jatbat Privacy Policy

1.1 Information You Provide Directly

When you register a jatbat account or interact with our platform, you voluntarily provide us with certain personal information. This includes, but is not limited to:

• Identity information: Full legal name, date of birth, and gender as provided at registration.
• Contact information: Mobile phone number registered in Bangladesh, and email address if provided.
• Payment information: Mobile financial service account numbers (bKash, Nagad, Rocket, Upay) used for deposits and withdrawals. jatbat does not store full payment credentials — only the account reference necessary to process transactions.
• Identity verification documents: Copies of government-issued photo identification submitted during KYC verification, such as a National Identity Card (NID), passport, or driving licence.
• Communications: The content of messages you send to jatbat via live chat, email to [email protected], or any other support channel.
• Responsible gaming declarations: Self-exclusion requests, deposit limit preferences, and time-out instructions submitted through the platform.

1.2 Information Collected Automatically

When you access the jatbat platform — whether on desktop or mobile — certain technical information is collected automatically through your device and browser. This data is used primarily for security, fraud prevention, and platform optimisation:

• Device information: Device type, operating system version, browser type and version, and screen resolution.
• Network information: IP address, approximate geographic location derived from IP, and internet service provider.
• Usage data: Pages visited, games played, session duration, bet history, wagering patterns, and feature interaction logs.
• Session identifiers: Session tokens, authentication timestamps, and login activity logs used to maintain account security.

1.3 Information from Third-Party Sources

In certain circumstances, jatbat may receive information about you from third-party sources, including identity verification service providers used during KYC checks, fraud prevention partners, and game content providers (such as Pragmatic Play, Evolution Gaming, and Spribe) who may share gameplay event data with us as part of their service integration. Such data is used solely in the context of your jatbat account and is not used for unrelated commercial purposes.

jatbat processes your personal data for specific, legitimate purposes. We do not use your data for any purpose beyond what is described in this Privacy Policy without obtaining your prior consent. The primary purposes for which we use your personal data are as follows:

jatbat will never use your personal data to make fully automated decisions that produce significant legal effects on you without human oversight. Where automated processes are used — such as fraud scoring or responsible gaming pattern detection — a human review step is always available upon request.

3.1 Our Approach to Data Sharing

jatbat does not sell, rent, or trade your personal data to third-party advertisers, data brokers, or marketing companies. We share personal data with external parties only where strictly necessary, under enforceable confidentiality obligations, and for the specific purposes described in this section.

3.2 Categories of Third Parties

• Game content providers: Studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive anonymised session identifiers and gameplay event data to facilitate game delivery and resolve game-round disputes. These providers operate under data processing agreements with jatbat.
• Payment processors: Mobile financial service providers including bKash, Nagad, Rocket, and Upay receive transaction data necessary to execute deposits and withdrawals. These providers operate under their own privacy frameworks and are subject to Bangladesh Bank regulatory oversight.
• Identity verification partners: Third-party KYC service providers may process identity documents on our behalf to confirm player eligibility. These partners are bound by strict data handling agreements and are not permitted to use your identity data for any independent purpose.
• Fraud prevention services: We work with specialist anti-fraud technology providers who analyse behavioural patterns and device signals to protect our platform and players from fraudulent activity.
• Legal and regulatory authorities: Where required by applicable law or a valid order from a competent authority, jatbat may be obligated to disclose certain player data. We will always seek to notify you of such disclosures to the extent permitted by law.

3.3 International Data Transfers

Some of jatbat's third-party service providers are located outside Bangladesh. Where personal data is transferred internationally, jatbat ensures that appropriate safeguards are in place — including contractual clauses that require the receiving party to protect your data to a standard equivalent to that applied within Bangladesh. By using jatbat, you acknowledge that your data may be processed in this manner.

4.1 What Are Cookies?

Cookies are small text files placed on your device by a website when you visit it. They allow the website to remember information about your visit — such as your preferred settings and session state — making your next visit easier and the site more useful to you. jatbat uses cookies and similar tracking technologies (such as local storage tokens and session identifiers) across the platform.

4.2 Types of Cookies We Use

• Strictly necessary cookies: These are essential for the jatbat platform to function correctly. They maintain your login session, preserve your account settings between pages, and enable secure payment processing. These cookies cannot be disabled without breaking platform functionality.
• Performance and analytics cookies: These cookies collect anonymised information about how players use the jatbat platform — which game categories are visited most, which features generate the most engagement, and where technical errors occur. This data is used exclusively to improve platform performance and user experience.
• Functional cookies: These cookies remember your preferences such as display settings, language selection, and last-visited game category, allowing jatbat to personalise your experience across sessions.
• Security cookies: These short-lived cookies are used to detect and prevent fraudulent activity, including session hijacking, CSRF attacks, and automated bot interactions.

4.3 Managing Your Cookie Preferences

You may control non-essential cookies through your browser settings. Most modern browsers allow you to block, delete, or receive warnings before accepting cookies. Please note that disabling strictly necessary cookies will prevent certain platform features from functioning correctly, including maintaining your login session. For guidance on managing cookies in your specific browser, refer to your browser's official help documentation.

jatbat implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security framework includes:

• Transport layer security: All data transmitted between your device and the jatbat platform is encrypted using 256-bit SSL/TLS encryption, ensuring that information cannot be intercepted in transit.
• Data encryption at rest: Sensitive personal data — including identity documents and payment references — is stored in encrypted form on secured servers with strictly controlled access.
• Access controls: Access to personal data within jatbat is granted on a strict need-to-know basis. Staff members who handle personal data are subject to confidentiality obligations and receive regular data protection training.
• OTP verification: Sensitive account actions, including password changes and first-time withdrawals, require one-time password (OTP) confirmation to your registered mobile number, providing a second layer of authentication.
• Intrusion detection: jatbat operates continuous network monitoring and intrusion detection systems that identify and respond to suspicious access attempts in real time.
• Regular security audits: The jatbat platform undergoes periodic independent security assessments to identify and remediate vulnerabilities before they can be exploited.

While jatbat takes every reasonable precaution to protect your personal data, no online platform can guarantee absolute security. In the event of a data breach that poses a significant risk to your rights, jatbat will notify affected players as promptly as practicable and take immediate steps to contain the breach and mitigate its impact.

jatbat retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, and in accordance with any applicable legal retention obligations. The following general retention periods apply:

When the applicable retention period expires, jatbat will securely delete or anonymise your personal data so that it can no longer be associated with you as an individual. Anonymised, aggregated data may be retained indefinitely for statistical and platform improvement purposes without restriction.

As a player on the jatbat platform, you hold a number of rights in relation to your personal data. jatbat is committed to honouring these rights promptly and transparently. Your rights include:

• Right of access: You have the right to request a copy of the personal data that jatbat holds about you. We will provide this information within a reasonable timeframe following a verified request.
• Right to rectification: If any personal data held by jatbat is inaccurate or incomplete, you have the right to request that it be corrected. For account-level details such as your registered phone number or email address, you may be able to update these directly through your account settings.
• Right to erasure: In certain circumstances, you may request that jatbat delete your personal data. This right is subject to overriding legal obligations — for example, jatbat is required to retain financial transaction records and identity verification documents for defined periods as described in the Data Retention section above. Where deletion is not immediately possible due to such obligations, we will restrict processing of your data to the minimum necessary.
• Right to restrict processing: You may request that jatbat limits the ways in which it uses your personal data while a dispute or review is in progress.
• Right to data portability: Where data is processed on the basis of your consent or contractual necessity, you may request a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to object: You have the right to object to processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, although jatbat may demonstrate compelling grounds to continue such processing in certain circumstances.
• Right to withdraw consent: Where processing is based on your consent — such as for promotional communications — you may withdraw that consent at any time without affecting the lawfulness of processing that occurred prior to withdrawal.

To exercise any of these rights, please contact the jatbat data protection team at [email protected] with the subject line "Privacy Rights Request". We will acknowledge your request within 5 business days and aim to fulfil it within 30 days. In complex cases this period may be extended by a further 30 days, in which case we will notify you of the extension and the reason for it.

jatbat reviews this Privacy Policy on a regular basis to ensure it remains accurate, complete, and reflective of our current data processing practices. We may update this policy in response to changes in applicable law, changes in our operational practices, or improvements to platform functionality that affect how data is collected or used.

When material changes are made to this Privacy Policy — meaning changes that significantly affect your rights or the way your data is used — jatbat will notify you via a platform notification or by direct communication to your registered contact details, providing reasonable advance notice before the updated policy takes effect. Non-material changes, such as clarifications of existing provisions or typographical corrections, will be updated on this page without individual notification.

The "Effective Date" displayed at the top of this Privacy Policy reflects the date on which the current version came into force. The most current version of this policy is always available at https://jatbat.com/privacy-policy. If you wish to review previous versions of this policy for reference purposes, please contact our support team at [email protected] and we will make available the version applicable to the period you are enquiring about.

Your continued use of the jatbat platform following publication of an updated Privacy Policy constitutes your acknowledgement of the changes and your agreement to be bound by the revised terms. If you disagree with any changes to this policy, you should discontinue use of the platform and contact support to arrange account closure in accordance with the process described in the jatbat Terms & Conditions.