JJ 777 Privacy Policy — Your Data, Your Rights in Pakistan

This Privacy Policy ("Policy") describes how jj 777 ("we", "us", "our", "jj 777"), the operator of the online gaming and sports betting platform at jj777.run, collects, uses, stores, and protects the personal data of individuals ("you", "Player", "User") who register accounts, make deposits, place bets, or otherwise interact with the jj 777 platform in any way.

jj 777 is built for Pakistani players. The vast majority of our users are based in Pakistan — in Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan, Peshawar, and cities and towns across all four provinces. We understand that trust is earned, and being transparent about how we handle your personal data is a fundamental part of building and keeping that trust.

This Policy is written in plain English because we want every player to actually understand it — not just acknowledge a legal document. If anything in this Policy is unclear, please contact us at support@jj777.run and we will explain it to you directly, in Urdu or English, whichever you prefer.

jj 777 collects only the personal data that is necessary to provide its gaming and betting services, to process PKR transactions securely, and to comply with applicable legal obligations. We do not collect data for the sake of collecting it. Below is a clear breakdown of every category of data we collect and why:

jj 777 uses your personal data for the following specific purposes. We do not use your data for any purpose that is not listed here, and we do not allow any team member or system to access personal data beyond what is necessary for their specific role or function:

• Operating your account: Processing registrations, managing login security, maintaining your account balance in PKR, and giving you access to all jj 777 games and betting markets.
• Processing transactions: Handling PKR deposits via Easypaisa, JazzCash, NayaPay, SadaPay, bank IBFT, and card payments; processing withdrawals to your chosen payment method; maintaining accurate transaction records for your own reference and for regulatory compliance.
• Identity and age verification: Confirming that you are who you say you are, that you are at least 18 years old, and that your payment method belongs to you. This is both a legal requirement and a player protection measure — it stops other people from using your account without your knowledge.
• Customer support: Responding to your queries, resolving bet disputes, handling withdrawal requests that require manual review, and following up on responsible gaming requests. Support staff access only the account data needed to resolve your specific query.
• Fraud and security: Detecting and preventing unauthorised account access, money laundering, multi-account abuse, and other fraudulent activity. Technical data including IP addresses and device identifiers is a key tool in this work.
• Responsible gaming monitoring: Monitoring betting patterns and account activity for signs of problem gambling behaviour. This is not about judging how you spend your money — it is about jj 777 meeting its duty of care obligations and providing timely intervention where a player's behaviour suggests they may need support.
• Promotions and communications: Sending you information about jj 777 bonuses, promotions, new game launches, and platform updates — but only if you have opted in to marketing communications. You can opt out at any time from your account settings.
• Platform improvement: Analysing aggregated and anonymised usage data to understand which features are working well, which games are most popular, and where the platform experience can be improved. This analysis does not identify individual players.

jj 777 processes your personal data on the following legal grounds, depending on the specific purpose:

• Contract performance: Processing your registration data, transaction data, and account data is necessary to fulfil the service agreement between you and jj 777. Without this data we cannot operate your account or process your PKR transactions.
• Legal obligation: Identity verification (KYC), transaction record-keeping, and fraud reporting are required by applicable financial and anti-money-laundering regulations. jj 777 must perform these activities regardless of individual consent.
• Legitimate interests: Security monitoring, fraud detection, responsible gaming monitoring, and platform improvement analytics are carried out on the basis of jj 777's legitimate interest in maintaining a safe, fair, and functional platform. These activities are balanced against your privacy rights and do not override them.
• Consent: Marketing communications — promotional SMS, email notifications about bonuses, and new game announcements — are sent only where you have provided explicit consent. You can withdraw this consent at any time without it affecting your account or your access to any jj 777 service.

jj 777 does not sell, rent, trade, or otherwise transfer your personal data to third parties for their own commercial purposes. We share data only in the following specific and limited circumstances:

• Payment service providers: Easypaisa, JazzCash, NayaPay, SadaPay, and our card payment processing partners receive only the data necessary to process your specific transaction — typically your registered wallet number or masked card details and the transaction amount in PKR. They do not receive your betting history, gaming preferences, or any other account data.
• Identity verification services: Where CNIC verification is required, your identity document may be processed through a secure third-party KYC verification service. These providers operate under strict data processing agreements with jj 777 and may not use your data for any purpose other than the verification service.
• Game content providers: jj 777 uses third-party game software providers for certain casino games. These providers may receive anonymised session data for technical integration purposes. They do not receive your name, mobile number, or financial data.
• Regulatory and law enforcement authorities: jj 777 will disclose personal data to relevant authorities where required by applicable law, court order, or regulatory direction. We will notify you of any such disclosure where we are legally permitted to do so.
• Group companies: Where jj 777 operates through affiliated companies, data may be shared within the corporate group for the same purposes described in this Policy, under the same data protection standards.

Data security at jj 777 is not an afterthought — it is built into the platform architecture from the ground up. The following security measures are in place and maintained continuously:

• 256-bit SSL encryption: Every page on jj777.run, every form submission, every login, and every transaction is encrypted in transit using TLS 1.2 or higher. Data intercepted in transit cannot be read without the encryption key.
• Encrypted storage: Sensitive data — including CNIC documents, payment details, and passwords — is stored in encrypted form at rest. Passwords are hashed using a strong one-way algorithm. jj 777 staff cannot see your password.
• PCI-DSS compliant payment processing: All card payment transactions are processed through PCI-DSS Level 1 compliant payment gateways. Card data is not stored on jj 777 servers — it is handled entirely by the payment processor.
• Access controls: Internal access to personal data is restricted on a role-based basis — staff see only the data they need for their specific function. All data access is logged and audited.
• Two-factor authentication: Account login supports two-factor authentication via SMS OTP. We strongly recommend enabling this on your account to add an extra layer of security against unauthorised access.
• Regular security audits: jj 777's technical infrastructure is subject to regular internal security reviews and periodic independent penetration testing to identify and address vulnerabilities.

Despite these measures, no online platform can guarantee absolute security. If you become aware of any unauthorised activity on your jj 777 account, contact support@jj777.run immediately so we can investigate and take protective action.

jj 777 uses cookies and similar technologies on its platform. Cookies are small text files stored on your device when you visit a website. They help the platform function correctly, remember your preferences, and allow us to understand how the platform is used.

You can manage cookie preferences through your browser settings at any time. Most browsers allow you to block or delete cookies from specific websites. Note that blocking strictly necessary cookies will prevent jj 777 from functioning correctly — your login will not persist between pages, for example.

jj 777 retains personal data only for as long as is necessary for the purposes described in this Policy, or as required by applicable law. Retention periods by data category are as follows:

• Account and identity data: Retained for the lifetime of your active account plus a minimum of 5 years after account closure. This retention is required for anti-money-laundering compliance and to resolve any disputes arising from your account activity.
• Transaction records (PKR deposits, withdrawals, bets): Retained for a minimum of 5 years from the transaction date. This is a standard financial record-keeping requirement.
• CNIC and identity document copies: Retained for the account lifetime plus 5 years. Stored encrypted; access restricted to compliance personnel.
• Customer support communications: Live chat transcripts and email correspondence retained for 2 years from the date of the last communication in a ticket. Longer where a dispute is unresolved or subject to legal proceedings.
• Device and technical data (IP logs, session logs): Retained for 12 months for security and fraud detection purposes, then deleted.
• Marketing preferences and opt-ins: Retained for the account lifetime. If you close your account, marketing preferences are deleted within 30 days.

As a jj 777 account holder, you have the following rights over your personal data. These rights are real and exercisable — to use any of them, contact support@jj777.run with the subject line "Data Rights Request" and your registered mobile number:

jj 777 is an 18+ platform. We do not knowingly collect personal data from anyone under the age of 18. If a minor accesses the platform and provides personal data, we are not able to detect this solely from the registration process — which is why age verification checks may be required at any time.

If you are a parent or guardian and believe your child has created a jj 777 account, please contact support@jj777.run immediately. We will suspend the account, delete all personal data associated with it, and return any deposited funds to the payment method used.

jj 777 participates in industry-standard responsible gaming initiatives and is committed to preventing underage access to gambling services. Technical measures including IP-based access controls, registration verification requirements, and payment method checks all serve this goal alongside the age verification requirement.

jj 777 will update this Privacy Policy when necessary — for example, when we introduce a new feature that involves collecting data in a new way, when applicable law changes, or when our practices change. The "Last Updated" date at the top of this page always reflects the current version.

Where changes are material — affecting how we use your data in a significant new way — we will notify you via email or in-platform notification at least 7 days before the change takes effect. This gives you time to review the updated Policy and, if you disagree with it, to close your account and withdraw your balance before the new terms apply.

Continued use of jj 777 following notification of a Policy update constitutes your acceptance of the revised terms.

If you have any question about this Privacy Policy, want to exercise any of your data rights, or have a concern about how jj 777 has handled your personal data, please contact our Privacy team:

• Email: support@jj777.run — subject line "Privacy Policy Query" or "Data Rights Request"
• Live Chat: Available 24/7 from any page on jj777.run — response within minutes
• Language: Our support team responds in Urdu and English — use whichever is more comfortable for you

We will acknowledge your query within 24 hours and aim to resolve it within 14 business days. For data rights requests, the statutory maximum response time is 30 days.