Privacy Policy — jitaaec

When you interact with jitaaec — whether by registering an account, making a deposit, placing a bet, contacting support, or simply browsing the site — we may collect information across the following categories:

1.1 Registration & Identity Data

When you create a jitaaec account, we collect the information you provide directly, including:

• Full legal name as it appears on your government-issued identification
• Date of birth (for age verification purposes — you must be 18 or older)
• Residential address in Bangladesh (city, district, postal code)
• Email address
• Mobile phone number linked to your registered mobile wallet (bKash, Nagad, Rocket, or Upay)
• Username and encrypted password hash
• Profile preferences and communication settings you configure in your account dashboard

1.2 Identity Verification (KYC) Documents

As part of our Know Your Customer (KYC) process — required before we can process your first withdrawal — we may collect copies of:

• National Identity Card (NID) issued by the Government of Bangladesh
• Valid passport (photo page)
• Bangladesh driving licence
• Recent utility bill or bank statement confirming your residential address
• Mobile wallet account screenshot or statement confirming account ownership (bKash, Nagad, Rocket, or Upay)

1.3 Transaction & Financial Data

When you deposit or withdraw funds on jitaaec, we collect and retain the minimum transaction metadata required for financial record-keeping and anti-money laundering (AML) compliance. This includes transaction reference numbers, amounts in Bangladeshi Taka (৳ BDT), timestamps, and the payment method type used (e.g., bKash, Nagad). We do not store full mobile wallet PINs or card numbers on our servers.

1.4 Gameplay & Betting Data

We record all betting and gaming activity on your account, including bet placement times, stake amounts, game titles played (cricket betting, live casino, slots, badminton markets), odds accepted, game outcomes, and session duration. This data is used for account management, dispute resolution, responsible gaming monitoring, and platform improvement.

1.5 Technical & Device Data

When you access jitaaec, our servers automatically collect certain technical information, including:

• IP address and approximate geographic location (city/district level)
• Browser type and version
• Operating system and device type (mobile, tablet, desktop)
• Referring URL (the page you visited before arriving at jitaaec)
• Pages visited on jitaaec, time spent on each page, and click-path data
• Session identifiers and login timestamps

1.6 Communications Data

If you contact our support team by email or live chat, we retain records of those communications — including the content of your messages, the date and time of each interaction, and the resolution outcome — for a period of up to five (5) years for quality assurance and dispute resolution purposes.

There are specific circumstances in which jitaaec may share your personal data with third parties. These are limited to the following categories:

Payment Service Providers

To process your deposits and withdrawals, we share the minimum necessary transaction data with the relevant payment service providers, including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard. These providers process your payment data under their own privacy policies and security frameworks. jitaaec is not responsible for the data practices of these providers once data has been transferred to them for payment processing.

Identity Verification Partners

We may use third-party KYC and identity verification service providers to assist with the verification of identity documents submitted by players. These partners process verification data solely on our behalf and under strict data processing agreements. They are not permitted to use your data for any purpose other than fulfilling our verification requests.

Game Software Providers

Our casino and sportsbook platform integrates game content from third-party providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. When you play their games on jitaaec, limited gameplay and session data may be transmitted to these providers for game operation and fairness certification purposes. These providers are bound by data processing agreements and industry-standard fair play audit requirements.

Regulatory and Law Enforcement Bodies

jitaaec will disclose personal data to regulatory authorities, law enforcement agencies, or government bodies when required to do so by applicable law, court order, or regulatory direction — including in connection with AML investigations, fraud inquiries, or age verification compliance audits. We will notify affected players of such disclosure requests where we are legally permitted to do so.

Business Transfers

In the event of a merger, acquisition, sale of assets, or restructuring involving jitaaec, your personal data may be transferred to the acquiring or successor entity as part of that transaction. We will notify registered players by email if such a transfer affects the handling of their personal data and will ensure that any transferee is bound by equivalent privacy obligations.

jitaaec retains your personal data only for as long as is necessary to fulfil the purposes described in this Privacy Policy or as required by applicable legal and regulatory obligations. The following retention periods apply to the main categories of personal data we hold:

• Account registration data: Retained for the duration of your active account plus a minimum of five (5) years following account closure, in accordance with AML record-keeping requirements.
• KYC identity verification documents: Retained for a minimum of five (5) years from the date of verification, or longer if required by applicable regulatory obligations.
• Transaction records (deposits and withdrawals): Retained for a minimum of five (5) years from the transaction date for AML and financial audit purposes.
• Gameplay and betting history: Retained for the duration of your active account plus two (2) years after account closure, for dispute resolution and responsible gaming analysis.
• Customer support communications: Retained for five (5) years from the date of the final communication in each support case.
• Technical and device logs: Retained for up to twelve (12) months in identifiable form, then anonymised or deleted.
• Marketing preference data: Retained until you withdraw consent or close your account, whichever occurs first.

All personal data held by jitaaec is stored on secure servers. Access to stored personal data is restricted to authorised personnel on a need-to-know basis. We implement technical and organisational measures — including encryption at rest, access logging, and regular security reviews — to protect stored data against unauthorised access, loss, or destruction.

Where data is transferred to third-party service providers for processing (for example, to KYC verification partners or payment processors), we require those providers to maintain equivalent data security standards and to delete or return data when the processing relationship ends.

jitaaec is committed to maintaining the security of your personal data. We apply a layered security approach that combines technical controls, organisational policies, and staff training to protect your information against unauthorised access, disclosure, alteration, or destruction.

Technical Controls

• TLS/SSL encryption in transit: All data exchanged between your browser or mobile device and jitaaec is encrypted using Transport Layer Security (TLS) protocols.
• Encryption at rest: Sensitive data fields — including password hashes, KYC document files, and financial records — are encrypted at rest using strong encryption standards.
• Firewall and intrusion detection: Our infrastructure is protected by network firewalls and intrusion detection systems that monitor for anomalous traffic patterns in real time.
• Access controls: Access to production systems and personal data is restricted to authorised personnel only, using role-based access controls and multi-factor authentication for administrative access.
• Regular security assessments: We conduct periodic security reviews and vulnerability assessments to identify and remediate potential weaknesses in our systems.

Organisational Measures

• All staff with access to personal data receive data protection training as part of their onboarding and on an ongoing basis.
• We maintain internal data handling policies and incident response procedures to ensure that any personal data breach is identified, contained, and reported in a timely manner.
• Third-party service providers are subject to due diligence reviews before being granted access to personal data and are required to sign data processing agreements.

While we take all reasonable steps to protect your personal data, no system or transmission over the internet can be guaranteed to be 100% secure. If you become aware of any security vulnerability or suspect that your jitaaec account has been compromised, please contact our support team immediately.