Privacy Policy — jitaach

1. Data We Collect

When you register and use jitaach, we collect certain categories of personal data. We only collect information that is genuinely necessary to operate our platform, verify your identity, process payments, and deliver a safe, personalised experience. Below is a summary of the data categories we collect and the circumstances in which we collect them.

Data Category	Examples	When Collected
Identity Data	Full name, date of birth, National ID / passport number	Account registration & KYC verification
Contact Data	Email address, mobile phone number (Bangladesh)	Account registration
Financial Data	bKash / Nagad / Rocket / Upay mobile wallet number, bank account reference	Deposit & withdrawal requests
Technical Data	IP address, device type, browser type, operating system, session timestamps	Automatically on platform access
Usage Data	Games played, bets placed, pages visited, session duration	Automatically during platform use
Communications Data	Support chat logs, email correspondence, feedback submissions	When you contact our support team
Verification Documents	Scanned NID, proof-of-address documents, payment account screenshots	KYC verification on request

1.1 Data We Do Not Collect

jitaach does not collect sensitive personal data beyond what is strictly required for identity verification and responsible gaming compliance. We do not collect biometric data, racial or ethnic origin data, religious beliefs, health records, or political opinions. We do not collect data about users who have not registered an account, beyond standard anonymous technical data (such as IP address and browser type) used for security and analytics.

2. How We Use Your Data

jitaach uses the personal data we collect for the following specific, documented purposes. We do not use your data for any purpose that is incompatible with the reason it was originally collected.

2.1 Account Management & Service Delivery

We use your identity and contact data to create and maintain your player account, authenticate your logins, and deliver the core jitaach service — including cricket betting, live casino, slots, bingo, and rummy. Without this data, we cannot provide you with a registered player account.

2.2 Payment Processing

Your financial data (bKash, Nagad, Rocket, Upay, or bank account references) is used solely to process deposit and withdrawal requests accurately and in accordance with our payment procedures. We store only the minimum transaction reference required; full wallet credentials are handled by the respective payment provider.

2.3 Identity Verification & KYC Compliance

We use identity and verification document data to confirm that you meet our 18+ age requirement, that you are who you claim to be, and that your payment accounts are registered in your own name. This is a legal obligation and a responsible gaming requirement that we take seriously.

2.4 Fraud Prevention & Security

Technical data — including IP addresses, device fingerprints, and session timestamps — is used to detect and prevent fraudulent activity, money laundering, multi-accounting, and unauthorised access attempts. This processing is essential for the security of all players on the platform.

2.5 Responsible Gaming Monitoring

Usage data (games played, bet amounts, session length, deposit frequency) is used to monitor for signs of problem gambling behaviour. Where our system identifies a pattern of concern, we may proactively contact you or apply account-level controls in line with our Responsible Gaming Policy. Please visit our Responsible Gaming page for full details.

2.6 Customer Support

Communications data from your support interactions is retained so our team can provide consistent, contextual assistance and maintain a complete record of any disputes or queries. Support communications are accessed only by authorised jitaach staff.

2.7 Platform Improvement & Analytics

Anonymised and aggregated usage data is used to understand how players navigate jitaach, which features are most valued, and where the platform experience can be improved. This analysis never identifies individual players and is not shared externally.

2.8 Promotional Communications

If you have opted in to marketing communications at the time of registration, we may contact you via email or SMS with personalised offers, seasonal promotions (such as BPL season bonuses or Eid special events), and platform news. You can withdraw your marketing consent at any time by contacting support@jitaach or updating your account preferences.

3. Data Sharing & Third Parties

jitaach does not sell, rent, or trade your personal data to any third party for commercial purposes. We share data only in the following limited, controlled circumstances:

3.1 Payment Processors

When you make a deposit or request a withdrawal, the minimum necessary transaction data is shared with the relevant payment provider — bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, or Sonali Bank — to complete the transaction. Each of these providers operates under their own privacy policy and security standards.

3.2 Game Studio Providers

Game content on jitaach is supplied by third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. When you launch a game, the game client may receive a session token and anonymised player identifier from jitaach for the purpose of game functionality, bet settlement, and RNG auditing. We do not share your name, contact details, or payment information with game studios.

3.3 Legal & Regulatory Disclosure

We may be required to disclose personal data to law enforcement agencies, courts, or other governmental authorities in Bangladesh if we receive a valid legal request, court order, or are under a legal obligation to do so. In such cases, we will disclose only the minimum data required and will notify the affected player where we are legally permitted to do so.

3.4 Fraud Prevention Services

We may share technical data (such as IP addresses and device identifiers) with trusted fraud prevention and anti-money-laundering service providers for the purpose of protecting the platform and all players. These providers act as data processors under contractual data protection obligations and may not use the data for any other purpose.

3.5 Business Transfers

In the event that jitaach undergoes a merger, acquisition, or sale of assets, your personal data may be transferred as part of that transaction. In such an event, we will notify affected players and ensure that the receiving party agrees to honour this Privacy Policy.

4. Cookies & Tracking Technologies

jitaach uses cookies and similar browser-based technologies to ensure the platform functions correctly, to keep you securely logged in, and to understand how the site is being used. We do not use advertising or cross-site tracking cookies.

4.1 Types of Cookies We Use

Cookie Type	Purpose	Duration
Strictly Necessary	Session management, login authentication, CSRF protection, fraud detection	Session / up to 24 hours
Functional	Remembering your language and display preferences, storing your last visited game category	Up to 30 days
Analytics	Anonymised page-view tracking, feature usage patterns, error monitoring (no personal identifiers)	Up to 12 months

4.2 Managing Cookies

You can control and delete cookies through your browser settings at any time. Please note that disabling strictly necessary cookies will prevent you from logging in or using core platform features. Disabling functional or analytics cookies will not affect your ability to play games or make transactions, but may reduce the quality of your experience on jitaach.

5. Data Security & Storage

jitaach applies a layered security approach to protect your personal data from unauthorised access, disclosure, alteration, or destruction. Our key security measures include:

• SSL/TLS Encryption: All data transmitted between your browser or mobile device and our servers is encrypted using TLS 1.2 or higher.
• Encrypted Data Storage: Sensitive personal data — including identity documents and financial references — is stored in encrypted form at rest using AES-256 encryption.
• Access Controls: Personal data is accessible only to authorised jitaach personnel who require it to perform their job functions. Access is managed through role-based permissions and logged for audit purposes.
• Password Security: Account passwords are stored as salted cryptographic hashes. jitaach staff cannot view or retrieve your password in plain text.
• Fraud Monitoring: Our automated systems continuously monitor for suspicious login attempts, unusual transaction patterns, and other indicators of unauthorised access.
• Regular Security Reviews: Our platform and infrastructure undergo periodic security assessments to identify and remediate vulnerabilities before they can be exploited.

While jitaach takes all reasonable and industry-standard measures to safeguard your data, no online platform can guarantee absolute security. In the event of a data breach that is likely to pose a risk to your rights, we will notify affected players promptly and take immediate steps to contain and remediate the incident.

5.1 Data Storage Location

Player data is stored on secure servers. jitaach ensures that any third-party data processors we engage are contractually required to implement equivalent levels of data protection and security to those we apply ourselves. We do not store player payment credentials (full wallet PINs or bank passwords) on our own servers — these remain within the secure systems of the respective payment providers.

6. Your Privacy Rights

As a player on jitaach, you have the following rights with respect to the personal data we hold about you. To exercise any of these rights, contact our support team at support@jitaach. We will respond to all valid requests within 30 calendar days.

7. Data Retention Policy

jitaach retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and financial compliance obligations. The table below summarises our standard retention periods by data category.

Data Category	Retention Period	Basis for Retention
Account & Identity Data	Duration of account + 5 years after closure	Financial compliance, AML obligations
Transaction Records	7 years from transaction date	Financial regulatory requirements
KYC Documents	Duration of account + 5 years after closure	AML & identity verification compliance
Support Communications	3 years from last interaction	Dispute resolution, service improvement
Technical / Log Data	12 months from collection	Security monitoring, fraud prevention
Analytics Data	12 months (anonymised upon collection)	Platform improvement — anonymised, no personal identifiers
Marketing Preferences	Until opt-out, then deleted within 30 days	Consent-based processing

When personal data reaches the end of its retention period, it is either securely deleted or fully anonymised so that it can no longer be linked to any individual. Anonymised data may be retained indefinitely for statistical purposes.

8. Updates to This Policy

jitaach reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, platform features, or applicable legal requirements. When we make material changes to this Policy, we will notify registered players by email and/or by posting a prominent notice on the Platform. The updated Policy will be effective from the date stated at the top of the page.

We encourage you to review this Privacy Policy periodically. Your continued use of jitaach after any update is published constitutes your acknowledgement of the revised Policy. If you do not agree with any change, you may close your account by contacting our support team at support@jitaach.

For any questions, concerns, or requests relating to this Privacy Policy or the personal data we hold about you, please reach out to our support team. We are available 24 hours a day, 7 days a week and are committed to responding to all privacy-related enquiries within one business day.