jea9 Privacy Policy — How We Collect, Use, and Protect Your Personal Data

1. Introduction

jea9 is committed to protecting the privacy and personal data of every player who uses its English-language online casino and sports betting platform. This Privacy Policy has been drafted in formal English and applies to all jea9 users, including registered players, prospective players who browse the platform without registering, and individuals who contact jea9 support.

This Policy should be read together with jea9's Terms & Conditions, which are incorporated by reference. Defined terms not defined in this Policy carry the meanings given to them in the Terms & Conditions. Where there is any conflict between this Privacy Policy and the Terms & Conditions in respect of data processing matters, this Privacy Policy shall take precedence.

jea9 takes its data protection responsibilities seriously. The platform processes personal data in a manner that is lawful, fair, transparent, accurate, and limited to what is necessary. Data is kept only for as long as required and is protected by appropriate technical and organisational security measures at all times.

2. Data Controller

For the purposes of applicable data protection law, the data controller responsible for personal data collected through the jea9 platform at https://jea9.io is the jea9 operating entity. Players with questions about how jea9 processes their personal data, or who wish to exercise any of the rights described in Section 12 of this Policy, may contact jea9's data protection point of contact using the details set out in Section 16.

3. Data We Collect

The categories of personal data that jea9 may collect and process about you include, but are not limited to, those set out in the table below.

Category	Examples	Purpose
Identity Data	Full legal name, date of birth, nationality, National ID card number, passport number	Account registration, age verification (21+), KYC compliance
Contact Data	Email address, mobile phone number, residential address (including city — Dhaka, Chittagong, Sylhet, etc.)	Account communication, support, verification, fraud prevention
Financial Data	Payment method type (bKash, Nagad, Rocket, Upay, Visa, Mastercard), transaction amounts in BDT (৳), transaction timestamps	Deposit and withdrawal processing, AML compliance, financial record-keeping
Account & Gaming Data	Username, account balance, betting history, game session logs, bonus activity, win/loss records	Platform operation, responsible gaming monitoring, dispute resolution
Technical Data	IP address, device type, browser type and version, operating system, device fingerprint	Security, fraud detection, multi-account prevention, platform optimisation
Usage Data	Pages visited, links clicked, session duration, referral source	Platform analytics, service improvement, responsible gaming pattern detection
Communications Data	Support chat transcripts, email correspondence, feedback submissions	Customer support, quality assurance, compliance auditing
Verification Documents	Copies of National ID, passport, utility bills, bank statements submitted for KYC	Identity verification, AML compliance, fraud prevention

4. How We Collect Your Data

jea9 collects personal data through the following channels:

4.1 Directly from You

The majority of personal data jea9 holds is provided directly by you when you register an account, complete identity verification, make a deposit or withdrawal, contact jea9 support, participate in a promotion, or submit any form on the jea9 platform. You are under no obligation to provide personal data to jea9, but failure to provide data required for registration or verification will prevent jea9 from operating your account.

4.2 Automatically During Platform Use

When you access the jea9 platform — whether via a desktop browser, mobile browser, or the jea9 mobile application — certain technical and usage data is collected automatically. This includes your IP address, device identifiers, browser configuration, operating system details, and behavioural interaction data such as pages visited and session durations. This data is collected via server logs, cookies, and similar tracking technologies as described in Section 9 of this Policy.

4.3 From Third-Party Service Providers

jea9 may receive personal data about you from third parties in specific circumstances, including: identity verification and KYC service providers who confirm the authenticity of documents you submit; payment processors (such as bKash, Nagad, and Rocket) who confirm transaction status; and fraud detection services that flag suspicious activity patterns. Data received from these sources is used only for the purposes for which it was obtained and is handled in accordance with this Policy.

5. How We Use Your Data

jea9 uses the personal data it collects for the following specific purposes:

• Account management: Creating, maintaining, and securing your jea9 player account, including processing your registration, verifying your identity, and managing your account settings.
• Payment processing: Facilitating deposits and withdrawals via your chosen payment method (bKash, Nagad, Rocket, Upay, Visa, Mastercard), verifying payment ownership, and maintaining accurate financial records.
• Service delivery: Providing access to the jea9 game catalogue, live betting markets, and all other platform features that constitute the jea9 service.
• Customer support: Responding to your enquiries, resolving disputes, handling complaints, and maintaining support interaction records for quality assurance.
• Legal and regulatory compliance: Meeting anti-money laundering (AML) obligations, fraud prevention requirements, responsible gaming mandates, and any other applicable legal or regulatory obligations.
• Responsible gaming: Monitoring gaming patterns to identify indicators of problem gambling, enforcing deposit limits and self-exclusion requests, and fulfilling the responsible gaming obligations described in jea9's Responsible Gaming policy.
• Security and fraud prevention: Detecting and preventing unauthorised account access, multi-accounting, bonus abuse, payment fraud, collusion, and other prohibited conduct as defined in the Terms & Conditions.
• Platform improvement: Analysing aggregated, anonymised usage data to understand how players interact with jea9 and to improve the design, performance, and features of the platform.
• Communications: Sending transactional emails (account confirmations, deposit receipts, withdrawal notifications, security alerts) and, where you have consented, promotional communications about jea9 offers and products.

6. Legal Basis for Processing

jea9 processes personal data only where a valid legal basis exists. The primary legal bases on which jea9 relies are as follows:

• Contract performance: Processing necessary to register your account, process transactions, and deliver the jea9 service in accordance with the Terms & Conditions you have accepted.
• Legal obligation: Processing required to comply with applicable anti-money laundering laws, financial record-keeping requirements, age verification obligations, and other mandatory legal or regulatory duties.
• Legitimate interests: Processing for jea9's legitimate business interests, including fraud prevention, platform security, multi-account detection, and service improvement, where those interests are not overridden by your fundamental rights and interests.
• Consent: Where jea9 relies on your consent as a legal basis — for example, for sending promotional email communications — you have the right to withdraw that consent at any time by contacting support or updating your communication preferences in Account Settings. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

7. Data Sharing

jea9 does not sell, rent, or trade your personal data to any third party for commercial purposes. jea9 may share your personal data with the following categories of recipients, strictly on a need-to-know basis and only to the extent necessary for the relevant purpose:

7.1 Identity Verification Providers

To fulfil its age verification (21+) and KYC obligations, jea9 may share identity data (name, date of birth, document scans) with certified third-party identity verification service providers. These providers process data only on jea9's instructions and are contractually bound to maintain the confidentiality and security of the data they handle.

7.2 Payment Processors

Financial data necessary to process your deposits and withdrawals is shared with the relevant payment provider — such as bKash, Nagad, Rocket, Upay, or the card payment network (Visa, Mastercard) — in accordance with the payment provider's own terms of service and privacy policy. jea9 does not store full card numbers or mobile banking PINs on its own servers.

7.3 Game Providers

Third-party game studios (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) may receive limited technical identifiers (such as a pseudonymous player session token) required to load and operate their games within the jea9 environment. These providers do not receive your full identity or financial data.

7.4 Fraud Prevention and Security Services

jea9 may share technical data (IP addresses, device fingerprints, behavioural signals) with fraud detection and cybersecurity service providers to protect the platform and its players from unauthorised access, financial crime, and prohibited conduct.

7.5 Legal and Regulatory Authorities

jea9 may disclose personal data to law enforcement agencies, regulatory bodies, financial intelligence units, or courts where required to do so by applicable law, a court order, or a mandatory regulatory request. jea9 will notify affected players of such disclosures where legally permitted to do so.

8. Payment Data

Payment data is among the most sensitive categories of personal information that jea9 handles. jea9 applies the following specific protections to financial data:

• All deposit and withdrawal transactions are processed over TLS-encrypted connections.
• jea9 records transaction metadata (method, amount in ৳, timestamp, status) for financial record-keeping and AML purposes but does not store full mobile banking account numbers, card numbers, CVV codes, or mobile banking PINs.
• Payment method verification — confirming that a payment method is registered in the account holder's own name — may involve sharing limited identity data with the relevant payment provider solely for verification purposes.
• Withdrawal requests are subject to anti-money laundering checks. In accordance with AML best practices, jea9 applies a policy of returning funds to the same payment method used for the originating deposit wherever possible.

9. Cookies and Tracking Technologies

jea9 uses cookies and similar tracking technologies (such as local storage and session tokens) on its platform. Cookies are small data files stored on your device that help jea9 deliver a secure, functional, and personalised experience.

9.1 Types of Cookies Used

• Strictly necessary cookies: Essential for the platform to function. These include session authentication cookies, security tokens, and load-balancing cookies. These cookies cannot be disabled without impairing platform functionality.
• Functional cookies: Remember your preferences (such as language and display settings) to personalise your experience across sessions.
• Analytics cookies: Collect anonymised or pseudonymised data about how players navigate the jea9 platform, which pages are most visited, and where technical errors occur. This data is used to improve platform performance and user experience.
• Fraud prevention cookies: Support device fingerprinting and session integrity verification to detect and prevent unauthorised access and multi-accounting.

9.2 Managing Cookies

You may manage or disable non-essential cookies through your browser settings. Please note that disabling strictly necessary cookies will impair your ability to log in and use the jea9 platform. Detailed instructions for managing cookies in commonly used browsers are available in each browser's help documentation. jea9 does not currently respond to "Do Not Track" browser signals, as no universally accepted standard for such signals has been established.

10. Data Retention

jea9 retains personal data for no longer than is necessary for the purposes for which it was collected, subject to any legal, regulatory, or contractual obligations that require longer retention periods. The following general retention guidelines apply:

• Active account data: Retained for the duration of the player's account and for a period of five (5) years following account closure, to meet financial record-keeping and AML requirements.
• Transaction records: Retained for a minimum of five (5) years from the date of the transaction, in accordance with standard financial compliance requirements.
• Identity verification documents: Retained for a minimum of five (5) years following account closure, or longer if required by applicable AML regulations.
• Support communications: Retained for two (2) years from the date of the last interaction, for quality assurance and dispute resolution purposes.
• Technical and usage logs: Retained for up to twelve (12) months for security and fraud detection purposes, after which they are deleted or anonymised.

Where personal data is no longer required, jea9 will securely delete or anonymise the data so that it can no longer be attributed to an identified individual.

11. Data Security

jea9 implements appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Key security measures include:

• TLS 1.3 encryption for all data in transit between player devices and jea9 servers.
• Encryption of sensitive data at rest, including identity verification documents.
• Password hashing using industry-standard one-way cryptographic algorithms. jea9 never stores passwords in plain text.
• Role-based access controls ensuring that jea9 staff can only access personal data to the extent required for their specific role.
• Regular security assessments and penetration testing of platform infrastructure.
• Multi-factor authentication for jea9 administrative systems that have access to player data.

In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of affected players, jea9 will take prompt steps to contain the breach and, where required by applicable law, will notify affected individuals without undue delay.

12. Your Data Rights

As a jea9 player, you have the following rights in relation to the personal data jea9 holds about you. To exercise any of these rights, please contact the jea9 support team using the details in Section 16. jea9 will respond to all valid data rights requests within a reasonable period, and in any event within 30 days of receipt.

• Right of access: You may request a copy of the personal data jea9 holds about you, together with information about how it is processed.
• Right to rectification: You may request that jea9 correct any inaccurate or incomplete personal data held about you. Minor corrections (such as updating your contact number or address) can be made directly within Account Settings.
• Right to erasure: You may request that jea9 delete your personal data. This right is subject to exceptions where jea9 is required by law to retain the data (for example, financial transaction records retained for AML compliance).
• Right to restriction: You may request that jea9 restrict processing of your personal data in certain circumstances, for example while the accuracy of data is being contested.
• Right to data portability: Where jea9 processes your personal data on the basis of your consent or for the performance of a contract, you may request that the data be provided to you in a structured, commonly used, and machine-readable format.
• Right to object: You may object to jea9's processing of your personal data where that processing is based on legitimate interests. You may also opt out of receiving promotional communications at any time by contacting support or adjusting your communication preferences in Account Settings.
• Right to withdraw consent: Where jea9 processes data on the basis of your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

13. Minors

The jea9 platform is strictly intended for persons aged 21 and above. jea9 does not knowingly collect personal data from individuals under the age of 21. If jea9 becomes aware that personal data has been collected from a person under the age of 21, that account will be immediately closed, the relevant data deleted, and any deposited funds returned in accordance with applicable law.

14. International Data Transfers

jea9 may transfer personal data to servers, service providers, or partner organisations located outside of Bangladesh. Where such transfers occur, jea9 takes appropriate steps to ensure that the transferred data is afforded a level of protection equivalent to that which would apply in Bangladesh, including through the use of contractual safeguards with the relevant third parties.

By using the jea9 platform and accepting this Privacy Policy, you consent to the transfer of your personal data in accordance with this Section.

15. Changes to This Privacy Policy

jea9 reserves the right to update or modify this Privacy Policy at any time to reflect changes in applicable law, platform functionality, or data processing practices. When material changes are made to this Policy, jea9 will notify registered players via the email address associated with their account prior to the changes taking effect. A visible notice will also be displayed on the jea9 platform for a minimum of 14 days following any material update.

The "Last Updated" date displayed at the top of this document reflects the date of the most recent revision. Players are encouraged to review this Policy periodically. Continued use of the jea9 platform following the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms.

16. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way jea9 processes your personal data, please contact the jea9 data protection point of contact using the details below. All privacy-related enquiries will be acknowledged promptly and responded to within 30 days. jea9's support team is available 24 hours a day, 7 days a week, in Bangladesh Standard Time (BST, UTC+6).

Email: [email protected]

Support hours: 24/7, 365 days a year (BST, UTC+6)

Please note that the email address above is displayed as plain text only and is not a clickable link. Please copy the address manually into your email client when contacting jea9.