jf77 Privacy
Policy

jf77 ("we", "us", "our") is the data controller responsible for personal data collected and processed through the jf77.one platform. As data controller, jf77 determines the purposes and means of processing your personal information and is accountable for ensuring that processing is carried out lawfully, fairly, and transparently.

This Privacy Policy applies to all personal data collected by jf77 in connection with:

• Your registration and ongoing use of a jf77 player account.
• Your access to any jf77 product, including casino games, sports betting, live dealer games, and instant card games such as Monster Hi-Lo and Hi-Lo.
• Your interactions with jf77 customer support via live chat or email.
• Your participation in jf77 promotions, loyalty programmes, or marketing communications.
• Your use of the jf77.one website, including browsing activity, device data, and cookies.

This policy does not apply to third-party websites, payment processors, or game providers whose own privacy policies govern any data they independently collect from you.

jf77 collects the following categories of personal data:

jf77 collects personal data through the following means:

• Direct collection: Data you provide when creating an account, completing KYC, making deposits or withdrawals, contacting support, or participating in promotions.
• Automated collection: Technical data collected automatically when you visit jf77.one, including through cookies, server logs, and similar tracking technologies. See Section 10 for full cookie details.
• Third-party collection: Data received from identity verification providers, payment processors (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay), fraud detection services, and game providers. These third parties collect data under their own privacy policies and share relevant data with jf77 under data sharing agreements.
• Publicly available sources: In limited circumstances related to fraud prevention or KYC, jf77 may cross-reference publicly available databases — for example, NADRA records where applicable — to verify the accuracy of identity information.

jf77 uses personal data for the following specific purposes:

• Account management: Creating, maintaining, and operating your jf77 account, including processing logins, account preferences, and security settings.
• Transaction processing: Processing deposits and withdrawals via your chosen payment method, maintaining accurate financial records, and reconciling transactions.
• Identity and age verification: Confirming that you are who you say you are and that you are at least 21 years of age, in compliance with jf77's licensing obligations.
• Fraud prevention and security: Detecting and preventing fraudulent activity, money laundering, bonus abuse, and other prohibited conduct. This includes automated and manual review of account and transaction patterns.
• Legal compliance: Meeting jf77's obligations under its gaming licence, including player activity reporting, suspicious activity reporting, and record-keeping requirements.
• Responsible gaming: Monitoring gaming patterns to identify potential problem gambling behaviour and applying responsible gaming measures where appropriate — including proactive outreach, limit enforcement, and self-exclusion administration.
• Customer support: Responding to your queries, complaints, and requests, and maintaining records of support interactions for quality assurance purposes.
• Platform improvement: Analysing aggregated, anonymised usage data to understand how the platform is used and to improve its performance, design, and game offering.
• Marketing communications: Sending promotional offers, bonus notifications, and news about jf77 — but only where you have opted in to receive such communications. You can opt out at any time.

jf77 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to fulfil the contract between jf77 and you as a registered player — including account management, transaction processing, and customer support.
• Legal obligation: Processing required to comply with jf77's licensing obligations — including KYC/AML requirements, regulatory reporting, and record retention mandates.
• Legitimate interests: Processing necessary for jf77's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and aggregated analytics — where these interests are not overridden by your rights and interests.
• Consent: Processing based on your freely given, specific, and informed consent — primarily for marketing communications and optional personalisation features. You may withdraw consent at any time without affecting the lawfulness of prior processing.

jf77 shares personal data only in the following circumstances and only with parties who have committed to appropriate data protection standards:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and USDT wallet processors receive the transaction and identity data necessary to process your deposits and withdrawals. Each operates under its own privacy policy.
• Identity verification providers: Third-party KYC service providers receive your identity documents and CNIC data to perform automated and manual verification checks. These providers process data under strict contractual obligations.
• Game providers: Third-party game software providers receive your account identifier and gaming session data to facilitate gameplay, calculate results, and maintain game integrity. They do not receive your full identity or financial data.
• Fraud prevention services: jf77 shares flagged account data with industry-wide fraud prevention databases to protect players and the platform from fraudulent activity.
• Regulatory and legal authorities: jf77 discloses data to its gaming regulator, financial intelligence units, law enforcement, or courts when required to do so by law or regulatory obligation. This is not discretionary — jf77 cannot refuse legally mandated disclosures.
• Professional advisers: Lawyers, auditors, and compliance consultants who provide services to jf77 may access personal data under strict confidentiality obligations.

jf77 does not sell, rent, or trade your personal data to any third party for their own commercial purposes under any circumstances.

As an internationally licensed gaming platform, jf77's data processing infrastructure may involve the transfer of personal data to countries outside Pakistan. This can occur when data is processed by servers, KYC providers, or game providers located in other jurisdictions.

Where international transfers take place, jf77 ensures that appropriate safeguards are in place, including:

• Transfers to countries recognised as providing an adequate level of data protection.
• Standard contractual clauses or equivalent mechanisms that impose data protection obligations on the recipient.
• Transfers to service providers whose own data protection practices meet international standards comparable to those required by jf77's licensing jurisdiction.

You may request information about the specific safeguards in place for any international transfer by contacting jf77 support at [email protected].

jf77 retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following retention standards:

After retention periods expire, data is securely deleted or anonymised so that it can no longer be linked to an individual. Anonymised data may be retained indefinitely for statistical and analytical purposes.

jf77 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction:

• Encryption: All data transmitted between your device and jf77 servers is encrypted using TLS 1.3. Personal and financial data stored in jf77's systems is encrypted at rest using AES-256 encryption.
• Access controls: Access to personal data is restricted to authorised personnel whose roles require it. Access is controlled through role-based permissions with full audit logging of all access events.
• Two-factor authentication: jf77 strongly encourages players to enable 2FA on their accounts and provides it as a standard feature. Internal systems access by jf77 staff requires 2FA without exception.
• Penetration testing: jf77's platform undergoes regular security testing by independent cybersecurity professionals to identify and remediate vulnerabilities before they can be exploited.
• Incident response: jf77 maintains a documented data breach response plan. In the event of a breach affecting your personal data, jf77 will notify affected players and relevant authorities within the timeframes required by applicable law.

jf77 uses cookies and similar technologies on jf77.one for the following purposes:

• Essential cookies: These are required for the platform to function. They maintain your login session, remember your language preferences, and ensure secure navigation. These cookies cannot be disabled without breaking core platform functionality.
• Analytics cookies: These help jf77 understand how players use the platform — which pages are visited most, how long sessions last, and where players encounter difficulties. This data is aggregated and used to improve the platform. Analytics cookies are only placed with your consent.
• Functionality cookies: These remember your preferences — such as preferred language, display settings, and responsible gaming configuration — to provide a more personalised experience.
• Fraud prevention cookies: These help jf77 identify unusual or potentially fraudulent activity, such as multiple accounts originating from the same device.

jf77 does not use third-party advertising cookies or allow advertising networks to place tracking cookies on jf77.one. You will not see targeted advertising elsewhere on the internet based on your jf77 activity.

You can manage cookie preferences through your browser settings or through the cookie preference centre available on jf77.one. Note that disabling certain cookies may affect platform functionality.

As a jf77 player, you hold the following rights over your personal data. These rights are real and enforceable — jf77 is committed to honouring them without unnecessary delay:

• Right of Access: You may request a copy of all personal data jf77 holds about you. jf77 will provide this within 30 days of a verified request, free of charge.
• Right to Rectification: If any personal data jf77 holds about you is inaccurate or incomplete, you have the right to have it corrected. For most account data, you can update it directly in your account settings.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data in certain circumstances — for example, where data is no longer necessary for the purpose it was collected, or where you withdraw consent and no other legal basis applies. Note that regulatory retention obligations (Section 8) may prevent full immediate deletion.
• Right to Restriction: You may request that jf77 restrict processing of your data — for example, while the accuracy of data is contested or while an objection is under consideration.
• Right to Data Portability: You may request a copy of the personal data you have provided to jf77 in a structured, machine-readable format.
• Right to Object: You may object to processing based on legitimate interests or for direct marketing purposes. Direct marketing objections will be actioned immediately.
• Rights related to automated decision-making: Where jf77 uses automated decision-making — for example, automated fraud flags or responsible gaming triggers — you have the right to request human review of those decisions where they significantly affect you.

To exercise any of these rights, contact jf77 support at [email protected] with the subject line "Data Rights Request". jf77 will verify your identity before processing any data rights request and will respond within 30 days.

jf77 is strictly prohibited to persons under the age of 21 years. jf77 does not knowingly collect personal data from individuals under 21.

Age verification is a mandatory step before any withdrawal can be processed. jf77's KYC process uses CNIC verification to confirm that all players meet the minimum age requirement. Accounts where KYC reveals the holder to be under 21 will be closed immediately, all balances returned to the payment source, and the data retained only to the extent required to prevent re-registration.

If a parent or guardian believes that a minor has registered a jf77 account or that their CNIC has been used fraudulently, they should contact jf77 support immediately at [email protected]. jf77 takes underage access extremely seriously and will investigate and act on all reports promptly.

jf77 sends marketing communications — including promotional offers, bonus notifications, PSL betting updates, and new game announcements — only to players who have explicitly opted in to receive them.

You can manage your marketing preferences at any time through:

• The "Communication Preferences" section of your jf77 account settings.
• The unsubscribe link included in every marketing email jf77 sends.
• Contacting jf77 support and requesting removal from marketing lists.

Opting out of marketing communications will not affect transactional communications — jf77 will still send you account-related messages such as deposit confirmations, withdrawal notifications, KYC reminders, and responsible gaming communications.

jf77 does not share player data with third-party marketing agencies or advertisers for the purpose of those third parties sending you marketing messages.

The jf77 platform incorporates games, payment tools, and services provided by third parties. While jf77 carefully selects its third-party partners and requires them to maintain appropriate data protection standards, each third-party service operates under its own privacy policy in respect of data that service collects independently.

Key third-party services used by jf77 and their data interactions include:

• Live casino game providers: Provide real-time streaming game content. These providers may collect technical data (IP, device) for game integrity purposes.
• RNG game providers: Provide slot and instant game content. Game round data is shared between jf77 and the provider for result verification and dispute resolution.
• Payment processors: Process financial transactions. Financial and identity data is shared as necessary for transaction completion and fraud prevention.
• KYC verification platforms: Perform automated identity and document checks. Identity data is transferred to these platforms under strict data processing agreements.

jf77 is not responsible for the privacy practices of third-party providers beyond the contractual obligations imposed on those providers by jf77.

jf77 may update this Privacy Policy from time to time to reflect changes in our data practices, regulatory requirements, or platform functionality. The "Last Updated" date at the top of this page will be revised with each update.

Where changes are material — for example, changes that affect how we use your data or the rights available to you — jf77 will notify you by email to your registered address at least 14 days before the changes take effect. You will have the opportunity to review the changes and, if you do not accept them, to close your account and withdraw your balance before the new policy comes into force.

Continued use of jf77 after the effective date of a revised Privacy Policy constitutes acceptance of the updated terms. We recommend bookmarking this page and checking it periodically for the current version.

For any questions, requests, or concerns relating to this Privacy Policy or jf77's data practices, please contact the jf77 data protection team:

• Email: [email protected] (subject line: "Privacy Enquiry")
• Live Chat: Available 24/7 via the jf77.one platform — average response under 2 minutes

jf77 aims to respond to all privacy-related enquiries within 3 business days and to resolve all substantive requests within 30 days.

If you are not satisfied with jf77's handling of a privacy complaint after engaging our internal process, you have the right to escalate your complaint to the data protection authority in jf77's licensing jurisdiction or, where applicable consumer protection laws apply, to the relevant authority in your own jurisdiction.