Strictly Necessary Cookies
These cookies are essential for the Platform to function and cannot be disabled. They include session authentication cookies that keep you logged in during your visit, CSRF protection tokens, and load-balancing cookies that ensure stable platform performance. No consent is required for strictly necessary cookies as they are required to deliver the service you have requested.
8.2 Analytics Cookies
We use first-party analytics cookies to collect aggregated, anonymised information about how players navigate the Platform — including which pages are visited most frequently, where players exit the site, and which game categories receive the most traffic. This data is used solely to improve the Platform's design and user experience. Analytics cookies do not track you across other websites.
8.3 Preference Cookies
Preference cookies store non-sensitive user settings such as your selected game view layout or table stake preferences within the casino. These cookies improve your experience by remembering your choices between sessions. You may delete preference cookies via your browser settings at any time without affecting your ability to use the Platform.
8.4 Managing Cookies
You may configure your browser to block or delete cookies at any time. Please be aware that disabling strictly necessary cookies will prevent you from logging into your account and using the Platform. For all other cookie categories, blocking or deleting them will not prevent access but may reduce the personalisation of your experience.
9 Your Privacy Rights
As a player on the ja777 platform, you hold the following rights with respect to your Personal Data. To exercise any of these rights, contact us at [email protected] with the subject line "Privacy Request" and specify which right you wish to exercise. We will acknowledge your request within 48 hours (BST) and complete it within 30 calendar days.
- Right of Access: You may request a copy of all Personal Data we hold about you, along with information about how it is being used.
- Right to Rectification: If any Personal Data we hold about you is inaccurate or incomplete, you may request that we correct it. For name corrections, updated identity documentation will be required.
- Right to Erasure: You may request deletion of your Personal Data. This right is subject to our legal retention obligations — certain data categories must be retained for regulatory compliance and cannot be deleted on request until the applicable retention period expires.
- Right to Restriction: You may request that we restrict the processing of your Personal Data in certain circumstances, such as while a correction request is being investigated.
- Right to Data Portability: You may request that we provide your Personal Data in a structured, commonly used, machine-readable format so that it can be transferred to another service provider.
- Right to Object: You may object to the processing of your Personal Data where it is based on legitimate interest rather than legal obligation or contract performance.
- Right to Withdraw Consent: Where processing is based on your consent (for example, optional preference cookies), you may withdraw that consent at any time without affecting the lawfulness of prior processing.
Identity Verification for Rights Requests: To protect your data from unauthorised access, we require you to verify your identity before processing any privacy rights request. Requests that cannot be verified against the registered account will not be actioned.
10 Security Measures
ja777 implements a layered set of technical and organisational security measures designed to protect your Personal Data against unauthorised access, accidental loss, alteration, and disclosure.
10.1 Technical Measures
- All data in transit between your device and our servers is encrypted using TLS 1.2 or higher (HTTPS). Connections over unencrypted HTTP are not accepted.
- Passwords are hashed using a strong one-way cryptographic algorithm. Plain-text passwords are never stored or accessible to any member of staff.
- KYC identity documents are stored in access-controlled, encrypted cloud storage. Access is restricted to authorised compliance personnel only and is logged for audit purposes.
- Our Platform infrastructure uses firewall protections, intrusion detection systems, and routine vulnerability assessments to identify and address potential security weaknesses.
10.2 Organisational Measures
- Staff who handle Personal Data are trained in data protection obligations and are bound by confidentiality agreements.
- Access to player Personal Data is granted on a need-to-know basis only. Staff do not have broad access to player databases beyond what their role requires.
- Third-party service providers who process data on our behalf are assessed for their security practices and are bound by data processing agreements that impose equivalent security obligations.
10.3 Data Breach Response
In the event of a data breach that poses a risk to the rights and freedoms of players, ja777 will notify affected individuals without undue delay and will take immediate remediation steps. Breach notifications will be delivered via the mobile number registered to your account and via a prominent notice on the Platform.
11 Children & Minors
The ja777 platform is strictly for adults aged 21 years and above. We do not knowingly collect Personal Data from individuals under the age of 21. If you believe that a person under 21 has registered an account on the Platform or has submitted Personal Data to us, please contact us immediately at [email protected]. Upon confirmation, we will promptly close the account, delete the associated Personal Data, and return any deposited funds to the originating MFS account.
We encourage parents and guardians to make use of internet filtering and parental control software to prevent minors from accessing online gambling services. If you are a minor, you are strictly prohibited from accessing or using any part of the ja777 platform.
12 Policy Updates
ja777 reviews this Privacy Policy periodically and may update it to reflect changes in our data processing practices, changes in applicable law, or changes to the Platform's features. When material changes are made — meaning changes that substantially affect how your Personal Data is used — we will:
- Post the updated Privacy Policy on this page with a revised Effective Date shown at the top.
- Display a prominent notice on the Platform homepage and within the logged-in account area for a period of at least 14 days following the change.
- Where practicable, send a notification to the mobile number registered to your account.
Your continued use of the Platform after the effective date of any updated Privacy Policy constitutes your acknowledgement of the revised terms. If you do not agree with any change to this Policy, you should cease using the Platform and contact us to close your account and arrange return of any remaining balance.
Minor changes — such as typographical corrections, clarifications that do not alter the substance of our data practices, or updates to contact details — may be made without prominent notice. The Effective Date shown at the top of this page will be updated for all revisions regardless of their significance.
13 Contact & Complaints
If you have any question about this Privacy Policy, wish to exercise a privacy right, or wish to make a complaint about how ja777 has handled your Personal Data, please reach out to us through either of the channels below:
- Email: [email protected] — please use the subject line "Privacy Request" or "Privacy Complaint" as appropriate
- Live Chat: Available on-site 24 hours a day, 7 days a week on Bangladesh Standard Time (BST, UTC+6)
We will acknowledge all privacy-related communications within 48 hours and will endeavour to resolve complaints within 21 calendar days of receipt. Where a complaint is complex or requires input from third-party processors, we will keep you informed of progress and provide a final response within 60 calendar days.
If you are not satisfied with our response to a privacy complaint, you retain the right to escalate your concern in writing to [email protected] with the subject line "Privacy Complaint — Escalation", addressed to the Senior Compliance Contact. We are committed to resolving all disputes transparently and fairly.
Questions About Your Privacy?
Our support team is available around the clock on Bangladesh Standard Time to answer any questions about this Privacy Policy, your personal data, or how to exercise your privacy rights.