Privacy Policy – How jetbaz Handles Your Personal Data

1. Introduction

This Privacy Policy ("Policy") describes how jetbaz ("jetbaz", "we", "us", "our") collects, processes, stores, discloses, and protects personal information provided by or collected from users ("you", "your") of the jetbaz platform, accessible at jetbaz.bio and its associated interfaces. This Policy forms part of and should be read in conjunction with the jetbaz Terms & Conditions.

By registering an account on the jetbaz platform, completing the identity verification process, making a deposit, or otherwise interacting with our services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein. If you do not agree with any part of this Policy, you must not use the jetbaz platform.

jetbaz is committed to protecting the privacy and security of all personal data entrusted to us. We apply industry-standard technical and organisational safeguards to ensure your information is handled responsibly and in a manner consistent with your reasonable expectations as a user of an online gaming platform operating in the Bangladesh market.

2. Data We Collect

jetbaz collects personal data through several channels: directly from you when you register or complete verification, automatically as you use the platform, and from third-party payment processors and fraud-prevention partners. The categories of personal data we collect are set out below.

2.1 Information You Provide Directly

2.2 Information Collected Automatically

When you access the jetbaz platform, our systems automatically record certain technical data about your device and session. This includes your IP address, browser type and version, operating system, device identifiers, referring URL, pages visited, session duration, clickstream data, and in-game event logs. This data is collected using server logs, cookies, and similar tracking technologies described in Section 8 of this Policy.

2.3 Information from Third Parties

We may receive personal data about you from third-party service providers including payment processors (bKash, Nagad, Rocket), identity verification agencies, fraud-detection services, and analytics partners. We use this data solely to supplement our own records for the purposes described in this Policy and do not sell third-party-sourced data to any external party.

3. How We Use Your Data

jetbaz uses the personal data we collect only for legitimate, clearly defined purposes. We do not use your data for purposes incompatible with those stated below without first seeking your consent.

4. Legal Basis for Processing

jetbaz processes your personal data under one or more of the following legal grounds depending on the specific purpose of each processing activity:

• Contractual necessity: Processing required to perform the contract between you and jetbaz — including Account management, payment processing, game settlement, and customer support.
• Legitimate interests: Processing necessary for the legitimate interests of jetbaz, such as fraud prevention, platform security, product improvement, and responsible gaming monitoring, where these interests are not overridden by your rights.
• Legal obligation: Processing required to comply with applicable legal requirements, including anti-money-laundering obligations, age verification mandates, and responses to lawful requests from competent authorities.
• Consent: Where you have provided clear, informed, and freely given consent, such as for receiving marketing communications or for the use of non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

5. Sharing Your Personal Data

jetbaz does not sell, rent, or trade your personal data to any third party for their own commercial purposes. We share personal data only in the limited circumstances described below, and only to the extent strictly necessary for the stated purpose.

5.1 Service Providers and Technology Partners

We share data with carefully selected third-party vendors who process data on our behalf under contractual data processing agreements. These include payment processors (bKash, Nagad, Rocket), game software providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi), identity verification services, cloud hosting providers, and customer support platform operators. These vendors may only use your data for the specific purpose for which it was shared and are prohibited from using it for their own independent purposes.

5.2 Legal and Regulatory Disclosure

We may disclose personal data to law enforcement agencies, regulatory bodies, courts, or other government authorities if required to do so by applicable law, court order, or other binding legal process. We will notify you of such disclosures where legally permitted to do so.

5.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or substantially all of jetbaz's assets, your personal data may be transferred to the relevant successor entity. We will provide notice of any such transfer and the applicable privacy terms before your data becomes subject to a different privacy policy.

6. Data Retention

jetbaz retains personal data for as long as is necessary to fulfil the purposes for which it was collected and to comply with applicable legal obligations. The following general retention periods apply:

• Active Account data (profile, transaction history, bet records) is retained for the lifetime of your Account plus a minimum of five years following Account closure, to satisfy anti-money-laundering record-keeping obligations.
• Identity verification documents (KYC documents) are retained for a minimum of five years from the date of verification or Account closure, whichever is later.
• Customer support communications are retained for three years from the date of each interaction.
• Marketing preference records are retained until you withdraw consent or close your Account, plus a short administrative period of up to 90 days.
• Technical logs (server access logs, session data) are retained for up to 12 months and then securely deleted or anonymised.
• Cookie and analytics data is retained in accordance with the specific cookie durations listed in Section 8.

When personal data is no longer required, jetbaz deletes or anonymises it using secure data destruction procedures that prevent reconstruction or recovery.

7. Your Privacy Rights

As a user of the jetbaz platform, you hold the following rights with respect to your personal data. To exercise any of these rights, contact our support team via the email address listed in Section 11. We will respond to all verifiable requests within 30 calendar days.

8. Cookies and Tracking Technologies

jetbaz uses cookies and similar tracking technologies to operate the platform, remember your preferences, analyse traffic patterns, and deliver relevant promotional content. A cookie is a small text file placed on your device by our web server when you visit the platform. You can control cookie behaviour through your browser settings, though disabling certain categories of cookies may affect platform functionality.

Cookie Categories Used by jetbaz

9. Data Security

jetbaz implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security practices include:

• SSL/TLS encryption for all data transmitted between your device and the jetbaz platform, ensuring that login credentials, payment details, and personal information cannot be intercepted in transit.
• At-rest encryption for all sensitive personal data stored in our databases, including identity documents and payment method references.
• Role-based access controls ensuring that only authorised jetbaz personnel with a defined business need can access personal data, and only to the extent required for their specific function.
• Regular security audits, vulnerability scanning, and penetration testing conducted by independent third-party security professionals to identify and remediate weaknesses proactively.
• Secure data deletion protocols applied when personal data reaches the end of its retention period, preventing reconstruction or recovery of deleted records.
• Incident response procedures that require notification of affected users in the event of a confirmed personal data breach involving data likely to result in risk to the rights and freedoms of those individuals.

Despite these measures, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your login credentials and must notify jetbaz immediately if you suspect that your Account has been compromised.

10. Minors and Age Restriction

The jetbaz platform is strictly intended for adults aged 21 years and above. We do not knowingly collect, process, or retain personal data from individuals under the age of 21. Age verification is a mandatory step in the registration process and may be reinforced by documentary KYC checks at any time.

If we discover or are notified that personal data has been collected from a person who is under 21 years of age, we will take immediate steps to delete that data and close the associated Account. If you believe that a minor has registered an Account on the jetbaz platform, please contact our support team immediately at the email address in Section 11.

11. Contact and Privacy Requests

For any questions, concerns, or formal requests relating to this Privacy Policy or your personal data held by jetbaz, please contact our Data Privacy team using the details below. We acknowledge all privacy-related correspondence within 3 business days (Bangladesh Standard Time, BST UTC+6) and aim to provide a substantive response within 30 calendar days.

12. Changes to This Policy

jetbaz reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform features. The most current version of this Policy will always be accessible at jetbaz.bio/privacy-policy, with the effective date clearly indicated at the top of the document.

Where changes are material — for example, a new category of data being collected, a new purpose for processing, or a new third-party sharing arrangement — we will notify registered users via on-platform notification or by email to the address registered on your Account at least 7 days before the revised Policy takes effect. Your continued use of the platform after the effective date of any revised Policy constitutes your acceptance of the updated terms.