Privacy Policy — How ju777 Handles Your Personal Data

1 Introduction

This Privacy Policy ("Policy") describes how ju777 ("ju777", "we", "us", "our"), operated by the Operator identified in the platform's official documentation, collects, uses, discloses, stores and protects the personal data of users ("you", "User", "Data Subject") who access or use the ju777 website at https://ju777.cam and all associated services (the "Service").

This Policy forms part of and should be read alongside the Terms & Conditions and the Responsible Gambling Policy. By registering an account or using the Service, you acknowledge that you have read and understood this Policy and consent to the data practices described herein to the extent that consent is the applicable legal basis for a given processing activity.

ju777 processes personal data in accordance with the data protection laws applicable in the Operator's licensing jurisdiction. This Policy also acknowledges that Pakistani users may be subject to the Personal Data Protection Bill framework as it continues to develop in Pakistan, and we endeavour to align our practices accordingly where practically applicable.

2 Definitions

For the purposes of this Policy, the following definitions apply:

• "Personal Data" means any information relating to an identified or identifiable natural person, including name, identification number, location data, online identifiers or factors specific to that person's identity.
• "Processing" means any operation performed on personal data, including collection, recording, storage, adaptation, retrieval, disclosure, erasure or destruction.
• "Data Controller" means the Operator — the legal entity that determines the purposes and means of processing your personal data in connection with the Service.
• "Data Processor" means any third party that processes personal data on behalf of the Data Controller under a written agreement, including payment processors, KYC verification providers and cloud hosting services.
• "Cookies" means small text files placed on your device by the Service that store information about your session, preferences and behaviour on the platform.
• "KYC" means Know Your Customer — the identity and age verification process required by the Operator's licensing obligations and applicable anti-money laundering frameworks.
• "AML" means Anti-Money Laundering — the legal and regulatory framework that requires financial and gaming operators to detect, report and prevent money laundering activity.
• "Special Category Data" means sensitive personal data such as health information, which may be processed in limited circumstances in connection with responsible gambling assessments.

3 Data We Collect

ju777 collects personal data through several channels. The categories of data collected, and the context in which they are collected, are set out below:

3.1 Registration Data

When you create an account, we collect the information you provide in the registration form, which typically includes: full name, date of birth, email address, country of residence, city, username and chosen password (stored in hashed form — never in plain text).

3.2 Identity Verification (KYC) Data

To comply with our licensing obligations, we collect identity documents and supporting data during the KYC process. For Pakistani users, this typically includes a copy of your CNIC (Computerised National Identity Card) or passport, a selfie or liveness photograph, and where required, a proof-of-address document such as a utility bill or bank statement issued within the past 90 days.

3.3 Financial Data

We collect data necessary to process deposits and withdrawals, including payment method identifiers (e.g., partial card numbers, mobile wallet references, bank account references). Full payment credentials are processed by our licensed payment processors; ju777 does not store complete card numbers. Familiar Pakistani payment references — Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah — may appear as contextual identifiers in transaction records. None of these providers endorses or supports gambling on this platform.

3.4 Transaction & Gaming Activity Data

We maintain records of all deposits, withdrawals, wagers, game sessions, bonus activations and account balance changes. This data is required for regulatory record-keeping, dispute resolution and responsible gambling monitoring.

3.5 Technical & Device Data

When you access the Service, we automatically collect technical data including your IP address, browser type and version, operating system, device identifiers, referring URLs and session timestamps. This data is used for security monitoring, fraud detection and platform optimisation.

3.6 Communications Data

We retain records of support interactions conducted via Live Chat, email and the Help Center. This includes the content of your messages, attachments you share with support agents and timestamps of communication events.

3.7 Responsible Gambling Data

Where you use responsible gambling tools — such as setting deposit limits, activating self-exclusion or completing self-assessment questionnaires — we record this data to enforce the restrictions you have requested and to support safeguarding obligations.

4 Legal Basis for Processing

ju777 processes your personal data only where a valid legal basis exists under applicable data protection law. The legal bases we rely upon are:

• Performance of a Contract: Processing necessary to provide the Service you have registered for, including account management, transaction processing and support.
• Legal Obligation: Processing required to comply with applicable laws, including AML regulations, licensing conditions, KYC obligations and financial record-keeping requirements.
• Legitimate Interests: Processing for purposes such as fraud detection, platform security, analytics and improving the Service, where these interests are not overridden by your data protection rights.
• Consent: Where we rely on consent for specific processing activities (such as certain marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal. Consent withdrawal requests should be directed to our support team.
• Vital Interests: In limited circumstances, processing may be necessary to protect the vital interests of a data subject — for example, in connection with responsible gambling safeguarding measures.

5 How We Use Your Data

The personal data ju777 collects is used for the following purposes:

• Creating and managing your player account, including authentication and access control.
• Verifying your identity and age in compliance with KYC and AML obligations under the Operator's licence.
• Processing deposits, withdrawals and other financial transactions, including currency conversion where applicable (PKR display to processing currency).
• Detecting, investigating and preventing fraud, money laundering, collusion and other prohibited activity on the platform.
• Enforcing responsible gambling restrictions you have activated, including deposit limits, self-exclusion periods and cool-off intervals.
• Providing customer support, resolving disputes and managing formal complaints.
• Sending transactional communications including account notifications, deposit confirmations, withdrawal status updates and security alerts.
• Sending promotional communications, where you have opted in to receive them, subject to your communication preferences.
• Monitoring and improving platform performance, security and user experience through aggregated and individual analytics.
• Complying with court orders, regulatory requests and other legally binding obligations directed at the Operator.

6 Cookies & Tracking Technologies

ju777 uses cookies and similar tracking technologies to operate the platform effectively and to provide a consistent user experience. The types of cookies used on the platform include:

• Strictly Necessary Cookies: Required for the platform to function. These include session authentication tokens, security cookies and load-balancing identifiers. They cannot be disabled without affecting core functionality.
• Functional Cookies: Store your preferences such as display settings, language selection and responsible gambling tool states so these do not need to be reconfigured on each visit.
• Analytics Cookies: Collect aggregated, anonymised data about how users navigate the platform — pages visited, session duration, entry and exit points. This data is used to improve the platform. Where third-party analytics tools are used, data shared with them is governed by data processing agreements.
• Security & Fraud Prevention Cookies: Help detect suspicious behaviour, bot activity and account takeover attempts by fingerprinting device and session characteristics.

You may manage cookie preferences through your browser settings. Disabling cookies beyond strictly necessary categories may affect the performance and feature availability of the platform. A cookie consent mechanism is presented upon your first visit to the platform.

7 Data Sharing & Third Parties

ju777 does not sell your personal data. We may share personal data with third parties only in the following circumstances:

• Licensed Payment Processors: To facilitate deposits and withdrawals. Payment processors receive only the data necessary to execute transactions and are bound by PCI-DSS compliance requirements and contractual data protection obligations.
• KYC / Identity Verification Providers: Specialist third-party providers process identity documents and conduct liveness checks on our behalf. These providers are contractually bound to use your data solely for verification purposes.
• Cloud Hosting & Infrastructure Providers: The platform is hosted on secure cloud infrastructure. Hosting providers access data only as required for infrastructure management and are governed by data processing agreements.
• Fraud Prevention & AML Screening Services: We may share transaction and identity data with industry-recognised fraud prevention and AML screening databases to identify and prevent financial crime.
• Regulatory Authorities and Licensing Bodies: The Operator is legally required to provide player data to its licensing authority and, where applicable, to financial intelligence units and law enforcement agencies upon lawful request. We cannot refuse such disclosures.
• Responsible Gambling Organisations: Where self-exclusion schemes extend to shared databases across operators, limited identifying data may be shared with scheme administrators to enforce exclusions.
• Legal and Compliance Advisers: Legal counsel, auditors and compliance consultants may access personal data where strictly necessary to provide professional advice to the Operator, under confidentiality obligations.

All third-party processors operating on our behalf are selected with due diligence and are required to maintain data security standards at least equivalent to those applied by ju777.

8 International Data Transfers

As an online platform serving users across multiple countries, including Pakistani users, personal data processed by ju777 may be transferred to and stored in countries outside Pakistan and, depending on the Operator's jurisdiction, outside other applicable territories.

Where personal data is transferred internationally, the Operator ensures that appropriate safeguards are in place, which may include:

• Standard contractual clauses approved by the applicable supervisory authority in the Operator's jurisdiction.
• Transfers to jurisdictions that have received an adequacy determination from the applicable supervisory authority.
• Binding corporate rules where transfers occur within a corporate group.

By registering and using the Service, you acknowledge and consent to your personal data being transferred, stored and processed in jurisdictions outside Pakistan. If you have concerns about international data transfers, please contact us using the details in Section 14.

9 Data Retention

ju777 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following retention principles:

• Active Accounts: Personal data is retained for the duration of your account's active existence and for a defined period after account closure, in accordance with licensing and AML record-keeping obligations.
• KYC and Financial Records: Identity documents, transaction records and AML-related data are typically retained for a minimum of five (5) years following account closure or the last transaction, as required by the Operator's licensing conditions. This period may be extended where there is an ongoing investigation, regulatory inquiry or legal proceeding.
• Support and Communications Records: Customer support interactions are retained for a period sufficient to resolve potential disputes and complaints, generally up to three (3) years following the relevant interaction.
• Responsible Gambling Records: Self-exclusion and limit records are retained beyond account closure to prevent re-registration during an active exclusion period.
• Technical and Analytics Data: Anonymised or aggregated analytics data may be retained indefinitely as it no longer constitutes personal data.

When personal data is no longer required and no legal obligation requires its continued retention, it is securely deleted or anonymised in accordance with the Operator's data disposal procedures.

10 Data Security

ju777 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, disclosure or destruction. These measures include:

• Encryption of all data transmissions using industry-standard HTTPS/TLS protocols.
• Hashed storage of passwords — plaintext passwords are never stored or transmitted.
• Access controls restricting personal data access to authorised personnel with a documented business need.
• Secure, encrypted storage of KYC documents within the Operator's verification infrastructure.
• Regular security assessments, penetration testing and vulnerability management processes.
• Incident response procedures for the detection, containment and notification of personal data breaches where required by applicable law.

While we apply robust security measures, no online system is entirely immune to security risks. You are responsible for maintaining the security of your own account credentials and for notifying ju777 support immediately if you suspect any unauthorised access to your account.

11 Your Rights as a Data Subject

Subject to applicable data protection law and certain regulatory limitations (particularly where data must be retained under AML or licensing obligations), you hold the following rights in relation to your personal data processed by ju777:

• Right of Access: You may request a copy of the personal data we hold about you, along with information about how it is processed. We will respond to verified access requests within the timeframe prescribed by applicable law.
• Right to Rectification: If personal data we hold about you is inaccurate or incomplete, you may request that it be corrected. For account details, some corrections can be made directly in your account settings; others require support assistance and identity confirmation.
• Right to Erasure ("Right to be Forgotten"): In certain circumstances, you may request the deletion of your personal data. This right is subject to overriding legal obligations — for example, KYC and transaction records must be retained for the minimum period required by the Operator's licence, and we cannot delete data subject to an active legal hold.
• Right to Restriction of Processing: You may request that we restrict processing of your personal data in circumstances prescribed by applicable law, for example while the accuracy of data is contested.
• Right to Data Portability: Where processing is based on consent or contract and is carried out by automated means, you may request your personal data in a structured, commonly used and machine-readable format.
• Right to Object: You may object to processing based on legitimate interests, including direct marketing. Where you object to direct marketing, processing for that purpose will cease immediately.
• Rights Related to Automated Decision-Making: Where automated decision-making with significant effects is applied (for example, fraud scoring), you have the right to request human review of such decisions and to contest outcomes.

To exercise any of the above rights, please contact our support team using the details in Section 14. We may require identity verification before processing a rights request. We will acknowledge your request promptly and respond within the timeframe required by applicable law.

12 Children's Privacy

The ju777 Service is strictly intended for adults aged 18 and over — or the higher minimum age prescribed by the Operator's licensing jurisdiction, whichever is greater. ju777 does not knowingly collect personal data from individuals below the applicable minimum age.

If we become aware that personal data has been collected from a minor, that account will be suspended immediately, associated funds will be held pending investigation, and the data will be handled in accordance with applicable child protection obligations.

If you are a parent or guardian and believe that a minor in your care has registered an account on ju777, please contact our support team immediately using the details in Section 14. We take underage access seriously and will act promptly upon verified reports.

13 Changes to This Policy

ju777 may update this Privacy Policy from time to time to reflect changes in data processing practices, applicable law, licensing requirements or platform functionality. Where changes are material, we will notify you by posting a prominent notice on the platform or by sending a notification to your registered email address prior to the changes taking effect.

Continued use of the Service after the effective date of any revised Policy constitutes your acceptance of the updated terms. If you disagree with a material change, you may close your account and request withdrawal of any eligible balance before the change takes effect by contacting support.

We recommend reviewing this Policy periodically. The "Last reviewed" date displayed at the top of this page is updated with each revision.

14 Contact & Data Requests

For any questions, concerns or formal requests relating to this Privacy Policy or the processing of your personal data by ju777, please use one of the following channels:

• Live Chat: Available 24/7 via the platform's Help Center. Recommended for general privacy questions and account-related queries requiring a prompt response.
• Help Center: Self-service articles covering data rights, account management, KYC and security are available at all times.
• Email (Privacy & Data Requests): [email protected] — displayed as plain text only; not a clickable link. Please include "Privacy Request" in your subject line. Responses are typically provided within 24–48 hours for general queries; formal data subject rights requests are handled within the timeframe prescribed by applicable law.

Where you are not satisfied with our response to a data rights request or privacy concern, you may have the right to lodge a complaint with the relevant data protection supervisory authority in the Operator's licensing jurisdiction.