j999 Privacy Policy — How We Handle Your Personal Data

j999 ("we", "us", "our") operates the online casino and sports betting platform accessible at j999.io (the "Platform"). This Privacy Policy describes how j999 collects, uses, stores, and discloses personal data relating to individuals who access or use the Platform ("you", "your", "Player").

By registering an account on the Platform, completing the KYC verification process, or continuing to use the Platform after this policy becomes effective, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.

j999 takes its data protection obligations seriously and has implemented technical and organisational measures proportionate to the risks associated with processing personal data in the context of online gambling services. This policy is reviewed and updated periodically to reflect changes in applicable law, regulatory guidance, and platform functionality.

j999 collects personal data through several channels, including information you provide directly, data generated automatically by your use of the Platform, and information received from third-party service providers. The categories of personal data we collect include, but are not limited to, the following:

j999 processes personal data only for specified, explicit, and legitimate purposes. The following table sets out the primary purposes for which we use each category of data and the corresponding legal basis for that processing:

• Account creation and management: To register your account, verify your identity, and maintain accurate account records throughout the duration of your relationship with j999.
• Transaction processing: To process deposits and withdrawals in BDT via bKash, Nagad, Rocket, Upay, and other supported payment methods, and to maintain a full transaction audit trail.
• Identity and age verification (KYC): To confirm that you are at least 21 years of age and to satisfy applicable anti-money-laundering (AML) obligations before processing withdrawals or high-value deposits.
• Fraud prevention and platform security: To detect and prevent fraudulent activity, bonus abuse, money laundering, collusion, and any other prohibited conduct as defined in the Terms & Conditions.
• Responsible gaming monitoring: To identify patterns of play that may indicate problem gambling behaviour and to administer self-exclusion, deposit limit, and cooling-off requests in accordance with our Responsible Gaming Policy.
• Customer support: To respond to your enquiries, process complaints, and maintain records of support interactions for quality assurance and dispute resolution purposes.
• Marketing communications: To send promotional offers, bonus notifications, and platform updates to Players who have provided explicit consent, and to personalise in-platform promotions based on your gaming preferences.
• Platform improvement and analytics: To analyse usage patterns, identify technical issues, and improve the overall performance, design, and functionality of the Platform.
• Legal and regulatory compliance: To comply with applicable laws, respond to lawful requests from regulatory authorities, and fulfil record-keeping obligations.

j999 will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or establishing a separate legitimate legal basis.

j999 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

1. Contractual necessity: Processing required to perform the contract between you and j999 — including account registration, payment processing, and game delivery — is carried out on the basis that it is necessary for the performance of that contract.
2. Legal obligation: Processing carried out to comply with applicable laws, including KYC/AML obligations, age verification requirements, and responses to lawful regulatory requests.
3. Legitimate interests: Processing carried out in pursuit of j999's legitimate business interests, including fraud prevention, platform security, internal analytics, and responsible gaming monitoring, where those interests are not overridden by your fundamental rights and freedoms.
4. Consent: Processing carried out on the basis of your freely given, specific, informed, and unambiguous consent — primarily in respect of marketing communications and the use of non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

j999 uses cookies and similar tracking technologies on the Platform to ensure core functionality, analyse usage, and deliver relevant content. The following categories of cookies are used:

• Strictly necessary cookies: Essential for the Platform to function correctly. These include session authentication tokens, security cookies, and load-balancing cookies. These cannot be disabled without impairing your use of the Platform.
• Functional cookies: Used to remember your preferences such as language settings, account display options, and game layout configurations to improve your experience on return visits.
• Analytics cookies: Used to collect aggregated, anonymised data about how Players navigate the Platform — including pages visited, time spent, and game interactions — to help us improve Platform performance and user experience.
• Marketing cookies: Used to deliver promotions and bonus offers that are relevant to your demonstrated interests and playing history. These are only set with your prior consent.

You may manage your cookie preferences through your browser settings at any time. Blocking certain categories of cookies may affect the functionality of the Platform. Withdrawing consent for marketing cookies will not affect your ability to access games or process transactions.

j999 does not sell or rent your personal data to any third party. We may share your data with the following categories of recipients strictly for the purposes described in this policy:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, and other payment partners require sufficient transaction data to process deposits and withdrawals. Shared data is limited to what is strictly necessary to complete the transaction.
• Identity verification providers: Third-party KYC service providers who assist in verifying the authenticity of identity documents and confirming that players meet the 21+ age requirement.
• Game software providers: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive technical session data necessary to deliver their games through the Platform. These providers are contractually prohibited from using this data for independent purposes.
• IT and hosting infrastructure providers: Cloud hosting, content delivery, and cybersecurity service providers who process data on our behalf under strict data processing agreements.
• Fraud prevention and AML screening services: Specialist providers who assist j999 in detecting suspicious activity, verifying the source of funds, and meeting anti-money-laundering obligations.
• Regulatory and law enforcement authorities: Where j999 is required by applicable law, court order, or regulatory directive to disclose personal data, we will comply with such requirements. Where legally permissible, we will notify you of such a disclosure.

Given the global nature of the online gaming industry, some of the third-party service providers used by j999 — including game software providers and cloud infrastructure partners — may be located outside of Bangladesh. Where personal data is transferred to a country that does not maintain an equivalent standard of data protection, j999 will implement appropriate safeguards to protect the transferred data, including:

• Contractual clauses in data processing agreements that impose data protection obligations on the recipient equivalent to those applied by j999;
• Technical security measures including encryption in transit and at rest;
• Restrictions on the purposes for which transferred data may be used by the recipient.

By using the Platform and accepting this Privacy Policy, you acknowledge that your data may be transferred to, stored in, and processed in jurisdictions outside Bangladesh as described above.

j999 retains personal data for no longer than is necessary to fulfil the purpose for which it was collected, subject to any longer retention period required by applicable law. The following general retention guidelines apply:

• Account data: Retained for the duration of your active account relationship with j999, plus a minimum of five (5) years following account closure to satisfy AML record-keeping requirements.
• Transaction and financial records: Retained for a minimum of seven (7) years from the date of the transaction, in accordance with financial record-keeping obligations.
• KYC documents: Retained for a minimum of five (5) years following the completion of the verification process or account closure, whichever is later.
• Customer support correspondence: Retained for three (3) years from the date of the last interaction, or longer where the correspondence relates to an unresolved dispute or legal claim.
• Marketing consent records: Retained for the duration of your opt-in, plus three (3) years following withdrawal of consent, to demonstrate compliance.
• Technical and usage data (logs): Typically retained for twelve (12) months, after which they are aggregated or deleted.

Upon expiry of the applicable retention period, personal data is securely deleted from all active systems or anonymised such that it can no longer be attributed to any identifiable individual.

Subject to applicable law, you hold the following rights with respect to the personal data j999 holds about you. To exercise any of these rights, please contact j999 support using the contact details set out in Section 14 of this policy.

• Right of access: You may request a copy of the personal data j999 holds about you, together with information about how it is processed and with whom it is shared.
• Right to rectification: You may request that j999 correct any inaccurate or incomplete personal data held about you. For certain data fields, you may update information directly through your Account settings.
• Right to erasure ("right to be forgotten"): In certain circumstances, you may request that j999 delete your personal data. This right is subject to exceptions where retention is required by law or necessary to establish, exercise, or defend a legal claim.
• Right to restriction of processing: You may request that j999 restrict the processing of your personal data in certain circumstances — for example, while the accuracy of the data is being contested.
• Right to data portability: Where processing is based on consent or contractual necessity and is carried out by automated means, you may request a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to object: You may object to the processing of your personal data where that processing is based on j999's legitimate interests. j999 will cease processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

j999 will respond to all verified data subject requests within thirty (30) calendar days of receipt. In complex cases, this period may be extended by a further sixty (60) days, in which case j999 will notify you within the initial thirty-day period and explain the reason for the extension.

The j999 Platform is strictly intended for adults aged 21 and above. j999 does not knowingly collect, process, or retain personal data from individuals under the age of 21. If j999 discovers that personal data has been submitted by or on behalf of a person under the age of 21, all related data will be deleted immediately and the associated account will be closed without prior notice.

Parents and guardians are encouraged to use parental control tools and internet filtering software to prevent underage individuals from accessing online gambling platforms. j999 supports the use of such tools and can provide guidance on reputable options upon request.

j999 has implemented a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• Transport layer encryption: All data transmitted between your browser or device and the Platform is encrypted using industry-standard SSL/TLS protocols.
• Encryption at rest: Sensitive data stored in j999's databases — including KYC documents and financial records — is encrypted using AES-256 or equivalent standards.
• Access controls: Access to personal data is restricted on a strict need-to-know basis. All internal access is subject to role-based access controls and multi-factor authentication.
• Security monitoring: j999 operates continuous intrusion detection and monitoring systems to identify and respond to anomalous activity in real time.
• Regular security audits: The Platform undergoes periodic security assessments, vulnerability scans, and penetration testing conducted by qualified third-party security specialists.
• Incident response: In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, j999 will notify affected individuals without undue delay in accordance with applicable law.

While j999 employs robust security practices, no method of electronic storage or internet transmission is completely impenetrable. You are encouraged to use a strong, unique password for your j999 Account and to enable any additional security features available within your Account settings.

The Platform may integrate third-party services — including game content delivered by providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — which operate under their own privacy policies. j999 is not responsible for the data practices of third-party game providers operating within embedded game environments on the Platform.

j999 does not include outbound links to external websites within the Platform's content. However, where third-party payment services are accessed during a transaction, those services are governed by the privacy policies of the respective payment provider (such as bKash, Nagad, or Rocket). Players are encouraged to review those policies independently.

j999 conducts due diligence on all third-party processors to confirm that they maintain data protection standards compatible with those set out in this Privacy Policy before engaging their services.

j999 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, platform functionality, or internal data processing practices. The current version of this policy, with the effective date indicated at the top of the page, will always be accessible on the Platform.

Where amendments are material — for example, where we introduce a new purpose for processing or change the categories of third parties with whom data is shared — j999 will provide prior notice to registered Players via email or a prominent in-platform notification before the changes take effect. Your continued use of the Platform after the effective date of any amendment constitutes acceptance of the revised Privacy Policy.

Where an amendment requires fresh consent (for example, in relation to a new marketing channel), j999 will collect that consent separately and will not process your data for the new purpose until consent has been obtained.

If you have any questions, concerns, or requests relating to this Privacy Policy or j999's data processing activities, please contact our support team. Our team is available 24 hours a day, 7 days a week.

Support contact: support at j999.io (plain text — not a clickable link)

When submitting a data subject access request or a privacy-related complaint, please include your registered Account username, a clear description of your request or concern, and any relevant reference numbers or dates. j999 aims to acknowledge all privacy-related requests within 48 hours and to provide a substantive response within 30 calendar days.

If you are not satisfied with j999's response to a privacy complaint, you have the right to escalate the matter through appropriate channels available under the laws applicable in your jurisdiction. j999 encourages Players to contact our support team in the first instance and will cooperate fully with any subsequent formal complaint process.