mj77 Privacy Policy — How We Handle Your Personal Data

01 Introduction

This Privacy Policy ("Policy") is published by mj77 ("mj77", "we", "us", "our"), the operator of the online gaming and sports betting platform accessible at mj77.bid. It sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by mj77.

This Policy applies to all individuals who access or use the mj77 platform in any capacity — including players registered in Karachi, Lahore, Islamabad, Faisalabad, or anywhere else across Pakistan, as well as individuals who browse the site without registering. It applies regardless of the device used to access the platform.

By registering an account with mj77, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, storage, and processing of your personal data as described herein. If you do not agree with this Policy, please discontinue use of the mj77 platform and contact us to request account closure.

02 Data Controller

For the purposes of applicable data protection laws, mj77 acts as the data controller in respect of personal data collected from players through the mj77 platform. As data controller, mj77 determines the purposes for which and the means by which personal data is processed.

Where mj77 engages third-party service providers to process personal data on its behalf (for example, payment processors such as EasyPaisa or identity verification providers), those parties act as data processors and are bound by contractual obligations to process data only on mj77's instructions and in accordance with this Policy.

03 Personal Data We Collect

mj77 collects the following categories of personal data from players:

mj77 does not collect special category personal data (such as health information, religious beliefs, or political opinions) unless it is voluntarily provided by a player in the context of a responsible gaming self-exclusion or problem gambling referral, in which case it is processed strictly for player welfare purposes.

04 How We Collect Your Data

mj77 collects personal data through the following means:

• Direct interactions: Information you provide during account registration, identity verification, deposit and withdrawal requests, contact form submissions, and live chat conversations.
• Automated technologies: Technical data collected automatically when you access the mj77 platform, including via cookies, server logs, and device fingerprinting tools used for fraud detection and security purposes.
• Third-party sources: Identity and age verification data from licensed KYC verification providers; fraud risk scores from anti-money laundering screening services; transaction confirmation data from payment processors (EasyPaisa, JazzCash, HBL, UBL, Meezan Bank).

05 Legal Basis for Processing

mj77 processes your personal data under one or more of the following legal bases:

• Contractual necessity: Processing required to perform our contract with you — i.e., to provide the mj77 gaming services you have registered for, process your PKR deposits and withdrawals, and manage your account.
• Legal obligation: Processing required to comply with our obligations under international gaming licensing conditions, anti-money laundering regulations, and age verification requirements.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and internal analytics — where such interests are not overridden by your data protection rights.
• Consent: Processing for marketing communications, where you have provided specific, informed consent. You may withdraw consent to marketing at any time by contacting mj77 support.

06 How We Use Your Personal Data

mj77 uses your personal data for the following purposes:

• Creating, maintaining, and managing your mj77 player account.
• Processing deposits via EasyPaisa, JazzCash, HBL, UBL, and Meezan Bank, and processing withdrawal requests to verified accounts.
• Verifying your identity and age in compliance with international gaming licensing requirements (know-your-customer / KYC processes).
• Detecting, investigating, and preventing fraud, money laundering, and other prohibited activities on the platform.
• Monitoring gaming activity to identify problem gambling patterns and to trigger responsible gaming interventions where appropriate.
• Providing customer support in English and Urdu via live chat and email.
• Sending you transactional communications related to your account (deposit confirmations, withdrawal updates, security alerts).
• Sending you promotional communications about mj77 offers and bonuses — only where you have consented to receive these.
• Improving the mj77 platform through internal analytics and performance monitoring.
• Complying with applicable legal and regulatory obligations.

07 Data Sharing & Disclosure

mj77 does not sell, rent, or trade your personal data to third parties. We share personal data with the following categories of recipients only to the extent strictly necessary:

• Payment processors: EasyPaisa (Telenor Microfinance Bank), JazzCash, HBL, UBL, and Meezan Bank receive transaction-specific data required to process your deposits and withdrawals.
• Identity verification providers: Licensed KYC and age verification services receive identity document data to fulfil our regulatory obligations.
• Fraud and AML screening services: Risk screening providers receive limited identity and transaction data to perform anti-money laundering checks required under our gaming licence conditions.
• Cloud infrastructure providers: Secure, enterprise-grade cloud hosting providers who process data as our data processors under strict contractual data processing agreements.
• Regulatory and law enforcement authorities: Where required by law, court order, or formal regulatory request from a competent authority, mj77 may be required to disclose player data. We will only comply with legally valid requests.
• Successor entities: In the event of a merger, acquisition, or sale of the mj77 business, player data may be transferred to the successor entity, subject to equivalent data protection obligations.

All third-party processors engaged by mj77 are required to handle personal data in a manner consistent with this Privacy Policy and applicable data protection standards. mj77 conducts due diligence on data processors before engagement.

08 Payment Data & EasyPaisa / JazzCash

mj77 is committed to providing seamless, instant PKR transactions for Pakistani players through EasyPaisa and JazzCash. When you initiate a deposit or withdrawal using these services, the following applies:

• Your mobile wallet number (03XX format) is shared only with the relevant payment provider to execute your specific transaction.
• mj77 does not store full payment card details. mj77 does not accept credit or debit card payments and therefore does not process card numbers.
• Bank account references shared for HBL, UBL, or Meezan Bank transfers are encrypted and stored only for the period required to process the transaction and meet statutory record-keeping requirements.
• Transaction histories are retained for a minimum of five years in accordance with standard gaming licence anti-money laundering requirements.

09 Cookies & Tracking Technologies

The mj77 platform uses cookies and similar tracking technologies to support platform functionality, maintain session security, and improve user experience. The following types of cookies are used:

• Strictly Necessary Cookies: Essential for core platform functionality — including maintaining your logged-in session, remembering security preferences, and supporting EasyPaisa payment redirects. These cannot be disabled without affecting platform usability.
• Performance Cookies: Used to collect anonymised data about how players use the mj77 platform (e.g., pages visited, errors encountered) to help us improve platform performance.
• Functional Cookies: Used to remember your preferences (e.g., language preference, previously viewed game categories) to personalise your experience.
• Security Cookies: Used for fraud detection and device fingerprinting to protect your account from unauthorised access.

mj77 does not use third-party advertising cookies or tracking pixels for external advertising networks. You may manage cookie preferences through your browser settings, though disabling strictly necessary cookies may impair platform functionality.

10 Data Retention

mj77 retains personal data for the following periods, after which data is securely deleted or irreversibly anonymised:

• Account data (active accounts): Retained for the duration of the account relationship plus 5 years following account closure, in accordance with gaming licence requirements.
• Transaction records: Minimum 5 years from the date of transaction, as required under standard anti-money laundering regulations applicable to gaming operators.
• KYC and identity documents: Retained for 5 years following account closure or the completion of the customer relationship.
• Live chat and support logs: Retained for 2 years from the date of the interaction.
• Gaming activity logs: Retained for 5 years for regulatory compliance and dispute resolution purposes.
• Marketing data (where consent was given): Retained until consent is withdrawn, plus a reasonable administrative period.

Where a player has self-excluded from mj77, records of the self-exclusion will be retained for the duration of the exclusion period and for a minimum of 5 years thereafter, to prevent inadvertent re-enrolment.

11 Your Data Rights

As a player on the mj77 platform, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact the mj77 support team using the details in Section 16:

• Right of Access: You may request a copy of the personal data mj77 holds about you. We will respond to verified access requests within 30 days.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data held by mj77. Core account information can be updated directly in your account settings.
• Right to Erasure ("Right to Be Forgotten"): You may request deletion of your personal data. Note that this right is subject to limitations where mj77 is legally obligated to retain data (e.g., anti-money laundering record-keeping requirements). We will inform you clearly if any data must be retained and for what reason.
• Right to Restriction of Processing: You may request that mj77 restrict the processing of your personal data in certain circumstances — for example, where you contest the accuracy of data held, pending verification.
• Right to Data Portability: You may request a copy of your personal data in a structured, machine-readable format (where technically feasible and where the processing is based on consent or contract).
• Right to Object: You may object to mj77's processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, though mj77 may continue processing where compelling legitimate grounds override your objection.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

12 Children & Minors

The mj77 platform is strictly intended for adults aged 21 years and above. mj77 does not knowingly collect personal data from individuals under the age of 21. If we become aware that a minor has registered on the platform or has provided us with personal data, we will immediately close the relevant account, delete all associated personal data, and refund any deposits made to the extent this is technically feasible.

Parents or guardians who are concerned that a minor may have accessed the mj77 platform or provided personal information should contact our support team immediately. mj77 will take all reasonable steps to investigate and remediate any such situation promptly.

13 International Data Transfers

As an internationally licensed gaming operator, mj77's data processing infrastructure may involve the transfer of personal data to servers or processors located outside Pakistan. Where such transfers occur, mj77 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under applicable data protection law, including:

• Contractual data processing agreements containing standard data protection clauses with all international data processors.
• Use of cloud infrastructure providers certified under recognised international security and data protection standards (e.g., ISO 27001).
• Application of technical and organisational security measures — including encryption, access controls, and audit logging — that apply equally regardless of the geographic location of data processing.

14 Security Measures

mj77 implements the following technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, or disclosure:

• 256-bit SSL/TLS encryption for all data transmitted between your device and mj77 servers.
• AES-256 encryption for sensitive data stored at rest, including identity documents and financial information.
• Cryptographic hashing of all player passwords. Passwords are never stored in plain text and cannot be retrieved — only reset.
• Device recognition and anomalous login detection, triggering additional verification for unrecognised access attempts.
• Role-based access controls ensuring that mj77 staff access only the personal data necessary for their specific job function.
• Regular security audits and penetration testing of the mj77 platform.
• Automatic session timeouts to mitigate risk from shared or unattended devices.

While mj77 takes all reasonable measures to protect your personal data, no digital transmission or storage system is completely immune to security risks. Players are encouraged to use strong, unique passwords for their mj77 account and to report any suspected unauthorised access immediately to our 24/7 support team.

15 Changes to This Privacy Policy

mj77 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or our services. When material changes are made, we will notify registered players via the email address on file and by displaying a clear notice on the mj77 platform for a reasonable period prior to the changes taking effect.

The "Last Updated" date at the top of this Policy indicates when the most recent changes were made. Continued use of the mj77 platform following the effective date of any updated Privacy Policy constitutes your acknowledgement of and agreement to the updated Policy. If you do not agree with the changes, you should cease using the platform and request account closure.

16 Contact & Complaints

If you have any questions, concerns, or requests relating to this Privacy Policy or mj77's data handling practices, please contact our support team through the following channels:

• Live Chat: Available 24/7 on the mj77 platform — English and Urdu support — average response under 2 minutes.
• Support Email: support at mj77.bid

If you believe mj77 has not adequately addressed your data privacy concern, you have the right to lodge a complaint with the relevant supervisory or regulatory authority in your jurisdiction. mj77 will cooperate fully with any such regulatory enquiry.

For further information about your rights as a player, including responsible gaming tools and account management, please also review our Terms & Conditions and our Responsible Gaming page.