jitanet Privacy
Policy

jitanet collects personal data through three principal channels: information you provide directly during registration and account management; information generated automatically by your use of the Platform; and information received from third-party payment processors and identity verification providers. We collect only the minimum data necessary for each stated purpose, consistent with the principle of data minimisation.

1.1 Registration & Account Data

When you register a jitanet account, you are required to provide: your full legal name, date of birth, residential address (including city and postal code within Bangladesh), email address, mobile phone number, and a password of your choosing. This information is necessary to create and administer your account, verify your eligibility to use the Platform, and fulfil our Know Your Customer (KYC) obligations.

1.2 Identity Verification Documents

As part of our KYC programme, jitanet may request scanned or photographed copies of one or more of the following documents: a government-issued photo ID (National Identity Card, passport, or driver's licence issued in Bangladesh), a recent utility bill or bank statement showing your registered residential address, and evidence of ownership of the payment method used to fund your account. These documents are stored securely and used solely for identity and age verification purposes.

1.3 Financial Transaction Data

jitanet records all deposit and withdrawal transactions associated with your account, including the payment method used (bKash, Nagad, Rocket, Upay, Visa, or Mastercard), transaction amounts in Bangladeshi Taka, timestamps, and transaction reference numbers. Full payment credentials (such as card numbers or mobile banking PINs) are never stored by jitanet — these are handled exclusively by our PCI-DSS-compliant payment processing partners.

1.4 Gameplay & Betting Records

jitanet automatically records all bets placed, game sessions initiated, outcomes, and account balance changes. This data is used for account integrity, dispute resolution, responsible gaming monitoring, and the production of anonymised platform analytics. Gameplay records are associated with your account identifier, not stored in a way that is shared externally.

1.5 Technical & Device Data

When you access jitanet, our servers automatically collect technical data including your IP address, browser type and version, operating system, device type, screen resolution, referring URL, pages visited, and session duration. This data is used for platform security, fraud detection, and aggregate performance analytics. It is not used to build individual behavioural marketing profiles.

1.6 Communications Data

If you contact jitanet via email or live chat, we retain a record of the correspondence, including any attachments, for the purpose of resolving your query and improving our support services. Support communications are stored for a minimum of 12 months from the date of the interaction.

jitanet processes your personal data only where a lawful basis exists for doing so. The primary lawful bases on which we rely are: performance of the contract between you and jitanet (i.e., operating your account and providing the services you have requested); compliance with our legal obligations; pursuit of our legitimate business interests where those interests are not overridden by your rights; and, where required, your explicit consent.

2.1 Account Administration

We use your registration and identity data to create and maintain your account, verify your eligibility to use the Platform, process deposits and withdrawals, and communicate with you about account-related matters such as password resets, security alerts, and policy updates. This processing is necessary for the performance of your contract with jitanet.

2.2 Payment Processing

Your financial transaction data is used to process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard. We share transaction data with the relevant payment processor solely to complete the transaction. We retain transaction records to fulfil our anti-money laundering record-keeping obligations and to enable dispute resolution.

2.3 Fraud Prevention & Security

Technical and device data, alongside transaction and gameplay records, is used by jitanet's automated fraud detection systems to identify suspicious patterns such as collusion, arbitrage betting, unauthorised account access, and money laundering activity. Where fraud is detected, we may share relevant data with law enforcement authorities in fulfilment of our legal obligations.

2.4 Responsible Gaming Monitoring

jitanet uses gameplay and betting data to monitor for indicators of problem gambling behaviour, including rapidly escalating bet sizes, extended unbroken sessions, and patterns consistent with chasing losses. Where such indicators are detected, our responsible gaming team may contact you to offer support tools such as deposit limits or self-exclusion. This processing is carried out in the interest of player welfare.

2.5 Promotional Communications

Where you have given your explicit consent at registration or subsequently through your account settings, jitanet may contact you by email or mobile notification with information about promotions, bonuses, new game launches, and seasonal offers relevant to Bangladesh-market players. You may withdraw your consent to receive marketing communications at any time by updating your account preferences or by contacting [email protected].

2.6 Platform Improvement

Anonymised and aggregated gameplay, navigation, and performance data is used to improve the jitanet platform, including optimising page load times, identifying popular game categories, and planning new feature development. No individual player is identifiable in this analytics data.

jitanet does not sell, rent, or exchange your personal data with any third party for commercial marketing purposes. We share your data only in the specific, limited circumstances described below, and only to the extent necessary for the stated purpose.

3.1 Payment Processors

To process your deposits and withdrawals, jitanet shares the minimum necessary transaction data with our payment processing partners, including bKash, Nagad, Rocket, Upay, Visa network operators, and Mastercard network operators. These processors are contractually bound to use your data solely for the purpose of completing the payment transaction and are required to maintain security standards consistent with or exceeding those applied by jitanet.

3.2 Identity Verification Providers

Where jitanet uses a third-party KYC or identity verification provider to assist in verifying the documents you submit, your document images and extracted data points (name, date of birth, document number) are shared with that provider. Identity verification providers are contractually required to delete source documents once verification is complete and are not permitted to retain or repurpose them.

3.3 Game Content Providers

Third-party game studios — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — deliver game content directly within the jitanet platform environment. These providers may receive a session token and anonymised player identifier to initialise your game session. They do not receive your full name, contact details, or payment information.

3.4 Legal & Regulatory Disclosure

jitanet may disclose personal data to law enforcement agencies, financial intelligence units, or regulatory bodies where we are legally required to do so, or where we have a reasonable good-faith belief that disclosure is necessary to investigate, prevent, or take action regarding suspected fraud, money laundering, or other illegal activity. We will notify you of any such disclosure where we are legally permitted to do so.

3.5 Business Transfers

In the event that jitanet undergoes a merger, acquisition, or sale of all or substantially all of its assets, your personal data may be transferred to the acquiring entity as part of that transaction. In such circumstances, jitanet will take all reasonable steps to ensure that your data continues to be treated in accordance with this Privacy Policy and that the acquiring entity provides equivalent or greater privacy protections.

jitanet uses browser cookies and similar technologies to ensure the Platform functions correctly, to maintain your logged-in session, and to collect aggregate analytics data about platform usage. We do not use third-party advertising cookies, cross-site tracking pixels, or behavioural profiling technologies.

4.1 Essential Cookies

Essential cookies are strictly necessary for the Platform to operate. They include session management cookies that keep you logged in during your visit, CSRF protection tokens that prevent cross-site request forgery attacks, and load-balancing cookies that ensure your requests are routed to the correct server. Essential cookies cannot be disabled without breaking core Platform functionality.

• jitanet_session — Maintains your authenticated session. Expires on browser close.
• jitanet_csrf — Cross-site request forgery protection token. Expires on browser close.
• jitanet_prefs — Stores your display preferences (e.g., language selection). Expires after 90 days.

4.2 Analytics Cookies

jitanet uses first-party analytics cookies to collect anonymised data about how players navigate the Platform, which game categories are most visited, and where users encounter errors. This data informs platform improvement decisions. Analytics cookies do not store any personally identifiable information and are not shared with advertising networks.

• jitanet_analytics — Stores an anonymised session identifier used to aggregate navigation path data. Expires after 30 days.
• jitanet_perf — Records anonymised page load timing data for performance monitoring. Expires after 7 days.

4.3 Managing Your Cookie Preferences

You may control cookie behaviour through your browser's built-in settings. Most modern browsers allow you to view, block, or delete cookies on a per-site basis. Blocking essential cookies will prevent you from logging in and using the Platform. Blocking analytics cookies will not affect Platform functionality. For guidance on managing cookies in your specific browser, consult your browser's help documentation.

5.1 Security Measures

jitanet employs a layered security architecture to protect player data from unauthorised access, disclosure, alteration, and destruction. Technical measures include 256-bit SSL/TLS encryption for all data in transit, AES-256 encryption for sensitive data at rest, multi-factor authentication for administrative access, automated intrusion detection systems, regular third-party penetration testing, and continuous log monitoring. Organisational measures include mandatory data handling training for all staff, role-based access control, and a formal incident response plan.

5.2 Data Breach Notification

In the event that jitanet experiences a personal data breach that is likely to result in a risk to the rights and freedoms of affected players, we will notify affected players without undue delay via the email address registered on their account. The notification will describe the nature of the breach, the categories of data affected, the likely consequences, and the steps jitanet is taking to address the breach and mitigate its effects.

5.3 Retention Periods

jitanet retains different categories of personal data for different periods, determined by the purpose for which the data was collected and the legal obligations applicable to that data:

• Account & Identity Data: Retained for the duration of your account and for a minimum of 5 years following account closure, to comply with anti-money laundering record-keeping obligations.
• Transaction Records: Retained for a minimum of 5 years from the date of the transaction.
• KYC Documents: Retained for a minimum of 5 years following account closure and then securely destroyed.
• Support Communications: Retained for a minimum of 12 months from the date of the interaction, and up to 3 years where the communication relates to a dispute.
• Technical & Device Data: Retained in aggregate anonymised form for up to 24 months. Raw IP logs are retained for a maximum of 90 days.
• Analytics Data: Retained in anonymised, aggregated form indefinitely. No individual player is identifiable in retained analytics data.

5.4 Secure Deletion

When personal data reaches the end of its retention period, jitanet deletes it using secure deletion methods appropriate to the storage medium. For digital records, this involves overwriting and cryptographic erasure. Physical documents containing personal data (where applicable) are destroyed by cross-cut shredding or incineration.

As a jitanet player, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact us in writing at [email protected]. We will respond to all valid requests within 14 calendar days of receipt.

6.1 Right of Access

You have the right to request a copy of all personal data jitanet holds about you. Upon receipt of a valid access request, we will provide a structured, commonly used, machine-readable export of your personal data within 14 days. No fee is charged for a first access request in any 12-month period.

6.2 Right to Rectification

If any personal data jitanet holds about you is inaccurate or incomplete, you have the right to request correction. For many data fields (such as your contact email address), you can update the information directly through your account settings. For fields that require verification (such as your legal name or date of birth), please contact [email protected] with supporting documentation.

6.3 Right to Erasure

You have the right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent and no other lawful basis applies, or where the data has been processed unlawfully. Please note that erasure requests cannot override jitanet's legal obligation to retain certain financial and identity records for a minimum of 5 years following account closure.

6.4 Right to Restrict Processing

You may request that jitanet restricts processing of your personal data in certain circumstances — for example, while the accuracy of the data is contested, or while an objection to processing is being assessed. During a restriction, jitanet will continue to store your data but will not actively process it beyond storage.

6.5 Right to Object to Processing

Where jitanet processes your personal data on the basis of legitimate interests, you have the right to object to that processing. We will cease the relevant processing unless we can demonstrate compelling legitimate grounds that override your interests. You have an absolute right to object to processing of your personal data for direct marketing purposes, and we will always honour such objections promptly.

6.6 Right to Data Portability

Where processing is based on your consent or on the performance of a contract, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit that data to another controller. We will provide your data in JSON or CSV format upon request.

6.7 Right to Withdraw Consent

Where jitanet relies on your consent as the lawful basis for processing (such as for sending promotional communications), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal. To withdraw consent for marketing communications, update your account preferences or contact [email protected].

The jitanet Platform is strictly intended for adults aged 18 years and above. We do not knowingly collect personal data from individuals under the age of 18. Our registration process includes a mandatory age declaration and date-of-birth field, and all accounts are subject to age verification procedures as described in Section 1.2 of this Privacy Policy.

If jitanet becomes aware that personal data has been collected from a person under the age of 18 — whether through the registration process, a parental notification, or any other means — we will immediately suspend the relevant account, delete all personal data associated with that account, and arrange for the return of any funds deposited, in accordance with our Terms & Conditions.

If you are a parent or guardian and you believe that a minor in your care has registered a jitanet account, please contact us immediately at [email protected]. We will treat your report as a priority and investigate it within 24 hours.

8.1 Policy Updates

jitanet reviews this Privacy Policy periodically and reserves the right to update it at any time. Where a material change is made to this policy — such as a change to the categories of data collected, a new third-party data sharing arrangement, or a change to retention periods — jitanet will notify registered players via the email address held on their account at least 14 days before the change takes effect. Minor updates (such as clarifications of existing practices or corrections of typographical errors) may be made without individual notice; the effective date at the top of the policy will be updated accordingly.

Continued use of the jitanet Platform following notification of a material policy update constitutes your acceptance of the revised Privacy Policy. If you do not agree with a change, you must close your account before the change takes effect by contacting [email protected].

8.2 Contact the Privacy Team

All privacy-related enquiries, rights requests, and data breach reports should be directed to the jitanet Privacy team:

• Privacy & Data Requests: [email protected]
• General Support: [email protected]
• Response Time: Within 14 calendar days for rights requests; within 4 hours for general enquiries during Bangladesh Standard Time (BST, UTC+6) business hours.

8.3 Governing Language

This Privacy Policy is written in English and shall be interpreted in accordance with its natural English meaning. Where any translated version of this policy is made available for convenience, the English version shall prevail in all cases of conflict or ambiguity.