Privacy Policy — How jitbujj Handles Your Data

1. Information We Collect

jitbujj collects personal data in three broad ways: information you provide directly when registering or using the platform, information generated automatically through your interaction with our services, and information received from trusted third-party partners involved in operating the platform. We apply the principle of data minimisation throughout — we collect only what is genuinely necessary to deliver a secure, personalised, and legally compliant gaming experience.

Information You Provide Directly:

• Full legal name, date of birth, and gender (collected at registration for identity verification and age compliance purposes).
• Bangladesh mobile number and email address (used for account communications, two-factor authentication, and withdrawal notifications).
• Residential address within Bangladesh, including division, district, and upazila (collected during KYC verification for higher-tier withdrawal requests).
• Government-issued identity documents: Bangladesh National ID (NID), passport biographical page, or driving licence (submitted during KYC verification and retained in encrypted storage).
• Payment method details: mobile wallet numbers (bKash, Nagad, Rocket, Upay) and bank account references (Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank) — stored as references only, never full account credentials.
• Correspondence and support communications you send to the jitbujj support team, including chat transcripts and email exchanges.
• Responsible gaming preferences, including self-exclusion elections, deposit limits, and session time limits you set via the platform dashboard.

Information Collected Automatically:

• IP address and approximate geographic location (division/city level within Bangladesh) at the time of each login session.
• Device type, operating system version, browser name and version, and screen resolution — collected to optimise platform rendering and detect unauthorised access patterns.
• Session timestamps: login time, logout time, duration of play, and pages visited within the jitbujj platform.
• Betting and gaming activity records: game titles played, wager amounts in BDT ৳, outcomes, bonus activations, and wagering progress — retained as part of the transaction record.
• Cookie identifiers and local storage tokens (see the Cookies section below for full details).

Information from Third Parties:

• Transaction confirmation data from mobile wallet providers (bKash, Nagad, Rocket) confirming deposit and withdrawal completion, transmitted via their respective payment APIs.
• Identity verification results from our KYC partner, which processes document authenticity checks and returns a pass/fail result — the raw document is not stored by the KYC partner beyond the verification session.
• Fraud-signal data from our payment processor partners, used to flag unusual transaction patterns for manual review.

2. How We Use Your Data

jitbujj processes your personal data for specific, legitimate purposes that are directly tied to operating a safe and compliant online gaming platform for players in Dhaka, Chittagong, Sylhet, Khulna, and across the rest of Bangladesh. We do not use your data for purposes that conflict with the reason it was collected. The table below outlines our primary processing activities:

3. Legal Basis for Processing

Every data processing activity conducted by jitbujj rests on at least one of the following legal grounds. Where processing is based on your consent, you retain the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

• Contractual necessity: Processing your name, contact details, payment references, and gaming activity records is necessary to fulfil the agreement you enter into when you register an account and use the jitbujj platform. Without this processing, we cannot operate your account or process your transactions.
• Legal obligation: Retaining KYC documents, transaction records, and certain communication logs is required to comply with anti-money laundering obligations, financial record-keeping requirements, and any lawful requests from Bangladeshi regulatory authorities or law enforcement agencies.
• Legitimate interests: Processing device identifiers, IP addresses, and session data for fraud detection, platform security, and responsible gaming monitoring serves the legitimate interests of jitbujj and our player community — specifically, protecting the platform from abuse and protecting vulnerable players from harm. We have assessed that these interests are not overridden by your privacy rights when processing is limited to what is strictly necessary.
• Consent: Processing your email address and gaming preferences for marketing communications is based solely on your opt-in consent. You may withdraw this consent at any time. We also rely on consent for the placement of non-essential analytics cookies on your device.

4. Data Sharing & Third Parties

jitbujj does not sell, rent, or trade your personal data to any third party for their own commercial purposes. We share your information only where it is strictly necessary to operate the platform and fulfil our legal obligations. The following categories of third parties may receive limited data under contractual data-processing agreements that bind them to protect your information:

• Payment processing partners: bKash, Nagad, Rocket, Upay, and Bangladesh bank transfer partners receive transaction-level data (amount, reference, account identifier) necessary to process your deposits and withdrawals. These providers operate under their own regulatory frameworks in Bangladesh and are independently responsible for the security of their payment infrastructure.
• Game studio providers: Pragmatic Play, Evolution Gaming, PG Soft, JILI, Habanero, Spribe, and Ezugi receive a session token and anonymised player identifier to authenticate your game session. They do not receive your full name, NID, or payment details.
• KYC verification partner: Our identity document verification provider receives your submitted identity documents solely for the purpose of authenticity verification and returns a pass/fail result to jitbujj. Documents are processed in a secure environment and are not retained by the KYC partner beyond the verification session.
• Cloud hosting and infrastructure providers: jitbujj's platform is hosted on secure cloud infrastructure. Our hosting provider acts as a data processor under a formal data processing agreement and has no independent right to access or use your personal data.
• Legal and regulatory authorities: Where jitbujj receives a valid legal order, regulatory direction, or law enforcement request from an authorised Bangladeshi authority, we may be required to disclose specific account or transaction data. We will notify you of any such disclosure where we are legally permitted to do so.

5. Cookies & Tracking Technologies

jitbujj uses cookies and similar browser storage technologies to make the platform work correctly, keep your session secure, and understand how players use the site so we can improve it. We do not use third-party advertising networks or cross-site tracking technologies. The table below describes every category of cookie used on jitbujj:

You can manage cookie preferences through your browser settings at any time. Note that disabling essential or security cookies will prevent you from logging in to jitbujj or using core platform features. Instructions for managing cookies in popular browsers used in Bangladesh (Chrome for Android, Samsung Internet, Firefox) are available via those browsers' own help documentation.

jitbujj does not use pixel tracking, browser fingerprinting, canvas fingerprinting, or any technology designed to identify you across multiple websites or apps. Our analytics data is processed in aggregate and cannot be used to identify individual players outside of our own platform.

6. Data Retention

jitbujj retains personal data only for as long as it is necessary to fulfil the purpose for which it was collected, or to comply with applicable legal and regulatory obligations. The following retention schedule applies to the main categories of data we hold:

• Account registration data (name, date of birth, email, mobile number): Retained for the full duration of your active account, plus 5 years following permanent account closure to satisfy AML record-keeping obligations.
• KYC identity documents (NID, passport, driving licence scans): Retained in encrypted storage for 5 years following account closure. Documents are stored in a restricted-access environment accessible only to the compliance team.
• Financial transaction records (deposit and withdrawal amounts, payment method references, dates, and outcomes): Retained for 7 years to comply with financial record-keeping requirements. This data is archived after 12 months of account inactivity and is not used for active profiling.
• Betting and gaming activity logs: Retained for 3 years for responsible gaming monitoring and dispute resolution purposes. After 3 years, records are aggregated and anonymised.
• Customer support communications: Retained for 3 years from the date of the last interaction in a support thread.
• Session and access logs (IP addresses, device data, login timestamps): Raw logs are purged after 90 days. Anonymised, aggregated session data may be retained indefinitely for platform performance analysis.
• Marketing consent records: Retained for as long as you maintain an active account. If you withdraw marketing consent, the opt-out record itself is retained for 3 years as evidence of compliance.

When retention periods expire, data is either securely deleted or irreversibly anonymised so that it can no longer be associated with any individual player. Players may submit a deletion request ahead of the standard retention schedule where there is no overriding legal obligation to retain the data — see the Your Rights section below for the process.

7. Your Rights Over Your Data

jitbujj recognises and upholds your rights as a data subject. You may exercise any of the following rights at any time by contacting our support team at support@jitbujj with the subject line "Data Rights Request". We will acknowledge your request within 5 business days and provide a full response within 30 days.

• Right of Access: You may request a copy of all personal data that jitbujj holds about you, including your registration data, KYC status, transaction history, and betting records. We will provide this as a structured, machine-readable export where technically feasible.
• Right to Rectification: If any personal data we hold is inaccurate or incomplete, you have the right to request correction. For name or date-of-birth corrections, a supporting identity document may be required.
• Right to Erasure ("Right to Be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (and no other legal basis applies), or where the data has been processed unlawfully. We will honour erasure requests where there is no overriding legal obligation to retain the data (e.g., the 7-year financial record obligation overrides erasure for transaction records).
• Right to Restriction of Processing: You may request that we restrict processing of your data while a rectification or erasure request is being assessed, or where you contest the legal basis for processing.
• Right to Data Portability: Where processing is based on your consent or on a contractual necessity, you may request your data in a structured, commonly used, and machine-readable format (e.g., JSON or CSV) for transfer to another service.
• Right to Object: You may object at any time to processing based on legitimate interests (e.g., analytics) or to direct marketing. Objection to marketing will be processed immediately; objections to other processing activities will be assessed against our legal obligations and the grounds for legitimate interest.
• Right to Withdraw Consent: Where processing is based solely on your consent (e.g., marketing emails, non-essential analytics cookies), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

8. Data Security Measures

jitbujj applies a layered security framework to protect the personal data of all players. Our technical and organisational security measures include, but are not limited to, the following:

• 256-bit SSL/TLS encryption on all data in transit between your device and the jitbujj platform, covering login, payment, game session, and support communications.
• Encryption at rest for all personal data stored in our databases, including KYC documents, payment references, and account credentials. Passwords are stored using a one-way cryptographic hash — jitbujj staff cannot retrieve your plaintext password.
• Role-based access controls ensuring that jitbujj staff can only access personal data to the extent strictly required for their specific job function. The KYC compliance team, for example, can access identity documents but not full betting histories.
• Intrusion detection and anomaly monitoring systems that flag unusual login patterns, bulk data queries, and unexpected API activity for immediate review by our security team.
• Regular security assessments of the platform infrastructure, including penetration testing conducted by independent security specialists on a scheduled basis.
• Incident response procedures: In the event of a data breach affecting player personal data, jitbujj will notify affected players and relevant authorities within 72 hours of becoming aware of the incident. Notifications will be sent to your registered email address and will include the nature of the breach, the data categories affected, and the steps we are taking to contain and remediate it.

9. Minors & Data Protection

If jitbujj becomes aware that personal data has been collected from a person under the age of 18 — whether through misrepresentation of age at registration or any other means — we will immediately close the associated account, delete all personal data collected from that individual to the extent permitted by law, and return any balance to the payment method used for deposit after deducting any winnings generated, consistent with our Terms & Conditions.

Parents and guardians in Bangladesh who believe that a minor may have registered on jitbujj are encouraged to contact our support team immediately at support@jitbujj with the subject line "Minor Account Report". We take such reports seriously and will investigate and act within 24 hours of receiving a credible report. We also recommend that parents use Bangladesh-available parental control tools on shared devices to prevent minors from accessing online gambling platforms.

10. Policy Changes & Contact

jitbujj reviews and updates this Privacy Policy periodically to reflect changes in our data processing practices, platform features, payment methods, or applicable legal requirements. Where a change materially affects how we process your personal data or reduces your rights, we will notify you by email to your registered address at least 14 days before the change takes effect.

Non-material updates — such as clarifications to existing language, corrections of typographical errors, or administrative updates — may be made without prior notice. The "Last Updated" date at the top of this page will always reflect the most recent revision. Continued use of jitbujj after the effective date of a revised Privacy Policy constitutes your acceptance of the updated terms.

A full version history of this Privacy Policy, showing the changes made in each revision, is available on request from our support team. We believe players should be able to understand exactly how our data practices have evolved over time.

This Privacy Policy, together with the Terms & Conditions and Responsible Gaming guidelines, forms the complete legal framework governing your relationship with jitbujj. We encourage all players to read all three documents in full before registering an account.