Privacy Policy — jitawin2

Information We Collect

jitawin2 collects personal data from players and site visitors in order to operate the platform, verify player identities, process payments, and fulfil our legal obligations. The categories of data we collect are described below.

Information You Provide Directly:

• Registration Data: Full legal name, date of birth, residential address, email address, phone number, and preferred username provided when you create a jitawin2 account.
• Identity Verification Documents: Copies of your National Identity Card (NID), passport, or driving licence submitted as part of the Know Your Customer (KYC) verification process.
• Payment Information: Mobile banking account numbers (bKash, Nagad, Rocket, Upay), bank account details (Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank), and card details (Visa, Mastercard) provided when making deposits or requesting withdrawals. Full card numbers are never stored on jitawin2 servers — payment card data is handled exclusively by our PCI-DSS compliant payment processors.
• Communications: Records of your correspondence with our customer support team, including chat transcripts, emails sent to support@jitawin2, and any supporting documents you attach to a support request.
• Responsible Gaming Preferences: Deposit limits, session time reminders, cooling-off requests, and self-exclusion applications you submit through your account settings or directly to the support team.

Information Collected Automatically:

• Technical Data: IP address, browser type and version, operating system, device type (mobile, desktop, tablet), screen resolution, and time zone (Bangladesh Standard Time, UTC+6).
• Usage Data: Pages visited on jitawin2, games launched, betting history, session duration, clickstream data, and feature interactions.
• Cookie and Tracking Data: Data collected through cookies, pixel tags, and similar technologies as described in Section 5 of this Policy.
• Transaction Logs: A complete record of all deposits, withdrawals, bonus activations, wagering activity, and account balance changes associated with your account.

Information Received from Third Parties:

• Identity verification results and fraud screening scores from KYC service providers.
• Payment confirmation data from mobile banking operators (bKash, Nagad) and bank payment gateways.
• Responsible gaming referral information from recognised problem gambling support organisations, where a self-referral or third-party referral has been made in connection with your account.

How We Use Your Data

jitawin2 uses the personal data it collects for the following specific purposes. We do not use your data for any purpose incompatible with the purposes listed here without obtaining your prior consent.

jitawin2 will never sell your personal data to third parties for their own marketing purposes. Your data is an asset used solely to operate and improve the jitawin2 platform and to meet our legal obligations — it is not a commercial product.

Legal Basis for Processing

All processing of personal data by jitawin2 is carried out on one or more of the following lawful grounds:

• Contractual Necessity: Processing is required to fulfil the contract between jitawin2 and you as a registered player — including account creation, payment processing, and game delivery.
• Legal Obligation: Processing is necessary to comply with applicable legal requirements, including age verification (18+ enforcement), anti-money laundering (AML) obligations, and fraud prevention requirements.
• Legitimate Interests: Processing is carried out in the legitimate interests of jitawin2, including preventing fraud, securing the platform, improving services, and detecting prohibited conduct — provided these interests are not overridden by your rights and freedoms.
• Consent: Processing for optional purposes — such as receiving personalised promotional emails about jitawin2 offers, new games, BPL cricket betting promotions, or Eid special bonuses — is based on your explicit consent, which you may withdraw at any time by updating your account communication preferences or by contacting support at support@jitawin2.

Data Sharing and Disclosure

jitawin2 shares your personal data only with the categories of recipients described below, and only to the extent necessary for the relevant purpose. We do not share personal data with any party for purposes unrelated to operating the jitawin2 platform.

• KYC and Identity Verification Providers: Third-party KYC service providers receive your identity documents and personal details to perform age and identity verification checks. These providers are contractually bound to process your data solely for verification purposes and to maintain appropriate security standards.
• Payment Processors and Banking Partners: Payment data is shared with mobile banking operators (bKash, Nagad, Rocket, Upay) and bank payment gateways (Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank) as required to process your deposit and withdrawal transactions.
• Game Software Providers: Game session data (including bet amounts, game outcomes, and account identifiers) is exchanged with our game software partners — including Evolution Gaming, Pragmatic Play, Ezugi, NetEnt, Microgaming, and Spribe — to the minimum extent required to deliver and settle games.
• Fraud Prevention and Security Services: Technical data including IP addresses, device identifiers, and transaction patterns may be shared with fraud prevention and cybersecurity services to detect and prevent account compromise, payment fraud, and bot activity.
• Legal and Regulatory Authorities: jitawin2 will disclose personal data to law enforcement agencies, regulatory bodies, or other competent authorities when required to do so by applicable law, court order, or to protect the rights, property, or safety of jitawin2, its players, or the public.
• Responsible Gaming Organisations: Where a player has been enrolled in a self-exclusion programme or referred through a responsible gaming pathway, limited data may be shared with accredited responsible gaming support organisations to facilitate that process.

Cookies and Tracking Technologies

jitawin2 uses cookies and similar tracking technologies (including pixel tags and local storage) to operate the platform, maintain your session, analyse usage patterns, and deliver a consistent experience across visits.

Categories of Cookies We Use:

You may control cookie behaviour through your browser settings. Most modern browsers allow you to block or delete cookies; however, disabling strictly necessary cookies will prevent core features of jitawin2 — including login, deposits, and game loading — from functioning correctly. Blocking analytics or marketing cookies will not affect your ability to use the platform.

Data Retention

jitawin2 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The general retention principles applied by jitawin2 are as follows:

• Active Account Data: All personal and account data is retained for the duration of your active registration on jitawin2. If your account becomes inactive (no login or transaction activity for 24 consecutive months), jitawin2 may contact you to confirm whether you wish to keep the account open before initiating a dormancy review.
• Transaction Records: All financial transaction records — including deposits, withdrawals, and wagering history — are retained for a minimum of five years from the date of the transaction to comply with AML record-keeping obligations.
• KYC Identity Documents: Identity verification documents submitted as part of the KYC process are retained for a minimum of five years following account closure, in accordance with applicable financial regulations.
• Customer Support Communications: Records of support interactions are retained for three years from the date of the last relevant communication to allow for follow-up, dispute resolution, and quality review.
• Marketing Consent Records: Records of your marketing consent or opt-out are retained for the duration of your account plus three years, to provide evidence of your communication preferences and honour opt-out requests.
• Self-Exclusion Records: Where a self-exclusion has been applied, the record of that exclusion and its parameters is retained permanently to prevent circumvention through future re-registration attempts.

At the end of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Data that has been anonymised (i.e., it can no longer be linked to any identifiable individual) may be retained indefinitely for statistical and analytical purposes without restriction.

Your Privacy Rights

As a player on jitawin2, you hold the following rights in relation to the personal data we hold about you. These rights may be exercised by contacting the jitawin2 support team at support@jitawin2 with a clear description of your request. We will respond to all valid requests within a reasonable timeframe.

• Right of Access: You have the right to request a copy of the personal data jitawin2 holds about you and to receive information about how it is being used. This is sometimes referred to as a Subject Access Request (SAR).
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or supplemented. You may also update many of your account details directly within your jitawin2 account settings.
• Right to Erasure: In certain circumstances, you may request the deletion of your personal data — for example, if you close your account and there is no longer a legal basis for retaining the data. Note that this right is subject to our legal obligation to retain certain records (such as transaction data and KYC documents) for the periods described in Section 6.
• Right to Restrict Processing: You may request that jitawin2 restricts the processing of your personal data in specific circumstances, such as while a dispute about data accuracy is being resolved.
• Right to Data Portability: Where processing is based on your consent or on a contractual obligation, you have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to the processing of your personal data where it is based on jitawin2's legitimate interests. You also have an unconditional right to object to processing for direct marketing purposes at any time.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing emails), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that took place before the withdrawal.

Data Security Measures

jitawin2 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. Key measures include:

• SSL/TLS Encryption: All data transmitted between your device and jitawin2 servers is encrypted using industry-standard SSL/TLS protocols. Look for the padlock icon in your browser address bar when accessing the platform — this confirms that your connection is secured.
• Data Encryption at Rest: Sensitive personal data stored in jitawin2 databases — including identity documents and payment references — is encrypted using strong cryptographic standards.
• Access Controls: Access to personal data within jitawin2's internal systems is restricted on a strict need-to-know basis. Staff members access only the data necessary to perform their specific job functions, and all access is logged and auditable.
• Two-Factor Authentication (2FA): jitawin2 offers optional 2FA for player accounts. We strongly encourage all players to enable 2FA through their account security settings to add an additional layer of protection beyond their password.
• Penetration Testing and Security Audits: The platform undergoes periodic security assessments to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: In the event of a personal data breach that poses a risk to player rights or freedoms, jitawin2 will assess the breach, take immediate containment action, and notify affected players without undue delay where required.

While jitawin2 takes all reasonable precautions to secure your data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your own account password and for notifying jitawin2 immediately if you suspect any unauthorised activity on your account.

Third-Party Services

The jitawin2 platform integrates with a number of third-party service providers in order to deliver a complete gaming and payment experience. While jitawin2 selects its partners carefully and requires them to maintain appropriate data protection standards, each third-party provider operates under its own privacy policy and data practices.

Third-party services integrated into jitawin2 include:

• Game Providers: Evolution Gaming, Pragmatic Play, Ezugi, NetEnt, Microgaming, and Spribe deliver games directly within the jitawin2 platform. These providers receive the minimum game session data required to operate their games.
• Payment Partners: bKash, Nagad, Rocket (Dutch-Bangla Bank), Upay, and bank payment gateways process transaction data under their own terms of service and privacy policies.
• Analytics Services: jitawin2 uses analytics tools to understand platform usage. Where possible, data shared with analytics providers is anonymised or pseudonymised before transmission.
• Security and Fraud Prevention: Third-party cybersecurity and fraud detection services process limited technical data (IP addresses, device fingerprints) to protect the platform and its players.

jitawin2 is not responsible for the privacy practices of any third-party provider. Players who interact directly with third-party services — for example, by accessing bKash or Nagad outside of the jitawin2 platform — should review the privacy policies of those services independently.

Contact and Complaints

If you have any questions, concerns, or complaints about how jitawin2 handles your personal data, please contact our support team in the first instance:

• Email: support@jitawin2 (plain text — not a clickable link)
• Subject Line: "Privacy Enquiry — [Your Account Username]"
• Response Time: We aim to acknowledge all privacy-related enquiries within 2 business days and to resolve them fully within 30 calendar days of receipt. Complex requests may take longer; in such cases we will notify you of the extended timeframe.

jitawin2 is committed to resolving all privacy concerns promptly and fairly. If you are not satisfied with the outcome of your complaint after engaging with our support team, you retain the right to escalate the matter to the competent data protection or regulatory authority in your jurisdiction.

jitawin2 reserves the right to update this Privacy Policy at any time. Material changes will be communicated to active players via email or through an in-platform notification. The "Last Updated" date at the top of this page will always reflect the most recent revision. Continued use of jitawin2 following any update constitutes acceptance of the revised Policy. We encourage you to review this page periodically.