Privacy Policy
jitbaj Data Protection Statement

This Privacy Policy applies to all personal data processed by jitbaj in connection with the operation of the online betting and casino platform available at https://jitbaj.vip. The policy covers data collected through the website interface, account registration forms, transaction records, customer support interactions, and any other channel through which you interact with jitbaj.

jitbaj is the data controller responsible for the personal data of its registered users. As data controller, jitbaj determines the purposes and means by which personal data is processed, and is accountable for ensuring that processing activities comply with applicable data protection principles.

This policy should be read alongside the jitbaj Terms & Conditions and Responsible Gaming policy, both of which are published on this platform and together form the full legal framework governing your use of jitbaj.

jitbaj collects only the personal data that is necessary for the purposes described in this policy. The categories of personal data we collect are set out in the table below:

jitbaj does not collect sensitive personal data categories such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data, except where expressly required for identity verification and only to the minimum extent necessary for that purpose.

jitbaj collects personal data through the following channels:

• Direct submission: Information you provide when you create an account, complete KYC verification, make a deposit or withdrawal request, or contact the support team.
• Automated technical collection: Data collected automatically when you visit the platform, including IP address, device identifiers, browser fingerprint, and session activity logs. This data is collected via server logs and first-party cookies.
• Payment processors: Transaction confirmation data shared with jitbaj by payment service providers including bKash, Nagad, Rocket, Upay, Visa, and Mastercard to validate deposits and withdrawals.
• Identity verification partners: Where you submit KYC documents, our verification partner may return a pass/fail result and a verification reference number to jitbaj. The document images themselves are stored by the verification partner under their own data protection obligations.
• Customer support interactions: Records of live chat sessions, email correspondence, and any other communication you initiate with the jitbaj support team.

jitbaj does not purchase personal data from data brokers or any third-party list providers. All personal data held by jitbaj originates from your direct interaction with the platform.

jitbaj processes your personal data only for clearly defined and lawful purposes. The table below summarises each processing purpose and the corresponding legal basis:

Where processing is based on your consent (specifically, marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal. Withdrawal of marketing consent does not affect your account or your ability to use the platform.

jitbaj does not sell your personal data to third parties. We share personal data only in the following limited and controlled circumstances:

• Payment service providers: bKash, Nagad, Rocket, Upay, Visa, and Mastercard receive transaction data strictly necessary to process your deposits and withdrawals. Each provider operates under its own privacy framework and is independently responsible for the data it holds.
• Identity verification partners: KYC documents submitted for account verification are processed by specialist identity verification service providers. These partners act as data processors under contractual obligations that prohibit them from using your data for any purpose other than verification.
• Fraud prevention and risk management services: Technical data including IP addresses and device identifiers may be shared with anti-fraud platforms to detect unusual account activity, protect the integrity of the betting markets, and prevent money laundering.
• Game software providers: Providers such as Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, and Spribe receive a pseudonymous session identifier to operate game rounds. They do not receive your name, contact details, or payment information.
• Legal and regulatory authorities: jitbaj will disclose personal data to law enforcement agencies, financial intelligence units, or other government bodies where required to do so by applicable law, valid legal process, or a binding order from a competent authority.
• Business transfers: In the event of a merger, acquisition, or sale of assets involving jitbaj, your personal data may be transferred to the successor entity. You will be notified of any such transfer and any material change to this Privacy Policy that results from it.

jitbaj uses first-party cookies and similar tracking technologies to operate the platform, maintain your login session, and gather analytics data about platform usage. The cookies used by jitbaj fall into the following categories:

• Strictly necessary cookies: These cookies are essential for the platform to function. They maintain your authenticated session, remember your account preferences, and enable security features such as CSRF protection. These cookies cannot be disabled without preventing you from using the platform.
• Functional cookies: These cookies remember your language preferences, display settings, and other personalisation choices to improve your experience across sessions.
• Analytics cookies: jitbaj uses anonymised analytics data to understand how users navigate the platform, identify technical issues, and prioritise feature improvements. Analytics data is aggregated and does not identify individual users.
• Fraud detection cookies: Certain cookies record device fingerprint data used to identify suspicious login patterns and protect your account from unauthorised access.

jitbaj does not use third-party advertising cookies, retargeting pixels, or social media tracking scripts. You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair platform functionality and may prevent you from logging in to your account.

jitbaj retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods:

• Account data and transaction records: Retained for a minimum of five (5) years following account closure, in order to comply with anti-money laundering record-keeping requirements and to resolve any disputes that may arise after account closure.
• KYC and identity verification documents: Retained for a minimum of five (5) years following the completion of the verification process, or five (5) years following account closure, whichever is later.
• Customer support communications: Retained for three (3) years from the date of the interaction, unless the communication relates to an ongoing dispute, in which case it is retained until the dispute is fully resolved plus one (1) year.
• Technical and session data (server logs): Retained for twelve (12) months, after which they are deleted or anonymised.
• Marketing preference records: Retained for the duration of your account and for one (1) year following account closure as evidence of consent status.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where data is anonymised rather than deleted, the anonymised dataset may be retained indefinitely for statistical and analytical purposes, as it no longer constitutes personal data.

jitbaj implements a layered set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. These measures include:

• Transport security: All data in transit between your browser and the jitbaj platform is encrypted using TLS 1.2 or higher with a 256-bit SSL certificate.
• Password storage: Account passwords are never stored in plain text. They are processed through a one-way cryptographic hash function with a unique per-user salt, ensuring that even in the event of a data breach, your original password cannot be recovered.
• Access controls: Internal access to personal data is restricted on a strict need-to-know basis. Staff members can access only the data required to perform their specific role. Access logs are maintained and reviewed regularly.
• Infrastructure security: jitbaj hosting infrastructure is protected by firewalls, intrusion detection systems, and regular security patch management. Penetration testing is conducted periodically by independent security professionals.
• Payment data isolation: Full payment card numbers are never stored on the jitbaj platform. Card transactions are handled entirely by PCI-DSS compliant payment processors.

As a jitbaj account holder, you hold the following rights in relation to your personal data. To exercise any of these rights, contact the support team at [email protected] with the subject line "Data Rights Request":

• Right of access: You may request a copy of all personal data jitbaj holds about you. Requests will be fulfilled within 30 days of receipt.
• Right to rectification: If any personal data held by jitbaj is inaccurate or incomplete, you may request that it be corrected. Corrections to identity data may require re-submission of verification documents.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to jitbaj's legal retention obligations described in Section 7. Where legal retention requirements apply, full erasure cannot be carried out until those periods have elapsed.
• Right to restriction of processing: You may request that jitbaj restrict the processing of your personal data in certain circumstances, for example while the accuracy of data is being contested.
• Right to data portability: You may request a copy of the personal data you have provided to jitbaj in a structured, commonly used, machine-readable format (CSV).
• Right to withdraw consent: Where processing is based on your consent (specifically, marketing communications), you may withdraw consent at any time by updating your account notification preferences or by contacting support.
• Right to object: You may object to processing carried out on the basis of legitimate interests. jitbaj will assess whether its legitimate interests override your rights and will respond within 30 days.

jitbaj will not charge a fee for handling reasonable data rights requests. Where a request is manifestly unfounded or excessive, jitbaj reserves the right to charge a reasonable administrative fee or decline the request, providing written reasons for doing so.

The jitbaj platform is strictly intended for adults aged 18 years and above. jitbaj does not knowingly collect personal data from any person under the age of 18. If jitbaj becomes aware that personal data has been collected from a minor, the associated account will be immediately closed, all funds will be dealt with in accordance with the Terms & Conditions, and the personal data of the minor will be securely deleted as promptly as is practicable.

If you are a parent or guardian and believe that a person under 18 in your care has created an account on jitbaj, please contact us immediately at [email protected]. We will investigate and take appropriate action without delay.

The jitbaj platform may contain references to third-party payment service providers and game software providers in an informational capacity. jitbaj is not responsible for the privacy practices of any third-party service whose data handling operations are outside jitbaj's direct control.

When you use a payment method such as bKash, Nagad, or Rocket to fund your account, you will be interacting with that provider's own interface and systems. jitbaj encourages you to review the privacy policy of any third-party service you use in connection with your jitbaj account. jitbaj's Privacy Policy applies only to data processed directly by jitbaj.

jitbaj reserves the right to update this Privacy Policy at any time to reflect changes in our data processing activities, applicable law, or best practice. The effective date at the top of this document will be updated whenever a revision is published.

For material changes to this Privacy Policy — that is, changes that significantly affect the way we collect, use, or share your personal data — jitbaj will notify registered account holders via the email address associated with their account at least 14 days before the change takes effect, where practicable.

Your continued use of the jitbaj platform following the publication of an updated Privacy Policy constitutes your acknowledgement of the revised terms. If you disagree with any material change, you may close your account by contacting the support team prior to the change taking effect.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way jitbaj handles your personal data, please contact the jitbaj Data Protection team using the details below. All privacy-related enquiries are handled with strict confidentiality.

• Email: [email protected] (plain text — not a clickable link)
• Subject Line for Data Requests: "Data Rights Request"
• Support Hours: 24 hours a day, 7 days a week
• Response Time for Privacy Requests: Within 30 calendar days of receipt
• Language: English