jat77 Privacy Policy — Your Data, Protected

Last Updated: 1 January 2026

1. Introduction

This Privacy Policy (the "Policy") describes how jat77 ("jat77", "we", "us", or "our"), operator of the online betting and gaming platform at jat77.io, collects, uses, stores, shares, and protects personal information relating to registered players, website visitors, and any other individuals who interact with the jat77 platform (collectively, "you" or "your").

This Policy should be read alongside jat77's Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference. By registering an account with jat77, depositing funds, or otherwise using the platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.

jat77 is committed to handling all personal data in a manner consistent with internationally recognised data protection principles, including purpose limitation, data minimisation, accuracy, storage limitation, integrity, confidentiality, and accountability.

2. Personal Data We Collect

jat77 collects personal data across several categories depending on how you interact with the platform. The table below provides an overview of the main data types, examples of specific data points, and the primary reason each category is collected.

Data Category	Examples	Primary Purpose
Identity Data	Full name, date of birth, national ID number, passport number	Account registration; KYC age and identity verification
Contact Data	Email address, mobile phone number, city of residence (e.g., Dhaka, Chittagong, Sylhet)	Account communications; support; marketing (where opted in)
Financial Data	bKash / Nagad / Rocket mobile wallet numbers, bank account details, transaction history	Processing deposits and withdrawals; fraud prevention; AML compliance
Technical Data	IP address, device type, browser type and version, operating system, session timestamps	Platform security; fraud detection; responsible gaming monitoring
Usage Data	Pages visited, games played, bet history, session duration, deposit frequency	Platform improvement; responsible gaming assessments; personalisation
Communications Data	Support chat transcripts, email correspondence, complaint records	Dispute resolution; quality assurance; regulatory record-keeping
Document Data	Copies of national ID card, passport, utility bills, selfie photographs	KYC verification; age confirmation; AML compliance

3. How We Collect Your Data

3.1 Directly From You

The majority of personal data jat77 holds is provided directly by you in the course of using the platform. This includes data entered during account registration, data submitted as part of the KYC verification process (such as identity document uploads), data provided when contacting customer support, and data entered when completing a deposit or withdrawal transaction.

3.2 Automatically Through Your Use of the Platform

When you visit jat77.io or use the jat77 platform, certain technical and usage data is collected automatically by our servers and analytics tools. This includes your IP address, the pages and games you access, the duration of each session, the device and browser you are using, and — where applicable — your approximate geographic location derived from your IP address. This data is collected to maintain platform security, detect fraudulent or multiple-account activity, and improve the overall user experience.

3.3 From Third-Party Service Providers

In some circumstances jat77 may receive data about you from third-party service providers. For example, payment processors such as bKash, Nagad, and Rocket may share transaction status information with jat77 to confirm that a deposit or withdrawal has been completed. Identity verification partners may return verification outcomes following a KYC check. jat77 uses this third-party data solely for the purpose for which it was shared and does not combine it with data collected for unrelated purposes.

4. Purpose and Legal Basis for Processing

jat77 processes personal data only where a valid legal basis exists for doing so. The table below sets out the primary purposes for which we process personal data and the corresponding legal basis.

Processing Purpose	Legal Basis
Creating and managing your jat77 account	Performance of a contract with you
Processing deposits and withdrawals via bKash, Nagad, Rocket, Upay, and bank channels	Performance of a contract with you
Verifying your age and identity (KYC)	Legal obligation; legitimate interests (fraud prevention)
Anti-money laundering (AML) monitoring and reporting	Legal obligation
Responsible gaming monitoring and player protection	Legal obligation; legitimate interests
Fraud detection, security monitoring, and abuse prevention	Legitimate interests
Sending promotional offers and bonus notifications	Consent (opt-in only)
Improving platform performance and user experience	Legitimate interests
Responding to support queries and resolving disputes	Performance of a contract; legitimate interests
Complying with legal requests from competent authorities	Legal obligation

5. How We Share Your Data

5.1 Payment Service Providers

To process your deposits and withdrawals, jat77 shares the minimum necessary financial data with our payment partners, including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, Visa, and Mastercard. Each of these providers operates under its own privacy and security framework. jat77 does not share more data than is required to complete the relevant transaction.

5.2 Game Content Providers

Live casino and slot games on jat77 are delivered by third-party game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive session-level technical data (such as a tokenised player reference and game session ID) to render the game and record the outcome. They do not receive your full name, contact details, or payment information.

5.3 Identity Verification Partners

jat77 uses third-party KYC verification services to check the authenticity of identity documents submitted during account verification. Document data is shared with these providers under strict data processing agreements and is not retained by them beyond the period required to complete the verification check.

5.4 Legal and Regulatory Disclosures

jat77 may be required to disclose personal data to competent legal authorities, law enforcement bodies, or financial intelligence units in response to a valid legal request, court order, or regulatory obligation. In such cases jat77 will disclose only the data specifically required and will, where legally permitted, notify the affected player of the disclosure.

5.5 Business Transfers

In the event that jat77 undergoes a merger, acquisition, restructuring, or sale of assets, personal data held by jat77 may be transferred to the acquiring entity as part of that transaction. Players will be notified of any such transfer and of any material change to this Privacy Policy that results from it.

6. Cookies and Tracking Technologies

6.1 What Are Cookies

Cookies are small text files placed on your device by a website when you visit it. jat77 uses cookies and similar tracking technologies (such as local storage and session tokens) to keep you logged in across pages, remember your preferences, maintain the integrity of your game sessions, and gather aggregate analytics data about how the platform is used.

6.2 Types of Cookies Used

• Essential Cookies: Required for the platform to function. These include session authentication tokens and anti-CSRF security tokens. They cannot be disabled without disrupting core functionality.
• Functional Cookies: Remember your preferences such as language settings and display options. These are used to provide a more personalised experience but are not essential to the platform's operation.
• Analytics Cookies: Collect anonymised aggregate data about page visits, session durations, and feature usage. This data helps jat77 understand how the platform is being used and where improvements can be made.
• Security Cookies: Support fraud detection and help jat77 identify unusual login patterns or potentially compromised accounts.

6.3 Managing Cookies

Most browsers allow you to view, manage, and delete cookies through their privacy or settings menus. Please note that disabling essential cookies may prevent certain features of jat77 from working correctly, including account login and live game sessions. Disabling analytics or functional cookies will not affect your core betting or gaming experience.

7. Data Storage and Security

All personal data collected by jat77 is stored on secure servers protected by industry-standard technical and organisational security measures. These include, but are not limited to:

• 256-bit SSL/TLS encryption for all data in transit between your device and jat77's servers;
• AES-256 encryption for sensitive data fields stored at rest, including identity document files and financial data;
• Role-based access controls limiting the personnel who can access personal data to those with a documented need;
• Regular penetration testing and security audits conducted by independent specialists;
• Multi-factor authentication requirements for all staff with access to player data systems;
• Automated monitoring and alerting for unusual data access patterns or potential security incidents.

Despite these measures, no internet-based system can be guaranteed to be completely impenetrable. In the event of a data breach that is likely to result in a risk to your rights and freedoms, jat77 will notify affected players without undue delay.

8. Data Retention Periods

jat77 retains personal data for the minimum period necessary to fulfil the purpose for which it was collected, subject to any overriding legal or regulatory retention requirement. The following indicative retention periods apply:

• Account and identity data: Retained for the duration of your account plus five (5) years following permanent account closure, in line with standard anti-money laundering record-keeping obligations.
• Transaction records: Retained for seven (7) years from the date of each transaction to satisfy financial record-keeping requirements.
• KYC documents: Retained for five (5) years following account closure or the completion of the last transaction to which the verification relates.
• Support and communication records: Retained for three (3) years following the closure of the relevant support case or complaint.
• Technical and usage logs: Retained for up to twelve (12) months in identifiable form, after which they are anonymised or deleted.
• Marketing consent records: Retained for the duration of your marketing opt-in plus three (3) years to demonstrate compliance with consent obligations.

Once a retention period expires, data is securely deleted using methods that prevent reconstruction, or anonymised such that it can no longer be associated with any identifiable individual.

9. Your Rights Over Your Personal Data

As a player on jat77, you hold a number of rights with respect to the personal data we hold about you. These rights are described below. To exercise any of them, please contact jat77 support at [email protected]. We will acknowledge your request within 48 hours and aim to fulfil it within thirty (30) calendar days.

9.1 Right of Access

You have the right to request a copy of the personal data jat77 holds about you, along with information about the purposes for which it is processed, the categories of data involved, and the third parties to whom it has been disclosed. This is commonly referred to as a Subject Access Request (SAR).

9.2 Right to Rectification

If any of the personal data jat77 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. For some data fields — such as your registered name or date of birth — correction requests may require supporting documentation to be submitted as part of the standard KYC update process.

9.3 Right to Erasure

You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (and no other legal basis applies), or where you object to processing and there are no overriding legitimate grounds. This right is subject to jat77's legal and regulatory retention obligations — data that must be retained under AML or financial record-keeping rules cannot be deleted ahead of the applicable retention period.

9.4 Right to Restrict Processing

In certain circumstances — for example, where you contest the accuracy of data or have objected to its processing — you may request that jat77 restrict the processing of your personal data to storage only, pending resolution of your query.

9.5 Right to Data Portability

Where jat77 processes your personal data on the basis of your consent or a contractual obligation, and the processing is carried out by automated means, you have the right to receive a structured, commonly used, machine-readable copy of the data you provided to jat77. This right covers data such as your account registration details and transaction history.

9.6 Right to Object

You have the right to object to the processing of your personal data where jat77 relies on legitimate interests as the legal basis, including profiling conducted for responsible gaming monitoring purposes. You also have an absolute right to object to the use of your data for direct marketing purposes at any time.

10. Marketing Communications

jat77 sends promotional emails and SMS messages — including bonus offers, seasonal promotions tied to BPL, IPL, T20 World Cup, Eid, Durga Puja, and Pohela Boishakh — only to players who have affirmatively opted in to receive such communications during registration or in their account settings.

You may withdraw your consent to receive marketing communications at any time by:

• Updating your communication preferences in the jat77 account dashboard;
• Clicking the "unsubscribe" link in any marketing email you receive from jat77; or
• Contacting jat77 support directly at [email protected] with a request to be removed from marketing lists.

Please note that withdrawing consent to marketing communications does not affect jat77's ability to send you essential transactional notifications — such as deposit confirmation, withdrawal processing updates, and security alerts — which are sent on the basis of contract performance and cannot be opted out of while your account remains active.

11. Children and Minors

jat77 is strictly an adults-only platform. The minimum age to register and use jat77 is 21 years. jat77 does not knowingly collect personal data from anyone under the age of 21. If we become aware that a minor has registered an account or submitted personal data, we will immediately close the account, void all associated activity, and delete or anonymise the minor's personal data in accordance with our data retention procedures.

If you believe that a minor has registered on jat77, please contact [email protected] immediately so that we can take appropriate action.

12. Third-Party Links and Embedded Content

The jat77 platform may, from time to time, include references to third-party game providers or payment platforms. These entities operate their own privacy policies and data practices, which are entirely independent of jat77's. jat77 is not responsible for the privacy practices of any third-party provider and encourages you to review the privacy policies of any service you interact with directly — for example, when completing a bKash or Nagad transaction through those providers' own interfaces.

13. Changes to This Privacy Policy

jat77 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or the services we offer. Where changes are material — for example, where we introduce a new category of data processing or share data with a new class of third party — we will notify registered players by email and display a prominent notice on the platform for a period of at least fourteen (14) days before the revised Policy takes effect.

Your continued use of jat77 following the publication of a revised Privacy Policy constitutes your acceptance of the updated terms. The "Last Updated" date at the top of this document indicates when the most recent revision was made. We encourage you to review this Policy periodically.

14. Contact Us

If you have any questions about this Privacy Policy, wish to exercise your data rights, or want to report a privacy concern, please contact the jat77 data protection team using the details below. Our support team is available 24 hours a day, seven days a week, every day of the year.

Email: [email protected]

jat77 will acknowledge all privacy-related queries within 48 hours and will provide a substantive response within thirty (30) calendar days. Where a request is particularly complex or involves a high volume of data, we may extend this period by a further thirty (30) days and will notify you accordingly.