Privacy Policy — jitway Data Practices

This Privacy Policy ("Policy") describes how jitway ("we", "us", "the Platform", "jitway") collects, processes, stores, and protects the personal data of individuals ("you", "the Player", "the User") who register for and use the jitway online casino and sports betting platform available at jitway.org.

jitway is an online gaming platform designed and operated for players based in Bangladesh. We are committed to handling all personal data responsibly, transparently, and securely. This Policy is intended to give you a clear understanding of your privacy rights and our data practices so that you can make informed decisions about your use of the jitway platform.

This Privacy Policy forms an integral part of the jitway Terms and Conditions. By registering an account on jitway, you confirm that you have read and understood this Privacy Policy and that you consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you must discontinue your use of the jitway platform.

We reserve the right to update this Policy periodically to reflect changes in our data practices, applicable law, or platform features. The most current version is always published at jitway.org/privacy-policy and is identified by the "Last Updated" date at the top of this document. Continued use of the platform after a Policy update constitutes your acceptance of the revised terms.

jitway collects personal data through several channels: directly from you during account registration and KYC verification, automatically through your use of the platform, and in limited cases from trusted third-party sources such as payment providers. The categories of data we collect are described below.

We do not collect data from social media profiles, public records aggregators, or any source that has not been explicitly identified above. If we introduce a new data collection method in the future, this Policy will be updated accordingly before that collection commences.

jitway uses the personal data we collect strictly for the purposes listed below. We do not use your data for automated decision-making that produces significant legal effects without human oversight, and we do not use your data to build profiles for sale to third-party advertisers.

• Account creation and management: Processing your registration, verifying your identity, maintaining your account, and enabling you to log in securely.
• Payment processing: Facilitating deposits and withdrawals via bKash, Nagad, Rocket, and Upay; confirming transactions; detecting and preventing fraudulent payment activity.
• KYC and AML compliance: Verifying your identity and age (18+), meeting anti-money laundering (AML) obligations, and maintaining records required by applicable law.
• Platform delivery: Serving casino games, live dealer tables, sports betting markets (including BPL and IPL cricket), slots, and all other platform features to your device.
• Bonus and promotion administration: Tracking wagering requirements, crediting eligible bonuses, and preventing bonus abuse.
• Customer support: Responding to your queries, complaints, and account requests via live chat and email.
• Security and fraud prevention: Detecting suspicious activity, preventing unauthorised account access, and investigating potential breaches of our Terms and Conditions.
• Responsible gaming: Monitoring account activity for indicators of problem gambling and administering self-exclusion, deposit limits, and cooling-off features.
• Platform improvement: Analysing aggregated, anonymised usage data to improve the platform's performance, design, and feature set.
• Legal compliance: Retaining records as required by applicable law and responding to lawful requests from competent authorities.

jitway processes your personal data on one or more of the following legal grounds, depending on the specific processing activity:

• Contractual necessity: Processing required to enter into and perform our contract with you — specifically, operating your account, processing payments, and delivering the platform services you have requested.
• Legal obligation: Processing required to comply with applicable law, including age verification, identity verification under AML regulations, and the maintenance of financial records.
• Legitimate interests: Processing carried out for purposes that are in jitway's legitimate business interests and that do not override your fundamental rights — including fraud detection, platform security, responsible gaming monitoring, and internal analytics.
• Consent: Where we rely on your consent as a legal basis (for example, for certain marketing communications), you may withdraw that consent at any time by contacting [email protected]. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

jitway does not sell, rent, or otherwise transfer your personal data to third parties for their own marketing or commercial purposes. We share your data only in the limited circumstances described below, and only to the extent necessary for the specific purpose identified.

• Payment service providers: bKash, Nagad, Rocket, and Upay receive the minimum transaction data necessary to process your deposits and withdrawals. These providers operate under their own privacy policies and are contractually bound to handle your data securely.
• Game content providers: Pragmatic Play, Evolution Gaming, Spribe, Ezugi, NetEnt, Microgaming, and other licensed studio partners may receive session identifiers and technical data necessary to deliver their games to your device. They do not receive your full identity data or financial account details.
• KYC verification partners: Where we use a third-party identity verification service to process KYC documents, that provider receives only the documentation and data necessary for the verification check and is contractually prohibited from retaining or repurposing it.
• Legal and regulatory authorities: We may disclose personal data to competent governmental or regulatory authorities where required by law, court order, or in connection with the investigation of financial crime or fraud.
• Professional advisers: Lawyers, auditors, and consultants engaged by jitway may access personal data on a strictly need-to-know basis and are bound by professional confidentiality obligations.
• Business transfers: In the event of a merger, acquisition, or sale of substantially all of jitway's assets, personal data held by jitway may be transferred to the acquiring entity, subject to equivalent privacy protections being maintained. You will be notified of any such transfer.

jitway uses cookies and similar tracking technologies to operate and improve the platform. A cookie is a small text file placed on your device by your browser when you visit jitway.org. The categories of cookies we use are described below.

You can control cookie settings through your browser preferences. Please note that disabling strictly necessary cookies will impair the functionality of the jitway platform and may prevent you from logging into your account. Disabling analytics or functional cookies will not affect your ability to play games or process transactions.

jitway retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, including any legal, regulatory, accounting, or reporting obligations. The following retention periods apply as a general guide:

• Active account data: Retained for the duration of your account relationship with jitway plus a minimum of five (5) years following account closure, to comply with AML record-keeping requirements.
• KYC documentation: Retained for a minimum of five (5) years following the date of submission or the date of account closure, whichever is later.
• Transaction and financial records: Retained for a minimum of five (5) years following the transaction date, in accordance with applicable financial record-keeping regulations.
• Betting and game history: Retained for a minimum of three (3) years following the relevant session date, used for dispute resolution, bonus tracking, and responsible gaming monitoring.
• Customer support communications: Retained for a minimum of two (2) years following the resolution of the relevant query or complaint.
• Technical and usage logs: Retained for a maximum of twelve (12) months unless extended retention is required for an active security investigation.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be linked to an identifiable individual. Where data is anonymised rather than deleted, the anonymised dataset may be retained indefinitely for statistical analysis purposes.

In addition to transport-layer encryption, jitway applies the following technical and organisational measures to protect your personal data:

• Passwords are stored using a one-way cryptographic hashing algorithm with per-user salt values; jitway staff cannot retrieve your plaintext password under any circumstances.
• Access to personal data within jitway's internal systems is restricted on a strict need-to-know basis. Staff members are granted the minimum level of data access necessary for their specific role.
• All staff with access to personal data receive mandatory training on data protection obligations and security best practices.
• jitway's infrastructure is protected by firewalls, intrusion detection systems, and continuous security monitoring. Automated alerts are triggered by anomalous access patterns.
• KYC documents are stored in an encrypted, access-controlled document management system that is segregated from the main application database.
• Regular security assessments and penetration tests are conducted to identify and remediate potential vulnerabilities.

Despite these measures, no online platform can guarantee absolute security. In the unlikely event of a data breach that poses a risk to your rights, jitway will notify affected players promptly and take all reasonable steps to contain and remediate the breach. You are also responsible for maintaining the security of your own account credentials — do not share your password with anyone, and contact [email protected] immediately if you suspect unauthorised access to your account.

As a jitway player, you hold the following rights in relation to the personal data we hold about you. To exercise any of these rights, please contact us at [email protected] with the subject line "Privacy Rights Request". We will acknowledge your request within 48 hours and respond in full within 30 calendar days.

Please note that certain rights are subject to limitations — for example, we cannot erase data that we are legally required to retain for AML or financial compliance purposes. Where a right cannot be exercised in full, we will explain the reason in our response to your request.

If jitway discovers that personal data has been collected from an individual under the age of 18, that data will be permanently deleted without delay and the associated account will be closed. Any deposits made by an underage individual will be returned to the original payment method after verification, and any winnings arising from bets placed by a minor will be forfeited.

Parents and guardians are encouraged to use parental control software to prevent minors from accessing online gambling platforms. If you are concerned about underage gambling within your household, please contact our support team — we will assist you in understanding the tools available to restrict access.

The jitway platform may contain references to, or visual branding of, third-party services such as payment providers (bKash, Nagad, Rocket, Upay) and game studios (Pragmatic Play, Evolution Gaming, Spribe, Ezugi, NetEnt, Microgaming). Where these references include a navigable link to a third-party website or application, please be aware that:

• jitway does not control the content, privacy practices, or data processing activities of any third-party website or service.
• This Privacy Policy applies only to personal data collected and processed by jitway via jitway.org. It does not apply to any data you provide directly to a third-party website or application, even if you navigate to that third-party site from a link on jitway.org.
• We encourage you to read the privacy policy of any third-party service before providing them with your personal data.

jitway reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform features. When material changes are made, we will notify registered players via the email address associated with their account at least seven (7) days before the changes take effect, unless an immediate update is required for legal or security reasons.

The updated Policy will always be published at jitway.org/privacy-policy with a revised "Last Updated" date. Your continued use of the jitway platform after the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. If you do not accept the revised Policy, you must cease using the platform and contact support to request account closure.

A record of previous versions of this Privacy Policy is available upon reasonable written request submitted to [email protected].

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data jitway holds about you, please contact our support team using the details below. All privacy-related enquiries are handled by staff who are trained in data protection obligations.

• Email: [email protected] (plain text — not a clickable link)
• Subject Line for Privacy Requests: "Privacy Rights Request" or "Data Protection Enquiry"
• Live Chat: Available directly on the jitway platform, 00:00 – 23:59 Bangladesh Standard Time (BST, UTC+6), seven days a week
• Response Time: Privacy enquiries are acknowledged within 48 hours and responded to in full within 30 calendar days