jat9 Privacy Policy — How We Protect Your Data

jat9 is an online betting and casino platform operating at https://jat9.io, providing sports betting, live casino, slot games and table games to registered players across Bangladesh. For the purposes of this Privacy Policy, jat9 is the data controller responsible for the personal data you provide when registering an account and using our products and services.

As the data controller, jat9 determines the purposes and means of processing your personal data. We are committed to handling that data responsibly, transparently and in line with the principles set out in this policy. If you need to contact us about any privacy matter, you can reach our data team directly at [email protected] with the subject line "Privacy" for priority routing.

This Privacy Policy applies to all personal data collected through the jat9 website, any associated mobile-optimised web pages, customer support interactions, and communications sent by jat9 to registered players. It does not apply to third-party websites or services that may be linked from within game content or promotional materials.

jat9 collects the following categories of personal data from registered players. The specific data collected depends on how you interact with the platform:

2.1 Registration & Identity Data

• Full legal name as it appears on official Bangladeshi identity documents
• Date of birth (to verify that you are aged 21 or above)
• Residential address in Bangladesh (city, district)
• Valid Bangladeshi mobile phone number
• Email address (where provided)
• Username chosen at registration

2.2 Identity Verification (KYC) Data

• Copy of Bangladesh National Identity Card (NID) or valid passport
• Selfie photograph taken at the time of verification (where required)
• Mobile financial service account details for payment verification purposes (account number and registered name only — no PINs or passwords)

2.3 Financial Transaction Data

• Deposit amounts and dates, denominated in BDT (৳)
• Withdrawal amounts, dates and confirmed payment method (e.g., bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank)
• Bonus credits received, wagering requirement progress and bonus expiry records
• Wallet balance history and transaction reference numbers

2.4 Betting & Gaming Activity Data

• Sports betting selections, stake amounts, odds accepted and settlement outcomes
• Live casino, slot and table game session data including game titles played, session duration, bets placed and wins/losses recorded
• In-play betting activity and live game participation records

2.5 Technical & Device Data

• IP address at login and during active sessions
• Device type, operating system and browser version
• Session timestamps, login history and logout records
• Geolocation data derived from IP address (country and city level — not GPS tracking)

2.6 Communications Data

• Contents and metadata of support messages, emails and chat interactions submitted to jat9 support
• Responses to player surveys or feedback forms (where voluntarily completed)
• Records of promotional communications sent to you and whether they were opened or acted upon

jat9 collects personal data through the following channels and methods:

• Account Registration: When you complete the jat9 registration form, you directly provide us with your name, mobile number, date of birth and chosen account credentials.
• KYC Verification Submissions: When you submit identity documents in response to a KYC verification request, we collect and record the information contained within those documents for the purposes described in Section 4.
• Deposits and Withdrawals: When you initiate a BDT deposit via bKash, Nagad, Rocket, Upay or a supported bank channel, transaction data is passed to jat9 from the payment processor confirming the amount received, the reference number and the sending mobile number or account identifier.
• Platform Usage: As you use the jat9 website to browse odds, place bets, play casino or slot games, your activity is automatically logged by our platform systems for account management, fraud detection and responsible gaming monitoring purposes.
• Customer Support Interactions: When you contact jat9 support via email at [email protected], all correspondence is stored against your account record for quality assurance and dispute resolution purposes.
• Cookies and Tracking Technologies: jat9 uses first-party cookies and session tracking on the platform to maintain your login session, remember your preferences, and analyse how players navigate and use our platform features. See Section 7 for full details.

jat9 uses the personal data we collect exclusively for the following documented purposes:

jat9 does not use your personal data for any purpose not listed in this section without first updating this Privacy Policy and providing notice to registered players as described in Section 13.

jat9 processes your personal data on the following legal grounds, consistent with internationally recognised data protection principles:

• Contractual Necessity: The majority of data processing activities described in Section 4 are necessary for jat9 to fulfil its obligations to you as a registered player under the jat9 Terms and Conditions — including account management, payment processing in BDT, bet settlement and customer support.
• Legal Obligation: jat9 processes certain categories of data — particularly KYC identity verification documents and financial transaction records — because we are required to do so under applicable anti-money laundering (AML), counter-terrorist financing (CTF) and fraud prevention obligations. These obligations cannot be waived by individual player consent.
• Legitimate Interests: jat9 processes technical and activity data for fraud detection, platform security, responsible gaming monitoring and analytics on the basis of our legitimate interests as an operator to maintain a safe, fair and well-functioning platform. We balance these interests against your privacy rights in determining what data is collected and how it is handled.
• Consent: Where jat9 sends optional promotional communications or conducts player surveys, we rely on your consent, which you may withdraw at any time by contacting [email protected].

jat9 does not sell your personal data. We share personal data only in the following limited and controlled circumstances:

• Payment Processors: When you make a deposit or withdrawal, the relevant transaction details are shared with the applicable Approved Payment Method provider (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank) solely to execute the financial transaction. These providers act as independent data controllers for the data they receive during payment processing.
• Identity Verification Partners: jat9 may engage third-party KYC verification service providers to assist with the authentication of identity documents submitted by players. Such partners operate under strict data processing agreements and are permitted to use verification data only for the purpose of completing the verification task.
• Game Content Providers: When you launch a live casino game or slot game supplied by a third-party provider (such as Evolution Gaming, Ezugi, Pragmatic Play, NetEnt or Microgaming), limited session data including a player identifier and current wallet balance is shared with that provider to enable the game to function correctly. Providers are contractually restricted from using this data for any other purpose.
• Legal & Regulatory Disclosure: jat9 may disclose personal data to law enforcement agencies, financial intelligence units, or other competent authorities where required to do so by a valid legal process, court order, or applicable anti-money laundering regulation. We will notify affected players of such disclosures to the extent permitted by law.
• Business Transfers: In the event of a business acquisition, merger, or transfer of platform operations, player personal data may form part of the transferred assets. In such cases, jat9 will provide advance notice to registered players and ensure that the receiving entity is bound by data protection obligations no less protective than those in this policy.

jat9 uses cookies and related tracking technologies on the platform to deliver a functional, personalised and secure experience. The following cookie categories are in use:

• Essential Cookies: These cookies are strictly necessary for the platform to function. They maintain your login session, preserve your language and region settings, and protect against cross-site request forgery (CSRF). Essential cookies cannot be disabled without breaking core platform functionality.
• Functional Cookies: These cookies remember your preferences — such as your preferred payment method, recently viewed game categories, and responsible gaming limit settings — so that you do not need to re-enter them on each visit. Functional cookies are set for the duration of your registered account relationship.
• Analytics Cookies: jat9 uses first-party analytics data to understand how players navigate the platform, which games and betting markets are most popular, and where technical errors or friction points occur. This data is aggregated and anonymised before being used for platform improvement decisions. We do not use Google Analytics or other third-party analytics tools that transfer your data outside the jat9 platform environment.
• Security Cookies: Short-lived session tokens and device fingerprinting signals are used to detect suspicious login attempts, identify bot activity, and flag unusual account behaviour consistent with fraud or bonus abuse patterns.

You may manage cookie preferences through your browser settings. Please note that disabling essential cookies will impair your ability to log in and use the jat9 platform. For more information on managing cookies in your specific browser, consult your browser's help documentation.

jat9 implements a layered approach to data security designed to protect your personal information against unauthorised access, disclosure, alteration and destruction. Our security measures include:

• SSL/TLS Encryption in Transit: All data transmitted between your device and the jat9 platform is encrypted using industry-standard TLS 1.2 or higher. This includes login credentials, registration information, KYC document uploads, and financial transaction data.
• Encrypted Storage at Rest: Sensitive personal data fields — including identity document records, verified payment account references, and account credential hashes — are stored in encrypted form on jat9's servers. Access to encrypted data stores is restricted to authorised platform engineers under strict access control policies.
• Access Controls: Internal access to player personal data is governed by role-based access control (RBAC) principles. Customer support agents, compliance officers and technical staff are granted access only to the specific data categories required to fulfil their defined responsibilities.
• Intrusion Detection: jat9's platform infrastructure is monitored continuously for signs of unauthorised access attempts, abnormal data queries, and security anomalies. Suspicious events trigger automated alerts and manual review by our security team.
• Incident Response: In the event of a confirmed data security incident that affects personal data, jat9 will notify affected registered players promptly, describe the nature of the incident, the data involved, and the steps taken to contain it and prevent recurrence.

jat9 retains personal data for no longer than is necessary to fulfil the purposes for which it was collected, taking into account applicable legal retention obligations. Our standard retention schedule is as follows:

Upon expiry of the applicable retention period, personal data is securely deleted from active systems and, where technical constraints require it, overwritten in backup systems during the next scheduled backup rotation cycle.

As a registered jat9 player, you have the following rights in relation to your personal data. To exercise any of these rights, contact [email protected] with the subject line "Data Request" and include your registered mobile number for account verification purposes.

• Right of Access: You may request a copy of the personal data jat9 holds about you, including the categories of data held, the purposes for which it is used, and whether it has been shared with any third parties.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request correction. For name and date of birth corrections, updated KYC documentation may be required.
• Right to Erasure: You may request deletion of your personal data where it is no longer required for the purposes for which it was collected, subject to jat9's legal retention obligations. Note that financial transaction records and KYC documents are subject to mandatory retention periods that take precedence over erasure requests.
• Right to Restrict Processing: You may request that jat9 restrict the processing of your data in certain circumstances, such as while a correction request is being evaluated or while a complaint is under review.
• Right to Data Portability: You may request a copy of your personal data in a structured, commonly used and machine-readable format (such as CSV or JSON) for personal records or to provide to another service.
• Right to Withdraw Consent: Where processing is based on your consent (for example, receipt of promotional communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
• Right to Object: You may object to processing carried out on the basis of jat9's legitimate interests. jat9 will assess the objection and cease processing unless compelling legitimate grounds exist that override your interests.

jat9 will acknowledge all data rights requests within 48 hours of receipt and will fulfil verified requests within 30 calendar days. In complex cases requiring additional verification or legal review, we may extend this period by a further 30 days with notice provided to you.

The jat9 platform is strictly for adults aged 21 years and above. jat9 does not knowingly collect personal data from individuals under the age of 21. Age verification is performed as part of the account registration process, and identity documents may be requested to confirm age at any stage.

If jat9 discovers or is notified that personal data has been collected from an individual under the age of 21, the associated account will be closed immediately, all data will be deleted to the extent permitted by legal obligations, and any real-money balances not associated with Terms violations will be returned to the payment source after verification.

The jat9 platform may from time to time display links or references to third-party content, game provider documentation, or payment partner informational pages. This Privacy Policy applies exclusively to personal data collected and processed by jat9. jat9 is not responsible for the privacy practices of any third-party website or service you may access via a link encountered on the jat9 platform.

Before providing personal data to any third-party service, we strongly encourage you to review that service's own privacy policy and data handling practices. jat9 accepts no liability for how third parties handle data you submit directly to them.

jat9 reserves the right to update, revise or replace this Privacy Policy at any time to reflect changes in our data practices, applicable legal requirements, or operational procedures. When we make material changes to this policy, we will:

• Update the version date displayed at the top of this page to reflect the effective date of the revised policy.
• Notify registered players via the mobile number or email address on file at least 14 days before the revised policy takes effect, where material changes to data processing are involved.
• Post a prominent notice on the jat9 platform homepage informing players that the Privacy Policy has been updated and directing them to review the changes.

Your continued use of the jat9 platform following the effective date of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with any changes, you should cease using the platform and may request account closure by contacting [email protected].

Minor changes that do not materially affect your rights or how your data is processed — such as typographical corrections, clarifications of existing practices, or formatting adjustments — may be made without advance notice, though the version date will still be updated to reflect any revision.

If you have any questions, concerns or requests relating to this Privacy Policy or the way jat9 handles your personal data, please contact our support team using the details below. We are committed to responding to all privacy-related enquiries promptly and transparently.

We aim to acknowledge all privacy-related enquiries within 48 hours and provide a full response within 30 calendar days. For data rights requests requiring identity verification, please include your registered mobile number in your message so we can confirm your identity before processing the request.

For responsible gaming concerns or self-exclusion requests that intersect with data privacy — for example, requesting deletion of your account as part of a self-exclusion — please email [email protected] with the subject line "Responsible Gaming & Privacy" and our welfare team will coordinate both processes together.