jk77 Privacy Policy

1. Overview & Scope

This Privacy Policy governs the collection, processing, storage, and disclosure of personal data by jk77 (referred to in this document as "jk77", "we", "us", or "our") in relation to all users of the jk77 platform (referred to as "you", "the user", or "the player").

This policy applies to all data collected through the following channels and touchpoints:

• The jk77 website accessible at jk77.cam
• The jk77 mobile application (where available)
• Account registration, KYC verification, and login processes
• Financial transactions including deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and Raast
• Customer support communications via live chat, email, and any other support channel
• Promotional participation, bonus claims, and loyalty programme activity
• Responsible gaming interactions including self-exclusion and deposit limit requests

jk77 operates as both a data controller and, in certain service arrangements with third-party game providers and payment processors, a data processor. Where jk77 acts as a processor on behalf of a third-party controller, the relevant third party's privacy documentation will apply in addition to this policy.

2. Data We Collect

jk77 collects the following categories of personal data from registered and prospective users:

2.1 Identity & Registration Data

• Full legal name as it appears on your CNIC or passport
• Date of birth (for age verification — all users must be 21 or older)
• Pakistani Computerised National Identity Card (CNIC) number
• Passport number (where provided as an alternative KYC document)
• Gender (as stated on identity documents)
• Nationality and country of residence

2.2 Contact Data

• Email address (used for account communications and security alerts)
• Pakistani mobile phone number (used for account verification and support)
• City of residence (e.g. Karachi, Lahore, Islamabad, Faisalabad, Rawalpindi)
• Residential address (collected during enhanced KYC verification)

2.3 Financial Data

• JazzCash or EasyPaisa wallet number associated with deposit/withdrawal transactions
• Bank account details (IBAN, account title, bank name) where bank transfer is the chosen payment method
• Transaction history including deposit amounts, withdrawal requests, and account balance changes — all denominated in PKR
• Source of funds documentation submitted during enhanced due diligence procedures

2.4 Gaming & Behavioural Data

• Bet history across all products including cricket sportsbook, slot games, live casino, Fruit Shop, and Fortune Dragon
• Session duration, frequency of play, and time-of-day patterns
• Game preferences and wagering patterns
• Bonus usage history and wagering requirement progress
• Responsible gaming tool usage including deposit limits set and self-exclusion requests

2.5 Technical & Device Data

• IP address at time of registration, login, and transaction
• Device type, operating system, and browser version
• Geolocation data (city-level, not precise GPS) derived from IP address
• Session identifiers and authentication tokens
• Cookies and similar tracking technologies (see Section 7)

2.6 Communications Data

• Content of support tickets and live chat transcripts
• Records of email correspondence with jk77 support or compliance teams
• Feedback and survey responses submitted voluntarily

3. How We Collect Your Data

jk77 collects personal data through the following methods:

3.1 Direct Collection

Data you actively provide to jk77, including information entered during account registration, KYC document uploads, payment method setup, support requests, and responsible gaming tool activation. This is the primary source of identity, contact, and financial data held by jk77.

3.2 Automated Collection

Data collected automatically when you interact with the jk77 platform, including technical and device data, session information, and behavioural data derived from your gaming activity. This data is collected through server logs, cookies, pixel tags, and similar technologies embedded within the jk77 platform.

3.3 Third-Party Sources

jk77 may receive supplementary data from trusted third parties in the following circumstances:

• Identity verification providers: Third-party KYC services used to validate CNIC authenticity and cross-reference identity data
• Payment processors: Transaction status, confirmation references, and fraud risk signals from JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and Raast
• Fraud prevention databases: Risk indicators from shared industry fraud prevention networks
• Self-exclusion registers: Data from responsible gaming self-exclusion schemes to identify individuals who should not hold active accounts

4. How We Use Your Data

jk77 uses the personal data it collects for the following specific and legitimate purposes:

5. Legal Basis for Processing

jk77 processes personal data under the following legal bases, consistent with internationally recognised data protection frameworks:

• Contractual necessity: Processing required to fulfil the agreement between jk77 and the user, including account management, payment processing, and delivery of gaming services.
• Legal obligation: Processing required to comply with applicable legal and regulatory requirements, including anti-money laundering (AML) obligations, KYC requirements, and mandatory reporting to licensing and law enforcement authorities.
• Legitimate interests: Processing carried out on the basis of jk77's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and service improvement — provided such interests do not override the fundamental rights and freedoms of the data subject.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent — principally for the sending of marketing and promotional communications. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

6. Data Sharing & Disclosure

jk77 may share your personal data with the following categories of recipients under strictly controlled conditions:

6.1 Service Providers & Processors

Third-party companies engaged by jk77 to provide services that require access to personal data, including payment processors (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast), KYC verification providers, cloud hosting infrastructure providers, customer support platform operators, and game content suppliers. All such processors are bound by written data processing agreements obligating them to handle data only as directed by jk77 and to maintain appropriate security standards.

6.2 Regulatory & Legal Authorities

jk77 is obligated under its international gaming licence and applicable AML regulations to disclose certain data to competent authorities upon lawful request. This includes licensed gaming regulators, financial intelligence units, and law enforcement agencies. jk77 will not notify users of such disclosures where prohibited from doing so by law.

6.3 Fraud Prevention Networks

jk77 participates in shared industry fraud prevention initiatives. Anonymised or pseudonymised risk signals may be shared with fraud prevention databases to protect the broader gaming ecosystem. No directly identifying personal data is shared with other operators through these networks without explicit legal authority to do so.

6.4 Corporate Transactions

In the event of a merger, acquisition, restructuring, or sale of jk77 or its assets, personal data held by jk77 may be transferred to the acquiring entity as part of the transaction. Users will be notified of any such transfer and the privacy implications prior to the transfer taking effect, to the extent required by applicable law.

7. Cookies & Tracking Technologies

jk77 uses cookies and similar tracking technologies to operate, secure, and improve the platform experience. The following categories of cookies are in use on the jk77 platform:

• Strictly Necessary Cookies: Essential for platform operation — these enable login sessions, security authentication, and basic platform functionality. These cannot be disabled without impairing platform access.
• Functional Cookies: Remember your preferences such as language settings, display options, and responsible gaming configurations between sessions.
• Analytical Cookies: Collect aggregated, anonymised data about how users interact with the jk77 platform, used solely to improve service quality and user experience. No individual profiles are built from analytical data alone.
• Security Cookies: Used for fraud detection, bot prevention, and protection against unauthorised account access attempts.

You may manage your cookie preferences through your browser settings. Disabling functional or analytical cookies will not prevent you from using the jk77 platform, but may affect your experience. Disabling strictly necessary cookies will prevent access to the platform entirely.

8. Data Retention

jk77 retains personal data for the minimum period necessary to fulfil the purposes for which it was collected, subject to the following retention standards:

• Active account data: Retained for the full duration of your registered account relationship with jk77, plus a mandatory post-closure retention period.
• KYC and identity documents: Retained for a minimum of 5 years following account closure, in compliance with international AML regulatory requirements.
• Transaction and financial records: Retained for a minimum of 5 years from the date of each transaction, in line with standard financial record-keeping obligations.
• Gaming history and session data: Retained for 2 years following account closure for responsible gaming monitoring purposes.
• Support communications: Retained for 3 years from the date of the final communication in a support thread.
• Marketing consent records: Retained for the period of consent plus 3 years to demonstrate compliance in the event of a regulatory enquiry.

Following the expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with jk77's data destruction procedures.

9. Data Security

jk77 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure:

• Encryption in transit: All data transmitted between your device and jk77 servers is encrypted using TLS 1.3, the current industry standard for transport layer security.
• Encryption at rest: Sensitive personal and financial data stored on jk77 servers is encrypted at rest using AES-256 encryption.
• Access controls: Access to personal data within jk77's organisation is granted on a strict need-to-know basis. All staff with data access are subject to confidentiality obligations and background screening.
• Two-factor authentication: jk77 offers and encourages 2FA on all user accounts. Internal system access by jk77 staff requires mandatory multi-factor authentication.
• Penetration testing: The jk77 platform undergoes regular independent security audits and penetration testing to identify and remediate vulnerabilities before they can be exploited.
• Incident response: jk77 maintains a documented security incident response plan. In the event of a data breach affecting your personal data, jk77 will notify affected users and relevant authorities within the timeframe required by applicable law.

While jk77 takes all reasonable measures to protect your data, no online platform can guarantee absolute security. You are responsible for keeping your own account credentials confidential and for notifying jk77 immediately of any suspected unauthorised access.

10. Your Rights Over Your Data

As a jk77 user, you hold the following rights in respect of your personal data. To exercise any of these rights, contact jk77 support with a clear written request and your account verification details:

11. Children & Minors

The jk77 platform is strictly intended for individuals who are 21 years of age or older. jk77 does not knowingly collect personal data from individuals below the age of 21 under any circumstances.

Age verification is conducted as part of the mandatory KYC process for all registered accounts. Where jk77 discovers that an account has been opened by or on behalf of an individual under the age of 21, the account will be immediately suspended, all activity on the account will be voided, any deposits made to the account will be returned to the funding source, and the incident will be reported to relevant authorities where required.

12. International Data Transfers

jk77 operates infrastructure across multiple jurisdictions as part of its internationally licensed gaming operation. Personal data collected from Pakistani users may therefore be transferred to, stored in, and processed in countries outside Pakistan. Where such transfers occur, jk77 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that described in this Privacy Policy.

Safeguards used by jk77 for international transfers include:

• Standard contractual clauses incorporated into data processing agreements with all international sub-processors
• Hosting of user account data in jurisdictions subject to recognised data protection frameworks
• Encryption of all data in transit across international network connections

By using the jk77 platform, you consent to the international transfer of your personal data under the safeguards described above.

13. Amendments to This Policy

jk77 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform operations. When material changes are made, jk77 will notify registered users via email and post a prominent notice on the jk77 platform at least 7 days before the revised policy takes effect.

The "Last Updated" date at the top of this document will always reflect the most recent revision. We encourage you to review this page periodically. Your continued use of the jk77 platform following the effective date of a revised Privacy Policy constitutes your acknowledgement of and agreement to the updated terms.

14. Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise your data rights, or want to raise a concern about how jk77 has handled your personal data, please contact the jk77 Data Protection team using the details below:

If you are not satisfied with jk77's response to a privacy complaint, you have the right to escalate your complaint to the relevant data protection supervisory authority in the jurisdiction governing jk77's licensing arrangement. Details of the relevant authority will be provided in jk77's response to your initial complaint.