aj77 Privacy Policy

01 Who We Are

aj77 ("we", "us", "our", "the Platform") operates the online betting and casino platform available at aj77.io. aj77 is Bangladesh's premier online destination for cricket betting, live casino, slots, Andar Bahar, Pool Rummy, and a broad range of other gaming and wagering products. For the purposes of this Privacy Policy, aj77 acts as the data controller in respect of all personal data collected from players and site visitors through the platform.

This Privacy Policy ("Policy") sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by aj77. Please read the following carefully to understand our views and practices regarding your personal data and how we treat it. This Policy applies to all users of the aj77 platform, including registered account holders, visitors who browse the site without registering, and individuals who contact our support team.

For data-related enquiries, complaints, or requests to exercise your data rights, please contact our dedicated data support address at [email protected]. All data-related communications should clearly state "Privacy Request" in the subject line to ensure prompt routing.

02 Data We Collect

aj77 collects personal data that falls into the following categories. Not all data types listed below are collected from every user — the specific data we hold depends on how you interact with the platform.

2.1 Identity and Registration Data

• Full legal name as it appears on a government-issued identity document
• Date of birth (used to verify the 21+ age requirement)
• Gender (where provided voluntarily during registration)
• Nationality and country of residence
• Bangladeshi National Identity Card (NID) number, passport number, or equivalent identity document reference — collected during the KYC (Know Your Customer) verification process

2.2 Contact Data

• Mobile phone number registered in Bangladesh (primary contact and OTP channel)
• Email address
• Physical address (requested during enhanced verification for high-value accounts)

2.3 Financial and Transaction Data

• Deposit and withdrawal transaction records, including amounts, timestamps, and payment method references
• Payment method identifiers — for example, the registered mobile number associated with a bKash or Nagad account, or the last four digits of a Visa or Mastercard card
• Account wallet balance history
• Bonus and promotional credit activity

2.4 Betting and Gaming Activity Data

• All bets placed, including sport, market, selection, stake, odds, and outcome
• Casino game session data, including game type, session duration, wagers, and results
• Responsible gaming tool settings (deposit limits, session limits, self-exclusion status)

2.5 Technical and Device Data

• IP address and approximate geolocation derived from IP
• Device type, operating system, and browser information
• Session identifiers and login timestamps
• Cookie identifiers (see Section 6)

2.6 Communications Data

• Content of messages sent to and received from the aj77 support team via email or live chat
• Records of complaints and their resolution
• Records of marketing opt-in and opt-out preferences

03 How We Collect Data

aj77 collects personal data through the following channels:

• Direct registration: When you create an account on aj77, you provide identity, contact, and security credential data directly.
• KYC verification submissions: When you submit identity documents for account verification prior to withdrawal.
• Platform activity: Your betting history, casino game sessions, deposit and withdrawal transactions, and responsible gaming settings are recorded automatically as you use the platform.
• Payment processors: When you make a deposit or withdrawal via bKash, Nagad, Rocket, Upay, Visa, or Mastercard, transaction confirmation data is passed to aj77 by the payment processor.
• Cookies and tracking technologies: Technical data about your device, browser, and session behaviour is collected automatically when you visit aj77.io. See Section 6 for full details.
• Support communications: When you contact aj77's customer support team, the content and metadata of those communications are recorded.
• Third-party identity verification providers: Where enhanced KYC checks are required, data may be cross-referenced against third-party identity verification databases.

04 How We Use Your Data

aj77 uses the personal data it collects for the following specific purposes:

Purpose	Data Categories Used
Account creation and management	Identity, contact, security credentials
Age and identity verification (KYC)	Identity, contact, document data
Processing deposits and withdrawals	Financial, identity, contact
Delivering betting and casino services	Activity, financial, technical
Fraud detection and prevention	All categories
Responsible gaming monitoring and enforcement	Activity, financial, identity
Customer support and complaint handling	Identity, contact, communications
Marketing communications (where opted in)	Contact, activity
Platform security and technical operations	Technical, security credentials
Legal and regulatory compliance	Identity, financial, activity

aj77 does not use your personal data for automated decision-making that produces legal or similarly significant effects without human review, except in cases of fraud detection where automated systems may trigger an account flag — which is then reviewed by a member of the compliance team within 48 hours.

05 Legal Basis for Processing

aj77 processes personal data on the following legal bases:

• Contractual necessity: The majority of data processing on aj77 is necessary for the performance of the contract between you and aj77 — that is, to operate your account, process your transactions, and deliver the services you have signed up for.
• Legal obligation: Certain processing activities — in particular, identity verification, anti-money-laundering checks, and the maintenance of financial records — are required by applicable law and regulations.
• Legitimate interests: aj77 processes technical and activity data on the basis of its legitimate interests in maintaining platform security, detecting fraud, and improving the quality of services — provided those interests are not overridden by your privacy rights.
• Consent: Where aj77 processes data for marketing communications, that processing is based on your freely given, informed, and specific consent. You may withdraw this consent at any time as described in Section 12.

06 Cookies & Tracking Technologies

aj77.io uses cookies and similar tracking technologies to operate the platform, maintain your login session, and gather anonymised analytics data about how the site is used. Cookies are small text files placed on your device by the aj77 web server. They do not contain executable code and cannot access other files on your device.

Types of Cookies Used

• Essential cookies: Required for the platform to function. These include session authentication cookies that keep you logged in during your visit and security tokens that protect against cross-site request forgery. These cannot be disabled without breaking platform functionality.
• Analytics cookies: Used to collect aggregated, anonymised data about how players navigate and use the platform — for example, which games are most popular, where players typically drop off during registration, and how long a typical session lasts. This data is used solely to improve platform quality and user experience.
• Preference cookies: Store your platform settings, such as your preferred language and notification preferences, so that they persist between sessions.

You may configure your browser to refuse cookies, but doing so will prevent you from logging in to your aj77 account and may limit platform functionality. By using aj77.io, you consent to the use of essential cookies as described above. Analytics and preference cookies are activated on the basis of your consent to this Privacy Policy.

07 Third-Party Data Sharing

aj77 does not sell, rent, or disclose your personal data to third parties for their own commercial purposes. Data is shared with external parties only in the following strictly defined circumstances:

• Payment processors: bKash, Nagad, Rocket, Upay, and card payment gateways receive the minimum transaction data required to process your deposit or withdrawal. These providers operate under their own privacy policies and are bound by applicable financial data protection regulations.
• Identity verification providers: Third-party KYC providers receive identity document data solely for the purpose of verifying your identity and age. They are contractually prohibited from using this data for any other purpose.
• Game content providers: Live casino and game software providers such as Evolution Gaming, Pragmatic Play, Ezugi, Spribe, NetEnt, and Microgaming receive session-level data — such as game ID, bet amount, and round result — to operate their games. These providers do not receive your full identity profile.
• Fraud prevention and security services: Anonymised risk signals may be shared with specialist fraud-detection services to identify patterns associated with account compromise or fraudulent activity.
• Legal and regulatory disclosure: aj77 may disclose personal data to law enforcement agencies, regulatory bodies, or courts if required to do so by applicable law, valid legal process, or to protect the rights, property, or safety of aj77, its players, or third parties.

All third-party service providers with whom aj77 shares personal data are required to maintain the confidentiality of that data and to process it only for the purposes specified in their service agreements with aj77. aj77 conducts periodic reviews of third-party data-handling practices to ensure ongoing compliance.

08 International Data Transfers

aj77 primarily stores and processes personal data within secure server environments. Some of our third-party service providers — particularly game content providers and technical infrastructure partners — may process data in jurisdictions outside Bangladesh. Where personal data is transferred internationally, aj77 takes appropriate steps to ensure that the receiving party maintains data protection standards equivalent to those described in this Policy, including through the use of contractual data protection clauses and supplier security assessments.

By registering an account and using the aj77 platform, you acknowledge that your data may be processed in jurisdictions outside Bangladesh as described above. If you have concerns about specific international transfers, please contact us at [email protected].

09 Data Retention

aj77 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or to comply with applicable legal and regulatory obligations. The following table summarises the standard retention periods applied to each major data category:

Data Category	Standard Retention Period	Basis
Account registration and identity data	Duration of account + 5 years after closure	Legal and regulatory obligation
KYC identity documents	Duration of account + 5 years after closure	Anti-money-laundering regulations
Financial transaction records	7 years from transaction date	Financial record-keeping obligation
Betting and gaming activity logs	3 years from session date	Legitimate interests / dispute resolution
Customer support communications	3 years from last interaction	Legitimate interests / complaint handling
Marketing preference records	Until consent withdrawn + 1 year	Consent / proof of compliance
Technical and device logs	12 months from collection	Platform security / fraud detection

Where data is retained beyond the active account period for legal compliance purposes, it is stored in a restricted archive environment with access limited to the aj77 compliance and legal team. It is not used for any operational or marketing purpose during this retention period.

10 Your Data Rights

As a user of the aj77 platform, you hold the following rights in respect of your personal data:

• Right of access: You may request a copy of the personal data aj77 holds about you. We will provide this within 30 calendar days of a verified request.
• Right of rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Minor corrections (such as a misspelled name) can be made directly by contacting support. Corrections to identity-sensitive data require documentary evidence.
• Right to erasure: In certain circumstances you may request that aj77 delete personal data we hold about you. This right is subject to limitations where retention is required by law — for example, financial transaction records must be retained for 7 years regardless of an erasure request.
• Right to restriction of processing: You may request that aj77 restrict processing of your personal data while a rectification request or objection is being assessed.
• Right to data portability: Where processing is carried out on the basis of your consent or contractual necessity, you may request that aj77 provide your personal data in a structured, commonly used, machine-readable format.
• Right to object: You may object to processing carried out on the basis of legitimate interests. aj77 will cease that processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent (for example, marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

11 Children & Minors

The aj77 platform is strictly for adults aged 21 years and above. aj77 does not knowingly collect personal data from individuals under the age of 21. If you are under 21, you must not register an account or use the platform in any way. If aj77 becomes aware that personal data has been collected from a person under 21, that account will be immediately closed, all transactions associated with the account will be voided, and the personal data will be deleted from our systems as promptly as practicable, subject to any legal retention obligations.

Parents and guardians who believe that a minor in their care may have registered an account on aj77 should contact us immediately at [email protected] with the subject line "Underage Account Report". We will treat all such reports with the highest priority and act without delay.

12 Marketing Communications

aj77 may send promotional messages about bonuses, new game launches, seasonal offers (such as Eid promotions, BPL specials, or Pohela Boishakh campaigns), and platform updates to players who have opted in to marketing communications. Marketing messages are delivered via SMS to your registered mobile number and/or by email to your registered address.

Opting in to marketing communications is entirely voluntary and is not a condition of account registration or platform access. You may opt out of marketing communications at any time by:

• Updating your notification preferences in your aj77 account settings, or
• Sending an opt-out request to [email protected] with the subject line "Unsubscribe".

Opt-out requests will be processed within 5 business days. Please note that even after opting out of marketing communications, aj77 will continue to send you essential transactional messages — such as deposit confirmations, withdrawal notifications, and security alerts — as these are necessary for the operation of your account and cannot be disabled.

13 Security Measures

aj77 takes the security of your personal data seriously and implements a range of technical and organisational safeguards to protect it against unauthorised access, accidental loss, disclosure, alteration, or destruction. These measures include:

• Transport Layer Security (TLS/SSL): All data transmitted between your device and the aj77 platform is encrypted using industry-standard SSL encryption. Look for the padlock icon in your browser address bar when visiting aj77.io.
• Encrypted data storage: Sensitive personal data, including identity documents and financial records, is stored using encryption at rest.
• Access controls: Internal access to personal data is restricted to personnel who require it to perform their job functions. Access rights are reviewed regularly and revoked promptly when no longer required.
• Two-factor authentication: Players are encouraged to enable OTP-based two-factor authentication on their accounts. All internal administrative access to player data requires multi-factor authentication.
• Security audits: aj77 conducts regular internal and external security assessments of its platform and data infrastructure.
• Incident response: In the event of a data security incident that affects your personal data, aj77 will notify affected users promptly and take immediate remedial action to contain and address the incident.

14 Updates to This Privacy Policy

aj77 reserves the right to update this Privacy Policy at any time. Changes may be made to reflect updates in applicable law, changes in how we process data, the introduction of new platform features, or amendments to our third-party service arrangements. When changes are made, the revised Policy will be published at aj77.io/privacy-policy with the updated effective date shown at the top of the document.

Where changes are material — meaning they significantly affect your rights or how we use your data — aj77 will notify registered users via SMS or email before the changes take effect. Your continued use of the platform after the effective date of any updated Policy constitutes your acceptance of the revised terms. We recommend reviewing this Policy periodically to stay informed of how aj77 protects your data.

15 Contact & Complaints

If you have any questions, concerns, or complaints about how aj77 handles your personal data, or if you wish to exercise any of the data rights described in Section 10, please contact us using the details below. We take all privacy-related enquiries seriously and will respond within the timeframes stated in this Policy.

This Privacy Policy was last reviewed and updated with effect from 1 January 2026. All previous versions of this Policy are superseded by this document.