jat9 Privacy Policy
— Your Data, Protected

Section 1

Data We Collect

When you register for a jat9 account, use our Platform, or contact our support team, we collect a range of personal data. The specific data collected depends on the nature of your interaction with jat9 and the services you use. We group the data we collect into the following categories:

1.1 Identity & Registration Data

When you create a jat9 account, we collect your full legal name, date of birth, gender, residential address (including city — Dhaka, Chittagong, Sylhet, Khulna, or elsewhere in Bangladesh), nationality, and the mobile phone number associated with your account. This information is required to verify your identity in accordance with our Know Your Customer (KYC) obligations and to ensure that only eligible players aged 18 and above access the Platform.

1.2 Identity Verification Documents

To complete KYC verification — which is required before your first withdrawal — jat9 collects copies of government-issued identity documents. Accepted documents include the Bangladesh National Identity Card (NID), a valid Passport, or a Birth Certificate. In some circumstances, we may also request proof of address in the form of a utility bill or bank statement dated within the last three months.

1.3 Financial & Transaction Data

We collect records of all financial transactions conducted through your jat9 account, including deposit amounts, withdrawal requests, payment methods used (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank), transaction reference numbers, and timestamps. We do not store your full mobile banking PIN or full bank account credentials — these are processed directly by the respective payment providers.

1.4 Betting & Gaming Activity Data

jat9 maintains a complete record of your betting and gaming activity on the Platform, including sports bets placed (cricket, football, kabaddi), casino game sessions (slots, live casino, table games), stake amounts, odds accepted, settlement outcomes, bonus usage history, and responsible gaming tool activations (deposit limits, cool-off periods, self-exclusions).

1.5 Technical & Device Data

When you access jat9, our servers automatically collect certain technical information, including your IP address, browser type and version, operating system, device type (mobile, tablet, desktop), screen resolution, session start and end times, pages visited, and referring URL. This data is used for security monitoring, fraud prevention, and Platform performance optimisation.

1.6 Communications Data

If you contact jat9's support team via live chat or email, we retain records of those communications — including the content of your messages, the date and time of contact, and the resolution provided. This data is used for quality assurance, dispute resolution, and ongoing training of our support team.

Section 2

How We Use Your Data

jat9 processes your personal data only for specific, legitimate purposes that are directly related to providing you with a safe, secure, and compliant online betting and casino experience. The table below summarises the primary purposes for which we use your data and the legal basis for each processing activity:

jat9 will never use your personal data for purposes that are incompatible with the purposes listed above without first obtaining your explicit consent. Where we rely on consent as the legal basis for processing, you have the right to withdraw that consent at any time by contacting our support team or updating your communication preferences within your account settings.

Analytics and product improvement processing uses aggregated and anonymised data wherever possible, meaning that individual players cannot be identified from the data used for these purposes. Where individual-level data is used for security or fraud prevention purposes, access is restricted to authorised members of the jat9 risk and compliance team.

Section 3

Data Sharing & Disclosure

jat9 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. However, in order to operate the Platform and fulfil our legal obligations, we share certain personal data with the following categories of trusted third parties:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank receive the transaction data necessary to process your deposits and withdrawals. Each payment provider operates under its own privacy policy and data security framework. jat9 does not transmit your full mobile banking credentials to any third party.
• Identity verification services: Third-party KYC and document verification providers may process copies of your identity documents on jat9's behalf for the purpose of age and identity verification. These providers are contractually bound to process data only as instructed by jat9 and to maintain appropriate security standards.
• Fraud prevention & AML services: jat9 uses specialist fraud detection and anti-money laundering screening services. These providers may cross-reference your account data against watchlists, sanctions databases, and industry fraud registries. Data shared for this purpose is the minimum necessary to perform the screening.
• Game technology providers: Game studios and platform providers (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) may receive anonymised session identifiers and game outcome data necessary to deliver the games you play and to settle game results accurately. These providers do not receive your full identity or financial data.
• Legal and regulatory authorities: Where required by applicable law, court order, or regulatory directive, jat9 may disclose personal data to law enforcement agencies or regulatory bodies. jat9 will always seek to limit the scope of such disclosures to the minimum required by law.
• Professional advisers: jat9's legal counsel, auditors, and compliance consultants may access personal data where necessary to provide professional services. All such advisers are bound by strict confidentiality obligations.

All third parties with whom jat9 shares personal data are required to maintain appropriate technical and organisational security measures. Where jat9 engages a third party to process data on its behalf (a "data processor"), a formal data processing agreement is in place that restricts the processor to acting only on jat9's documented instructions.

Section 4

Cookies & Tracking Technologies

jat9 uses cookies and similar tracking technologies to ensure the Platform functions correctly, to maintain your logged-in session, and to understand how players interact with the site so that we can improve the user experience. This section explains the types of cookies we use and how you can manage your cookie preferences.

Essential cookies cannot be disabled, as they are strictly necessary for the Platform to function and for your account security. Functional and analytics cookies can be managed via your browser settings. Most modern browsers allow you to block or delete cookies through their privacy settings menus. Please note that blocking certain cookies may affect the functionality of the jat9 Platform — for example, your game lobby preferences may not be saved between sessions.

jat9 does not deploy third-party advertising or retargeting cookies. We do not allow social media platforms or advertising networks to place cookies on jat9 pages for their own tracking purposes. Any analytics processing uses aggregated and anonymised data that cannot be used to identify individual players.

Section 5

Data Security

jat9 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security framework covers all stages of data processing, from collection through to storage and eventual deletion.

• Transport Layer Security (TLS): All data in transit between your browser or mobile device and jat9 servers is encrypted using TLS 1.2 or higher. Our SSL certificate is maintained and renewed on a continuous basis.
• Data encryption at rest: Sensitive personal data — including identity documents, financial records, and account credentials — is encrypted at rest using AES-256 encryption on jat9's secure servers.
• Access controls: Internal access to personal data is granted on a strict need-to-know basis. Only authorised employees in the compliance, KYC, fraud, and support teams can access identifiable player data, and all such access is logged and audited.
• Two-factor authentication (2FA): All jat9 staff accounts with access to player data are protected by mandatory two-factor authentication. Players are also strongly encouraged to enable 2FA via SMS OTP on their accounts.
• Penetration testing: jat9 engages independent security professionals to conduct regular penetration testing of the Platform. Identified vulnerabilities are remediated on a priority basis according to severity.
• Incident response: jat9 maintains a documented data breach response plan. In the event of a personal data breach that is likely to result in a risk to player rights, jat9 will notify affected players without undue delay and take immediate steps to contain the breach.

While jat9 takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security. You also play a role in protecting your own data — keep your password strong and unique, do not share your account credentials with anyone, and contact jat9 immediately if you suspect your account has been compromised.

Section 6

Data Retention

jat9 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, to comply with our legal and regulatory obligations, and to resolve any disputes or enforce our agreements. The table below outlines our standard data retention periods by data category:

At the end of each applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to an individual player. Where data must be retained beyond the standard period due to an ongoing legal dispute, regulatory investigation, or court order, jat9 will retain only the specific data relevant to that matter until the matter is resolved.

Players who request account closure should be aware that jat9 is required by its AML and financial compliance obligations to retain certain data — particularly KYC documents and transaction records — for the periods specified above, even after the account has been closed. This retention is mandatory and cannot be waived upon request.

Section 7

Your Privacy Rights

As a jat9 player, you have a number of rights in relation to the personal data we hold about you. jat9 is committed to honouring these rights promptly and transparently. To exercise any of the rights described below, please contact our support team at [email protected] with the subject line "Privacy Rights Request" and provide sufficient information for us to verify your identity before processing your request.

• Right of access: You have the right to request a copy of the personal data jat9 holds about you. We will provide this in a clear, readable format within 30 days of receiving your verified request. We may charge a reasonable administrative fee for manifestly unfounded or excessive requests.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it. Identity and contact data can often be updated directly through your account settings panel. For KYC document updates, please contact our support team.
• Right to erasure: You may request that jat9 delete your personal data in certain circumstances — for example, if the data is no longer necessary for the purpose for which it was collected, or if you withdraw consent where consent was the sole legal basis for processing. Please note that erasure requests cannot override jat9's mandatory AML and financial compliance retention obligations.
• Right to restriction of processing: You have the right to request that jat9 restrict the processing of your personal data in certain situations — for example, while a dispute about the accuracy of the data is being resolved, or while an objection to processing is being considered.
• Right to data portability: Where processing is based on your consent or on contract performance, and is carried out by automated means, you have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format, and to request that we transmit that data to another controller where technically feasible.
• Right to object: You have the right to object to the processing of your personal data where jat9 relies on legitimate interests as the legal basis. jat9 will cease that processing unless it can demonstrate compelling legitimate grounds that override your interests, or the processing is necessary for legal claims.
• Right to withdraw consent: Where jat9 processes your data on the basis of your consent (for example, for marketing communications), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that occurred prior to withdrawal.

jat9 will respond to all privacy rights requests within 30 days of receipt. In complex cases, this period may be extended by a further 60 days, in which case we will inform you of the extension and the reasons for it within the initial 30-day period.

Section 8

Contact & Complaints

If you have any questions, concerns, or complaints about the way jat9 handles your personal data, or if you wish to exercise any of your privacy rights, please contact our dedicated privacy support team using the details below. All privacy-related enquiries are handled by trained staff who are familiar with our data protection obligations.

When submitting a privacy enquiry or rights request, please include your registered jat9 username, the email address associated with your account, a clear description of your request or concern, and any supporting information that may help us process your request efficiently. Providing complete information upfront will help us avoid delays caused by follow-up identity verification.

Response Timeframes

jat9 acknowledges all privacy enquiries within 3 business days (Bangladesh Standard Time, UTC+6). Substantive responses to privacy rights requests are provided within 30 calendar days. For complex requests involving large volumes of data or requiring extensive legal review, the response period may be extended to a maximum of 90 calendar days. We will always inform you if an extension is required.

Updates to This Privacy Policy

jat9 reviews and updates this Privacy Policy periodically to reflect changes in our data processing practices, changes in applicable laws, and feedback from our players. The "Last Updated" date at the top of this page indicates when the most recent revision was made. Where changes are material — meaning they could significantly affect your rights or the way we use your data — jat9 will notify active players via the email address registered to their account at least 14 days before the changes take effect. Continued use of the Platform after the effective date of any update constitutes your acceptance of the revised Privacy Policy.

We encourage all jat9 players to review this Privacy Policy periodically. If you disagree with any changes to this Policy, you have the right to close your account and request deletion of your personal data subject to our mandatory retention obligations described in Section 6.