Privacy Policy — How ju99 Collects, Uses, and Protects Your Data

1 Introduction

This Privacy Policy ("Policy") applies to all users ("You", "Player", "User") of the ju99 website and associated mobile browser interface (collectively the "Platform"). It describes how ju99 ("We", "Us", "Our") collects, uses, stores, shares, and protects personal data in connection with the provision of online sports betting, live casino, slot games, crash games, and all other services offered on the Platform.

By creating a ju99 account or by continuing to use the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and use of your information as described herein. This Policy should be read alongside our Terms & Conditions, which govern the overall use of the Platform.

ju99 serves players located in Bangladesh. All references to data protection obligations are made in the spirit of internationally recognised data privacy best practices. We are committed to handling your personal information with transparency, integrity, and care.

2 Data We Collect

ju99 collects the following categories of personal data in the course of providing its services:

2.1 Identity & Contact Data

• Full legal name as it appears on your government-issued identification
• Date of birth (for age verification — players must be 21 or older)
• Mobile phone number registered in Bangladesh
• Email address (where provided at registration)
• Residential address or city of residence (Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, or other)

2.2 Account Data

• Username and hashed (never plain-text) password
• Account creation date and timestamp
• Preferred language and communication preferences
• Self-exclusion status and responsible gaming settings

2.3 Financial Data

• Mobile financial service account identifiers (bKash, Nagad, Rocket, Upay numbers) used for deposits and withdrawals — stored in masked form
• Bank account identifiers (where bank transfer is used) — stored in masked form
• Transaction history: deposit amounts, withdrawal amounts, dates, and reference IDs
• Current account balance and bonus balance history

ju99 does not store full card numbers, CVV codes, or full mobile banking PINs at any time.

2.4 Verification Documents

• Copies of government-issued photo identification (National ID Card, passport, or driving licence) submitted during KYC verification
• Selfie photographs where requested for identity confirmation
• Proof-of-payment-method documents (account screenshots or statements)

2.5 Betting & Gaming Activity Data

• Bet history: markets selected, stake amounts, odds accepted, outcomes, and timestamps
• Casino and slot game session logs: games played, bet sizes, session duration, wins and losses
• Bonus claims and wagering progress records

2.6 Technical & Device Data

• IP address at the time of login and betting activity
• Device type, operating system, and browser information
• Session timestamps, page navigation paths, and feature interactions
• Geolocation data (country/region level, derived from IP) for fraud prevention purposes

2.7 Communications Data

• Records of live chat conversations and email exchanges with the ju99 support team
• Any information you voluntarily provide in the course of raising a complaint or dispute

3 How We Collect Your Data

ju99 collects personal data through the following means:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact support, or participate in promotions.
• Automatically — through server logs, session cookies, and technical tracking mechanisms as you interact with the Platform (see Section 7 for full cookie details).
• From payment providers — bKash, Nagad, Rocket, Upay, and bank partners confirm transaction status and account ownership details during payment processing. ju99 receives only the minimum data required to verify and complete the transaction.
• From identity verification services — where third-party document verification services are engaged to validate the authenticity of identification documents submitted during KYC, those services return a pass/fail result and any flagged discrepancies. Raw document data is processed solely within that service's secure environment.
• From fraud prevention systems — automated risk-scoring tools may cross-reference technical signals (IP address, device fingerprint) against known fraud patterns. No profiling that produces legal effects is carried out solely by automated means without human review.

4 How We Use Your Data

The personal data collected by ju99 is used for the following specific purposes:

Purpose	Data Categories Used
Account registration and management	Identity, contact, account data
Age and identity verification (KYC)	Identity data, verification documents
Processing deposits and withdrawals	Financial data, identity data
Providing betting and gaming services	Account data, betting activity data
Fraud prevention and security monitoring	Technical data, financial data, identity data
Responsible gaming monitoring and tools	Betting activity data, account data
Customer support and dispute resolution	Communications data, account data, transaction data
Promotional communications (opt-in only)	Contact data, betting activity data
Platform analytics and improvement	Technical data (anonymised or aggregated)
Legal and regulatory compliance	All categories where required by law

5 Legal Basis for Processing

ju99 processes personal data on the following lawful grounds, depending on the specific activity:

• Contractual necessity: Processing required to fulfil the account agreement — including identity verification, payment processing, and delivering betting and gaming services — is necessary to perform the contract between you and ju99.
• Legitimate interests: Fraud prevention, security monitoring, platform analytics, and responsible gaming oversight are pursued as legitimate interests of ju99 and its player community, provided these interests are not overridden by your data protection rights.
• Legal obligation: Anti-money-laundering checks, record-keeping for financial audit purposes, and responding to lawful requests from competent authorities are carried out in compliance with applicable legal obligations.
• Consent: Marketing communications and any non-essential cookies are processed only where you have given clear, freely withdrawable consent.

6 Data Sharing & Disclosure

ju99 does not sell, rent, or trade your personal data. We share data only in the following limited and controlled circumstances:

6.1 Service Providers

ju99 engages trusted third-party service providers who process data on our behalf, strictly under data processing agreements that prohibit them from using the data for any purpose other than the specific service they provide. These include:

• Payment processors — bKash, Nagad, Rocket, Upay, and banking partners, solely to complete deposit and withdrawal transactions
• Game providers — Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, Spribe, and others, who receive the minimum session data necessary to deliver their game content
• Identity verification services — engaged for KYC document processing
• Cloud infrastructure providers — for secure data storage and platform hosting
• Fraud detection services — for real-time risk assessment of transactions and login events

6.2 Legal Disclosures

ju99 may disclose personal data where required by applicable law, court order, or a lawful request from a competent governmental or regulatory authority. In such cases, ju99 will disclose only the minimum data necessary to satisfy the legal obligation and, where legally permitted, will notify you of the disclosure.

6.3 Business Transfers

In the event that ju99 undergoes a merger, acquisition, or sale of all or a portion of its assets, your personal data may be transferred to the successor entity as part of that transaction. You will be notified in advance of any such transfer and of any resulting changes to this Privacy Policy.

7 Cookies & Tracking Technologies

The ju99 Platform uses cookies and similar tracking technologies to ensure the site functions correctly, to keep your session secure, and to understand how players interact with the Platform so we can improve the experience.

7.1 Types of Cookies Used

• Essential cookies: Required for the Platform to function. These include session authentication tokens, CSRF protection cookies, and load-balancing identifiers. They cannot be disabled without breaking core site functionality.
• Functional cookies: Remember your preferences such as language settings and notification preferences across sessions.
• Analytics cookies: Collect anonymised or aggregated data about how pages are visited, which features are used, and where errors occur. This data is used only to improve Platform performance — it is not tied to individual player identities.
• Security cookies: Help detect and prevent fraudulent login attempts and suspicious activity patterns.

7.2 Managing Cookies

You may configure your browser to block or delete cookies. Please be aware that disabling essential cookies will prevent you from logging in to your ju99 account and using the Platform. Instructions for managing cookies are available in your browser's help documentation. ju99 does not currently use third-party advertising cookies or cross-site tracking pixels.

8 Data Security

ju99 implements a layered security framework to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our measures include:

• Encryption in transit: All data exchanged between your browser and the ju99 Platform is protected using TLS 1.2 or higher (256-bit encryption).
• Encryption at rest: Sensitive personal and financial data stored in our databases is encrypted at rest using industry-standard algorithms.
• Access controls: Internal access to personal data is restricted on a strict need-to-know basis. Staff with data access privileges are subject to confidentiality obligations and regular security training.
• Password hashing: Account passwords are never stored in plain text. They are hashed using a modern, salted cryptographic algorithm before storage.
• Regular security audits: The ju99 Platform and its infrastructure undergo periodic security reviews and vulnerability assessments.
• Incident response: In the event of a data breach that poses a risk to your rights, ju99 will take immediate containment steps and notify affected players within 72 hours of becoming aware of the breach, where feasible.

9 Data Retention

ju99 retains personal data only for as long as is necessary for the purposes described in this Policy, and in any event no longer than required by applicable legal, audit, or regulatory obligations. The following retention guidelines apply:

• Active account data: Retained for the duration of your account's active status.
• Post-closure account data: Following account closure, basic identity and transaction records are retained for a minimum of five (5) years for anti-money-laundering audit purposes, after which they are securely deleted or anonymised.
• KYC documents: Retained for a minimum of five (5) years from the date of verification or account closure, whichever is later.
• Betting and gaming logs: Retained for two (2) years post-closure for dispute resolution and responsible gaming monitoring purposes.
• Support communications: Retained for two (2) years from the date of the conversation to support quality assurance and dispute review.
• Technical and device data: Anonymised or deleted within twelve (12) months of collection unless retained as part of a fraud investigation.

Upon expiry of the applicable retention period, data is either permanently deleted from our systems or irreversibly anonymised such that it can no longer be linked to any individual.

10 Your Data Rights

As a ju99 player, you have the following rights in relation to your personal data. To exercise any of these rights, please contact our support team via live chat or at the email address listed in Section 14.

ju99 will respond to all valid data rights requests within 10 business days. We may need to verify your identity before actioning a request to ensure we do not disclose or modify another person's data inadvertently.

11 Children's Privacy

The ju99 Platform is strictly intended for adults aged 21 years and over. ju99 does not knowingly collect personal data from individuals under the age of 21. If you believe that a person under 21 has created a ju99 account or provided us with personal data, please contact us immediately at the email address in Section 14. Upon confirmation, we will suspend the relevant account and securely delete all associated personal data without undue delay.

ju99 employs age-verification checks at registration and during KYC processing specifically to prevent underage access to the Platform. Parental control software is also recommended for households where minors may have access to internet-connected devices.

12 Third-Party Links

The ju99 Platform may contain references to third-party game providers (such as Pragmatic Play, Evolution Gaming, or Spribe) whose software interfaces operate within the Platform environment. While ju99 vets all game providers under strict contractual data-processing terms, each provider operates its own internal privacy practices for data generated within its game engine.

ju99 is not responsible for the privacy practices of third-party service providers beyond the scope of the data processing agreements in place. We encourage you to review the privacy policies of any third-party service you interact with directly outside of the ju99 Platform environment.

13 Policy Updates

ju99 may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or the services we offer. When material changes are made, we will notify registered players by displaying a prominent notice on the Platform or, where appropriate, via direct communication to your registered contact details.

The "Last Updated" date at the top of this page will always reflect the most recent revision. Your continued use of the Platform following the effective date of any updated Policy constitutes your acceptance of the revised terms. If you do not agree with a revised Policy, you should close your account before the updated version takes effect.

14 Contact Us

If you have any questions about this Privacy Policy, wish to exercise a data right, or want to report a privacy concern, please contact the ju99 data support team through the following channels:

• Live Chat: Available 24/7 from within your logged-in ju99 account — average response time under 3 minutes
• Email: [email protected] — please include "Privacy Request" in your subject line and your registered mobile number for faster identification

ju99 aims to acknowledge all privacy-related enquiries within 24 hours and to provide a substantive response or resolution within 10 business days. For complex data subject access requests involving large volumes of historical data, we may require up to 20 business days, and will inform you of the extended timeline promptly.