Privacy Policy — jitaaca

1. Information We Collect

When you register an account, use the jitaaca platform, or interact with our support team, we collect certain personal information. The information we collect falls into three broad categories: information you provide directly, information collected automatically as you use the platform, and information we receive from third parties as part of our verification and payment processes.

1.1 Information You Provide Directly

When you create a jitaaca account or interact with the platform, you may provide us with the following categories of personal information:

Data Category	Examples	When Collected
Identity Data	Full legal name, date of birth, NID number, passport number	Registration & KYC verification
Contact Data	Email address, Bangladeshi mobile number, residential address	Registration & account updates
Financial Data	bKash/Nagad mobile number, Visa/Mastercard last 4 digits, transaction references	Deposit & withdrawal processing
Document Data	Scanned NID, passport photo page, driving licence image, selfie for liveness check	KYC identity verification
Communication Data	Live chat transcripts, support email content, feedback submissions	Customer support interactions
Preference Data	Game preferences, responsible gaming limit settings, language settings	Ongoing platform use

1.2 Information Collected Automatically

When you access the jitaaca platform — whether via a desktop browser or a mobile device — certain technical and behavioural data is collected automatically. This includes your IP address, device type and operating system, browser type and version, referring URL, pages visited on jitaaca, time and duration of each visit, and game session data such as bets placed, game titles played, and outcomes. This information is collected using cookies, server logs, and similar tracking technologies, as described in Section 4 of this policy.

1.3 Information from Third Parties

jitaaca may receive personal information about you from third-party sources in the following circumstances: payment service providers (bKash, Nagad, Rocket, Upay, Visa, Mastercard) confirm transaction status and may share relevant transaction metadata; identity verification partners confirm the authenticity of documents submitted during KYC; fraud prevention and anti-money-laundering screening services may share risk signals; and analytics providers may aggregate behavioural data to help us improve platform performance. In all cases, jitaaca only accepts third-party data where it is lawfully provided and directly relevant to the operation or protection of the platform.

2. How We Use Your Data

jitaaca processes your personal data only where we have a lawful basis to do so. The primary purposes for which we use your personal information are set out below, together with the legal basis that applies in each case.

2.1 Account Management and Service Delivery

We use your identity, contact, and financial data to create and maintain your player account, verify your eligibility to use the platform, process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard, and deliver the games and betting markets available on jitaaca. Without this data, we cannot provide core platform services to you.

2.2 Legal Compliance and KYC

jitaaca is legally required to verify the identity and age of all players, maintain records of financial transactions, and conduct anti-money-laundering (AML) screening. We process your identity and financial data to fulfil these obligations. These processing activities cannot be opted out of — they are a condition of holding a jitaaca account.

2.3 Responsible Gaming Monitoring

We use your gameplay data, deposit history, and session behaviour to monitor for signs of problem gambling. Where our systems identify patterns consistent with harmful gambling behaviour, we may take proactive steps such as sending responsible gaming notifications, applying account limits, or contacting you directly to offer support. This processing is carried out in your interest and forms part of our commitment to player welfare.

2.4 Fraud Prevention and Platform Security

Your IP address, device data, login timestamps, and transaction history are used to detect and prevent fraud, unauthorised account access, bonus abuse, and money laundering. jitaaca uses both automated systems and manual review processes in this context. Where fraudulent activity is confirmed, we may share relevant data with payment providers and law enforcement as required by applicable law.

2.5 Customer Support

When you contact jitaaca support via live chat or email, we use your account data and communication history to respond to your query accurately and efficiently. Support interactions are recorded for quality assurance, dispute resolution, and staff training purposes.

2.6 Marketing Communications

Where you have given your explicit consent at the time of registration or subsequently through your account settings, jitaaca may send you promotional emails or SMS notifications about bonuses, new game launches, seasonal promotions (such as Eid or Pohela Boishakh offers), and BPL or IPL cricket betting specials. You may withdraw your consent to marketing communications at any time by updating your preferences in your account settings or by emailing support@jitaaca.

3. Data Sharing & Third Parties

jitaaca shares personal data with third parties only where it is strictly necessary to deliver our services, comply with legal obligations, or protect the integrity of the platform. We do not engage in speculative or opportunistic data sharing. The categories of third parties with whom we may share your data are described below.

3.1 Payment Service Providers

To process your deposits and withdrawals, jitaaca shares the minimum necessary data with payment partners including bKash, Nagad, Rocket, Upay, and card networks (Visa and Mastercard). This typically includes your registered mobile number or masked card reference, the transaction amount, and a unique transaction identifier. These providers operate under their own privacy policies and are bound by strict data security obligations.

3.2 Identity Verification Partners

jitaaca uses third-party KYC service providers to verify the authenticity of identity documents submitted by players. These providers process your identity document images and extracted data solely for the purpose of confirming your identity. Verification results are shared back with jitaaca; document images are not retained by jitaaca beyond the period required for compliance record-keeping.

3.3 Fraud Prevention and AML Screening

We work with specialist fraud prevention and anti-money-laundering screening services that may process data about your account activity, device characteristics, and transaction behaviour to generate risk scores. These services are bound by strict confidentiality obligations and may not use your data for any purpose other than delivering their service to jitaaca.

3.4 Analytics and Platform Performance

jitaaca uses analytics tools to understand how players use the platform, identify performance issues, and improve the overall user experience. Analytics data is processed in aggregated or pseudonymised form wherever possible, so that individual players cannot be identified from analytics reports.

3.5 Legal and Regulatory Disclosure

jitaaca may disclose your personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by applicable law, by a court order, or where we reasonably believe that disclosure is necessary to prevent or detect a serious crime or to protect the rights, property, or safety of jitaaca, its players, or the public.

4. Cookies & Tracking Technologies

jitaaca uses cookies and similar technologies (including web beacons, pixel tags, and local storage) to operate the platform, remember your preferences, and analyse how the site is used. A cookie is a small text file placed on your device by a website. The cookies used on jitaaca fall into the following categories:

Cookie Type	Purpose	Duration
Strictly Necessary	Session management, login authentication, security tokens, fraud detection flags	Session / up to 24 hours
Functional	Remembering language preference, saved game state, responsible gaming settings	Up to 12 months
Analytics	Page visit counts, navigation paths, session duration, device type reporting	Up to 24 months
Marketing	Conversion tracking for paid campaigns, affiliate referral attribution	Up to 30 days

Strictly necessary cookies cannot be disabled as they are essential for the platform to function. You may opt out of functional, analytics, and marketing cookies by adjusting your browser settings. Please note that disabling certain cookies may affect the functionality of the jitaaca platform, including your ability to remain logged in during a session.

5. Data Retention

jitaaca retains your personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law. The retention periods that apply to each category of personal data are outlined below.

• Account and identity data: Retained for the duration of your account plus a minimum of 5 years following account closure, in accordance with anti-money-laundering record-keeping obligations.
• Transaction and financial data: Retained for a minimum of 5 years following each transaction date.
• KYC documents: Retained for 5 years from the date of verification or from the date of account closure, whichever is later.
• Support communications: Retained for 3 years from the date of each interaction.
• Marketing preferences and consent records: Retained for the duration of your account plus 2 years, to evidence compliance with consent obligations.
• Analytical and behavioural data: Retained in pseudonymised form for up to 24 months, after which it is aggregated or permanently deleted.
• Dormant accounts: Where an account has been dormant for 12 consecutive months, jitaaca will contact the account holder before applying the dormant account policy. Data associated with a dormant account is retained subject to the same minimum retention periods described above.

When the applicable retention period expires, jitaaca securely deletes or anonymises your personal data so that it can no longer be used to identify you.

6. Data Security Measures

jitaaca takes the security of your personal data seriously. We implement a range of technical and organisational measures to protect your information from unauthorised access, accidental loss, destruction, or disclosure. These measures include, but are not limited to, the following:

• 256-bit SSL/TLS encryption on all data in transit between players and the jitaaca platform
• AES-256 encryption for sensitive data stored at rest, including identity documents and financial records
• Two-factor authentication (2FA) available to all account holders for enhanced login security
• Role-based access controls ensuring that jitaaca staff can only access the minimum data necessary for their role
• Regular penetration testing and vulnerability assessments conducted by independent security specialists
• Automated fraud detection systems monitoring for unusual login activity, rapid consecutive deposits, and suspicious withdrawal patterns
• Secure data centres with physical access controls, fire suppression systems, and continuous monitoring
• Staff data protection training conducted regularly to ensure that all team members handle personal data in accordance with this policy

Despite these measures, no online platform can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights or freedoms, jitaaca will notify affected players without undue delay and will take all reasonable steps to mitigate the impact of the breach. We recommend that all players use a strong, unique password for their jitaaca account and enable two-factor authentication to maximise their own account security.

7. Your Privacy Rights

As a player on the jitaaca platform, you hold a number of rights in relation to your personal data. jitaaca respects and honours these rights. To exercise any of the rights described below, please contact our support team at support@jitaaca. We aim to respond to all data rights requests within 30 days of receipt.

Please note that certain rights are subject to limitations where jitaaca has a legal obligation to retain data — for example, the 5-year AML record-keeping requirement means that transaction records cannot be deleted on request within that period. Where a right cannot be exercised in full, jitaaca will explain the reason clearly in its response to your request.

8. Policy Updates & Contact

jitaaca reviews this Privacy Policy regularly and may update it from time to time to reflect changes in our data processing practices, legal requirements, or platform features. When we make a material change to this policy, we will notify registered players by email and display a prominent notice on the jitaaca website for a minimum of 14 days following the update. The "Last Updated" date at the top of this page will always reflect the date of the most recent revision.

Your continued use of the jitaaca platform following notification of a material policy change constitutes your acceptance of the updated Privacy Policy. If you do not agree to the updated terms, you should cease using the platform and contact our support team to close your account and arrange return of any positive balance.

8.1 How to Contact Us About Privacy

If you have any questions, concerns, or requests relating to this Privacy Policy or to jitaaca's handling of your personal data, please contact us using the following details. Our support team is available 24 hours a day, 7 days a week, including all Bangladeshi public holidays.

• Email: support@jitaaca (plain text — not a clickable link)
• Live Chat: Available on every page of the jitaaca website — average response time under 3 minutes
• Expected Email Response Time: Within 2 hours during Bangladesh Standard Time (BST, UTC+6) business hours; within 12 hours at all other times

For requests to exercise your data rights (access, erasure, rectification, portability), please use the subject line "Privacy Rights Request" when emailing support@jitaaca and include your registered account email address and the nature of your request. We may need to verify your identity before processing a data rights request to ensure the security of your personal information.