Privacy Policy
jitabt Data Commitment

This Privacy Policy governs the manner in which jitabt ("jitabt", "we", "us", "our") collects, uses, maintains, and discloses personal information obtained from users ("you", "your", "the player") of the jitabt platform, accessible at https://jitabt.net. By accessing or using jitabt's services — including casino games, sports betting, live dealer tables, payment functions, and any other features offered on the platform — you consent to the data practices described in this policy.

jitabt is committed to maintaining the confidentiality, integrity, and security of all personal information in our custody. We handle your data responsibly and with full respect for your privacy. If you do not agree with the terms of this Privacy Policy, please discontinue use of the jitabt platform immediately.

1.1 Information You Provide Directly

When you register an account with jitabt, complete identity verification, make a deposit or withdrawal, contact our support team, or participate in any promotion, you provide us with personal information directly. This includes:

• Identity data: Full legal name, date of birth, national identity card number, passport number, or other government-issued identification details.
• Contact data: Email address, mobile phone number, and residential address (city, district, and postal code within Bangladesh).
• Financial data: Mobile wallet identifiers (bKash, Nagad, Rocket, Upay account numbers), bank account details (Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank), and transaction history within jitabt.
• Account credentials: Username and encrypted password. We do not store your raw password — only a cryptographic hash.
• Communications data: Messages sent to jitabt via live chat, email, or any in-platform support ticket system.

1.2 Information Collected Automatically

When you interact with the jitabt platform, certain technical data is collected automatically by our systems. This data does not directly identify you but may be combined with other data to do so:

• Device data: IP address, browser type and version, operating system, device identifiers, and screen resolution.
• Usage data: Pages visited, games played, bet history, session duration, clickstream data, and time stamps of all platform interactions (recorded in Bangladesh Standard Time, UTC+6).
• Location data: Approximate geographic location inferred from IP address, used to confirm Bangladesh-based access and apply correct payment routing.
• Cookie and tracking data: Information collected through cookies and similar technologies as described in Section 4 of this policy.

1.3 Information from Third Parties

jitabt may receive personal information about you from third-party sources where this is permitted by applicable law, including:

• Identity verification and Know Your Customer (KYC) service providers.
• Payment processors (bKash, Nagad, Rocket, Upay, and partner banks) to confirm transaction status and account ownership.
• Anti-fraud and anti-money-laundering (AML) compliance partners.
• Analytics providers who help us understand aggregate usage patterns across the platform.

jitabt processes personal data for specific, legitimate purposes. We do not use your data for any purpose beyond what is described here without obtaining your explicit consent. The primary purposes for which we use your personal information are:

2.1 Marketing Communications

jitabt will only send you promotional communications — including offers, bonus notifications, and seasonal promotions related to Eid, Pohela Boishakh, BPL cricket season, and Victory Day — if you have affirmatively opted in to receive such communications at the time of registration or through your account settings. You may withdraw this consent at any time by updating your communication preferences in your account settings or by contacting [email protected].

2.2 Automated Decision-Making

Certain platform functions, including fraud detection, bonus abuse prevention, and responsible gaming intervention alerts, involve automated processing of your data. Where an automated decision has a significant impact on your account (for example, a temporary withdrawal hold triggered by an automated AML alert), you have the right to request human review of that decision by contacting our support team.

3.1 Service Providers

jitabt works with a carefully selected group of third-party service providers who process personal data on our behalf and under our instruction. These providers are contractually required to handle your data with the same level of care and confidentiality that jitabt itself applies. Categories of service providers include:

• Payment processors: bKash, Nagad, Rocket, Upay, and partner banking institutions require identity and financial data to process transactions.
• KYC and identity verification providers: Specialist firms that verify identity documents and confirm age eligibility.
• Game software providers: Studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive limited session data to operate their games on the jitabt platform.
• IT infrastructure and cloud hosting providers: Servers and data storage facilities used to host the jitabt platform securely.
• Analytics providers: Aggregate, anonymised usage analytics to help jitabt improve platform performance and user experience.

3.2 Legal Disclosure

jitabt may disclose personal information where required to do so by law, regulation, or court order, or where such disclosure is necessary to protect the rights, property, or safety of jitabt, our players, or the public. This includes sharing data with law enforcement agencies in connection with investigations into financial crime, fraud, or illegal activity conducted through the platform.

3.3 Business Transfers

In the event of a merger, acquisition, asset sale, or other business restructuring involving jitabt, personal data held by jitabt may be transferred to the acquiring entity. In such circumstances, we will notify affected players by email or in-platform notification prior to any transfer of their personal data, and will ensure that the receiving entity is bound by privacy obligations at least as protective as those set out in this policy.

4.1 What Are Cookies?

Cookies are small text files placed on your device by a website when you visit it. They are widely used to make websites function efficiently and to provide analytical information to site operators. jitabt uses cookies and similar technologies (including local storage and session storage) to operate the platform, maintain your session, remember your preferences, and gather anonymised usage analytics.

4.2 Types of Cookies We Use

4.3 Managing Cookies

Most web browsers allow you to manage cookie settings through their privacy or settings menu. You may choose to block or delete cookies at any time; however, disabling essential cookies will prevent the jitabt platform from functioning correctly and may result in your inability to log in or complete transactions. For full instructions on managing cookies in your browser, refer to your browser's official support documentation.

5.1 Security Measures

jitabt employs industry-standard technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. These measures include:

• SSL/TLS encryption: All data transmitted between your device and jitabt's servers is encrypted using TLS 1.2 or higher. The padlock icon visible in your browser confirms this encryption is active.
• Password hashing: Account passwords are stored exclusively as one-way cryptographic hashes. jitabt staff cannot view your plain-text password under any circumstances.
• Access controls: Personal data is accessible only to jitabt personnel and authorised service providers with a legitimate need to access it. Access is role-based and logged.
• Two-factor authentication (2FA): Players are strongly encouraged to enable 2FA on their jitabt accounts. Internal staff accounts with access to player data are required to use 2FA.
• Regular security audits: jitabt conducts periodic security assessments of its platform infrastructure to identify and remediate vulnerabilities.
• Intrusion detection: Real-time monitoring systems are in place to detect and respond to suspicious access patterns.

5.2 Data Breach Response

In the event of a personal data breach that poses a risk to your rights and freedoms, jitabt will notify affected players without undue delay and will take immediate steps to contain the breach, assess its scope, and implement remediation measures. Notifications will be sent to the email address associated with your account and will include a description of the nature of the breach, the types of data affected, and the steps you can take to protect yourself.

5.3 Data Retention

jitabt retains personal data only for as long as is necessary for the purposes outlined in this Privacy Policy or as required by applicable law. General retention guidelines are as follows:

• Active account data: Retained for the duration of your account's active status plus a minimum of five years following account closure, in compliance with anti-money laundering record-keeping obligations.
• Transaction records: Retained for a minimum of five years from the date of each transaction.
• Support communications: Retained for up to three years from the date of last communication.
• Marketing consent records: Retained until consent is withdrawn and for one year thereafter as evidence of the consent interaction.
• Anonymised analytics data: May be retained indefinitely as it cannot be linked to any individual player.

As a user of the jitabt platform, you hold the following rights in relation to your personal data. To exercise any of these rights, contact our Data Protection team at [email protected] with the subject line "Privacy Rights Request". We will respond within 30 calendar days.

6.1 Right of Access

You have the right to request a copy of the personal data jitabt holds about you. Upon a verified request, we will provide a structured summary of your data in a commonly used, machine-readable format.

6.2 Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it. Minor corrections (such as a misspelled name) can often be handled directly through your account settings or by contacting live chat support.

6.3 Right to Erasure

You may request that jitabt delete your personal data where there is no legitimate reason for us to continue processing it. Please note that we may be unable to fulfil erasure requests where we are required to retain data by law (for example, transaction records subject to AML retention obligations). We will clearly explain any limitation on erasure in our response to your request.

6.4 Right to Restrict Processing

You may request that jitabt restrict the processing of your personal data in certain circumstances — for example, while you contest the accuracy of data we hold, or while an objection to processing is pending resolution.

6.5 Right to Data Portability

Where jitabt processes your data on the basis of your consent or contractual necessity, you have the right to receive your data in a structured, commonly used, machine-readable format and to request that we transmit it directly to another controller where technically feasible.

6.6 Right to Object

You have the right to object to jitabt processing your personal data where such processing is based on our legitimate interests. Where you object to processing for direct marketing purposes, we will cease that processing immediately without requiring justification.

6.7 Right to Withdraw Consent

Where jitabt processes your data on the basis of your consent (for example, marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

jitabt is strictly an adult platform. Access to all services is prohibited for individuals under the age of 18. We take our obligations regarding the protection of minors extremely seriously and implement the following safeguards:

• Age is verified at the point of registration. Players must confirm they are 18 or older before creating an account.
• Identity documentation (national ID, passport, or birth certificate) may be requested at any time to confirm age eligibility.
• Any account found to belong to a person under the age of 18 is immediately suspended. All funds held in such an account are withheld and may be returned to the funding source after investigation.
• jitabt does not knowingly collect personal data from individuals under the age of 18. If you believe a minor has registered on the platform, please contact us immediately at [email protected].

Parents and guardians are encouraged to use parental control software to restrict minors' access to online gambling platforms. jitabt strongly supports all responsible gaming measures that prevent underage gambling.

8.1 Changes to This Privacy Policy

jitabt reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. When material changes are made, registered players will be notified via the email address associated with their account or through a prominent in-platform notification. The "Last Updated" date at the top of this document will be revised accordingly.

We encourage you to review this Privacy Policy periodically. Your continued use of the jitabt platform following notification of changes constitutes your acceptance of the revised policy.

8.2 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way jitabt handles your personal data, please contact our Data Protection team through the following channels:

• Email: [email protected] — subject line "Privacy Policy Enquiry"
• Live Chat: Available 24 hours a day, 7 days a week via the jitabt platform
• Response time: Under 2 minutes for live chat; under 4 hours for email enquiries

jitabt serves players across Bangladesh — including Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar — and all communications with our support team are conducted in English.