Privacy Policy — How jta9 Handles Your Data

1 About This Policy

1.1 This Privacy Policy sets out in full the approach taken by jta9 to the collection and handling of personal data in connection with the operation of the jta9 online casino and sports betting platform, accessible at jta9.io ("the Platform"). It applies to all registered players, prospective players who visit the Platform without registering, and any individual who contacts jta9 support.

1.2 jta9 is committed to handling all personal data responsibly, transparently, and in accordance with established data protection principles. These principles require that personal data be: processed lawfully, fairly, and transparently; collected for specified and legitimate purposes; adequate, relevant, and limited to what is necessary; accurate and kept up to date; retained no longer than necessary; and processed in a manner that ensures appropriate security.

1.3 This Privacy Policy should be read alongside the jta9 Terms and Conditions and the Responsible Gaming Policy, which are available via the Information section of the Platform. In the event of any conflict between this Privacy Policy and any other document, this Privacy Policy governs in respect of data protection matters.

1.4 This policy is written in English and is directed at players accessing the jta9 Platform from within Bangladesh. References to applicable law should be read with that context in mind.

2 Data Controller

2.1 For the purposes of this Privacy Policy, jta9 acts as the data controller in respect of all personal data collected and processed in connection with the Platform. As data controller, jta9 determines the purposes and means of processing personal data and bears responsibility for ensuring that processing is carried out in accordance with applicable data protection standards.

2.2 If you have any questions about the identity of the data controller, or if you wish to exercise any of your rights described in Section 11 of this policy, please contact jta9 using the details set out in Section 16.

2.3 Where jta9 engages third-party service providers to process personal data on its behalf — for example, KYC verification providers or payment processors — those providers act as data processors under contract with jta9 and may process personal data only in accordance with jta9's documented instructions.

3 Personal Data We Collect

3.1 jta9 collects the following categories of personal data in the course of operating the Platform:

3.2 jta9 does not collect or store sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data (beyond identity document photographs required for KYC), or health data, except where directly relevant to a Responsible Gaming request (e.g., a self-exclusion request supported by a problem gambling self-assessment).

3.3 Accuracy. It is your responsibility to ensure that the personal data you provide to jta9 is accurate and kept up to date. You may update your account information at any time via your account dashboard or by contacting [email protected].

4 How We Collect Your Data

4.1 jta9 collects personal data through the following channels:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, use live chat or email support, update your account settings, or opt into or out of marketing communications.
• Automatically — through cookies, server logs, and analytics tools as you browse and interact with the Platform. This includes technical and usage data as described in Section 3.
• From third parties — from KYC verification service providers who carry out identity checks on jta9's behalf; from payment processors who confirm transaction status; and from fraud detection services that flag suspicious activity patterns.

4.2 jta9 does not purchase personal data from data brokers or third-party marketing databases. All personal data processed by jta9 is collected through the channels described above.

5 Why We Use Your Personal Data

5.1 jta9 uses personal data collected from players for the following purposes:

• Account management: Creating, maintaining, and administering your jta9 account, including processing login authentication and account security.
• Transaction processing: Processing deposits and withdrawals via bKash, Nagad, Rocket, Upay, and other supported payment methods, and maintaining an accurate record of your financial activity on the Platform.
• Identity and age verification (KYC): Confirming your identity and that you meet the minimum age requirement of 21 years before processing withdrawals or as part of compliance reviews.
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent transactions, money laundering, multi-accounting, bonus abuse, and other prohibited conduct as defined in the jta9 Terms and Conditions.
• Regulatory and legal compliance: Maintaining records required under applicable financial, anti-money laundering, and data protection standards; responding to lawful requests from competent authorities.
• Platform improvement: Analysing usage patterns and technical data to improve the performance, stability, and user experience of the Platform.
• Responsible Gaming: Monitoring gameplay patterns to identify indicators of problem gambling behaviour, applying responsible gaming limits requested by the player, and administering self-exclusion and cool-off periods.
• Customer support: Handling enquiries, complaints, and requests submitted via live chat, email, or other support channels.
• Marketing communications: Sending promotional offers, bonus notifications, and platform updates to players who have opted in to receive such communications (see Section 13).

5.2 jta9 does not use personal data for automated decision-making that produces legal or similarly significant effects on players, except where required by anti-fraud or anti-money laundering protocols. Where automated systems flag an account for investigation, a human review is always conducted before any consequential action is taken.

6 Legal Bases for Processing

6.1 jta9 processes personal data on one or more of the following legal bases depending on the specific processing activity:

• Contractual necessity: Processing is necessary to perform the contract between jta9 and the player — specifically, to operate the player's account, process deposits and withdrawals, settle bets, and provide access to Platform services.
• Legal obligation: Processing is necessary to comply with applicable legal obligations, including KYC and anti-money laundering requirements and responses to lawful authority requests.
• Legitimate interests: Processing is necessary for the legitimate interests pursued by jta9, including fraud detection, security monitoring, Platform improvement, and responsible gaming monitoring, where those interests are not overridden by the player's rights and interests.
• Consent: Where jta9 relies on consent as the legal basis — primarily for marketing communications — that consent is freely given, specific, informed, and unambiguous. Players may withdraw consent at any time by contacting [email protected] or by using the opt-out mechanism included in every marketing communication.

7 Cookies and Tracking Technologies

7.1 jta9 uses cookies and similar tracking technologies on the Platform. A cookie is a small text file placed on your device when you visit the Platform. Cookies allow the Platform to function correctly, remember your preferences, and help jta9 understand how the Platform is being used.

7.2 jta9 uses the following categories of cookies:

• Strictly Necessary Cookies: These cookies are essential for the Platform to function and cannot be disabled. They include session management cookies that maintain your login state, security tokens, and load-balancing cookies. No consent is required for these cookies.
• Functional Cookies: These cookies remember your preferences such as language, display settings, and responsible gaming tool configurations. Disabling these cookies may affect your experience on the Platform.
• Analytics Cookies: These cookies collect aggregated, anonymised data about how visitors use the Platform, which pages are visited most frequently, and where users encounter errors. This data helps jta9 improve the Platform. These cookies are set only with your consent.
• Security and Fraud Detection Cookies: These cookies help jta9 detect and prevent fraudulent activity, bot traffic, and unauthorised access attempts. They form part of jta9's legitimate interest in platform security.

7.3 You may control cookie settings via your browser preferences. Note that disabling strictly necessary cookies will prevent you from accessing logged-in areas of the Platform. For instructions on managing cookies in your specific browser, please refer to your browser's help documentation.

7.4 jta9 does not use third-party advertising or behavioural targeting cookies that track your activity across other websites for the purpose of serving targeted advertisements.

8 Data Sharing and Third Parties

8.1 jta9 does not sell, rent, or otherwise disclose your personal data to third parties for their own commercial purposes. Personal data is shared only in the circumstances described in this section.

8.2 Service Providers (Data Processors). jta9 engages carefully selected third-party service providers who process personal data on jta9's behalf and under jta9's documented instructions. These providers include:

• KYC and identity verification providers — who process identity documents and selfies to confirm player identity and age.
• Payment processors — including the operators of bKash, Nagad, Rocket, and Upay integrations, who process deposit and withdrawal transactions.
• Game providers — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi, who receive limited usage data necessary to deliver game content and settle game outcomes.
• Fraud detection and security services — who analyse technical and behavioural data to identify suspicious activity patterns.
• Customer support platforms — who provide the live chat and ticketing infrastructure used by jta9 support agents.
• Analytics providers — who process anonymised usage data to generate Platform performance reports.

8.3 All third-party data processors are required by contract to: use personal data only for the specified purpose; implement appropriate technical and organisational security measures; not engage sub-processors without prior written consent from jta9; and delete or return personal data upon termination of the service agreement.

8.4 Legal Disclosure. jta9 may disclose personal data to competent authorities, law enforcement agencies, or courts where required to do so by applicable law, or where jta9 reasonably believes disclosure is necessary to prevent fraud, money laundering, or serious harm.

8.5 Business Transfers. In the event of a merger, acquisition, or sale of jta9's business assets, personal data held by jta9 may be transferred to the acquiring entity as part of that transaction. In such circumstances, jta9 will notify affected players by posting a notice on the Platform prior to any transfer taking effect.

9 Data Retention

9.1 jta9 retains personal data for no longer than is necessary for the purpose for which it was collected, or as required by applicable legal or regulatory obligations. The following retention periods apply as a general guide:

9.2 Where data is no longer required and the applicable retention period has expired, jta9 will securely delete or irreversibly anonymise that data. Anonymised data (which cannot be used to identify any individual) may be retained indefinitely for statistical and analytical purposes.

9.3 Where a legal dispute, regulatory investigation, or fraud inquiry is in progress, jta9 may extend the retention period for relevant data until the matter is fully resolved, irrespective of the standard retention periods set out above.

10 Data Security

10.1 jta9 applies a layered approach to data security, combining technical, organisational, and procedural measures to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. The following security measures are in place:

• 256-bit SSL/TLS encryption is applied to all data in transit between the player's device and the jta9 Platform.
• Data at rest encryption is applied to databases storing sensitive personal data, including KYC documents and financial records.
• Password hashing using industry-standard cryptographic algorithms ensures that plaintext passwords are never stored on jta9 servers.
• Access controls limit access to personal data to jta9 staff and service providers who require it for their specific role. Role-based access management is enforced and access logs are maintained.
• Penetration testing and vulnerability assessments are conducted periodically to identify and remediate security weaknesses.
• Incident response procedures are in place to detect, contain, and respond to data security incidents in a timely manner.

10.2 While jta9 takes all reasonable precautions to protect your data, no internet-based platform can guarantee absolute security. You are responsible for keeping your account credentials secure and for notifying jta9 immediately if you suspect unauthorised access to your account.

11 Your Data Rights

11.1 As a player on the jta9 Platform, you hold the following rights in respect of your personal data. To exercise any of these rights, contact jta9 at [email protected] with a clear description of your request. jta9 will acknowledge your request within 5 business days and aim to fulfil it within 30 calendar days.

11.2 jta9 will not charge a fee for responding to data rights requests unless a request is manifestly unfounded or excessive, in which case jta9 may charge a reasonable administrative fee or decline to respond, with written explanation.

11.3 jta9 may request proof of identity before fulfilling a data rights request to ensure that personal data is not disclosed to an unauthorised party.

12 Children and Minors

12.1 The jta9 Platform is strictly for adults aged 21 and above. jta9 does not knowingly collect personal data from individuals under the age of 21. Registration by persons under 21 is prohibited under the jta9 Terms and Conditions.

12.2 Where jta9 has reasonable grounds to believe that an account holder is under 21 years of age, the account will be immediately suspended and all personal data associated with the account will be reviewed. If the account holder is confirmed to be under 21, all personal data will be deleted except where retention is required for legal compliance purposes (for example, to record that an underage registration attempt occurred).

13 Marketing Communications

13.1 jta9 may send marketing communications — including promotional offers, bonus notifications, seasonal campaigns (e.g., Eid promotions, BPL cricket season offers, Pohela Boishakh specials), and platform news — to players who have opted in to receive such communications at the time of registration or subsequently via their account settings.

13.2 jta9 will not send unsolicited marketing communications to players who have not opted in, or to players who have subsequently opted out.

13.3 Opting Out. You may opt out of marketing communications at any time by: clicking the unsubscribe link included in every marketing email; updating your communication preferences in your account dashboard; or contacting jta9 directly at [email protected] with a request to be removed from marketing lists. Opt-out requests are processed within 5 business days. Please note that opting out of marketing communications does not affect transactional communications such as deposit confirmations, withdrawal notifications, or security alerts — these are sent on the basis of contractual necessity regardless of marketing preferences.

13.4 jta9 does not share your contact details with third-party marketers for the purpose of their sending you marketing communications independently of jta9.

14 Third-Party Links

14.1 The jta9 Platform may, from time to time, contain references to third-party game providers, payment partners, or other services. Where any such reference includes a hyperlink to a third-party website, please be aware that jta9 has no control over the content or privacy practices of those external sites.

14.2 This Privacy Policy applies solely to the jta9 Platform at jta9.io. jta9 is not responsible for the privacy policies or data handling practices of any third-party website or service that you access via a link on the Platform or independently. We recommend reviewing the privacy policy of any third-party site before submitting personal data to it.

14.3 The inclusion of a link to a third-party site on the jta9 Platform does not constitute an endorsement of that site, its content, or its privacy practices by jta9.

15 Amendments to This Policy

15.1 jta9 reserves the right to amend this Privacy Policy at any time. Where changes are minor and do not materially affect the rights of players — for example, corrections to typographical errors, clarifications of existing language, or administrative updates — jta9 will post the updated policy on the Platform and update the version number and effective date at the top of the document.

15.2 Where changes are material — meaning they significantly alter the way jta9 collects, uses, or shares personal data, or meaningfully affect the rights of players — jta9 will provide advance notice by sending an email to the address registered on each affected account at least 14 days before the changes take effect. Continued use of the Platform after that notice period constitutes acceptance of the updated Privacy Policy.

15.3 Players who do not accept the terms of an updated Privacy Policy should cease using the Platform and may request account closure by contacting [email protected]. Upon account closure, jta9 will process personal data in accordance with the retention obligations described in Section 9.

15.4 The version history of this Privacy Policy is maintained internally. If you wish to review a previous version, you may request it by contacting [email protected].

16 Contact Us

16.1 If you have any questions, concerns, or requests relating to this Privacy Policy or to the way jta9 handles your personal data, please contact the jta9 Data Protection team using the details below. All enquiries are handled in English.

16.2 jta9 takes all privacy-related enquiries seriously. Whether you are exercising a data right, reporting a suspected data breach, querying a marketing opt-out, or raising a concern about data handling, our team will respond promptly and transparently.

16.3 If you are not satisfied with jta9's response to a privacy enquiry or data rights request, you may refer the matter to the relevant data protection authority in your jurisdiction. jta9 will cooperate fully with any such authority in the course of an investigation.