Privacy Policy — cj777 Protects Your Data

cj777 ("the Company", "we", "us", "our") operates the online betting and gaming platform accessible at cj777.io and any associated mobile applications or APIs (collectively, "the Platform"). This Privacy Policy describes how cj777 collects, processes, stores, shares, and protects the personal data of every individual who accesses or registers on the Platform, including players based in Bangladesh and any other jurisdiction from which the Platform is accessible.

This policy applies to all personal data processing activities carried out by cj777 in connection with:

• Account registration and identity verification (KYC)
• Deposits and withdrawals via mobile wallets (bKash, Nagad, Rocket, Upay) and bank transfers
• Sports betting activity, live casino sessions, slot play, and crash game participation
• Customer support interactions via live chat, email, and WhatsApp
• Marketing communications and promotional activities (where consented)
• Fraud prevention, anti-money laundering (AML), and responsible gaming monitoring
• Website and app analytics, performance monitoring, and user experience optimisation

This policy does not apply to third-party websites, payment processors, or game studio platforms that may be linked to or embedded within cj777. Those third parties operate their own independent privacy frameworks, and we encourage you to review their respective policies before submitting any personal information to them.

If you are under 21 years of age, you are not permitted to use the cj777 Platform. We do not knowingly collect personal data from individuals under the age of 21. If we become aware that a minor has submitted personal data, we will promptly delete it and close the associated account.

cj777 collects personal data through several channels: directly from you when you register or interact with the Platform, automatically through technical systems as you use the Platform, and occasionally from third-party sources such as payment providers and identity verification agencies. The categories of data we collect are as follows:

• Full legal name as it appears on your government-issued identification
• Date of birth (used to verify the 21+ age requirement)
• Email address and mobile phone number
• Residential address (city, district, Bangladesh postal code)
• Username and encrypted account password
• Preferred language and communication settings

• Scanned or photographed copies of National ID Card, Passport, or Driver's Licence
• Proof of address documents (utility bills, bank statements dated within 3 months)
• Selfie photographs (sometimes holding the ID document) for liveness checks
• Mobile wallet or bank account screenshots confirming account ownership

• Deposit and withdrawal amounts, dates, and currency (BDT / ৳)
• Payment method identifiers (bKash number, Nagad number, bank account reference)
• Transaction status, processing timestamps, and confirmation references
• Source-of-funds declarations where requested

• Complete bet history including markets selected, stake amounts, odds, and settlement outcomes
• Casino game session logs (game title, provider, session duration, wager, result)
• Bonus claims, wagering progress, and promotion participation records
• Responsible gaming tool activations (deposit limits, self-exclusion requests, time-out periods)

• IP address and approximate geolocation derived from IP
• Device type, operating system, browser type, and screen resolution
• Session tokens, login timestamps, and session duration
• Referring URL, entry page, and navigation path within the Platform

• Live chat transcripts with our support team
• Email correspondence sent to or from [email protected]
• WhatsApp messages exchanged with our support number (+880 1700-000777)
• Survey responses and feedback submissions

cj777 processes your personal data only for specific, legitimate purposes directly connected to the operation of the Platform and the services we provide to Bangladesh players. We do not use your data for any purpose that is incompatible with the purposes described below:

cj777 will never sell your personal data to third-party advertisers, data brokers, or any other commercial entities for their own marketing purposes. Your data is an asset entrusted to us — not a commodity.

cj777 processes your personal data under the following legal bases, which are applied depending on the specific purpose of processing:

• Contractual Necessity: The majority of our data processing is necessary to perform the contract between you and cj777 — specifically, to operate your account, process your bets, handle deposits and withdrawals, and provide the gaming services you have signed up for. Without this processing, we cannot deliver the Platform to you.
• Legal Obligation: We process certain data to comply with applicable legal requirements, including KYC and anti-money laundering obligations, age verification mandates, and financial record-keeping requirements. This processing occurs regardless of your preferences.
• Legitimate Interests: We process technical data, device data, and aggregated analytics under our legitimate business interest in preventing fraud, maintaining platform security, and improving the service we offer to Bangladesh players. We conduct a balancing test to ensure these interests do not override your privacy rights.
• Consent: Where we send direct marketing communications (bonus offers, promotional emails, SMS campaigns), we rely on your freely given, specific, and informed consent. You may withdraw consent to marketing communications at any time by contacting us at [email protected] or using the unsubscribe mechanism in any marketing email. Withdrawal of marketing consent does not affect other processing activities based on different legal bases.

cj777 does not sell, rent, or trade your personal data. We share your data only with carefully vetted third-party service providers who assist us in operating the Platform, and only to the extent strictly necessary for the purpose of that engagement. All third-party data recipients are bound by contractual data processing agreements that prohibit them from using your data for any purpose beyond the specific service they perform for cj777.

The categories of third parties with whom we share data are:

• Payment Processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank, Visa, and Mastercard — to facilitate your deposits and withdrawals in BDT. These providers receive only the minimum data required to process each transaction.
• Identity Verification (KYC) Providers: Specialist third-party identity verification agencies that assist us in confirming the authenticity of KYC documents and conducting liveness checks.
• Game Studio Providers: Evolution Gaming, Pragmatic Play, Ezugi, Microgaming, Spribe, and other licensed studio operators whose games are embedded within the cj777 Platform. These providers receive session identifiers and wager data necessary to operate their games.
• Fraud Prevention and AML Tools: Specialist providers that help us screen transactions and player behaviour for signs of financial crime or fraudulent activity.
• Customer Support Infrastructure: Live chat platform providers and email hosting services that power our 24/7 support capability.
• Analytics Providers: Aggregated, anonymised usage data may be shared with platform analytics tools to measure user engagement and performance benchmarks. No individually identifiable data is used in these reports.
• Legal and Regulatory Authorities: Where required by applicable law, a valid court order, or a legitimate regulatory inquiry, we may disclose personal data to law enforcement agencies, financial regulators, or other government bodies. We will notify you of such disclosure where we are legally permitted to do so.

In the event of a merger, acquisition, or sale of substantially all assets of cj777, your personal data may be transferred to the acquiring entity. We will notify affected users in advance of any such transfer and ensure that the same privacy protections are maintained.

cj777 uses cookies and similar tracking technologies to ensure the Platform functions correctly, to remember your preferences, and to analyse how players use the site. A cookie is a small text file placed on your device by a web server. Cookies do not contain executable code and cannot access other files stored on your device.

We use the following categories of cookies:

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication tokens that keep you logged in, security cookies that prevent cross-site request forgery, and load-balancing cookies. These cookies cannot be disabled without impairing your ability to use the Platform.
• Functional Cookies: Remember your preferences such as selected language, preferred payment method, and display settings. These improve your experience but are not essential to core functionality.
• Analytics Cookies: Help us understand how visitors navigate the Platform, which pages are most popular, and where users encounter difficulties. We use this data in aggregate form to improve site structure and game categorisation. No individually identifiable information is extracted from analytics cookies.
• Security and Fraud-Detection Cookies: Used by our fraud prevention systems to detect bot activity, credential stuffing attacks, and suspicious login patterns. These protect your account and the integrity of the Platform.

Most web browsers accept cookies by default, but you can configure your browser to block or delete cookies at any time. Please note that disabling strictly necessary cookies may prevent you from logging into your cj777 account or completing payment transactions. Settings for managing cookies are available in your browser's privacy or security preferences menu.

cj777 does not use cookies or tracking pixels to serve targeted third-party advertising. We do not participate in cross-site behavioural advertising networks.

cj777 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. The following retention schedule applies:

Once data reaches the end of its retention period, it is securely deleted or anonymised. Anonymised data (from which you cannot be individually identified) may be retained indefinitely for statistical and analytical purposes. If you request account closure, we will initiate deletion of non-legally-required data within 30 days of the closure date.

cj777 implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security framework includes the following controls:

• 256-Bit SSL/TLS Encryption: All data transmitted between your device and the cj777 Platform is encrypted using 256-bit SSL/TLS protocols. Look for the padlock icon and "https://" in your browser address bar on every cj777 page.
• Data Encryption at Rest: Sensitive personal data stored in our databases — including KYC documents, payment method references, and account credentials — is encrypted at rest using AES-256 encryption.
• Password Hashing: Account passwords are never stored in plain text. We use one-way cryptographic hashing (bcrypt) with unique per-account salts, meaning even internal staff cannot view your password.
• Access Controls: Access to personal data is restricted on a strict need-to-know basis. Internal team members are granted only the minimum data access required for their specific role. All access is logged and audited.
• Two-Factor Authentication (2FA): Players are encouraged to enable 2FA on their cj777 accounts for an additional layer of login security. 2FA is mandatory for all internal staff accounts.
• Penetration Testing: cj777 conducts regular third-party security assessments and penetration tests to identify and remediate potential vulnerabilities before they can be exploited.
• Incident Response: In the event of a confirmed data breach that poses a risk to your rights and freedoms, cj777 will notify affected users without undue delay and no later than 72 hours after becoming aware of the breach, providing details of the type of data affected, likely consequences, and remedial actions taken.

While we maintain robust security practices, no system is entirely impenetrable. You also play a role in protecting your account — use a strong, unique password for cj777 that you do not use on any other service, and never share your login credentials with anyone. cj777 staff will never ask for your password.

As a cj777 player, you have the following rights with respect to your personal data. To exercise any of these rights, please contact our Data Protection team at [email protected] with the subject line "Data Rights Request — [Your Account Username]":

cj777 is strictly an adult-only Platform. Access is limited to individuals who are 21 years of age or older. We do not knowingly solicit, collect, or process personal data from anyone under the age of 21. This restriction is enforced through mandatory KYC age verification at the point of first withdrawal and, at our discretion, at the point of registration.

If you are a parent or guardian and believe that your child or a minor in your care has created a cj777 account or submitted personal data to us, please contact us immediately at [email protected] with the subject line "Minor Account Report". We will investigate promptly, close the relevant account, delete all associated personal data, and reverse any financial transactions to the greatest extent possible.

cj777 does not direct any marketing communications, promotional materials, or advertising towards individuals under the age of 21. Our advertising placements are managed to target adult audiences only. We support the use of parental control software and third-party tools that can be used to restrict access to online gambling platforms within household devices.

cj777 operates internationally and, as a result, your personal data may be transferred to, stored in, and processed in countries other than Bangladesh. This may occur when data is shared with game studio providers (such as Evolution Gaming or Pragmatic Play), cloud infrastructure providers, or KYC verification agencies whose servers are located outside Bangladesh.

Whenever personal data is transferred outside Bangladesh, cj777 implements appropriate safeguards to ensure that your data receives an equivalent level of protection regardless of where it is processed. These safeguards include:

• Contractual data transfer agreements with all international data recipients that impose binding data protection obligations equivalent to those applied within Bangladesh
• Transfer only to service providers who maintain internationally recognised security certifications (ISO 27001, SOC 2 Type II, or equivalent)
• Data minimisation principles — only the minimum data required for the specific service is transferred internationally; sensitive KYC documents are handled with additional access restrictions

By registering an account on cj777 and accepting this Privacy Policy, you acknowledge and consent to the international transfer of your personal data as described in this clause. If you have questions about the specific countries to which your data may be transferred, contact us at [email protected].

cj777 reserves the right to amend this Privacy Policy at any time to reflect changes in our data practices, updates to applicable law, or modifications to the services we offer. When material changes are made, we will:

• Update the "Last Updated" date displayed at the top of this page
• Display a prominent notice on the cj777 homepage and Platform dashboard for a minimum of 14 days following the update
• Send an in-platform notification or email to all registered account holders where the changes are substantive enough to affect their rights or expectations

Your continued use of the cj777 Platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with any amendment, you must stop using the Platform and may request account closure by contacting our support team. Minor, non-material updates (such as correcting typographical errors or clarifying existing practices without changing their substance) may be made without formal notice.

We recommend reviewing this Privacy Policy periodically — at minimum once every six months — to stay informed about how cj777 protects your personal data. Archived versions of prior Privacy Policy documents are available on request from our support team.

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way cj777 handles your personal data, or if you wish to exercise any of your data rights described in Section 9, please reach out to us through any of the following channels:

• Email: [email protected] — use the subject line "Privacy Enquiry" or "Data Rights Request — [Your Username]" for fastest routing to our data protection team.
• Live Chat: Available 24/7 directly on the cj777 Platform. Identify yourself and state that your query relates to a privacy or data protection matter.
• WhatsApp: +880 1700-000777 — available during Bangladesh Standard Time (BST, UTC+6) business hours for initial triage of privacy requests.

We aim to acknowledge all data rights requests within 48 hours (Bangladesh Standard Time) and to resolve them fully within 30 calendar days of receipt. For complex requests that require additional verification or coordination with third-party data processors, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it.

Please note that to protect your privacy and security, we are required to verify your identity before processing any data rights request. You may be asked to confirm your registered email address, mobile number, and a form of identification before we can action your request.