Privacy Policy
jitaac — Your Data, Protected

1 Introduction & Scope

This Privacy Policy ("Policy") describes how jitaac ("jitaac", "we", "us", "our") collects, uses, stores, shares, and protects personal information relating to individuals ("you", "Player", "User") who access or use the jitaac platform at https://jitaac.club and all associated services, products, and features offered therein.

This Policy applies to all personal data collected through: (a) account registration and use of the platform; (b) deposit and withdrawal transactions; (c) participation in games, sports betting, and promotional activities; (d) communications with our customer support team; and (e) use of our website, including any cookies or tracking technologies deployed on it.

This Policy should be read alongside our Terms & Conditions and any game-specific or promotion-specific terms that apply to your use of jitaac. In the event of any conflict between this Policy and another document on matters of personal data, this Policy shall prevail unless a more specific provision expressly overrides it.

jitaac is committed to handling your personal data responsibly, transparently, and in a manner consistent with widely recognised data protection principles. We aim to collect only what is necessary, to use it only for the purposes stated, and to keep it secure throughout its lifecycle on our systems.

2 Data Controller

For the purposes of this Privacy Policy, jitaac acts as the data controller in respect of personal information collected from players accessing the platform at https://jitaac.club. As data controller, jitaac determines the purposes for which and the means by which personal data is processed.

All data-related enquiries, access requests, correction requests, deletion requests, and complaints should be directed to our support team using the contact details set out in Section 14 of this Policy. We will acknowledge all formal data requests within 48 hours of receipt and aim to resolve them within 14 business days.

3 Information We Collect

3.1 Information You Provide Directly

When you register an account, make a transaction, contact support, or participate in a promotion on jitaac, you may provide us with the following categories of personal information:

• Identity Data: Full legal name, date of birth, gender, and national identity card (NID) or passport number provided during verification.
• Contact Data: Email address and mobile phone number registered in Bangladesh.
• Financial Data: Mobile banking account identifiers (e.g., bKash, Nagad, Rocket, Upay numbers), bank account details submitted for withdrawal processing, and transaction history on the platform.
• Verification Documents: Copies of identity documents, proof of address, or other materials submitted in response to a Know Your Customer (KYC) request.
• Communications Data: Records of messages, emails, and live chat conversations exchanged with our support team.
• Preferences Data: Responsible gaming settings, notification preferences, and account configuration choices you make within your dashboard.

3.2 Information Collected Automatically

When you visit jitaac, our systems automatically collect certain technical information about your device and usage behaviour. This includes:

• Device & Technical Data: IP address, browser type and version, operating system, device identifiers, screen resolution, and time zone settings.
• Usage Data: Pages visited, game sessions initiated, betting activity, session duration, click-path data, and referring URLs.
• Cookie Data: Information stored via cookies and similar tracking technologies as described in Section 7 of this Policy.

3.3 Information from Third Parties

In limited circumstances, jitaac may receive personal data about you from third-party sources, including payment processing partners (for transaction verification), identity verification service providers (for KYC compliance), and fraud-prevention databases (where a security review is triggered). Data obtained from third parties is handled under the same standards as data you provide directly.

4 How We Use Your Information

jitaac uses the personal data collected for the following purposes. Each purpose is supported by a legal basis as described in Section 5.

• Account Management: To create, maintain, and administer your jitaac account, including processing login authentication and managing account security settings.
• Transaction Processing: To process deposits and withdrawals in BDT via bKash, Nagad, Rocket, Upay, and supported local banks, and to maintain accurate financial records for your account.
• Identity Verification: To verify your age, identity, and eligibility to use jitaac in compliance with our Know Your Customer (KYC) obligations and to prevent underage gambling.
• Platform Operations: To deliver, maintain, and improve the games, sports betting markets, and other services offered on jitaac, including resolving technical issues and optimising performance.
• Fraud Prevention & Security: To monitor account activity for signs of fraud, money laundering, unauthorised access, or policy violations, and to take appropriate protective action where such activity is detected.
• Responsible Gaming: To administer player self-management tools including deposit limits, cooling-off periods, and self-exclusion requests, and to monitor for indicators of problem gambling behaviour.
• Customer Support: To respond to your enquiries, complaints, and data requests in a timely and accurate manner.
• Marketing & Promotions: Where you have provided consent, to send you personalised promotional offers, bonus notifications, and platform news. You may withdraw this consent at any time from your account dashboard or by contacting support.
• Legal Compliance: To comply with applicable legal obligations, respond to lawful requests from regulatory or law enforcement authorities, and maintain records as required by applicable law.

5 Legal Basis for Processing

jitaac processes your personal data on one or more of the following legal bases, depending on the specific purpose for which data is used:

• Contractual Necessity: Processing is required to perform the contract between you and jitaac — including delivering games, processing payments, and administering your account.
• Legal Obligation: Processing is required to comply with applicable legal requirements, including KYC and anti-money laundering obligations.
• Legitimate Interests: Processing is necessary for jitaac's legitimate business interests, including fraud prevention, platform security, and improving our services, provided those interests are not overridden by your data protection rights.
• Consent: Where processing is not otherwise justified, we will seek your explicit consent — most commonly in the context of direct marketing communications. You may withdraw consent at any time without penalty.

6 Sharing Your Information

6.1 Who We Share Data With

jitaac does not sell or rent your personal data to third parties. We share personal information only in the limited circumstances described below, and only to the extent necessary for the stated purpose:

• Payment Processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, and Sonali Bank receive the minimum data required to process your financial transactions.
• Game Providers: Certified game studios including Pragmatic Play, Evolution Gaming, Spribe, Ezugi, NetEnt, and Microgaming may receive non-identifiable session data necessary to deliver game content and report outcomes.
• Identity Verification Services: Third-party KYC providers receive identity document data when enhanced verification is required.
• Fraud Prevention Services: Where fraud or financial crime is suspected, relevant account and transaction data may be shared with specialist fraud detection and prevention partners.
• Legal & Regulatory Authorities: We will disclose personal data to law enforcement, regulators, or government authorities where required by a valid legal obligation, court order, or official request.

6.2 International Data Transfers

Some of jitaac's service providers and game studio partners operate outside Bangladesh. Where personal data is transferred internationally, jitaac ensures that appropriate data protection safeguards are in place, including contractual protections equivalent to those applicable in the player's home jurisdiction. We do not transfer personal data to recipients who cannot demonstrate an adequate level of data protection.

7 Cookies & Tracking Technologies

7.1 What Are Cookies

Cookies are small text files placed on your device by a website when you visit it. jitaac uses cookies and similar technologies such as web beacons and local storage to enable core platform functionality, maintain your session, and gather anonymous usage statistics that help us improve the platform experience.

7.2 Types of Cookies We Use

• Strictly Necessary Cookies: Required for the platform to function. These include session authentication cookies that keep you logged in and security cookies that protect against cross-site request forgery. These cannot be disabled without disrupting platform functionality.
• Functional Cookies: Store your preferences such as language settings, responsible gaming configurations, and display preferences so that they persist across sessions.
• Analytics Cookies: Collect anonymised data about how visitors interact with jitaac — pages visited, time on page, error events — to help us identify performance issues and improve the user experience. No personally identifiable information is included in analytics data.
• Marketing Cookies: Used only where you have provided consent to receive personalised promotional content. These allow us to tailor bonus offers and promotions to your demonstrated interests on the platform.

7.3 Managing Cookies

You can manage your cookie preferences through your browser settings. Most modern browsers allow you to block or delete cookies. Please note that disabling strictly necessary cookies will impair the functionality of jitaac, including your ability to log in and play games. Disabling other categories of cookies will not affect your ability to use the platform's core features.

8 Data Security

jitaac takes the security of your personal data seriously and maintains a range of technical and organisational measures designed to protect it against unauthorised access, disclosure, alteration, or destruction.

• Encryption: All data in transit between your device and our servers is encrypted using 256-bit SSL/TLS technology. Sensitive data at rest, including financial records and identity documents, is stored using strong encryption standards.
• Access Controls: Access to personal data within jitaac is restricted on a strict need-to-know basis. Staff members who require access to personal data for their job function are subject to confidentiality obligations and regular security training.
• Infrastructure Security: Our platform infrastructure is subject to regular vulnerability assessments and penetration testing. Security patches are applied promptly upon release.
• Incident Response: In the event of a confirmed data breach that poses a risk to your personal data, jitaac will notify affected players and take immediate remediation steps in accordance with our incident response procedures.

9 Data Retention

jitaac retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal or regulatory obligations. The following general retention periods apply:

• Account Data: Retained for the duration of your account relationship with jitaac, and for a period of five (5) years following account closure to satisfy record-keeping obligations.
• Transaction Records: Financial transaction records are retained for a minimum of five (5) years from the date of the transaction in accordance with anti-money laundering record-keeping requirements.
• Identity Verification Documents: KYC documents are retained for five (5) years from the date of verification or account closure, whichever is later.
• Support Communications: Records of support interactions are retained for three (3) years from the date of the interaction.
• Marketing Data: Where you have provided consent to receive marketing communications, associated data is retained until you withdraw consent or for three (3) years of inactivity, whichever comes first.

Upon expiry of the applicable retention period, personal data is securely and irreversibly deleted or anonymised so that it can no longer be attributed to an identifiable individual.

10 Your Rights

Subject to applicable law, you have the following rights in respect of your personal data held by jitaac. To exercise any of these rights, please contact our support team as described in Section 14.

• Right of Access: You may request a copy of the personal data we hold about you, together with information about how it is being used.
• Right to Rectification: You may request that inaccurate or incomplete personal data be corrected or updated. Many basic details can be updated directly from your account dashboard.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where processing was unlawful. This right is subject to any overriding legal retention obligations.
• Right to Restriction: You may request that we restrict the processing of your personal data in certain circumstances, such as where you contest its accuracy or have objected to its processing.
• Right to Data Portability: Where processing is based on consent or contractual necessity and is carried out by automated means, you may request that we provide your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You may object to processing based on legitimate interests, including direct marketing. Where you object to direct marketing, we will cease processing your data for that purpose immediately.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that occurred prior to withdrawal.

jitaac will respond to all verified data rights requests within 14 business days. We may request additional information to verify your identity before fulfilling a request, to ensure that personal data is not disclosed to an unauthorised party.

11 Third-Party Services

jitaac's platform integrates with third-party game providers and payment partners to deliver its full range of services. While we take care to partner only with reputable, security-conscious organisations, jitaac does not control the privacy practices of third-party services and is not responsible for their data handling beyond the contractual protections we put in place.

Game content on jitaac is supplied by certified studios including Pragmatic Play, Evolution Gaming, Spribe, Ezugi, NetEnt, and Microgaming. These studios may collect anonymised gameplay data through their own systems in order to operate their certified RNG engines and audit game outcomes. Such data is governed by the respective studio's own privacy practices.

This Privacy Policy does not apply to any third-party websites or services that may be referenced in the context of jitaac's operations. jitaac does not link to external websites and is not responsible for the privacy practices of any organisation outside the jitaac platform.

12 Children's Privacy

jitaac is strictly an 18+ platform. We do not knowingly collect personal data from individuals under the age of 18. If we become aware that personal data has been collected from a minor, we will take immediate steps to delete that data and close the associated account. All balances in accounts identified as belonging to a minor will be handled in accordance with our Terms & Conditions.

Parents and guardians who believe that a minor in their care may have registered on jitaac are encouraged to contact our support team immediately at [email protected] so that we can investigate and take appropriate action without delay.

13 Changes to This Policy

jitaac reserves the right to update or amend this Privacy Policy at any time. When material changes are made, we will post a notice on the jitaac platform and, where practicable, notify registered players by email at their registered address. The revised Policy will take effect from the date specified in the notice.

We encourage you to review this Privacy Policy periodically so that you remain informed about how your personal data is being handled. Your continued use of jitaac following the effective date of any amendment constitutes your acknowledgement of the revised Policy. If you have concerns about any change, please contact our support team before continuing to use the platform.

14 Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the personal data jitaac holds about you, please reach out through any of the following channels:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 directly from your jitaac account dashboard
• Support Hours: 24 hours per day, 7 days per week, including all Bangladesh public holidays (Bangladesh Standard Time, UTC+6)

When submitting a data rights request, please include your registered account username, a clear description of your request, and any relevant reference information. This will allow us to locate your records and process your request efficiently. We aim to acknowledge all privacy-related enquiries within 48 hours and to provide a full response within 14 business days.