jtea9 Privacy Policy

1 Introduction & Scope

jtea9 ("we", "us", "our", "the Platform") operates as an online casino and sports betting service directed at players in Bangladesh. As part of operating this service, we necessarily collect, process, and store certain categories of personal data relating to our users ("you", "the Player", "the User"). This Privacy Policy explains what data we collect, the lawful basis on which we process it, how long we retain it, the circumstances in which we may share it with third parties, and the rights you hold in respect of your own information.

This policy covers all personal data processed in connection with: creating and managing a jtea9 account; making deposits and withdrawals via bKash, Nagad, Rocket, Upay, or bank transfer; placing bets, playing games, and claiming bonuses; contacting our support team; and browsing the jtea9 website whether or not you are a registered user.

jtea9 is committed to collecting only the personal data that is necessary for the purposes described in this policy — a principle sometimes referred to as data minimisation. We do not sell, rent, or trade personal data to marketing companies or data brokers. We do not build advertising profiles of players for sale to third parties.

Data Controller

For the purposes of this Privacy Policy, jtea9 acts as the data controller in respect of personal data collected from players and visitors. If you have any questions about how your data is handled, or wish to exercise any of the rights set out in Section 8, please contact us at the details provided in Section 9.

2 Personal Data We Collect

The personal data we collect falls into several distinct categories depending on how you interact with jtea9. The table below provides a structured summary, followed by additional detail on each category.

Data We Do Not Collect

jtea9 does not collect or process the following categories of sensitive personal data unless explicitly required by a legal or regulatory obligation and with your specific consent where required: racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, biometric data used for unique identification, health data beyond what is directly relevant to responsible gaming assessments, or data concerning sexual orientation.

Data Collected From Minors

jtea9 is strictly an 18+ platform. We do not knowingly collect personal data from individuals under the age of 18. If we become aware that a registered account belongs to a person under 18 years of age, that account will be immediately closed, deposited funds returned, and all personal data associated with the account will be deleted except where retention is required by applicable law or for fraud-prevention purposes.

3 How We Use Your Data

jtea9 processes personal data only for specific, legitimate purposes and only where we have a lawful basis for doing so. The lawful bases we rely on are: (a) performance of a contract with you; (b) compliance with a legal obligation; (c) our legitimate interests, where those interests are not overridden by your rights; and (d) your explicit consent, where required.

• Account creation and management: We use identity and contact data to create your account, verify your identity, and administer your account throughout its lifetime. Lawful basis: contract performance.
• Processing deposits and withdrawals: Financial data is used to process payments via bKash, Nagad, Rocket, Upay, Visa, Mastercard, and bank transfer, and to maintain accurate transaction records. Lawful basis: contract performance and legal obligation.
• Game and sportsbook operation: Gaming and betting data is used to enable game play, settle bets, apply bonus terms, and generate your account history. Lawful basis: contract performance.
• KYC and fraud prevention: Identity, financial, and technical data is used to conduct Know Your Customer checks, verify age and identity, detect suspicious account activity, and prevent fraud and money laundering. Lawful basis: legal obligation and legitimate interests.
• Responsible gaming monitoring: Gaming activity and responsible gaming data is used to identify patterns that may indicate problem gambling behaviour and to fulfil our responsible gaming obligations. Lawful basis: legal obligation and legitimate interests.
• Customer support: Communications data is used to respond to your queries, resolve complaints, and maintain a record of support interactions for quality assurance. Lawful basis: contract performance and legitimate interests.
• Platform security and technical operation: Technical and usage data is used to maintain platform security, diagnose technical issues, prevent DDoS attacks, and ensure the integrity of game outcomes. Lawful basis: legitimate interests.
• Marketing communications: Where you have consented to receive promotional communications, we may use your contact data to send you information about bonuses, promotions, and new features at jtea9. You may withdraw consent at any time by contacting support. Lawful basis: consent.
• Analytics and platform improvement: Aggregated usage data is used to understand how players interact with the platform, identify areas for improvement, and develop new features. Lawful basis: legitimate interests.

4 Data Sharing & Third Parties

jtea9 does not sell your personal data. We share personal data only where it is necessary to deliver our services, to comply with legal obligations, or to protect the safety and integrity of the platform. The following categories of third parties may receive personal data in connection with our operations:

Payment Processors

To process deposits and withdrawals, we share relevant financial data with our payment partners, including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank, Visa, and Mastercard. These providers receive only the data necessary to execute and verify your transaction. All payment partners operate under their own privacy and data security obligations.

Game Technology Providers

jtea9 partners with game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi to deliver its game catalogue. These providers may receive limited technical session data (such as a session token or player ID) to render games within the jtea9 interface. They do not receive your full identity or financial data unless independently required by their own regulatory obligations, in which case such sharing is governed by separate agreements.

Identity Verification Services

To conduct KYC and age verification, jtea9 may share identity documents (such as NID or passport scans) with specialist identity verification service providers. These providers are contractually bound to process submitted documents solely for verification purposes and to delete them once verification is complete or the retention period has elapsed.

Legal and Regulatory Authorities

jtea9 may disclose personal data to law enforcement agencies, regulatory bodies, or courts of competent jurisdiction where required by applicable law, by a valid court order, or where jtea9 has reasonable grounds to believe that disclosure is necessary to prevent fraud, money laundering, or other criminal activity. Such disclosures are made only to the extent required and in accordance with applicable legal requirements.

Business Transfers

In the event that jtea9 undergoes a merger, acquisition, or sale of all or part of its business assets, personal data held by jtea9 may be transferred to the acquiring entity as part of that transaction. In such an event, jtea9 will notify affected players and the acquiring entity will be required to honour the commitments made in this Privacy Policy with respect to previously collected personal data.

5 Cookies & Tracking Technologies

jtea9 uses cookies and similar client-side tracking technologies to operate the platform, maintain your login session, remember your preferences, and collect aggregated analytics data that helps us improve the player experience. This section explains what types of cookies we use and for what purpose.

Essential Cookies

These cookies are strictly necessary for the platform to function. They maintain your login session, remember your account preferences (such as language and display settings), protect against cross-site request forgery (CSRF), and enable the secure operation of the cashier. Essential cookies cannot be disabled without breaking core platform functionality. No consent is required for essential cookies.

Analytics Cookies

Analytics cookies collect aggregated, anonymised data about how players use the platform — including which pages are visited most frequently, how players navigate between sections, and where technical errors occur. This data helps jtea9 improve its platform design and performance. Analytics cookies do not identify you personally.

Performance and Functionality Cookies

These cookies remember choices you have made on the platform — such as game display preferences or responsible gaming settings — so that we do not need to ask you to re-enter them on each visit. They improve the quality and personalisation of your experience on jtea9.

Managing Your Cookie Preferences

You can control the use of non-essential cookies via your browser settings. Most modern browsers allow you to block or delete cookies, or to alert you before a cookie is stored on your device. Please note that disabling certain cookies may affect your ability to use some features of jtea9 — in particular, disabling session cookies will prevent you from remaining logged in to your account.

For guidance on managing cookies in the most common browsers, please refer to the help documentation provided by your browser manufacturer. jtea9 does not use persistent third-party advertising cookies to track your behaviour across other websites.

6 Data Retention

jtea9 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, to comply with legal and regulatory obligations, to resolve disputes, and to enforce our agreements. The following retention periods apply as a general guide:

When the applicable retention period expires, jtea9 will securely delete or anonymise the relevant personal data so that it can no longer be associated with you as an individual. Anonymised, aggregated data (from which no individual can be identified) may be retained indefinitely for statistical and analytical purposes.

7 Data Security Measures

jtea9 treats data security as a continuous engineering and operational priority. We implement a range of technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Key security measures in place include the following:

• SSL/TLS Encryption: All data transmitted between your device and jtea9 servers is encrypted in transit using SSL/TLS protocols. This prevents third parties from intercepting your login credentials, financial data, or personal information as it travels across the network.
• Data Encryption at Rest: Sensitive personal data stored on jtea9 servers — including identity documents, financial records, and password hashes — is encrypted at rest using industry-standard encryption algorithms.
• Password Hashing: jtea9 never stores your password in plain text. Passwords are hashed using a strong, salted hashing algorithm before storage. Even jtea9 staff cannot retrieve your original password.
• Access Controls: Access to personal data within the jtea9 organisation is governed by role-based access controls. Only staff members who require access to specific data categories to perform their job functions are granted such access. All internal access is logged and subject to periodic review.
• Segregated Player Funds: Player account balances are held in accounts that are segregated from jtea9's operational funds, providing an additional layer of financial protection.
• Regular Security Audits: jtea9 conducts periodic security reviews, including vulnerability assessments, to identify and address potential weaknesses in the platform's security posture.
• Staff Training: All jtea9 staff members who handle personal data receive mandatory data protection and information security training as part of their onboarding process and on an ongoing basis.

8 Your Privacy Rights

As a player on jtea9, you hold a number of rights with respect to the personal data we hold about you. jtea9 is committed to facilitating the exercise of these rights in a timely, transparent, and accessible manner. The following rights are available to you:

Right of Access

You have the right to request a copy of the personal data that jtea9 holds about you. This is sometimes referred to as a Subject Access Request (SAR). We will provide the requested data in a structured, commonly used, machine-readable format where technically feasible. We will respond to SARs within 30 days of receipt.

Right to Rectification

If you believe that any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it. Many data fields — such as your contact email address and mobile number — can be updated directly within your account settings. For corrections to identity or KYC data, please contact support and provide appropriate supporting documentation.

Right to Erasure

In certain circumstances, you have the right to request the deletion of personal data we hold about you. This right is not absolute — it does not apply where we are required to retain the data to comply with a legal obligation (for example, AML record-keeping requirements) or where the data is necessary for the establishment, exercise, or defence of legal claims. Where erasure is not possible in full, we will inform you of the data that can be deleted and the reason for retaining the remainder.

Right to Restrict Processing

You have the right to request that we restrict the processing of your personal data in certain circumstances — for example, where you contest the accuracy of the data or where you have objected to processing based on legitimate interests and that objection is pending review.

Right to Data Portability

Where processing is based on your consent or on the performance of a contract, and is carried out by automated means, you have the right to receive the personal data you have provided to us in a structured, commonly used, machine-readable format, and to transmit that data to another controller.

Right to Object

You have the right to object to the processing of your personal data where that processing is based on jtea9's legitimate interests. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or unless the processing is necessary for legal claims. You have an unconditional right to object to processing of your data for direct marketing purposes at any time.

How to Exercise Your Rights

To exercise any of the rights described above, please contact the jtea9 data team via live chat (available 24/7) or by email at [email protected]. Please include your registered username and a description of the right you wish to exercise. We may request proof of identity before processing a rights request in order to protect your data from unauthorised access. We will respond to all rights requests within 30 days of receipt. Where a request is complex or involves a large volume of data, we may extend this period by a further 30 days and will notify you accordingly.

9 Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise any of your privacy rights, or wish to raise a complaint about the way jtea9 has handled your personal data, please contact us using the following details:

Email: [email protected]
Live Chat: Available 24/7 via the jtea9 platform
Response Time: We aim to acknowledge all privacy-related contacts within 24 hours and to resolve them fully within 30 days.

Complaints Procedure

If you are dissatisfied with our response to a privacy concern or believe that we are processing your personal data in a way that is not compliant with applicable data protection requirements, you have the right to raise a formal complaint. Please submit your complaint in writing via email to [email protected] with the subject line "Data Privacy Complaint". We will acknowledge your complaint within 5 business days and provide a substantive response within 30 days, including details of any steps taken or proposed.

Changes to This Privacy Policy

jtea9 reserves the right to update or revise this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or platform features. When material changes are made, we will update the effective date at the top of this page and, where appropriate, notify registered players by email. Continued use of jtea9 following the publication of a revised Privacy Policy constitutes your acceptance of the updated terms. We encourage you to review this policy periodically.