How cj77 Protects Your Personal Data and Privacy

1 Introduction

cj77 ("we", "us", "our") operates the online casino and sports betting platform available at cj77.io ("the Platform"). We are committed to protecting the privacy and personal data of every member who registers on and uses the Platform, including all members located in Bangladesh.

This Privacy Policy ("Policy") sets out in clear, plain English how cj77 collects, uses, stores, discloses, and protects personal data relating to registered members and visitors to the Platform. It applies to all data processing activities carried out by cj77 in connection with the operation of the Platform, whether the data is provided directly by you at registration, collected automatically through your use of the Platform, or obtained from trusted third-party sources during identity verification procedures.

By registering a cj77 account and using the Platform, you confirm that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you should cease using the Platform immediately and contact our support team to close your account. This Policy should be read alongside the cj77 Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference.

2 Personal Data We Collect

cj77 collects the following categories of personal data from members and, where applicable, from visitors to the Platform:

2.1 Identity & Registration Data

• Full legal name as it appears on your government-issued identification document.
• Date of birth (used to verify that you are at least 21 years of age, consistent with our 21+ policy).
• National Identity Card (NID) number, passport number, or driving licence number.
• Gender (where voluntarily provided during registration).
• Photograph or scan of government-issued identity documents, submitted during KYC verification.

2.2 Contact Data

• Mobile telephone number (used as a primary contact and account authentication method).
• Email address (used for account notifications, promotional communications where consented, and support correspondence).
• Residential address, including district, division, and postal code within Bangladesh (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh).

2.3 Financial & Transaction Data

• bKash wallet number, Nagad wallet number, Rocket wallet number, Upay account reference, or other mobile financial service identifiers used for deposits and withdrawals.
• Bank account name and account number where bank transfer methods (Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank) are used.
• Visa or Mastercard partial card details (we do not store full card numbers; full PAN data is handled exclusively by PCI-DSS compliant payment processors).
• Transaction history: deposit amounts, withdrawal amounts, dates, methods, and reference numbers.
• Account balance history.

2.4 Gaming & Betting Activity Data

• Bet history, game session logs, wagering patterns, win/loss records, and promotional offer usage.
• Responsible gaming tool settings, including any deposit limits, cooling-off periods, or self-exclusion requests made by you.
• Customer support interaction records, including chat transcripts and email correspondence.

2.5 Technical & Device Data

• IP address and approximate geolocation derived from IP.
• Device type, operating system, browser type and version.
• Unique device identifiers where applicable.
• Session timestamps, login history, and page interaction data collected via cookies and similar tracking technologies (see Section 7).

3 How We Collect Your Data

cj77 collects personal data through the following methods:

• Direct submission: Data you provide when you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, or respond to a cj77 survey or promotion.
• Automated collection: Technical data collected automatically as you browse and interact with the Platform, including through cookies, web beacons, log files, and similar tracking technologies (see Section 7).
• Third-party identity verification providers: Where necessary to complete KYC checks, cj77 may receive data about you from trusted identity verification services that cross-reference your submitted documents against official records.
• Payment processors: Transaction confirmation data received from payment service providers such as bKash, Nagad, Rocket, Upay, and card scheme processors following the completion of a deposit or withdrawal.
• Fraud prevention and security partners: Data received from third-party fraud detection services where cj77 has reason to investigate potential account security concerns or suspicious activity patterns.

4 How We Use Your Personal Data

cj77 uses the personal data it collects for the following purposes:

cj77 will not use your personal data for any purpose that is incompatible with the purposes listed above without first notifying you and, where required, obtaining your explicit consent.

5 Legal Basis for Processing

cj77 processes personal data on one or more of the following legal grounds depending on the specific processing activity in question:

• Contractual necessity: Processing required to enter into or perform the contract between you and cj77 — for example, registering your account, processing deposits, settling bets, and processing withdrawals.
• Legal obligation: Processing required to comply with applicable laws, including anti-money laundering (AML) obligations, identity verification requirements, and responses to lawful requests from competent authorities.
• Legitimate interests: Processing carried out on the basis of cj77's legitimate interests in operating a secure, fair, and commercially viable platform — for example, fraud detection, platform security monitoring, and internal analytics used to improve the gaming experience.
• Consent: Processing carried out on the basis of your freely given, specific, and informed consent — for example, sending you promotional communications about new games, seasonal offers, or BPL cricket betting promotions. You may withdraw consent at any time.

6 Data Sharing & Disclosure

cj77 does not sell or rent your personal data to third parties. We may share your data with the following categories of recipients only to the extent necessary for the purposes described in this Policy:

6.1 Payment Service Providers

We share transaction data with payment processors (including bKash, Nagad, Rocket, Upay, Visa, and Mastercard authorised processors) to facilitate deposits and withdrawals. These providers process your data only in accordance with our instructions and their own regulatory obligations.

6.2 Identity Verification Providers

We share identity document data with trusted KYC and AML verification partners for the purpose of age verification and fraud prevention. These providers are contractually bound to maintain the confidentiality and security of your data.

6.3 Game and Software Providers

Third-party game studios and software providers whose games are hosted on or linked through the cj77 Platform (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and others) may receive anonymised session data necessary to deliver their game content. These providers do not receive your identity or financial data.

6.4 Legal and Regulatory Authorities

cj77 may disclose personal data to law enforcement agencies, regulatory bodies, or courts when required to do so by applicable law, court order, or other legal obligation. We will always seek to limit such disclosures to the minimum data necessary to satisfy the legal requirement.

6.5 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of cj77's business, personal data held by cj77 may be transferred to the acquiring entity as part of the transaction. We will notify affected members via email or on-platform notice prior to any such transfer and will ensure that the receiving entity commits to honouring the protections described in this Policy.

7 Cookies & Tracking Technologies

cj77 uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files stored on your device that allow us to recognise your browser and remember certain information about your session and preferences.

7.1 Types of Cookies We Use

• Essential cookies: Required for the Platform to function correctly — for example, maintaining your login session and remembering your account authentication state. These cannot be disabled without impairing Platform functionality.
• Analytics cookies: Used to collect aggregated, anonymised information about how members navigate and interact with the Platform, helping us identify areas for improvement. These may include session duration, pages visited, and device type.
• Preference cookies: Used to remember your Platform settings and preferences, such as display language or notification preferences, so they persist across sessions.
• Security cookies: Used to detect and prevent fraudulent activity, bot traffic, and other security threats by identifying anomalous session behaviour patterns.

7.2 Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to refuse or delete cookies. Please note that disabling essential cookies will prevent you from logging in to your cj77 account and using the Platform. For detailed guidance on managing cookies in your specific browser, refer to the browser's official help documentation.

8 Data Retention

cj77 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, or for as long as required by applicable law — whichever is longer. The following general retention guidelines apply:

• Active account data: Retained for the duration of your membership and for a period of five (5) years following account closure, in compliance with anti-money laundering record-keeping obligations.
• Transaction and financial records: Retained for a minimum of seven (7) years from the date of the transaction, consistent with financial record-keeping requirements.
• KYC identity verification documents: Retained for the period of active membership and for five (5) years post-closure.
• Customer support records: Retained for three (3) years from the date of the last interaction, or for the duration of any unresolved dispute, whichever is later.
• Marketing preferences: Retained until you withdraw your consent or until two (2) years of inactivity on your marketing profile, after which preferences are reset and re-consent is sought before further marketing communications are sent.
• Technical and session logs: Retained for a rolling period of twelve (12) months.

Upon expiry of the applicable retention period, personal data is either securely deleted from cj77 systems or anonymised such that it can no longer be linked to any individual member. Anonymised, aggregated data may be retained indefinitely for statistical and platform improvement purposes.

9 Data Security

cj77 implements a comprehensive range of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include, but are not limited to:

• 256-bit SSL/TLS encryption for all data transmitted between your device and cj77 servers.
• AES-256 encryption at rest for sensitive data stored on cj77 infrastructure, including identity documents and payment credentials.
• Role-based access controls ensuring that cj77 personnel can only access member data where strictly necessary for their role and operational responsibilities.
• Multi-factor authentication for all internal administrative access to member data systems.
• Regular penetration testing and vulnerability assessments conducted by independent security specialists.
• Intrusion detection and monitoring systems operating continuously across cj77 infrastructure.
• Secure data disposal procedures for the permanent deletion of data upon expiry of its retention period.

While cj77 takes all reasonable steps to protect your personal data, no method of electronic transmission or storage is entirely free from risk. In the unlikely event of a data breach that is likely to result in a risk to your rights and freedoms, cj77 will notify affected members without undue delay and will take all appropriate remedial action to contain and mitigate the breach.

10 Your Privacy Rights

As a member of cj77, you have the following rights with respect to the personal data we hold about you. To exercise any of these rights, please contact our support team via live chat or by emailing [email protected]. We will acknowledge your request promptly and respond fully within thirty (30) calendar days.

• Right of access: You have the right to request a copy of all personal data that cj77 holds about you, together with information about how it is being used.
• Right to rectification: You have the right to request that inaccurate or incomplete personal data held about you is corrected or completed without undue delay.
• Right to erasure: You have the right to request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where the processing is unlawful. This right is subject to legal retention obligations that may override erasure requests in certain circumstances.
• Right to restrict processing: You have the right to request that cj77 restricts the processing of your personal data in certain circumstances — for example, while we investigate the accuracy of data you have disputed.
• Right to data portability: Where processing is based on your consent or on contractual necessity, you have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format and to request that it be transferred to another service provider where technically feasible.
• Right to object: You have the right to object to processing carried out on the basis of legitimate interests, including profiling for direct marketing purposes. Where you object to direct marketing, cj77 will cease such processing immediately.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

11 Protection of Minors

The cj77 Platform is strictly for adults aged 21 years and above. cj77 does not knowingly collect, use, or retain personal data relating to any individual under the age of 21. All registration applications are subject to age verification checks, and accounts where the member is found to be under 21 will be suspended immediately and all associated data will be deleted in accordance with our data retention procedures.

If you are a parent or guardian and believe that a minor has registered a cj77 account using false age information, please contact our support team immediately via live chat or at [email protected]. We take underage access concerns with the utmost seriousness and will investigate and resolve all such reports as a matter of priority.

12 Third-Party Services & Links

The cj77 Platform may incorporate content or features delivered by third-party software providers (such as game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi). These providers operate under their own privacy policies and data processing agreements. cj77 recommends that you review the privacy practices of any third-party service provider whose software or content you interact with through the Platform.

cj77 is not responsible for the privacy practices, content, or data handling of any third-party services. The inclusion of a third-party provider's software on the Platform does not constitute cj77's endorsement of that provider's privacy practices beyond the contractual obligations cj77 imposes on them as data processors acting on cj77's behalf.

13 Changes to This Privacy Policy

cj77 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or Platform functionality. When material changes are made, cj77 will update the "Last Updated" date at the top of this document. Where changes are significant, we may also notify you via email or an on-platform notification prior to the changes taking effect.

Your continued use of the cj77 Platform following the publication of an updated Privacy Policy constitutes your acknowledgement of the changes and your agreement to be bound by the revised Policy. We encourage you to review this Policy periodically to stay informed about how cj77 protects your personal data. If you disagree with any update to this Policy, you should cease using the Platform and may request account closure in accordance with the cj77 Terms & Conditions.

14 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data cj77 holds about you, please contact our support team through the following channels:

• Live Chat: Available 24/7 directly on the cj77 Platform — the fastest way to reach our team with any privacy-related query.
• Email: [email protected] — please allow up to 30 days for a full response to data subject rights requests.

When submitting a data subject rights request, please provide your registered account email address or mobile number and a brief description of your request so we can process it efficiently. cj77 may ask you to verify your identity before fulfilling any access, rectification, or erasure request, to ensure we are acting on legitimate instructions from the registered account holder.