Privacy Policy —
jitaacs Data Commitment

jitaacs collects personal information from players through several channels: directly when you register an account, when you make deposits or withdrawals, when you interact with our customer support team, and automatically as you navigate and use the platform. The categories of data we collect are described below.

Registration and identity data:

• Full legal name as it appears on your government-issued identity document.
• Date of birth, used to verify that you meet the 18+ age requirement.
• Email address — your primary channel for account communications, verification codes, and support correspondence.
• Bangladeshi mobile number, used for SMS-based two-factor authentication and account alerts.
• Username and encrypted password (passwords are stored using one-way hashing and are never accessible in plain text, even to jitaacs staff).
• Residential address, collected during KYC (Know Your Customer) verification.
• Copies of government-issued identity documents (National Identity Card, passport, or driving licence) submitted for KYC purposes.

Financial and transaction data:

• Deposit and withdrawal transaction records, including amounts in Bangladeshi Taka (৳), timestamps, and payment method used (bKash, Nagad, Rocket, Upay, bank transfer, Visa, or Mastercard).
• Mobile financial service account numbers (e.g., the bKash or Nagad number associated with your deposits), retained for withdrawal routing and AML compliance purposes.
• Account balance history and wagering activity logs, maintained for regulatory, audit, and responsible gaming monitoring purposes.

Technical and usage data:

• IP address and approximate geographic location (city/region level) at the time of each login session.
• Device type, operating system, and browser version.
• Pages visited within jitaacs, time spent on each page, games launched, and betting market interactions.
• Session duration and login/logout timestamps.
• Referral source (e.g., how you arrived at jitaacs, if applicable).

Support and communication data:

• The content of emails, live chat transcripts, and any other written communications you send to the jitaacs support team.
• Complaint records and their resolution outcomes.
• Survey responses and feedback submitted voluntarily through the platform.

jitaacs processes your personal data for specific, legitimate purposes. We do not use your data for any purpose that is incompatible with the reasons for which it was originally collected. The legal bases and operational purposes for our data processing activities are set out below.

Where jitaacs wishes to use your data for a new purpose not listed above, we will update this Privacy Policy prior to commencing that processing activity and, where required, seek your explicit consent. We will never use your data to make solely automated decisions that produce significant legal or similarly significant effects without offering you the opportunity to request human review of that decision.

jitaacs uses cookies and similar tracking technologies (including local storage and session tokens) to ensure the platform functions correctly, to remember your preferences between sessions, and to understand how players use the site so that we can continue improving it. By continuing to use jitaacs after being informed of our cookie use, you consent to the deployment of cookies as described in this section.

The categories of cookies used on jitaacs are as follows:

Most web browsers allow you to manage cookie preferences through their settings menu. You can configure your browser to block cookies, delete existing cookies, or alert you each time a cookie is set. Please note that blocking strictly necessary cookies may prevent you from logging in to your jitaacs account or completing deposit transactions.

jitaacs does not use third-party advertising or behavioural targeting cookies. We do not participate in cross-site advertising networks or retargeting programmes that track your activity across other websites.

jitaacs does not sell or rent your personal data to any third party. We share data only where it is necessary to deliver the services you have requested, to comply with legal obligations, or to protect the security and integrity of the platform. The categories of third parties with whom data may be shared are described below.

• Payment service providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank, Visa, and Mastercard receive the transaction data and account reference information necessary to process your deposits and withdrawals. These providers operate under their own privacy policies and are bound by financial data security standards.
• Game technology providers: Companies such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive anonymised player session identifiers necessary to operate the game software delivered through the jitaacs platform. These providers do not receive your full name, NID number, or payment details.
• Identity verification partners: Third-party KYC service providers may process the identity documents you submit for age and identity verification. These partners are contractually bound to use your documents solely for the purpose of verification and to delete them once verification is complete.
• Fraud prevention and security services: Specialised security providers may receive technical data (IP addresses, device fingerprints, login event logs) to assist in detecting fraudulent activity and protecting the platform from abuse.
• Legal and regulatory authorities: jitaacs will disclose personal data to law enforcement agencies, courts, or regulatory bodies when required to do so by law, by court order, or when we believe in good faith that disclosure is necessary to protect the safety of any individual or to prevent financial crime.
• Business successors: In the event of a merger, acquisition, or sale of all or part of jitaacs's business operations, player data may be transferred to the acquiring entity, subject to that entity assuming the obligations of this Privacy Policy.

All third parties with whom jitaacs shares personal data are required to implement appropriate technical and organisational security measures and are prohibited from using the data for any purpose other than the specific service they are contracted to perform on our behalf.

jitaacs retains your personal data for as long as your account is active and for a defined period after account closure, as required by our legal and regulatory obligations. The following retention periods apply to the main categories of data we hold.

When the applicable retention period has elapsed, jitaacs will securely delete or anonymise your personal data. Anonymised data (from which all personally identifying information has been irreversibly removed) may be retained indefinitely for statistical and analytical purposes, as it can no longer be linked to any individual.

Player data is stored on servers that are physically and logically secured with access controls, encryption at rest, and regular security audits. In the event that data is no longer required for any active purpose and its retention period has expired, it is deleted using industry-standard secure erasure methods.

As a player on jitaacs, you hold meaningful rights over your personal data. We are committed to honouring these rights and responding to all valid requests promptly. To exercise any of the rights listed below, please contact us at support@jitaacs with the subject line "Data Rights Request" and include your registered username and a brief description of your request.

jitaacs implements a layered set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, and unlawful disclosure. While no online platform can guarantee absolute security, the following controls are in place on the jitaacs platform at all times.

• Transport layer encryption: All data exchanged between your browser or device and jitaacs is encrypted using TLS 1.2 or higher, enforced across every page and API endpoint of the platform.
• Encryption at rest: Sensitive fields in our database — including identity document references and payment account identifiers — are encrypted at rest using AES-256 encryption.
• Password hashing: Player passwords are stored using a one-way cryptographic hashing algorithm with a unique per-account salt. Passwords are never stored or transmitted in plain text, and jitaacs staff cannot view your password under any circumstance.
• Two-factor authentication (2FA): Players are strongly encouraged to enable 2FA on their accounts via SMS or an authenticator application. Accounts with 2FA enabled receive a time-sensitive one-time code at every login, providing a second layer of protection beyond the password.
• Access controls: Access to production systems containing player data is restricted to a minimum number of authorised personnel. All access events are logged and subject to regular audit review. Remote access requires VPN authentication with multi-factor verification.
• Intrusion detection and monitoring: jitaacs's infrastructure is monitored 24 hours a day, 7 days a week by automated security systems that detect anomalous behaviour, brute-force login attempts, and other indicators of compromise in real time.
• Regular security assessments: The platform undergoes periodic vulnerability assessments and penetration testing conducted by qualified independent security professionals. Critical findings are remediated on an expedited schedule.

Despite these measures, players are reminded that they share responsibility for account security. You should use a strong, unique password for your jitaacs account, never share your credentials with any third party, and contact support immediately if you suspect that your account has been accessed without your authorisation.

jitaacs reserves the right to amend this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable law, or improvements to our platform and services. When we make material changes to this Policy, we will update the "Last Reviewed" date at the top of the page and, where the changes are significant, notify registered players by email at their registered address.

Your continued use of jitaacs after the updated Policy has been published constitutes your acceptance of the revised terms. We recommend that you review this page periodically — at least once every three months — to stay informed of any updates. If you disagree with any revised provision, you should contact us to discuss your concerns or request account closure before the revised Policy takes effect.

This Policy was last reviewed on 1 January 2026 and applies from that date. All prior versions of this Policy are superseded by this document.

Contacting jitaacs about data and privacy matters:

For any question, concern, or formal request relating to this Privacy Policy or the personal data jitaacs holds about you, please contact our support team in writing. We aim to acknowledge all privacy-related enquiries within 3 business days and to provide a substantive response within 30 calendar days.

• Email (plain text only — not a link): support@jitaacs
• Subject line: "Privacy Policy Enquiry" or "Data Rights Request"
• Include your registered username and a clear description of your request or concern.
• Support hours: Monday to Friday, 09:00–21:00 Bangladesh Standard Time (BST, UTC+6).

jitaacs is committed to resolving all privacy concerns fairly and transparently. If you feel that your concern has not been addressed adequately after contacting us, you retain the right to escalate the matter to the relevant data protection authority in your jurisdiction.