rj77 Privacy Policy

This Privacy Policy ("Policy") describes how rj77 ("we", "us", "our", "the Platform") collects, processes, stores, and protects the personal information of individuals ("you", "your", "Account Holder", "Player") who access or use the rj77 website and online gaming services at rj77.io.

rj77 is committed to handling your personal data responsibly, transparently, and in accordance with applicable data protection principles. By registering an account on the rj77 Platform, you acknowledge that you have read, understood, and agreed to the data practices described in this Policy. If you do not agree with any part of this Policy, you should not register an account or continue to use the Platform.

This Policy should be read in conjunction with the rj77 Terms and Conditions, which govern your use of the Platform as a whole. Defined terms used in this Policy that are not separately defined herein have the same meaning as in the Terms and Conditions.

For the purposes of this Privacy Policy, rj77 acts as the data controller in respect of all personal information collected from Account Holders and visitors to the Platform. As the data controller, rj77 determines the purposes for which personal data is processed and the means by which that processing is carried out.

If you have any questions, concerns, or requests relating to the way rj77 handles your personal data, you may contact our designated data support team directly at [email protected]. Please note that this email address is provided as plain text only and is not a clickable link.

rj77 collects personal information from you in several ways — through the account registration process, through your ongoing use of the Platform, through identity verification procedures, through payment transactions, and through your interaction with our customer support team. The categories of personal data we collect are described below.

rj77 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data (beyond facial identification for KYC where required), or health information, except where specifically required by applicable law or anti-money laundering obligations.

rj77 uses the personal data it collects for specific, defined purposes. We do not process your data in ways that are incompatible with the purposes for which it was originally collected. The primary purposes for which we use your data are:

• Account Registration and Management: To create, administer, and maintain your rj77 account, verify your identity, and communicate essential account-related information to you.
• Payment Processing: To facilitate deposits and withdrawals via bKash, Nagad, Rocket, Upay, and other supported payment methods, and to maintain accurate transaction records in BDT (৳).
• KYC and Identity Verification: To verify your identity in compliance with anti-money laundering (AML) and counter-financing of terrorism (CFT) obligations applicable to online gaming platforms operating in Bangladesh.
• Platform Security and Fraud Prevention: To detect, investigate, and prevent fraudulent activity, bonus abuse, money laundering, account takeover attempts, and other prohibited conduct on the Platform.
• Game Delivery and Personalisation: To deliver casino games, sports betting markets, and VIP Program features to you, and to personalise your lobby experience based on your gameplay preferences and tier status.
• Customer Support: To respond to your queries, process complaints, handle disputes, and provide the 24/7 support service available in Bangladesh Standard Time (UTC+6).
• Responsible Gaming: To monitor gameplay patterns for indicators of problem gambling, to enforce deposit limits and self-exclusion requests you have set, and to proactively reach out where our responsible gaming systems flag a concern.
• Legal and Regulatory Compliance: To comply with applicable legal obligations, respond to lawful requests from regulatory or law enforcement authorities, and maintain records as required by applicable law.
• Marketing Communications: To send you promotional offers, bonus notifications, and tournament announcements by email or SMS, where you have provided your consent to receive such communications. You may withdraw consent at any time by contacting [email protected].

rj77 processes your personal data on one or more of the following legal bases, depending on the specific purpose for which the data is used:

• Contractual Necessity: Processing is necessary to perform the contract between you and rj77 — specifically, to provide the online casino and sports betting services you have registered for, to process payments, and to manage your account.
• Legal Obligation: Processing is necessary for rj77 to comply with applicable legal obligations, including KYC/AML verification requirements and the retention of financial transaction records.
• Legitimate Interests: Processing is necessary for rj77's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and improving the quality of our services, where those interests are not overridden by your data protection rights.
• Consent: Where we rely on consent as the legal basis for processing — such as for direct marketing communications — we will obtain your explicit consent before processing. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

rj77 does not sell, rent, or transfer your personal data to third parties for their own marketing or commercial purposes. We share your personal data only in the following defined circumstances:

• Game Providers: Certified third-party game studios including Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, and Ezugi receive limited technical data (such as a pseudonymous account identifier and session token) that is necessary to deliver their games to you within the rj77 Platform. These providers do not receive your full identity data.
• Payment Processors: Mobile financial service providers including bKash, Nagad, Rocket, and Upay receive the transaction data necessary to process your deposits and withdrawals. Payment data is shared solely for the purpose of completing the requested financial transaction.
• KYC and Fraud Prevention Partners: rj77 may use accredited third-party identity verification services to validate government-issued identity documents submitted during KYC. These partners process identity data solely for verification purposes under contractual confidentiality obligations.
• Legal and Regulatory Authorities: rj77 may disclose personal data to law enforcement agencies, financial intelligence units, or other regulatory authorities where required to do so by applicable law, court order, or lawful government request. We will only disclose the minimum data necessary to fulfil such obligations.
• Business Transfers: In the event of a merger, acquisition, or sale of all or substantially all of the assets of rj77, your personal data may be transferred to the acquiring entity as part of that transaction. Affected Account Holders will be notified in advance of any such transfer.

The rj77 Platform uses cookies and similar tracking technologies to deliver a functional, secure, and personalised experience to all Account Holders. Cookies are small text files stored on your browser or device when you visit the Platform. The types of cookies rj77 uses are described below:

• Strictly Necessary Cookies: These cookies are essential for the Platform to function correctly. They enable core features such as account login sessions, security token validation, and responsive page rendering. These cookies cannot be disabled without severely impairing your ability to use the Platform.
• Functional Cookies: These cookies remember your preferences — such as your chosen display language, game lobby sort order, and responsible gaming settings — so that the Platform behaves consistently across sessions.
• Analytics Cookies: rj77 uses aggregated analytics data to understand how Account Holders interact with the Platform, which game categories are most popular, and where users encounter friction in account or payment flows. This data is processed in pseudonymised form and is not used to identify individual users.
• Security Cookies: rj77 employs security-focused cookies to detect unusual access patterns, potential account takeover attempts, and other suspicious technical activity in real time.

You may configure your browser to block or delete cookies at any time. However, disabling strictly necessary cookies will prevent you from logging into your rj77 account or using core Platform features. Blocking functional or analytics cookies will not prevent basic Platform use but may result in a less personalised experience.

rj77 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with you as an individual. Where anonymisation is applied, the resulting anonymised data may be retained indefinitely for aggregated analytics purposes.

rj77 implements a layered set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include, but are not limited to:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the rj77 Platform is encrypted using industry-standard Transport Layer Security (TLS) protocols. This applies to account login, payment transactions, and all API communications with Game Providers.
• Encrypted Data Storage: Personal and financial data stored in rj77's database infrastructure is encrypted at rest using AES-256 encryption. Database access is restricted to authorised personnel on a strict need-to-know basis.
• Two-Factor Authentication (2FA): rj77 strongly encourages all Account Holders to enable OTP-based two-factor authentication on their account. Administrative access to rj77's internal systems requires 2FA for all staff.
• Intrusion Detection and Monitoring: rj77's security infrastructure includes continuous intrusion detection monitoring, automated anomaly alerts, and regular third-party penetration testing to identify and remediate vulnerabilities.
• Access Controls: Internal access to personal data is governed by role-based access controls. Staff members access only the data necessary to perform their specific job function, and all access events are logged for audit purposes.

As an individual whose personal data is processed by rj77, you hold a number of important rights in relation to that data. rj77 is committed to facilitating the exercise of these rights promptly and without creating unnecessary barriers. Your rights are described below:

To exercise any of the above rights, please submit your request in writing to [email protected]. rj77 will acknowledge your request within 5 business days and aim to fulfil it within 30 calendar days. We may ask you to verify your identity before processing a data rights request in order to protect your account from unauthorised access.

The rj77 Platform is strictly intended for adults aged 21 years and above. rj77 does not knowingly collect, process, or store the personal data of any individual under the age of 21. Registration on the Platform by a person under this age is a direct violation of the rj77 Terms and Conditions and is prohibited without exception.

If rj77 becomes aware that personal data belonging to an individual under the age of 21 has been collected through the Platform — whether through misrepresentation during registration or any other means — we will take immediate steps to close the relevant account, delete the associated personal data, and reverse any financial transactions where technically feasible.

If you believe that a minor has registered an account on the rj77 Platform, please notify us immediately at [email protected] so that the matter can be investigated and resolved without delay.

The rj77 Platform may, from time to time, contain references to third-party game providers or payment services. While rj77 takes care to work only with reputable partners, we do not control the privacy practices of those third parties and are not responsible for the content or data handling practices of any third-party service.

Where the Platform integrates with third-party services — such as a Game Provider's live casino studio — data shared with that provider is governed by the data sharing provisions in Section 6 of this Policy and by the applicable contractual arrangements between rj77 and that provider. We encourage you to review the privacy documentation of any third-party service you interact with independently.

rj77 reserves the right to update or amend this Privacy Policy at any time in response to changes in applicable law, developments in our data processing practices, or enhancements to the rj77 Platform. Where changes are material — meaning they significantly affect your rights or the way your data is used — rj77 will notify you via the email address registered to your account and will post a prominent notice on the Platform for a period of no less than 14 days before the changes take effect.

The effective date at the top of this document will be updated each time a new version is published. Your continued use of the Platform after the effective date of any revised Policy constitutes your acceptance of the updated terms. If you do not agree with the revised Policy, you should cease using the Platform and may request account closure in accordance with the Terms and Conditions.

rj77 recommends that Account Holders review this Privacy Policy periodically — particularly ahead of any major seasonal promotions such as the BPL cricket season, Eid, or Pohela Boishakh festival periods, when platform activity typically increases significantly.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a concern about the way rj77 processes your personal information, please contact our data support team using the details below.

rj77 is committed to handling all privacy-related queries with the same level of care and transparency that we apply to our Platform operations. No query relating to your personal data rights will go unanswered.