Privacy Policy — How jtbdt Protects Your Personal Data

1. Information We Collect

When you register, use, or interact with the jtbdt platform, we collect personal data that is necessary to deliver the services you have requested, to comply with our legal and regulatory obligations, and to maintain the integrity and security of the platform. The categories of personal data we collect are described below.

Registration and Identity Data: When you open a jtbdt account, you provide us with your full legal name, date of birth, mobile phone number, email address, and residential address. This information is collected to verify your identity, confirm that you meet the minimum age requirement of 18 years, and fulfil Know Your Customer (KYC) obligations.

Identity Verification Documents: Before processing your first withdrawal, jtbdt requires you to submit copies of identity documents such as a National Identity Card (NID), passport, or driving licence, together with a recent utility bill or bank statement confirming your residential address. These documents are used solely for KYC and anti-money laundering (AML) compliance purposes.

Financial and Transaction Data: jtbdt records all deposits, withdrawals, bonuses, and wagers associated with your account. For mobile banking transactions via bKash, Nagad, or Rocket, we record the transaction reference number and the registered mobile number associated with your wallet. For card payments, we record only the card type, last four digits, and expiry date — full card numbers are never stored on jtbdt servers.

Device and Technical Data: When you access jtbdt via a browser, our servers automatically collect your IP address, browser type and version, operating system, device type, screen resolution, referring URL, and the pages you visit. This data is used for security monitoring, fraud detection, and platform optimisation.

Behavioural and Gaming Data: We record your gaming activity on jtbdt, including the games played, bet amounts, session durations, and win/loss history. This data supports responsible gaming monitoring, bonus eligibility checks, and personalised game recommendations.

2. How We Use Your Data

jtbdt processes your personal data only where we have a lawful basis to do so. The lawful bases we rely upon are: (a) the performance of a contract with you — i.e., the operation of your jtbdt account and delivery of the services you have requested; (b) compliance with a legal obligation; (c) our legitimate interests in operating a secure and commercially viable gaming platform; and (d) your explicit consent, where we have specifically sought and obtained it.

The specific purposes for which jtbdt uses your personal data include:

• Account Management: Creating, maintaining, and administering your jtbdt player account, including processing deposits and withdrawals, applying bonuses, and recording your gaming history.
• Identity Verification and KYC: Verifying your identity and age in accordance with our obligations to prevent underage gambling and comply with anti-money laundering regulations. This includes cross-referencing the documents you submit against the details provided at registration.
• Payment Processing: Facilitating deposits and withdrawals via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, and Mastercard. We share only the minimum data required with each payment provider to execute the specific transaction.
• Security and Fraud Prevention: Monitoring account activity for signs of unauthorised access, multi-accounting, bonus abuse, money laundering, or any other fraudulent or harmful behaviour. Where suspicious activity is detected, jtbdt may suspend the account pending investigation.
• Responsible Gaming: Analysing gaming behaviour data to identify players who may be exhibiting signs of problem gambling, enabling our responsible gaming team to offer timely intervention, support tools, and, where appropriate, proactive outreach.
• Customer Support: Using your contact details and account history to assist you when you reach out to our support team, and to resolve any disputes or complaints you may raise.
• Legal and Regulatory Compliance: Retaining records and disclosing data to competent authorities where required by applicable law, including in response to lawful requests from law enforcement or regulatory bodies.
• Service Improvement and Analytics: Using aggregated, anonymised technical and behavioural data to understand how players use the jtbdt platform, identify areas for improvement, and optimise the overall user experience.
• Marketing Communications: Sending you promotional offers, bonus notifications, and tournament updates via email or SMS, but only where you have given your explicit consent to receive such communications. You may withdraw this consent at any time by contacting our support team or following the unsubscribe link in any marketing message.

3. Data Sharing & Third Parties

jtbdt does not sell, rent, or trade your personal data to any third party for their own commercial or marketing purposes. We share personal data only in the limited, specific circumstances described in this section.

Payment Service Providers: To process deposits and withdrawals, jtbdt shares the minimum necessary transaction data with payment processors including bKash, Nagad, Rocket, Upay, Visa, and Mastercard. These providers operate under their own privacy policies and are independently responsible for the security of data processed on their own platforms.

Game Software Providers: The games available on jtbdt are operated by third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. When you play a game hosted by one of these studios, your player identifier, session token, and bet data are transmitted to the relevant provider's servers to facilitate game play. These studios are contractually required to process this data only for the purpose of delivering the game service and to maintain industry-standard data security practices.

Identity Verification and KYC Partners: jtbdt may use specialist third-party identity verification providers to assist with document checking and age verification. These providers process your identity documents under strict contractual data processing agreements and are not permitted to use your data for any purpose beyond the specific verification task.

Fraud Prevention and Security Services: jtbdt shares device fingerprint, IP address, and transaction pattern data with fraud detection service providers to identify and prevent financial crime on the platform. This sharing is conducted under our legitimate interest in protecting the platform and its users.

Legal and Regulatory Authorities: jtbdt will disclose personal data to law enforcement agencies, regulatory bodies, or courts where it is required to do so by applicable law, or where such disclosure is necessary to protect the rights, property, or safety of jtbdt, its players, or the public.

Business Transfers: In the event that jtbdt undergoes a merger, acquisition, or sale of all or part of its business assets, your personal data may be transferred to the acquiring entity as part of that transaction. We will provide notice of any such transfer and any resulting change to this Privacy Policy.

4. Cookies & Tracking Technologies

jtbdt uses cookies and similar tracking technologies on its website to ensure the platform functions correctly, to maintain the security of your session, and to understand how players navigate and interact with the site. This section explains what cookies we use and how you can manage your cookie preferences.

What Are Cookies? Cookies are small text files placed on your device by a website you visit. They allow the website to recognise your device on subsequent visits and to remember certain information about your preferences or session state. Cookies cannot execute code or deliver viruses and do not give jtbdt access to any other data stored on your device.

jtbdt uses the following categories of cookies:

• Strictly Necessary Cookies: These cookies are essential for the jtbdt platform to function and cannot be disabled. They include session authentication tokens that keep you logged in during a gaming session, anti-CSRF tokens that protect your account from cross-site request forgery attacks, and load balancing cookies that ensure your requests are directed to the correct server. No personal data beyond a session identifier is stored in strictly necessary cookies.
• Functional Cookies: These cookies remember your stated preferences, such as your preferred language, display settings, and whether you have acknowledged certain platform notifications. They enhance your experience but are not essential to the core service. You may disable them, but doing so may affect certain platform features.
• Analytical Cookies: jtbdt uses privacy-respecting analytics tools to collect aggregated, anonymised data about how visitors use the platform — for example, which pages are most visited, how long sessions last, and where users encounter errors. This data is used solely to improve the platform and is never linked back to individual player profiles.
• Security Cookies: These cookies support our fraud detection systems by recording device fingerprint characteristics, including browser type, screen resolution, and installed fonts. They help identify suspicious login attempts and protect your account from unauthorised access.

Managing Your Cookie Preferences: You may configure your browser to refuse all cookies, to alert you when a cookie is being set, or to delete cookies after each session. Instructions for managing cookies in the most common browsers are available in each browser's help documentation. Please note that disabling strictly necessary cookies will prevent you from logging in to your jtbdt account and using the platform.

5. Data Security & Retention

jtbdt takes the security of your personal data seriously and has implemented a layered set of technical and organisational measures to protect it against unauthorised access, accidental loss, destruction, or disclosure.

Technical Security Measures:

• All data transmitted between your device and jtbdt's servers is encrypted using TLS 1.3 with 256-bit AES encryption.
• Sensitive data stored on jtbdt's servers — including identity document scans and financial records — is encrypted at rest using AES-256 encryption.
• jtbdt's server infrastructure is hosted in ISO 27001-certified data centres with physical access controls, 24/7 security monitoring, and redundant power systems.
• Player passwords are stored only as salted cryptographic hashes. jtbdt staff cannot view your password in plain text under any circumstances.
• Access to player personal data by jtbdt staff is governed by a strict role-based access control policy. Only staff members with a legitimate need to access specific data categories are granted permission to do so.
• jtbdt conducts regular internal security reviews and periodic third-party penetration testing of its platform infrastructure.

Data Retention Periods: jtbdt retains your personal data for as long as your account is active and for a minimum period of five years following account closure, in order to comply with AML record-keeping obligations and to resolve any disputes that may arise after account closure. Identity verification documents are retained for a minimum of five years from the date of submission. Gaming activity logs are retained for a minimum of three years. Where you have opted in to marketing communications, your contact preferences are retained until you withdraw consent or request deletion.

Following the expiry of the applicable retention period, jtbdt will securely delete or irreversibly anonymise your personal data so that it can no longer be associated with your identity.

6. Your Privacy Rights

As a player on jtbdt, you hold the following rights with respect to your personal data. To exercise any of these rights, please contact our support team by email at [email protected] with the subject line "Data Privacy Request". All requests are acknowledged within 5 business days and fully resolved within 30 calendar days.

• Right of Access: You have the right to request a copy of all personal data that jtbdt holds about you, together with information about how that data is being used. jtbdt will provide this information in a clear, structured format at no charge.
• Right to Rectification: If any of the personal data jtbdt holds about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. We will act on such requests promptly and notify any third parties to whom the incorrect data was previously shared.
• Right to Erasure: You have the right to request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw the consent on which the processing was based, or where the data has been processed unlawfully. This right is subject to jtbdt's legal obligations to retain certain records — particularly AML and KYC records — for mandatory retention periods.
• Right to Restriction of Processing: You have the right to request that jtbdt restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data you have contested is being verified.
• Right to Data Portability: Where jtbdt processes your personal data on the basis of your consent or a contract with you, and that processing is carried out by automated means, you have the right to receive a copy of that data in a structured, machine-readable format.
• Right to Object: You have the right to object to the processing of your personal data where jtbdt relies on its legitimate interests as the legal basis. You also have an absolute right to object to the processing of your personal data for direct marketing purposes at any time.
• Right to Withdraw Consent: Where jtbdt processes your personal data based on your consent (for example, for marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

7. Age Restriction & Child Safety

jtbdt operates a strict 18+ policy and does not knowingly collect, store, or process any personal data belonging to individuals under the age of 18. The jtbdt platform is intended exclusively for adult players aged 18 and above.

As part of the account registration process, all players are required to declare that they are aged 18 or over. Additionally, jtbdt's KYC verification process requires players to submit identity documents confirming their date of birth before any withdrawal is processed. Where our verification process identifies that a player is under the age of 18, or where we receive a credible report that an account may belong to a minor, we will:

• Suspend the account immediately, pending further investigation.
• Refund any deposits made to the account, less any bonus amounts that may have been claimed.
• Permanently close the account and delete all associated personal data in accordance with applicable data protection law.
• Report the matter to the appropriate authorities where required by law.

We strongly recommend that parents and guardians take active steps to prevent minors from accessing online gambling platforms, including jtbdt. Parental control software and network-level filtering tools are widely available and can be configured to block access to gambling websites on shared or family devices.

If you are a parent or guardian and believe that your child has registered an account on jtbdt or has been exposed to jtbdt's content, please contact our support team immediately at [email protected]. We will investigate and respond within one business day.

8. Policy Updates & Contact

jtbdt reviews and updates this Privacy Policy periodically to reflect changes in our data processing practices, applicable law, or the services we offer. The effective date at the top of this page indicates when the current version was last revised. Where we make a material change to this Privacy Policy — for example, a change that significantly affects how we use your personal data — we will notify registered players via email or via a prominent notice on the jtbdt platform at least 14 days before the change takes effect.

Your continued use of the jtbdt platform following the notification of a material change constitutes your acceptance of the revised Privacy Policy. If you do not agree with any aspect of the revised policy, you should cease using the platform and contact our support team to request account closure and deletion of your personal data.

This Privacy Policy should be read alongside jtbdt's Terms & Conditions and Responsible Gaming Policy, both of which form part of the complete agreement between you and jtbdt.