Privacy Policy for jitawun

jitawun collects personal data through several channels: directly from you when you register or interact with the platform, automatically through your use of the site, and in limited cases from trusted third-party verification partners. The categories of data we collect are set out below.

1.1 Registration Data

When you create a jitawun account, we collect the following information:

• Full legal name — as it appears on your government-issued identification document;
• Date of birth — required to verify that you meet the 18+ age requirement;
• Mobile phone number — used for account verification, two-factor authentication, and critical account notifications;
• Email address — used for account communications, promotional messages (where consent is given), and password recovery;
• Residential address — including district, city (e.g., Dhaka, Chittagong, Sylhet, Khulna), and postal code, collected for identity verification and fraud prevention;
• Username and password — your chosen login credentials; passwords are stored in hashed form and are never accessible to jitawun staff.

1.2 Identity Verification (KYC) Data

As part of our Know Your Customer (KYC) process, we may request copies of identity documents including your National Identity Card (NID), passport, or other government-issued photographic ID. We may also request proof of address documents such as a utility bill or bank statement, and in some cases, photographic proof of ownership of your payment method (e.g., a screenshot of your bKash or Nagad account showing your registered mobile number).

1.3 Financial Data

We collect details of your financial transactions on the platform, including deposit amounts, withdrawal requests, payment method types used (bKash, Nagad, Rocket, Upay, bank transfer, Visa, Mastercard), and transaction timestamps. We do not store full card numbers or mobile banking PINs. Payment processing is handled by our payment partners, who operate their own data protection practices.

1.4 Usage and Behavioural Data

We automatically collect data about how you interact with the jitawun platform. This includes:

• Pages visited, games played, and time spent on each section;
• Betting and wagering history (game type, stake amounts, outcomes);
• Session start and end times, login frequency, and device type;
• IP address and approximate geographic location (city-level, not GPS);
• Browser type, operating system, and screen resolution;
• Referral source (how you arrived at jitawun, e.g., a search engine or direct URL entry).

This behavioural data is used primarily for platform improvement, fraud detection, and responsible gaming monitoring. It is not used to build advertising profiles for third-party marketing.

1.5 Communications Data

If you contact jitawun's customer support team via live chat or email, we retain records of those communications. This helps us resolve disputes, track support history, and improve our service quality. Support records are stored securely and accessible only to authorised jitawun staff.

jitawun processes your personal data for specific, legitimate purposes. We do not use your data in ways that go beyond what is reasonably necessary to operate the platform and protect our players.

Purpose	Data Used	Legal Basis
Account creation and management	Name, email, phone, password	Contractual necessity
Age and identity verification (KYC)	Date of birth, NID/passport, address	Legal obligation / responsible gaming
Payment processing	Transaction records, payment method type	Contractual necessity
Fraud prevention and security	IP address, device data, behavioural data	Legitimate interest
Responsible gaming monitoring	Play patterns, deposit history, session data	Legal obligation / player protection
Customer support	Communications history, account data	Contractual necessity / legitimate interest
Marketing communications	Email, phone number	Consent (opt-in only)
Platform improvement and analytics	Anonymised usage data	Legitimate interest

2.1 Marketing Communications

jitawun will only send you promotional messages — including bonus offers, game announcements, and seasonal promotions related to events such as the BPL, IPL, Eid, or Pohela Boishakh — if you have explicitly opted in to receive such communications. You may withdraw your marketing consent at any time by contacting support or updating your account preferences. Withdrawing marketing consent does not affect the processing of your data for other purposes described in this Policy.

2.2 Automated Decision-Making

jitawun uses automated systems to detect unusual account activity, flag potential fraud, and monitor for responsible gaming indicators (such as unusually rapid increases in deposit frequency). Where an automated decision results in a restriction on your account, you have the right to request a manual review by a member of our team. Contact support via live chat or email to initiate a review.

jitawun does not sell, rent, or otherwise transfer your personal data to third parties for their own commercial purposes. We share data only in the limited circumstances described below, and only to the minimum extent necessary.

3.1 Payment Partners

To process your deposits and withdrawals, we share necessary transaction data with our payment service providers including bKash, Nagad, Rocket, Upay, and supported banks. These partners receive only the information required to complete the specific transaction and operate under their own privacy and data protection obligations.

3.2 Identity Verification Providers

Where KYC verification is required, we may share identity documents and personal information with specialist third-party identity verification services. These providers act under contract to jitawun and are required to process data solely for the purpose of identity verification and fraud prevention.

3.3 Technology and Infrastructure Providers

jitawun uses third-party cloud hosting, database, and security services to operate the platform. These providers may technically have access to data stored on their infrastructure, but they are contractually prohibited from accessing, using, or disclosing that data for any purpose other than providing the agreed technical service to jitawun.

3.4 Legal and Regulatory Requirements

We may disclose your personal data if we are required to do so by applicable law, court order, or lawful regulatory request. In such cases, we will disclose only the minimum amount of data required to comply with the legal obligation, and where permitted, we will notify you of the disclosure.

jitawun uses cookies and similar tracking technologies (such as local storage and session tokens) to operate and improve the platform. A cookie is a small text file stored on your device when you visit a website. Cookies do not contain viruses and cannot access other files on your device.

4.1 Cookie Categories We Use

Cookie Type	Purpose	Required?
Essential Cookies	Keep you logged in, maintain your session, enable core platform functionality	Yes — cannot be disabled
Security Cookies	Detect fraudulent activity, enforce account access controls, support two-factor authentication	Yes — cannot be disabled
Preference Cookies	Remember your language preference, display settings, and game filters	Optional
Analytics Cookies	Collect anonymised data on page visits and feature usage to help us improve the platform	Optional

4.2 Managing Cookies

You can control non-essential cookies through your browser settings. Most modern browsers allow you to block or delete cookies, though doing so may affect your ability to use certain features of the jitawun platform. Essential and security cookies are required for the platform to function and cannot be disabled without logging out or losing your session.

4.3 Do Not Track

Some browsers offer a "Do Not Track" (DNT) signal. At present jitawun does not alter its data collection practices in response to DNT signals, as there is no universally accepted standard for how such signals should be interpreted. We rely instead on our cookie management controls and transparent opt-in practices to respect your privacy preferences.

jitawun takes data security seriously. We implement a range of technical and organisational measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction.

• SSL/TLS Encryption: All data in transit between your device and our servers is encrypted using SSL/TLS protocols. Look for the padlock icon in your browser address bar when using jitawun.
• Password Hashing: Your account password is never stored in plain text. We use a strong cryptographic hashing algorithm so that even jitawun staff cannot read your password.
• Access Controls: Internal access to player data is restricted on a need-to-know basis. Only authorised personnel with a legitimate operational reason may access personal data, and all such access is logged.
• Fraud Monitoring: Our automated security systems continuously monitor for suspicious login attempts, unusual transaction patterns, and other indicators of account compromise or fraud.
• Secure Infrastructure: Our platform is hosted on hardened cloud infrastructure with regular security patching, vulnerability scanning, and penetration testing.

5.1 Your Responsibilities

While jitawun takes every reasonable step to protect your data on our end, the security of your account also depends on you. You are responsible for keeping your username and password confidential, not sharing your login credentials with anyone, and logging out of your account when using shared or public devices. If you suspect your account has been compromised, contact jitawun support immediately.

5.2 Data Breach Response

In the event of a data security breach that is likely to result in risk to your rights and freedoms, jitawun will take immediate steps to contain the breach, assess its impact, and notify affected players as quickly as practicable. We will provide clear information about what data was affected, what steps we have taken, and what you can do to protect yourself.

As a jitawun player, you have several rights in relation to your personal data. We are committed to honouring these rights promptly and transparently. To exercise any of the rights listed below, contact our support team via live chat or by emailing [email protected].

6.1 Right of Access

You have the right to request a copy of the personal data jitawun holds about you. We will respond to access requests within 30 days. The data will be provided in a structured, commonly used format. There is no charge for a standard access request.

6.2 Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. You can update basic account details such as your email address or phone number directly through your account settings. For corrections to identity or verification records, please contact support with the relevant documentation.

6.3 Right to Erasure

You may request that jitawun delete your personal data in certain circumstances — for example, if you close your account and we no longer have a legitimate reason to retain your data. Please note that we are required to retain certain records for a minimum period to comply with responsible gaming obligations and financial record-keeping requirements. In such cases, we will retain only the minimum data required and explain the legal basis for retention.

6.4 Right to Withdraw Consent

Where we process your data based on your consent (for example, for marketing communications), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

6.5 Right to Object

You have the right to object to the processing of your personal data where we rely on legitimate interests as our legal basis. We will consider your objection carefully and cease processing unless we can demonstrate compelling legitimate grounds that override your interests, or where processing is necessary for the establishment, exercise, or defence of legal claims.

jitawun does not retain personal data for longer than is necessary for the purposes for which it was collected. The table below sets out our standard retention periods for the main categories of data we hold.

Data Category	Retention Period	Reason
Account registration data	Duration of account + 5 years after closure	Responsible gaming, dispute resolution
KYC / identity documents	Duration of account + 5 years after closure	Legal obligation, fraud prevention
Financial transaction records	7 years from transaction date	Financial record-keeping requirements
Betting and wagering history	Duration of account + 3 years after closure	Dispute resolution, responsible gaming
Customer support communications	3 years from date of communication	Service quality, dispute resolution
Self-exclusion records	Minimum 7 years	Responsible gaming enforcement
Analytics data (anonymised)	Up to 2 years	Platform improvement

After the applicable retention period expires, personal data is securely deleted or anonymised so that it can no longer be linked to an individual. Anonymised, aggregated data may be retained indefinitely for statistical and platform improvement purposes.

jitawun may update this Privacy Policy from time to time to reflect changes in our data practices, new services we offer, or updates to applicable laws and regulations. When we make material changes to this Policy, we will notify active players via email or through a prominent notice on the platform prior to the changes taking effect.

The effective date at the top of this page will always reflect when the Policy was last updated. We encourage you to review this Privacy Policy periodically so that you remain informed about how we handle your data.

Your continued use of the jitawun platform after the effective date of any updated Policy constitutes your acceptance of the revised terms. If you do not agree with the updated Policy, you should contact us to discuss your options, including account closure.

If you have any questions about this Privacy Policy, how your data is used, or how to exercise your privacy rights, please do not hesitate to contact our support team. We are available 24/7 via live chat and respond to email inquiries at [email protected] within 2 hours during 8AM–midnight Bangladesh Standard Time (BST, UTC+6).