ju77 Privacy Policy

For the purposes of this Privacy Policy, ju77 (operating through the ju77.io website) acts as the data controller in respect of all personal data collected from players and visitors to the Platform. As data controller, ju77 determines the purposes for which and the means by which personal data is processed.

If you have any questions about how your data is handled, or if you wish to exercise any of your data subject rights as described in Section 9 of this Policy, you may contact our data protection team directly at [email protected] using the subject line "Privacy / Data Request". All data-related enquiries are handled by dedicated personnel and will receive a response within the timeframes set out in this Policy.

This Policy applies exclusively to data collected and processed through the ju77.io platform. It does not apply to any third-party websites, applications, or services that may be linked to or from the Platform — those services are governed by their own independent privacy policies, which ju77 does not control.

ju77 collects personal data in three primary ways: (a) information you provide directly during registration and account use; (b) information generated automatically through your use of the Platform; and (c) information received from third-party service providers such as payment processors and identity verification services. The categories of personal data we collect are set out in the table below:

ju77 does not collect or process special categories of sensitive personal data (such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric identifiers) except where a government-issued identity document incidentally contains such information and its collection is required for mandatory KYC compliance.

ju77 uses the personal data we collect for the following specific and clearly defined purposes. We do not use your data for any purpose not listed here without first obtaining your consent or being required to do so by applicable law:

• Account Creation and Management: To register your player account, verify your eligibility to participate, and manage your ongoing relationship with the Platform including profile updates and password resets.
• Identity and Age Verification (KYC): To confirm that you are who you claim to be, that you are 21 years of age or older, and that you are not a politically exposed person or subject to applicable sanctions. This is a legal and regulatory obligation.
• Payment Processing: To process your deposits via bKash, Nagad, Rocket, and Upay, and to execute your withdrawal requests to the same payment instruments. Payment data is shared with the relevant payment provider solely to complete the transaction.
• Service Delivery: To make available the full range of ju77 products — including cricket betting, live casino games, slots, and promotional offers — to your registered account.
• Fraud Prevention and Platform Security: To detect, investigate, and prevent fraudulent activity, money laundering, multi-accounting, collusion, unauthorised access, and other conduct that violates the ju77 Terms & Conditions or applicable law.
• Responsible Gaming Compliance: To implement and monitor the responsible gaming tools you have configured — including deposit limits, self-exclusion periods, and session time reminders — and to flag account behaviour that may indicate problem gambling.
• Customer Support: To respond to your enquiries, process complaints, investigate disputed transactions, and provide technical assistance.
• Platform Improvement and Analytics: To analyse aggregated, anonymised usage patterns in order to improve the functionality, performance, and user experience of the ju77 platform. This analysis does not identify you as an individual.
• Legal and Regulatory Compliance: To meet our obligations under applicable anti-money laundering (AML) rules, data protection requirements, and any lawful request from a competent regulatory or law enforcement authority.
• Marketing Communications: Where you have explicitly opted in, to send you promotional offers, bonus notifications, and event announcements (such as BPL season promotions or Eid special offers) by email or SMS. You may withdraw this consent at any time by contacting [email protected].

Every instance of personal data processing by ju77 is grounded in one of the following recognised legal bases:

• Contractual Necessity: Processing that is essential to provide the service you have contracted for when registering an account — including account management, bet placement, payment processing, and customer support.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including mandatory KYC/AML identity verification, age verification, and the preservation of transactional records.
• Legitimate Interests: Processing carried out in pursuit of ju77's legitimate business interests — such as fraud detection, platform security, and analytics — where those interests are not overridden by your fundamental rights and freedoms. We conduct a balancing assessment before relying on this basis.
• Consent: Processing for optional purposes such as direct marketing communications, where you have given your clear, informed, and freely given consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

ju77 does not sell, rent, or trade your personal data. We share personal data only in the limited circumstances described below, and only to the minimum extent necessary for the stated purpose:

• Payment Service Providers: bKash, Nagad, Rocket, and Upay receive only the payment information necessary to process your deposit or withdrawal transactions. These providers operate under their own privacy frameworks and are not permitted to use your data for any other purpose.
• Identity Verification Services: Third-party KYC and AML screening providers may receive your identity documents and personal details solely to perform mandatory verification checks. These providers are contractually bound to process your data only as instructed by ju77.
• Game Content Providers: Game studios and live casino providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive a pseudonymous player identifier and session data required to run games and log outcomes. They do not receive your full name, contact details, or payment information.
• Platform Infrastructure Providers: Hosting, cloud storage, and cybersecurity service providers that store or process data on behalf of ju77 under strict data processing agreements that prohibit independent use of your data.
• Law Enforcement and Regulatory Authorities: We may disclose personal data to competent authorities where required or permitted by applicable law — for example, in response to a lawful court order, a regulatory investigation, or an AML/fraud inquiry. We will notify you of any such disclosure where legally permitted to do so.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of ju77's business, your personal data may form part of the assets transferred. In such circumstances, the acquiring entity will be bound by the terms of this Privacy Policy or will provide you with advance notice of any material changes.

ju77 uses cookies and similar tracking technologies to operate the Platform effectively, maintain your session security, and analyse aggregate usage patterns. The categories of cookies used are as follows:

• Strictly Necessary Cookies: Essential to the operation of the Platform. These cookies maintain your login session, remember your account preferences, and enable core security features. The Platform cannot function correctly without them, and they cannot be disabled.
• Functional Cookies: Enable enhanced features such as remembering your preferred language settings, display preferences, and responsible gaming tool configurations across sessions.
• Analytics Cookies: Used to collect anonymised, aggregated data about how players navigate and interact with the Platform. This information helps us identify usability issues and improve the overall experience. No individual player is identified through analytics data.
• Security Cookies: Help us detect unusual account activity, bot access attempts, and other suspicious patterns that may indicate fraud or unauthorised access.

You may manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will impair your ability to use the Platform, including account login and payment processing. Disabling functional or analytics cookies will not affect your core access to ju77 services.

ju77 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention principles apply:

• Active Account Data: Personal data associated with an active player account is retained for the full duration of the account relationship and for a minimum period of five (5) years following account closure, in accordance with AML record-keeping obligations.
• KYC and Identity Documents: Identity verification documents are retained for a minimum of five (5) years from the date of submission or from the date of account closure, whichever is later, as required for AML compliance.
• Transactional Records: Betting history, deposit records, and withdrawal records are retained for a minimum of five (5) years to support dispute resolution and regulatory audit requirements.
• Support Communications: Customer support correspondence is retained for a period of three (3) years from the date of the most recent interaction, to support ongoing dispute resolution and quality improvement.
• Marketing Consent Records: Records of marketing consent and opt-out requests are retained for the duration of the account relationship and for three (3) years thereafter to demonstrate compliance with consent requirements.
• Technical and Log Data: Server logs and technical data are retained for a maximum of twelve (12) months, after which they are anonymised or deleted.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be associated with an identifiable individual. Where deletion is not immediately technically feasible, the data will be isolated from active processing pending deletion.

ju77 implements a multi-layered approach to the security of your personal data. Our technical and organisational security measures include, but are not limited to, the following:

• All data transmitted between your device and the ju77 platform is protected by TLS 1.2 or higher encryption, preventing interception by unauthorised parties.
• Personal data stored in our databases is encrypted at rest using AES-256 encryption or equivalent industry-standard methods.
• Access to personal data is strictly controlled on a role-based, need-to-know basis. Employees and contractors may only access the data necessary to perform their specific function.
• All access to production systems and databases is logged, monitored, and subject to regular security audit. Anomalous access patterns trigger automated alerts.
• Passwords are stored exclusively as salted cryptographic hashes. ju77 staff never have access to your plaintext password and will never ask you for it.
• Regular vulnerability assessments and penetration testing are conducted by qualified security professionals to identify and remediate weaknesses before they can be exploited.
• Our incident response plan establishes clear procedures for detecting, containing, and notifying affected users of any personal data breach, in accordance with applicable notification obligations.

While ju77 applies industry-leading security practices, no system connected to the internet can be guaranteed 100% secure against all possible threats. You play an important role in protecting your own data by using a strong, unique password, enabling any available account security features, and reporting any suspected unauthorised access to [email protected] immediately.

As a ju77 player, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact [email protected] with the subject line "Data Subject Request" and a description of the right you wish to exercise. ju77 will respond within 30 calendar days of receipt of your request. In complex cases, this period may be extended by up to a further 60 days, and you will be informed of any such extension.

The ju77 platform is strictly intended for individuals who are 21 years of age or older. ju77 does not knowingly collect, process, or retain personal data from any individual under the age of 21.

Where ju77 identifies or has reasonable grounds to suspect that a registered account belongs to a person under the age of 21, the account will be immediately suspended, any bets placed will be declared void, any winnings will be forfeited, and — where technically feasible and legally required — deposits will be returned. All associated personal data will be deleted following the conclusion of any mandatory regulatory reporting obligations.

If you are a parent or guardian and believe that a minor in your care has registered an account on ju77 without your knowledge or consent, please contact us immediately at [email protected] with the subject line "Underage Account Report". We will treat all such reports as urgent and take immediate action.

ju77 is a platform that serves players primarily located in Bangladesh. However, certain infrastructure components, including cloud hosting and third-party service providers, may process data in server locations outside Bangladesh. Where such international data transfers occur, ju77 ensures that appropriate safeguards are in place to protect your personal data to a standard equivalent to the protections described in this Policy.

Safeguards used for international transfers may include, where applicable: contractual clauses that impose data protection obligations on the recipient; due-diligence assessments of the data protection framework applicable in the recipient country; and encryption of data in transit and at rest during the transfer and subsequent processing.

ju77 will not transfer your personal data internationally in a manner that undermines the protections set out in this Policy or that exposes your data to a materially greater risk of unauthorised access, disclosure, or misuse than would be the case if the data were processed domestically.

ju77 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, applicable laws, or the services we offer. The effective date at the top of this Policy will always reflect the date of the most recent revision.

Where changes are material — meaning they significantly affect the way in which we collect, use, or share your personal data — ju77 will notify registered players by email and/or via a prominent notice on the Platform at least 14 days before the revised Policy takes effect. For non-material updates such as minor clarifications, formatting corrections, or contact detail changes, the updated Policy will be posted without advance individual notification.

Your continued use of the ju77 Platform following the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the revised Policy, you must cease using the Platform and may request account closure by contacting [email protected].

If you have any questions, concerns, or complaints about this Privacy Policy or about the way ju77 handles your personal data, please contact our data protection team using the details below. We are committed to resolving all privacy-related enquiries promptly and transparently.

• Email: [email protected] (subject line: "Privacy / Data Request")
• Response Time: We aim to acknowledge all privacy enquiries within 2 business days and provide a full response within 30 calendar days.
• Complaints: If you are not satisfied with our response to a privacy complaint, you have the right to escalate your complaint to the relevant data protection authority or regulatory body with jurisdiction over your matter.

ju77 takes all privacy complaints seriously. Where an investigation reveals that we have failed to handle your personal data in accordance with this Policy or applicable law, we will take prompt corrective action and inform you of the steps taken to prevent a recurrence.