🔐 Data & Privacy
ja77ya Privacy Policy
Your privacy matters to us. This policy explains what personal data we collect, how we use it, and the steps we take to keep your information secure on the ja77ya platform.
1. Introduction
This Privacy Policy ("Policy") explains how ja77ya ("ja77ya", "we", "us", "our") collects, uses, stores, shares, and protects the personal information of players and visitors ("you", "your") who access or use the ja77ya website at ja77ya.app and all associated services (collectively the "Platform").
By registering an account, depositing funds, or otherwise using the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you must stop using the Platform immediately and contact us to request account closure.
This Policy is incorporated by reference into our Terms and Conditions. Where there is any conflict between this Policy and the Terms and Conditions, the Terms and Conditions shall prevail. We recommend reviewing this Policy periodically, as we may update it from time to time. Material changes will be notified via the Platform or by email to your registered address.
2. Data Controller
ja77ya operates as the data controller for all personal information collected through the Platform. As data controller, we are responsible for determining the purposes and means of processing your personal data in accordance with applicable data protection laws and standards.
If you have any questions about this Policy, wish to exercise your privacy rights, or need to report a data concern, please contact our privacy team at:
Please use the subject line "Privacy Request" in any email relating to your personal data. We will acknowledge receipt within 48 hours and provide a substantive response within 10 business days.
3. Information We Collect
We collect personal data in several ways: directly from you when you register or use the Platform, automatically through your use of our services, and from trusted third-party sources where permitted by law.
3.1 Registration and Account Data
When you create a ja77ya account, we collect:
- Full legal name
- Date of birth (for age verification — minimum 21 years)
- Bangladeshi mobile number (used for OTP verification)
- Email address (if provided)
- Username and encrypted password
- City or division of residence (e.g., Dhaka, Chittagong, Sylhet)
3.2 Identity Verification Data
To comply with age verification and responsible gaming obligations, we may request and collect:
- National ID card (NID) number or copy
- Passport number or copy
- Selfie photograph for liveness verification
- Proof of address (utility bill, bank statement)
Identity documents are processed solely for verification and compliance purposes and are stored with enhanced encryption controls.
3.3 Financial and Transaction Data
When you deposit or withdraw funds, we collect:
- Payment method details (bKash, Nagad, Rocket, Upay, bank account identifiers)
- Transaction amounts and timestamps
- Deposit and withdrawal history
- Account balance records
We do not store full payment credentials. Mobile wallet numbers and bank account numbers are stored in encrypted, access-controlled systems.
3.4 Usage and Gameplay Data
Through your activity on the Platform, we automatically collect:
- Game history, bet amounts, and win/loss records
- Session start and end times
- Device type, operating system, and browser information
- IP address and approximate geolocation
- Pages visited, features accessed, and click-path data
- Responsible gaming tool activations (deposit limits, self-exclusion)
3.5 Communications Data
When you contact our support team or interact with promotions, we collect records of:
- Support emails and chat transcripts
- Promotional opt-in and opt-out preferences
- Feedback and complaint submissions
- SMS or push notification interactions
3.6 Cookies and Tracking Technologies
The Platform uses cookies, local storage, and similar technologies to maintain session state, remember preferences, and analyse usage patterns. See Section 9 of this Policy for full details on our use of cookies and your options to manage them.
4. How We Use Your Personal Data
ja77ya processes your personal data for the following purposes, each grounded in a lawful basis:
We do not use your personal data for automated decision-making that produces significant legal effects without human review. Our responsible gaming monitoring flags accounts for human review rather than taking automated account actions.
5. Legal Basis for Processing
Each processing activity carried out by ja77ya is grounded in one or more of the following lawful bases:
Contractual Necessity
Processing required to fulfil the contract between you and ja77ya — including account creation, payment processing, and game delivery — is necessary for the performance of that contract. Without this processing, we cannot provide the Services to you.
Legitimate Interests
We process certain data on the basis of our legitimate interests, including fraud prevention, platform security, responsible gaming monitoring, and analytics to improve the Platform. We carry out a balancing test to ensure our interests do not override your rights and freedoms.
Legal Obligation
Some processing is necessary for ja77ya to comply with applicable legal and regulatory obligations, including age verification, anti-money laundering requirements, and responding to lawful requests from authorities.
Consent
Where we rely on your consent — for example, to send you promotional communications or to use non-essential cookies — you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal. To withdraw marketing consent, email [email protected] or use the unsubscribe link in any marketing message.
6. How We Share Your Data
ja77ya does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share your data only in the limited circumstances described below, and only to the extent necessary for the stated purpose.
6.1 Payment Processors and Financial Partners
To process deposits and withdrawals, we share necessary transaction data with payment service providers including bKash, Nagad, Rocket, Upay, and our partner banks (Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank). These providers process data solely to complete your requested transaction and are bound by their own data protection obligations.
6.2 Game Providers
To deliver casino and sportsbook games, certain technical session data (such as a pseudonymous player ID and bet token) is shared with our game providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers do not receive your name, mobile number, or financial details.
6.3 Identity Verification Services
Where enhanced identity verification is required, we may engage accredited third-party verification services to cross-check the documents and information you provide. These providers act as data processors under our instruction and are contractually prohibited from using your data for their own purposes.
6.4 Legal and Regulatory Authorities
We may disclose your personal data to law enforcement agencies, regulatory bodies, or courts of competent jurisdiction when required to do so by law, when necessary to protect the rights and safety of ja77ya or third parties, or in connection with any legal proceedings.
6.5 Business Transfers
In the event of a merger, acquisition, or sale of all or part of ja77ya's business, your personal data may be transferred to the acquiring entity. We will notify you via the Platform or by email before any such transfer takes effect and before your data becomes subject to a different privacy policy.
7. Data Retention
ja77ya retains your personal data for as long as your account is active and for a period thereafter as required by law or legitimate business need. The following retention periods apply as a general guide:
After the applicable retention period expires, your data is securely deleted or anonymised so that it can no longer be associated with you. Anonymised, aggregated data may be retained indefinitely for statistical and analytical purposes.
8. Data Security
ja77ya takes the security of your personal data seriously and implements a range of technical and organisational measures to protect it against unauthorised access, accidental loss, destruction, or disclosure.
Technical Measures
- All data in transit is encrypted using TLS 1.2 or higher (SSL encryption)
- Passwords are stored using industry-standard one-way hashing algorithms
- Sensitive fields (payment identifiers, ID document data) are encrypted at rest using AES-256
- Multi-factor authentication (OTP via mobile) protects account access
- Regular penetration testing and vulnerability assessments are conducted on the Platform
- Access to production systems is restricted to authorised personnel on a need-to-know basis
Organisational Measures
- All staff with access to personal data receive data protection training
- Data access is logged, monitored, and audited on a regular basis
- Third-party processors are vetted and bound by data processing agreements
- An incident response plan is in place for potential data breaches
9. Cookies and Tracking Technologies
The ja77ya Platform uses cookies and similar local storage technologies to deliver core functionality, maintain your session, and improve your experience. Below is a summary of the cookie types we use:
Essential Cookies
These cookies are strictly necessary for the Platform to function. They maintain your login session, preserve security tokens, and remember your responsible gaming settings. Essential cookies cannot be disabled without breaking core Platform functionality.
Functional Cookies
Functional cookies remember your preferences such as language settings, game display options, and recently viewed sections. They improve your experience but are not essential. You may disable functional cookies without losing access to the Platform.
Analytics Cookies
With your consent, we use analytics cookies to understand how players navigate and use the Platform. This data is aggregated and anonymised and is used solely to improve Platform performance and user experience. We do not share analytics data with advertising networks.
You can manage your cookie preferences through your mobile browser settings. Note that disabling non-essential cookies will not affect your ability to place bets or access your account balance.
10. Your Privacy Rights
Subject to applicable law, you have the following rights in relation to the personal data ja77ya holds about you. To exercise any of these rights, email [email protected] with the subject line "Privacy Request" and the specific right you wish to exercise.
Right of Access
You have the right to request a copy of the personal data we hold about you, along with information about how and why we process it. We will respond to access requests within 10 business days.
Right to Rectification
If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it. You can update basic account information directly through your account settings panel.
Right to Erasure
You may request that we delete your personal data where it is no longer necessary for the purpose for which it was collected, or where you have withdrawn consent and no other lawful basis applies. Please note that we may be required by law to retain certain data (such as transaction records) even after an erasure request.
Right to Restrict Processing
You have the right to request that we pause processing of your personal data in certain circumstances — for example, while the accuracy of that data is being contested, or while an objection to processing is being considered.
Right to Data Portability
Where processing is based on consent or contractual necessity, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format for transfer to another controller.
Right to Object
You have the right to object to processing carried out on the basis of legitimate interests, including profiling. We will cease that processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
Right to Withdraw Consent
Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal. To withdraw marketing consent, email [email protected] or use the unsubscribe mechanism in any marketing communication.
11. Minors and Age Restriction
The ja77ya Platform is strictly intended for adults aged 21 years and above. We do not knowingly collect personal data from any person under the age of 21. If we discover that an account has been registered by or on behalf of a person under 21, we will immediately suspend the account, delete the associated personal data where legally permissible, and forfeit any balance in accordance with our Terms and Conditions.
If you are a parent or guardian and believe that a minor has registered an account on the Platform using your or their details, please contact us immediately at [email protected] with the subject line "Underage Account Report". We will investigate and act within 24 hours of receiving such a report.
12. Changes to This Privacy Policy
ja77ya reserves the right to update or modify this Privacy Policy at any time. When we make material changes, we will update the effective date at the top of this page and, where appropriate, notify registered players by email or via an in-platform notification.
Your continued use of the Platform after any such change constitutes your acceptance of the revised Policy. If you do not agree with the revised Policy, you must stop using the Platform and contact us to close your account. We encourage you to review this page periodically to stay informed about how we protect your data.
Privacy at a Glance
Our Core Privacy Commitments
A summary of the six principles that guide how ja77ya handles your personal information.
We Never Sell Your Data
Your personal data is never sold, rented, or traded to third-party advertisers or data brokers. Full stop. The only parties who receive your data are those directly involved in operating the Platform on your behalf.
SSL Encryption on Every Request
Every data transmission between your device and ja77ya's servers is protected by TLS encryption. Sensitive fields are additionally encrypted at rest. Your financial identifiers and ID documents are stored in access-controlled, encrypted vaults.
Data Collected for a Clear Purpose
We collect only the data we genuinely need to deliver and improve the Platform, verify your age, process your payments, and keep your account safe. We do not collect data speculatively or for undefined future use.
Defined Retention Periods
We retain your data only for as long as legally required or operationally necessary. Transaction records are held for 7 years in line with standard financial record-keeping practice. All other data is deleted or anonymised once the retention period expires.
Your Rights, Honoured Promptly
Access requests, rectification requests, and erasure requests are acknowledged within 48 hours and resolved within 10 business days. We treat every privacy request with the seriousness it deserves.
Zero Tolerance for Underage Data
We operate strict age verification at registration. Any account identified as belonging to a person under 21 is closed immediately, data deleted where permissible, and the matter escalated internally. Protecting minors is non-negotiable at ja77ya.
Questions About Your Privacy?
Email us or explore the Platform — your data is protected every step of the way.
Read Our FAQ Explore ja77ya Casino