mj77 Privacy Policy

1.Data Controller

For the purposes of this Privacy Policy, the data controller is mj77, operating the Platform at mj77.asia ("mj77", "we", "us", "our"). References to "you" and "your" mean any individual who registers, accesses, or uses the mj77 Platform. All enquiries regarding this Privacy Policy should be directed to [email protected] (plain text address – not a clickable link).

2.Data We Collect

mj77 collects the following categories of personal data from and about you:

We do not collect special category data (e.g. racial or ethnic origin, political opinions, health data) unless explicitly required for legal compliance and with your specific consent.

3.How We Collect Data

mj77 collects personal data through the following means:

• Direct interactions: Data you provide when creating an account, completing KYC, making a deposit or withdrawal, or contacting mj77 support;
• Automated technologies: Cookies, web beacons, server logs, and session tracking tools that collect technical and usage data when you access the Platform;
• Third-party sources: Payment processors (including JazzCash and Easypaisa), identity verification providers, and fraud detection services that may share data with mj77 to fulfil contractual and regulatory obligations;
• Publicly available sources: Where required for compliance purposes, mj77 may cross-reference publicly available information to verify the accuracy of data you have provided.

4.Legal Basis for Processing

mj77 processes your personal data on the following legal bases:

• Contract performance: Processing necessary to provide the mj77 Platform services you have contracted for, including account management, game access, and payment processing;
• Legal obligation: Processing required to comply with KYC/AML regulations, responsible gaming obligations, and applicable gaming regulations;
• Legitimate interests: Processing for fraud prevention, security monitoring, platform improvement, and analytics, where such interests are not overridden by your rights;
• Consent: Where you have given explicit consent, such as for marketing communications. You may withdraw consent at any time by contacting mj77 support.

5.How We Use Your Data

mj77 uses your personal data for the following purposes:

• Creating and managing your mj77 account, including authentication and account security;
• Processing deposits and withdrawals in PKR via your chosen payment method (JazzCash, Easypaisa, bank transfer);
• Conducting identity verification (KYC) and anti-money laundering (AML) checks as required by applicable regulations;
• Operating responsible gaming tools including deposit limits, session reminders, and self-exclusion programs;
• Personalising your mj77 experience, including game recommendations and relevant promotional offers where you have consented to receive them;
• Detecting, investigating, and preventing fraud, cheating, and other prohibited activities on the Platform;
• Communicating service updates, security alerts, and support responses to your registered contact details;
• Complying with legal and regulatory obligations including reporting obligations to competent authorities where required.

6.Data Sharing & Disclosure

mj77 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We may share your data in the following limited circumstances:

• Service providers: Third-party processors engaged to provide KYC verification, payment processing (JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah), fraud detection, and IT infrastructure services, under contractual obligations of confidentiality and data security;
• Legal authorities: Where required by applicable law, court order, or the request of a competent regulatory or law enforcement authority;
• Business transfers: In the event of a merger, acquisition, or sale of the mj77 business, your data may be transferred to the successor entity subject to equivalent privacy protections;
• Responsible gaming bodies: Where a self-exclusion request requires sharing of data with industry-wide self-exclusion registers or problem gambling support organisations.

7.Cookies & Tracking Technologies

mj77 uses cookies and similar tracking technologies to operate the Platform and improve the user experience. The types of cookies used include:

• Strictly necessary cookies: Essential for the Platform to function, including session management and login authentication. These cannot be disabled without impairing Platform functionality;
• Functional cookies: Remember your preferences such as language, currency display, and game lobby settings;
• Analytics cookies: Collect aggregated data on how users interact with mj77 to improve Platform performance and usability. Data is processed in anonymised form where possible;
• Security cookies: Support fraud detection and account security monitoring functions.

You may manage cookie preferences through your browser settings. Disabling certain cookies may affect Platform functionality. mj77 does not use advertising or cross-site tracking cookies.

8.Data Retention

mj77 retains your personal data for as long as your account is active and for such additional period as is required to comply with applicable legal, regulatory, and audit obligations. In practice:

• Account data and transaction records are retained for a minimum of five (5) years following account closure to satisfy AML and financial record-keeping obligations;
• KYC documentation is retained for the period required by applicable identity verification regulations;
• Support communications are retained for up to two (2) years;
• Responsible gaming records (self-exclusion periods, limit histories) are retained for the duration of any applicable exclusion period plus five (5) years.

Where data is no longer required, mj77 will securely delete or anonymise it in accordance with our internal data lifecycle policy.

9.Data Security

mj77 implements technical and organisational measures proportionate to the risk of processing your personal data. These include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and mj77 servers;
• Encrypted storage of passwords using industry-standard hashing algorithms (bcrypt);
• Role-based access controls limiting mj77 staff access to personal data on a need-to-know basis;
• Regular security audits and penetration testing of the Platform infrastructure;
• Incident response procedures for data breach detection, containment, and notification.

While mj77 takes data security seriously, no system is entirely immune to risk. You are responsible for maintaining the confidentiality of your mj77 login credentials and should notify support immediately if you suspect a security compromise.

10.Your Rights

Subject to applicable law and regulatory constraints (including AML obligations that may limit data deletion rights), you have the following rights regarding your personal data held by mj77:

• Right of access: Request a copy of the personal data mj77 holds about you;
• Right to rectification: Request correction of inaccurate or incomplete data;
• Right to erasure: Request deletion of your data where it is no longer necessary for the purpose for which it was collected, subject to legal retention obligations;
• Right to restrict processing: Request that mj77 restricts processing of your data in certain circumstances;
• Right to data portability: Receive your data in a structured, machine-readable format where technically feasible;
• Right to object: Object to processing based on legitimate interests, including profiling for marketing purposes;
• Right to withdraw consent: Withdraw any consent previously given for optional processing, without affecting the lawfulness of prior processing.

To exercise any of these rights, contact mj77 at [email protected] (plain text – not a clickable link) with "Privacy Request" in the subject line. mj77 will respond within 30 days. Identity verification may be required before actioning any request.

11.Children's Privacy

The mj77 Platform is strictly for adults aged 18 years and above. mj77 does not knowingly collect personal data from persons under 18. If mj77 becomes aware that a minor has registered on the Platform, the account will be closed immediately, any balance forfeited in accordance with the mj77 Terms and Conditions, and all personal data collected from that account will be deleted as soon as practicable. If you are a parent or guardian and believe your child has created an mj77 account, please contact us immediately at [email protected].

12.International Data Transfers

mj77 may store or process your personal data on servers located outside of Pakistan. Where such transfers occur, mj77 takes steps to ensure that adequate protections are in place, including contractual obligations on data processors that are consistent with internationally recognised data protection standards. By using the mj77 Platform, you acknowledge that your data may be transferred internationally for the purposes described in this Policy.

13.Policy Updates

mj77 may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or Platform features. Material updates will be notified via account notification or email to your registered contact. The updated policy will be published on this page with a revised effective date. Your continued use of the mj77 Platform after the effective date of any update constitutes acceptance of the revised Policy.

14.Contact Us

For any privacy-related enquiries, data subject rights requests, or concerns about mj77's data practices, please contact our support team. Our email address is: [email protected] (plain text – not a clickable link). Support is available 24/7. For privacy-specific requests, please include "Privacy Request" in the subject line of your message to ensure prompt routing to the appropriate team.