jlibet Privacy Policy

1 Categories of Personal Data

jlibet collects personal data across the following categories, depending on how you interact with the platform:

jlibet does not knowingly collect personal data from individuals under the age of 21. If we become aware that a user under the age of 21 has provided personal data, we will take immediate steps to delete that data and close the associated account.

2 Purposes of Processing

jlibet processes your personal data for the following specific and lawful purposes:

• Account Management: To create, maintain, verify, and secure your jlibet account. This includes identity verification, password management, and OTP authentication via your registered mobile number.
• Transaction Processing: To process deposits and withdrawals via bKash, Nagad, Rocket, and Upay, and to maintain accurate financial records associated with your account.
• Platform Delivery: To provide access to casino games, sports betting markets, crash games, slots, and all other jlibet platform features, and to maintain continuity of service.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, money laundering, underage gambling, account sharing, and other prohibited conduct. This includes automated risk-scoring of transactions and login behaviour.
• Responsible Gaming: To monitor gameplay patterns and identify potential signs of problem gambling, and to enforce deposit limits, cool-off periods, and self-exclusion instructions applied by the player or by jlibet.
• Legal Compliance: To comply with applicable legal and regulatory obligations, including record-keeping requirements and cooperation with competent authorities where required.
• Customer Support: To respond to queries, complaints, and disputes, and to maintain records of such communications for quality assurance purposes.
• Platform Improvement: To analyse anonymised and aggregated usage data in order to improve the jlibet platform, optimise game performance, and enhance the overall user experience.
• Service Communications: To send you transactional notifications — including deposit confirmations, withdrawal updates, and security alerts — via your registered mobile number or email address. These are not marketing messages and cannot be opted out of as they relate to your account security.

jlibet does not use your personal data for unsolicited commercial marketing without your explicit prior consent. If you have consented to receive promotional communications and wish to withdraw that consent, contact [email protected] at any time.

3 Why We Are Entitled to Process Your Data

jlibet processes your personal data on the following legal grounds:

• Contractual Necessity: Processing is necessary to fulfil the contract between you and jlibet — namely, the Terms & Conditions you accepted upon registration. Without this processing, jlibet cannot operate your account or deliver its services.
• Legal Obligation: Certain processing activities — including identity verification, transaction record-keeping, and fraud reporting — are carried out to comply with applicable laws and to respond to requests from competent legal authorities.
• Legitimate Interests: jlibet processes certain data on the basis of its legitimate business interests, including fraud prevention, platform security, and service improvement, provided those interests are not overridden by your privacy rights.
• Consent: Where jlibet processes data for purposes that are not strictly necessary for contract performance or legal compliance (such as promotional communications), we rely on your explicit consent. You may withdraw this consent at any time without affecting the lawfulness of processing that occurred before withdrawal.

4 Who We Share Data With

jlibet does not sell your personal data. We share data only in the following limited and controlled circumstances:

• Payment Processors: We share necessary financial data with mobile banking providers (bKash, Nagad, Rocket, Upay) solely for the purpose of processing your deposit and withdrawal transactions. These providers operate under their own privacy policies and terms of service.
• Game Technology Providers: Game studios and technology partners (such as Pragmatic Play, Evolution Gaming, Spribe, and similar providers) may receive anonymised session data required to deliver their games on the jlibet platform. No personally identifiable information is shared with game providers beyond what is technically necessary.
• Fraud & Risk Management: In cases where fraudulent activity, money laundering, or other prohibited conduct is suspected, jlibet may share relevant account and transaction data with specialist fraud prevention services or competent legal authorities.
• Legal Authorities: jlibet will disclose personal data to law enforcement, regulatory bodies, or courts when required to do so by a valid legal process, order, or obligation. We will notify affected users of such disclosure where legally permitted to do so.
• Internal Operations: Personal data may be accessed by jlibet's internal teams — including compliance, finance, customer support, and technical operations — strictly on a need-to-know basis and subject to internal access controls.

All third parties who receive personal data from jlibet are required to handle that data in a manner consistent with this Policy and with applicable data protection standards. jlibet does not transfer personal data to parties outside of Bangladesh's operating context without appropriate safeguards in place.

5 How Long We Keep Your Data

jlibet retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following retention guidelines:

• Active Accounts: Personal data associated with an active jlibet account is retained for the full duration of the account's active status, plus a minimum period following account closure as required by applicable record-keeping obligations.
• Closed Accounts: Following account closure — whether player-initiated or jlibet-initiated — core identity and transaction records are retained for a minimum period of five (5) years. This retention period supports fraud investigation, dispute resolution, and legal compliance obligations.
• Self-Excluded Accounts: Where an account is closed via the self-exclusion tool, identity data is retained for the duration of the exclusion period plus the standard post-closure retention period, to prevent the player from circumventing their self-exclusion by re-registering.
• Support Communications: Customer support records are retained for a minimum of two (2) years from the date of the last interaction, to support ongoing dispute resolution and quality assurance.
• Gameplay Data: Game logs and betting history are retained for a minimum of three (3) years, consistent with dispute resolution and responsible gaming monitoring requirements.
• Anonymous Analytics Data: Aggregated, anonymised platform analytics data that cannot be linked to any individual is retained indefinitely for platform improvement purposes.

When the applicable retention period expires, jlibet will securely delete or anonymise the relevant personal data. You may request early deletion of your data by contacting [email protected], subject to jlibet's legal obligation to retain certain records for regulatory compliance purposes.

6 How jlibet Uses Cookies

jlibet uses first-party cookies and browser local storage to support the operation of the platform. The following categories of cookies are used:

• Session Cookies: Strictly necessary cookies that maintain your authenticated login session while you are actively using jlibet. These are deleted automatically when you close your browser or log out.
• Preference Cookies: Cookies that remember your platform preferences — such as your chosen display settings — to improve your experience on subsequent visits. These expire after 30 days.
• Security Cookies: Cookies used to support fraud detection, CSRF protection, and other security mechanisms. These are strictly necessary and cannot be disabled without impairing account security.
• Analytics Cookies: First-party analytics cookies that collect anonymised data on page load times, navigation patterns, and feature usage. This data is aggregated and cannot be used to identify individual users. No third-party analytics vendors receive personal data via these cookies.

jlibet does not use third-party advertising cookies, retargeting pixels, social media tracking scripts, or any cross-site tracking technology. You may manage cookie preferences through your browser settings. Please note that disabling session or security cookies will prevent jlibet from functioning correctly.

7 Rights Available to You

As a jlibet account holder, you have the following rights with respect to your personal data. To exercise any of these rights, contact [email protected] with a clear written request. We will acknowledge your request within 5 business days (Bangladesh Standard Time, UTC+6) and aim to resolve it within 30 calendar days.

• Right of Access: You may request a copy of the personal data that jlibet holds about you, along with information about the purposes for which it is processed.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Identity data corrections may require supporting documentation.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to jlibet's legal retention obligations. We cannot delete data that we are legally required to retain.
• Right to Restriction: You may request that jlibet restrict the processing of your personal data in certain circumstances — for example, while a rectification request is being reviewed.
• Right to Object: Where jlibet processes your data on the basis of legitimate interests, you have the right to object to that processing. jlibet will assess the objection and cease processing unless compelling legitimate grounds override your interests.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of any processing carried out prior to the withdrawal.

jlibet will never discriminate against you for exercising any of these rights. Exercising a data rights request will not affect your ability to use the platform, except where the exercise of a right (such as a deletion request) necessitates account closure.

8 How We Protect Your Data

jlibet implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure:

• SSL/TLS Encryption: All data transmitted between your device and jlibet's servers is encrypted using SSL/TLS protocols. This applies to every page of the platform, including login, registration, and transaction pages.
• Access Controls: Access to personal data within jlibet's internal systems is restricted on a strict need-to-know basis. Staff with access to personal data are subject to confidentiality obligations.
• OTP Authentication: Account login and sensitive account changes require one-time password (OTP) verification via your registered mobile number, providing an additional layer of security beyond your password.
• Fraud Monitoring: jlibet's automated risk systems continuously monitor account activity for unusual patterns that may indicate unauthorised access or fraudulent behaviour. Suspicious activity triggers immediate review and, where appropriate, temporary account suspension pending investigation.
• Secure Storage: Personal data is stored on secured servers with restricted physical and logical access. Financial data is handled in accordance with applicable standards for mobile banking integrations.

While jlibet takes all reasonable steps to protect your personal data, no digital system is entirely immune to security risks. You are responsible for maintaining the security of your own account credentials. If you suspect that your jlibet account has been accessed without your authorisation, contact [email protected] immediately.

9 Policy Updates

jlibet reserves the right to update or amend this Privacy Policy at any time. When material changes are made, the "Last Updated" date at the top of this page will be revised accordingly. We recommend reviewing this page periodically to stay informed of how jlibet handles your personal data.

Where a change to this Policy significantly affects the way jlibet processes your personal data — particularly where it relates to a change in the legal basis for processing or a new category of data sharing — jlibet will take reasonable steps to notify affected users via their registered mobile number or email address prior to the change taking effect.

Your continued use of the jlibet platform following publication of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not accept the revised Policy, you should cease using the platform and contact [email protected] to request account closure and data deletion in accordance with Section 7.