Privacy Policy — jitaache

When you register an account or use any service on jitaache, we collect personal data in the following categories. The table below summarises each data type, its source, and the primary reason it is collected.

We collect this data through direct interactions (when you fill in registration forms or contact our support team), automated technologies (cookies and server logs that operate as you browse jitaache), and third-party sources such as identity verification providers and payment processors that confirm the legitimacy of your account and transactions.

jitaache processes your personal data only where we have a lawful basis to do so. The following outlines each purpose for which we use your data and the corresponding legal basis:

• Account creation and management: To register your account, verify your identity, and provide ongoing access to the jitaache platform. Legal basis: performance of a contract with you.
• Payment processing: To handle deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, Mastercard, and Dutch-Bangla Bank in BDT, and to maintain accurate transaction records. Legal basis: performance of a contract; compliance with financial record-keeping obligations.
• Fraud prevention and security: To monitor account activity for signs of fraud, money laundering, identity theft, bonus abuse, or other prohibited conduct as defined in our Terms & Conditions. Legal basis: legitimate interests; legal obligation.
• Age and identity verification: To confirm that every jitaache player is at least 18 years of age before allowing real-money play. Legal basis: legal obligation; protection of vulnerable persons.
• Responsible gaming monitoring: To track gambling patterns and proactively identify players who may be showing signs of problem gambling, and to enforce deposit limits, time-out periods, and self-exclusion requests. Legal basis: legal obligation; legitimate interests.
• Customer support: To respond to your enquiries, resolve disputes, and maintain records of support interactions for quality assurance and compliance purposes. Legal basis: performance of a contract; legitimate interests.
• Marketing and promotions: To send you personalised bonus offers, cricket betting previews (including BPL and IPL updates), and promotional communications — but only where you have given explicit consent or where we have a legitimate interest in contacting existing customers. You may opt out of marketing communications at any time by contacting support@jitaache (plain text).
• Service improvement: To analyse aggregated usage data and improve the design, performance, and game selection of the jitaache platform. Legal basis: legitimate interests.

We do not use automated decision-making processes (including profiling) that produce legal or similarly significant effects on you without providing an opportunity for human review. Where algorithmic tools are used in fraud or responsible gaming monitoring, a trained member of our compliance team reviews any outcome before action is taken against your account.

jitaache does not sell or lease your personal data to any third party. We share data only in the following limited and necessary circumstances:

• Payment processors: Financial data is shared with payment service providers (including bKash, Nagad, Rocket, Upay, Visa, and Mastercard networks) solely to process your deposit and withdrawal transactions. These providers operate under strict data security and confidentiality agreements.
• Identity verification providers: Where KYC (Know Your Customer) verification is required, we share the minimum necessary identity documents with our authorised verification partner. Verification providers are contractually prohibited from using your data for any purpose other than the verification service.
• Game software providers: Certain technical data (such as session tokens and game-round identifiers) is shared with game providers including Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, and Spribe solely to enable the delivery and integrity of their games. No identifiable personal data beyond what is technically required is shared with these providers.
• Regulatory and legal authorities: We may disclose your personal data to law enforcement agencies, financial intelligence units, or other regulatory bodies where required by applicable law, a court order, or to protect the rights and safety of jitaache, its employees, or other players.
• Anti-fraud networks: Anonymised or pseudonymised risk signals may be shared within industry-standard anti-fraud networks to protect jitaache and its players from known fraud patterns. Identifiable personal data is not shared in this context.

jitaache uses cookies and similar tracking technologies to ensure the platform functions correctly, to improve your experience, and to support our security and analytics operations. The following types of cookies are in use on the jitaache platform:

Strictly necessary cookies are deployed automatically as they are essential for the jitaache platform to function. All other cookie categories are deployed only with your consent. You may manage your cookie preferences through your browser settings at any time. Disabling non-essential cookies will not prevent you from accessing the core betting and casino services on jitaache, but may affect certain personalisation features.

jitaache does not use third-party advertising cookies or tracking pixels that profile you for retargeting campaigns on external websites. Our analytics are performed using first-party data only.

jitaache retains your personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal or regulatory obligations. The following general retention periods apply:

• Active account data: Retained for the full duration of your account's active status on jitaache, plus a minimum of five years following account closure, in accordance with financial record-keeping requirements.
• Transaction records: Deposit, withdrawal, and betting transaction records are retained for a minimum of five years following the date of each transaction to comply with anti-money laundering obligations.
• Identity verification documents: KYC documents (including national ID copies) are retained for five years following account closure. Original documents are deleted thereafter; anonymised compliance records may be retained for a further period as required by law.
• Support communications: Live chat transcripts and email correspondence are retained for three years from the date of the most recent interaction, after which they are securely deleted.
• Technical and usage data: Server logs and session data are retained for a maximum of 13 months, after which they are automatically purged or anonymised.
• Marketing consent records: Records of your marketing opt-in or opt-out preferences are retained for as long as your account is active, and for three years following account closure, in case of future disputes.

When your personal data is no longer required, jitaache deletes it securely using industry-standard data destruction methods. Data held in backups is purged in line with our scheduled backup rotation cycles, which do not exceed the retention periods stated above.

Protecting the personal and financial data of jitaache players is a core operational priority. We maintain a layered security infrastructure that includes both technical and organisational measures:

• 256-bit SSL/TLS encryption: All data in transit between your device and jitaache servers is encrypted using industry-standard TLS 1.2 or higher. Our SSL certificate is maintained and renewed continuously to ensure uninterrupted protection.
• Encrypted data at rest: Sensitive personal data stored in our databases — including identity documents, financial details, and password hashes — is encrypted at rest using AES-256 encryption standards.
• Password security: User passwords are never stored in plain text on jitaache systems. All passwords are processed through a one-way cryptographic hashing function with a unique salt before storage. This means that even in a hypothetical data breach scenario, your actual password cannot be recovered from stored data.
• Access controls: Access to personal data within jitaache's internal systems is granted on a strict need-to-know basis. Staff members are assigned the minimum level of data access required to perform their specific role. All internal data access events are logged and audited.
• Two-factor authentication (2FA): We strongly encourage all jitaache players to enable 2FA on their accounts. Our staff accounts also require 2FA for all system access as a mandatory security control.
• Security monitoring: Our systems are monitored continuously for unusual access patterns, failed login attempts, and other indicators of potential compromise. Security incidents are escalated to our technical team within minutes of detection.

While jitaache takes all reasonable technical and organisational precautions to safeguard your data, no internet-based service can guarantee absolute security. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, we will notify affected players without undue delay and provide guidance on the steps you should take to protect yourself.

As a jitaache player, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, please contact our support team via live chat or by writing to support@jitaache (plain text — not a clickable link).

• Right of access: You have the right to request a copy of all personal data jitaache holds about you. We will provide this in a structured, readable format within 30 days of receiving your verified request, free of charge for the first request in any 12-month period.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it promptly. You may update basic contact details directly through your account settings at any time.
• Right to erasure ("right to be forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you withdraw your consent and no other legal basis applies. Note that certain data must be retained for legal compliance reasons (see Data Retention above) and cannot be deleted on request during the applicable retention period.
• Right to restriction of processing: You have the right to request that we pause the processing of your personal data in certain circumstances — for example, while a dispute about data accuracy is being resolved.
• Right to data portability: You may request that we provide your personal data in a machine-readable format so that you can transfer it to another service provider where technically feasible.
• Right to object: You have the right to object at any time to processing of your data for direct marketing purposes. Upon receiving such a request, we will cease all marketing communications immediately. You may also object to other forms of processing based on legitimate interests, subject to our demonstrating compelling grounds that override your interests.
• Right to withdraw consent: Where data processing is based on your consent (for example, marketing emails), you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

If you have any questions, concerns, or requests related to this Privacy Policy or the way jitaache handles your personal data, please contact our Data Protection team using the following details:

• Email: support@jitaache (plain text — not a clickable link). Please use the subject line "Privacy Request" to ensure your message reaches the correct team member.
• Live Chat: Available 24/7 via the live chat function on the jitaache platform. Our agents can escalate privacy requests to the Data Protection team on your behalf.
• Response time: We aim to acknowledge all privacy-related enquiries within 4 business hours during Bangladesh Standard Time (BST, UTC+6) working hours, and to provide a substantive response within 14 business days.

Policy updates: jitaache reserves the right to amend this Privacy Policy at any time. When material changes are made — for example, changes to the categories of data we collect, new third-party sharing arrangements, or changes to your rights — we will notify registered players via the email address on their account or through a prominent notice on the jitaache website. The effective date at the top of this page will always reflect the most recent revision.

Your continued use of jitaache following notification of a Privacy Policy update constitutes your acknowledgement of the revised policy. If you do not agree with the updated terms, you should cease using the platform and may request account closure in accordance with our Terms & Conditions.

This Privacy Policy should be read alongside our Terms & Conditions and our Responsible Gaming Policy, both of which contain additional provisions relevant to how we manage your account and your data on jitaache. Our FAQ page also contains plain-language answers to common questions about data, payments, and account security.