77jap Privacy Policy

77jap collects personal data from you in two principal ways: information you provide directly when registering or using the platform, and information collected automatically through your interaction with our website. We collect only the minimum data necessary to deliver a safe, compliant, and enjoyable gambling experience.

Information You Provide Directly:

• Registration data: Full legal name, date of birth, email address, mobile phone number (used for bKash/Nagad/Rocket account linking), and a self-selected username and password.
• Identity verification documents: For KYC purposes, we may collect a copy of your Bangladesh National ID (NID), passport, or driving licence, along with a recent utility bill or bank statement as proof of address.
• Payment information: Your registered mobile financial service number (e.g., the bKash or Nagad number used for deposits and withdrawals). We do not store full card numbers — card payment data is handled by our PCI-DSS compliant payment processor.
• Support communications: Records of any correspondence you have with the 77jap support team via live chat or email, including any attachments or screenshots you voluntarily share.
• Responsible Gaming self-declarations: If you set deposit limits, activate cooling-off periods, or request self-exclusion, we retain records of these settings to enforce them correctly.

Information Collected Automatically:

• Device and browser data: IP address, device type, operating system, browser type and version, screen resolution, and device identifiers.
• Usage and behavioural data: Pages visited, games accessed, betting history, session duration, navigation path, and time and date of platform interactions.
• Cookies and similar tracking technologies: As described in Section 4 of this policy.
• Geolocation data: General location derived from IP address to assist with regional compliance checks. We do not access your device's precise GPS location.

77jap processes your personal data for specific, legitimate purposes. We do not use your data in ways that you would not reasonably expect given the nature of our service. The following table sets out the primary purposes for which we process your data and the legal basis for each:

Where we rely on your consent as the legal basis for processing (notably for marketing communications), you have the right to withdraw that consent at any time by updating your notification preferences in your account settings or by contacting support.

77jap does not sell your personal data. We share your information only in the limited circumstances described below, and only to the extent necessary for each specific purpose.

Circumstances in which we may share your data:

• Payment processors: We share transaction-relevant data with payment service providers (including the technical partners that facilitate bKash, Nagad, Rocket, and Upay integrations, as well as Visa/Mastercard processing networks) to process your deposits and withdrawals. These partners process data only on our instructions and are contractually prohibited from using it for any other purpose.
• Identity verification partners: When KYC verification is required, we may share your submitted documents with a third-party identity verification service. These partners operate under strict data processing agreements and do not retain your documents beyond the verification period.
• Game software providers: Certain game data (such as session ID and stake amounts) may be shared with third-party game studios (such as Pragmatic Play, Evolution Gaming, Spribe, or Ezugi) to operate their games within our platform. This data is anonymised where possible and used solely for game delivery and fairness auditing.
• Legal and regulatory authorities: We may disclose your data to competent authorities, law enforcement agencies, or financial intelligence units if we are legally required to do so, or where we believe in good faith that disclosure is necessary to prevent financial crime, protect the safety of individuals, or comply with a lawful judicial or regulatory order.
• Business transfers: In the event of a merger, acquisition, or sale of all or a portion of 77jap's assets, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer and the privacy practices of the new controller before any change takes effect.

77jap uses cookies and similar tracking technologies (such as web beacons and local storage) to operate core platform functions, remember your preferences, maintain session security, and analyse how players interact with our service.

Types of cookies we use:

• Strictly necessary cookies: These are essential for the platform to function and cannot be disabled. They include session authentication tokens, CSRF protection tokens, and language preference storage. Without these cookies, you would not be able to log in or navigate the platform.
• Functional cookies: These remember your preferences such as your last-visited game category, display settings, and responsible gaming tool configurations. Disabling functional cookies may reduce your personalised experience but will not prevent basic platform access.
• Analytics cookies: We use anonymised analytics tools to understand which pages are visited most frequently, how long players stay on each section, and where technical errors occur. This data helps us improve platform quality. Analytics data is aggregated and does not identify you personally.
• Security cookies: Used to detect fraudulent login attempts, identify unusual account activity, and protect against automated bot access. These are a key part of our account security infrastructure.

77jap does not use third-party advertising cookies. We do not place retargeting pixels from social media platforms, advertising networks, or external marketing services on our website pages.

77jap implements a layered security architecture designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security measures include, but are not limited to:

• Transit encryption: All data exchanged between your browser or mobile device and our servers is encrypted using TLS 1.2 or higher (256-bit SSL). The padlock icon in your browser address bar confirms this encryption is active during your session.
• Password hashing: Your account password is never stored in plain text. We use industry-standard one-way hashing algorithms with salting so that passwords cannot be recovered even in the event of a data breach.
• Access controls: Access to production systems containing player data is restricted to a minimal set of authorised personnel based on the principle of least privilege. All administrative access is protected by multi-factor authentication and is logged for audit purposes.
• Firewall and intrusion detection: Our infrastructure is protected by web application firewalls (WAF) and intrusion detection and prevention systems (IDS/IPS) that monitor for and block suspicious traffic patterns around the clock.
• Regular security assessments: 77jap conducts regular internal security reviews and engages third-party experts to perform periodic penetration testing of our platform and infrastructure.
• Data breach response: In the unlikely event of a confirmed data breach that poses a risk to player rights, 77jap will notify affected players and relevant authorities within 72 hours of becoming aware of the incident, in accordance with applicable data protection obligations.

While we apply robust security controls, no online platform can guarantee absolute security against all possible threats. You play an important role in protecting your account by keeping your login credentials confidential and by logging out of your account after each session, particularly on shared devices.

77jap retains your personal data only for as long as it is necessary to fulfil the purposes set out in this policy, or as required by applicable law. The following general retention periods apply:

• Active account data: Retained for the full duration of your active account relationship with 77jap, plus a minimum of five years following account closure. This retention period is required to satisfy anti-money laundering (AML) record-keeping obligations.
• Transaction records: All deposit and withdrawal transaction records are retained for a minimum of five years from the date of the transaction. This is consistent with international financial record-keeping standards applicable to online gambling operators.
• KYC and identity documents: Retained for five years from the date of submission or from the date of account closure, whichever is later, as required under AML compliance frameworks.
• Support correspondence: Live chat and email communications with the 77jap support team are retained for three years from the date of the last interaction, to enable us to resolve any subsequent disputes and to maintain a record of commitments made to players.
• Analytics and usage data: Anonymised and aggregated analytics data may be retained indefinitely, as this data cannot be linked back to any individual player once anonymised.
• Marketing consent records: Records of your consent to or withdrawal from marketing communications are retained for the lifetime of your account and for five years thereafter, to demonstrate compliance in the event of a regulatory enquiry.

When retention periods expire, personal data is securely deleted or anonymised in accordance with our internal data deletion procedures. If you request earlier deletion of your data, we will assess the request against our legal obligations and notify you of the outcome.

As a 77jap player, you have the following rights with respect to your personal data. To exercise any of these rights, contact our support team via live chat or send an email to [email protected]. We will acknowledge your request within five business days and aim to resolve it fully within 30 days.

• Right of access: You have the right to request a copy of the personal data that 77jap holds about you. We will provide this in a structured, commonly used format.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. You can update many details directly from within your account profile settings.
• Right to erasure ("right to be forgotten"): You may request that we delete your personal data. We will honour this request where there is no overriding legal obligation requiring us to retain the data. Note that transaction and KYC records must be retained for the minimum periods described in Section 6.
• Right to restrict processing: You may request that we temporarily restrict the processing of your personal data while a rectification or objection request is being assessed.
• Right to data portability: Where processing is based on your consent or on a contractual basis, you have the right to receive your data in a machine-readable format so that you can transfer it to another service provider.
• Right to object: You have the right to object to the processing of your data where that processing is based on our legitimate interests. You also have an unconditional right to object to the processing of your data for direct marketing purposes at any time.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

77jap reviews and updates this Privacy Policy periodically to reflect changes in our data practices, changes in applicable law, or improvements to our platform. When we make material changes to this policy, we will:

• Update the effective date shown at the top of this document and in the hero section above.
• Send a notification to the email address registered on your 77jap account describing the key changes.
• Display a prominent notice on the platform for a minimum of 14 days following a material policy update.

Your continued use of the 77jap platform following a policy update constitutes acceptance of the revised Privacy Policy. If you do not agree with any changes, you should stop using the platform and contact us to request account closure.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way 77jap handles your personal data, please contact our Data Protection team using the details below. Our team is available 24 hours a day, seven days a week, including Bangladesh public holidays such as Victory Day (16 December) and Independence Day (26 March).

This Privacy Policy was last reviewed and updated in January 2026. It applies to all players registered on the 77jap platform regardless of the device or method used to access the service.