jya77 Privacy Policy

1 Who We Are

jya77 is an online casino and sports betting platform operating at jya77.io and serving players based in Bangladesh. References to "jya77", "we", "us", or "our" throughout this Privacy Policy refer to the jya77 platform and its operating entity.

jya77 is the data controller in respect of all personal data collected from players who register and use the platform. As data controller, jya77 is responsible for determining the purposes and means of processing your personal data, and for ensuring that such processing is conducted lawfully, fairly, and transparently.

If you have any questions about this Privacy Policy or about how jya77 processes your personal data, you may contact our support team at any time. Contact details are provided in Section 13 of this document.

2 Data We Collect

jya77 collects personal data in the following categories, depending on the nature of your interaction with the platform:

jya77 does not collect sensitive personal data such as racial or ethnic origin, religious beliefs, health conditions (beyond problem gambling flags for responsible gaming purposes), or biometric identifiers.

3 How We Collect Your Data

jya77 collects personal data through the following channels:

• Direct Submission. Data you provide voluntarily when you register an account, complete the KYC verification process, make a deposit or withdrawal, contact our support team, or participate in a promotional activity.
• Automated Collection. Technical and usage data that is collected automatically by our platform infrastructure when you access or interact with jya77.io. This includes server log data, session cookies, and device fingerprinting for fraud prevention purposes.
• Third-Party Sources. Identity verification data returned by our KYC service provider following a document check. Payment status data returned by mobile wallet providers (bKash, Nagad, Rocket, Upay) when you initiate a transaction. jya77 does not purchase personal data from data brokers.

4 Why We Use Your Data

jya77 processes your personal data for the following clearly defined purposes:

• Account Registration & Management. To create your player account, verify your identity, maintain your account settings, and communicate account-related information to you.
• Age & Identity Verification (KYC). To confirm that you meet the minimum age requirement of 21 years and that the information you provided during registration is accurate. This is a mandatory compliance obligation.
• Transaction Processing. To process your deposit requests and withdrawal payments via bKash, Nagad, Rocket, and Upay, and to maintain an accurate record of your account balance and transaction history.
• Platform Delivery & Improvement. To deliver the games, betting markets, and services you access, and to analyse usage patterns to improve platform performance, reliability, and user experience.
• Fraud Prevention & Security. To detect, investigate, and prevent fraudulent activity, money laundering, multi-account abuse, and other forms of prohibited conduct on the platform.
• Responsible Gaming Monitoring. To identify behavioural patterns that may indicate problem gambling, to apply the responsible gaming tools you have requested, and to fulfil our duty of care obligations.
• Customer Support. To handle your support queries, complaints, and formal dispute submissions effectively and within the service timelines stated in our Terms & Conditions.
• Promotional Communications. To send you relevant bonus offers and platform updates by SMS or email, where you have provided consent. You may withdraw consent at any time by contacting support.
• Legal & Regulatory Compliance. To fulfil any data disclosure obligations imposed upon jya77 by applicable law or by competent regulatory or law enforcement authorities.

5 Legal Basis for Processing

For each category of processing activity, jya77 relies on one or more of the following legal bases:

• Contractual Necessity. Processing that is required to perform the contract between jya77 and you as a registered player — including account management, KYC verification, and transaction processing.
• Legal Obligation. Processing required to comply with applicable law, including anti-money laundering obligations, age verification requirements, and disclosures to competent authorities.
• Legitimate Interests. Processing carried out for jya77's legitimate business interests, including fraud detection, platform security, responsible gaming monitoring, and internal analytics, provided such interests are not overridden by your fundamental rights and freedoms.
• Consent. Processing for which you have given explicit, freely-given consent — in particular, the sending of marketing communications. Where consent is the basis, you have the right to withdraw it at any time without affecting the lawfulness of prior processing.

6 Data Sharing & Third Parties

jya77 does not sell, rent, or transfer your personal data to third parties for their own commercial or marketing use. Data is shared only in the following strictly controlled circumstances:

• Payment Processors. Transaction data is shared with mobile wallet providers (bKash, Nagad, Rocket, Upay) to the extent necessary to process your deposit and withdrawal requests. These providers operate under their own privacy frameworks and jya77 has no control over their internal data handling once a transaction is submitted.
• KYC Verification Services. Identity documents submitted during verification are shared with our contracted KYC service provider solely for the purpose of confirming your identity and age. The KYC provider is bound by a data processing agreement with jya77 and may not use your data for any independent purpose.
• Game Content Providers. Usage data relating to specific games (e.g., session data for titles provided by Pragmatic Play, Evolution Gaming, or Spribe) may be shared with the relevant studio to the extent required for game delivery and RNG integrity verification. No identity or financial data is shared with game studios.
• Legal & Regulatory Authorities. jya77 may disclose personal data to law enforcement agencies, regulatory bodies, or courts of competent jurisdiction where required to do so by law, by court order, or where jya77 reasonably believes disclosure is necessary to protect the rights, property, or safety of the platform or third parties.
• Business Transfers. In the event of a merger, acquisition, or sale of all or part of jya77's business, personal data held by jya77 may be transferred to the acquiring entity as part of that transaction, subject to equivalent data protection obligations being imposed on the acquirer.

All third-party data processors engaged by jya77 are subject to contractual data processing agreements that require them to process personal data only on jya77's documented instructions, to maintain appropriate technical and organisational security measures, and to return or delete data upon termination of the agreement.

7 Data Retention

jya77 retains personal data for no longer than is necessary for the purpose for which it was collected, subject to any longer retention period required by applicable law. The following retention periods apply as a general guide:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised. Anonymised data — from which no individual can be identified — may be retained indefinitely for statistical and analytical purposes.

8 Cookies

jya77 uses a small number of strictly necessary cookies to deliver core platform functionality. We do not use advertising cookies, behavioural tracking cookies, or any third-party analytics cookies that profile your browsing activity beyond the jya77 platform itself.

• Session Cookies. Used to maintain your authenticated login state while you are actively using the platform. These expire when you close your browser or log out.
• Security Cookies. Used to support CSRF (Cross-Site Request Forgery) protection mechanisms and other platform security functions. These are essential for safe platform operation.
• Preference Cookies. Used to remember basic display preferences such as language selection, if applicable. These have a limited lifespan and do not track your activity across other websites.

Because jya77 uses only strictly necessary cookies, no cookie consent banner is presented to users. Strictly necessary cookies do not require consent under applicable privacy frameworks as they are essential to the delivery of the service you have requested. If jya77 were to introduce any non-essential cookies in the future, this policy would be updated and appropriate consent mechanisms would be implemented prior to any such change taking effect.

9 Data Security

jya77 implements a comprehensive set of technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• TLS 1.2 or higher encryption for all data transmitted between your device and jya77 servers.
• AES-256 encryption for sensitive data stored at rest within our database infrastructure.
• Cryptographic hashing of account passwords — passwords are never stored in a recoverable form.
• Role-based access controls that restrict internal staff access to personal data on a strict need-to-know basis.
• Regular internal security reviews and vulnerability assessments of platform infrastructure.
• Fraud detection systems that monitor account activity in real time for unusual patterns indicative of unauthorised access.
• Secure physical infrastructure hosting, with data stored in facilities that maintain industry-standard physical security controls.

In the event of a personal data breach that poses a risk to the rights and freedoms of affected players, jya77 will notify affected individuals promptly and take all necessary remedial action. jya77 maintains an internal data breach response plan to ensure that such incidents are managed swiftly and responsibly.

10 Your Rights

As a data subject, you hold the following rights in respect of the personal data jya77 processes about you. To exercise any of these rights, please contact jya77 support using the details in Section 13. jya77 will respond to valid requests within 10 business days.

• Right of Access. You may request a copy of the personal data jya77 holds about you, along with information about how it is being used. This is commonly known as a Subject Access Request (SAR).
• Right to Rectification. If the personal data jya77 holds about you is inaccurate or incomplete, you may request that it be corrected. For identity data, correction requests may require submission of updated documentary evidence.
• Right to Erasure. In certain circumstances, you may request the deletion of your personal data. This right is not absolute — jya77 may be required to retain certain data to comply with legal obligations, even after an account closure or erasure request.
• Right to Restriction of Processing. You may request that jya77 temporarily restrict the processing of your personal data in specific circumstances, such as while the accuracy of data is under dispute.
• Right to Data Portability. Where processing is based on consent or contractual necessity, you may request a machine-readable copy of the personal data you have provided to jya77, so that it may be transferred to another service provider if you choose.
• Right to Object. You may object to jya77 processing your personal data on the basis of legitimate interests. jya77 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to Withdraw Consent. Where processing is based solely on your consent (e.g., marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that occurred prior to the withdrawal.

11 Children & Minors

jya77 employs age verification as a mandatory part of the registration and KYC process to prevent minors from accessing the platform. If jya77 discovers or has reasonable grounds to believe that an account has been registered by a person under 21 years of age, that account will be suspended immediately, all balances will be frozen pending investigation, and any funds found to have been deposited by a minor will be returned to the payment source after satisfactory verification.

If you believe that a minor may be using or have used the jya77 platform, please contact our support team immediately. jya77 takes underage gambling prevention extremely seriously and will act promptly on any such report. We also encourage parents and guardians in Bangladesh to make use of parental control software to restrict access to gambling websites on shared devices.

12 Changes to This Privacy Policy

jya77 reserves the right to update or amend this Privacy Policy at any time. Where a change is material — meaning it meaningfully alters the nature of the data we collect, the purposes for which we use it, or the rights available to you — jya77 will provide advance notice of the change via a notification on the platform or by email to your registered address, at least 7 days before the revised policy takes effect.

For non-material changes (such as clarifications of existing language, corrections to typographical errors, or updated contact details), the revised policy will be published on this page with an updated "Last Updated" date, without prior individual notification.

Your continued use of the jya77 platform following the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. If you do not agree to the amended policy, you must cease using the platform and may request closure of your account in accordance with the process described in the jya77 Terms & Conditions. The current version of this policy is always accessible at jya77.io/privacy-policy.

13 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data jya77 holds about you, please reach out to our support team through any of the following channels:

When submitting a data rights request, please include your full registered name, the mobile number linked to your jya77 account, and a clear description of the right you wish to exercise. This will help our team locate your records and respond efficiently. jya77 may need to verify your identity before processing certain requests to ensure we do not disclose personal data to an unauthorised third party.