Privacy Policy — How jetbahis Protects Your Data

This Privacy Policy ("Policy") describes how jetbahis ("the Platform", "we", "us", "our") collects, processes, stores, and protects personal data relating to individuals ("Players", "Users", "you") who register an account, access the platform, or otherwise interact with the services provided by jetbahis. This Policy forms part of the overall Terms & Conditions governing use of the platform and should be read in conjunction with them.

By registering an account on jetbahis, you acknowledge that you have read this Policy, understand how your personal data will be processed, and consent to such processing as described herein. If you do not agree with any part of this Policy, you should not create an account or use the platform's services.

jetbahis reserves the right to update this Policy at any time. Material changes will be communicated to registered players via the email address on file at least 7 days before taking effect. The version currently published on this page is the version in force. We encourage you to review this page periodically to stay informed of any updates.

Data We Collect

jetbahis collects personal data through multiple touchpoints across the player lifecycle — from initial registration through to account closure. The categories of data we collect, and the circumstances under which each category is collected, are described in the table below.

1.1 Data We Do Not Collect

jetbahis does not collect or process the following categories of data:

• Sensitive personal data such as racial or ethnic origin, religious beliefs, political opinions, trade union membership, or biometric data (beyond a photograph submitted for identity verification purposes).
• Data relating to children under the age of 18. If we discover that data has been submitted by a person under 18, that data is deleted immediately and the associated account is permanently closed.
• Full, unmasked payment card numbers. Card transactions are processed via tokenised payment gateways; jetbahis only retains the card type and last four digits for display purposes.

How We Use Your Data

jetbahis processes personal data only for clearly defined and legitimate purposes. We do not use your data for any purpose that is incompatible with the purposes described below. The legal basis for each processing activity is noted alongside the purpose.

2.1 Account Operation & Service Delivery

The primary purpose for collecting personal data is to operate your player account and deliver the services you have requested. This includes processing deposits and withdrawals via bKash, Nagad, Rocket, Upay, and other supported payment methods, settling bets, crediting bonuses, and providing access to cricket betting, live casino, slots, and arcade games.

• Processing and verifying deposits and withdrawal requests.
• Maintaining your account balance, bet history, and transaction ledger.
• Delivering promotional bonuses, cashback rewards, and loyalty incentives you have opted into.
• Providing customer support and resolving disputes.

2.2 Identity Verification & Fraud Prevention

jetbahis is required to verify the identity and age of all players before processing withdrawals. We use identity data to conduct Know Your Customer (KYC) checks, to detect and prevent fraud, money laundering, and duplicate account creation, and to ensure that the platform is not used by persons under 18 years of age.

2.3 Responsible Gaming Compliance

We process gaming activity data and responsible gaming preference data to monitor player behaviour for signs of problem gambling. This enables our responsible gaming team to proactively reach out to players who may be at risk, enforce self-exclusion elections, and apply deposit or session time limits in accordance with player preferences. For more information, visit our Responsible Gaming page.

2.4 Platform Improvement & Analytics

Aggregated and anonymised behavioural data is used to understand how players interact with the jetbahis platform — which game categories are most popular, how navigation flows are used, and where friction points exist. This data is used solely to improve the user experience and does not allow us to identify individual players.

2.5 Marketing Communications

With your explicit consent, we may send you promotional emails, SMS messages, or in-platform notifications about bonuses, seasonal promotions (such as BPL and T20 World Cup betting offers, Eid and Pohela Boishakh special promotions), and new features. You may withdraw consent at any time by updating your notification preferences in your account settings or by contacting support. Withdrawal of marketing consent does not affect the lawfulness of processing carried out before the withdrawal.

Cookies & Tracking Technologies

jetbahis uses cookies and similar tracking technologies (such as local storage objects and session tokens) to operate the platform, remember your preferences, maintain your authenticated session, and gather first-party analytics data. This section explains what cookies we use and how you can manage them.

3.1 Types of Cookies Used

3.2 Managing Cookies

You can manage or delete cookies through your browser settings. Most modern browsers allow you to block third-party cookies, clear all cookies on exit, or prompt you before accepting new cookies. Please note that disabling strictly necessary cookies will prevent you from logging in to your jetbahis account. For guidance on managing cookies in your specific browser, refer to your browser's help documentation.

Data Sharing & Third Parties

jetbahis does not sell, rent, or trade your personal data to any third party. We share data only in the limited circumstances described below, and only to the extent necessary for the specific purpose identified. All third-party recipients are required to handle your data in a manner consistent with this Privacy Policy and applicable data protection standards.

4.1 Payment Processors

To process deposits and withdrawals, we share the minimum necessary financial data with licensed payment processors integrated into the jetbahis platform. For Bangladesh players, this includes the operators of bKash, Nagad, Rocket, and Upay mobile wallets, as well as partner banks (Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank) and international card networks (Visa, Mastercard). Each of these processors operates under their own regulatory obligations and security standards.

4.2 Identity Verification Services

When you submit KYC documentation, we may use a third-party identity verification service to authenticate the document's validity. These services receive only the data elements required for verification (name, date of birth, document number, and photograph) and are contractually prohibited from using this data for any other purpose.

4.3 Game Providers

Certain game categories — including live casino tables powered by Evolution Gaming, Pragmatic Play Live, and Ezugi — are delivered via software integrations with third-party game studios. Your account identifier (an anonymised player token, not your full personal details) is passed to the game provider to enable the session. Full personal data is not transmitted to game studios.

4.4 Legal & Regulatory Disclosures

jetbahis may disclose personal data to law enforcement agencies, regulatory bodies, or other competent authorities where we are legally required to do so, or where disclosure is necessary to prevent or investigate fraud, money laundering, or other criminal activity. We will not disclose more data than is required by the specific legal obligation.

4.5 Business Transfers

In the event of a merger, acquisition, or sale of all or part of the jetbahis business, player data may be transferred to the acquiring entity as part of the transaction. In such circumstances, registered players will be notified by email in advance and provided with the opportunity to request deletion of their data if they do not wish it to be transferred to the new operator.

Data Retention

jetbahis retains personal data only for as long as it is necessary to fulfil the purpose for which it was collected, or as required by applicable legal or regulatory obligations. The retention schedule below provides guidance on how long each category of data is retained after the event that triggers the retention period.

Upon expiry of the applicable retention period, personal data is either securely and permanently deleted from all production and backup systems, or fully anonymised such that it can no longer be linked to any identifiable individual. Anonymised data may be used indefinitely for statistical and research purposes without further notice.

Security Measures

jetbahis implements a layered, defence-in-depth security architecture to protect personal data against unauthorised access, disclosure, alteration, and destruction. The technical and organisational measures described in this section are reviewed and updated regularly in line with evolving security standards.

6.1 Technical Security Controls

• Transport Encryption: All data transmitted between your device and the jetbahis platform is encrypted using TLS 1.2 or higher. Older, insecure protocols (SSL 3.0, TLS 1.0, TLS 1.1) are disabled across all platform endpoints.
• Data at Rest Encryption: Sensitive data stored in our databases — including identity documents, payment references, and account credentials — is encrypted using AES-256. Encryption keys are managed via a dedicated key management service and rotated on a regular schedule.
• Password Hashing: Player passwords are never stored in plain text. They are hashed using a modern, computationally expensive algorithm (bcrypt with a minimum work factor of 12) with per-account salts to prevent rainbow table attacks.
• Two-Factor Authentication (2FA): Players are strongly encouraged to enable two-factor authentication on their account. 2FA adds a second layer of verification — a time-based one-time password (TOTP) — to the login process, significantly reducing the risk of unauthorised account access even if login credentials are compromised.
• Web Application Firewall (WAF): The jetbahis platform is protected by a web application firewall that filters and monitors HTTP traffic, blocking common attack vectors including SQL injection, cross-site scripting (XSS), and brute-force login attempts.
• Intrusion Detection: Automated intrusion detection systems continuously monitor platform infrastructure for anomalous activity patterns and trigger alerts to the security team for investigation.

6.2 Organisational Security Measures

• Access to player data is restricted to authorised personnel on a strict need-to-know basis, enforced via role-based access control (RBAC).
• All staff with access to personal data complete data protection training and are bound by confidentiality obligations.
• Internal access to production data environments is logged; logs are retained for 12 months and reviewed in the event of a security incident.
• Regular security assessments, including vulnerability scanning and penetration testing, are conducted by qualified security professionals.

6.3 Data Breach Response

In the event of a personal data breach that poses a risk to the rights and freedoms of affected players, jetbahis will notify affected players without undue delay — and no later than 72 hours after becoming aware of the breach — via the email address registered to their account. The notification will describe the nature of the breach, the categories of data affected, the likely consequences, and the steps being taken to address the breach and mitigate its effects.

Your Privacy Rights

As a player on the jetbahis platform, you hold a number of rights in relation to your personal data. These rights are described below. To exercise any of these rights, please contact our Data Protection Officer at support@jetbahis with the subject line "Privacy Rights Request" and a description of the right you wish to exercise. We will respond to all valid requests within 30 days of receipt.

jetbahis will not charge a fee for handling privacy rights requests in ordinary circumstances. If a request is manifestly unfounded or excessive — for example, repetitive requests for the same data — we reserve the right to charge a reasonable administrative fee or decline to act on the request, with written explanation.

Contact & Data Protection Officer

jetbahis has appointed a Data Protection Officer (DPO) who is responsible for overseeing compliance with this Privacy Policy and handling all data protection enquiries. If you have any questions about how your personal data is processed, wish to exercise any of your privacy rights, or want to raise a concern about our data handling practices, please contact our DPO using the details below.

8.1 How to Contact Us

All privacy-related enquiries should be directed to our support team, who will escalate to the DPO where appropriate. Please use the subject line "Privacy Enquiry" or "Data Rights Request" to ensure your message is routed correctly and prioritised.

8.2 Complaints

If you are not satisfied with our response to a privacy enquiry or data rights request, you have the right to escalate your complaint. We encourage you to contact us first so that we can attempt to resolve the matter directly. We take all privacy complaints seriously and will work diligently to reach a satisfactory resolution.

Players who feel that their data protection rights have been violated may also seek independent redress through appropriate consumer protection channels available in Bangladesh. jetbahis is committed to cooperating fully with any legitimate investigation into its data handling practices.

8.3 Changes to This Privacy Policy

jetbahis reviews this Privacy Policy at least once every 12 months and updates it whenever our data processing practices change in a material way. When we make material changes, we will:

• Post the updated version on this page with a revised "Last Updated" date.
• Send an email notification to all registered players at least 7 days before the changes take effect.
• Display a prominent notice on the platform for at least 14 days following the update.

Your continued use of the jetbahis platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with the updated Policy, you should close your account before the effective date of the changes.

Last updated: 1 January 2026. This document is effective as of the date stated and replaces all prior versions of the jetbahis Privacy Policy.