jb999 Privacy Policy —
How We Protect Your Personal Data

This Privacy Policy applies to jb999 (referred to throughout as "jb999", "we", "us", or "our"), the online betting and gaming platform accessible at jb999.io. It describes how jb999 collects, uses, stores, shares, and protects personal information relating to individuals ("you", "your", "the Player") who register an account, visit the platform, or interact with any jb999 service.

jb999 serves players primarily based in Bangladesh, and we recognise the importance of handling personal data responsibly. We align our data handling practices with internationally recognised privacy standards, including principles drawn from the General Data Protection Regulation (GDPR), as a benchmark for fair, transparent, and lawful data processing.

By creating a jb999 account or continuing to use our platform after this policy has been published or updated, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not agree with any part of this policy, you should discontinue use of jb999 and contact support to request account closure.

For the purposes of this Privacy Policy, jb999 acts as the data controller in respect of the personal information collected from players on the jb999.io platform. As data controller, jb999 determines the purposes and means by which your personal data is processed.

All data-related enquiries, subject access requests, and deletion requests should be directed to the jb999 Data Privacy team at the contact details provided in Section 14 of this policy. jb999 will respond to all verified data requests within 30 calendar days of receipt.

jb999 collects personal information from you across several stages of your interaction with the platform. The categories of information we collect are set out below.

3.1 — Registration Information

• Full legal name as it appears on your government-issued identification document.
• Date of birth (used to verify the 21+ minimum age requirement).
• Mobile phone number (used for account verification and security alerts).
• Email address (used for account communications, password resets, and promotional messages where opted in).
• Chosen username and encrypted password.
• Residential address (city and district within Bangladesh, as applicable).

3.2 — KYC Verification Documents

• Government-issued photo identification (National ID card, passport, or driving licence).
• Proof of payment method ownership (e.g., screenshot or statement confirming bKash, Nagad, or bank account ownership).
• In certain circumstances, a selfie photograph for identity confirmation.

3.3 — Financial Transaction Data

• Deposit amounts, dates, and payment methods used (bKash, Nagad, Rocket, Upay, bank transfer).
• Withdrawal requests, amounts, and destination payment method references.
• Bonus credits, wagering activity, and win/loss records.
• Transaction reference numbers issued by payment providers.

3.4 — Technical and Device Data

• IP address and approximate geolocation derived from IP.
• Device type, operating system, and browser type and version.
• Session duration, pages visited, and navigation paths within jb999.
• Cookies and similar tracking technologies (see Section 6).
• Unique device identifiers where relevant to fraud detection.

3.5 — Communications Data

• Records of live chat conversations with jb999 support.
• Email correspondence sent to or received from jb999.
• Feedback, complaint submissions, and dispute records.

jb999 uses the personal information described in Section 3 for the following purposes:

jb999 will not use your personal data for any purpose not listed above without first obtaining your explicit consent or establishing a new lawful basis for processing.

jb999 processes your personal data under one or more of the following legal bases, depending on the specific processing activity involved:

• Contract Performance: Processing is necessary to provide the jb999 service to you under the Terms & Conditions you agreed to upon registration, including account management, payment processing, and bet settlement.
• Legal Obligation: Processing is necessary to comply with applicable laws, including anti-money laundering (AML) obligations, age verification requirements, and the retention of financial records.
• Legitimate Interest: Processing is necessary for jb999's legitimate interests, such as fraud prevention, platform security, responsible gaming monitoring, and improving our services, where these interests are not overridden by your fundamental rights.
• Consent: Where processing relies on your consent (for example, receiving promotional emails), you may withdraw that consent at any time by contacting jb999 support or using the unsubscribe option in any promotional communication.

jb999 uses cookies and similar technologies (including local storage, session tokens, and pixel tags) to operate and improve the platform. A summary of the cookie categories used is provided below.

• Strictly Necessary Cookies: Required for the platform to function. These include session authentication cookies, security tokens, and load-balancing identifiers. These cannot be disabled without impacting your ability to use jb999.
• Functional Cookies: Remember your preferences such as language settings, display options, and previously selected game categories to personalise your jb999 experience across sessions.
• Analytics Cookies: Used to collect anonymised or pseudonymised data about how players navigate jb999, which pages are most visited, and where errors occur. This data helps jb999 improve platform performance and user experience.
• Fraud Detection Cookies: Used by jb999's fraud prevention systems to identify anomalous behaviour, detect multiple accounts sharing the same device, and flag potentially fraudulent transactions before they impact other players.

You may configure your browser to block or delete cookies; however, blocking strictly necessary cookies will prevent you from logging in or using core jb999 features. jb999 does not use advertising or third-party behavioural tracking cookies.

jb999 does not sell your personal data. We may share your information with the following categories of third parties only to the extent necessary for the purposes identified in this policy:

• Payment Service Providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank, and other approved payment partners receive transaction reference data and payment method identifiers necessary to process your deposits and withdrawals. These providers operate under their own privacy policies and are responsible for your data within their own systems.
• KYC and Identity Verification Providers: Trusted third-party identity verification services may process your KYC documents and verification photographs on jb999's behalf under data processing agreements that restrict their use of your data to verification purposes only.
• Fraud Prevention and Security Services: jb999 works with specialist fraud detection providers who analyse transactional and behavioural data to identify suspicious activity. These providers act as data processors under strict contractual obligations.
• Game Content Providers: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, and Spribe may receive technical session data (such as session token and game result data) to operate their games on the jb999 platform. They do not receive your full registration profile.
• Legal and Regulatory Authorities: jb999 will disclose personal data to law enforcement agencies, financial intelligence units, or other governmental authorities where required to do so by a valid legal order, court direction, or applicable law, without prior notice to the player where disclosure of the notice would itself be unlawful.

jb999 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The table below summarises our standard retention periods by data category.

Upon expiry of the applicable retention period, jb999 will securely delete or irreversibly anonymise the relevant data. Anonymised and aggregated data (from which no individual player can be identified) may be retained indefinitely for statistical and analytical purposes.

jb999 implements a layered security architecture designed to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. Our technical and organisational security measures include:

• Encryption in Transit: All data transmitted between your device and jb999 servers is encrypted using TLS 1.2 or higher. Our platform enforces HTTPS across all pages and API endpoints.
• Encryption at Rest: Sensitive personal data fields — including identity document references, payment method identifiers, and KYC records — are encrypted at the database layer using AES-256 encryption.
• Access Controls: Internal access to player personal data is restricted on a strict need-to-know basis. All staff access to production data systems is logged, monitored, and subject to regular audit review.
• Password Security: Player passwords are never stored in plaintext. jb999 applies industry-standard hashing algorithms with salting to ensure passwords cannot be recovered even in the event of a database compromise.
• Two-Factor Authentication: jb999 strongly recommends enabling 2FA on your account. 2FA adds a second verification step that significantly reduces the risk of unauthorised account access.
• Security Testing: jb999 conducts periodic security assessments and vulnerability testing to identify and remediate potential weaknesses in the platform.

As a jb999 player, you hold the following rights in respect of your personal data. To exercise any of these rights, contact jb999 support at [email protected] with subject line "DATA RIGHTS REQUEST":

• Right of Access: You may request a copy of the personal data jb999 holds about you. We will provide this within 30 days of a verified request, free of charge for the first request per 12-month period.
• Right to Rectification: If any personal data we hold is inaccurate or incomplete, you have the right to request correction. You may update certain account details directly from your account dashboard.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, and where no legal obligation requires us to retain it. Note that data subject to mandatory retention periods (see Section 8) cannot be deleted before those periods expire.
• Right to Restrict Processing: You may request that jb999 restrict the processing of your personal data in certain circumstances, for example while a rectification request is being assessed.
• Right to Data Portability: Where processing is based on your consent or contract performance, you may request that jb999 provide your personal data in a structured, machine-readable format.
• Right to Object: You may object to processing based on legitimate interest, including profiling for fraud detection purposes, where you believe your rights outweigh jb999's interests. You may opt out of promotional communications at any time without affecting your account.
• Right to Withdraw Consent: Where processing relies on your consent (such as receiving promotional emails), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

jb999 strictly prohibits use of the platform by anyone under the age of 21. We do not knowingly collect personal data from individuals under 21. The platform employs age verification checks at registration, and KYC verification is required before any withdrawal is processed, specifically to confirm that the account holder meets the minimum age requirement.

If jb999 becomes aware that a minor has registered an account or that personal data has been collected from an individual under the age of 21, we will immediately suspend the account, delete the personal data associated with it, and refund any remaining balance via the deposit method used, after completing necessary verification. Any winnings generated during the period of underage use will be voided.

If you believe a minor has accessed jb999 using your account or another account, please notify jb999 support immediately at [email protected]. We take underage access seriously and will act promptly on all reported cases.

jb999 operates internationally and some of the third-party service providers we use — including KYC verification partners, fraud detection services, and game content providers — may process your data in countries outside Bangladesh. Where such international transfers occur, jb999 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that described in this policy.

These safeguards include contractual data processing agreements that bind receiving parties to confidentiality, security, and purpose-limitation obligations consistent with the commitments jb999 makes to you in this Privacy Policy. jb999 does not transfer personal data to any third party located in a jurisdiction that does not provide an adequate level of data protection without first implementing such contractual safeguards.

jb999 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or operational structure. When material changes are made, we will notify registered players via the email address associated with their account and/or by displaying a prominent notice on the jb999 platform upon next login.

The "Last updated" date at the top of this policy will always reflect the date of the most recent revision. We encourage you to review this page periodically to stay informed about how jb999 protects your personal data. Your continued use of jb999 following the publication of any updated Privacy Policy constitutes your acknowledgement of the changes.

If you do not accept the updated Privacy Policy, you must stop using jb999 and contact support to request account closure before the effective date of the change.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way jb999 handles your personal data, please reach out using any of the following channels:

• Email: [email protected] — use subject line "DATA PRIVACY REQUEST" for fastest routing to the privacy team.
• Live Chat: Available 24/7 inside your jb999 account dashboard. For privacy requests, please identify yourself as submitting a "privacy request" at the start of the conversation so the agent can escalate appropriately.
• Response Time: Email responses within 2 hours for general queries; within 5 business days for formal data rights requests. Live chat replies average under 3 minutes.