Privacy Policy —
How jitawin1 Protects Your Data

1. Information We Collect

jitawin1 collects personal data from players in Bangladesh through several channels: directly from you when you register an account, from your activity on the platform during gameplay and transactions, and automatically through technical mechanisms such as cookies and server logs. We collect only the data that is necessary and proportionate to the purposes described in this Privacy Policy.

The categories of personal data that jitawin1 may collect and process include the following:

jitawin1 does not intentionally collect sensitive personal data categories such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data. If you voluntarily disclose any such information through a support interaction, it will be treated with the highest degree of confidentiality and used solely for the purpose of resolving your specific enquiry.

2. How We Use Your Data

jitawin1 processes your personal data only where a lawful basis exists for doing so. The primary lawful bases on which we rely are: (a) the performance of a contract — i.e., providing you with the jitawin1 service you signed up for; (b) legal obligation — i.e., complying with anti-money-laundering (AML), age verification, and other applicable regulatory requirements; and (c) legitimate interest — i.e., operating a safe, fair, and commercially sustainable platform for all Bangladesh players.

The specific purposes for which jitawin1 uses the personal data it collects are set out below:

• Account creation and management: To register your jitawin1 account, verify your identity and age, manage your profile settings, and maintain the security of your login credentials.
• Payment processing: To facilitate deposits and withdrawals in Bangladeshi Taka (৳) via bKash, Nagad, Rocket, and Upay; to record transaction histories; and to identify and reverse erroneous transactions where applicable.
• Regulatory compliance: To fulfil Know Your Customer (KYC) obligations, conduct anti-money-laundering checks, verify the source of player funds where required, and maintain records as required by applicable law.
• Security and fraud prevention: To detect, investigate, and prevent fraudulent activity, account takeover attempts, bot usage, collusion, and other prohibited conduct on the jitawin1 platform.
• Customer support: To respond to your enquiries, process complaints, and resolve disputes in a timely and informed manner.
• Responsible gaming: To monitor player activity for signs of problem gambling behaviour, to enforce self-exclusion requests and deposit limits, and to provide appropriate interventions where necessary.
• Platform improvement: To analyse aggregate usage patterns, identify technical issues, test new features, and optimise the overall player experience on jitawin1.
• Marketing communications: Where you have provided explicit consent, to send you information about promotions, bonuses, and new game releases on jitawin1. You may withdraw this consent at any time by contacting support@jitawin1 or using the unsubscribe link in any marketing email.

3. Data Sharing & Third Parties

jitawin1 does not sell, rent, or otherwise transfer your personal data to third parties for their own commercial purposes. However, in order to operate the platform effectively and meet our legal obligations, we do share certain personal data with a limited set of trusted third-party service providers and, where legally required, with regulatory or law enforcement authorities.

The categories of third parties with whom jitawin1 may share your data, and the basis for doing so, are as follows:

• Payment service providers: bKash, Nagad, Rocket, and Upay receive the transaction reference data necessary to process your deposits and withdrawals. These providers operate under their own privacy policies and security standards.
• Identity verification providers: Third-party KYC and AML screening services may process your identity documents and personal details to confirm your eligibility to use jitawin1. These providers are contractually bound to handle your data with confidentiality.
• Game software providers: Providers such as Pragmatic Play, Evolution Gaming, Spribe, Ezugi, NetEnt, and Microgaming may receive anonymised technical data (e.g., session IDs) necessary to deliver their game software on the jitawin1 platform. These providers do not receive your full identity data.
• Cloud infrastructure and hosting providers: jitawin1 uses secure cloud infrastructure to host its platform. Server providers process technical and usage data as part of standard hosting operations and are bound by strict data processing agreements.
• Legal and regulatory authorities: Where required by applicable law, court order, or regulatory instruction, jitawin1 will disclose personal data to the relevant authorities. We will inform you of such disclosures where legally permitted to do so.
• Fraud prevention networks: Where a player account is suspected of serious fraud or money laundering, jitawin1 may share relevant data with industry-wide fraud prevention networks to protect the broader online gaming community.

4. Cookies & Tracking Technologies

jitawin1 uses cookies and similar tracking technologies on its platform to ensure the site functions correctly, to keep your session secure, and to gather anonymised analytics data that helps us improve the platform experience for all Bangladesh players. A cookie is a small text file placed on your device by the jitawin1 web server when you visit the platform.

The categories of cookies used by jitawin1 are as follows:

jitawin1 does not use third-party advertising cookies, retargeting pixels, or social media tracking scripts on the platform. You may control or disable cookies through your browser settings; however, disabling essential or security cookies will impair the functionality of the jitawin1 platform and may prevent you from logging in or completing transactions.

5. Data Security & Storage

jitawin1 employs a multi-layered security architecture to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. Our security measures are reviewed and updated on a regular basis to address evolving threats and maintain alignment with industry best practices for online gaming platforms serving Bangladesh players.

• Encryption in transit: All communications between your browser or device and the jitawin1 platform are encrypted using SSL/TLS protocols. The presence of "https://" in your browser address bar confirms an active encrypted connection.
• Encryption at rest: Sensitive personal data — including identity documents, financial records, and account credentials — is stored in encrypted form on jitawin1's secure servers. Passwords are hashed using industry-standard cryptographic algorithms and are never stored in plain text.
• Access controls: Access to jitawin1 player data is restricted on a strict need-to-know basis. Internal staff access to personal data is governed by role-based access controls, and all access events are logged and audited.
• Network security: jitawin1's infrastructure is protected by firewalls, intrusion detection systems, and DDoS mitigation tools. Regular vulnerability assessments and penetration tests are conducted on the platform.
• Data breach response: In the event of a data breach that poses a risk to your personal data, jitawin1 will notify affected players as soon as practicable and will take immediate steps to contain the breach, assess its scope, and remediate any vulnerabilities exploited.

6. Your Privacy Rights

As a jitawin1 player in Bangladesh, you hold the following rights with respect to your personal data. To exercise any of these rights, please contact the jitawin1 data team in writing at support@jitawin1, clearly stating your account username, the right you wish to exercise, and the specific data or processing activity to which your request relates. All valid requests will be acknowledged within 3 working days and actioned within 30 calendar days.

• Right of access: You have the right to request a copy of all personal data that jitawin1 holds about you. This includes your registration data, transaction history, KYC documents held on file, and any communications records.
• Right to rectification: If any personal data held by jitawin1 is inaccurate or incomplete, you have the right to request that it be corrected. You may also update certain details directly within your jitawin1 account settings.
• Right to erasure: You may request that jitawin1 delete your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (if consent was the basis for processing), or where the data has been processed unlawfully. This right is subject to our legal obligation to retain certain records for AML and regulatory compliance purposes.
• Right to restriction: You may request that jitawin1 restricts the processing of your personal data in certain circumstances — for example, while a dispute about the accuracy of your data is being resolved.
• Right to data portability: Where processing is based on consent or contract and carried out by automated means, you may request a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to object to marketing: You have the right to object to the processing of your personal data for direct marketing purposes at any time. You can opt out of jitawin1 marketing communications by contacting support@jitawin1 or by using the unsubscribe mechanism included in any marketing message sent to you.

7. Data Retention Policy

jitawin1 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The retention periods applied to the main categories of personal data held by jitawin1 are summarised in the table below.

At the end of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to an individual player. Where data is anonymised rather than deleted, the anonymised dataset may be retained indefinitely for statistical and platform improvement purposes, as it no longer constitutes personal data.

If your jitawin1 account is closed — whether voluntarily or due to a breach of the Terms & Conditions — your personal data will be retained for the periods specified above and will not be used for any new marketing or commercial purpose from the date of account closure.

8. Updates to This Privacy Policy

jitawin1 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable law, or improvements to the platform. All updates will be published on this page with a revised effective date clearly displayed at the top of the document.

Where a change to this Privacy Policy is material — for example, where we introduce a new category of data processing or a new category of third-party sharing that significantly affects your privacy rights — we will notify active jitawin1 account holders by sending a notice to the mobile number or email address registered on their account at least 7 days before the change takes effect.

Your continued use of the jitawin1 platform following the publication of any updated Privacy Policy constitutes your acknowledgement of the revised terms. If you do not agree with any change to this Privacy Policy, you should stop using the platform and contact support@jitawin1 to request account closure and deletion of your personal data, subject to our mandatory retention obligations described in Section 7 above.