jb99 Privacy Policy — Your Data, Handled with Care

jb99 uses your personal data for the following purposes:

• Account creation and management — to register your account, authenticate your login, and manage your account settings.
• Transaction processing — to process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard, and to maintain accurate financial records.
• Identity and age verification — to comply with Know Your Customer (KYC) and anti-money laundering (AML) obligations, and to verify that players are aged 21 or above.
• Fraud prevention and platform security — to detect, investigate, and prevent fraud, bonus abuse, money laundering, and other prohibited activity.
• Responsible gaming — to monitor gaming patterns and proactively identify players who may benefit from responsible gaming tools, deposit limits, or self-exclusion.
• Service improvement — to analyse aggregated, anonymised usage data to improve platform performance, game selection, and the overall player experience.

• Contractual necessity — processing required to fulfil our obligations to you under our Terms & Conditions, including account management, deposit processing, and withdrawal execution.
• Legal obligation — processing required to comply with applicable anti-money laundering, KYC, and data protection laws.
• Legitimate interests — processing carried out in pursuit of jb99's legitimate interests in preventing fraud, ensuring platform security, and improving services, provided those interests are not overridden by your rights.
• Consent — where you have given explicit consent to specific data processing activities, such as receiving promotional communications.

jb99 may share your personal data with the following categories of recipients where strictly necessary:

• Payment processors — bKash, Nagad, Rocket, Upay, Visa, and Mastercard payment networks receive only the transaction data required to process your deposit or withdrawal. jb99 does not transmit unnecessary personal data to payment processors.
• Game providers — Pragmatic Play, Evolution Gaming, Spribe, Ezugi, Habanero, and other certified providers receive session identifiers and game-round data required to deliver and audit game outcomes. They do not receive your financial or full identity data.
• KYC and identity verification service providers — where age or identity verification is required, a regulated third-party verification service may process a copy of your identification document. These providers operate under strict data protection obligations.
• Law enforcement and regulatory authorities — jb99 will disclose personal data to law enforcement, financial regulators, or other authorities where required to do so by applicable law, court order, or regulatory directive.

All third parties with whom jb99 shares personal data are contractually required to process that data securely, use it only for the specified purpose, and not to disclose it further without jb99's authorisation.

jb99 takes special care with financial data. When you make a deposit via bKash, Nagad, Rocket, or Upay, jb99 receives a transaction confirmation reference from the payment provider — we do not store your full mobile banking credentials, PIN, or wallet password. For card payments via Visa or Mastercard, card data is handled directly by the payment processor operating under PCI-DSS compliance standards; jb99 does not store full card numbers on its own servers.

Transaction records (amounts, dates, payment method type, and reference numbers) are retained for the purposes of financial reconciliation, dispute resolution, and compliance with applicable financial record-keeping requirements. These records are stored securely and are not accessible to third parties except as described in Section 5 of this Policy.

jb99 uses cookies and similar tracking technologies to operate and improve the platform. The cookies we use fall into the following categories:

• Essential cookies — required for the platform to function. These include session authentication cookies that keep you logged in during your visit, and security cookies that help detect unusual account activity. These cannot be disabled without breaking core platform functionality.
• Analytics cookies — used to understand how players navigate jb99, which pages are visited most frequently, and where technical errors occur. Data collected via analytics cookies is aggregated and anonymised. jb99 uses this data solely to improve platform performance.
• Preference cookies — used to remember your platform settings, such as display language preferences, so that you do not need to re-configure them each time you visit jb99.

You may control cookie settings through your browser preferences. Please note that disabling essential cookies will impair your ability to log in and use jb99. Disabling analytics or preference cookies will not affect your ability to play games or process transactions.

jb99 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention periods apply: active account data is retained for the lifetime of the account plus a minimum of five years following account closure; transaction records are retained for a minimum of five years to comply with financial record-keeping requirements; KYC verification documents are retained for a minimum of five years following the end of the customer relationship; support communications are retained for two years from the date of the communication.

When the applicable retention period expires, jb99 will securely delete or anonymise your personal data so that it can no longer be associated with you as an individual. Where deletion is technically not immediately possible (for example, where data is held in backup archives), the data will be isolated from further processing until deletion can be completed.

jb99 implements appropriate technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security measures include SSL/TLS encryption for all data transmitted between your device and our servers, access controls limiting internal access to personal data on a need-to-know basis, regular security reviews and vulnerability assessments of our platform infrastructure, and secure storage of KYC documents with restricted access.

No data transmission over the internet or method of electronic storage is completely secure. While jb99 takes its security obligations seriously and uses industry-standard protections, we cannot guarantee absolute security. In the event of a personal data breach that is likely to result in a risk to your rights, jb99 will notify affected players promptly and take all reasonable steps to mitigate the impact of the breach.

If jb99 discovers or has reason to believe that personal data has been collected from an individual who was under 21 at the time of registration, we will immediately close the account, delete the associated personal data to the extent permitted by law, and retain only such records as are required to document and evidence the age violation. If you believe a minor has registered on jb99, please contact our support team immediately so we can investigate and take appropriate action.

jb99 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform features. When we make material changes, we will update the "Last updated" date at the top of this page. We encourage you to review this Privacy Policy periodically. Your continued use of jb99 following the publication of an updated Privacy Policy constitutes your acceptance of the changes. If you do not accept the updated policy, please discontinue use of jb99 and contact our support team to request account closure and data deletion.

If you have any questions about this Privacy Policy, wish to exercise your data rights, or wish to raise a concern about how jb99 handles your personal data, please contact our support team. We are available 24/7 and aim to respond to all privacy-related queries within one business day.

Email (plain text — not a link): [email protected]