Privacy Policy — jl77 Online Casino

1 Information We Collect

jl77 collects personal data through several channels: directly from you when you register and use the platform, automatically through your interaction with the jl77 website, and from third-party identity verification and payment service providers. The categories of data we collect are as follows:

Registration & Account Data:

• Full legal name as it appears on your government-issued identity document.
• Date of birth (used for age verification — you must be 18 or older).
• Email address and account username.
• Residential address in Bangladesh (district, city, postal code).
• Mobile phone number linked to your bKash, Nagad, or Rocket account.
• Preferred payment method details (mobile wallet numbers, bank account references — full card or account numbers are never stored by jl77 directly).

Identity Verification (KYC) Data:

• Scanned or photographed copy of a government-issued photo ID (National Identity Card, passport, or driving licence).
• Proof of address document (utility bill, bank statement, or similar issued within the last 3 months).
• Selfie or live photo where required by our verification partner to confirm identity document ownership.
• Source-of-funds documentation for high-value accounts, where required by internal compliance policy.

Transaction Data:

• Deposit and withdrawal amounts, timestamps, and payment method references.
• Bonus credits, wagering activity, and balance history.
• Betting and gaming history across all jl77 products, including cricket betting, live casino, slots, and crash games.

Technical & Usage Data:

• IP address and approximate geolocation derived from IP.
• Device type, operating system, and browser version.
• Session duration, pages visited, buttons clicked, and feature interactions.
• Referral source (how you arrived at the jl77 website).

Communications Data:

• Content and metadata of any communications with jl77 customer support via email or live chat.
• Responses to surveys, promotions, or feedback requests, where you choose to participate.

2 How We Use Your Data

jl77 processes your personal data on the basis of contractual necessity (to deliver the services you have signed up for), legitimate interest (to protect the integrity of the platform and prevent fraud), legal obligation (to comply with applicable anti-money laundering and responsible gaming requirements), and — where applicable — your explicit consent (for marketing communications).

jl77 will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or establishing a separate lawful basis for the new processing activity.

3 Data Sharing & Third Parties

jl77 does not sell, rent, or otherwise transfer your personal data to external parties for their own commercial or marketing purposes. We share data only with the following categories of third-party service providers, and only to the extent strictly necessary for them to perform their contracted functions:

• Identity Verification Providers: KYC and age verification partners who process your identity documents to confirm your eligibility to hold a jl77 account. These providers operate under strict data processing agreements and may not use your data for any purpose beyond verification.
• Payment Service Providers: Mobile financial service operators (bKash, Nagad, Rocket, Upay) and banking partners (Dutch-Bangla Bank, City Bank, BRAC Bank) that process your deposits and withdrawals. These providers receive only the transaction data required to complete the relevant payment instruction.
• Game Software Providers: Third-party game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi whose game software is integrated into the jl77 platform. These providers may receive a session token and anonymised player identifier to deliver game content; they do not receive your full personal profile.
• Analytics & Platform Infrastructure Providers: Cloud hosting, content delivery, and technical infrastructure partners that support the operation of the jl77 website and mobile interface. These providers process technical usage data only.
• Regulatory and Law Enforcement Authorities: Where required by applicable law, court order, or regulatory instruction, jl77 may disclose personal data to relevant authorities. jl77 will notify you of such disclosure to the extent permitted by law.

All third parties with whom jl77 shares personal data are required by contract to maintain appropriate technical and organisational security measures and to process your data only for the specified purpose. jl77 remains responsible for data shared with processors acting on its behalf.

4 Cookies & Tracking Technologies

jl77 uses cookies and similar tracking technologies (including local storage objects and session tokens) to operate the platform efficiently, maintain your login session, detect fraudulent activity, and gather anonymised analytics about how players use the site. Below is a breakdown of the cookie categories jl77 employs:

jl77 does not deploy third-party advertising cookies or retargeting pixels. Your browsing activity on jl77 is not shared with external advertising networks.

Most web browsers allow you to control cookie settings through the browser preferences menu. You may block or delete cookies at any time; however, disabling essential cookies will prevent you from logging in and using the jl77 platform. Disabling analytics or functional cookies will not affect your ability to play but may degrade your experience (for example, display preferences may not be remembered between sessions).

5 Data Retention & Storage

jl77 retains your personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable legal and compliance obligations. The following retention periods apply:

• Account and registration data: Retained for the duration of your active account plus a minimum of 5 years after account closure, in compliance with anti-money laundering record-keeping obligations.
• KYC identity documents: Retained for the duration of your active account plus 5 years post-closure. Documents are stored in an encrypted, access-controlled repository accessible only to authorised compliance staff.
• Transaction records: Retained for 7 years from the date of each transaction, in line with standard financial record-keeping requirements.
• Customer support communications: Retained for 3 years from the date of last interaction, unless the communication relates to an ongoing dispute or legal matter, in which case it is retained until the matter is fully resolved.
• Technical and usage data (anonymised analytics): Retained for up to 24 months before aggregation or deletion.
• Marketing consent records: Retained for the duration of your consent, plus 3 years after withdrawal of consent, to demonstrate compliance with opt-in requirements.

When personal data is no longer required and the applicable retention period has expired, jl77 will securely delete or irreversibly anonymise it in accordance with its internal data destruction procedures. Physical documents, where any exist, are shredded securely.

All data held by jl77 is stored on servers located within secure data centres. Where cloud infrastructure providers are used, jl77 ensures that appropriate data processing agreements are in place and that data is stored in jurisdictions that provide an adequate level of data protection.

6 Your Privacy Rights

As a jl77 player, you have the following rights in relation to your personal data. To exercise any of these rights, please contact the jl77 Data Protection team at [email protected] with your account username and a clear description of your request. We will acknowledge all rights requests within 5 business days and respond substantively within 30 calendar days.

• Right of Access: You may request a copy of all personal data jl77 holds about you, along with information about how it is being processed. We will provide this in a structured, readable format.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. For name or date-of-birth corrections, we may require supporting documentation.
• Right to Erasure ("Right to Be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (if consent was the lawful basis), or where you object to processing and there is no overriding legitimate interest. Note that this right is subject to jl77's legal obligation to retain certain records (see Data Retention section above); in such cases, we will explain which data must be retained and why.
• Right to Restrict Processing: You may request that jl77 restrict the processing of your personal data in certain circumstances — for example, while a rectification request is being assessed, or where you contest the lawfulness of processing.
• Right to Data Portability: Where processing is based on your consent or contractual necessity, you may request that jl77 provide your personal data in a machine-readable format (CSV or JSON) so that you can transfer it to another service provider.
• Right to Object to Marketing: You may withdraw your consent to receive marketing communications at any time by updating your account preferences or emailing [email protected]. Withdrawal of marketing consent does not affect the lawfulness of marketing communications sent prior to withdrawal.
• Right to Object to Profiling: Where jl77 uses automated profiling (e.g., bonus eligibility scoring, responsible gaming risk flagging), you have the right to request human review of any decision made solely on the basis of such profiling that significantly affects you.

7 Data Security Measures

jl77 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security framework includes the following key controls:

• Encryption in Transit: All data exchanged between your browser or device and the jl77 platform is encrypted using Transport Layer Security (TLS 1.3). Connection attempts over unencrypted HTTP are automatically redirected to HTTPS.
• Encryption at Rest: Personal data and KYC documents stored on jl77 infrastructure are encrypted at rest using AES-256 encryption. Encryption keys are managed using a dedicated key management service with strict access controls.
• Access Controls: Access to personal data is restricted to jl77 staff and contractors who have a demonstrable need to access it in the course of their role. Role-based access controls are enforced, and all privileged access is logged and audited.
• Multi-Factor Authentication: jl77 internal systems that hold personal data require multi-factor authentication for all staff access. Players are also encouraged to enable two-factor authentication on their jl77 accounts for additional protection.
• Vulnerability Management: The jl77 platform undergoes regular security assessments, including penetration testing and vulnerability scanning, to identify and remediate security weaknesses before they can be exploited.
• Incident Response: jl77 maintains a documented data breach response procedure. In the event of a security incident that affects your personal data, jl77 will notify affected players and, where required, relevant authorities, within the timeframe required by applicable obligations.
• Staff Training: All jl77 staff who handle personal data receive regular data protection and security awareness training.

8 Updates to This Policy

jl77 reviews and updates this Privacy Policy periodically to reflect changes in the services we offer, the technologies we use, and the legal and regulatory environment in which we operate. The "Last Reviewed" date at the top of this document indicates when the most recent revision was made.

Where changes to this Policy are material — meaning they significantly affect your rights or the way we process your personal data — jl77 will notify registered players via the email address associated with their account at least 14 days before the revised Policy takes effect. For minor or administrative updates (such as corrections of typographical errors or clarifications that do not change the substance of the Policy), we will update the document without prior notice and update the "Last Reviewed" date accordingly.

Continued use of the jl77 platform after the effective date of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with any material change to this Policy, you should contact jl77 support to discuss your options, which may include account closure with full withdrawal of your available balance.

All previous versions of this Privacy Policy are archived internally and are available upon written request to [email protected]. We encourage you to review this Policy periodically to stay informed about how jl77 protects your personal data.