Privacy Policy for jia9

jia9 is committed to protecting the privacy and personal data of every player who uses our platform. This Privacy Policy sets out in clear, plain English how jia9 collects, processes, stores, shares, and protects personal information in connection with the operation of the jia9 online casino and sports betting platform, accessible at jia9.io and through any associated mobile interfaces.

This policy applies to all individuals who interact with jia9 in any capacity, including registered players, visitors who browse the platform without registering, individuals who contact our support team, and former account holders whose data we are required to retain under applicable law or our internal records policy.

This policy does not apply to third-party websites, applications, or services that may be linked to or from the jia9 platform. jia9 is not responsible for the privacy practices of third-party game providers, payment processors, or any other external services. We encourage you to review the privacy policies of any third-party services you access through or alongside jia9.

jia9 collects personal data across several categories depending on how you interact with our platform. The table below summarises the categories of data we collect and the context in which each category arises.

Data We Do Not Collect

jia9 does not collect or store full payment card numbers (PAN), card verification values (CVV), or card expiry dates on our servers. Payment card transactions are processed exclusively through PCI-DSS compliant third-party payment processors who handle card data under their own security standards. jia9 also does not collect biometric data such as fingerprints or facial recognition data.

jia9 collects personal data through several distinct channels, each described below. Understanding the collection mechanism helps you make informed decisions about what information you provide and when.

Directly From You

The majority of personal data jia9 holds about you is provided directly by you during the following interactions:

• Account Registration: When you create a jia9 account, you provide your name, date of birth, email address, mobile phone number, and residential address.
• KYC Verification: When verifying your identity and age, you upload copies of government-issued identification documents such as your Bangladesh National ID Card (NID), passport, or driving licence.
• Cashier Transactions: When making deposits or withdrawal requests via bKash, Nagad, Rocket, Upay, or bank transfer, you provide payment account details and transaction amounts in Bangladeshi Taka.
• Support Interactions: When contacting jia9 via live chat or email, you provide the content of your communication and any supporting information you choose to include.
• Preference Settings: When updating your account profile, responsible gaming limits, or marketing communication preferences.

Automatically Through Platform Use

When you access and use the jia9 platform, certain technical data is collected automatically by our servers and through cookies and similar technologies:

• Your IP address and approximate geographic location (country/city level) are logged each time you access the platform.
• Your device characteristics, browser type, and operating system are recorded to optimise platform performance and detect unusual access patterns.
• Your gaming session data — including games played, bet amounts, session duration, and navigation patterns — is recorded to support fraud prevention, responsible gaming monitoring, and platform improvement.
• Cookies and similar tracking technologies collect data about your browsing behaviour on the jia9 platform. Full details are provided in Section 07 (Cookies & Tracking).

From Third Parties

In limited circumstances, jia9 may receive personal data about you from trusted third parties, including:

• Identity Verification Providers: Third-party KYC and age verification services may provide data validation results and fraud risk scores in connection with your account verification.
• Payment Processors: Transaction confirmation data and payment status notifications from bKash, Nagad, Rocket, and other payment partners.
• Fraud Prevention Services: Risk assessment data from fraud detection and anti-money-laundering screening services.

jia9 uses the personal data we collect for specific, defined purposes. We do not use personal data for purposes that are incompatible with those for which it was originally collected. The primary purposes for which we process your personal data are set out below.

• Account Administration: Creating and maintaining your jia9 player account, authenticating your identity at login, and managing account settings and preferences.
• Age and Identity Verification: Confirming that you meet the minimum age requirement of 21 years and verifying your identity in accordance with our KYC obligations.
• Payment Processing: Processing deposit and withdrawal transactions in Bangladeshi Taka via your chosen payment method, reconciling accounts, and managing cashier operations.
• Platform Delivery: Providing access to casino games, sports betting, live dealer tables, and all other platform features and services.
• Fraud Prevention and Security: Detecting, investigating, and preventing fraudulent transactions, unauthorised account access, money laundering, and other illegal or prohibited activity.
• Responsible Gaming Compliance: Monitoring gaming behaviour for signs of problem gambling, enforcing player-set deposit and time limits, administering cooling-off periods and self-exclusions, and complying with responsible gaming obligations.
• Customer Support: Responding to your enquiries, resolving complaints, and providing technical assistance via live chat and email.
• Legal and Regulatory Compliance: Meeting record-keeping, reporting, and data retention obligations imposed by applicable law.
• Platform Improvement: Analysing aggregated, anonymised usage data to identify technical issues, improve game performance, and enhance the overall player experience.
• Marketing Communications: Sending you promotional offers, bonus notifications, and seasonal campaigns (Eid, Pohela Boishakh, BPL season) where you have consented to receive such communications. You may withdraw this consent at any time via your account settings or by contacting support.

jia9 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual Necessity: Processing that is necessary to perform the contract between jia9 and you as a registered player — including account registration, payment processing, game delivery, and customer support.
• Legal Obligation: Processing required to comply with applicable legal and regulatory requirements, including age verification, anti-money-laundering obligations, fraud reporting, and data retention requirements.
• Legitimate Interests: Processing carried out in pursuit of jia9's legitimate business interests, where those interests are not overridden by your privacy rights. This includes fraud prevention, platform security, responsible gaming monitoring, and aggregate analytics for platform improvement.
• Consent: Processing carried out on the basis of your freely given, specific, informed, and unambiguous consent — primarily in the context of marketing communications and non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

jia9 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We share personal data only in the specific circumstances described below, and only to the extent necessary for the relevant purpose.

Service Providers and Data Processors

jia9 shares personal data with carefully selected third-party service providers who process data on our behalf in connection with the operation of the platform. These providers act as data processors and are contractually bound to process your data only on jia9's instructions and in accordance with this Privacy Policy. Categories of service providers include:

• Payment Processors: bKash, Nagad, Rocket, Upay, and banking partners who process deposit and withdrawal transactions.
• Identity Verification Services: Third-party KYC and age verification providers who assist with document validation and fraud risk assessment.
• Game Providers: Licensed game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, and Spribe, who deliver the game content on our platform and may receive limited gameplay data necessary for game delivery and RTP monitoring.
• Cloud Infrastructure Providers: Hosting and cloud computing services that store platform data on secure, encrypted servers.
• Customer Support Technology: Live chat and helpdesk software providers who facilitate our 24/7 support operations.
• Fraud Prevention and AML Services: Third-party screening and risk intelligence services used to detect and prevent financial crime.

Legal and Regulatory Disclosure

jia9 may disclose personal data to competent authorities, law enforcement agencies, regulators, or courts where we are required to do so by applicable law, court order, or regulatory obligation. Such disclosures are made only to the extent required and we will notify you of any such disclosure where we are legally permitted to do so.

Business Transfers

In the event that jia9 undergoes a merger, acquisition, restructuring, or sale of all or part of its business, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and of any material changes to this Privacy Policy that result from it.

jia9 uses cookies and similar tracking technologies (including local storage and session storage) to ensure the correct operation of the platform, enhance your experience, and gather anonymised analytics about how the platform is used. This section explains what cookies we use, why we use them, and how you can manage your cookie preferences.

What Are Cookies?

Cookies are small text files placed on your device by a website when you visit it. They allow the website to remember information about your visit — such as your login session, preferred language, or account settings — so that you do not need to re-enter information on each visit. Cookies do not contain executable code and cannot access other files on your device.

Types of Cookies Used by jia9

• Strictly Necessary Cookies: Essential for the operation of the jia9 platform. These include session authentication cookies that keep you logged in during a gaming session, security tokens that prevent cross-site request forgery, and load-balancing cookies that ensure platform stability. These cookies cannot be disabled without affecting core platform functionality.
• Functional Cookies: Used to remember your account preferences, game display settings, and responsible gaming configuration so that your choices persist across sessions. Disabling these cookies may result in a reduced or inconsistent platform experience.
• Analytics Cookies: Used to collect anonymised data about how players navigate and interact with the jia9 platform, including pages visited, time spent on each section, and error events. This data is used in aggregate form to improve platform performance and player experience. No individual player is identified in analytics reports.
• Marketing and Preference Cookies: Used, where you have consented, to track promotional campaign performance and deliver relevant bonus offers. These cookies do not track your activity outside the jia9 platform.

Managing Your Cookie Preferences

You can manage non-essential cookie preferences through your browser settings. Most modern browsers allow you to view, block, or delete cookies at any time. Please note that blocking strictly necessary cookies will impair your ability to log in and use the jia9 platform. Instructions for managing cookies in commonly used browsers are available from the respective browser's help centre.

jia9 retains personal data for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law and regulation. The following retention guidelines apply to the main categories of data jia9 holds:

• Account and Identity Data: Retained for the duration of your account's active status and for a minimum of 5 years following account closure, in accordance with anti-money-laundering record-keeping requirements.
• Financial Transaction Records: Retained for a minimum of 5 years from the date of each transaction, in accordance with financial crime prevention regulations.
• Gaming Activity Logs: Retained for a minimum of 3 years for fraud detection and responsible gaming monitoring purposes, and for up to 5 years where required by compliance obligations.
• KYC Verification Documents: Retained for the duration of your account and for a minimum of 5 years after account closure. Copies of identity documents are stored in encrypted form on secure, access-controlled servers.
• Customer Support Communications: Retained for 2 years from the date of the last communication in a given support thread, or longer where the communication relates to an unresolved dispute or compliance matter.
• Marketing Preference Data: Retained until you withdraw your consent or request deletion. Opt-out records are retained indefinitely to ensure your preference is honoured.
• Technical and Log Data: Server logs and IP address records are typically retained for 12 months for security and fraud investigation purposes.

At the end of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be attributed to an identifiable individual. Anonymised aggregate data may be retained indefinitely for analytical and reporting purposes.

jia9 takes the security of your personal data seriously and maintains a comprehensive set of technical and organisational security measures designed to protect your data against unauthorised access, disclosure, alteration, or destruction.

Technical Security Measures

• 256-Bit SSL/TLS Encryption: All data transmitted between your device and jia9's servers is protected by 256-bit SSL/TLS encryption. The jia9 platform operates exclusively over HTTPS. Any attempt to access the platform over an unencrypted connection is automatically redirected.
• Encrypted Data Storage: Sensitive personal data, including identity documents, financial account details, and authentication credentials, is stored in encrypted form using industry-standard encryption algorithms. Passwords are stored as salted cryptographic hashes and are never stored in plain text.
• Access Controls: Access to personal data within jia9's systems is restricted on a strict need-to-know basis. Staff access rights are assigned according to job function and reviewed regularly. All access to sensitive data systems is logged and monitored.
• Two-Factor Authentication: jia9's internal administrative systems are protected by mandatory two-factor authentication. Players are strongly encouraged to enable SMS-based 2FA on their own accounts via account security settings.
• Vulnerability Management: jia9's platform and infrastructure are subject to regular security assessments, penetration testing, and vulnerability scanning. Identified vulnerabilities are remediated in accordance with a risk-based prioritisation framework.

Organisational Security Measures

All jia9 staff who have access to personal data are required to complete data protection and security training on joining and on an annual basis. Our data protection and security policies are reviewed and updated regularly. Staff are subject to confidentiality obligations that survive the termination of their employment or engagement with jia9.

Security Incident Response

jia9 maintains a documented security incident response procedure. In the event of a personal data breach that poses a risk to your rights and freedoms, jia9 will notify affected players without undue delay via the email address registered to their account, and will provide information about the nature of the breach, the data affected, and the steps jia9 is taking to address it.

As an individual whose personal data is processed by jia9, you hold a number of rights in relation to that data. jia9 is committed to facilitating the exercise of these rights promptly and without unnecessary barriers. Your rights are summarised below.

• Right of Access: You have the right to request a copy of the personal data that jia9 holds about you, together with information about how it is being used. We will respond to access requests within 30 days of receipt.
• Right to Rectification: If any personal data jia9 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. Many basic account details can be updated directly from your account profile page.
• Right to Erasure ("Right to Be Forgotten"): You may request that jia9 delete your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where the data has been processed unlawfully. This right is subject to jia9's legal obligations to retain certain data under applicable financial crime regulations.
• Right to Restriction of Processing: You may request that jia9 restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data is being contested, or where processing is unlawful but you prefer restriction to erasure.
• Right to Data Portability: Where processing is based on your consent or on a contract, and is carried out by automated means, you have the right to receive a copy of your personal data in a structured, commonly used, and machine-readable format, and to request that it be transmitted to another controller where technically feasible.
• Right to Object: You have the right to object to the processing of your personal data where that processing is based on legitimate interests, including profiling. You also have an absolute right to object to the processing of your data for direct marketing purposes at any time.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

To exercise any of the rights listed above, please contact jia9's support team by email at [email protected] with the subject line "Data Rights Request". Please include your registered email address and a brief description of the right you wish to exercise. jia9 may need to verify your identity before processing your request. We will respond to all valid requests within 30 days. In complex cases, this period may be extended by a further 60 days, and you will be notified of any such extension.

jia9 is strictly a 21+ platform. We do not knowingly collect, process, or retain personal data from individuals under the age of 21. Age verification is a mandatory step in the jia9 account registration process, and accounts where the age verification check cannot be completed will not be activated.

If jia9 becomes aware that personal data has been collected from a person under the age of 21 — whether through a fraudulent registration or any other means — we will take immediate steps to close the relevant account, reverse any associated transactions, and securely delete all personal data associated with that account from our records.

Parents and guardians who believe that a minor in their care may have registered on the jia9 platform should contact our support team immediately at [email protected]. We will investigate and take appropriate action as a matter of priority.

jia9 operates as a platform serving players in Bangladesh. In the course of operating the platform, your personal data may be transferred to and processed in countries other than Bangladesh — for example, where our cloud infrastructure providers, game studios, or fraud prevention services are based in other jurisdictions.

Where such international transfers occur, jia9 takes steps to ensure that your personal data receives an adequate level of protection, equivalent to the protections described in this Privacy Policy. These steps may include entering into data processing agreements with service providers that incorporate standard contractual clauses, or relying on the service provider's participation in a recognised data protection framework.

By using the jia9 platform, you acknowledge and consent to the transfer of your personal data to countries outside Bangladesh where such transfers are necessary for the delivery of platform services. jia9 will not transfer your personal data internationally in circumstances where adequate protections are not in place.

jia9 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, platform features, or operational requirements. The "Last Updated" date at the top of this page will be revised whenever a material change is made.

Where changes are material — meaning they significantly affect how your personal data is used or your rights in relation to it — jia9 will notify registered players via email to the address associated with their account, and will display a prominent notice on the platform for a reasonable period following the change. We may also ask you to re-confirm your acceptance of the updated policy where required by applicable law.

Continued use of the jia9 platform following the publication of a revised Privacy Policy constitutes acceptance of the updated terms. If you do not agree with any changes to this policy, you should stop using the platform and may request the closure of your account by contacting our support team.

If you have any questions, concerns, or complaints about this Privacy Policy or about how jia9 processes your personal data, please contact our support team using the details below. All privacy enquiries are handled by jia9's dedicated data protection team and will be responded to within 5 business days.

Email: [email protected]
Subject Line for Rights Requests: "Data Rights Request — [Your Registered Email]"
Subject Line for General Privacy Enquiries: "Privacy Enquiry — [Brief Description]"

When contacting us about a data rights request, please include your full name as registered on your jia9 account, the email address associated with your account, and a clear description of the right you wish to exercise or the nature of your enquiry. This will help us process your request as efficiently as possible.

jia9 is committed to resolving all privacy concerns fairly, transparently, and in accordance with the principles described in this Privacy Policy. If you are not satisfied with our response, you may seek further recourse through any independent dispute resolution or data protection supervisory authority available in your jurisdiction.