jet9a Privacy Policy

1. Data Controller and Scope

jet9a acts as the data controller for all personal information collected through the platform at jet9a.net. This Policy applies to all data collected via the website, including account registration forms, deposit and withdrawal transactions, customer support interactions, live chat sessions, and any other touchpoint through which you provide information to jet9a.

This Policy covers all users who access jet9a from Bangladesh or any other location where the platform is accessible. It applies equally to registered members and to unregistered visitors whose browsing behaviour is captured through cookies and analytics tools. If you are accessing jet9a on behalf of another person, you represent that you have the authority to accept this Policy on their behalf and that they have been informed of its contents.

jet9a may update this Policy at any time. When material changes are made, a notice will be displayed on the platform and the "Last updated" date at the top of this document will be revised. Continued use of the platform after the effective date of any change constitutes acceptance of the revised Policy. If you do not agree with any revision, you must cease using the platform and contact [email protected] to request account closure.

2. Information We Collect

jet9a collects personal data through several channels. The categories of information we collect are described below, organised by collection method.

2.1 Information You Provide Directly

When you register an account, complete KYC verification, or interact with our support team, you provide us with information that may include:

• Identity data: Full legal name, date of birth, gender, and nationality as stated on your Bangladeshi National Identity Card (NID) or passport.
• Contact data: Bangladeshi mobile number, email address, and residential address.
• Verification documents: Scanned or photographed copies of your NID, passport, or other government-issued identification; proof-of-address documents; and selfie photographs submitted during the KYC process.
• Financial data: bKash wallet number, Nagad account number, Rocket or Upay account number, bank account details (Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank), and Visa or Mastercard details used for deposits and withdrawals.
• Communications data: Messages, queries, and attachments you send to the jet9a support team via email or live chat.

2.2 Information Collected Automatically

When you visit and interact with the jet9a platform, we automatically collect certain technical and behavioural data, including:

• Device data: IP address, device type, operating system, browser type and version, screen resolution, and device identifiers.
• Usage data: Pages visited, game sessions started and completed, bet amounts placed, session duration, click paths, and feature interaction logs.
• Transaction logs: Records of every deposit, withdrawal, bonus claim, and wagering activity associated with your account, timestamped to Bangladesh Standard Time (BST, UTC+6).
• Geolocation data: Approximate geographic location derived from your IP address, used to confirm that you are accessing the platform from Bangladesh and to satisfy fraud-prevention requirements.

2.3 Information from Third Parties

We may receive information about you from third-party sources in limited circumstances, including:

• Payment processors (bKash, Nagad, Rocket, Upay) confirming transaction status and account ownership;
• Identity verification bureaus used to cross-check KYC document authenticity;
• Fraud-detection and anti-money-laundering (AML) screening services;
• Analytics providers that aggregate anonymised usage statistics from across the platform.

3. How We Use Your Data

jet9a processes your personal data on the basis of one or more of the following legal grounds: (a) performance of a contract — processing necessary to provide the services you have registered for; (b) legal obligation — processing required to comply with applicable law, including anti-money-laundering and age-verification requirements; (c) legitimate interests — processing necessary to operate the platform securely and prevent fraud; and (d) consent — where you have given explicit, freely withdrawn consent for a specific purpose such as receiving marketing communications.

Purpose	Data Categories Used	Legal Basis
Account registration and authentication	Identity, contact, device data	Contract performance
KYC and age verification	Identity, verification documents	Legal obligation
Processing deposits and withdrawals	Financial data, transaction logs	Contract performance
Fraud detection and AML screening	Identity, financial, device, usage data	Legal obligation / legitimate interests
Customer support	Identity, contact, communications data	Contract performance
Bonus and promotion management	Identity, transaction logs, usage data	Contract performance / legitimate interests
Responsible gaming monitoring	Usage data, transaction logs	Legal obligation / legitimate interests
Marketing communications (opted-in users only)	Identity, contact data	Consent
Platform security and technical operations	Device data, usage data	Legitimate interests

jet9a does not use your personal data to make solely automated decisions that produce significant legal effects — for example, we do not use automated profiling to permanently close an account without human review. Where automated systems flag potential fraud or policy violations, a member of the jet9a compliance team reviews the case before any permanent account action is taken.

4. Data Sharing and Disclosure

jet9a does not sell, rent, or trade your personal data to any third party for their independent marketing or commercial purposes. Data sharing with third parties occurs only in the specific circumstances described below.

4.1 Service Providers

We share data with carefully selected third-party service providers who process it solely on jet9a's behalf and under contractual obligations that prohibit any use beyond the specific service being delivered. These providers include payment processors (bKash, Nagad, Rocket, Upay, Visa, Mastercard), identity verification vendors, fraud-detection platforms, cloud hosting infrastructure providers, and customer communication tools. All service providers are required to implement data security standards no less stringent than those applied by jet9a itself.

4.2 Game Studio Partners

Certain games on the jet9a platform are delivered by third-party studios — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — whose software runs within the platform environment. These studios may receive limited session data (such as player ID, stake amounts, and game-round outcomes) necessary to deliver the game experience and to calculate RTP (Return to Player) statistics. They do not receive your full identity data, contact details, or financial account information.

4.3 Legal and Regulatory Disclosure

jet9a may disclose your personal data to law enforcement authorities, financial intelligence units, or other regulatory bodies where we are legally required to do so — for example, in response to a court order, a subpoena, an official investigation, or to comply with anti-money-laundering reporting obligations. In such cases, jet9a will disclose only the minimum data necessary to satisfy the legal requirement and will inform you of the disclosure where we are legally permitted to do so.

4.4 Business Transfers

In the event that jet9a undergoes a merger, acquisition, or sale of assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified in advance of any such transfer and given the opportunity to close your account and withdraw your funds if you do not consent to your data being transferred to the new operator.

5. Cookies and Tracking Technologies

jet9a uses cookies, pixel tags, and similar tracking technologies on the jet9a.net domain. Cookies are small text files placed on your device when you visit the platform. They serve several important functions described in the table below.

Cookie Type	Purpose	Retention
Strictly Necessary	Maintain your logged-in session, process transactions, and apply security protections. Cannot be disabled without breaking core platform functionality.	Session / up to 24 hours
Functional	Remember your language preference, last-visited game category, and responsible gaming settings such as deposit limits and session timers.	Up to 90 days
Analytics	Measure page performance, feature usage rates, error rates, and user journeys across the platform to improve the overall experience.	Up to 13 months
Marketing (consent-only)	Track which promotional campaigns you responded to, so that we can tailor bonus offers to your interests. These cookies are only set if you have opted in to marketing communications.	Up to 12 months

You may manage your cookie preferences at any time via the cookie settings panel, accessible from the account settings menu. Disabling strictly necessary cookies will impair your ability to use the platform and may prevent you from logging in or completing transactions. Disabling analytics or marketing cookies will not affect your ability to play games or make deposits.

6. Data Retention

jet9a retains personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply as a general guide:

• Active account data: Retained for the duration of your membership plus a minimum of 5 years following account closure, to satisfy anti-money-laundering record-keeping obligations.
• KYC and identity documents: Retained for a minimum of 5 years from the date of submission or from the date of account closure, whichever is later.
• Transaction records: Retained for a minimum of 5 years from the date of each transaction, consistent with financial record-keeping requirements.
• Customer support communications: Retained for 2 years from the date of the last interaction in a support thread, or for the lifetime of the account if the interaction relates to a dispute or compliance matter.
• Analytics and usage data (anonymised): Retained indefinitely in anonymised, aggregated form for platform improvement purposes. Anonymised data cannot be re-linked to any individual user.
• Marketing consent records: Retained until you withdraw consent, plus a further 2 years to demonstrate compliance with consent obligations.

When retention periods expire and no legal obligation requires continued storage, jet9a permanently deletes or irreversibly anonymises the relevant data in a secure manner. Deletion requests made under your rights (see Section 7) are assessed against any applicable retention obligations before being fulfilled.

7. Your Rights Over Your Data

Subject to applicable law, you hold the following rights in relation to the personal data jet9a holds about you. To exercise any of these rights, submit a written request to [email protected]. We will respond within 30 days of receiving a valid, verified request.

7.1 Right of Access

You have the right to request a copy of all personal data we hold about you, together with information about how it is being used, who it has been shared with, and how long it will be retained. We will provide this information in a structured, commonly used, and machine-readable format where technically feasible.

7.2 Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Minor corrections (such as updating your email address or contact number) can be made directly within your account settings. Corrections to identity data or KYC records require submission of supporting documentation.

7.3 Right to Erasure

You may request that jet9a delete your personal data where: (a) the data is no longer necessary for the purpose for which it was collected; (b) you withdraw consent and no other legal basis applies; or (c) the data has been processed unlawfully. Erasure requests will be assessed against any applicable legal retention obligations — where jet9a is legally required to retain certain records, erasure of those specific records will not be possible during the mandatory retention period.

7.4 Right to Restrict Processing

You may request that jet9a suspend the active processing of your data while a dispute over its accuracy or lawfulness is under review. During a restriction period, jet9a may continue to store your data but will not actively use it for profiling, marketing, or analytics purposes.

7.5 Right to Object

You have the right to object to processing carried out on the basis of legitimate interests — in particular, direct marketing communications. If you object to marketing, your data will be removed from all marketing lists within 5 business days. You may opt out of marketing emails at any time by updating your communication preferences in your account settings.

7.6 Right to Data Portability

Where processing is carried out by automated means on the basis of your consent or for contract performance, you have the right to receive your personal data in a portable format suitable for transfer to another service provider. This right applies to data you have actively provided to jet9a and does not extend to derived or inferred data.

8. Data Security Measures

jet9a implements a comprehensive, layered security framework to protect your personal data from unauthorised access, disclosure, alteration, or destruction. The security measures in place include, but are not limited to:

• 256-bit SSL/TLS encryption: All data transmitted between your device and the jet9a platform is encrypted using industry-standard 256-bit SSL/TLS protocols. The padlock indicator in your browser confirms that an encrypted connection is active.
• Data encryption at rest: Sensitive fields including identity document records, financial account details, and KYC images are encrypted at rest using AES-256 encryption on our hosting infrastructure.
• Access controls: Internal access to personal data is granted on a strict need-to-know basis. All staff members with data access undergo background checks and receive data-protection training. Access logs are maintained and reviewed regularly.
• OTP two-factor authentication: All player accounts have the option to enable OTP-based two-factor authentication, which significantly reduces the risk of unauthorised account access.
• Penetration testing and security audits: jet9a conducts periodic penetration tests and security audits of the platform infrastructure to identify and remediate vulnerabilities before they can be exploited.
• Incident response: In the event of a confirmed data breach that poses a risk to your rights and freedoms, jet9a will notify affected users within 72 hours of becoming aware of the incident, and will take immediate steps to contain and investigate the breach.

Despite these measures, no system connected to the internet can be guaranteed to be completely impenetrable. You play an important role in securing your own account by using a strong, unique password, enabling OTP authentication, and never sharing your login credentials with any third party. If you suspect that your account has been accessed without your authorisation, contact [email protected] immediately.