ej777 Privacy Policy

ej777 ("we", "us", "our") operates the online betting and casino platform accessible at ej777.io (the "Platform"). We are committed to protecting the personal data of all individuals who register an account, browse our Platform, or interact with our customer support team.

This Privacy Policy describes how ej777 collects, uses, stores, and protects personal data relating to users of the Platform ("you", "your"). It also sets out the rights you have regarding your personal data and how you may exercise those rights. This policy should be read alongside our Terms & Conditions, which govern your overall use of the Platform.

By registering an account on ej777 or by continuing to use the Platform after this Privacy Policy has been published or updated, you acknowledge that you have read, understood, and agreed to the data practices described herein. If you do not agree, you must not create an account or continue using the Platform.

This policy applies to all personal data collected through the ej777 website, mobile-optimised browser interface, and any direct communications between you and ej777 support staff, including live chat and email. It does not apply to third-party websites or services that may be linked to or integrated with the Platform — those are governed by the respective third parties' own privacy policies.

ej777 collects personal data through several distinct channels. The categories of data we collect, and the circumstances in which they are collected, are set out below.

2.1 Registration Data

When you create an ej777 account, we collect the following information:

• Full legal name (as it appears on your National Identity Card)
• Date of birth (to verify you meet the 21+ age requirement)
• Residential address, including district, division, and postcode
• Mobile phone number
• Email address
• Preferred username
• Password (stored as a one-way cryptographic hash — we never store plaintext passwords)

2.2 Identity Verification (KYC) Data

Before processing your first withdrawal, ej777 requires completion of our Know Your Customer (KYC) process. During KYC, we collect:

• A copy or photograph of your Bangladesh National Identity Card (NID) — front and back
• A selfie or portrait photograph for facial comparison where required
• Proof of payment method ownership (e.g., a screenshot of your bKash, Nagad, or Rocket wallet displaying your registered mobile number)
• Any supplementary documentation requested to resolve identity discrepancies

2.3 Financial Transaction Data

When you make deposits or withdrawals, we record:

• Transaction amount in BDT
• Payment method used (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank)
• Transaction reference numbers issued by the payment provider
• Date and time of each transaction (Bangladesh Standard Time, UTC+6)
• Running account balance before and after each transaction

2.4 Betting & Gaming Activity Data

We record a full history of your activity on the Platform, including:

• All bets placed, including market, stake, odds, and outcome
• All casino game sessions, including game title, provider, session duration, bets placed, and winnings
• Bonus credits claimed and wagering requirement progress
• Responsible gaming tool settings (deposit limits, session timers, cooling-off periods, self-exclusion status)

2.5 Technical & Device Data

When you access the Platform, our servers automatically collect certain technical data:

• IP address
• Browser type and version
• Device type, operating system, and screen resolution
• Referring URL and exit page
• Pages visited and time spent on each page
• Session identifiers and authentication tokens

2.6 Communications Data

If you contact our support team via live chat or email, we retain records of those communications, including the content of your messages, timestamps, and the resolution notes added by our support agents.

ej777 uses personal data collected from you for the following specific purposes. We do not use your data for any purpose not listed here without first obtaining your explicit consent.

• Account Management: To create, maintain, and administer your ej777 account, including processing login requests, managing your balance, and updating your profile details when you request changes.
• Identity & Age Verification: To confirm that you meet the 21+ age requirement and that the identity you have provided during registration is genuine. This is a legal and regulatory obligation.
• Payment Processing: To facilitate deposits into your account and withdrawals to your nominated payment method. Your payment data is passed to our payment processing partners solely for this purpose.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, money laundering, multiple account creation, and other prohibited activities as defined in our Terms & Conditions. This includes automated risk-scoring of transactions and behavioural pattern analysis.
• Responsible Gaming Compliance: To apply and monitor the responsible gaming tools you have activated, including deposit limits, session timers, cooling-off periods, and self-exclusion orders. We are obligated to honour these settings and to monitor for patterns that may indicate problem gambling behaviour.
• Game Provider Integration: To transmit the minimum data required (typically a session token and account identifier) to third-party game providers so that you can access their casino products through ej777's Platform.
• Customer Support: To respond to your enquiries, investigate complaints, and resolve disputes. Support communications are retained as a record of our interactions with you.
• Service Improvement: To analyse aggregated, anonymised usage data to understand how players interact with the Platform, identify features that need improvement, and develop new products and services.
• Marketing Communications: To send you promotional offers, bonus notifications, and product updates — but only if you have opted in to receive such communications. You may withdraw your marketing consent at any time by contacting [email protected] or updating your account preferences.
• Legal & Regulatory Obligations: To comply with applicable laws and regulations, including anti-money laundering obligations, record-keeping requirements, and any lawful requests from regulatory or law enforcement authorities.

ej777 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual Necessity: Processing that is necessary to perform the contract between you and ej777 — i.e., to provide you with a functioning betting and casino account, process your transactions, and honour your bets. Without this processing, we cannot provide the service.
• Legal Obligation: Processing that is required for ej777 to comply with applicable laws, including identity verification (KYC), anti-money laundering record-keeping, and responding to lawful regulatory or law enforcement requests.
• Legitimate Interests: Processing carried out to protect ej777's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and service analytics — provided those interests are not overridden by your own rights and interests.
• Consent: Processing that is based on your freely given, specific, informed, and unambiguous consent — principally marketing communications. Where consent is the legal basis, you have the right to withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.

ej777 does not sell, rent, or trade your personal data to third parties for their own marketing or commercial purposes. We share personal data only in the specific circumstances described below, and only to the minimum extent necessary for the relevant purpose.

5.1 Payment Service Providers

To process deposits and withdrawals, ej777 shares relevant transaction data with the payment service providers you have chosen to use, including bKash, Nagad, Rocket, Upay, and the banking partners listed in our Terms & Conditions. These providers process your data under their own privacy policies and are not permitted to use your data for any purpose beyond facilitating your ej777 transactions.

5.2 Identity Verification Partners

To conduct KYC checks, ej777 may engage third-party identity verification service providers who specialise in document authentication and facial matching. These partners process your NID and photograph data solely for the purpose of identity verification on our behalf and are bound by strict confidentiality and data processing agreements.

5.3 Game Providers

When you launch a game hosted by a third-party provider (such as Evolution Gaming, Pragmatic Play, Ezugi, NetEnt, Microgaming, or Spribe), ej777 passes a session token and an anonymised player identifier to that provider's gaming server. We do not pass your full name, NID details, or payment information to game providers.

5.4 Fraud Prevention & Security Services

ej777 may share data with specialised fraud prevention and cybersecurity service providers to protect the Platform and its users from fraudulent activity, account takeovers, and other security threats. These providers act as data processors and are contractually prohibited from using your data for any other purpose.

5.5 Legal & Regulatory Authorities

ej777 will disclose personal data to government authorities, regulatory bodies, or law enforcement agencies where we are legally required to do so — for example, in response to a valid court order, subpoena, or regulatory demand. Where permitted by law, ej777 will attempt to notify you before disclosing your data in response to such a request.

5.6 Business Transfers

In the event that ej777 undergoes a merger, acquisition, restructuring, or sale of assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer that materially affects your data rights, and you will have the opportunity to object before the transfer takes place.

ej777 uses cookies and similar tracking technologies on its Platform to provide core functionality, measure performance, and (where you have consented) deliver personalised content. A cookie is a small text file placed on your device by a web server when you visit a website. The following categories of cookies are used on ej777:

You can control or delete cookies through your browser settings. Please note that disabling essential cookies will prevent you from logging in to your ej777 account. For instructions on how to manage cookies in your specific browser, refer to your browser's help documentation.

In addition to cookies, ej777 uses server-side session logs and device fingerprinting technology as part of its fraud detection and responsible gaming systems. Device fingerprinting collects a combination of technical device attributes (such as screen resolution, browser version, and installed fonts) to generate a pseudonymous device identifier. This identifier is used solely for security and fraud prevention purposes and is not used for advertising profiling.

ej777 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply:

• Active Account Data: Retained for the full duration of your account's active status. This includes registration data, KYC documents, transaction history, and betting activity records.
• Post-Closure Retention: Following account closure (whether voluntary or by ej777 action), we retain your data for a minimum of five years. This retention period is required to comply with anti-money laundering record-keeping obligations and to enable the resolution of any post-closure disputes.
• KYC Documents: Retained for a minimum of five years from the date of account closure, in line with financial crime compliance requirements.
• Transaction Records: Retained for a minimum of five years from the date of each transaction.
• Support Communications: Retained for three years from the date of the communication, or longer if the communication relates to an unresolved dispute or legal matter.
• Server & Access Logs: Typically retained for 90 days for security monitoring purposes, after which they are automatically purged unless flagged as relevant to an active investigation.
• Marketing Consent Records: Retained for as long as your account is active, and for three years following account closure, to demonstrate compliance with consent requirements.

When data is no longer required and no legal retention obligation applies, ej777 will securely delete or anonymise it so that it can no longer be associated with any individual.

ej777 implements a range of technical and organisational measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures include:

• Encryption in Transit: All Platform pages and API endpoints are served over HTTPS using TLS 1.2 or higher. Unencrypted HTTP connections are automatically redirected to HTTPS.
• Encryption at Rest: Sensitive data fields, including KYC document files and payment method identifiers, are encrypted at the database level using AES-256 encryption.
• Password Security: User passwords are never stored in plaintext. We use a strong one-way hashing algorithm with per-user salt values so that even if our database were ever compromised, raw passwords could not be recovered.
• Access Controls: Access to production systems and databases is restricted to authorised personnel on a strict need-to-know basis. All internal access events are logged and reviewed periodically.
• Session Management: Authentication session tokens are rotated at regular intervals and invalidated on logout. Concurrent logins from multiple devices are monitored for suspicious patterns.
• Infrastructure Security: ej777's Platform infrastructure is hosted on servers with physical access controls, network firewalls, intrusion detection systems, and regular vulnerability scanning.
• Incident Response: ej777 maintains an internal data breach response procedure. In the event of a confirmed breach affecting your personal data, we will notify affected players promptly and take all available remedial action.

While ej777 takes every reasonable precaution to protect your data, no internet-based system can be guaranteed to be 100% secure. You are responsible for maintaining the security of your own login credentials and for accessing the Platform only from trusted, secure devices and networks.

As a user of ej777, you have the following rights with respect to your personal data. To exercise any of these rights, please submit a written request to [email protected] from the email address registered on your account, clearly stating the right you wish to exercise and providing sufficient information for us to identify your account.

• Right of Access: You have the right to request a copy of the personal data ej777 holds about you, along with information about how it is being used. We will respond to access requests within 30 days of receipt.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. We will action verified correction requests within 10 business days.
• Right to Erasure: You may request that ej777 delete your personal data where it is no longer necessary for the purpose it was collected, where you have withdrawn consent (and no other legal basis applies), or where the data has been processed unlawfully. Note that this right is subject to our legal retention obligations — we cannot delete data we are legally required to keep.
• Right to Restriction: You may request that we restrict the processing of your personal data while a rectification or objection request is being assessed, or if you believe data has been processed unlawfully but prefer restriction over erasure.
• Right to Object: You have the right to object to processing based on legitimate interests, including profiling for fraud prevention. ej777 will cease the relevant processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to Withdraw Consent: Where processing is based on your consent (principally marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.
• Right to Data Portability: You may request that ej777 provide your personal data in a structured, commonly used, machine-readable format so that you can transfer it to another service provider, where technically feasible.

ej777 will not discriminate against you for exercising any of these rights — your account will not be penalised, restricted, or closed as a consequence of a data rights request made in good faith.

ej777 takes all reasonable technical and procedural measures to prevent minors from accessing or registering on the Platform. These measures include mandatory age declaration at registration, date-of-birth verification against NID documents during KYC, and device-level signals where available.

If you are a parent or guardian and believe that your child has created an ej777 account without your knowledge, please contact us immediately at [email protected] with the subject line "Minor Account Report". We will investigate the matter as a priority and take prompt action to close the account and delete the associated data.

ej777 also recommends that parents and guardians use third-party parental control tools and internet filtering software on shared devices to prevent underage access to online gambling platforms.

The ej777 Platform integrates with a number of third-party services to deliver its full range of features. Each of these third parties operates its own privacy policy governing data collected through their systems. ej777 is not responsible for the privacy practices of these third parties, and we encourage you to review their policies independently.

The key third-party categories whose services are integrated into ej777 include:

• Casino Game Providers: Evolution Gaming, Pragmatic Play, Ezugi, NetEnt, Microgaming, Spribe. When you launch a game, you enter that provider's gaming environment. The provider may log gameplay data independently under its own data processing terms.
• Payment Processors: bKash, Nagad, Rocket, Upay, and banking partners. Transactions are processed through these providers' own infrastructure and are subject to their respective privacy policies.
• Analytics Tools: ej777 may use server-side analytics tools to measure Platform performance. These tools process aggregated and anonymised data only — they do not receive your name, NID details, or financial data.

Any links to third-party websites that appear on ej777 (including within game interfaces) are provided for convenience only. ej777 does not endorse, control, or accept responsibility for the content or privacy practices of any third-party website.

ej777 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. When we make material changes, we will update the "Last Updated" date at the top of this page and, where the changes are significant, we will notify registered account holders via the email address on file.

We encourage you to review this Privacy Policy periodically. Your continued use of the ej777 Platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with any change, you must cease using the Platform and may request account closure by contacting our support team.

Minor changes — such as corrections to typographical errors, clarifications that do not alter the substance of the policy, or updates to contact details — may be made without specific notification. The version date at the top of the page will always reflect the date of the most recent update, whether minor or material.

If you have any questions, concerns, or requests relating to this Privacy Policy or ej777's data practices, please contact our support team using the details below. All privacy-related enquiries are treated as confidential and are handled by our dedicated compliance team.

• Email (plain text, not a link): [email protected]
• Response Time: We aim to respond to all privacy-related enquiries within 5 business days. Data rights requests (access, rectification, erasure, etc.) will be acknowledged within 3 business days and fully resolved within 30 days.
• Language: All correspondence should be submitted in English to ensure efficient handling by our compliance team.
• Subject Line: Please include a clear subject line such as "Privacy Enquiry", "Data Access Request", "Data Erasure Request", or "Minor Account Report" so that your message is routed to the correct team member promptly.