hj77 Privacy Policy

This Privacy Policy ("Policy") is issued by hj77 ("the Platform", "we", "us", "our") and applies to all personal data collected from individuals ("the Player", "you", "your") who access or use the hj77 platform at hj77.io, including its associated mobile-optimised interfaces, in-app experiences, customer support channels and marketing communications.

hj77 is committed to handling your personal data with the highest standards of transparency, security and respect. This Policy is designed to give you a comprehensive and honest account of our data practices so that you can make fully informed decisions about your use of the hj77 platform. We encourage you to read this Policy carefully in its entirety before creating an account or using any feature of the hj77 platform.

This Policy should be read alongside the hj77 Terms & Conditions, which are available at hj77.io/terms-conditions, and the hj77 Responsible Gaming Policy, available at hj77.io/responsible-gaming. In the event of any conflict between this Policy and the Terms & Conditions, the Terms & Conditions shall take precedence.

hj77 collects the following categories of personal data from players and platform users. We collect only the data that is necessary and proportionate to the specific purposes for which it is required.

hj77 does not intentionally collect sensitive personal data such as racial or ethnic origin, religious beliefs, health data or biometric identifiers beyond the minimum required by applicable identity verification regulations. Where such data is incidentally submitted by a player (for example, in a government-issued ID document uploaded for KYC purposes), it will be processed only to the extent strictly necessary for the verification purpose and will not be retained beyond the applicable retention period.

hj77 collects personal data through the following channels and mechanisms:

• Direct submission at registration: When you create an hj77 account, you provide identity, contact and, where applicable, financial data directly via the registration form.
• KYC document uploads: When completing identity verification, you upload government-issued documents such as a National Identity Card (NID), passport or driver's licence. These documents are processed by our KYC compliance team and authorised identity verification partners.
• Payment transactions: When you make a deposit or request a withdrawal via bKash, Nagad, Rocket, Upay, Visa, Mastercard or bank transfer, relevant financial data is captured to facilitate and record the transaction.
• Platform usage: As you navigate and interact with the hj77 platform — browsing games, placing bets, participating in tournaments, accessing promotions — behavioural and technical data is automatically collected via server logs, session tracking and analytics tools.
• Cookies and similar technologies: hj77 uses cookies and comparable technologies (web beacons, pixel tags, local storage) to collect technical and behavioural data. Full details are provided in Section 7 of this Policy.
• Customer support interactions: When you contact hj77 support via live chat or email, the content of your communications and associated account data are captured and stored as part of the support record.
• Third-party verification services: hj77 may receive identity and fraud-risk data from authorised third-party KYC and anti-money laundering screening providers as part of the player verification process.

hj77 uses your personal data for the following specific and clearly defined purposes:

• Account creation and management: To create, verify and maintain your hj77 player account, including processing your registration details, enabling login access and managing account settings and preferences.
• Identity verification (KYC): To verify your identity, age (21+ requirement) and residential address in accordance with our Know Your Customer obligations and responsible gaming commitments.
• Payment processing: To process your deposits and withdrawals via your chosen payment method, including bKash, Nagad, Rocket, Upay, Visa, Mastercard and bank transfer, and to maintain an accurate record of all financial transactions on your account.
• Platform delivery: To provide you with access to all gaming, betting and entertainment features of the hj77 platform, including casino games, sports betting markets, live dealer tables and slot games.
• Fraud prevention and security: To detect, investigate and prevent fraudulent activity, money laundering, account takeover attempts and other security threats affecting the hj77 platform and its player community.
• Responsible gaming compliance: To monitor player behaviour for indicators of problem gambling, to enforce self-exclusion requests and deposit limits, and to deliver responsible gaming notifications and interventions where required.
• Customer support: To respond to your queries, complaints and requests, to investigate disputes and to provide effective after-care in relation to your hj77 account and gaming activity.
• Legal and regulatory compliance: To comply with applicable legal obligations, including anti-money laundering (AML) requirements, data protection obligations and any lawful requests from competent authorities.
• Marketing communications (consent-based): Where you have provided explicit consent, to send you promotional emails, SMS notifications or in-platform messages about hj77 bonuses, promotions, new games and seasonal offers. You may withdraw your consent to marketing communications at any time by contacting [email protected] or updating your account preferences.
• Platform analytics and improvement: To analyse aggregated, anonymised usage data to understand how players interact with the hj77 platform, to identify areas for improvement and to optimise platform performance and user experience.

hj77 processes your personal data on one or more of the following lawful bases, depending on the specific processing activity:

• Contractual necessity: Processing that is necessary to perform the contract between you and hj77 — including account management, payment processing, game delivery and customer support — is carried out on the basis of contractual necessity. Without this processing, hj77 cannot provide you with the services described in the Terms & Conditions.
• Legal obligation: Processing carried out to comply with applicable legal and regulatory obligations — including KYC verification, AML screening, fraud reporting and legally mandated data retention — is processed on the basis of legal obligation. hj77 cannot exempt players from this processing.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, analytics and internal reporting is carried out on the basis of hj77's legitimate interests in operating a safe, secure and compliant online gaming platform. This processing is subject to a balancing assessment and will not be carried out where your privacy interests override hj77's legitimate interests.
• Consent: Processing for direct marketing communications, non-essential cookies and optional personalisation features is carried out only on the basis of your freely given, specific and informed consent. You may withdraw your consent at any time without detriment to your account or gaming access.

hj77 does not sell, rent or otherwise trade your personal data to any third party for commercial gain. We share your personal data only in the following limited and controlled circumstances:

• Payment service providers: Your financial data is shared with authorised payment processors — including the operators of bKash, Nagad, Rocket and Upay mobile financial services, and with Visa/Mastercard acquiring banks — solely for the purpose of processing your deposits and withdrawals. These providers operate under their own independent privacy policies and regulatory frameworks.
• KYC and identity verification partners: Your identity documents and verification data may be shared with authorised third-party KYC screening providers to facilitate age verification and identity confirmation in accordance with our responsible gaming and anti-money laundering obligations.
• Game content providers: Technical data (such as session tokens and bet records) is shared with our licensed game content providers — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe and Ezugi — to the minimum extent necessary to deliver their game content within the hj77 platform. These providers do not receive personally identifiable information beyond what is technically required for game delivery.
• IT and infrastructure providers: hj77 uses third-party hosting, cloud storage and IT infrastructure providers to operate the platform. These providers have access to personal data only as data processors acting under strict contractual data processing agreements and are not permitted to use your data for any independent purpose.
• Legal and regulatory authorities: hj77 will disclose personal data to competent legal or regulatory authorities, law enforcement agencies or courts where required to do so by law, court order or lawful regulatory instruction. hj77 will, where legally permissible, notify affected players of any such disclosure.
• Fraud prevention networks: In cases of confirmed or suspected fraud, hj77 may share relevant account and transaction data with industry fraud prevention networks and financial institutions for the purpose of preventing further fraudulent activity.

hj77 uses cookies and similar technologies — including web beacons, pixel tags, local storage objects and session identifiers — to operate the platform, personalise your experience, maintain your logged-in session and collect analytical data about platform usage. The following categories of cookies are used by hj77:

• Strictly necessary cookies: These cookies are essential for the hj77 platform to function. They enable core features such as secure login sessions, session authentication tokens and platform navigation. These cookies cannot be disabled without impairing the functionality of the hj77 platform.
• Functional cookies: These cookies remember your preferences and settings — such as your preferred language display, game lobby filter selections and notification preferences — to provide a more personalised experience during your visits to the hj77 platform.
• Analytical cookies: hj77 uses anonymised analytical cookies to understand how players navigate and use the platform, including page visit frequency, session duration, most-visited sections and game categories. This data is used exclusively in aggregated, non-identifiable form to improve platform performance and content quality.
• Security and fraud prevention cookies: These cookies assist in detecting and preventing automated bot activity, credential-stuffing attacks and other security threats to the hj77 platform and individual player accounts.

You may configure your browser settings to block or delete cookies at any time. Please note that blocking strictly necessary cookies will prevent you from logging in to or using core features of the hj77 platform. Instructions for managing cookies are available in the help documentation of your browser.

hj77 applies a comprehensive and layered set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, destruction or accidental loss. Our security framework includes the following measures:

• 256-bit SSL/TLS encryption: All data transmitted between your device and the hj77 servers is encrypted using industry-standard 256-bit SSL/TLS protocols, preventing interception during transit.
• Encrypted data storage: Sensitive personal data — including identity documents, financial account numbers and authentication credentials — is stored in encrypted form on secure servers. Encryption keys are managed separately from the encrypted data.
• Access controls: Access to personal data held by hj77 is restricted to authorised personnel who require access for specifically defined operational purposes. All internal access is logged and subject to regular audit review.
• Two-factor authentication: hj77 supports and encourages the use of two-factor authentication (2FA) for player accounts to provide an additional layer of protection against unauthorised login attempts.
• Intrusion detection and monitoring: hj77 maintains real-time network monitoring and intrusion detection systems to identify and respond to security incidents promptly.
• Regular security assessments: hj77 conducts regular internal and independent security reviews, including vulnerability scanning and penetration testing, to identify and remediate potential security weaknesses in the platform.
• Incident response: hj77 maintains a documented data breach response procedure. In the event of a personal data breach that poses a risk to affected players, hj77 will notify impacted individuals promptly and take all reasonable steps to contain and remediate the breach.

While hj77 applies robust security measures, no online system can guarantee absolute security. You are responsible for maintaining the confidentiality of your hj77 account credentials and for notifying hj77 immediately if you suspect any unauthorised access to your account.

hj77 retains personal data only for as long as is necessary to fulfil the specific purpose for which it was collected, or for as long as is required by applicable legal or regulatory obligations. The following general retention principles apply:

• Active account data: Personal data associated with an active hj77 player account is retained for the duration of the account's active status and for a minimum period of 5 years following permanent account closure, in order to comply with AML record-keeping obligations and to resolve any post-closure disputes.
• KYC and identity documents: Identity verification documents and associated KYC records are retained for a minimum of 5 years from the date of account closure or the date of the last financial transaction, in line with standard AML compliance retention periods.
• Financial transaction records: Records of all deposits, withdrawals, wagers and financial transactions are retained for a minimum of 5 years from the date of each transaction for AML compliance and audit purposes.
• Customer support records: Live chat transcripts and email correspondence are retained for a period of 3 years from the date of the interaction, to facilitate dispute resolution and quality assurance reviews.
• Marketing consent records: Records of your marketing consent or opt-out status are retained for 3 years from the date of the most recent consent or opt-out action.
• Technical and analytical data: Anonymised analytical data and technical logs are retained for a period of 12 to 24 months, depending on the specific data type and analytical purpose.

At the end of the applicable retention period, personal data is securely deleted or irreversibly anonymised. hj77 does not retain personal data in identifiable form beyond the periods specified above unless required to do so by a specific, ongoing legal obligation.

As a data subject whose personal data is processed by hj77, you have the following rights. hj77 is committed to honouring these rights in a timely and transparent manner:

• Right of access: You have the right to request a copy of the personal data that hj77 holds about you, together with information about how it is being used. hj77 will respond to access requests within 30 days of receipt.
• Right to rectification: If any personal data that hj77 holds about you is inaccurate or incomplete, you have the right to request its correction. Most account details can be updated directly via your account settings; for KYC-verified data, correction requests should be submitted to [email protected].
• Right to erasure: Subject to applicable legal retention obligations, you have the right to request the deletion of personal data that hj77 holds about you. Please note that hj77 is legally required to retain certain data (such as KYC records and financial transaction records) for a minimum retention period regardless of erasure requests.
• Right to restriction of processing: In certain circumstances — for example, where you contest the accuracy of data or where processing is unlawful but you prefer restriction over erasure — you have the right to request that hj77 restricts the processing of your personal data.
• Right to data portability: Where data is processed on the basis of your consent or on the basis of contractual necessity, you have the right to receive your personal data in a structured, commonly used and machine-readable format, and to request that it be transferred to another controller where technically feasible.
• Right to object: You have the right to object to the processing of your personal data where hj77 relies on legitimate interests as the legal basis for that processing. hj77 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests or rights.
• Right to withdraw consent: Where processing is based on your consent (for example, marketing communications), you have the right to withdraw that consent at any time without any negative consequences for your account access or gaming activity.

To exercise any of the above rights, please submit a written request to [email protected], clearly identifying the right you wish to exercise and the specific data or processing activity to which your request relates. hj77 may need to verify your identity before processing your request. We will acknowledge your request within 5 business days and aim to complete it within 30 calendar days.

The hj77 platform is strictly restricted to individuals who are 21 years of age or older. hj77 does not knowingly collect, process or retain personal data from individuals under the age of 21 under any circumstances.

hj77 implements active age verification measures as part of the KYC process to prevent underage individuals from accessing the platform. Where hj77 becomes aware that personal data has been collected from an individual who is under 21 years of age — whether through registration, browsing or any other means — that data will be permanently deleted from all hj77 systems as promptly as possible, and any associated account will be closed immediately.

If you are a parent or legal guardian and believe that your child or a person under your care has registered an account with hj77 or otherwise submitted personal data to the hj77 platform, please contact us immediately at [email protected] with the relevant details. hj77 will investigate and take appropriate remedial action, including deletion of any personal data collected, within 5 business days of notification.

The hj77 platform may, from time to time, contain references to or information about third-party services such as payment providers (bKash, Nagad, Rocket, Upay), game content providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi) and other industry partners. Any links or references to third-party services on the hj77 platform are provided for informational purposes only.

hj77 has no control over the content, privacy practices or data processing activities of any third-party websites, services or platforms. This Privacy Policy applies exclusively to personal data processed by hj77 in connection with the hj77 platform. It does not extend to any third-party service, regardless of how that service is accessed or referenced.

hj77 strongly recommends that you review the privacy policy of any third-party service before providing it with any personal data. hj77 accepts no responsibility or liability for the privacy practices, data security standards or content of any third-party platform or service.

hj77 reserves the right to update, amend or replace this Privacy Policy at any time, at its sole discretion, to reflect changes in applicable laws, regulatory requirements, business practices or platform features. The most current version of this Privacy Policy will always be available at hj77.io/privacy-policy.

Where hj77 makes a material change to this Privacy Policy — that is, a change that significantly affects the way we collect, use or share your personal data — we will provide prominent notice to registered players via email or an in-platform notification at least 14 days before the updated Policy takes effect. Your continued use of the hj77 platform after the effective date of an updated Policy constitutes your acceptance of the revised terms.

For non-material changes (such as typographical corrections, clarifications or minor structural reorganisation that do not affect the substance of the Policy), hj77 may update the Policy without prior notice. The "Effective" date displayed in the hero section of this page will be updated to reflect the date of any revision, material or otherwise.

If you have any questions, concerns or requests relating to this Privacy Policy or to hj77's data processing practices, please contact the hj77 Data Protection team using the following details. All communications must be in English to ensure accurate and efficient processing.

• Email: [email protected]
• Support hours: 24 hours a day, 7 days a week, including Bangladesh public holidays
• Response time: hj77 aims to acknowledge all privacy-related enquiries within 2 business days (Bangladesh Standard Time, UTC+6) and to provide a substantive response within 14 calendar days
• Subject line: Please use "Privacy Policy Enquiry" or "Data Subject Request" as the email subject line to ensure your message is routed to the correct team promptly

hj77 is committed to resolving all privacy-related concerns fairly, transparently and efficiently. If you are not satisfied with hj77's response to a privacy concern, you have the right to escalate your complaint to the relevant data protection authority in your jurisdiction.