Privacy Policy — jata365 Data Commitment

1. Information We Collect

jata365 collects personal data through multiple channels in the course of providing its online casino and sports betting services to players in Bangladesh. The categories of personal information we collect are described below.

1.1 Registration Data

When you create a player account on jata365, we collect the information you voluntarily provide during the registration process. This includes your full legal name, date of birth, residential address (including city — for example, Dhaka, Chittagong, Sylhet, Khulna, or Rajshahi), email address, and a valid Bangladeshi mobile phone number. This information is required to create and administer your account.

1.2 Identity Verification (KYC) Data

In fulfilment of our Know Your Customer (KYC) obligations, jata365 may request copies of government-issued identification documents (such as your National Identity Card or passport), proof of residential address (such as a utility bill or bank statement), and proof of ownership of the payment method you use. These documents are processed by our verification team and, where applicable, by authorised third-party KYC service providers operating under confidentiality agreements.

1.3 Financial Transaction Data

jata365 records details of all financial transactions conducted through your account, including deposit amounts, withdrawal requests, payment methods used (such as bKash, Nagad, Rocket, Upay, or bank transfer), transaction timestamps, and transaction reference numbers. We retain this data to fulfil our financial record-keeping obligations and to resolve any payment disputes that may arise.

1.4 Gameplay and Betting Activity Data

We collect a comprehensive record of your gaming activity on the jata365 platform, including the games you play, betting amounts, game outcomes, session durations, and bonus redemption history. This data is used for account management, responsible gaming monitoring, and to detect unusual patterns that may indicate fraudulent activity or problem gambling behaviour.

1.5 Technical and Device Data

When you access jata365, our servers automatically record certain technical information about your connection. This includes your IP address, browser type and version, operating system, device type (mobile, tablet, or desktop), screen resolution, time zone (Bangladesh Standard Time, UTC+6), referring URL, pages visited, and session duration. This information is collected automatically and is used primarily for security, fraud prevention, and platform performance optimisation.

1.6 Communications Data

When you contact jata365's customer support team — whether via live chat, email, or any other available channel — we retain records of those communications, including the content of messages, timestamps, and the nature of your enquiry or complaint. This data allows us to provide consistent and accountable customer service.

2. How We Use Your Data

jata365 processes your personal data for specific, legitimate purposes. The table below summarises the primary purposes for which we use your data and the legal basis on which we rely for each processing activity.

jata365 does not use your personal data for automated decision-making that produces legal or similarly significant effects without human review. Where automated systems flag an account for review (for example, for suspected fraud or bonus abuse), a qualified member of our team will manually review the case before any action is taken.

3. Data Sharing & Disclosure

jata365 does not sell, rent, lease, or otherwise transfer your personal data to third parties for their own commercial purposes. We may share your data only in the specific, limited circumstances described below.

3.1 Service Providers and Data Processors

We engage trusted third-party service providers to assist in delivering the jata365 platform. These providers may process your personal data on our behalf and are contractually bound to handle it securely and only for the specific purposes we define. Categories of service providers include:

• Payment processors — bKash, Nagad, Rocket, Upay, and banking partners for processing deposits and withdrawals in Bangladeshi Taka (BDT)
• KYC and identity verification providers — for verifying the authenticity of identity documents submitted during account verification
• Game providers — Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, Hacksaw Gaming, Red Tiger, and Play'n GO receive session data necessary to operate and certify their respective games
• Cloud infrastructure and hosting providers — for secure data storage and platform delivery
• Customer support software providers — for managing and archiving support interactions
• Analytics providers — receiving anonymised or aggregated usage data only, never personally identifiable information

3.2 Legal and Regulatory Disclosure

jata365 may disclose personal data to competent legal authorities, regulatory bodies, law enforcement agencies, or courts where we are required to do so by applicable law, court order, or binding regulatory directive. In such cases, we will disclose only the minimum data necessary to satisfy the legal requirement and, where permissible, will notify the affected player that a disclosure has been made.

3.3 Business Transfers

In the event that jata365 undergoes a corporate restructuring, merger, acquisition, or sale of assets, your personal data may be transferred to the acquiring entity as part of that transaction. Any such transfer will be subject to the same privacy protections described in this Policy, and affected players will be notified of any change in the identity of the data controller in advance of the transfer taking effect.

4. Cookies & Tracking

jata365 uses cookies and similar technologies (such as local storage and session tokens) to ensure the proper functioning of the platform, maintain your login session, and gather anonymised analytics data to improve the user experience for players across Bangladesh.

4.1 Types of Cookies We Use

jata365 does not use third-party advertising cookies or cross-site tracking technologies. Our analytics data is processed in aggregate form and cannot be used to identify individual players.

4.2 Managing Cookies

You may manage or disable cookies through your browser's settings. Please note that disabling essential session cookies will prevent you from logging in to your jata365 account and will impair the basic functionality of the platform. Disabling analytics cookies will not affect your ability to use the platform but will reduce our ability to identify and fix performance issues. For guidance on managing cookies in your specific browser, refer to your browser's official help documentation.

5. Data Security

jata365 implements a layered security architecture designed to protect personal data against unauthorised access, disclosure, alteration, and destruction. Our security measures include the following:

• Transport security: All data transmitted between your device and jata365 servers is encrypted using TLS 1.2 or higher with 256-bit encryption keys.
• Access controls: Access to systems containing personal data is restricted to authorised personnel on a strict need-to-know basis, enforced through role-based access control (RBAC) and multi-factor authentication (MFA) requirements for all administrative accounts.
• Data at rest: Personal data stored on jata365 servers is encrypted at rest using industry-standard encryption algorithms.
• Intrusion detection: Our infrastructure is monitored continuously for signs of unauthorised access, unusual traffic patterns, and potential security incidents. Automated alerting systems notify our security team of anomalies in real time.
• Penetration testing: jata365 conducts periodic security assessments and penetration tests to identify and remediate potential vulnerabilities in the platform before they can be exploited.
• Staff training: All jata365 personnel with access to personal data are trained on data protection obligations and security best practices.

While jata365 takes all reasonable technical and organisational measures to protect your data, no internet-based platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your account password and for logging out of your account when using shared or public devices. If you suspect that your account credentials have been compromised, contact us immediately at support@jata365.

6. Data Retention

jata365 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by applicable law or regulatory obligation. The following retention schedule summarises our standard approach:

Upon expiry of the applicable retention period, personal data is securely deleted from our systems or irreversibly anonymised so that it can no longer be linked to an individual player. Where data is retained in anonymised form beyond these periods, it cannot be used to identify you and does not constitute personal data for the purposes of this Policy.

7. Your Privacy Rights

As a player registered with jata365, you hold the following rights in relation to your personal data. To exercise any of these rights, submit a written request to our support team at support@jata365 with sufficient information to identify your account. We will respond to all verified requests within thirty (30) days.

• Right of Access: You have the right to request confirmation of whether jata365 holds personal data about you, and to receive a copy of that data along with information about how it is being processed.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Please note that corrections to KYC-verified data may require submission of updated documentation.
• Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn your consent (in cases where consent is the legal basis), or where you object to processing and there is no overriding legitimate interest. This right is subject to our legal retention obligations — for example, financial transaction records must be retained for a defined period regardless of an erasure request.
• Right to Restriction: You may request that jata365 restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data you have contested is being verified.
• Right to Object: Where jata365 relies on legitimate interest as the legal basis for processing your data, you have the right to object to that processing. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (for example, for marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.
• Right to Data Portability: You may request that jata365 provide your personal data in a structured, commonly used, machine-readable format so that you can transfer it to another service provider, where technically feasible.

8. Contact & Complaints

If you have any questions, concerns, or requests relating to this Privacy Policy or the way jata365 handles your personal data, please contact our dedicated support team using the details below.

jata365 takes all privacy complaints seriously. Upon receiving a complaint, we will acknowledge it promptly and conduct a thorough internal review. You will receive a substantive written response outlining our findings and any remedial action taken within thirty (30) days of the complaint being received.

If you are not satisfied with the outcome of our internal complaints process, you retain the right to escalate your complaint to any competent data protection authority or consumer protection body in your jurisdiction. jata365 will cooperate fully with any such authority in the investigation of a complaint.