jc77 Privacy
Policy & Data Rights

1 Who We Are

jc77 is an online betting and casino platform operating at https://jc77.io, providing sports betting, live casino, slot games, and table games to players in Bangladesh. Throughout this Privacy Policy, references to "jc77", "we", "us", or "our" refer to the jc77 platform and its operating entity. References to "you", "your", or "the player" refer to any individual who accesses, registers on, or uses the jc77 platform in any capacity.

jc77 acts as the data controller in respect of the personal data it collects from players. This means jc77 determines the purposes and means by which your personal data is processed. Where jc77 engages third-party service providers who process data on its behalf, those providers act as data processors and are bound by contractual obligations to process data only in accordance with jc77's documented instructions.

2 Data We Collect

jc77 collects personal data that falls into the following categories. Not all categories apply to every player — the data collected depends on your level of interaction with the platform.

2.1 Identity & Registration Data

• Full legal name as provided at registration or during KYC verification.
• Date of birth (used to verify that you meet the minimum age requirement of 21 years).
• National Identity Card (NID) number or passport number, where provided for KYC purposes.
• Username chosen at registration.
• Profile photograph, where submitted as part of a KYC document.

2.2 Contact Data

• Email address (used for account communication, security alerts, and optional promotional messaging).
• Mobile phone number (used for account verification and optional SMS notifications).
• Residential address, where provided during KYC verification.

2.3 Financial Data

• Mobile financial service identifiers (bKash, Nagad, Rocket, Upay account numbers) used for deposit and withdrawal processing.
• Bank account details (Dutch-Bangla Bank, City Bank, BRAC Bank) where used for transactions.
• Masked card numbers for Visa and Mastercard transactions (jc77 does not store full card numbers — these are handled by the payment processor).
• Transaction history: deposit amounts, withdrawal amounts, dates, and payment method used.

2.4 Gaming & Activity Data

• Full betting and wagering history, including stake amounts, game titles, bet outcomes, and settlement details.
• Casino game session data, including session start and end times, games played, and results.
• Bonus claims, wagering progress toward bonus fulfilment, and promotional participation records.
• Account balance history and adjustment logs.

2.5 Technical & Device Data

• IP address at the time of registration and at each subsequent login.
• Device type, operating system version, and browser type and version.
• Geolocation data derived from IP address (country and city level only — not precise GPS coordinates).
• Session identifiers and authentication tokens.
• Platform access logs including login times and logout times.

2.6 Communications Data

• Records of communications between you and jc77 support staff, including live chat transcripts, email correspondence, and any dispute or complaint submissions.
• Survey or feedback responses where voluntarily submitted.

3 How We Collect Data

jc77 collects personal data through the following channels:

• Direct provision at registration: When you create a jc77 account, you provide identity and contact data directly through the registration form.
• KYC document submission: When you submit identity documents in response to a KYC request, jc77 collects the data contained in those documents for verification purposes.
• Transactional data: Financial data is generated automatically when you make deposits or request withdrawals through the platform.
• Platform usage: Gaming and activity data is recorded automatically as you interact with the platform's betting and casino products.
• Technical collection: Device and technical data is collected automatically by jc77's servers and logging systems each time your device connects to the platform.
• Cookie and tracking technologies: Session cookies and analytics tools collect technical data about how you navigate the platform (see Section 7 for full details).
• Third-party payment processors: When you initiate a payment, the payment provider shares transaction confirmation data with jc77 to credit your account. jc77 does not receive raw card data from these processors.

4 Lawful Basis for Processing

jc77 processes your personal data on the following lawful bases:

Processing Purpose	Lawful Basis
Account creation and management	Performance of a contract with you
Processing deposits and withdrawals	Performance of a contract with you
KYC identity verification	Legal obligation / legitimate interest (fraud prevention)
Fraud detection and anti-money-laundering monitoring	Legitimate interest / legal obligation
Responsible gaming monitoring and intervention	Legitimate interest (player welfare)
Sending account security alerts and transaction confirmations	Performance of a contract with you
Sending promotional communications (email / SMS)	Consent (you may withdraw at any time)
Platform analytics and product improvement	Legitimate interest
Compliance with legal orders or regulatory requests	Legal obligation

5 How We Use Your Data

jc77 uses the personal data it collects for the following specific purposes:

• Account administration: To create, maintain, and manage your jc77 player account, including processing login authentication, account settings changes, and password resets.
• Transaction processing: To process deposits made via bKash, Nagad, Rocket, Upay, and other supported payment methods, and to process withdrawal requests to your verified payment accounts.
• Identity verification: To verify your age (minimum 21 years) and identity in accordance with jc77's KYC procedures, and to confirm that you are the rightful account holder before processing significant transactions.
• Fraud prevention and security: To monitor account activity for indicators of fraudulent behaviour, multi-accounting, money laundering, or other prohibited conduct, and to take appropriate action where such indicators are identified.
• Responsible gaming: To monitor your gaming activity for patterns that may indicate problem gambling behaviours, to apply self-imposed limits you have set, and to contact you proactively where jc77 has welfare concerns about your level of play.
• Customer support: To respond to your queries, resolve disputes, investigate complaints, and communicate account-related decisions to you.
• Promotional communications: To send you bonus offers, seasonal promotions, and platform news where you have consented to receive such communications. You may withdraw this consent at any time.
• Platform improvement: To analyse aggregated usage patterns across the platform in order to improve game selection, navigation, payment flows, and customer support quality. Aggregated analytics data is not linked to individual player identities.
• Legal compliance: To fulfil jc77's obligations where required by applicable law, including responding to valid legal orders, court processes, or regulatory inquiries.

6 Data Sharing & Disclosure

jc77 does not sell your personal data. jc77 shares personal data only in the circumstances described below, and only to the minimum extent necessary for the stated purpose.

6.1 Payment Processing Partners

To process deposits and withdrawals, jc77 shares transaction-relevant data (account identifiers, transaction amounts, timestamps) with its payment processing partners including bKash, Nagad, Rocket, Upay, and card processing networks. These partners process data under their own privacy frameworks and are not authorised by jc77 to use your data for any purpose beyond facilitating the specific transaction.

6.2 Identity Verification Providers

Where jc77 uses a third-party KYC service provider to assist in verifying identity documents, the documents and data you submit for verification may be shared with that provider. KYC providers are bound by contractual obligations to process data only for the purpose of identity verification and to maintain appropriate security standards.

6.3 Technology and Infrastructure Providers

jc77 uses third-party cloud hosting, content delivery, and cybersecurity services to operate the platform. These providers may process technical data (such as server logs and IP addresses) as a necessary part of delivering their services. They are contractually prohibited from using this data for any independent purpose.

6.4 Game Software Providers

Some games on the jc77 platform are powered by third-party game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive anonymised session data necessary to operate the game in real time (such as bet amounts and game outcomes), but are not provided with your identity or contact data.

6.5 Legal and Regulatory Disclosure

jc77 may disclose personal data to law enforcement authorities, courts, or regulatory bodies where required by a valid legal obligation, court order, or regulatory direction. In such cases, jc77 will disclose only the minimum data required to satisfy the legal obligation and will notify you of such disclosure where legally permitted to do so.

6.6 Business Transfers

In the event of a merger, acquisition, or sale of all or part of jc77's business assets, player data may be transferred to the acquiring entity as part of the transaction. You will be notified of any such transfer that materially changes how your data is processed.

7 Cookies & Tracking

jc77 uses cookies and similar tracking technologies to maintain the functionality and security of the platform. The cookies deployed by jc77 fall into the following categories:

Cookie Type	Purpose	Duration
Strictly Necessary	Maintain your login session, prevent cross-site request forgery, and enable core platform functionality. These cannot be disabled without breaking the platform.	Session / up to 24 hours
Preference	Remember your display preferences such as game filters, language settings, and notification choices between sessions.	Up to 30 days
Analytics	Collect anonymised, aggregated data about how players navigate the platform to help jc77 identify usability improvements. No personally identifiable data is included in analytics reports.	Up to 12 months

jc77 does not deploy advertising cookies, retargeting pixels, or any third-party tracking technology designed to profile your behaviour across other websites. You may manage cookie preferences through your browser settings, though disabling strictly necessary cookies will impair your ability to use the platform.

8 Data Retention

jc77 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or to meet applicable legal retention obligations, whichever is longer. The following retention periods apply as a general guide:

• Active account data: Retained for the lifetime of your account and for a period of five (5) years following permanent account closure.
• KYC verification documents: Retained for a minimum of five (5) years following the date of verification, in accordance with anti-money-laundering record-keeping standards.
• Transaction records: Retained for a minimum of five (5) years from the date of the transaction for financial record-keeping and audit purposes.
• Support communications: Retained for three (3) years from the date of the communication, unless the communication is part of an ongoing dispute, in which case it is retained until the dispute is fully resolved plus two (2) years.
• Technical logs (IP addresses, session logs): Retained for twelve (12) months from the date of generation, then anonymised or deleted.
• Marketing consent records: Retained for the duration of your consent, plus two (2) years following withdrawal of consent, as evidence of the consent relationship.

When data is no longer required under these retention schedules, jc77 will securely delete or anonymise it so that it can no longer be linked to you as an individual.

9 Data Security

jc77 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• TLS/SSL encryption: All data in transit between your device and jc77 servers is encrypted using Transport Layer Security (TLS) with a minimum of 256-bit encryption.
• Data-at-rest encryption: Sensitive data fields (including identity document data and financial identifiers) are encrypted at rest in jc77's database layer.
• Access control: Access to player data within jc77's internal systems is restricted to personnel who require it to perform specific job functions. All access events are logged and reviewed.
• Firewall and intrusion detection: jc77's server infrastructure is protected by enterprise-grade firewall rules and intrusion detection systems that monitor for anomalous access patterns.
• Regular security assessments: jc77 conducts periodic internal security reviews and engages external security assessors to identify and remediate vulnerabilities.
• Incident response: jc77 maintains a documented data breach response procedure. In the event of a breach that is likely to result in risk to your rights, jc77 will notify affected players without undue delay.

10 Your Data Rights

As a jc77 player, you hold the following rights in respect of your personal data. To exercise any of these rights, contact jc77 support in writing at [email protected] with the subject line "Data Rights Request" and include your registered username and the nature of your request.

• Right of Access: You have the right to request a copy of the personal data jc77 holds about you. jc77 will respond to a verified access request within thirty (30) days.
• Right to Rectification: You have the right to request correction of inaccurate or incomplete personal data held in your account. Corrections to identity data may require supporting documentation.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where you object to processing and there is no overriding legitimate interest. Note that erasure requests cannot override jc77's legal obligation to retain certain records (see Section 8).
• Right to Restrict Processing: You have the right to request that jc77 restrict the processing of your data in certain circumstances, such as where you contest the accuracy of the data or object to processing.
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, machine-readable format where the processing is based on your consent or a contract with jc77.
• Right to Object: You have the right to object to processing based on legitimate interest, including profiling for responsible gaming purposes, where you consider your particular circumstances to outweigh jc77's legitimate interest. You also have an unconditional right to object to processing for direct marketing purposes at any time.
• Right to Withdraw Consent: Where processing is based on your consent (such as marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

11 Third-Party Links

The jc77 platform does not contain links to external third-party websites in its primary navigation or content areas. However, game software interfaces powered by third-party studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and others) operate within the jc77 platform environment and are subject to those studios' own data handling practices in respect of anonymised game session data. jc77 is not responsible for the privacy practices of third-party game studios beyond the contractual obligations those studios have accepted as conditions of their integration with the jc77 platform.

12 Children & Minors

jc77 is strictly an adults-only platform. The minimum age to register and use jc77 is 21 years. jc77 does not knowingly collect personal data from persons under the age of 21. If jc77 discovers that an account has been registered by a person under 21, the account will be immediately suspended, any balance will be returned to the original payment source after verification, and all personal data associated with the account will be deleted from jc77's active systems in accordance with Section 8 retention schedules.

If you are a parent or guardian and believe that a minor has accessed or registered on jc77 using your payment details or personal information, please contact jc77 support immediately at [email protected] so the matter can be investigated and resolved promptly.

13 Changes to This Policy

jc77 reserves the right to update this Privacy Policy at any time to reflect changes in the platform's data processing practices, changes in applicable law, or improvements to how jc77 communicates its privacy commitments. When material changes are made to this policy, jc77 will notify registered players via email to the address associated with their account and will post a notice on the jc77 platform. The effective date displayed at the top of this document will be updated to reflect the date on which the revised policy takes effect.

Your continued use of jc77 following notification of a change to this Privacy Policy constitutes your acknowledgement of the revised policy. If you do not agree with any change, you should cease using the platform and request account closure before the effective date of the revision.

14 Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or the manner in which jc77 processes your personal data, please contact the jc77 support team. All privacy-related communications should be submitted in writing.

• Support Email: [email protected] (plain text — not a clickable link)
• Subject Line for Data Requests: "Data Rights Request" or "Privacy Enquiry"
• Support Hours: 24 hours per day, 7 days per week, Bangladesh Standard Time (UTC+6)
• Response Target: Privacy and data rights requests acknowledged within 3 business days; substantive response within 30 days
• Platform URL: https://jc77.io

This Privacy Policy was last updated and became effective in January 2026. The English language version of this document is the binding version. In the event of any discrepancy between this document and any summarised or translated version, the English text shall prevail.