jaja9 Privacy Policy

1.Introduction

jaja9 ("we", "us", "our") operates the online casino and sports betting platform available at https://jaja9.club. We are committed to protecting the privacy and security of all personal data provided to us by players and visitors based in Bangladesh and other permitted jurisdictions. This Privacy Policy describes the personal data we collect, the purposes for which we use it, how we protect it, and the rights available to you regarding your personal data.

This Privacy Policy applies to all users of jaja9, including registered players, prospective players who browse the platform without registering, and anyone who contacts us via our support channels. By using jaja9 or by providing us with your personal data, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your information as described herein.

2.Information We Collect

jaja9 collects personal data in the following categories. We collect only what is necessary for the stated purpose and do not retain it beyond the period required.

jaja9 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, or biometric data. Where we collect data that could be considered sensitive in a broader context (such as government-issued ID for KYC), we apply enhanced security controls and strict access limitations.

3.How We Use Your Information

jaja9 uses the personal data we collect strictly for the following purposes. We do not use your data for any purpose that is incompatible with the original purpose for which it was collected without your explicit consent.

• To create, verify, and maintain your player account, including identity verification (KYC) and age confirmation (21+ compliance).
• To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard, and to maintain accurate transaction records in BDT.
• To provide and improve the jaja9 platform, troubleshoot technical issues, and ensure service continuity for players across Bangladesh.
• To detect, prevent, and investigate fraud, money laundering, bonus abuse, and other prohibited conduct as defined in the jaja9 Terms & Conditions.
• To comply with our responsible gaming obligations, including monitoring play patterns, enforcing deposit limits, and facilitating self-exclusion requests.
• To communicate with you regarding your account, support requests, and, where you have provided consent, promotional offers and bonus information relevant to your play history at jaja9.

jaja9 does not use automated decision-making or profiling in a way that produces legal or similarly significant effects on players without human review. Where automated systems flag an account for review (for example, suspected fraud or bonus abuse), a human member of the jaja9 team reviews the case before any adverse action is taken.

4.Legal Basis for Processing

jaja9 processes personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: processing required to fulfil our obligations to you under the jaja9 Terms & Conditions, including account operation, payment processing, and customer support.
• Legal obligation: processing required to comply with applicable laws and regulations, including anti-money-laundering (AML) requirements, KYC obligations, and responsible gaming regulations.
• Legitimate interests: processing carried out for the purpose of fraud prevention, platform security, and improving the jaja9 service, where these interests are not overridden by your rights and freedoms.
• Consent: where we rely on your consent to process personal data (for example, for direct marketing communications), you may withdraw your consent at any time by contacting our support team without this affecting the lawfulness of processing carried out before the withdrawal.

5.Sharing Your Information

jaja9 does not sell, rent, or otherwise transfer your personal data to third parties for their own marketing purposes. We share personal data only in the limited circumstances described below, and only to the extent necessary for the stated purpose.

• Payment processors: bKash, Nagad, Rocket, Upay, Visa, and Mastercard receive the minimum data required to authenticate and process your financial transactions. These providers operate under their own privacy policies and applicable financial regulations.
• Game providers: Pragmatic Play, Evolution Gaming, Spribe, Ezugi, NetEnt, and Microgaming receive session tokens and anonymised game data sufficient to deliver their games and verify RNG integrity. They do not receive your full identity or payment details.
• Regulatory and law enforcement authorities: jaja9 may disclose personal data to competent authorities when required to do so by law, court order, or in response to a lawful regulatory request. This includes disclosures relating to AML investigations.
• Technical service providers: hosting, security, and analytics providers who assist jaja9 in operating the platform are bound by data processing agreements that restrict them from using your data for any purpose other than providing services to jaja9.

6.Payment Data and Financial Security

jaja9 handles all payment data with heightened security. Full card numbers are never stored on jaja9 servers — only tokenised references provided by the payment processor. Mobile wallet numbers (bKash, Nagad, Rocket) are stored in encrypted form and used solely to match withdrawal destinations to the verified account holder. jaja9 does not share payment data with any third party except the payment processor necessary to complete a transaction.

In the event of a suspected payment fraud or unauthorised transaction, jaja9 will temporarily freeze the affected account while its security team investigates. Players are encouraged to notify jaja9 support immediately at [email protected] if they notice any unexplained transaction activity on their account.

7.Cookies and Tracking Technologies

jaja9 uses cookies and similar tracking technologies to operate the platform, maintain your session, and improve your experience. Cookies are small text files placed on your device when you visit jaja9. We use three categories of cookies:

• Essential cookies: required for the platform to function. These include session authentication tokens, security cookies, and load-balancing cookies. They cannot be disabled without breaking core platform functionality.
• Functional cookies: remember your preferences such as language settings and responsible gaming tool configurations. These improve your experience but are not strictly required.
• Analytics cookies: collect anonymised data about how players use jaja9 — which sections are visited, session durations, and technical performance metrics. This data is used solely to improve the platform and is never linked back to an identifiable individual.

You may manage or disable non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of jaja9. Essential cookies cannot be disabled as they are strictly necessary for the platform to operate securely.

8.Data Retention

jaja9 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following retention periods apply as a general guide: identity and KYC documents are retained for a minimum of 5 years from account closure to meet AML regulatory requirements; transaction records are retained for a minimum of 5 years from the date of the transaction; account activity logs are retained for 2 years from the date of the last activity; marketing consent records are retained until consent is withdrawn plus 1 year.

When the applicable retention period expires, jaja9 will securely delete or anonymise your personal data so that it can no longer be associated with you. Where deletion is not technically possible immediately (for example, data held in backup systems), jaja9 will isolate that data from further processing and delete it at the next available opportunity.

9.Your Data Rights

As a jaja9 player, you have the following rights in relation to your personal data. To exercise any of these rights, please contact our support team at [email protected]. We will respond to all valid requests within 30 days.

• Right of access: you may request a copy of the personal data jaja9 holds about you, together with information about how it is used and with whom it has been shared.
• Right of rectification: if any personal data jaja9 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or completed without undue delay.
• Right to erasure: in certain circumstances you may request that jaja9 delete personal data it holds about you. This right is subject to legal and regulatory retention obligations — for example, jaja9 cannot delete KYC or transaction records that it is legally required to keep.
• Right to restrict processing: you may request that jaja9 restrict the processing of your personal data in certain circumstances, such as where you contest its accuracy or object to its use.
• Right to withdraw consent: where jaja9 relies on your consent to process personal data (for example, for marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

jaja9 will not charge a fee for handling a data rights request unless the request is manifestly unfounded or excessive, in which case a reasonable fee may be applied. We may request proof of identity before processing any data rights request to protect against unauthorised access to your personal data.

10.Data Security

jaja9 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include SSL/TLS encryption for all data in transit, AES-256 encryption for sensitive data at rest, strict role-based access controls limiting staff access to personal data to those with a business need, regular penetration testing and security audits, and multi-factor authentication for all administrative access to jaja9 systems.

All jaja9 staff who handle personal data are trained on data protection obligations and bound by confidentiality agreements. Access to player personal data is logged and audited. In the event of a personal data breach that is likely to result in a risk to player rights and freedoms, jaja9 will notify affected players without undue delay and will take all appropriate steps to mitigate the impact of the breach.

11.Children and Minors

jaja9 is strictly an adults-only platform. We do not knowingly collect personal data from any person under the age of 21. If jaja9 discovers that personal data has been collected from a person under 21, that data will be deleted immediately and the associated account will be permanently closed. If you believe that a minor has registered at jaja9, please notify us immediately at [email protected]. Parents and guardians in Bangladesh are encouraged to use parental control software to prevent underage access to online gambling platforms.

12.Changes to This Privacy Policy

jaja9 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform features. When material changes are made, jaja9 will provide notice through the platform. The date of the most recent update is shown at the top of this page. Your continued use of jaja9 after a revised Privacy Policy takes effect constitutes your acceptance of the updated policy.

We encourage you to review this Privacy Policy periodically to stay informed about how jaja9 is protecting your information. If you do not agree with any changes to this policy, you must stop using jaja9 and may request account closure by contacting our support team.

13.Contact and Data Queries

If you have any questions about this Privacy Policy, wish to exercise a data right, or want to raise a data protection concern, please contact the jaja9 support team. All privacy-related enquiries are handled by staff with data protection responsibilities and we aim to respond within 30 days of receiving your request.

You may reach us by email at [email protected]. Please include your registered mobile number or account username in your message so we can locate your account efficiently. Do not include your full payment details or passwords in any email communication with jaja9.