Your Privacy Matters to jata9

This Privacy Policy ("Policy") is issued by jata9 ("jata9", "we", "us", "our"), the operator of the online betting and casino platform accessible at https://jata9.io (the "Platform"). This Policy applies to all personal data collected, processed, stored, or otherwise handled by jata9 in connection with your access to and use of the Platform, including account registration, deposits, withdrawals, participation in betting markets and casino games, customer support interactions, and any other engagement with jata9's services.

This Policy is addressed to all users of the Platform, including registered account holders, prospective players who browse the Platform without registering, and any individual who contacts jata9 for support or information. By accessing or using the Platform, you acknowledge that you have read and understood this Policy and that you consent to the collection and processing of your personal data as described herein.

jata9 is committed to handling personal data in a manner consistent with internationally recognised data protection principles, including lawfulness, fairness, transparency, purpose limitation, data minimisation, accuracy, storage limitation, integrity, and confidentiality. These principles guide every aspect of jata9's approach to data governance.

For the purposes of this Policy, jata9 acts as the data controller in respect of all personal data collected directly from Platform users. As data controller, jata9 determines the purposes for which and the means by which personal data is processed. Where jata9 engages third-party service providers to process data on its behalf, those providers act as data processors and are subject to written contractual obligations that restrict their use of your data to the specific purpose for which it was shared.

All data protection inquiries, access requests, deletion requests, and formal complaints relating to jata9's processing of personal data should be directed to jata9's support team using the contact details set out in Section 14 of this Policy.

jata9 collects the following categories of personal data from users of the Platform. The specific data collected in any given instance depends on the nature of your interaction with the Platform.

jata9 does not intentionally collect special categories of sensitive personal data (such as health data, biometric data, racial or ethnic origin, religious beliefs, or political opinions) unless specifically required by law or regulatory compliance obligations. If such data is inadvertently provided, it will be deleted promptly upon discovery unless legally required to be retained.

jata9 collects personal data through the following means:

• Direct collection: Data you provide actively when registering an account, completing KYC verification, initiating a deposit or withdrawal, contacting support, responding to surveys, or participating in promotions.
• Automated collection: Technical and usage data collected automatically via cookies, web server logs, session tracking scripts, and analytics tools when you access or interact with the Platform. See Section 10 for full details on cookies.
• Third-party sources: Identity and fraud risk data received from third-party KYC and AML verification service providers that jata9 engages to fulfil its compliance obligations. jata9 may cross-reference information you provide against data held by these providers.
• Payment processors: Transaction confirmation data and payment method details received from payment service providers including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, and City Bank in the course of processing your deposits and withdrawals.

jata9 processes your personal data for the following specific purposes, each of which is supported by a lawful basis for processing:

Where jata9 relies on consent as the lawful basis for processing, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal. To withdraw consent, contact jata9 support at [email protected].

Where jata9 relies on legitimate interest as the lawful basis, jata9 has assessed that its legitimate interests are not overridden by your interests or fundamental rights and freedoms, taking into account the nature of the data involved and the reasonable expectations of Platform users.

jata9 does not sell, rent, or trade your personal data to unaffiliated third parties for their own commercial or marketing purposes. Personal data is shared only in the following specific circumstances:

• Payment service providers: Financial data is shared with bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and other payment partners solely for the purpose of processing your deposits and withdrawals. These providers are bound by their own data protection obligations.
• KYC and AML verification providers: Identity and verification document data is shared with third-party KYC and AML compliance service providers engaged by jata9 to fulfil its regulatory obligations. These providers act as data processors under written contractual agreements.
• Game content providers: Pseudonymised session and gameplay data may be shared with game studio partners including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi for the purpose of delivering and auditing game content. These providers do not receive your full identity data.
• Analytics and security providers: Technical and usage data may be shared with platform analytics and cybersecurity providers to support Platform performance monitoring, fraud detection, and security incident response.
• Law enforcement and regulators: Personal data may be disclosed to law enforcement agencies, financial intelligence units, or other regulatory authorities where jata9 is legally required to do so, or where disclosure is necessary to prevent or detect serious criminal activity including fraud and money laundering.
• Professional advisers: Identity and account data may be disclosed to jata9's legal counsel, auditors, or insurers on a strictly confidential basis where necessary in connection with legal proceedings, audits, or insurance claims.
• Business transfers: In the event of a merger, acquisition, or sale of jata9's business or assets, personal data held by jata9 may be transferred to the acquiring entity, subject to that entity's assumption of equivalent data protection obligations.

jata9 retains personal data for the minimum period necessary to fulfil the purpose for which it was collected, after which it is securely deleted or rendered permanently anonymous. The following retention periods apply as a general guide:

• Account and identity data: Retained for the duration of your active account plus a minimum of five years following account closure, to satisfy anti-money laundering record-keeping obligations and to address any retrospective legal claims.
• Financial transaction data: Retained for a minimum of five years from the date of each transaction, consistent with financial record-keeping requirements applicable to internationally licensed offshore platforms.
• KYC verification documents: Retained for the duration of the account relationship plus five years following account closure or the last relevant transaction, whichever is later.
• Customer support communications: Retained for three years from the date of the last communication, to support dispute resolution and quality assurance review.
• Technical and usage data: Retained for up to 13 months from collection for analytics and security purposes, after which it is aggregated or deleted.
• Marketing consent records: Retained for three years from the date consent was given or last confirmed, or until consent is withdrawn, whichever is sooner.

Where jata9 is required by applicable law or regulatory direction to retain data for a longer period than stated above, the legally required period shall take precedence. Upon expiry of the applicable retention period, data is deleted using industry-standard secure deletion methods or anonymised in a manner that makes re-identification permanently impossible.

jata9 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• SSL/TLS encryption: All data transmitted between your device and jata9's servers is encrypted using TLS 1.2 or higher. The padlock icon visible in your browser's address bar confirms that your connection to jata9 is encrypted.
• Encrypted data storage: Personal data and financial records stored in jata9's databases are encrypted at rest using AES-256 or equivalent encryption standards.
• Access controls: Access to personal data within jata9's systems is restricted to authorised personnel on a strict need-to-know basis. Role-based access controls and multi-factor authentication are applied to all internal systems that store or process personal data.
• Regular security audits: jata9's Platform and infrastructure undergo periodic security assessments including vulnerability scanning and penetration testing to identify and remediate potential weaknesses before they can be exploited.
• Data breach response: jata9 maintains a documented data breach response procedure. In the event of a confirmed personal data breach that poses a risk to the rights and freedoms of affected individuals, jata9 will notify affected players without undue delay and take immediate steps to contain and remediate the breach.
• Staff training: All jata9 personnel with access to personal data receive regular data protection training and are contractually bound by confidentiality obligations.

Notwithstanding jata9's security measures, no method of electronic transmission or data storage is completely secure. You are also responsible for maintaining the security of your own account credentials. jata9 recommends enabling two-factor authentication on your account and using a strong, unique password that is not reused across other services.

Subject to applicable law and certain exceptions relating to legal obligations and legitimate overriding interests, you have the following rights in relation to the personal data jata9 holds about you:

• Right of access: You have the right to request a copy of the personal data jata9 holds about you, together with information about the purposes for which it is processed, the categories of data held, and the third parties with whom it has been shared.
• Right to rectification: You have the right to request correction of any personal data that is inaccurate, incomplete, or out of date. Minor corrections (such as updating your contact email) can be made directly through your account settings. Material corrections (such as changes to identity data) must be submitted to jata9 support along with supporting documentation.
• Right to erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent and there is no other lawful basis for processing, or where you object to processing and jata9 has no overriding legitimate interest. This right is subject to jata9's legal obligations to retain certain data for defined periods.
• Right to restrict processing: You have the right to request that jata9 restricts its processing of your personal data in certain circumstances, such as while a dispute about data accuracy is being resolved, or while an objection to processing is being assessed.
• Right to data portability: Where processing is based on consent or contract and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format, and to transmit that data to another controller.
• Right to object: You have the right to object at any time to processing of your personal data that is based on jata9's legitimate interests. jata9 will cease processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to withdraw consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that took place prior to withdrawal.

To exercise any of the rights listed above, please contact jata9's support team via live chat or by email at [email protected] with the subject line "Data Rights Request — [Your Account Username]". jata9 will respond to all data rights requests within 30 calendar days of receipt. In cases where the request is complex or jata9 is handling a high volume of requests, this period may be extended by a further two months, in which case jata9 will notify you of the extension within the initial 30-day period.

jata9 will not charge a fee for exercising your data rights unless the request is manifestly unfounded or excessive, in which case jata9 may charge a reasonable administrative fee or decline to act on the request, explaining the reasons for doing so.

jata9 uses cookies and similar tracking technologies to operate the Platform, remember your preferences, maintain your session when you are logged in, and gather analytics data to improve Platform performance. The following categories of cookies are used on the jata9 Platform:

• Strictly necessary cookies: These cookies are essential for the Platform to function correctly. They enable core functionality such as session management, authentication, and security. These cookies cannot be disabled as the Platform cannot function without them.
• Functional cookies: These cookies remember your preferences and settings, such as your preferred language, display options, and account configuration choices, to provide you with a personalised experience on the Platform.
• Analytics cookies: These cookies collect anonymous information about how visitors use the Platform, including which pages are visited most frequently, how long users spend on each section, and where users navigate from. This data is used in aggregate form to improve Platform design and content. Individual users are not identified by analytics cookies.
• Security cookies: These cookies assist in identifying and preventing fraudulent activity, detecting bot traffic, and protecting the integrity of betting markets and game outcomes on the Platform.

You can control cookie settings through your browser's privacy or settings menu. Most browsers allow you to view, manage, block, and delete cookies. Please note that blocking strictly necessary cookies will prevent the Platform from functioning correctly, and you may not be able to log in or place bets if these cookies are disabled.

jata9 does not use third-party advertising or retargeting cookies to track your activity across other websites for commercial advertising purposes.

The jata9 Platform is strictly intended for adults aged 21 years and above. jata9 does not knowingly collect personal data from individuals under the age of 21. If jata9 becomes aware that personal data has been collected from a person under the age of 21, that data will be deleted immediately and the associated account will be closed without delay.

jata9 applies age verification checks during the registration process and as part of its ongoing KYC obligations. Players who cannot provide satisfactory proof of age will have their accounts suspended and all funds held pending identity verification resolution.

jata9 operates as an internationally licensed offshore platform. As a result, your personal data may be transferred to, stored in, and processed in countries outside Bangladesh. Where personal data is transferred internationally, jata9 takes steps to ensure that appropriate safeguards are in place to protect your data, including:

• Transfers to countries or territories that provide an adequate level of data protection as assessed by relevant regulatory standards.
• The use of standard contractual clauses or equivalent contractual safeguards with recipient organisations to ensure that your data is handled with an equivalent level of protection to that described in this Policy.
• Ensuring that third-party recipients of your data outside Bangladesh are subject to binding and enforceable data protection obligations before any transfer takes place.

By registering on and using the jata9 Platform, you acknowledge that your personal data may be transferred to and processed in jurisdictions outside Bangladesh, and you consent to such transfers where they are carried out in accordance with the safeguards described in this section.

jata9 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, jata9's data processing activities, or the services available on the Platform. When material changes are made, jata9 will provide notice to registered players via email to the address on file or via a prominent notice on the Platform, with at least 14 days' advance notice before the amended Policy takes effect, except where immediate changes are required by law.

The date of the most recent revision is displayed at the top of this Policy under "Last Updated". Continued use of the Platform after the effective date of any revised Policy constitutes acceptance of the updated terms. If you do not accept the revised Policy, you must cease using the Platform and contact jata9 support to close your account. The current version of this Policy is always accessible at https://jata9.io/privacy-policy.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a concern about the way jata9 has handled your personal data, please contact jata9 using the following details:

• Live Chat: Available 24 hours a day, 7 days a week, directly on the jata9 Platform. Live chat is the fastest channel for urgent data protection queries.
• Email: [email protected] — for data rights requests, privacy complaints, consent withdrawal, and all formal data protection correspondence. Please use the subject line "Privacy Request — [Your Account Username]" for data rights requests, or "Privacy Complaint — [Your Account Username]" for formal complaints.
• Response time: jata9 aims to acknowledge all privacy-related communications within 24 hours and to provide a substantive response within 30 calendar days.
• Support Language: English.
• Operating Hours: 24/7, Bangladesh Standard Time (BST, UTC+6).

If you are not satisfied with jata9's response to a privacy complaint or data rights request, you have the right to escalate the matter to the relevant data protection authority or regulator applicable in your jurisdiction. jata9 encourages players to contact jata9 directly in the first instance so that jata9 has the opportunity to resolve concerns before formal regulatory escalation.