Privacy Policy — bj777 Data Protection Statement

1. Who We Are

bj777 ("we", "our", "us", or "the Company") operates the online gaming and sports betting platform accessible at https://bj777.vu and all associated mobile and web-based applications (collectively, "the Platform"). bj777 is duly licensed under an international gaming licence and operates in compliance with its terms, which include mandatory data protection, anti-money-laundering (AML), and know-your-customer (KYC) obligations.

This Privacy Policy describes how bj777 collects, uses, stores, discloses, and protects personal information relating to users who register an account, access, or otherwise interact with our Platform. For the purposes of applicable data protection laws, bj777 acts as the data controller in respect of personal data collected through the Platform.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, you may contact our Data Protection Officer at [email protected] or via WhatsApp at +880 1700 000777. We aim to respond to all privacy-related inquiries within five (5) business days.

2. Personal Data We Collect

bj777 collects the following categories of personal data from users of the Platform. We only collect information that is necessary for the purposes described in this Policy.

2.1 Identity and Contact Information

• Full legal name (first name, last name)
• Date of birth (for mandatory age verification)
• Residential address including city, postal code, and country
• Valid email address
• Mobile telephone number (including Bangladesh country code)
• Nationality
• Government-issued identification number (e.g., National Identity Card number)

2.2 Account and Authentication Data

• Username chosen at registration
• Encrypted password (passwords are stored as hashed values and are never readable by bj777 staff)
• Account preferences and settings
• Account activity logs including login timestamps and IP addresses

2.3 Financial and Payment Data

• Mobile financial service account references (bKash, Nagad, Rocket, Upay) — we store only the account identifier or last few digits, never full credentials
• Bank account details where applicable (account name and number used for bank transfer withdrawals)
• Deposit and withdrawal transaction history, including amounts, timestamps, and payment method used
• Wagering history, including bets placed, game titles, stakes, and outcomes

2.4 Identity Verification Documents

• Copy of National Identity Card (NID), passport, or other government-issued photo ID
• Proof of address documents (e.g., utility bill, bank statement dated within three months)
• Proof of payment method ownership where required by AML procedures
• Selfie or live photograph in certain high-risk account scenarios

2.5 Technical and Device Data

• IP address and approximate geographic location derived from IP
• Device type, model, and operating system
• Browser type and version
• Referring URL and pages visited within the Platform
• Session duration and interaction data
• Cookie identifiers and similar tracking technologies (see Section 7)

2.6 Communications Data

• Records of correspondence with our customer support team via live chat, email, or WhatsApp
• Survey responses and feedback submissions
• Opt-in or opt-out records for marketing communications

3. How We Collect Your Personal Data

bj777 collects personal data through the following means:

• Direct submission: Information you provide when registering an account, completing identity verification, making a deposit or withdrawal, contacting customer support, or participating in a promotion.
• Automated collection: Technical data collected automatically as you browse and interact with the Platform, including cookies, server logs, and device fingerprinting technologies.
• Third-party sources: Information received from payment processors (bKash, Nagad, Rocket, Upay), identity verification service providers, fraud detection agencies, and our gaming software suppliers, to the extent necessary and permitted by applicable law.
• Regulatory bodies: On rare occasions, we may receive information from regulatory or law enforcement agencies in connection with a legal obligation or investigation.

4. How and Why We Use Your Personal Data

bj777 uses your personal data for the following specific and legitimate purposes:

Purpose	Data Used	Basis
Account registration and management	Identity, contact, account data	Contractual necessity
Age and identity verification (KYC)	Identity documents, date of birth	Legal obligation
Processing deposits and withdrawals	Financial data, payment references	Contractual necessity
Anti-money laundering (AML) compliance	Financial data, identity documents, transaction history	Legal obligation
Fraud prevention and security monitoring	Technical data, account activity logs	Legitimate interest
Customer support and dispute resolution	Communications data, account data	Contractual necessity
Responsible gaming monitoring	Wagering history, account data	Legal obligation / Legitimate interest
Platform improvement and analytics	Technical data, interaction data	Legitimate interest
Marketing communications (opt-in only)	Contact data, preferences	Consent
Legal compliance and regulatory reporting	All categories as required	Legal obligation

5. Legal Basis for Processing Personal Data

bj777 processes your personal data only where a valid legal basis exists under applicable data protection law. The primary legal bases we rely upon are as follows:

• Contractual Necessity: Processing is necessary to perform our contract with you — that is, to operate your account, allow you to play games, and process financial transactions.
• Legal Obligation: Certain processing activities are required by law, including KYC identity verification, AML transaction monitoring, responsible gaming obligations, and regulatory reporting to our licensing authority.
• Legitimate Interests: We process some data to pursue our legitimate business interests, including fraud detection, platform security, analytics, and service improvement, provided these interests are not overridden by your fundamental rights and freedoms.
• Consent: Where we rely on your consent — for example, to send you promotional emails or SMS marketing — you have the right to withdraw that consent at any time by contacting us or adjusting your account communication preferences. Withdrawal of consent will not affect the lawfulness of processing carried out before withdrawal.

6. Data Sharing and Third-Party Disclosure

bj777 does not sell, rent, or trade your personal data to third-party marketers or unrelated commercial entities. We may share your data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data-sharing agreements or legal requirements:

• Payment Processors: Mobile financial service providers (bKash, Nagad, Rocket, Upay) and banking partners receive only the minimum transaction data necessary to process deposits and withdrawals on your behalf.
• Identity Verification Providers: Third-party KYC service providers may process copies of your identification documents to assist with age and identity verification as required by our licensing obligations.
• Game Software Suppliers: Our licensed game providers receive anonymised or pseudonymised session data necessary to deliver game content and calculate returns. They do not receive your full identity or payment information.
• Fraud Prevention and Security Agencies: We may share data with specialist fraud detection services to protect the Platform and its users from criminal activity, account compromise, and money laundering.
• Regulatory and Law Enforcement Authorities: We are legally required to disclose certain information to our gaming regulatory authority, tax authorities, and law enforcement agencies upon receipt of a lawful request or court order. We will notify you of such disclosures where permitted by law.
• Professional Advisors: Our legal counsel, auditors, and compliance consultants may access personal data on a strictly confidential basis in connection with their professional services to bj777.
• Corporate Transactions: In the event of a merger, acquisition, restructuring, or sale of assets involving bj777, your personal data may be transferred to the successor entity, subject to equivalent privacy protections.

All third parties with whom we share personal data are contractually obligated to process that data only for the specified purpose, to maintain appropriate security standards, and to comply with applicable data protection laws.

7. Cookies and Tracking Technologies

bj777 uses cookies and similar tracking technologies on the Platform to enhance your user experience, maintain session state, analyse traffic patterns, and support security functions. A cookie is a small text file stored on your device by your browser when you visit a website.

7.1 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the Platform to function correctly. These include session authentication cookies, security tokens, and load-balancing cookies. These cannot be disabled without impairing Platform functionality.
• Performance and Analytics Cookies: Help us understand how users interact with the Platform by collecting aggregated, anonymised data about page visits, navigation paths, and error events. This data guides our Platform improvements.
• Functional Cookies: Remember your preferences such as language settings, preferred payment method, and display options to provide a more personalised experience on return visits.
• Security Cookies: Used to detect and prevent fraudulent login attempts, bot activity, and suspicious transaction patterns.

7.2 Managing Your Cookie Preferences

You can control and manage cookies through your browser settings. Most browsers allow you to view, delete, and block cookies from specific websites. Please note that disabling strictly necessary cookies will prevent you from logging in to your bj777 account and using core Platform features. Detailed guidance on managing cookies is available through your browser's help documentation.

8. Data Retention

bj777 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and our regulatory licence obligations. The following general retention periods apply:

• Active account data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in compliance with AML and gaming regulatory requirements.
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction, as required by international AML standards.
• Identity verification documents: Retained for a minimum of five (5) years from the date of verification or account closure, whichever is later.
• Customer support communications: Retained for three (3) years from the date of the last interaction.
• Marketing consent records: Retained for the duration of your consent plus one (1) year following withdrawal, to demonstrate compliance.
• Technical and log data: Retained for up to twelve (12) months for security and fraud investigation purposes, after which it is anonymised or deleted.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our internal data disposal procedures. Where legal proceedings or regulatory investigations are ongoing, data may be retained beyond standard periods until the matter is resolved.

9. Your Privacy Rights

As a user of the bj777 Platform, you hold the following rights in respect of your personal data. You may exercise any of these rights by contacting us at [email protected]. We will respond to all valid requests within thirty (30) days, or notify you if an extension is required.

• Right of Access: You may request a copy of all personal data bj777 holds about you, along with information about how it is used and with whom it is shared.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it without undue delay.
• Right to Erasure ("Right to be Forgotten"): You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent, or where processing is unlawful. Please note that this right is subject to our overriding legal obligations — for example, we cannot delete KYC or AML records before the legally mandated retention period expires.
• Right to Restriction of Processing: You may request that we temporarily stop processing your data in certain circumstances, such as while accuracy is contested or a legitimate interest objection is assessed.
• Right to Data Portability: Where processing is based on your consent or a contract, and carried out by automated means, you may request your data in a structured, commonly used, machine-readable format.
• Right to Object: You may object at any time to processing based on our legitimate interests, including profiling for marketing purposes. You also have an unconditional right to opt out of direct marketing communications.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

10. Security Measures

bj777 takes the security of your personal data seriously and has implemented a comprehensive set of technical and organisational measures designed to protect your information against unauthorised access, accidental loss, destruction, or disclosure. These measures include but are not limited to:

• 256-bit SSL/TLS encryption for all data in transit between your device and our servers
• AES-256 encryption for sensitive data at rest in our databases
• Bcrypt password hashing — your password is never stored in plain text and is not accessible to any bj777 employee
• Multi-factor authentication (MFA) available for player accounts and mandatory for internal administrative access
• Role-based access controls limiting staff access to personal data on a strict need-to-know basis
• Regular penetration testing and independent security audits by certified third-party specialists
• 24/7 automated threat detection and intrusion prevention systems monitoring our infrastructure
• Secure, geographically redundant data centres with physical access controls
• Staff training on data protection obligations, phishing awareness, and secure data handling practices

While we employ robust security measures, no online platform can guarantee absolute security against all possible threats. In the event of a data breach that is likely to result in a risk to your rights and freedoms, bj777 will notify affected users and the relevant regulatory authority as required by law, without undue delay.

11. Children's Privacy

The bj777 Platform is strictly intended for adults aged eighteen (18) years and above. We do not knowingly collect, process, or retain personal data from any individual under the age of 18. Age verification is a mandatory step in our registration and KYC process specifically to prevent underage access.

If we discover or are notified that personal data has been submitted by a person under the age of 18, we will immediately close the associated account, void any transactions, and securely delete all related personal data without delay. Parents and guardians who suspect that a minor has registered on the bj777 Platform should contact us immediately at [email protected].

12. Changes to This Privacy Policy

bj777 reserves the right to update, revise, or replace this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, regulatory requirements, or business operations. The "Effective Date" and "Last Reviewed" date at the top of this document will be updated accordingly.

For material changes — those that significantly affect your rights or the way we handle your personal data — we will provide advance notice through a prominent notice on the Platform homepage or by email to your registered address, where practicable, at least fourteen (14) days before the changes take effect. Your continued use of the Platform after the effective date of any revised Privacy Policy constitutes your acceptance of those changes.

We encourage you to revisit this Privacy Policy periodically to stay informed of how bj777 protects your personal data. If you disagree with any changes to this Policy, you should discontinue use of the Platform and may close your account by contacting our support team.