mj77 Privacy Policy — Your Data, Your Rights

For the purposes of this Privacy Policy, mj77 — operating the online gaming platform accessible at mj77.biz — acts as the data controller in respect of the personal data of registered Pakistani players and website visitors. As data controller, mj77 determines the purposes for which and the manner in which personal data is processed.

All data protection queries, access requests, and complaints should be directed to the mj77 data protection contact at [email protected] with the subject line "Privacy Request — [your registered mobile number]".

mj77 collects personal data across the following categories, as detailed in the summary table above:

• Identity Data: Collected during registration and KYC. This includes your full legal name as printed on your CNIC, your CNIC number, date of birth, and a selfie photograph for biometric matching. This data is mandatory — accounts cannot be verified without it.
• Contact Data: Your mobile number and email address collected at registration. Your mobile number may be linked to your JazzCash or EasyPaisa wallet for payment processing. Contact data is used to send account security alerts, OTP codes, and support communications.
• Financial Data: mj77 records the amounts of your deposits and withdrawals in PKR, and retains tokenised payment method identifiers (we do not store full bank account numbers or complete wallet credentials). Raw financial credentials are processed directly by the relevant payment provider.
• Transaction Data: A complete record of all gaming activity on your mj77 account — including cricket bets placed, live casino sessions, and slot game spins — is retained for account management, responsible gaming monitoring, and regulatory compliance purposes.
• Technical Data: When you access mj77, our systems automatically record your IP address, device identifiers, browser configuration, and operating system. This data is used primarily for security purposes, including detecting duplicate accounts and identifying suspicious login attempts.
• Usage Data: Aggregated and individual-level data about how you navigate mj77 — which games you play, how long your sessions last, and which features you use — helps us improve the platform and identify players who may benefit from responsible gaming outreach.

mj77 collects personal data through the following mechanisms:

• Direct Submission: You provide identity data, contact data, and financial data directly when you register for a mj77 account, complete the KYC process, make deposits or withdrawal requests, or contact our support team.
• Automated Collection: Technical data and usage data are collected automatically when you browse or interact with the mj77 platform, using server logs, cookies, and similar tracking technologies described in Section 9 of this Policy.
• Third-Party Payment Providers: When you initiate a deposit or withdrawal via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, Raast, or USDT TRC20, those providers may share transaction confirmation data with mj77 to reconcile your account balance. mj77 receives only the data necessary to confirm payment completion.
• KYC Verification Services: For identity and age verification, mj77 may use automated document verification tools. CNIC scan data processed through such tools is handled under strict data processor agreements.

mj77 processes your personal data for the following clearly defined purposes:

• Account Registration and Management: To create and maintain your mj77 player account, authenticate your identity at login, and keep your account settings up to date.
• Age and Identity Verification (KYC): To confirm that you are at least 21 years of age and that your identity matches the CNIC you have provided. This is a legal and operational obligation.
• Payment Processing: To process PKR deposits via JazzCash, EasyPaisa, and other supported methods, to credit your mj77 account balance, and to execute withdrawal requests to your registered payment method.
• Fraud Prevention and Security: To detect and prevent unauthorised account access, duplicate account creation, money laundering, bonus abuse, and other fraudulent activities. Technical data and transaction data are central to this purpose.
• Responsible Gaming: To monitor gaming patterns against responsible gaming thresholds you have set, to identify players who may be displaying signs of problem gambling, and to apply any self-exclusion or deposit limit restrictions you have activated.
• Customer Support: To respond to your queries, resolve disputes, and maintain records of support interactions for quality and compliance purposes.
• Legal and Regulatory Compliance: To comply with applicable anti-money laundering requirements, financial reporting obligations, and any lawful requests from competent authorities.
• Platform Improvement: To analyse aggregated usage patterns and improve the mj77 platform, game selection, and user experience for Pakistani players.

mj77 relies on the following legal bases for processing personal data:

• Contractual Necessity: Processing required to fulfil our contractual obligations to you as a registered player — including account management, KYC verification, and payment processing — is carried out on the basis that it is necessary for the performance of our agreement with you.
• Legal Obligation: Certain processing activities, including anti-money laundering checks, age verification, and maintaining financial transaction records, are required by applicable law. mj77 must conduct this processing regardless of consent.
• Legitimate Interests: mj77 processes technical data and usage data on the basis of our legitimate interests in operating a secure, fair, and fraud-free gaming platform. We have assessed that these interests do not override your fundamental privacy rights.
• Consent: Where mj77 sends you optional marketing communications or non-essential personalisation features, we rely on your freely given and withdrawable consent. You may withdraw consent at any time by contacting [email protected].

mj77 does not sell your personal data. We share personal data only in the following limited and defined circumstances:

• Payment Providers: We share the minimum data required (name, transaction amount, account reference) with JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, Raast, and crypto processors to execute your deposit and withdrawal requests.
• KYC and Identity Verification Partners: CNIC data and selfie images are shared with contracted identity verification service providers solely for the purpose of age and identity verification. These providers operate under binding data processing agreements and may not use your data for any other purpose.
• Fraud Prevention and Security Services: Technical data including IP addresses and device fingerprints may be shared with fraud detection service providers to protect the integrity of the mj77 platform and all players on it.
• Legal and Regulatory Authorities: mj77 will disclose personal data to law enforcement agencies, regulatory bodies, or courts when required to do so by a lawful order or legal obligation. We will notify affected players of such disclosure where permitted by law.
• Business Transfers: In the event of a merger, acquisition, or sale of mj77 as a business, player data may be transferred to the acquiring entity subject to equivalent privacy protections. Players will be notified of any such transfer.

mj77 retains personal data for no longer than is necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods required by law and operational necessity:

• KYC and Identity Records: Retained for a minimum of 5 years from the date of account closure or last transaction, as required by anti-money laundering record-keeping standards.
• Financial Transaction Records: Retained for a minimum of 5 years from the date of each transaction for audit and compliance purposes.
• Active Account Data: Retained for the duration of your account and for 2 years following voluntary account closure, to facilitate reactivation requests and resolve any post-closure disputes.
• Support Communications: Chat logs and email correspondence are retained for 2 years from the date of the interaction.
• Technical and Usage Data: Aggregated and anonymised usage analytics are retained indefinitely. Raw technical data (IP logs, device data) is retained for 12 months from collection.

Upon expiry of applicable retention periods, personal data is securely deleted or anonymised so that it can no longer be associated with an identifiable individual.

mj77 implements a layered security architecture to protect the personal data of Pakistani players. Our technical and organisational measures include:

• Transport Layer Security: All communications between your browser or app and mj77 servers are encrypted using TLS 1.3, the current industry standard for in-transit data protection.
• Encryption at Rest: Sensitive personal data including CNIC numbers, KYC document images, and payment identifiers are encrypted at rest using AES-256 encryption within our secure data infrastructure.
• Access Controls: Access to personal data within mj77's internal systems is restricted on a strict need-to-know basis. All staff with data access undergo background verification and receive regular data protection training.
• Two-Factor Authentication: mj77 offers SMS-based 2FA for all player accounts and strongly encourages its use. Internal administrative systems require 2FA for all personnel.
• Intrusion Detection: Automated monitoring systems run continuously to detect and respond to unusual access patterns, potential breaches, and system anomalies.
• Penetration Testing: mj77 conducts regular third-party security assessments of its platform infrastructure to identify and remediate vulnerabilities before they can be exploited.

mj77 uses cookies and similar tracking technologies to operate and improve the platform. The categories of cookies we use are:

• Strictly Necessary Cookies: Required for the platform to function. These include session authentication cookies that keep you logged in during a gaming session. These cannot be disabled without breaking core platform functionality.
• Functional Cookies: Remember your preferences — such as language settings, preferred game categories, and responsible gaming reminder settings — so you do not have to reconfigure them on every visit.
• Analytics Cookies: Collect anonymised usage data to help us understand how Pakistani players navigate mj77 and which features are most used. This data informs platform improvements.
• Security Cookies: Support fraud detection and duplicate account prevention by assigning a consistent device identifier to your browser session.

mj77 does not use third-party advertising cookies or tracking pixels from ad networks. You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies may impair your ability to use the mj77 platform.

As a mj77 player, you have the following rights in respect of your personal data. To exercise any of these rights, contact [email protected] with the subject line "Data Rights Request":

• Right of Access: You may request a copy of all personal data mj77 holds about you. We will provide this within 30 days of a verified request.
• Right to Rectification: You may request correction of inaccurate personal data. For identity data linked to your CNIC, updated supporting documentation may be required.
• Right to Erasure: You may request deletion of your personal data where mj77 no longer has a legal basis to retain it. Note that KYC and financial transaction records are subject to mandatory minimum retention periods and cannot be deleted until those periods expire.
• Right to Restrict Processing: You may request that mj77 pause processing of your data in certain circumstances, for example while a rectification request is being resolved.
• Right to Data Portability: You may request a structured, machine-readable export of your personal data for transfer to another service.
• Right to Object: You may object to processing based on legitimate interests. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., optional marketing), you may withdraw that consent at any time with immediate effect.

mj77 is strictly an 21+ platform. We do not knowingly collect personal data from individuals under the age of 21. CNIC-based age verification is a mandatory step for all Pakistani players before real-money gaming access is granted.

If mj77 becomes aware that an account was registered by a person under 21 years of age, the account will be suspended immediately, the KYC data reviewed, and any deposited real-money funds returned to the originating payment method. All gaming activity conducted through the underage account will be voided.

mj77 may update this Privacy Policy from time to time to reflect changes in our data practices, platform features, or applicable legal requirements. When we make material changes — such as collecting new categories of personal data or sharing data with new categories of third parties — we will notify registered Pakistani players by email and/or an in-platform notification at least 7 days before the changes take effect.

Non-material changes, such as corrections of typographical errors or clarifications that do not affect how we actually process your data, may be published immediately without prior notice. The "Last Updated" date at the top of this Policy reflects the most recent revision.

Continued use of mj77 after the effective date of a revised Privacy Policy constitutes your acknowledgement of the updated terms. If you do not accept a material change, you should request account closure by contacting [email protected] before the effective date.

If you have any questions about this Privacy Policy, wish to exercise your data rights, or want to raise a data protection concern, please contact the mj77 data protection team through the following channel:

• Email: [email protected] (subject line: "Privacy Request — [your registered mobile number]")
• Response Time: We aim to acknowledge all privacy-related queries within 2 business days and resolve them within 30 calendar days.
• Language: You may write to us in English. Pakistani-English correspondence is perfectly fine.

For general support queries unrelated to data protection, please use the same email address with an appropriate subject line. Our support team is available 7 days a week.