jd99 Privacy Policy — Your Data, Your Rights, Our Commitment

Introduction

This Privacy Policy ("Policy") describes how jd99 ("we", "us", "our", "the Platform") collects, processes, stores, and protects the personal data of individuals ("you", "your", "the Player") who access or use the jd99 platform at jd99.io, including all associated services, features, and content.

jd99 is committed to handling personal data with transparency, integrity, and care. We recognise that the players who trust jd99 with their personal and financial information are entitled to a clear, honest account of how that data is used — and this Policy is our commitment to providing exactly that.

This Policy applies to all personal data collected through the jd99 website and platform, whether submitted during account registration, deposited via payment services such as bKash, Nagad, or Rocket, provided during identity verification, or generated automatically through your use of the platform. It should be read alongside the jd99 Terms & Conditions and Responsible Gaming policy.

By registering an account on jd99 or continuing to use the platform after this Policy has been published or updated, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein.

Data We Collect

jd99 collects personal data through several channels — directly from you when you register or interact with the platform, automatically as you use the site, and from third-party service providers involved in payment processing and identity verification. The categories of data we collect are set out below.

Registration and Account Data: When you create a jd99 account, we collect your full legal name, date of birth, email address, mobile phone number, and a username of your choosing. This information is required to establish and maintain your account and to verify that you meet the platform's eligibility requirements, including the 21+ age restriction.

Identity Verification (KYC) Data: To comply with anti-money laundering (AML) obligations, jd99 may request copies of government-issued identity documents, including your National Identity Card (NID), passport, or driver's licence. We may also request proof of address in the form of a recent utility bill or bank statement. These documents are processed solely for identity verification purposes.

Financial and Transaction Data: We collect records of all deposits and withdrawals made through your jd99 account, including the payment method used (bKash, Nagad, Rocket, Upay, Visa, or Mastercard), transaction amounts in BDT, timestamps, and transaction reference numbers. We do not store full card numbers or mobile banking PINs — these are handled directly by the respective payment providers.

Usage and Behavioural Data: We collect data about how you use the jd99 platform, including the pages you visit, the games you play, the bets you place, the time and duration of your sessions, and the features you interact with. This data helps us improve the platform, personalise your experience, and detect unusual activity.

Device and Technical Data: We automatically collect technical information when you access jd99, including your IP address, device type, operating system, browser type and version, screen resolution, and network provider. This information is used for security monitoring, fraud detection, and platform optimisation.

How We Use Your Data

jd99 uses the personal data it collects for the specific, limited purposes described below. We do not use your data for any purpose beyond what is set out in this Policy without first obtaining your explicit consent.

• Account management: To create, maintain, and administer your jd99 account, including processing your login credentials and managing your account preferences.
• Identity verification: To verify that you meet the platform's eligibility criteria, including age (21+), and to fulfil our KYC and AML obligations.
• Transaction processing: To process deposits and withdrawals in BDT through bKash, Nagad, Rocket, Upay, Visa, and Mastercard, and to maintain accurate records of all financial activity on your account.
• Platform personalisation: To tailor your jd99 experience based on your game preferences, betting history, and platform behaviour, including surfacing relevant promotions and game recommendations.
• Security and fraud prevention: To monitor for unauthorised access, detect duplicate accounts, identify irregular betting patterns, and protect the integrity of the platform and its players.
• Legal and regulatory compliance: To fulfil our obligations under applicable AML regulations and to respond to lawful requests from competent authorities.
• Customer support: To respond to your enquiries, resolve disputes, and maintain records of support interactions for quality assurance purposes.
• Platform improvement: To analyse aggregate usage data and improve the performance, features, and design of the jd99 platform.
• Promotional communications: To send you offers, bonuses, and updates about jd99 — but only where you have consented to receiving such communications. You may opt out at any time.

Legal Basis for Processing

jd99 processes personal data only where a valid legal basis exists for doing so. The legal bases on which jd99 relies when processing your data are as follows:

• Contractual necessity: Processing your account data, transaction data, and KYC data is necessary to perform the contract between jd99 and you — i.e., to provide the platform services you have registered for.
• Legal obligation: Processing identity documents and financial transaction records is necessary to comply with applicable AML, fraud prevention, and record-keeping obligations.
• Legitimate interests: Processing usage data, device data, and security logs is necessary to pursue jd99's legitimate interests in operating a secure, reliable, and fair platform — provided those interests are not overridden by your fundamental rights.
• Consent: Where jd99 processes your data for purposes beyond those described above — such as sending you promotional communications — we rely on your explicit consent, which you may withdraw at any time without affecting the lawfulness of processing that occurred prior to withdrawal.

Data Sharing

jd99 does not sell, rent, or trade your personal data. We share your data only in the limited circumstances described below, and only to the extent strictly necessary for the stated purpose.

• Game providers: jd99 works with licensed third-party game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive anonymised session identifiers necessary to deliver game content. No personally identifiable information is shared with game providers beyond what is technically required for game delivery.
• Payment processors: To process your deposits and withdrawals, jd99 shares necessary transaction data with payment service providers including the operators of bKash, Nagad, Rocket, Upay, and card network processors. These providers are contractually bound to process your data securely and for no other purpose.
• Identity verification services: jd99 may use third-party KYC service providers to assist with document verification. These providers process your identity documents solely on jd99's behalf and under strict confidentiality obligations.
• Fraud and security providers: jd99 may share device and behavioural data with specialist security services to detect and prevent fraud, money laundering, and other prohibited activities.
• Legal authorities: jd99 may disclose personal data to law enforcement or regulatory bodies where required to do so by applicable law, court order, or regulatory directive. In such cases, jd99 will disclose only the minimum data required to satisfy the legal obligation.

All third parties with whom jd99 shares personal data are required to implement appropriate technical and organisational security measures and are prohibited from using your data for any purpose other than those specified in their contractual agreements with jd99.

Payment Data

jd99 places particular emphasis on the security of financial data given the sensitivity of payment transactions processed on the platform. The following specific measures apply to payment data collected through jd99:

• jd99 does not store full mobile banking account PINs or passwords associated with bKash, Nagad, Rocket, or Upay accounts. These credentials are processed exclusively by the respective payment providers through their own secure interfaces.
• Visa and Mastercard payment card data is handled in accordance with applicable card payment security standards. Full card numbers are not retained on jd99 servers following transaction authorisation.
• Transaction amounts, timestamps, and payment method identifiers (e.g., the last four digits of a card or the registered mobile number associated with a bKash account) are retained on jd99 systems for AML record-keeping and dispute resolution purposes.
• All financial data in transit between your device and jd99 servers is protected by 256-bit SSL/TLS encryption.

Cookies & Tracking

jd99 uses cookies and similar tracking technologies to operate the platform, remember your preferences, maintain your session, and gather analytical data about platform usage. A cookie is a small text file placed on your device by the jd99 website. Cookies do not contain your payment data or account passwords.

The categories of cookies used on jd99 are as follows:

• Strictly necessary cookies: These are required for the platform to function. They manage your login session, maintain your account state, and enable secure navigation. These cookies cannot be disabled without breaking core platform functionality.
• Performance and analytics cookies: These cookies collect anonymised data about how players use the jd99 platform — which pages are visited most frequently, where players encounter errors, and how long sessions typically last. This data is used solely to improve platform performance.
• Functional cookies: These cookies remember your language preferences, game layout settings, and other customisation choices to improve your experience on return visits.
• Security cookies: These cookies support fraud detection and abuse prevention by storing session identifiers and device fingerprints that allow jd99 to detect unusual login behaviour.

You may control cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will impair your ability to use the jd99 platform. Disabling performance or functional cookies will not affect platform access but may reduce the quality of your experience.

Data Retention

jd99 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply to the main categories of data held by jd99:

• Account and registration data: Retained for the duration of your active account relationship with jd99, plus a minimum of five years following account closure to comply with AML record-keeping requirements.
• KYC and identity documents: Retained for a minimum of five years from the date of verification or account closure, whichever is later, in accordance with AML regulatory requirements.
• Financial transaction records: Retained for a minimum of five years from the date of each transaction, as required by applicable financial record-keeping obligations.
• Usage and behavioural data: Retained in identifiable form for up to 24 months, after which it is aggregated and anonymised for analytical purposes. Anonymised data is not subject to retention limits.
• Support communications: Retained for up to three years from the date of last contact to support dispute resolution and service quality review.
• Security and fraud logs: Retained for up to five years to support ongoing fraud investigation and platform integrity monitoring.

When personal data is no longer required and its retention period has elapsed, jd99 will securely delete or irreversibly anonymise it in a manner that prevents reconstruction of the original data.

Your Rights

As a jd99 player, you hold the following rights with respect to your personal data. To exercise any of these rights, please contact jd99 at [email protected] with the subject line "Data Rights Request". We will respond within 30 days of receiving your request.

• Right of access: You have the right to request a copy of the personal data jd99 holds about you, along with information about how that data is being used.
• Right to rectification: You have the right to request that jd99 correct any inaccurate or incomplete personal data held in your account. For basic account details, you may update these directly through your jd99 account dashboard.
• Right to erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to jd99's legal obligations to retain certain records.
• Right to restriction: You have the right to request that jd99 restrict the processing of your personal data in certain circumstances — for example, while a data accuracy dispute is being resolved.
• Right to data portability: You have the right to receive a copy of personal data you have provided to jd99 in a structured, commonly used, machine-readable format.
• Right to object: You have the right to object to jd99 processing your personal data on the basis of legitimate interests, including for direct marketing purposes. Where you object to direct marketing, jd99 will cease using your data for that purpose immediately.
• Right to withdraw consent: Where jd99 processes your data on the basis of consent (for example, for promotional communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

Data Security

jd99 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and jd99 servers.
• Encryption of sensitive data at rest, including stored identity documents and financial records.
• Role-based access controls limiting internal staff access to personal data on a strict need-to-know basis.
• Continuous intrusion detection and security monitoring of jd99 infrastructure.
• Regular security assessments and vulnerability testing of the jd99 platform.
• Multi-factor authentication requirements for administrative access to jd99 backend systems.
• Comprehensive data breach response procedures, including notification protocols where a breach affects player data.

While jd99 takes all reasonable and industry-standard precautions to protect your data, no internet-based platform can guarantee absolute security. You play an important role in keeping your account secure by maintaining a strong, unique password, not sharing your login credentials, and reporting any suspicious activity to [email protected] immediately.

Children's Privacy

jd99 does not knowingly collect, process, or retain personal data from individuals under the age of 21. The platform is intended solely for adult players who meet the eligibility requirements set out in the jd99 Terms & Conditions.

If jd99 discovers that personal data has been collected from an individual under the age of 21 — whether through a misrepresentation at registration or any other means — jd99 will immediately suspend the associated account, delete all collected personal data relating to that individual, void any bets placed, and return any genuine deposit balance to the originating payment method.

If you are a parent or guardian and you have reason to believe that a person under your care has registered a jd99 account, please contact [email protected] immediately so that appropriate action can be taken without delay.

Third-Party Services

The jd99 platform integrates third-party services necessary to deliver its core functionality, including game content from licensed studios, payment processing through mobile financial services and card networks, and identity verification tools. Each of these providers operates under its own privacy and data protection policies.

jd99 exercises due diligence in selecting third-party service providers, requiring them to demonstrate adequate data protection standards as a condition of engagement. However, jd99 is not responsible for the privacy practices of third-party services accessed independently by players outside the jd99 platform — for example, the bKash or Nagad mobile applications used to initiate deposits.

The jd99 platform does not contain links to unaffiliated external websites. Any navigation within jd99.io remains within the jd99 platform environment and is governed by this Privacy Policy.

Policy Updates

jd99 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, applicable legal requirements, or platform features. When a material change is made to this Policy, jd99 will notify registered account holders via the email address on record and will publish the revised Policy on this page with an updated effective date.

We encourage players to review this Privacy Policy periodically to stay informed about how jd99 protects their data. Your continued use of the jd99 platform following the publication of an updated Policy constitutes your acceptance of the revised terms. If you do not agree with any changes to this Policy, you should cease using the platform and may request account closure in accordance with Section 12 of the jd99 Terms & Conditions.

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or jd99's data practices, please contact our support team through any of the following channels. All data rights requests should include your full registered name and account username to allow jd99 to locate your records promptly.

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 directly within the jd99 platform
• WhatsApp: See your jd99 account dashboard for the current support contact number

jd99 aims to acknowledge all privacy-related correspondence within 48 hours and to resolve data rights requests within 30 calendar days of receipt. Where a request is complex or involves a large volume of data, jd99 may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it.