jitase Privacy Policy

1. Data We Collect

jitase collects personal data from you in several ways: directly when you register and use the platform, automatically when you interact with our website, and from third parties such as payment providers and identity verification services. The categories of data we collect are set out below.

Data you provide directly: When you register a jitase account, you provide us with a range of personal information that is necessary to create and maintain your account, verify your identity, and process transactions. This includes:

• Your full legal name as it appears on your government-issued identification document.
• Your date of birth, which we use to verify that you meet the minimum age requirement of 18 years.
• Your residential address in Bangladesh, including division, district, and postal code.
• Your email address, which is used for account communications, security alerts, and optional promotional messages.
• Your Bangladeshi mobile phone number, used for SMS verification, two-factor authentication, and account recovery.
• Your chosen username and password (passwords are stored in a hashed format and are never readable in plain text by any member of jitase staff).
• Copies of identity documents submitted during the KYC verification process, such as your National Identity Card, passport, or driving licence.
• Bank account or mobile financial service account details (for example, your bKash or Nagad registered mobile number) used to process deposits and withdrawals.
• Any additional information you voluntarily provide when contacting our support team or completing surveys or feedback forms.

Data collected automatically: When you access or use the jitase platform, certain technical data is collected automatically by our systems, including:

• Your IP address and approximate geographic location derived from it.
• Device type, operating system, browser type and version.
• Session start and end times, pages visited, games played, and features used within the platform.
• Betting and gaming history, including the amounts wagered, games selected, and results.
• Payment transaction records including deposit and withdrawal amounts, dates, times, and payment methods used.
• Cookie identifiers and similar tracking data as described in the Cookies section of this Policy.

2. How We Use Your Data

jitase processes your personal data only for legitimate, specified purposes. We do not sell your personal data to third parties for their own marketing purposes. The following table summarises the primary purposes for which we use your data and the legal basis for each processing activity.

• Account creation and management: We use your identity and contact data to create, maintain, and secure your jitase account. This is necessary for the performance of the contract between you and jitase.
• Age and identity verification (KYC): We are required to verify that every registered player is at least 18 years of age and that their identity is genuine. We use identity documents and third-party verification services for this purpose. This processing is a legal obligation and a contractual necessity.
• Processing deposits and withdrawals: Your financial data and payment method details are used solely to process transactions you initiate. We share the minimum necessary data with our payment processing partners (bKash, Nagad, Rocket, Upay, Visa, Mastercard) to complete these transactions.
• Customer support: Communications data (support chats, emails) is used to resolve your enquiries, investigate complaints, and improve our support quality. Support transcripts may be reviewed by our quality assurance team.
• Fraud prevention and anti-money laundering: We analyse usage data, transaction patterns, and device/IP data to detect and prevent fraudulent activity, bonus abuse, money laundering, and other prohibited conduct. This is both a legal obligation and a legitimate business interest.
• Platform improvement and analytics: Aggregated and anonymised usage data helps us understand how players interact with jitase so we can improve game selection, site performance, and user experience. This data does not identify any individual player.
• Responsible gaming monitoring: We monitor gaming behaviour patterns — such as session frequency, deposit escalation, and self-exclusion history — to fulfil our responsible gaming obligations and to intervene proactively where problem gambling indicators are detected.
• Marketing communications: If you have opted in to receive promotional communications, we use your email address and mobile number to send you relevant bonus offers, game announcements, and seasonal promotions. You may opt out at any time via the account settings page or by contacting support.
• Legal compliance: We may process and retain your data as required by applicable law, regulatory guidance, court orders, or law enforcement requests.

3. Data Sharing & Third Parties

jitase does not sell, rent, or trade your personal data. We share your data only in the limited circumstances described below, and only to the extent strictly necessary for each purpose.

• Payment service providers: To process deposits and withdrawals, we share your registered payment method details with mobile financial service providers (bKash, Nagad, Rocket, Upay) and card networks (Visa, Mastercard). These providers process your data only to execute the transaction and are bound by their own privacy and security obligations.
• Identity verification partners: To fulfil KYC obligations, we may share identity document images and personal details with third-party identity verification service providers who conduct checks on our behalf. These providers act as data processors under contractual arrangements that require them to handle your data in accordance with applicable data protection standards.
• Game software providers: Some games on the jitase platform are provided by third-party game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may process limited technical data (such as session identifiers and bet/result data) to deliver their games and ensure their integrity. They do not receive your full identity or financial data.
• IT and infrastructure providers: Our platform is hosted on third-party cloud infrastructure. Hosting and technology partners process your data only to deliver the technical services we have contracted them to provide and are prohibited from using your data for any other purpose.
• Legal and regulatory authorities: We may disclose your personal data to government bodies, law enforcement agencies, or courts where required to do so by applicable law, by a valid legal order, or where we believe disclosure is necessary to prevent fraud, money laundering, or harm to any person.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of jitase's business, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer and of any change to this Policy that results from it.

4. Cookies & Tracking Technologies

jitase uses cookies and similar tracking technologies to operate the platform effectively, remember your preferences, keep your session secure, and understand how players use our service. A cookie is a small text file placed on your device when you visit a website. It does not contain executable code and cannot access other data stored on your device.

We use the following categories of cookies on the jitase platform:

• Strictly necessary cookies: These cookies are essential for the jitase platform to function. They maintain your logged-in session, carry your language and display preferences between pages, and protect against cross-site request forgery (CSRF) attacks. These cookies cannot be disabled without breaking core platform functionality.
• Performance and analytics cookies: These cookies collect aggregated, anonymised data about how players navigate and interact with jitase. We use this information to identify pages that are slow to load, features that are rarely used, and areas of the platform that may benefit from improvement. No individually identifiable data is stored in these cookies.
• Functional cookies: These cookies remember choices you make — such as your preferred deposit method or display settings — so that you do not need to re-enter them each time you log in. They improve the personalisation and convenience of your jitase experience.
• Responsible gaming cookies: These cookies store your self-exclusion status, deposit limit settings, and session timer preferences locally on your device to ensure that your responsible gaming choices are respected across all sessions, including those where you have been temporarily logged out.

Most web browsers allow you to control cookies through their settings. You can configure your browser to refuse all cookies, to alert you when a cookie is being set, or to delete existing cookies. Please note that disabling strictly necessary cookies will impair the functionality of the jitase platform and may prevent you from logging in or completing transactions.

5. Data Retention

jitase retains your personal data only for as long as is necessary to fulfil the purposes described in this Policy, to comply with our legal obligations, and to resolve any disputes that may arise. The retention periods for different categories of data are summarised below.

When the retention period for any category of data expires, jitase will securely delete or anonymise that data so that it can no longer be linked to any individual. If deletion is not immediately possible due to technical constraints (for example, data held in backup archives), we will isolate the data from further active processing until deletion becomes feasible.

Where you request deletion of your account and personal data before the end of the applicable retention period, we will fulfil your request to the extent permitted by law. Certain categories of data — in particular, KYC documents, transaction records, and betting history — may be required to be retained beyond account closure to satisfy our legal obligations regardless of any deletion request.

6. Data Security Measures

jitase takes the security of your personal data seriously and employs a range of technical and organisational measures to protect it against unauthorised access, accidental loss, destruction, or alteration. These measures include, but are not limited to:

• TLS encryption in transit: All data transmitted between your device and the jitase platform is encrypted using TLS 1.3 (Transport Layer Security), the current industry standard for securing data in transit. This protects your login credentials, payment details, and personal data from interception during transmission.
• Encryption at rest: Sensitive data stored in our databases — including identity documents, payment details, and password hashes — is encrypted at rest using AES-256 encryption.
• Password hashing: User passwords are never stored in plain text. We use a strong, salted hashing algorithm so that passwords cannot be recovered even in the unlikely event of a database breach.
• Access controls: Access to personal data within jitase is restricted on a need-to-know basis. Staff members are granted access only to the data required to perform their specific role. All staff with access to personal data undergo data protection training.
• Intrusion detection and monitoring: Our systems are monitored around the clock for unusual activity, unauthorised access attempts, and potential security breaches. Automated alerts are in place to notify our security team of any anomalies in real time.
• Regular security assessments: jitase conducts regular internal and third-party security reviews to identify and address vulnerabilities in our platform and infrastructure before they can be exploited.

Despite these measures, no method of transmission over the internet or electronic storage is completely secure. While we strive to protect your personal data using commercially reasonable means, we cannot guarantee absolute security. If you have reason to believe that your jitase account has been compromised, please contact our support team immediately at [email protected].

7. Your Privacy Rights

As a jitase player, you hold a number of rights in relation to the personal data we hold about you. We are committed to honouring these rights promptly and transparently. Your rights include:

• Right of access: You have the right to request a copy of the personal data we hold about you. We will provide this information in a structured, commonly used format within a reasonable timeframe of receiving your request.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it. You can update many details directly via your account profile; for other corrections, please contact our support team.
• Right to erasure: In certain circumstances, you have the right to request that we delete your personal data. This right is subject to limitations — for example, we may be required to retain certain data to comply with our legal obligations as described in the Data Retention section. Where deletion is possible, we will action it promptly.
• Right to restrict processing: You may request that we restrict the processing of your personal data in specific circumstances — for example, where you contest the accuracy of the data or where you have objected to processing and a determination is pending.
• Right to data portability: Where we process your personal data on the basis of your consent or contractual necessity, and where processing is carried out by automated means, you have the right to receive your personal data in a portable, machine-readable format so that you can transfer it to another service provider.
• Right to object: You have the right to object to our processing of your personal data for direct marketing purposes at any time. You also have the right to object to processing carried out on the basis of our legitimate interests, although this right is subject to a balancing exercise.
• Right to withdraw consent: Where we process your personal data on the basis of your consent (for example, for marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

To exercise any of the above rights, please contact our Data Privacy team at [email protected] with the subject line "Privacy Rights Request". Please include your full name and the email address associated with your jitase account so that we can verify your identity before processing the request. We aim to respond to all privacy rights requests within 30 days.

8. Policy Updates & Contact

jitase reserves the right to update or revise this Privacy Policy at any time. When we make material changes to this Policy — that is, changes that significantly affect how we collect, use, or share your personal data — we will notify registered players by sending an email to the address associated with their account and by displaying a prominent notice on the jitase platform at the time of login. Non-material changes (such as corrections to typographical errors or clarifications that do not affect the substance of the Policy) may be made without individual notification.

The "Last updated" date at the top of this Policy will always reflect when the most recent revision was made. We encourage you to review this Policy periodically so that you remain informed about how jitase protects your data. Continued use of the jitase platform after any revision to this Policy constitutes your acceptance of the updated terms.

If you have any questions, concerns, or complaints about this Privacy Policy or about how jitase handles your personal data, please contact our Data Privacy team using the details below. We take all privacy enquiries seriously and aim to respond within 30 days.

• Email: [email protected] — subject line: "Privacy Enquiry"
• WhatsApp: +880 1700 000000 — available 24/7
• Live Chat: Available directly on the jitase platform when you are logged into your account
• Response time: We aim to acknowledge all privacy enquiries within 2 business days (Bangladesh Standard Time, UTC+6) and to provide a full response within 30 days.