Privacy Policy — How ja99 Handles Your Personal Data
ja99 is committed to protecting the privacy and personal data of every player on our platform. This Privacy Policy explains what data we collect, why we collect it, how we use and store it, and what rights you hold over that data. We operate in accordance with internationally recognised data protection principles.
Our Privacy Commitments at a Glance
The following cards summarise ja99's core commitments to your privacy. These highlights are provided for convenience — the complete and legally binding policy is set out in the sections below. Players are expected to read the full policy.
ja99 does not sell, rent, or trade your personal data to any third party for their independent marketing or commercial purposes. Data shared with third parties is limited to service providers essential to platform operation — payment processors, identity verification providers, game software suppliers — and is governed by strict data processing agreements.
All data transmitted between your device and ja99.vip is protected by TLS/SSL encryption. This includes account credentials, payment information, personal identification details, and all session activity. Data at rest in ja99 systems is stored using industry-standard encryption protocols with access restricted on a strict need-to-know basis.
You have the right to request access to the personal data ja99 holds about you, to request corrections to inaccurate data, and to request deletion of your data subject to legal and regulatory obligations. Data access requests are handled within 30 days of receipt. Contact [email protected] with any data rights request.
ja99 does not store full bKash, Nagad, Rocket, or bank account credentials on our servers. Payment transactions are processed directly through the APIs of each payment provider. ja99 retains only the minimum transactional data required for account reconciliation, fraud prevention, and regulatory compliance purposes.
ja99 uses cookies and similar technologies for session management, platform security, and analytics. We do not use third-party advertising cookies or behavioural tracking cookies for ad targeting. The cookies section of this policy explains each category of cookie used on ja99.vip, its purpose, and its retention period.
ja99 does not knowingly collect or process personal data from persons under 18 years of age. All account registrations require a date of birth declaration confirming the player is 18 or older, and KYC verification procedures are used to confirm age where required. If underage data collection is discovered, the data is deleted immediately and the associated account is closed.
Information We Collect
Data Minimisation Principle: ja99 only collects personal data that is necessary for the specific purpose for which it is collected. We do not collect personal data in excess of what is required to operate the platform, process transactions, verify identity, and comply with applicable legal obligations.
1.1 Registration and Account Data
When you create a ja99 account, we collect the following information: your chosen username; a valid email address or mobile phone number; a date of birth (used to verify that you are aged 18 or above); your full legal name as provided during KYC verification; your residential address; and, where applicable, a government-issued identification number from your national identity card (NID) or passport. This data is collected for the purposes of account creation, identity verification, fraud prevention, and regulatory compliance.
1.2 Payment and Transaction Data
When you make a deposit or withdrawal on ja99, we collect transactional records including: the payment method used (e.g., bKash, Nagad, Rocket, Upay, SureCash, or bank transfer); the transaction reference number issued by the payment provider; the transaction amount in Bangladeshi Taka (BDT); the date and time of the transaction; and the account balance before and after each transaction. As stated above, ja99 does not store full payment credentials — only the minimum transactional metadata required for reconciliation and compliance.
1.3 KYC and Identity Verification Data
To comply with identity verification and anti-money laundering obligations, ja99 may collect copies of identity documents including your national identity card (NID), passport, or other government-issued photo identification; a selfie or facial image used for identity matching; and proof of address documentation such as a utility bill or bank statement. This data is handled with the highest level of security and is retained only for as long as required by applicable obligations.
1.4 Usage and Behavioural Data
ja99 automatically collects certain technical and behavioural data when you use the platform, including: your IP address and approximate geographic location derived from it; the type of device, operating system, and browser you use to access the platform; the pages you visit on ja99.vip and the duration of each visit; game sessions played, bets placed, and features used; session start and end times; and referring URLs. This data is used for platform security, fraud detection, responsible gaming monitoring, and improving the user experience.
1.5 Communications Data
When you contact ja99 customer support, submit a complaint, or correspond with us by any means, we retain a record of that communication including the content of messages, the channel used (live chat, email), and the date and time. This data is used for quality assurance, dispute resolution, and training purposes.
| Data Category | Examples | Primary Purpose |
|---|---|---|
| Account Data | Username, email, phone, date of birth | Account creation, authentication |
| Identity Verification | NID, passport, selfie, proof of address | KYC compliance, age verification |
| Payment Data | Transaction ID, method, amount, timestamp | Transaction processing, AML monitoring |
| Usage Data | IP address, device type, pages visited, game sessions | Security, fraud detection, UX improvement |
| Communications Data | Support chat logs, email correspondence | Dispute resolution, quality assurance |
How We Use Your Data
2.1 Platform Operation and Account Management
The primary use of the personal data collected by ja99 is to operate and maintain the platform. This includes creating and managing your account; processing deposits and withdrawals via bKash, Nagad, Rocket, and other supported payment methods; providing access to games, betting markets, and other platform features; maintaining your account balance and transaction history; and delivering platform notifications such as account confirmations, security alerts, and withdrawal processing updates.
2.2 Identity Verification and Fraud Prevention
ja99 uses personal data — particularly KYC documentation, device data, IP addresses, and behavioural patterns — to verify the identity of players, confirm age eligibility, detect and prevent fraud, identify suspicious transaction patterns, and protect the platform against money laundering, bonus abuse, and multi-accounting. This processing is necessary both for platform integrity and to fulfil our legal obligations.
2.3 Responsible Gaming Monitoring
ja99 uses account usage data, game session history, deposit frequency, and wagering patterns to monitor for signs of problem gambling behaviour. Where patterns consistent with harmful gambling are identified, ja99 may take proactive steps including delivering responsible gaming messages, applying account limits, or contacting the player directly. This processing is carried out in the legitimate interest of player welfare and is a core component of ja99's responsible gaming commitment.
2.4 Legal and Regulatory Compliance
ja99 processes personal data to the extent required to comply with applicable legal obligations. This includes retaining transaction records and identity verification data for minimum periods required under anti-money laundering best practices; responding to lawful requests from competent authorities; and maintaining audit trails of platform activity for compliance and dispute resolution purposes. Processing for legal compliance purposes continues even where you have requested deletion of your data, to the extent required by law.
2.5 Customer Support and Dispute Resolution
Personal data including account information, transaction history, communications records, and game session logs may be accessed by ja99 customer support staff for the purpose of resolving your support queries, investigating complaints, and settling disputes about bet outcomes, bonus terms, or account status. Support staff access to personal data is governed by internal access control policies and is limited to the minimum necessary for the specific support task.
2.6 Platform Improvement and Analytics
ja99 uses aggregated and anonymised usage data to analyse platform performance, identify technical issues, understand player preferences, and improve the overall user experience. Where analytics tools are used for this purpose, they are configured to operate on anonymised or pseudonymised data sets. ja99 does not use individual player data for A/B testing or feature development without appropriate safeguards.
2.7 Marketing Communications
With your consent, ja99 may send you promotional communications about new games, seasonal offers, bonus promotions, and platform features by email or SMS. You may withdraw your consent to receive marketing communications at any time by updating your communication preferences in your account settings or by contacting [email protected]. Withdrawal of marketing consent does not affect your right to receive service-related communications such as transaction confirmations and security alerts, which are sent on the basis of contractual necessity rather than consent.
Data Sharing and Disclosure
No Sale of Data: ja99 does not sell your personal data to third parties under any circumstances. Data is shared only with service providers who are essential to platform operation, and only under contractual obligations that restrict their use of your data to the specified service purpose.
3.1 Payment Service Providers
To process deposits and withdrawals, ja99 shares necessary transactional data with payment service providers including bKash, Nagad, Rocket, Upay, SureCash, and supported Bangladeshi bank networks including Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, and Sonali Bank. The data shared is limited to what is necessary to execute the specific transaction. Each payment provider operates under its own privacy policy, which we encourage you to review.
3.2 Identity Verification Providers
Where automated identity verification is used as part of the KYC process, ja99 may share identification documents and facial images with third-party identity verification service providers. These providers are engaged under data processing agreements that prohibit them from using your data for any purpose other than the specific verification task requested by ja99.
3.3 Game Software Providers
Games available on ja99 are supplied by third-party providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. When you play a game supplied by one of these providers, technical session data — including your anonymous player identifier, game session parameters, and bet and win amounts — may be transmitted to that provider's systems for game integrity and RTP audit purposes. Your full personal identity is not shared with game providers.
3.4 Legal and Regulatory Disclosure
ja99 may disclose your personal data to competent authorities, law enforcement agencies, or regulatory bodies where required to do so by applicable law, court order, or lawful regulatory demand. ja99 will notify you of such disclosure where legally permitted to do so. ja99 may also share data with external legal advisers or auditors where necessary for the purposes of legal proceedings, regulatory investigations, or compliance audits.
3.5 Business Transfers
In the event that ja99 undergoes a merger, acquisition, corporate restructuring, or sale of all or part of its assets, personal data held by ja99 may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and of any material changes to this Privacy Policy that may result from it.
Data Retention
5.1 Retention Principles
ja99 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. When data is no longer needed and no legal retention obligation applies, it is securely deleted or anonymised so that it can no longer be associated with an identifiable individual.
5.2 Account Data Retention
Personal data associated with your ja99 account is retained for the duration of your account's active status and for a period of five years following permanent account closure. This retention period is maintained to fulfil anti-money laundering record-keeping obligations and to allow for the resolution of any post-closure disputes or regulatory enquiries. After the five-year period, account data is permanently deleted unless an active legal hold is in place.
5.3 Transaction Records
Financial transaction records — including deposit and withdrawal records, bet histories, and bonus transaction logs — are retained for a minimum of five years from the date of each transaction. This retention period reflects best-practice anti-money laundering record-keeping standards. Transaction records may be retained for longer periods where required by specific legal obligations or ongoing dispute proceedings.
5.4 KYC Documentation
Identity verification documents submitted as part of the KYC process are retained for a minimum of five years from the date of submission or from the date of account closure, whichever is later. KYC documents are stored in encrypted form with access restricted to compliance and verification staff only.
5.5 Communications and Support Records
Customer support communications, complaint records, and dispute correspondence are retained for a period of three years from the date of the last communication in each case. This retention period allows for the resolution of delayed formal complaints and serves as an audit trail for customer service quality purposes.
Data Security Measures
6.1 Technical Security Controls
ja99 implements a range of technical security measures to protect personal data against unauthorised access, loss, alteration, or disclosure. These measures include: TLS/SSL encryption for all data in transit between your device and ja99.vip; AES-256 encryption for sensitive data stored on ja99 systems; firewalls, intrusion detection systems, and automated threat monitoring; regular security vulnerability assessments and penetration testing of platform infrastructure; and access control systems that restrict employee and contractor access to personal data on a strict need-to-know basis.
6.2 Organisational Security Controls
In addition to technical measures, ja99 maintains organisational controls for data security including: mandatory data privacy and security training for all staff with access to personal data; confidentiality obligations in contracts with all employees, contractors, and third-party service providers; a documented data breach response procedure; and regular review and audit of data access logs to detect anomalous activity.
6.3 Data Breach Response
In the event of a personal data breach that poses a risk to the rights and freedoms of affected players, ja99 will take immediate steps to contain the breach, assess its scope and impact, and notify affected players without undue delay. Notification will be provided by email to the registered account address and will include: a description of the nature of the breach; the categories and approximate number of records affected; the likely consequences of the breach; and the steps ja99 has taken or proposes to take to address it.
6.4 Your Responsibilities
While ja99 takes extensive measures to protect your data on our systems, you are also responsible for maintaining the security of your account. You should use a strong, unique password for your ja99 account and change it periodically; enable two-factor authentication where available; not share your login credentials with any third party; and log out of your account when accessing the platform from a shared or public device. ja99 cannot be held responsible for data breaches that result from your failure to maintain appropriate credential security.
Your Privacy Rights
Exercising Your Rights: To exercise any of the data rights described in this section, contact us at [email protected] with the subject line "Data Rights Request". Please include your registered username and a brief description of your request. ja99 will respond within 30 calendar days of receiving a complete and valid request.
7.1 Right to Access
You have the right to request a copy of the personal data ja99 holds about you. Upon receipt of a valid access request, ja99 will provide a summary of the personal data categories held, the purposes for which each category is processed, and, where feasible, a copy of the specific data records. Access requests are fulfilled within 30 calendar days. Where a request is manifestly unfounded or excessive, ja99 reserves the right to charge a reasonable administrative fee or decline to comply, with written reasons provided.
7.2 Right to Rectification
If you believe that any personal data ja99 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. Minor account details such as contact email and phone number can be updated directly in your account settings. For corrections to identity-verified data such as your legal name or date of birth, you must submit a rectification request to [email protected] along with supporting documentary evidence.
7.3 Right to Erasure
You may request deletion of your personal data from ja99 systems. Erasure requests will be fulfilled for data that is no longer necessary for the purpose for which it was collected, where you have withdrawn consent and no other legal basis for processing exists, or where the data has been processed unlawfully. Erasure requests cannot be fulfilled for data that ja99 is legally required to retain — including transaction records and KYC documentation subject to anti-money laundering retention obligations. In such cases, ja99 will explain the specific retention obligation that prevents deletion.
7.4 Right to Restriction of Processing
You have the right to request that ja99 restrict the processing of your personal data in certain circumstances — for example, where you contest the accuracy of the data, where processing is unlawful but you prefer restriction to erasure, or where ja99 no longer needs the data but you require it for legal proceedings. Where processing is restricted, ja99 will continue to store the data but will not actively process it except for storage, legal proceedings, or protection of the rights of other persons.
7.5 Right to Withdraw Consent
Where ja99 processes your data on the basis of your consent — for example, for marketing communications — you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing conducted prior to withdrawal. You may withdraw marketing consent at any time through your account communication preferences or by contacting [email protected].
Privacy Contact and Updates
8.1 How to Contact Us About Privacy
For any questions, concerns, or requests relating to this Privacy Policy or to the personal data ja99 holds about you, please contact our support team by email at [email protected] with the subject line "Privacy Enquiry". We aim to acknowledge all privacy-related contacts within two business days and to provide a substantive response within 30 calendar days. For complex requests, we may require additional time to respond, and we will notify you of any extension within the initial 30-day period.
8.2 Updates to This Privacy Policy
ja99 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform features. The effective date at the top of this document reflects the date of the most recent revision. Where updates materially affect how your personal data is processed, ja99 will provide notice via on-platform notification or by email to your registered address prior to the changes taking effect. Your continued use of the ja99 platform following the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms.
8.3 Third-Party Websites
ja99.vip does not contain links to third-party websites. This Privacy Policy applies solely to the ja99.vip platform and the personal data collected and processed by ja99 in connection with it. ja99 is not responsible for the data practices of any payment provider, game software supplier, or other third party whose services you may access in connection with your use of ja99, and we encourage you to review the privacy policies of those providers independently.
8.4 Children's Privacy
ja99 is an adult platform intended exclusively for players aged 18 and above. We do not knowingly collect, process, or retain personal data from persons under 18 years of age. If you are a parent or guardian and have reason to believe that a minor has provided personal data to ja99, please contact [email protected] immediately. Upon verification of the concern, ja99 will delete the relevant data and close the associated account without delay.
Any Questions About Your Privacy?
If you have questions about how ja99 handles your personal data, our FAQ page covers the most common player queries. You can also review our Terms and Conditions or visit the Responsible Gaming page to learn more about how we support safe play. Players must be 18 years of age or older. Please play responsibly.