jo77 Privacy Policy

This Privacy Policy ("Policy") describes how jo77 ("the Platform", "we", "us", "our") collects, uses, stores, and shares personal data relating to individuals ("Player", "User", "you", "your") who access or use the jo77 website at jo77.io and all associated services, features, games, and betting markets.

jo77 operates as an international offshore online gaming and sports betting platform serving players in Bangladesh and other jurisdictions. We are committed to protecting your privacy and maintaining the confidentiality of the personal information you entrust to us. This Policy has been drafted to be clear, specific, and honest about our data practices — without unnecessary legal obfuscation.

This Policy should be read alongside our Terms & Conditions and our Responsible Gaming policy, both of which form part of the overall agreement between you and jo77.

This Policy was last updated and became effective on 1 January 2026. When we make material changes, we will update the effective date and, where practicable, notify registered players via the email address on file.

jo77 collects personal data through several channels — directly from you at registration and during platform use, automatically through your device and browser, and occasionally from third-party verification partners. The categories of data we collect include:

2.1 Registration & Account Data

• Full legal name
• Date of birth (for age verification — players must be 21 or older)
• Email address
• Mobile number
• Residential address (city, district, country)
• Username and encrypted password
• Preferred currency (Bangladeshi Taka, ৳)

2.2 Identity Verification (KYC) Data

• Government-issued photo identification (National ID card, passport, or driving licence)
• Proof of address documents
• Proof of payment method ownership (e.g., screenshot of bKash or Nagad account)
• Selfie or liveness check images where required

2.3 Financial & Transaction Data

• Deposit and withdrawal amounts and timestamps
• Payment method identifiers (e.g., last four digits of a mobile wallet number)
• Account balance history
• Bonus and promotion usage records

2.4 Gameplay & Betting Data

• Games played and betting markets accessed
• Wager amounts, results, and session durations
• Responsible gaming tool usage (deposit limits, self-exclusion requests)

2.5 Technical & Device Data

• IP address and approximate geolocation (country and city level)
• Device type, operating system, and browser version
• Session timestamps and duration
• Cookie identifiers and usage analytics data (see Section 7)

2.6 Communications Data

• Support ticket content and response history
• Live chat transcripts (where applicable)
• Email correspondence with the jo77 team

jo77 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or biometric data beyond identity verification photographs required for KYC compliance.

The table below summarises the primary purposes for which jo77 uses the personal data it collects, together with the category of data used for each purpose.

jo77 does not use automated decision-making systems that produce legal or similarly significant effects for players without human review, except where required by anti-money laundering screening systems mandated by applicable law.

jo77 processes personal data on the following legal grounds, depending on the purpose of processing:

• Contractual Necessity: Processing required to fulfil our contract with you — including account management, payment processing, and game delivery — is carried out on the basis that it is necessary for the performance of the agreement between you and jo77.
• Legal Obligation: Certain processing activities — particularly KYC identity verification, anti-money laundering record-keeping, and fraud reporting — are carried out to comply with applicable legal and regulatory obligations.
• Legitimate Interests: jo77 processes some data on the basis of its legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and aggregate usage analytics. We ensure that these interests do not override your fundamental privacy rights.
• Consent: Where we send you marketing communications or deploy non-essential cookies, we do so on the basis of your freely given, specific, and informed consent. You may withdraw this consent at any time without affecting the lawfulness of prior processing.

jo77 does not sell, rent, or otherwise commercialise your personal data. We share data only in the limited circumstances described below, and only to the extent necessary for the stated purpose:

• Payment Processors: To process deposits and withdrawals, we share relevant transaction data with payment service providers including bKash, Nagad, Rocket, Upay, and selected banking partners. These providers operate under their own privacy policies and applicable financial services regulations.
• KYC & Identity Verification Partners: To fulfil our age verification and anti-money laundering obligations, we may share identity documents and personal data with licensed third-party KYC verification service providers.
• Game Content Providers: To deliver third-party game content (including from Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi), certain session and account data is shared with those providers under data processing agreements. These providers do not use the data for their own marketing purposes.
• Fraud Prevention & Security Services: We may share technical and transactional data with fraud detection platforms to identify and prevent suspicious activity on the jo77 platform.
• Legal Authorities: Where required by applicable law, court order, or regulatory instruction, jo77 may disclose personal data to competent governmental or law enforcement authorities.
• Business Transfers: In the event of a merger, acquisition, or sale of all or substantially all of the jo77 platform, player data may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy.

All third-party data processors engaged by jo77 are required to handle personal data securely, use it only for the specified purpose, and comply with the data protection standards set out in their contractual agreements with jo77.

jo77 retains personal data for as long as is necessary to fulfil the purposes described in this Policy, or as required by applicable legal and regulatory obligations. The general retention periods applied by jo77 are as follows:

• Active Account Data: Retained for the duration of your active account relationship with jo77.
• Closed Account Data: Following account closure, core account and transaction records are retained for a minimum of five (5) years to satisfy anti-money laundering and financial record-keeping requirements.
• KYC Documents: Identity verification documents are retained for a minimum of five (5) years from the date of verification, in line with standard AML compliance obligations.
• Support Communications: Customer support records are retained for three (3) years from the date of the interaction, or longer if the matter relates to an ongoing dispute or legal proceeding.
• Technical & Device Logs: System logs and IP address records are retained for up to twelve (12) months, unless extended retention is required for an active security investigation.
• Marketing Consent Records: Records of your consent to marketing communications (or withdrawal of that consent) are retained for the duration of your account relationship and five (5) years thereafter.

When data is no longer required and no legal obligation mandates its retention, jo77 will securely delete or anonymise it in accordance with our internal data lifecycle procedures.

jo77 uses cookies and similar tracking technologies on the jo77.io website. Cookies are small text files placed on your device that allow the website to recognise your browser and remember certain information across sessions.

7.1 Types of Cookies We Use

7.2 What We Do Not Use Cookies For

jo77 does not deploy third-party advertising cookies, social media tracking pixels, or behavioural profiling cookies that share your browsing data with external advertising networks. We do not use retargeting technologies that follow you across the web after leaving jo77.io.

7.3 Managing Cookies

You may manage or disable cookies via your browser settings at any time. Please note that disabling essential cookies will prevent certain core functions of the jo77 platform — including login session maintenance — from working correctly. Disabling analytics or functional cookies will not affect your ability to access games or your account.

As a player on the jo77 platform, you hold the following rights over your personal data. All requests should be submitted to [email protected] with the subject line "Data Rights Request" and must include sufficient identification to allow us to verify your identity before processing the request.

• Right of Access: You have the right to request a copy of the personal data jo77 holds about you, including the categories of data held and the purposes for which it is processed.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. For basic account details (email address, contact number), you may update these directly within your account settings.
• Right to Erasure: You may request that we delete your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal obligations to retain certain records.
• Right to Restriction of Processing: You may request that we restrict the processing of your personal data in certain circumstances — for example, while a correction request is being verified.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity, you may request that we provide your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing carried out on the basis of jo77's legitimate interests, including profiling for responsible gaming monitoring purposes.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time. This does not affect the lawfulness of processing prior to withdrawal.

jo77 will respond to all verified data rights requests within 30 calendar days of receipt. In cases of complexity or high volume, this period may be extended by a further 60 days, in which case we will notify you of the extension and the reason for it.

The jo77 platform is strictly intended for adults aged 21 years and above. jo77 does not knowingly collect personal data from individuals under the age of 21. Account registration requires confirmation of minimum age, and we conduct identity verification checks to support this requirement.

If jo77 becomes aware that personal data has been collected from a person under the age of 21, we will immediately close the relevant account, forfeit any associated balance in accordance with our Terms & Conditions, and delete the personal data from our systems as promptly as practicable, subject to any legal obligations that may require retention.

If you believe that a person under the age of 21 has created an account on jo77, please report this to [email protected] immediately so that we can investigate and take appropriate action.

jo77 implements a range of technical and organisational measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and jo77 servers is encrypted in transit using industry-standard SSL/TLS protocols.
• Encrypted Data Storage: Sensitive personal data, including password hashes and KYC documents, is stored using strong encryption at rest.
• Access Controls: Access to personal data within jo77's internal systems is restricted to authorised personnel on a strict need-to-know basis. All internal access is logged and audited.
• Fraud Detection Systems: Automated monitoring systems flag unusual account activity, suspicious login patterns, and potentially fraudulent transactions for human review.
• Incident Response: jo77 maintains a documented data breach response procedure. In the event of a breach that poses a risk to player rights, affected players will be notified promptly via the email address registered on their account.

While jo77 takes all reasonable measures to protect your personal data, no online system can guarantee absolute security. You are responsible for maintaining the security of your own account credentials, as described in our Terms & Conditions.

jo77 operates as an international offshore platform. Personal data collected from players in Bangladesh may be processed and stored on servers located outside of Bangladesh. Where personal data is transferred internationally, jo77 takes reasonable steps to ensure that the receiving party provides an adequate level of data protection, consistent with the standards described in this Policy.

Such transfers may occur in connection with the use of third-party KYC verification partners, game content providers, fraud prevention systems, and hosting infrastructure. All third-party data processors engaged by jo77 are contractually bound to apply appropriate data security standards.

By registering and using the jo77 platform, you acknowledge that your personal data may be transferred to and processed in jurisdictions outside of Bangladesh. If you have concerns about international data transfers, please contact us at [email protected].

jo77 may send you promotional emails, SMS notifications, or in-platform messages about bonuses, new games, seasonal promotions (including Eid and Pohela Boishakh offers), and BPL / IPL cricket betting specials, subject to your having opted in to receive such communications.

You may opt in to marketing communications during account registration or at any later time via your account notification preferences. You may withdraw your marketing consent and unsubscribe from promotional communications at any time by:

• Updating your notification preferences in your account settings panel, or
• Contacting the jo77 support team at [email protected] with the subject line "Marketing Opt-Out".

Unsubscribing from marketing communications will not affect transactional communications — jo77 will continue to send you essential account notifications including deposit confirmations, withdrawal updates, KYC status notices, and security alerts regardless of your marketing preferences.

The jo77 platform does not contain outbound links to third-party websites as part of its standard navigation. However, promotional content or game-launch interfaces may occasionally reference third-party game provider platforms. jo77 is not responsible for the privacy practices or content of any third-party website or service. If you navigate to a third-party website via any reference on the jo77 platform, you do so at your own risk and subject to that website's own privacy policy.

jo77 reserves the right to update or amend this Privacy Policy at any time. When changes are made, the effective date at the top of this page will be updated to reflect the revision date. Where changes are material — meaning they significantly affect how we collect, use, or share personal data — jo77 will provide advance notice via the email address registered on your account, where reasonably practicable.

Your continued use of the jo77 platform following the publication of a revised Privacy Policy constitutes your acknowledgement of and agreement to the updated terms. If you do not accept the revised Policy, you must cease using the platform and contact our support team to close your account.

We encourage you to review this Policy periodically to stay informed about how jo77 protects your personal data.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way jo77 handles your personal data, please contact our support team. All privacy-related communications should be submitted in English and directed to:

Support Email: [email protected]

Subject Line Guidance:

• For data access, correction, or deletion requests: "Data Rights Request"
• For marketing opt-out: "Marketing Opt-Out"
• For reporting a suspected data breach or security concern: "Security Concern"
• For general privacy enquiries: "Privacy Enquiry"

Response Time: jo77 aims to acknowledge all privacy-related enquiries within two (2) business days and to resolve substantive requests within thirty (30) calendar days. Support is available 24 hours a day, 7 days a week, including public holidays observed in Bangladesh Standard Time (BST, UTC+6).