Privacy Policy — How fj777 Protects Your Personal Data

fj777 ("fj777", "we", "us", "our") operates an online gambling platform that offers live casino games, sports betting (including cricket BPL, IPL and T20 World Cup markets), slot games, and associated services (collectively, the "Service") to adult players aged 21 and above, with a primary focus on the Bangladesh market.

This Privacy Policy ("Policy") describes how fj777 collects, processes, stores, shares and protects personal data in connection with the Service. It applies to all registered account holders, visitors to the fj777 website, and any other individuals whose personal data is processed by fj777 in connection with the operation of the Service.

This Policy should be read alongside the fj777 Terms & Conditions, which govern the overall relationship between fj777 and its players. In the event of any conflict between this Policy and the Terms & Conditions on matters of data privacy, this Policy shall prevail.

fj777 is committed to processing personal data in a manner that is lawful, fair, transparent and limited to what is necessary. We implement appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction or alteration.

For the purposes of this Privacy Policy, fj777 acts as the data controller — meaning we determine the purposes and means by which your personal data is processed. Our primary point of contact for all privacy-related matters is the fj777 Data Protection team, reachable at [email protected].

Where fj777 engages third-party service providers (for example, game software providers such as Evolution Gaming, Pragmatic Play or Spribe, or payment processors) to process personal data on our behalf, those parties act as data processors under contractual arrangements that require them to process your data only on fj777's documented instructions and to implement appropriate security measures.

fj777 collects the following categories of personal data. The specific data collected in each category depends on how you interact with the Service:

3.1 Sensitive Data

fj777 does not intentionally collect special-category or sensitive personal data (such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric identifiers) as part of its standard registration or verification process. If sensitive data is incidentally disclosed in the course of a customer support interaction or KYC document submission, it will be handled with heightened care and will not be used for any purpose beyond the specific interaction that necessitated its disclosure.

3.2 Data from Third Parties

In certain circumstances, fj777 may receive personal data about you from third parties. This includes identity verification data from document-checking service providers, fraud-prevention signals from payment networks, and device fingerprinting data from security providers. Any data received from third parties is subject to the same protections as data collected directly from you.

fj777 collects personal data through the following primary channels:

• Direct collection: Data you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or responding to a survey or promotion.
• Automated collection: Data collected automatically when you visit the fj777 website or use the mobile platform, including IP addresses, session data, cookie identifiers and device information. See Section 8 for details on cookies and tracking technologies.
• Payment provider data: Transaction confirmation and account reference data shared with fj777 by bKash, Nagad, Rocket, Upay, USDT network providers, and domestic banks at the time of deposit or withdrawal processing.
• Third-party verification services: Identity and address verification data from KYC/AML service providers engaged by fj777 to fulfil its legal compliance obligations.
• Game provider data: Game-round results, bet history and session data transmitted from third-party game servers (Evolution Gaming, Pragmatic Play, Spribe, Ezugi, NetEnt, Microgaming and others) to the fj777 account management system in real time during gameplay.

fj777 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contract performance: Processing necessary to fulfil our contractual obligations to you under the Terms & Conditions — for example, maintaining your account, processing deposits and withdrawals, and settling bets.
• Legal obligation: Processing necessary to comply with applicable legal requirements — for example, conducting KYC/AML verification, retaining financial records, and reporting suspicious transactions.
• Legitimate interests: Processing necessary for fj777's legitimate business interests where those interests are not overridden by your privacy rights — for example, fraud prevention, platform security, product improvement, and responsible gaming monitoring.
• Consent: Where no other legal basis applies, fj777 will request your explicit consent before processing. You have the right to withdraw consent at any time; withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

The personal data collected by fj777 is used for the following purposes:

6.1 Account Management

To create and maintain your fj777 account, authenticate your identity at login, manage your account balance, process bonuses, and communicate important account-related notifications such as security alerts, deposit confirmations and withdrawal approvals.

6.2 Payment Processing

To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, USDT and bank transfer; to verify that transactions originate from payment methods registered in your name; and to maintain accurate financial records of all transactions as required by applicable law.

6.3 Identity Verification (KYC/AML)

To verify your identity, age and residential address in compliance with our Know Your Customer (KYC) and Anti-Money Laundering (AML) obligations. Identity data and associated documentation are retained for the period required by applicable financial regulations and are used solely for compliance purposes.

6.4 Fraud Prevention and Security

To detect, investigate and prevent fraudulent activity, account takeovers, bonus abuse, collusion, money laundering and other prohibited conduct. This includes automated risk-scoring of transactions and behavioural analysis of gameplay and betting patterns.

6.5 Responsible Gaming

To monitor player behaviour for indicators of problem gambling; to enforce deposit limits, session limits and self-exclusion settings that you have applied to your account; and to proactively reach out to players who display patterns associated with harmful gambling behaviour.

6.6 Customer Support

To respond to your enquiries, process complaints, investigate disputes and provide technical assistance. All support interactions are logged and retained to ensure consistent service quality and to provide an accurate record in the event of a dispute escalation.

6.7 Platform Improvement

To analyse aggregated and anonymised usage data to understand how players interact with the fj777 platform, identify areas for improvement, and optimise the user experience. Analytics data used for platform improvement is anonymised and cannot be used to identify individual players.

6.8 Legal Compliance and Regulatory Reporting

To fulfil any reporting obligations imposed on fj777 by applicable law, including the provision of information to relevant authorities in connection with investigations into financial crime, underage gambling or other regulatory matters.

fj777 does not sell, rent or trade your personal data. We may share your personal data with the following categories of third parties, strictly on a need-to-know basis and subject to appropriate contractual safeguards:

• Game technology providers: Evolution Gaming, Pragmatic Play, Spribe, Ezugi, NetEnt, Microgaming and other game studios receive the minimum data necessary to deliver game functionality — typically a session token and account reference — and are contractually prohibited from using that data for any purpose other than operating the game.
• Payment processors: bKash, Nagad, Rocket, Upay, and banking partners receive transaction data necessary to execute and confirm deposits and withdrawals. These providers operate under their own privacy policies and regulatory frameworks.
• Identity verification services: Third-party KYC and AML service providers receive identity documents and personal details to the extent necessary to conduct verification checks on behalf of fj777.
• IT infrastructure providers: Cloud hosting, content delivery and cybersecurity vendors who process data on fj777's behalf under strict data processing agreements.
• Legal and regulatory authorities: fj777 will disclose personal data to law enforcement agencies, financial intelligence units or other regulatory bodies where required by applicable law, court order, or where fj777 has a good-faith belief that disclosure is necessary to prevent financial crime or protect the safety of a person.
• Professional advisers: Solicitors, accountants and auditors who require access to personal data in the course of providing professional services to fj777, subject to strict confidentiality obligations.

All third-party data processors engaged by fj777 are subject to written data processing agreements that impose obligations consistent with applicable data protection standards, including requirements to implement appropriate technical and organisational security measures and to process data only on documented instructions from fj777.

The fj777 website uses cookies and similar tracking technologies to deliver and improve the Service, maintain session security, and analyse platform usage. The following types of cookies are used:

Strictly necessary cookies are placed automatically as they are required for the fundamental operation of the Service. Functional, analytics and security cookies are placed on the basis of legitimate interests. You may manage cookies through your browser settings; however, disabling strictly necessary cookies will prevent you from logging in and using the fj777 platform.

fj777 takes the security of your personal data seriously. We implement a layered security architecture that combines technical controls, organisational procedures and staff training to protect data against unauthorised access, accidental loss, destruction, alteration or disclosure.

9.1 Technical Controls

• Encryption in transit: All data exchanged between your device and the fj777 platform is encrypted using TLS 1.2 or higher with 256-bit AES encryption.
• Encryption at rest: Sensitive data fields — including NID numbers, financial account references and identity document data — are encrypted at rest in the fj777 database.
• Password security: User passwords are processed through a strong one-way hashing algorithm (bcrypt with a minimum cost factor of 12). Plain-text passwords are never stored, logged or transmitted.
• Two-factor authentication (2FA): SMS-based 2FA is available to all account holders and is strongly recommended. High-value withdrawal requests may trigger mandatory 2FA verification.
• Access control: fj777 staff access to personal data is governed by a least-privilege model — staff are granted access only to the data they need to perform their specific job function.
• Penetration testing: fj777's platform infrastructure is subject to regular independent penetration testing and vulnerability assessments.

9.2 Incident Response

In the event of a personal data breach that poses a risk to the rights and freedoms of affected individuals, fj777 will take immediate steps to contain the breach, assess its scope and notify affected account holders without undue delay. Notifications will be sent to the email address registered to the affected account and will include a clear description of the nature of the breach, the categories of data affected, the likely consequences, and the steps fj777 has taken or proposes to take in response.

fj777 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal or regulatory obligations. The following retention schedule applies:

When a retention period expires, data is either securely deleted using cryptographic erasure or irrevocably anonymised so that it can no longer be associated with an identifiable individual. Data that is retained in anonymised, aggregated form is no longer treated as personal data and may be retained indefinitely for statistical or research purposes.

As a data subject, you have the following rights in respect of your personal data held by fj777. To exercise any of these rights, contact us at [email protected] with your request. We will respond within 30 calendar days.

• Right of access: You have the right to request a copy of all personal data that fj777 holds about you, together with information about the purposes for which it is processed, the categories of data involved, the recipients to whom it has been disclosed, and the applicable retention periods.
• Right to rectification: If any personal data held by fj777 is inaccurate or incomplete, you have the right to request that it be corrected or completed without undue delay.
• Right to erasure ("right to be forgotten"): You may request that fj777 delete your personal data where it is no longer necessary for the purpose it was collected, where you have withdrawn consent (and no other legal basis applies), or where the data has been unlawfully processed. This right is subject to fj777's legal retention obligations; we may not be able to delete data that we are required by law to retain.
• Right to restrict processing: You may request that fj777 suspend the processing of your personal data in certain circumstances — for example, while the accuracy of the data is under dispute, or while an objection is being assessed.
• Right to data portability: Where processing is based on your consent or on contract performance and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format and to request that it be transmitted directly to another data controller where technically feasible.
• Right to object: You may object at any time to the processing of your personal data on the basis of legitimate interests. fj777 will cease processing unless it can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or where processing is necessary for the establishment, exercise or defence of legal claims.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to the withdrawal.

fj777 is strictly an adult gambling platform. The Service is intended exclusively for individuals who are 21 years of age or older. fj777 does not knowingly collect, process or retain any personal data from individuals under the age of 21. Age verification is a mandatory step in the account registration and KYC process.

If fj777 becomes aware that personal data has been collected from a person under the age of 21 — whether through a falsified date of birth declaration, forged identity documents or any other means — the affected account will be immediately suspended and all personal data associated with that account will be securely deleted as soon as is practicable, subject to any data preservation requirements arising from an ongoing investigation.

If you are a parent or guardian and believe that a minor in your care has created a fj777 account or provided personal data to fj777, please contact us immediately at [email protected]. We will investigate and take appropriate action without delay.

fj777 operates infrastructure and engages service providers in multiple jurisdictions. As a result, your personal data may be transferred to, and processed in, countries outside Bangladesh. Such transfers may include transfers to countries where data protection laws differ from those applicable in Bangladesh.

Where personal data is transferred internationally, fj777 ensures that appropriate safeguards are in place to protect the data, including:

• Transfers to service providers located in jurisdictions that maintain adequate data protection standards as assessed by fj777's compliance team.
• The use of contractual clauses in agreements with third-party processors that impose data protection obligations equivalent to those applied by fj777 directly.
• Technical measures such as end-to-end encryption for data in transit across jurisdictional boundaries, ensuring that data cannot be read by intermediary network operators or unauthorised third parties.

Game providers including Evolution Gaming, Pragmatic Play, Spribe, Ezugi, NetEnt and Microgaming operate server infrastructure in multiple international locations. Data transmitted to these providers during gameplay — limited to session tokens, bet amounts and game-round results — is governed by fj777's data processing agreements with each provider and does not include sensitive identity or financial data beyond what is strictly necessary for game delivery.

fj777 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, business practices or the technical operation of the platform. All changes are effective from the date the revised policy is published on the fj777 website.

Where a change is material — meaning it significantly affects the way in which fj777 processes your personal data or your rights as a data subject — fj777 will notify registered account holders by email to the address associated with their account at least 14 days before the change takes effect. For non-material changes (such as clarifications of existing language, corrections of typographical errors, or minor structural reorganisation that does not affect substance), the policy will be updated without prior individual notification.

The effective date at the top of this Privacy Policy indicates when the current version was last updated. We encourage you to review this page periodically to stay informed about how fj777 handles your personal data. Your continued use of the Service following the publication of a revised Privacy Policy constitutes your acceptance of the changes.

If you have any questions, concerns or requests relating to this Privacy Policy or the way in which fj777 processes your personal data, please contact us using the details below. All privacy-related communications must be submitted in English.

Email: [email protected] (plain text only — this address is not a clickable link)

fj777 is committed to resolving all privacy-related enquiries promptly and fairly. Our response process is as follows:

• Acknowledgement: We will acknowledge receipt of your privacy enquiry or data rights request within 48 hours of receiving it.
• Identity verification: Before processing any data rights request, fj777 will verify your identity by cross-referencing the details in your request against the information held on your registered account. This is to protect against unauthorised access to personal data by third parties.
• Response: A substantive response to your enquiry or a fulfilment of your data rights request will be provided within 30 calendar days. For complex requests, this period may be extended by a further 60 days, with prior written notice to you explaining the reason for the extension.
• Escalation: If you are not satisfied with fj777's response to a privacy-related complaint, you may escalate the matter to fj777's senior compliance team by replying to the response email and stating that you wish to escalate. A final written decision will be issued within 14 business days of escalation.