jat99 Privacy Policy

This Privacy Policy ("Policy") describes how jat99 ("jat99", "we", "us", "our") collects, uses, discloses, and protects personal information relating to individuals ("you", "your", "Player") who access or use the jat99 online gaming platform available at jat99.io and all associated pages, subdomains, and mobile-optimised versions thereof (collectively, the "Platform").

By creating an account on the Platform or by continuing to use the Platform after this Policy has been published or updated, you acknowledge that you have read and understood this Policy and consent to the data practices described herein. If you do not agree with this Policy, you must not use the Platform and should contact us to close your account.

This Policy should be read alongside jat99's Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference. In the event of any conflict between this Policy and those documents on a data-related matter, this Policy prevails.

jat99 collects personal information through several channels, including directly from you during registration and account use, automatically through your interaction with the Platform, and from trusted third-party sources where permitted. The categories of information we collect are set out below.

2.1 Registration & Account Information

When you create a jat99 account, we collect the following information that you provide directly:

• Full legal name as it appears on a government-issued identity document
• Date of birth (used to verify you meet the 21+ age requirement)
• Email address
• Bangladesh mobile phone number
• Residential address (city, district)
• Username and hashed password
• Preferred currency (BDT / Bangladeshi Taka)

2.2 Identity Verification Documents

As part of our know-your-customer (KYC) and anti-money laundering (AML) obligations, we may request and retain copies of:

• National Identity Card (NID), passport, or driving licence
• Utility bill or bank statement as proof of address (issued within the past 3 months)
• Selfie photograph or video for liveness verification
• Source of funds documentation for high-value deposit transactions

2.3 Financial & Transaction Data

When you deposit or withdraw funds, we collect:

• Payment method identifier (e.g., bKash wallet number, Nagad account reference, Rocket number, masked Visa/Mastercard number)
• Transaction amounts, dates, and reference numbers
• Deposit and withdrawal history associated with your account

We do not store full card numbers. Card data is tokenised and processed by PCI-DSS compliant payment processors.

2.4 Gaming & Betting Activity

• Game session logs, bet placement history, wagering amounts, and outcomes
• Bonus activation and wagering requirement progress
• Responsible gaming tool settings (deposit limits, session reminders, self-exclusion status)

2.5 Technical & Usage Data

When you use the Platform, our servers and analytics systems automatically record:

2.6 Communications Data

When you contact our support team via live chat or email, we retain the content of those communications, including timestamps and support agent identifiers, for quality assurance and dispute resolution purposes.

jat99 uses the personal information described in Section 2 for the following defined purposes:

• Account management: Creating, maintaining, and securing your jat99 account; verifying your identity and age (21+ requirement); processing login requests; resetting credentials when requested.
• Transaction processing: Processing deposits and withdrawals via bKash, Nagad, Rocket, Upay, SureCash, Visa, and Mastercard; reconciling your account wallet balance; detecting and preventing payment fraud.
• Regulatory compliance: Meeting our KYC and AML obligations; reporting to relevant authorities where legally required; maintaining records for the retention periods mandated by applicable law.
• Responsible gaming: Monitoring account activity for signs of problem gambling; enforcing deposit limits, loss limits, and self-exclusion orders; sending reality-check notifications where activated.
• Platform security: Detecting and investigating suspicious login attempts, multi-accounting, bonus abuse, collusion, and other prohibited conduct described in the Terms & Conditions.
• Customer support: Responding to your enquiries; resolving disputes; maintaining a record of communications for audit purposes.
• Service improvement: Analysing aggregated, anonymised usage patterns to improve Platform performance, game offering, and user experience. Individual-level data is not used for profiling for commercial purposes.
• Communications: Sending you transactional emails (deposit confirmations, withdrawal status, security alerts) and, where you have opted in, promotional communications about jat99 offers and new games.

jat99 processes personal data on the following legal bases, which apply cumulatively depending on the specific processing activity:

• Contract performance: Processing that is necessary to fulfil the agreement between you and jat99 as set out in the Terms & Conditions — including account creation, transaction processing, and game access.
• Legal obligation: Processing required to comply with applicable anti-money laundering laws, identity verification obligations, and record-keeping requirements.
• Legitimate interests: Processing necessary to pursue jat99's legitimate interests in preventing fraud, protecting the security and integrity of the Platform, and improving our service, provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing for which you have given specific, informed, and freely given consent — primarily marketing communications and the use of non-essential cookies. You may withdraw this consent at any time.

jat99 does not sell your personal data. We may share your information with the following categories of third parties strictly for the purposes outlined in this Policy:

• Payment processors: bKash, Nagad, Rocket, Upay, SureCash, and card payment gateways receive the minimum data necessary to process your deposit or withdrawal transaction. Each processor operates under its own privacy policy and is bound by our data processing agreement.
• Identity verification providers: Third-party KYC service providers who assist with document verification, liveness checks, and sanctions screening. These providers are contractually prohibited from using your data for any purpose beyond the specific verification service.
• Game providers: Licensed game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive anonymised session tokens to deliver their games. They do not receive your full name, mobile number, or financial data.
• Fraud prevention services: Specialist fraud detection platforms that analyse behavioural and technical signals to identify suspicious account activity. Data shared is pseudonymised where possible.
• Legal and regulatory authorities: jat99 will disclose personal data to law enforcement agencies, financial intelligence units, or courts where required to do so by a valid legal order or where jat99 reasonably believes disclosure is necessary to prevent serious harm or criminal activity.
• Professional advisers: Lawyers, auditors, and accountants who are bound by professional secrecy obligations, where disclosure is necessary for legal advice or compliance auditing.

jat99 uses cookies and similar tracking technologies to operate and improve the Platform. The categories of cookies used are described below:

You can manage your cookie preferences at any time through your browser settings. Disabling strictly necessary cookies will impair your ability to log in and use core Platform features. Disabling analytics or marketing cookies will not affect your access to games or account functionality.

Most modern browsers — including those used on Android and iOS devices commonly used in Bangladesh — allow you to view, delete, and block cookies. Refer to your browser's help documentation for device-specific instructions.

jat99 retains personal data for the periods set out below, after which data is securely deleted or irreversibly anonymised:

Where a legal dispute or regulatory investigation is in progress at the time a retention period expires, the relevant data will be preserved until the matter is fully resolved, after which it will be deleted promptly.

jat99 implements a layered security architecture to protect the personal data it holds. The technical and organisational measures in place include:

• Encryption in transit: All data communicated between your device and jat99's servers is encrypted using TLS 1.2 or higher. Connections using outdated protocol versions are rejected.
• Encryption at rest: Sensitive personal data fields including identity document scans and financial identifiers are encrypted at rest using AES-256 encryption.
• Access controls: Access to production systems and databases containing personal data is restricted to authorised personnel on a need-to-know basis. All access is logged and audited.
• Password security: Player passwords are never stored in plaintext. jat99 uses industry-standard adaptive hashing algorithms (bcrypt) to store password credentials.
• Intrusion detection: Automated systems monitor network traffic and application activity for indicators of compromise, brute-force attempts, and unusual access patterns.
• Third-party security assessments: jat99's Platform and infrastructure undergo periodic third-party security assessments to identify and remediate vulnerabilities.

Whilst jat99 takes all reasonable steps to protect your data, no system is entirely immune from security risks. You also play a role in securing your account: use a strong, unique password, do not share your login credentials with anyone, and contact support immediately if you suspect your account has been compromised.

As a player on jat99, you hold the following privacy rights with respect to the personal data we hold about you. These rights apply regardless of your location, including Bangladesh:

• Right of access: You may request a copy of the personal data jat99 holds about you, including the categories of data, the purposes for which it is processed, and the recipients to whom it has been disclosed.
• Right of rectification: If any personal data we hold about you is inaccurate or incomplete, you may request that it be corrected. You may update basic account details directly in your account profile at any time.
• Right of erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where the data has been processed unlawfully. This right is subject to jat99's legal retention obligations — data we are required to retain by law cannot be deleted on request.
• Right to restrict processing: You may request that jat99 limit how it processes your data while a dispute about its accuracy or the lawfulness of processing is being resolved.
• Right to data portability: You may request a copy of the personal data you have provided to jat99 in a structured, commonly used, machine-readable format (such as CSV), where the processing is based on consent or contract.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing emails, non-essential cookies), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
• Right to object: You may object to processing based on legitimate interests. jat99 will cease that processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.

To exercise any of the above rights, contact jat99's support team via live chat or by email at [email protected]. We will respond to all valid requests within 30 days. In some cases, we may request identity verification before processing a data rights request to ensure we are disclosing or modifying the data of the correct individual.

jat99 operates a strict minimum age requirement of 21 years for all players. The Platform is not directed at, designed for, or intended to be used by any person under the age of 21. jat99 does not knowingly collect personal data from any person under 21.

If jat99 discovers or is notified that an account has been created by a person under the age of 21, that account will be closed immediately, all personal data associated with it will be deleted within a reasonable timeframe (subject only to any mandatory legal retention obligations), and any deposits made will be returned to the original payment source after deducting any winnings generated, which will be forfeited.

If you are a parent or guardian and believe that a person under 21 in your care has created a jat99 account, please contact us immediately at [email protected] so that we can investigate and act without delay.

jat99 is an offshore gaming platform and its servers, data processing systems, and third-party service providers may be located in jurisdictions outside of Bangladesh. As a result, your personal data may be transferred to and processed in countries that may not have data protection laws equivalent to those in your home jurisdiction.

Where such transfers occur, jat99 takes the following measures to ensure your data remains adequately protected:

• Data processing agreements are in place with all third-party recipients of personal data, incorporating standard contractual clauses or equivalent data transfer safeguards.
• Recipients of personal data are assessed for their security posture before a data sharing relationship is established.
• The volume of data transferred internationally is limited to the minimum necessary to deliver the relevant service.

By creating an account on jat99 and accepting these Terms, you acknowledge and consent to the international transfer of your personal data as described in this section.

jat99 reserves the right to update this Privacy Policy at any time. When we make material changes, we will publish the revised Policy on the Platform with an updated "Last updated" date and, where the change significantly affects how we use your personal data, notify you by email at the address associated with your account.

Your continued use of the Platform after the revised Policy has been published constitutes your acceptance of the updated terms. We encourage you to review this Policy periodically to stay informed about how jat99 handles your personal information. If you disagree with any material change, you have the right to close your account and request deletion of your data as described in Section 9.

If you have any questions about this Privacy Policy, wish to exercise any of your privacy rights, or would like to raise a concern about how jat99 handles your personal data, please contact our support team using the details below:

• Live Chat: Available 24/7 directly on the Platform — the fastest way to reach us.
• Email: [email protected] — for formal data rights requests, please include "Data Rights Request" in the subject line.
• WhatsApp: +880 1700 000000

All formal privacy-related correspondence must be submitted in writing. We will acknowledge receipt of your request within 5 business days (Bangladesh Standard Time, UTC+6) and aim to resolve all requests within 30 calendar days. For complex requests, we may extend this period by up to a further 30 days, in which case we will notify you of the extension and the reason for it before the initial 30-day period expires.