jtae9 Privacy Policy — How We Handle Your Personal Data

1.1 — Registration Data

When you create a jtae9 account, we collect the following information which you provide directly:

• Full legal name (as it appears on your government-issued identity document);
• Date of birth (used to verify that you are at least 18 years of age);
• Residential address (including city, district, and postal code within Bangladesh);
• Email address (used for account communications and verification);
• Mobile phone number (used for authentication and transaction alerts);
• Username and encrypted password (credentials for accessing your account).

1.2 — Identity Verification (KYC) Data

As part of our Know Your Customer (KYC) obligations, we may collect copies of the following documents when required for account verification or prior to processing a withdrawal:

• Government-issued National Identity Card (NID) or passport;
• Proof of residential address (utility bill or bank statement dated within 90 days);
• Proof of payment method ownership — for example, a screenshot of your bKash, Nagad, or Rocket account showing your registered name and number;
• Source of funds documentation where deposits exceed ৳50,000 within a rolling 30-day period.

1.3 — Financial Transaction Data

Every deposit, withdrawal, and bonus redemption generates a transaction record. We collect and store the following financial data in connection with your jtae9 account activity:

• Payment method used (bKash, Nagad, Rocket, Upay, bank name, card type);
• Transaction amounts in Bangladeshi Taka (BDT);
• Transaction timestamps and reference numbers;
• Deposit and withdrawal history for the lifetime of your account.

We do not store full card numbers or mobile banking PINs. Card and mobile wallet authentication is handled by the respective payment service provider's secure infrastructure.

1.4 — Gaming Activity Data

jtae9 maintains records of your gaming activity on the platform. This data is used for responsible gaming monitoring, dispute resolution, and regulatory compliance purposes:

• Games played, bet amounts, win/loss outcomes, and session durations;
• Sports betting markets accessed, stake amounts, and settlement outcomes;
• Bonus usage, wagering progress, and promotional redemption history;
• Self-exclusion or deposit limit requests and their effective dates.

1.5 — Technical and Device Data

When you access the jtae9 platform via browser or mobile device, our servers and analytics systems automatically collect certain technical data:

• IP address and approximate geolocation (country/city level);
• Device type, operating system, and browser version;
• Pages visited, time spent on each page, and navigation flow;
• Referring URL (the website or link that directed you to jtae9);
• Session duration and login frequency.

3.1 — Payment Service Providers

To process your deposits and withdrawals, jtae9 shares necessary transaction data with payment service providers including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, and card networks such as Visa and Mastercard. The data shared is limited to what is strictly required to execute and confirm the transaction. Each payment provider operates under its own privacy policy and applicable Bangladeshi financial regulations.

3.2 — Game Software Providers

jtae9's gaming catalogue is powered by third-party providers including Pragmatic Play, Evolution Gaming, Spribe, Ezugi, NetEnt, and Microgaming. These providers may receive technical session identifiers and anonymised gameplay data to facilitate game delivery, fairness verification, and jackpot calculations. Game providers do not receive your full name, NID, or financial transaction history.

3.3 — Identity Verification Services

Where jtae9 uses a third-party KYC or age-verification service to confirm the identity of account holders, we may share your name, date of birth, and identification document data with that provider. All KYC providers used by jtae9 are contractually bound to process your data solely for the purpose of verification and to maintain appropriate security standards.

3.4 — Legal and Regulatory Disclosure

jtae9 may disclose your personal data to competent legal, regulatory, or law enforcement authorities where we are required to do so by applicable law, court order, or official government request. In such cases, jtae9 will disclose only the minimum data necessary to satisfy the legal requirement and will, where legally permissible, notify you of the disclosure.

3.5 — Business Transfers

In the event that jtae9 or any part of its business is acquired, merged with, or transferred to another entity, your personal data may form part of the transferred assets. In such circumstances, you will be notified by email prior to the transfer, and the successor entity will be required to process your data in accordance with terms no less protective than this Privacy Policy.

3.6 — No Third-Party Advertising

jtae9 does not share your personal data with third-party advertisers, data brokers, social media platforms, or analytics companies for the purpose of targeted advertising outside of the jtae9 platform. Any on-platform recommendations are generated using your jtae9 gaming activity only, and this data is not transmitted to external advertising networks.

5.1 — Active Account Data

While your jtae9 account remains active, we retain all registration data, KYC documents, financial transaction records, and gaming history associated with your account. This data is necessary to deliver our services, comply with anti-money laundering record-keeping requirements, and provide complete transaction histories to you upon request.

5.2 — Closed Account Data

Following the closure of a jtae9 account — whether voluntary or initiated by jtae9 — we retain your personal data for a minimum period of 5 years from the date of account closure. This retention period is required to comply with financial record-keeping obligations, to facilitate the resolution of any disputes that arise after closure, and to ensure that a self-excluded player cannot create a new account during an active exclusion period.

5.3 — KYC Document Retention

Copies of identity and address verification documents submitted as part of the KYC process are retained for the same 5-year post-closure period described in Section 5.2. Documents are stored in encrypted form and access is restricted to authorised compliance personnel only. After the retention period expires, documents are securely and permanently deleted.

5.4 — Technical and Analytics Data

Anonymised technical data — including aggregated page-view statistics, session duration averages, and device-type breakdowns — may be retained beyond the standard retention periods as it does not constitute personal data and is used solely for long-term platform improvement analysis. IP address logs are retained for a maximum of 12 months before being anonymised or deleted.

5.5 — Marketing Data

Where you have consented to receive marketing communications, your marketing preference data (email address and communication preferences) is retained until you withdraw your consent. Upon withdrawal, your contact details are removed from active marketing lists within 5 business days, although they may be retained on a suppression list to ensure we do not inadvertently contact you again in the future.

7.1 — Right of Access

You have the right to request a copy of all personal data that jtae9 holds about you. Upon receiving a verified access request, we will provide you with a structured summary of your data — including your registration details, transaction history, gaming activity records, and any KYC documents on file — within 30 days. Access requests may be submitted by emailing [email protected] with the subject line "Data Access Request" from your registered email address.

7.2 — Right to Rectification

If any personal data held by jtae9 is inaccurate or incomplete, you have the right to request that it be corrected. Common examples include an outdated residential address, a misspelled name, or an incorrect date of birth. Rectification requests will be processed within 10 business days, subject to identity verification. Note that certain data fields — such as your registered name and date of birth — can only be amended with supporting documentary evidence matching your KYC documents.

7.3 — Right to Erasure

You have the right to request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (and no other legal basis applies), or where the data has been processed unlawfully. Please note that jtae9 may be unable to fulfil erasure requests in full where legal retention obligations apply — specifically for financial transaction records and KYC documents which must be retained for a minimum of 5 years post account closure. Where full deletion is not possible, we will delete all data that can lawfully be removed and explain clearly why the remainder must be retained.

7.4 — Right to Restrict Processing

You may request that jtae9 restrict the processing of your personal data in certain circumstances — for example, where you contest the accuracy of the data (pending verification), where processing is unlawful but you prefer restriction over deletion, or where you have objected to processing pending determination of whether jtae9's legitimate grounds override yours. During a restriction period, jtae9 will continue to store the relevant data but will not actively process it beyond storage.

7.5 — Right to Data Portability

Where processing is based on your consent or on a contract with you, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format (such as CSV or JSON). You may also request that this data be transmitted directly to another data controller where technically feasible. Portability requests will be assessed and fulfilled within 30 days.

7.6 — Right to Object

You have the right to object to the processing of your personal data where jtae9 relies on legitimate interests as its legal basis. This includes the right to object to profiling carried out for direct marketing purposes. Where you object to marketing-related processing, jtae9 will cease such processing immediately upon receipt of your objection. Where you object to processing based on legitimate interests for other purposes, jtae9 will assess whether its grounds for processing override your interests and respond accordingly within 30 days.

7.7 — How to Exercise Your Rights

All privacy rights requests should be submitted by email to [email protected] using your registered email address. To protect your account security, jtae9 may require identity verification before processing a rights request. We will acknowledge all requests within 5 business days and provide a full response within 30 calendar days. Where a request is particularly complex or numerous, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it.