jk77 Privacy Policy

1 Introduction

jk77 is committed to protecting the privacy and personal data of every player who uses our platform. We understand that the people we serve entrust us with sensitive financial and identity information, and we take that responsibility seriously. This Policy has been prepared in plain, accessible English to ensure that players across Bangladesh can clearly understand their rights and our obligations.

This Policy applies to all personal data collected through the jk77 website, mobile-optimised browser experience, any jk77 application, and all communications between jk77 and its registered players — including email, live chat, and any other support channels.

2 Data Controller

For the purposes of this Privacy Policy, jk77 acts as the data controller in respect of the personal data collected from players using the jk77 platform. As data controller, jk77 is responsible for determining the purposes and means by which your personal data is processed.

If you have any questions about how jk77 processes your data, or if you wish to exercise any of your data subject rights as described in Section 12 of this Policy, please contact the jk77 data protection team using the contact details set out in Section 16.

3 Data We Collect

jk77 collects the following categories of personal data from players. The specific data points collected depend on the nature of your interaction with the jk77 platform.

3.1 Identity Data

• Full legal name as it appears on your National Identity Card (NID) or passport
• Date of birth
• Gender (where provided voluntarily during registration)
• Scanned or photographed copies of identity documents submitted during KYC verification

3.2 Contact Data

• Registered email address
• Bangladeshi mobile phone number
• Residential address (collected during KYC verification and used for address confirmation)

3.3 Financial Data

• Mobile wallet identifiers (bKash account number, Nagad account number, Rocket account number, Upay account number) — stored in tokenised form only
• Bank account number and bank name (where bank transfer is used as a payment method)
• Deposit and withdrawal transaction history, including amounts in Bangladeshi Taka (৳), timestamps, and transaction reference numbers
• Account balance history

3.4 Technical Data

• IP address at the time of account registration and subsequent logins
• Device type, operating system, and browser type
• Session timestamps (login time, logout time, session duration)
• Geolocation data (country and city level only, derived from IP address)
• Cookie identifiers and similar tracking technologies (see Section 8)

3.5 Gaming Activity Data

• Game history (games played, bet amounts, win/loss outcomes, session duration)
• Sports betting history (markets wagered on, stake amounts, settlement outcomes)
• Bonus and promotional offer claims and wagering progress
• Responsible gaming tool settings (deposit limits, cooling-off periods, self-exclusion status)

3.6 Communications Data

• Content of support conversations conducted via live chat or email
• Records of complaints, disputes, and their resolution outcomes
• Marketing preferences and email subscription status

The following table summarises the main data categories and their primary collection method:

4 How We Collect Data

jk77 collects personal data through the following channels and mechanisms:

4.1 Direct Collection

You provide data directly to jk77 when you register an account, complete identity verification, make a deposit or withdrawal, contact our support team, or respond to promotional communications. All data collected through direct interaction is provided voluntarily by you.

4.2 Automated Collection

When you use the jk77 platform, certain technical data is collected automatically through server logs, cookies, and similar technologies. This includes your IP address, session data, device identifiers, and in-platform behaviour data such as pages visited and games accessed. This data is collected without any action required on your part and is used primarily for security monitoring, fraud prevention, and platform performance optimisation.

4.3 Third-Party Sources

jk77 may receive limited personal data from trusted third-party sources in specific circumstances, including:

• Payment processors (bKash, Nagad, Rocket, Upay, Visa, Mastercard): confirmation of successful transaction completion and tokenised payment identifiers.
• Identity verification services: confirmation of identity document authenticity as part of the KYC process.
• Fraud detection partners: risk signals associated with IP addresses or device fingerprints that may indicate fraudulent activity.

In all cases, jk77 ensures that third-party sources from which data is received are contractually obligated to handle that data lawfully and to share it only for the stated purpose.

5 Legal Basis for Processing

jk77 processes your personal data on one or more of the following legal bases depending on the specific processing activity involved:

• Contractual Necessity: Processing is necessary to perform the contract between you and jk77 (i.e., providing your account, processing deposits and withdrawals, and making games available to you).
• Legal Obligation: Processing is required to comply with legal obligations applicable to jk77, including anti-money laundering (AML) regulations, know-your-customer (KYC) requirements, and fraud prevention obligations.
• Legitimate Interests: Processing is necessary for jk77's legitimate business interests, including platform security, fraud detection, responsible gaming monitoring, and platform improvement — provided those interests are not overridden by your rights and freedoms.
• Consent: Where jk77 relies on your consent to process your data (for example, for sending you promotional communications or marketing emails), you have the right to withdraw that consent at any time by updating your marketing preferences in your account settings or by contacting jk77 support.

6 How We Use Your Data

jk77 uses the personal data it collects for the following specific purposes:

• Account management: Creating and maintaining your jk77 player account, verifying your identity, and authenticating your access to the platform.
• Payment processing: Processing deposit and withdrawal transactions in Bangladeshi Taka (৳) via bKash, Nagad, Rocket, Upay, and bank transfer, and maintaining accurate financial records of all transactions.
• KYC compliance: Verifying your identity and age (21+) as required to prevent underage gambling and comply with anti-money laundering obligations.
• Customer support: Responding to your queries, resolving complaints, and providing assistance in English and Bengali via live chat and email.
• Fraud and security monitoring: Detecting and preventing fraudulent activity, account takeover attempts, and money laundering. This includes analysing login patterns, IP addresses, and transaction behaviour for anomalies.
• Responsible gaming: Monitoring your gaming activity to identify patterns that may indicate problem gambling behaviour, and applying the responsible gaming tools you have configured (deposit limits, cooling-off periods, self-exclusion).
• Platform improvement: Analysing aggregated, anonymised usage data to understand how players interact with the jk77 platform and to improve game selection, user experience, and platform performance.
• Marketing communications: Sending you information about jk77 promotions, seasonal offers (such as BPL cricket season bonuses, Eid promotions, and Pohela Boishakh offers), and new game launches — but only where you have consented to receive such communications.
• Legal compliance: Maintaining records and disclosing information where required by applicable law, court order, or instruction from a competent regulatory or law enforcement authority.

7 Data Sharing

jk77 does not sell, rent, or trade your personal data. We share your data only in the limited circumstances described below, and only to the extent necessary for the stated purpose.

7.1 Service Providers

jk77 engages carefully selected third-party service providers to assist with specific operational functions, including payment processing (bKash, Nagad, Rocket, Upay, Visa, Mastercard), identity verification, fraud detection, email delivery, live chat software, and cloud hosting. All service providers are contractually bound to process your data only on jk77's instructions and to implement appropriate technical and organisational security measures.

7.2 Game Providers

jk77 sources casino game content from certified providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. When you play a game from one of these providers, limited technical data (such as a session token and game round identifier) is transmitted to the relevant provider's game server to enable gameplay. No personally identifiable information beyond an anonymised session token is shared with game providers for gameplay purposes.

7.3 Legal and Regulatory Disclosure

jk77 may disclose your personal data to law enforcement agencies, financial intelligence units, or other competent authorities where required by applicable law, or where jk77 has a good-faith belief that disclosure is necessary to prevent fraud, protect the safety of any individual, or comply with a legal obligation. Where permitted by law, jk77 will notify you of any such disclosure request.

7.4 Business Transfers

In the event that jk77 undergoes a merger, acquisition, or sale of all or part of its assets, your personal data may be transferred to the relevant successor entity as part of that transaction. In such circumstances, jk77 will notify affected players via email and will ensure that the successor entity is bound by data protection obligations at least as protective as those described in this Policy.

8 Cookies & Tracking Technologies

jk77 uses cookies and similar tracking technologies on the jk77 website to ensure platform functionality, enhance user experience, and support security and analytics. The following types of cookies are used:

8.1 Essential Cookies

These cookies are strictly necessary for the jk77 platform to function. They manage your login session, maintain your account authentication state, and preserve your in-session settings such as language preference. These cookies cannot be disabled without materially impairing your ability to use the platform.

8.2 Analytics Cookies

jk77 uses analytics cookies to collect aggregated, anonymised data about how players navigate the platform — including which pages are visited most frequently, how long players spend on each page, and which games are accessed most often. This data is used solely to improve the platform and is not linked to any identifiable individual.

8.3 Security Cookies

Security cookies are used to detect and prevent fraudulent login attempts, account takeover activity, and bot-driven interactions. They allow jk77 to identify unusual behaviour patterns that may indicate a security threat, and to prompt additional verification steps where necessary.

8.4 Cookie Management

You can manage your cookie preferences through your browser settings. Most modern browsers allow you to block or delete cookies. Note that disabling essential cookies will prevent you from logging in to your jk77 account. Disabling analytics or security cookies may reduce the quality of fraud protection applied to your account.

9 Payment Data

jk77 handles all payment transaction data with a heightened level of security. The following specific measures apply to the processing of financial information:

• Tokenisation: Mobile wallet identifiers (bKash, Nagad, Rocket, Upay account numbers) and card details (where applicable) are processed via tokenised payment APIs. jk77 does not store your raw payment credentials on its servers. Your bKash PIN, Nagad passcode, or bank account password is never transmitted to or stored by jk77.
• Transaction Records: jk77 maintains records of all deposit and withdrawal transactions — including amounts in Bangladeshi Taka (৳), timestamps, and transaction reference numbers — for the purposes of account management, dispute resolution, and regulatory compliance. These records are retained for a minimum of five years from the date of the transaction.
• Fraud Monitoring: All financial transactions on the jk77 platform are monitored by automated fraud detection systems. Unusual patterns — such as a high volume of rapid deposits from a new IP address, or withdrawal requests to a payment method not previously used for deposits — may trigger a manual review and, where necessary, a temporary hold on the relevant transaction pending verification.
• AML Compliance: In accordance with anti-money laundering obligations, jk77 may be required to report certain financial transactions or account activity to relevant authorities. Players may be asked to provide documentation evidencing the source of funds deposited into their jk77 account. Failure to provide such documentation when requested may result in account suspension.

10 Data Security

jk77 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include but are not limited to:

• SSL/TLS Encryption: All data in transit between your device and the jk77 platform is encrypted using TLS 1.2 or higher. This applies to all web traffic, API calls, and payment processing interactions.
• Encrypted Storage: Sensitive data at rest — including identity documents, hashed passwords, and financial records — is stored in encrypted databases. Access to these databases is restricted to authorised jk77 systems and personnel only.
• Password Hashing: Account passwords are never stored in plain text. jk77 uses bcrypt or equivalent strong cryptographic hashing to store password data.
• Access Controls: Access to personal data held within jk77 systems is governed by a strict role-based access control policy. Only jk77 staff whose job function requires access to specific categories of player data are granted that access, and all access events are logged and audited.
• Intrusion Detection: jk77's infrastructure is monitored by intrusion detection and prevention systems (IDS/IPS) that identify and mitigate potential attacks in real time.
• Regular Security Reviews: jk77 conducts regular internal security reviews and engages independent security specialists to perform periodic penetration testing of the jk77 platform.

11 Data Retention

jk77 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

Upon expiry of the applicable retention period, personal data is either permanently deleted from jk77 systems or anonymised such that it can no longer be linked to an identifiable individual. Anonymised data may be retained indefinitely for statistical and analytical purposes.

12 Your Rights

As a jk77 player, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, please contact the jk77 data protection team using the details in Section 16. jk77 will respond to all valid data subject requests within 30 calendar days of receipt.

12.1 Right of Access

You have the right to request a copy of the personal data jk77 holds about you, along with information about the purposes for which it is processed, the categories of data held, and the recipients with whom it has been shared. This is sometimes called a "Subject Access Request" (SAR).

12.2 Right to Rectification

You have the right to request that jk77 corrects any inaccurate personal data held about you, or completes any incomplete data. Where a correction is made to identity data previously verified through the KYC process, you may be required to submit updated identity documents to support the correction.

12.3 Right to Erasure

You have the right to request that jk77 deletes your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent (and there is no other legal basis for processing), or where the data has been processed unlawfully. Note that jk77 may be required by law to retain certain categories of data (such as AML-related records) even following an erasure request.

12.4 Right to Restrict Processing

You have the right to request that jk77 restricts the processing of your personal data in certain circumstances — for example, where you contest the accuracy of the data or where you have objected to processing pending the outcome of a legitimate interest assessment.

12.5 Right to Data Portability

Where jk77 processes your data on the basis of your consent or a contractual obligation, and that processing is carried out by automated means, you have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format and to request that jk77 transmit that data to another service provider where technically feasible.

12.6 Right to Object

You have the right to object to jk77 processing your personal data on the basis of legitimate interests, including profiling. Where you raise such an objection, jk77 will cease that processing unless it can demonstrate compelling legitimate grounds that override your interests, or where the processing is necessary for the establishment, exercise, or defence of legal claims. You also have an absolute right to object to the processing of your data for direct marketing purposes at any time.

12.7 Right to Withdraw Consent

Where jk77 relies on your consent as the legal basis for processing (for example, for marketing communications), you may withdraw that consent at any time by contacting jk77 support or updating your account preferences. Withdrawing consent does not affect the lawfulness of any processing carried out prior to withdrawal.

13 Children's Privacy

The jk77 platform is strictly intended for adults aged 21 and above. jk77 does not knowingly collect personal data from any individual under the age of 21. Age verification is a mandatory step in the jk77 registration and KYC process, and accounts that cannot be verified as belonging to a person aged 21 or older will be suspended and any funds held in the account will be handled in accordance with jk77's Terms & Conditions.

14 Third-Party Links

The jk77 website may contain informational references to third-party organisations such as game providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi) and payment partners (bKash, Nagad, Rocket, Upay). Where links to external websites are present, clicking those links will take you to a website that is outside jk77's control.

jk77 is not responsible for the privacy practices of any external website or service. We strongly encourage you to review the privacy policy of any third-party website you visit. This Policy applies only to personal data collected directly by jk77 through the jk77 platform.

15 Policy Updates

jk77 reserves the right to update or amend this Privacy Policy at any time. Any changes to this Policy will be posted on the jk77 website at jk77.io/privacy-policy. The "Last updated" date at the top of this Policy will be revised to reflect the date on which the most recent changes came into effect.

Where jk77 makes a material change to this Policy — meaning a change that significantly affects the way in which your personal data is collected, used, or shared — jk77 will notify all registered players via their registered email address at least 14 days before the change takes effect. Your continued use of the jk77 platform after the revised Policy has taken effect constitutes your acceptance of those changes.

16 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way in which jk77 processes your personal data, please contact the jk77 data protection team using the following details. All privacy-related correspondence should be directed to our dedicated support email. Please note that the email address below is displayed as plain text and is not a clickable link.

When submitting a data subject request, please include your registered email address, a description of the right you wish to exercise, and any relevant context that will help jk77 locate and process your request efficiently. jk77 may ask you to verify your identity before fulfilling any data subject request to ensure that personal data is not disclosed to an unauthorised party.