jetwin Privacy Policy

This Privacy Policy sets out the basis on which jetwin ("we", "us", "our", "the Platform") collects and processes personal data from individuals ("you", "the Player", "the User") who access or use the jetwin platform at jetwin.today, including all games, features, promotions, and support services available thereon.

This policy applies to all personal data processed in connection with your use of the jetwin platform, regardless of whether you are a registered player with an active account, a visitor browsing the site without an account, or a former player whose account has been closed. It covers data collected through the website itself, through communications you send us (including support emails), and through the payment processing services used for deposits and withdrawals.

jetwin is committed to handling your personal data responsibly, transparently, and in accordance with applicable data protection principles. We process your data only for specific, legitimate purposes and retain it only for as long as is necessary for those purposes or as required by law.

This Privacy Policy should be read alongside our Terms & Conditions and our Responsible Gaming policy, both of which are incorporated by reference. In the event of any conflict between those documents and this Privacy Policy on matters of data processing, this Privacy Policy takes precedence.

For the purposes of applicable data protection law, jetwin is the data controller in respect of all personal data collected from players and visitors through the jetwin.today platform. As data controller, jetwin determines the purposes and means of processing your personal data and bears responsibility for ensuring that processing is carried out lawfully, fairly, and transparently.

If you have any questions about how your personal data is handled, or if you wish to exercise any of your rights described in Section 11 of this policy, you may contact our data protection team at the following address:

jetwin collects different categories of personal data depending on how you interact with the platform. The table below summarises the main categories, the specific data items within each category, and the context in which they are collected.

We do not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, biometric data, or health data unless this is specifically required for responsible gaming assessment purposes and you have provided explicit consent for such processing.

jetwin collects your personal data through the following channels and mechanisms:

• Direct Submission: Data you voluntarily provide when registering an account, updating your profile, completing the KYC verification process, submitting a deposit or withdrawal request, or contacting our support team by email or live chat.
• Automated Technical Collection: Data collected automatically when you visit the jetwin website, including your IP address, browser fingerprint, device identifiers, session duration, pages visited, and click-path data. This is collected via server logs, first-party cookies, and similar technologies — see Section 7 for details.
• Payment Processors: Confirmation data returned by bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank when processing your transactions. This data is limited to transaction identifiers, amounts, timestamps, and status codes. jetwin does not receive or store full mobile banking PINs or full bank account passwords.
• Game Providers: Game outcome, session, and RTP data provided by our third-party game studio partners (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) in connection with game rounds you play on the jetwin platform.
• Fraud Prevention Services: Risk score data and flagging information from third-party fraud detection and anti-money-laundering screening tools used to protect the integrity of the platform and comply with applicable obligations.
• Publicly Available Sources: In limited circumstances, we may supplement our records with information from publicly available databases for identity verification or fraud prevention purposes.

Every instance of personal data processing at jetwin is conducted on one of the following recognised lawful bases. We process data only where a valid lawful basis exists, and we record the applicable basis for each processing activity in our internal data register.

• Contract Performance: Processing that is necessary to provide the services described in our Terms & Conditions — including account registration, bet settlement, deposit and withdrawal processing, and customer support. Without this processing, we cannot deliver the services you have contracted us for.
• Legal Obligation: Processing required to comply with applicable legal and regulatory obligations, including Know Your Customer (KYC) identity verification, anti-money-laundering (AML) record-keeping, and fraud reporting requirements.
• Legitimate Interests: Processing carried out for purposes that serve a legitimate operational interest of jetwin where those interests are not overridden by your rights and freedoms. This includes fraud prevention, platform security monitoring, responsible gaming risk assessments, and internal analytics used to improve our services.
• Consent: Processing carried out on the basis of your freely given, specific, and informed consent — primarily in the context of marketing communications (promotional emails, SMS offers). You may withdraw consent at any time without affecting the lawfulness of prior processing.

jetwin uses personal data for the following specific purposes. Where a purpose involves multiple data categories, the relevant categories are noted.

• Account Creation and Management: To register your account, verify your identity and age (18+ requirement), maintain your account settings, and process account closure requests. Uses Identity, Contact, and KYC data.
• Service Delivery: To process your deposits and withdrawals, settle bets, credit winnings, apply bonuses, and provide access to all games and features on the platform. Uses Financial, Account Activity, and Technical data.
• Customer Support: To respond to your enquiries, investigate complaints, resolve disputes, and provide assistance with account issues. Uses Identity, Contact, Communication, and Account Activity data.
• KYC and AML Compliance: To verify your identity and age, screen against relevant sanctions lists, monitor transactions for suspicious patterns, and report to competent authorities where required by applicable law. Uses Identity, Financial, and KYC Document data.
• Fraud Prevention and Security: To detect and prevent fraudulent activity, unauthorised account access, collusion, and exploitation of platform vulnerabilities. Uses Technical, Financial, and Account Activity data.
• Responsible Gaming: To honour deposit limits, session reminders, cooling-off periods, and self-exclusion requests you have set; to monitor for indicators of problem gambling behaviour and take appropriate action. Uses Account Activity and Responsible Gaming data.
• Platform Improvement: To analyse aggregate usage patterns, identify technical issues, and improve the functionality, performance, and content of the platform. This analysis uses anonymised or pseudonymised data wherever possible.
• Marketing (with consent only): To send you promotional emails, SMS notifications about bonuses, new games, and seasonal offers relevant to Bangladeshi players — such as Eid specials, Victory Day promotions, and BPL cricket season offers. Uses Contact and Marketing Preference data. Only sent to players who have opted in.

jetwin uses first-party cookies and similar tracking technologies to operate and improve the platform. We do not use third-party advertising cookies or behavioural profiling cookies for the purpose of serving targeted advertisements on external websites.

The following categories of cookies are used on the jetwin platform:

• Strictly Necessary Cookies: These are required for the platform to function. They maintain your login session, store your account preferences, and enable core security features including CSRF protection and session token management. These cookies cannot be disabled without breaking core functionality.
• Performance and Analytics Cookies: These collect anonymised data about how players navigate the platform — which pages are visited most, where users encounter errors, and how long sessions last. This data is used to improve platform performance and user experience. No personally identifiable information is included in analytics data.
• Functional Cookies: These remember your preferences such as game display settings, notification preferences, and language/currency choices to provide a more personalised experience during subsequent visits.
• Security Cookies: Short-lived cookies used to support our login anomaly detection system, which identifies logins from unrecognised devices or locations. These cookies are essential to protecting your account from unauthorised access.

Most browsers allow you to view, manage, and delete cookies through their settings panels. Please be aware that disabling strictly necessary cookies will prevent you from logging in to your jetwin account and using the platform's services. Disabling other cookie categories will not affect your ability to use core platform features.

Your personal data may be shared with the following categories of third parties:

• Payment Service Providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank, for the purpose of processing your deposit and withdrawal transactions. These providers act as independent data controllers in respect of the data they handle under their own terms and privacy policies.
• Game Content Providers: Licensed game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi, who supply the game software and record game rounds in which you participate. Their data handling is governed by their own privacy policies.
• KYC and Identity Verification Services: Third-party providers who assist with document verification and identity authentication as part of our KYC process. These providers process your identity documents on our behalf and are contractually bound to handle them only for this purpose.
• Fraud and AML Screening Services: Providers of transaction monitoring, sanctions screening, and fraud detection tools. These services process limited transactional and identity data to flag potentially suspicious activity.
• IT and Infrastructure Providers: Cloud hosting, server management, and cybersecurity service providers who maintain the technical infrastructure on which the jetwin platform operates. These providers act as data processors under binding data processing agreements and may not use your data for any purpose other than providing the contracted services to jetwin.
• Legal and Regulatory Authorities: Where required by applicable law, court order, or regulatory instruction, jetwin may disclose personal data to competent authorities. We will notify you of such disclosure where legally permitted to do so.

All third-party processors with whom jetwin shares personal data are required to implement appropriate technical and organisational security measures and to process data only in accordance with jetwin's documented instructions.

jetwin retains personal data for the periods set out below. Retention periods are determined by reference to the purpose for which the data was collected, contractual requirements, and applicable legal obligations. At the end of the applicable retention period, data is securely deleted or irreversibly anonymised.

Where data is retained for legal compliance purposes after account closure, it is held in restricted-access archival storage and is not used for any active processing purposes such as marketing or profiling.

jetwin implements a multi-layered security framework designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security programme includes the following measures:

• Transport Security: All data transmitted between your browser and our servers is protected by TLS 1.2 or higher encryption. Our platform enforces HTTPS on all pages and uses HTTP Strict Transport Security (HSTS) headers to prevent protocol downgrade attacks.
• Data Encryption at Rest: Sensitive personal and financial data stored in our databases is encrypted at rest using AES-256 encryption. Encryption keys are managed through a dedicated key management system with strict access controls.
• Access Controls: Access to personal data within jetwin's systems is restricted on a need-to-know basis. Staff are granted the minimum level of access required for their role, and all access to sensitive data is logged and subject to periodic review.
• Authentication Security: Player accounts are protected by password hashing using industry-standard one-way hashing algorithms. Two-step verification via OTP is available to all players and is mandatory for certain high-value account actions.
• Intrusion Detection: Our infrastructure is monitored 24/7 for anomalous activity, unauthorised access attempts, and indicators of compromise. Automated alerts escalate potential incidents to our security team for immediate investigation.
• Third-Party Security Assessments: Key platform components and third-party integrations are subject to periodic security assessments to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: In the event of a personal data breach that poses a risk to your rights and freedoms, jetwin will notify affected players promptly and take immediate remedial action in accordance with our documented incident response procedures.

While we take all reasonable measures to protect your data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your account password and for notifying us immediately if you suspect unauthorised access to your account.

As a player on the jetwin platform, you have the following rights in relation to your personal data. These rights may be subject to certain limitations where legal retention obligations or legitimate fraud prevention interests apply, but we will always explain the basis for any limitation clearly when responding to your request.

To exercise any of the above rights, please contact us at [email protected] with the subject line "Data Rights Request — [Your Username]". We will acknowledge your request within 5 business days and provide a full response within 30 calendar days. We may need to verify your identity before processing your request in order to protect your data from unauthorised disclosure.

jetwin takes the protection of minors seriously. Age verification is a mandatory step in our account registration and KYC process. If jetwin becomes aware that personal data has been collected from a person under the age of 18, we will take immediate steps to delete that data and close the associated account. Any deposits associated with an underage account will be refunded to the payment source, and any bets placed will be voided.

If you are a parent or guardian and believe that a minor in your care has created an account or submitted data to jetwin, please contact us immediately at [email protected] so that we can investigate and take appropriate action without delay.

jetwin sends promotional communications — including bonus offers, new game announcements, seasonal promotions, and platform news — only to players who have explicitly opted in to receive them during registration or through their account settings. We do not send unsolicited marketing communications to players who have not opted in.

Marketing communications from jetwin may include:

• Promotional Email Campaigns: Bonus offers, reload promotions, free spins opportunities, and loyalty reward announcements sent to your registered email address.
• SMS Notifications: Short-form alerts about time-sensitive offers, deposit match bonuses, and account-specific promotions sent to your registered mobile number.
• Seasonal and Cultural Promotions: Special offers aligned with Bangladeshi calendar events such as Eid, Pohela Boishakh (Bengali New Year), Victory Day (16 December), Independence Day (26 March), and major cricket tournaments including the BPL and T20 World Cup.

You may opt out of all marketing communications at any time by updating your preferences in your account settings, clicking the unsubscribe link in any marketing email, or by contacting us at [email protected]. Opting out of marketing communications does not affect your ability to receive transactional communications such as deposit confirmations, withdrawal notifications, and security alerts — these are sent as part of the service contract and cannot be disabled.

jetwin does not use automated profiling for marketing segmentation in a way that produces legal or similarly significant effects for players. Segmentation used for marketing is limited to broad behavioural categories such as preferred game type, deposit frequency, and account activity level, and is used solely to ensure that the offers we send are relevant to your interests.

The jetwin platform may contain references to third-party services such as payment processors (bKash, Nagad, Rocket, Upay) and game studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi). Where your use of these services takes you to a third-party interface or platform, that third party's own privacy policy and data practices will apply to any data you submit to them.

jetwin is not responsible for the privacy practices, data security standards, or content of any third-party service. We encourage you to review the privacy policies of any third-party provider before submitting personal data to them. The inclusion of a reference to a third-party service on the jetwin platform does not constitute an endorsement of their data handling practices.

jetwin reserves the right to update or amend this Privacy Policy at any time. Changes may be made to reflect updates in applicable law, changes to our data processing activities, new features or services introduced on the platform, or improvements to the clarity and accuracy of the document.

When we make material changes to this Privacy Policy — meaning changes that meaningfully affect your rights or the way we process your data — we will notify you by:

• Displaying a prominent notice on the jetwin platform for a minimum of 14 days following the change.
• Sending an email notification to your registered email address summarising the key changes.
• Updating the "Effective Date" and "Last Updated" fields at the top of this document to reflect the date the revised policy takes effect.

Your continued use of the jetwin platform after the effective date of any amended Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with the changes, you should discontinue your use of the platform and contact us to close your account and request deletion of your personal data to the extent permitted by law.

We recommend that you review this Privacy Policy periodically to stay informed about how jetwin protects your personal data. The current version of the Privacy Policy is always available at jetwin.today/privacy-policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way jetwin handles your personal data, please do not hesitate to contact our data protection team. We are committed to addressing all privacy-related enquiries promptly and transparently.

When contacting us about a data rights request, please include your registered username, the email address associated with your account, and a brief description of your request to help us locate your records and respond as efficiently as possible. We may request additional information to verify your identity before processing sensitive data requests, in order to protect your information from unauthorised disclosure.

For responsible gaming-related data requests — such as checking or updating a self-exclusion status, reviewing deposit limit history, or requesting deletion of responsible gaming records — please use the same contact address and include "Responsible Gaming Data Request" in your subject line. These requests are treated as priority communications and actioned within 24 hours.