Privacy Policy for jitaaci

01 Data We Collect

When you register for and use a jitaaci account, we collect personal data across several categories. We collect this data because it is necessary for us to operate your account, verify your identity, process your transactions, and comply with applicable legal and regulatory obligations. Below is a clear breakdown of the categories of personal data we collect and the circumstances in which each category is gathered.

Registration Data

When you create a jitaaci account, we collect your full legal name, date of birth, residential address, mobile phone number, and email address. This information is used to create and manage your account, communicate with you, and verify that you meet the minimum age requirement of 18 years. Providing false registration information is a breach of jitaaci's Terms & Conditions and may result in account closure.

Identity Verification Data (KYC)

In order to comply with anti-money laundering obligations and to confirm your eligibility to withdraw funds, jitaaci may request copies of government-issued identity documents. Acceptable documents for players in Bangladesh include a valid National Identity Card (NID), passport, or driving licence. In some cases we may also request proof of address (such as a recent utility bill or bank statement) and proof of ownership of the payment method you are using.

Payment & Transaction Data

When you make a deposit or withdrawal on jitaaci via bKash, Nagad, Rocket, Upay, Visa, or Mastercard, we record transaction details including the payment method type, transaction amount in Bangladeshi Taka (৳), transaction date and time, and the reference numbers associated with each transaction. We do not store full card numbers or mobile banking PINs — payment processing is handled by our third-party payment service providers who maintain their own data security standards.

Technical & Usage Data

When you visit jitaaci, our servers automatically collect certain technical information, including your IP address, device type, operating system, browser type and version, screen resolution, referring URL, pages visited, time spent on each page, and session duration. This data is used for security monitoring, fraud detection, and improving the performance of the jitaaci platform. It is not linked to your identity unless fraud or a security incident requires investigation.

Gaming & Betting Activity Data

We maintain records of your gaming and betting activity on jitaaci, including games played, bets placed, wagers, wins, losses, bonus usage, and session timestamps. This data is used to operate your account, calculate bonus eligibility, detect bonus abuse, support responsible gaming monitoring, and resolve any disputes regarding game outcomes or account balances.

Communications Data

If you contact jitaaci's customer support team — whether by email or live chat — we retain records of that correspondence, including the content of your messages and the date and time of contact. This data is used to resolve your enquiry and to improve the quality of our support service.

02 How We Use Your Data

jitaaci uses the personal data we collect for specific, legitimate purposes only. We do not process your data in ways that are incompatible with the purposes for which it was collected. The following table summarises the key purposes for which we process your personal data and the legal basis for each purpose.

Marketing Communications

jitaaci may send you promotional communications about new games, bonuses, seasonal offers (such as Eid promotions, Pohela Boishakh specials, and BPL cricket season offers), and platform updates. We will only send marketing communications if you have opted in to receive them during registration or through your account settings. You may withdraw your consent and opt out of marketing communications at any time by contacting support@jitaaci or updating your account notification preferences.

03 Cookies & Tracking

jitaaci uses cookies and similar tracking technologies on its website. A cookie is a small text file placed on your device by your browser when you visit a website. Cookies allow jitaaci to recognise your browser across sessions, maintain your login state, remember your preferences, and collect anonymous analytics data about how players use our platform.

Categories of Cookies We Use

Managing Cookies

You can manage or delete cookies at any time through your browser settings. Most modern browsers allow you to block all cookies, block only third-party cookies, or delete cookies when you close your browser. Please note that disabling strictly necessary or security cookies may affect your ability to log in, maintain a session, or use certain features of jitaaci. Instructions for managing cookies are available in your browser's help documentation.

Third-Party Analytics

jitaaci may use anonymised, aggregated analytics data collected via third-party analytics services to understand how players interact with the platform. This data does not identify individual users and is used solely for internal product improvement purposes. No personally identifiable information is shared with analytics service providers for advertising or commercial purposes.

04 Data Sharing & Disclosure

jitaaci does not sell, rent, or otherwise commercially disclose your personal data to any third party. However, in order to operate as a licensed online gaming platform and process payments in Bangladesh, we do share certain personal data with a limited set of trusted third parties. All such sharing is governed by data processing agreements that require those third parties to protect your data to the same standard as jitaaci.

Categories of Third Parties We Share Data With

• Payment Service Providers: bKash, Nagad, Rocket (Dutch-Bangla Bank), Upay, Visa, and Mastercard receive transaction data necessary to process your deposits and withdrawals. They do not receive your full gaming history or account balance details beyond what is required for payment processing.
• Identity Verification Providers: We may use third-party KYC service providers to verify the identity documents you submit during account verification. These providers process your documents under strict confidentiality obligations.
• Game Providers: Third-party game providers (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) receive the minimum data required to deliver their games within the jitaaci platform, including a session token and your account currency. They do not receive your full personal profile.
• IT Infrastructure and Security Providers: Cloud hosting, content delivery, and security monitoring providers may process technical data (such as server logs and IP addresses) as part of their services. These providers act as data processors under our instruction.
• Legal and Regulatory Authorities: jitaaci will disclose personal data to law enforcement agencies, financial intelligence units, or regulatory authorities where required to do so by applicable law, court order, or legal process, without prior notice to you where law prohibits such notice.
• Fraud Prevention Services: We may share data with third-party fraud prevention agencies to verify the legitimacy of transactions and detect patterns of fraudulent or money-laundering activity.

International Data Transfers

As an offshore platform serving players in Bangladesh, some of jitaaci's data processing activities may involve transferring personal data to servers or service providers located outside Bangladesh. Where such transfers occur, we ensure that appropriate safeguards are in place — including standard contractual clauses or equivalent mechanisms — to protect your personal data to a standard at least equivalent to the protections described in this Privacy Policy.

05 Data Security

jitaaci implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. While no online platform can guarantee absolute security, we apply industry best practices consistently across all systems that process player data.

Technical Security Measures

• All data in transit between your device and jitaaci is encrypted using TLS 1.2 or higher (SSL encryption).
• Sensitive data at rest — including identity documents and payment records — is stored using AES-256 encryption.
• Account passwords are stored as salted cryptographic hashes; plain-text passwords are never stored or accessible by jitaaci staff.
• Access to production systems and player data is restricted to authorised personnel only, operating under least-privilege access controls.
• Regular security audits and penetration testing are conducted on jitaaci's platform infrastructure.
• Automated intrusion detection and anomaly monitoring systems are active 24 hours a day.
• Two-factor authentication (2FA) is available to players and is mandatory for administrative staff accessing backend systems.

Organisational Security Measures

• All jitaaci staff with access to player data are subject to confidentiality obligations and undergo data privacy training.
• A designated data protection contact is responsible for overseeing compliance with this Privacy Policy.
• Access logs are maintained and reviewed regularly to detect any unauthorised data access.
• Third-party service providers are vetted for security compliance before being granted access to any jitaaci player data.

Your Responsibility

You also play an important role in keeping your jitaaci account secure. You are responsible for maintaining the confidentiality of your username and password and for ensuring that you log out of your account when using a shared or public device. If you believe your account credentials have been compromised, contact jitaaci support immediately at support@jitaaci.

06 Data Retention

jitaaci retains your personal data only for as long as is necessary to fulfil the purposes described in this Privacy Policy, or for as long as we are required to do so under applicable law. When your data is no longer required, we securely delete or anonymise it in accordance with our internal data retention schedule.

Upon expiry of the applicable retention period, personal data is either permanently deleted from our systems or irreversibly anonymised so that it can no longer be associated with any individual player. Anonymised, aggregated data (from which no individual can be identified) may be retained indefinitely for statistical and business analytics purposes.

Retention Following Account Closure

If you close your jitaaci account voluntarily, or if jitaaci closes your account, your personal data is not immediately deleted. We are required by law to retain certain records — particularly transaction and identity records — for the periods specified in the table above. During this retention period, your data is flagged as inactive, access is restricted to authorised compliance personnel only, and the data is not used for any active marketing or profiling purpose.

07 Your Privacy Rights

As a jitaaci player, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, please contact our data protection team at support@jitaaci. We will respond to all valid requests within 30 days of receipt, though in complex cases we may extend this period by a further 30 days, with notice to you.

• Right of Access: You have the right to request a copy of the personal data that jitaaci holds about you, along with information about how it is being used and with whom it has been shared. This is sometimes referred to as a Subject Access Request (SAR).
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it without undue delay. For changes to core identity information (name, date of birth), we may request supporting documentary evidence.
• Right to Erasure: In certain circumstances, you have the right to request the deletion of your personal data. This right is subject to limitations — for example, we are legally required to retain transaction and identity records for defined periods even after account closure, and erasure requests cannot override these legal obligations.
• Right to Restrict Processing: You have the right to request that we restrict the processing of your personal data in certain situations — for example, while a dispute about the accuracy of your data is being resolved.
• Right to Data Portability: Where we process your data on the basis of your consent or in order to perform a contract with you, you have the right to receive a copy of your data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to the processing of your personal data where jitaaci relies on legitimate interests as the legal basis for processing. You also have an unconditional right to object to your data being used for direct marketing purposes at any time.
• Right to Withdraw Consent: Where jitaaci processes your data on the basis of your consent (for example, for marketing communications), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that took place before withdrawal.

08 Contact & Complaints

If you have any questions, concerns, or complaints about how jitaaci handles your personal data, or if you wish to exercise any of your privacy rights as described in this policy, please contact our support team using the details below.

Complaints Process

If you are not satisfied with how jitaaci has responded to a privacy concern or rights request, you may escalate your complaint in writing to support@jitaaci with the subject line "Privacy Complaint — Escalation". Our data protection team will review escalated complaints and provide a final written response within 15 business days. We are committed to resolving all privacy complaints fairly and transparently.

Changes to This Privacy Policy

jitaaci reserves the right to update or amend this Privacy Policy at any time. When we make material changes, we will post the updated policy on this page with a revised effective date at the top of the document. If the changes are significant, we may also notify you directly by email to the address registered on your account. Your continued use of jitaaci following the posting of changes constitutes your acceptance of the updated Privacy Policy. We encourage you to review this page periodically to stay informed about how we protect your data.