jitabey Privacy Policy — Your Data & Rights

jitabey collects personal data through several channels: directly from you during registration and account use, automatically through your interactions with our platform, and in limited cases from trusted third-party services that help us operate the platform. The following table summarises the categories of data we collect and the context in which each is gathered.

1.1 Data You Choose Not to Provide

Certain data fields are mandatory for account registration and KYC verification — specifically your full name, date of birth, email address, and mobile number. Without this information, jitabey cannot create or maintain your account. Other data, such as your precise physical address within Bangladesh, is optional and used only to improve service personalisation where you choose to provide it.

1.2 Data Collected About Minors

jitabey does not knowingly collect personal data from individuals under the age of 18. Our platform is strictly for adults aged 18 and above. If we become aware that data belonging to a person under 18 has been collected, we will immediately close the relevant account and delete all associated personal data. If you believe a minor has registered on jitabey, contact us at [email protected] immediately.

jitabey processes personal data only for specific, documented purposes. We do not use your data for any purpose that is incompatible with the reasons for which it was originally collected. The principal purposes for which jitabey processes personal data are as follows:

• Account Creation & Management: To register your jitabey account, authenticate your identity, and maintain your account in a secure and functional state throughout your use of the platform.
• Payment Processing: To facilitate BDT deposits via bKash, Nagad, Rocket, Upay, and supported banks, and to process withdrawal requests to your registered payment method. Financial data is shared only with the payment processor handling each specific transaction.
• Age & Identity Verification (KYC): To verify that all jitabey users are 18 years of age or older, and to confirm that account details match the identity of the account holder, as required by our responsible gaming commitments.
• Service Delivery & Platform Operation: To make jitabey's betting markets, casino games, live dealer tables, crash games, and promotional features available to you. Without processing your data, we cannot provide the service.
• Responsible Gaming Monitoring: To monitor betting patterns and account behaviour for signs of problem gambling, to enforce deposit limits and self-exclusion requests, and to fulfil our duty of care toward users. See jitabey's Responsible Gaming policy for full details.
• Fraud Prevention & Security: To detect and prevent fraudulent activity, multi-accounting, bonus abuse, money laundering, and other forms of prohibited conduct as defined in jitabey's Terms & Conditions.
• Customer Support: To respond to your support queries, resolve disputes, and maintain a record of communications for quality assurance and compliance purposes.
• Marketing & Promotions (Opt-In): To send you personalised promotional offers, bonus notifications, and news about jitabey events such as BPL season promotions, Eid offers, or Pohela Boishakh specials — but only where you have explicitly consented to receive such communications. You may withdraw consent at any time.
• Analytics & Platform Improvement: To understand how users navigate jitabey, which features are most used, and where technical or UX issues arise. This analysis helps us improve the platform continuously.
• Legal & Compliance Obligations: To comply with any applicable legal obligation, including responding to lawful requests from relevant authorities.

jitabey shares personal data with third parties only where strictly necessary to operate the platform, fulfil our legal obligations, or protect the security and integrity of the service. Every third party that receives personal data from jitabey is subject to contractual obligations to handle that data securely and in accordance with this Policy.

3.1 Categories of Third-Party Recipients

• Payment Processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard receive the financial data necessary to complete your deposit and withdrawal transactions. These providers operate under their own privacy frameworks and are independently regulated.
• Game Studios & Providers: Where you play games provided by Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Ezugi, your session data (player ID, bet amounts, game outcomes) is shared with the relevant studio solely for the purpose of delivering the game. These studios are certified providers operating under independent compliance frameworks.
• KYC & Identity Verification Services: jitabey may use third-party identity verification tools to validate NID documents and cross-check user details. These services receive only the data necessary to complete the verification and are bound by strict confidentiality obligations.
• Analytics Providers: Aggregated and pseudonymised usage data may be shared with analytics platforms to help jitabey understand platform performance and user behaviour. No individually identifiable data is shared for analytics purposes.
• Legal & Regulatory Authorities: Where required by applicable law, jitabey will disclose personal data to competent authorities upon receipt of a lawful and properly issued request. jitabey will only disclose the minimum data necessary to comply with the specific legal requirement.

3.2 International Data Transfers

Some of jitabey's third-party service providers (particularly game studios and analytics platforms) may process data outside Bangladesh. Where such transfers occur, jitabey takes steps to ensure that appropriate contractual safeguards are in place and that the level of data protection afforded is consistent with the standards described in this Policy.

jitabey uses cookies and similar tracking technologies to make the platform function correctly, to remember your preferences, and to help us understand how users engage with our site. A cookie is a small text file that is stored on your device when you visit jitabey.net.

4.1 Types of Cookies Used

4.2 Managing Cookies

You can control and delete cookies through your browser settings. Most modern browsers (Chrome, Firefox, Safari, Samsung Internet) allow you to view stored cookies, block cookies from specific sites, and clear cookies on exit. Please note that disabling strictly necessary cookies will prevent you from logging in to jitabey and accessing core platform features. Disabling analytics or functional cookies will not prevent you from using jitabey but may reduce the quality of your experience.

4.3 Session & Persistent Cookies

jitabey uses both session cookies (which expire when you close your browser) and persistent cookies (which remain on your device for a set period, typically up to 12 months). Persistent cookies are used for functional purposes such as keeping you logged in across browser sessions if you choose this option during login. No persistent cookie used by jitabey contains sensitive financial or identity data.

jitabey implements a layered set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, and disclosure. While no online platform can guarantee absolute security, jitabey's security infrastructure is designed to meet the highest standards reasonably achievable for an online gaming platform serving the Bangladesh market.

• 256-Bit SSL Encryption: All data transmitted between your browser or mobile device and jitabey's servers is encrypted using TLS 1.2 or higher. This applies to login sessions, deposits, withdrawals, and all account-management actions.
• Password Security: User passwords are stored using strong one-way hashing algorithms. jitabey staff cannot retrieve your plain-text password. You are responsible for choosing a strong, unique password and for keeping it confidential.
• Access Controls: Internal access to personal data is restricted to jitabey staff who require it to perform their duties. Access rights are reviewed regularly and revoked promptly when no longer required.
• Fraud Detection Systems: jitabey operates automated systems that monitor account behaviour, transaction patterns, and login activity for signs of fraud, account takeover, or prohibited conduct. Suspicious activity triggers immediate review and, where necessary, account suspension.
• Secure Payment Processing: Financial transactions via bKash, Nagad, Rocket, Upay, and card networks are processed through the payment providers' own PCI-DSS compliant environments. jitabey does not store raw card numbers or full mobile banking credentials on its own servers.
• Data Minimisation: jitabey collects only the data that is genuinely necessary for each stated purpose. Data that is no longer required is securely deleted in accordance with our retention schedule (see Section 6).

jitabey retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law and our responsible gaming obligations. The table below sets out our standard retention periods by data category.

Once the applicable retention period has expired, jitabey will securely delete or fully anonymise the relevant data. Anonymised data — from which all personally identifiable information has been irreversibly removed — may be retained indefinitely for statistical and analytical purposes, as it can no longer be attributed to any individual.

6.1 Early Deletion Requests

You may request earlier deletion of your personal data by contacting [email protected]. jitabey will honour deletion requests to the fullest extent possible, except where retention is required by law or where the data is needed to resolve an outstanding dispute, prevent fraud, or fulfil a compliance obligation. Where we cannot fully honour a deletion request, we will explain which data must be retained and why.

As a jitabey user, you have meaningful rights over the personal data we hold about you. jitabey is committed to respecting these rights and to responding to all valid data rights requests in a timely and transparent manner. To exercise any of the rights described below, contact jitabey's support team at [email protected].

• Right of Access: You have the right to request a copy of the personal data jitabey holds about you, including the categories of data, the purposes for which it is processed, and the third parties to whom it has been disclosed. jitabey will respond to access requests within 30 days.
• Right to Rectification: If any personal data jitabey holds about you is inaccurate or incomplete, you have the right to request that it be corrected. For basic account details such as email address or mobile number, you may be able to update these directly within your account settings.
• Right to Erasure ("Right to Be Forgotten"): You may request that jitabey delete your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where processing has been based on illegitimate grounds. See Section 6.1 for limitations that apply in certain circumstances.
• Right to Restrict Processing: In certain circumstances — for example, where you contest the accuracy of your data or have objected to processing — you may request that jitabey limit how your data is used while the matter is resolved.
• Right to Data Portability: Where data has been provided by you directly and processed on the basis of consent or contractual necessity, you have the right to receive a structured, machine-readable copy of that data so that it may be transferred to another service provider if you wish.
• Right to Object: You have the right to object at any time to jitabey processing your personal data for direct marketing purposes. Upon receipt of a marketing opt-out request, jitabey will cease sending promotional communications within a reasonable period not exceeding 10 business days.
• Right to Withdraw Consent: Where jitabey's processing of your data is based on your consent — such as for marketing emails or promotional SMS — you may withdraw that consent at any time without affecting the lawfulness of processing that occurred before withdrawal.

jitabey reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform services. The most current version of this Policy will always be published at jitabey.net/privacy-policy with a revised effective date displayed at the top of the document.

8.1 Material Changes

Where jitabey makes a material change to this Policy — meaning a change that meaningfully affects the way your data is collected, used, shared, or retained — we will notify all registered users via the email address on file at least 14 days before the change takes effect. A prominent notice will also be displayed on the jitabey platform during this period. Your continued use of jitabey after the effective date of a revised Policy constitutes your acceptance of the updated terms.

8.2 How to Contact Us

If you have any question about this Privacy Policy, wish to exercise any of your data rights, want to report a suspected data breach, or would like to withdraw marketing consent, please contact the jitabey support team:

• Email: [email protected] (plain text — not a clickable link)
• Support Hours: 24 hours a day, 7 days a week
• Language: English
• Response Time: Acknowledgement within 5 business days; full response within 30 days

All data rights requests are handled confidentially and exclusively by jitabey's designated support staff. jitabey will never charge a fee for handling a data rights request unless the request is manifestly unfounded or excessive, in which case we will explain the basis for any fee before proceeding.