rj77 Privacy Policy

1. Data We Collect

When you register for and use an rj77 account, we collect personal data in several categories. The specific data collected depends on how you interact with the rj77 platform — for example, whether you register an account, make a deposit, contact support, or simply browse the site without registering. The following table summarises the categories of personal data rj77 collects and the primary source of each category.

1.1 Data We Do Not Collect

rj77 does not intentionally collect sensitive personal data beyond what is required for identity verification and responsible gaming compliance. Specifically, rj77 does not collect racial or ethnic origin data, political opinions, religious beliefs, biometric data (other than a photograph on an identity document submitted for KYC), or health data (other than voluntary problem gambling disclosures made by the player through the responsible gaming tools). rj77 does not collect data from individuals who have not actively registered on the platform.

2. How We Use Your Data

rj77 processes your personal data only where we have a lawful basis for doing so. The lawful bases on which rj77 relies are: (a) contractual necessity — processing required to fulfil our obligations under the Player Agreement; (b) legal obligation — processing required to comply with applicable laws, including anti-money laundering (AML) and know-your-customer (KYC) regulations; (c) legitimate interests — processing that is necessary for our legitimate business interests where those interests are not overridden by your rights; and (d) consent — processing based on your freely given, specific, informed consent, which you may withdraw at any time.

2.1 Purposes of Processing

• Account registration and management: Creating and maintaining your rj77 account, verifying your identity, processing deposits and withdrawals, and providing access to the rj77 platform.
• Transaction processing: Processing deposits via bKash, Nagad, Rocket, Upay, bank transfer, Visa, and Mastercard; processing withdrawal requests; detecting and preventing payment fraud.
• KYC and AML compliance: Verifying your identity and age in accordance with applicable international AML standards; screening against sanctions lists; reporting suspicious transactions to competent authorities where legally required.
• Customer support: Responding to your queries, resolving disputes, providing live chat assistance, and maintaining records of support interactions for quality and training purposes.
• Responsible gaming: Administering self-exclusion requests, deposit limits, time-out periods, and other responsible gaming tools; monitoring account activity for signs of problem gambling behaviour.
• Platform improvement and analytics: Analysing aggregate user behaviour data (page views, session duration, game preference) to improve the rj77 platform experience. This analysis uses anonymised or aggregated data where possible.
• Security and fraud prevention: Detecting unusual login patterns, preventing account takeover attacks, identifying and investigating bonus abuse, and protecting the integrity of the rj77 platform.
• Marketing communications: Sending you promotional emails or SMS messages about rj77 bonuses, new games, and seasonal offers — but only where you have provided explicit consent. You may unsubscribe at any time by contacting [email protected] or using the unsubscribe link in any marketing email.
• Legal and regulatory compliance: Retaining records as required by applicable law; responding to lawful requests from regulatory authorities, courts, or law enforcement agencies.

3. Data Sharing & Third Parties

rj77 does not sell your personal data to third parties. However, in order to operate the rj77 platform effectively and comply with our legal obligations, we share certain categories of personal data with trusted third-party service providers and regulatory bodies under strictly controlled conditions. All third parties with whom rj77 shares data are required to handle that data in accordance with applicable data protection standards and the terms of a data processing agreement with rj77.

3.1 Categories of Third Parties

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, and Mastercard receive financial transaction data necessary to process your deposits and withdrawals. Each payment provider operates under its own privacy policy and is independently responsible for data processed through their payment infrastructure.
• Identity verification (KYC) providers: rj77 uses licensed third-party KYC and AML screening services to verify player identities and screen against international sanctions lists. These providers process your identity document data and return a verification result; they do not retain your data beyond what is required for their compliance obligations.
• Game content providers: Game studios including Pragmatic Play, Evolution Gaming, PG Soft, JILI, Spribe, Ezugi, Microgaming, and NetEnt operate game servers that process certain session data (bet amounts, game outcomes, session identifiers) in order to deliver game content. These providers are independently licensed and subject to their own data protection frameworks.
• Cloud hosting and infrastructure providers: rj77 uses reputable cloud infrastructure providers to host our platform. Server-side personal data stored on these providers' infrastructure is encrypted and subject to strict access controls.
• Customer support platform: Our live chat and ticketing system is operated by a third-party support platform. Support conversation data (chat transcripts, email threads) is stored on this platform and retained in accordance with this Privacy Policy's data retention rules.
• Analytics providers: rj77 uses privacy-first analytics tools to understand aggregate platform usage. Where analytics tools are used, they are configured to anonymise IP addresses and not to cross-reference rj77 user data with external advertising profiles.
• Regulatory and law enforcement authorities: rj77 will disclose personal data to regulatory authorities, financial intelligence units, or law enforcement agencies where we are legally required to do so — for example, in response to a court order, regulatory investigation, or AML reporting obligation. rj77 will notify affected players of such disclosures where permitted by law.

4. Cookies & Tracking Technologies

rj77 uses cookies and similar tracking technologies on our website and mobile platform. A cookie is a small text file stored on your device by your browser when you visit a website. Cookies allow rj77 to recognise your device, maintain your session, and remember your preferences across visits. The following table describes the categories of cookies rj77 uses.

4.1 Managing Cookies

You can control and manage cookies through your browser settings. Most modern browsers allow you to view, block, or delete cookies stored on your device. Please note that disabling strictly necessary cookies will prevent core rj77 platform features — including login, deposit, and game access — from functioning correctly. rj77 does not use third-party advertising cookies, retargeting pixels, or social media tracking scripts on its platform.

To manage cookies in your browser, refer to the help documentation for your specific browser (Chrome, Firefox, Safari, Edge, or Opera). For questions about rj77's specific cookie implementation, contact [email protected].

5. Data Retention

rj77 retains personal data for only as long as is necessary for the purposes for which it was collected, or as required by applicable law. The following retention periods apply as a baseline. Specific legal or regulatory obligations may require rj77 to retain certain categories of data for longer periods — in such cases, the longer period will apply.

When personal data is no longer required and no legal retention obligation applies, rj77 securely deletes or anonymises that data. Anonymised data (from which no individual can be identified) may be retained indefinitely for aggregate statistical purposes.

6. Data Security

rj77 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our security posture is reviewed regularly and updated in response to evolving threats.

6.1 Technical Security Measures

• TLS 1.3 encryption in transit: All data transmitted between your device and the rj77 platform is encrypted using TLS 1.3, the current industry standard for secure web communications.
• AES-256 encryption at rest: All personal data stored in rj77's databases — including identity documents, financial records, and account credentials — is encrypted at rest using AES-256.
• Two-factor authentication (2FA): rj77 offers 2FA for all player accounts. Players are strongly encouraged to enable 2FA from their account security settings.
• Intrusion detection and monitoring: rj77's infrastructure is monitored 24/7 for unusual access patterns, brute-force login attempts, and other indicators of compromise.
• Firewall and DDoS protection: rj77's platform is protected by enterprise-grade firewall rules and DDoS mitigation services to ensure availability and protect against network-level attacks.
• Penetration testing: rj77 conducts periodic third-party penetration testing of its platform to identify and remediate security vulnerabilities before they can be exploited.

6.2 Organisational Security Measures

• Access to personal data is restricted to rj77 staff and contractors on a strict need-to-know basis.
• All rj77 personnel with access to personal data undergo data protection training and are bound by confidentiality obligations.
• Internal access to production databases is logged and audited. Privileged access requires multi-factor authentication.
• rj77 maintains an incident response plan that includes procedures for detecting, containing, and notifying affected parties in the event of a data breach.

6.3 Data Breach Notification

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, rj77 will notify affected players without undue delay — and in any case within 72 hours of becoming aware of the breach — by email to the address registered on your rj77 account. The notification will describe the nature of the breach, the categories of data affected, the likely consequences, and the steps rj77 is taking to address the breach and mitigate its effects.

7. Your Privacy Rights

As an rj77 player, you have the following rights in relation to the personal data we hold about you. These rights may be subject to certain limitations — for example, where complying with a request would require rj77 to breach a legal obligation or where data is required for legitimate fraud prevention purposes. rj77 will respond to all valid rights requests within 30 days of receipt.

To exercise any of the rights listed above, contact rj77's Data Protection Officer by email at [email protected], subject line "Privacy Rights Request". Please include your registered account email address and a brief description of your request. rj77 may ask you to verify your identity before processing your request to protect against unauthorised access to your data.

8. Contact & Data Protection Officer

rj77 has appointed a Data Protection Officer (DPO) who is responsible for overseeing this Privacy Policy and ensuring that rj77's data processing activities comply with applicable data protection standards. If you have any questions, concerns, or requests relating to this Privacy Policy or the way rj77 handles your personal data, please contact the DPO using the details below.

8.1 Policy Updates

rj77 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable law, or improvements to the rj77 platform. When we make material changes to this Policy, we will notify registered players by email to the address on their rj77 account and will update the "Effective Date" at the top of this page. We encourage you to review this Privacy Policy periodically to stay informed about how rj77 protects your personal data.

Continued use of the rj77 platform after the effective date of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with any changes to this Policy, you should discontinue use of the rj77 platform and may request deletion of your account and associated personal data by contacting [email protected].

8.2 Governing Language

This Privacy Policy is written in English. In the event of any conflict or inconsistency between this English-language Privacy Policy and any translation, the English version shall prevail. This Policy is governed by and construed in accordance with the laws applicable to rj77's operating jurisdiction. rj77 is an internationally licensed platform committed to fair play, data protection, and responsible gaming for all players in Bangladesh and beyond.