Privacy Policy — How jb66 Collects, Uses, and Protects Your Data

1 Introduction

jb66 ("we", "us", "our") is committed to protecting the personal data of every player who uses the jb66 platform accessible at jb66.io (the "Platform"). This Privacy Policy explains how jb66 collects, processes, stores, shares, and safeguards the personal information you provide to us or that we generate about you in the course of operating your account and delivering our services.

This Privacy Policy forms part of the jb66 Terms and Conditions. Defined terms used in this Policy carry the same meaning as in the Terms and Conditions unless this Policy states otherwise. In the event of any conflict between this Privacy Policy and the Terms and Conditions on a privacy-related matter, this Privacy Policy shall prevail.

jb66 operates the Platform primarily for players located in Bangladesh. The personal data practices described in this Policy are designed with the Bangladeshi player base in mind, including the specific payment methods and identity verification procedures relevant to that market.

If you have any questions about this Privacy Policy or about how jb66 handles your personal data, you may contact our Data Support team at any time by emailing [email protected] or by using the 24/7 Live Chat facility available from within your account dashboard.

2 Data We Collect

jb66 collects personal data in two broad categories: data you provide to us directly, and data we generate or collect automatically as you use the Platform. The table below summarises the specific categories of personal data we collect and the context in which each category arises.

jb66 does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data (other than what may be inferred from Responsible Gaming tool use), or biometric data beyond what is strictly required for identity verification purposes.

3 How We Collect Your Data

jb66 collects personal data through the following channels and mechanisms:

• Direct Input: Data you enter during account registration, KYC document uploads, deposit and withdrawal requests, support contact forms, and live chat sessions.
• Automated Collection: Technical and usage data collected automatically when you access the Platform, including via cookies, web beacons, and server-side logging. See Section 7 for full details on our cookie practices.
• Payment Processors: Transaction confirmation data received from payment providers including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Visa, and Mastercard when you initiate a deposit or withdrawal.
• Identity Verification Providers: During the KYC process, jb66 may use a third-party identity verification service to confirm the authenticity of documents you submit. The result of that verification check is shared with jb66 and stored against your account record.
• Game Studios: Third-party game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may share session-level data with jb66 for the purpose of settling game results and detecting fraud.
• Fraud Detection Systems: jb66 uses automated risk assessment tools that analyse patterns in account activity, IP data, and device fingerprints to identify potentially fraudulent or abusive behaviour.

4 How We Use Your Data

jb66 uses the personal data it collects for specific, defined purposes. We do not use your data for any purpose that is incompatible with those stated at the time of collection. The primary purposes for which we process your data are set out below:

4.1 Account Operation

We use your identity and contact data to create and maintain your jb66 account, to authenticate you at login, to process deposits and withdrawals, and to provide account-related communications such as transaction confirmations and account status notifications.

4.2 KYC and Age Verification

We use identity documents and date-of-birth data to confirm that you are at least 21 years of age and to verify your identity in connection with withdrawal requests. This verification is mandatory and is in place to protect both players and the integrity of the Platform.

4.3 Fraud Prevention and Security

Technical data, account activity data, and financial data are processed to detect and prevent fraud, money laundering, bonus abuse, account sharing, and other forms of prohibited conduct as defined in the jb66 Terms and Conditions.

4.4 Customer Support

Communications data from live chat transcripts and email correspondence is used to resolve support queries, investigate complaints, and improve the quality of our customer service. Support records are retained for a period consistent with our retention policy in Section 8.

4.5 Responsible Gaming

Responsible Gaming data — including self-exclusion records and limit settings — is processed to enforce the protections you have put in place for yourself and to ensure that jb66's player protection commitments are met. This data is not used for any commercial purpose.

4.6 Platform Improvement

Usage and technical data are analysed in aggregated, anonymised form to identify trends, improve platform performance, optimise the user experience for players in Bangladesh, and guide product development decisions.

4.7 Marketing Communications

Where you have given consent, we may use your contact data to send you promotional offers, bonus announcements, and news about new games or features at jb66. You may withdraw this consent at any time as described in Section 12. Marketing is never sent to players during a period of self-exclusion.

5 Legal Basis for Processing

jb66 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contract Performance: Processing necessary to fulfil jb66's obligations under the player account agreement — including account creation, deposit processing, game settlement, and withdrawal execution.
• Legal Obligation: Processing required to comply with applicable legal and regulatory requirements, including identity verification obligations, anti-money-laundering checks, and record-keeping mandates.
• Legitimate Interests: Processing carried out in pursuit of jb66's legitimate business interests — including fraud detection, security monitoring, and platform analytics — where those interests are not overridden by your fundamental data protection rights.
• Consent: Processing based on your explicit consent, specifically in relation to marketing communications and the use of non-essential cookies. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

6 Data Sharing and Disclosure

jb66 does not sell, rent, or otherwise transfer your personal data to third parties for their own commercial purposes. Personal data may be shared in the following limited circumstances:

6.1 Payment Processors

Your financial data and account identifier are shared with payment processors (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Visa, Mastercard) solely to the extent necessary to execute deposit and withdrawal transactions. Payment processors are bound by their own privacy and security obligations.

6.2 Identity Verification Providers

Identity documents and date-of-birth data may be shared with a third-party KYC verification provider for the purpose of authenticating your identity. The provider is contractually prohibited from using this data for any purpose other than the verification service it provides to jb66.

6.3 Game Studios

A session token and account identifier (but not your full name or financial data) are shared with third-party game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi for the technical purpose of launching and settling game sessions within your account.

6.4 Fraud and Security Services

Technical data including IP address, device fingerprint, and account activity patterns may be shared with third-party fraud detection and cybersecurity service providers for the purpose of protecting the Platform and its players from fraudulent or abusive activity.

6.5 Legal Requirements

jb66 may disclose personal data to relevant authorities, law enforcement bodies, or regulatory agencies where required to do so by law, court order, or other binding legal process. In such cases, jb66 will disclose only the minimum data necessary to comply with the legal requirement.

7 Cookies and Tracking Technologies

jb66 uses cookies and similar tracking technologies to operate core platform functionality, recognise returning players, maintain login sessions, and gather anonymised usage analytics. The cookies used on the jb66 Platform fall into the following categories:

• Strictly Necessary Cookies: These cookies are required for the Platform to function. They maintain your login session, remember your language and display preferences, and ensure secure transmission of data between your browser and our servers. These cookies cannot be disabled without impairing core Platform functionality.
• Analytics Cookies: These cookies collect anonymised data about how players navigate the Platform — including pages visited, time on page, and referral source — to help jb66 understand usage patterns and improve the player experience. Analytics data is processed in aggregate and is not linked to individual player identities.
• Functional Cookies: These cookies remember optional preferences you have set on the Platform, such as preferred game category or notification settings, to provide a more personalised experience on return visits.
• Marketing Cookies: Where you have consented, marketing cookies may be used to deliver promotional communications and track the effectiveness of jb66's marketing campaigns. You may withdraw consent for marketing cookies at any time by adjusting your account preferences.

By continuing to use the jb66 Platform after being informed of our cookie practices, you consent to the use of strictly necessary and functional cookies. Analytics and marketing cookies are subject to your separate consent. You may manage your cookie preferences through your account settings or by adjusting your browser's cookie controls, though note that disabling certain cookies may affect Platform functionality.

8 Data Retention

jb66 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, including for the duration of an active player account and for any additional period required by applicable legal or regulatory obligations.

Specific retention periods for key data categories are as follows:

• Account and Identity Data: Retained for the lifetime of your account and for a minimum period of five (5) years following account closure, in accordance with anti-money-laundering record-keeping requirements.
• Financial Transaction Data: Retained for a minimum of five (5) years from the date of each transaction, in accordance with applicable financial record-keeping obligations.
• Betting and Gaming History: Retained for a minimum of two (2) years from the date of each wagering activity, or longer where records are relevant to an open dispute or regulatory inquiry.
• Support Communications: Retained for two (2) years from the date of the relevant support interaction, or longer where the interaction relates to an unresolved complaint or active investigation.
• Self-Exclusion Records: Retained for the full duration of the self-exclusion period and for a minimum of two (2) years thereafter, to support re-application of exclusion in the event of attempted account re-registration.
• Marketing Consent Records: Retained for as long as you hold an account with jb66, to evidence the consent basis on which marketing was sent.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with an identifiable individual. Anonymised, aggregated data may be retained indefinitely for analytical purposes.

9 Your Data Rights

As a jb66 player, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact our Data Support team at [email protected] with the subject line "Data Rights Request" and a description of the right you wish to exercise. jb66 will respond to all data rights requests within 30 days of receipt.

• Right of Access: You have the right to request a copy of the personal data jb66 holds about you, together with information about the purposes for which it is processed and the categories of third parties with whom it has been shared.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data held about you. Certain data (such as your registered name) may require identity verification before corrections are applied.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to jb66's legal retention obligations. Note that data subject to a mandatory retention period under anti-money-laundering or financial regulation cannot be deleted until that period expires.
• Right to Restrict Processing: You have the right to request that jb66 restricts the processing of your personal data in certain circumstances, for example where you contest the accuracy of the data or where jb66's processing is unlawful but you prefer restriction to erasure.
• Right to Data Portability: You have the right to receive the personal data you have provided to jb66 in a structured, commonly used, machine-readable format, and to request that this data be transferred directly to another service provider where technically feasible.
• Right to Object: You have the right to object to jb66's processing of your personal data where that processing is based on legitimate interests, including profiling for fraud detection purposes. jb66 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where jb66 processes your data on the basis of your consent (specifically for marketing communications and non-essential cookies), you have the right to withdraw that consent at any time without affecting the lawfulness of any processing carried out before withdrawal.

10 Children's Privacy

The jb66 Platform is intended exclusively for adults aged 21 and above. jb66 does not knowingly collect personal data from any person under the age of 21. If jb66 discovers that personal data has been collected from a person under 21, that Account will be immediately closed, all personal data associated with the Account will be deleted without delay (subject only to any mandatory legal retention obligations), and any balance held in that Account will be handled in accordance with jb66's Terms and Conditions.

If you are a parent or guardian and you believe that a person under 21 in your care has registered an account or provided personal data to jb66, please contact us immediately at [email protected] so that we can take prompt action. For guidance on preventing minors from accessing gambling content on shared devices, please visit our Responsible Gaming page.

11 Security Measures

jb66 takes the security of your personal data seriously and has implemented a range of technical and organisational measures designed to protect your data against unauthorised access, loss, alteration, or disclosure. These measures include:

• SSL/TLS Encryption: All data transmitted between your device and the jb66 Platform is encrypted using industry-standard TLS protocols, ensuring that data in transit cannot be intercepted by unauthorised parties.
• Access Controls: Access to player personal data within jb66's internal systems is restricted to authorised personnel who require access for legitimate operational purposes. Access is controlled through role-based permissions and is logged for audit purposes.
• Two-Factor Authentication: jb66's internal systems use multi-factor authentication to prevent unauthorised access by employees or contractors, even in the event of credential compromise.
• Regular Security Reviews: jb66 conducts periodic reviews of its data security infrastructure, including vulnerability assessments, to identify and address potential weaknesses before they can be exploited.
• Incident Response: jb66 maintains an incident response procedure for data security events. In the event of a data breach affecting your personal data, jb66 will notify affected players and take immediate steps to contain the breach and prevent further exposure.
• Third-Party Security Standards: Third-party service providers who process personal data on jb66's behalf are required to maintain security standards consistent with those applied by jb66, as set out in contractual data processing agreements.

While jb66 takes all reasonable steps to protect your personal data, no internet-based platform can guarantee absolute security. You also play a role in keeping your data safe — by maintaining a strong, unique password for your jb66 account and by not sharing your login credentials with any third party.

12 Marketing Communications

12.1 Where you have given explicit consent at account registration or through your account preferences, jb66 may send you marketing communications by email or SMS regarding promotional offers, bonus announcements, new game launches, and seasonal promotions relevant to the Bangladesh market — including, where appropriate, references to events such as Eid, Pohela Boishakh, Victory Day, and major cricket tournaments including BPL and IPL.

12.2 You may withdraw your consent to receive marketing communications at any time by updating your communication preferences within your account dashboard, by clicking the unsubscribe link included in any marketing email, or by contacting support at [email protected] and requesting removal from the marketing list.

12.3 Withdrawal of marketing consent will be processed within 5 business days. During the processing period, you may receive one or more additional communications before the withdrawal takes full effect. Withdrawal of marketing consent does not affect the processing of transactional or account-related communications, which are sent on the basis of contract performance rather than consent.

12.4 jb66 will never send marketing communications to players during a period of self-exclusion. Players who have activated self-exclusion are automatically removed from all marketing lists for the duration of their self-exclusion period.

13 Changes to This Privacy Policy

13.1 jb66 reserves the right to update or amend this Privacy Policy at any time in response to changes in applicable law, changes in our data processing practices, or improvements to the Platform. The date of the most recent revision is displayed at the top of this document.

13.2 Where changes to this Privacy Policy are material — meaning they significantly affect the way in which your personal data is processed or the rights available to you — jb66 will notify registered players by email to the address associated with their account at least 14 days before the changes take effect.

13.3 For non-material updates (such as clarifications of existing language or corrections of typographical errors), the revised Privacy Policy will be published on the Platform without advance individual notice. The revised version will be effective from the date of publication.

13.4 Your continued use of the jb66 Platform following the effective date of any revised Privacy Policy constitutes acceptance of the revised terms. If you do not accept the revised Privacy Policy, you must cease using the Platform and request account closure by contacting [email protected].

14 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to jb66's handling of your personal data, please contact our Data Support team through any of the following channels:

• Email: [email protected] — please use the subject line "Privacy Policy Enquiry" or "Data Rights Request" as appropriate.
• Live Chat: Available 24/7 from within your jb66 account dashboard. Support is available in English, Bangladesh Standard Time (UTC+6).
• WhatsApp: +880 1800 JB66 — available during extended support hours.

jb66 aims to respond to all privacy-related enquiries within 2 business days and to resolve data rights requests within 30 calendar days of receipt. If your request is particularly complex, jb66 may extend this period by a further 30 days with notice to you.