Privacy Policy
How jitaplay Protects Your Data
At jitaplay, your privacy is not an afterthought — it is a core part of how we build and operate our platform. This Privacy Policy explains in clear terms what personal data we collect from players in Bangladesh, why we collect it, how we store and protect it, and what rights you have over your own information. We encourage you to read this document in full before using our services.
All data transmitted between your device and jitaplay is protected by industry-standard 256-bit SSL encryption, ensuring your personal and financial information is never exposed in transit.
We collect only the personal data that is strictly necessary to provide our services, verify your identity, and comply with our legal obligations. We do not gather data beyond what is genuinely needed.
jitaplay does not sell, rent, or trade your personal data to third-party advertisers or data brokers. Your information is shared only where operationally necessary or legally required.
Access to player data within jitaplay is restricted to authorised staff on a strict need-to-know basis. All internal access is logged, audited, and reviewed regularly to prevent misuse.
You have the right to access, correct, and request deletion of your personal data at any time. jitaplay will respond to all valid data subject requests within 30 days of receipt.
We do not retain your personal data indefinitely. Clear retention schedules are applied to every data category, and data is securely deleted or anonymised once the retention period expires.
Information We Collect
1.1 Registration & Identity Data
When you create a jitaplay account, we collect the personal information you provide directly during the registration process. This includes your full legal name, date of birth, email address, and mobile phone number. You may also be asked to provide your residential address, including city and division within Bangladesh, to assist with account verification and fraud prevention.
As part of our Know Your Customer (KYC) obligations, we may collect copies of official identity documents such as your National Identity Card (NID), passport, or driving licence. These documents are used solely for the purpose of verifying your age and identity in compliance with our obligations to prevent fraud, money laundering, and underage gambling.
1.2 Financial & Transaction Data
To process deposits and withdrawals, jitaplay collects information related to your payment methods. This includes the mobile number associated with your bKash, Nagad, Rocket, or Upay account, as well as masked card numbers (we never store full card details) where Visa or Mastercard is used. We also retain a complete record of all deposit and withdrawal transactions associated with your account, including amounts, timestamps, and payment method used.
This financial data is essential for the operation of our cashier services, for resolving payment disputes, and for compliance with anti-money-laundering (AML) regulations applicable to online financial platforms operating in Bangladesh.
1.3 Technical & Usage Data
When you access jitaplay, our servers automatically record certain technical information about your connection and browsing behaviour. This includes your IP address, browser type and version, operating system, device type (mobile, tablet, or desktop), screen resolution, and the pages or game screens you visit within the platform. We also record the time and duration of each session, clickstream data, and any errors or crashes you experience.
This technical data is used to maintain the performance, security, and stability of the jitaplay platform. It also helps us detect and prevent fraudulent activity, such as the use of VPNs or proxy servers to circumvent geographical restrictions, and the operation of multiple accounts from a single device or IP address.
1.4 Communications Data
If you contact jitaplay's customer support team by email or live chat, we retain a record of that correspondence, including the content of messages, timestamps, and the outcome of any support interaction. This data is used for quality assurance, dispute resolution, and to improve the support experience for all players. We may also retain records of your responses to any surveys or feedback requests that you voluntarily complete.
How We Use Your Data
jitaplay processes your personal data only where we have a lawful basis for doing so. The primary legal bases on which we rely are: (a) performance of a contract — where processing is necessary to deliver the services you have signed up for; (b) compliance with a legal obligation — where we are required to process data to comply with applicable laws; and (c) legitimate interests — where we have a genuine operational need to process data in a manner that does not override your rights and interests.
| Purpose of Processing | Data Used | Legal Basis |
|---|---|---|
| Creating and managing your jitaplay account | Registration data, identity data | Contract performance |
| Processing deposits and withdrawals | Financial data, transaction history | Contract performance |
| Age and identity verification (KYC) | Identity documents, date of birth | Legal obligation |
| Fraud detection and prevention | Technical data, IP address, usage data | Legitimate interests |
| Anti-money-laundering compliance | Financial data, identity data | Legal obligation |
| Providing customer support | Communications data, account data | Contract performance |
| Platform performance and security monitoring | Technical data, usage data | Legitimate interests |
| Sending transactional communications (e.g., deposit confirmations) | Email address, mobile number | Contract performance |
| Sending promotional communications (where consent given) | Email address, mobile number | Consent |
| Responsible gaming monitoring | Usage data, transaction data, session data | Legal obligation / Legitimate interests |
Marketing Communications
Where you have opted in to receive marketing communications from jitaplay, we may send you promotional emails or SMS messages about new games, seasonal bonuses (such as Eid or Pohela Boishakh promotions), and special offers tailored to Bangladeshi players. You may withdraw your consent to receive marketing communications at any time by contacting our support team at or by using the unsubscribe link included in every marketing email. Withdrawal of marketing consent does not affect the lawfulness of processing carried out before the withdrawal.
Automated Decision-Making
jitaplay uses automated systems to screen accounts for fraud, bonus abuse, and responsible gaming indicators. In some cases, these automated processes may result in temporary account restrictions without prior human review. Where an automated decision has a significant effect on your account, you have the right to request human review of that decision by contacting our support team. We will respond to such requests within 5 business days.
Data Sharing & Third Parties
Payment Service Providers
To process your deposits and withdrawals, jitaplay shares the minimum necessary financial data with our approved payment partners, including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, and card processors for Visa and Mastercard transactions. These providers receive only the data required to complete the specific transaction you have initiated and are contractually prohibited from using your data for any other purpose.
Game Content Providers
The games available on jitaplay are supplied by third-party game studios and platform providers, including Pragmatic Play, Evolution Gaming, Spribe, Ezugi, NetEnt, Microgaming, and others. These providers may receive certain session and gameplay data (such as your account identifier, stake amounts, and game results) in order to power the games you play and to maintain their own integrity and audit records. Game providers are bound by contractual obligations that restrict their use of this data to the delivery of gaming services only.
Identity Verification Partners
Where automated KYC verification is employed, jitaplay may share identity document data with specialist identity verification service providers. These providers process your documents on jitaplay's behalf and are not permitted to retain, sell, or process your data for any purpose other than the verification service. All such providers are contractually bound to maintain the confidentiality and security of the data they handle.
Legal and Regulatory Disclosure
jitaplay may be required to disclose personal data to law enforcement agencies, regulatory bodies, or other governmental authorities where we receive a valid legal order or request to do so. In such circumstances, we will disclose only the data that is strictly required by the relevant legal process and will notify affected players where we are legally permitted to do so.
Business Transfers
In the event that jitaplay undergoes a merger, acquisition, restructuring, or sale of all or a portion of its assets, player data may be transferred to the acquiring entity as part of that transaction. In such circumstances, jitaplay will notify affected players in advance and ensure that the new entity agrees to honour the obligations set out in this Privacy Policy before any data transfer takes place.
Data Security & Storage
Technical Security Measures
All data transmitted between your device and the jitaplay platform is protected using Transport Layer Security (TLS 1.2 or higher), which provides end-to-end encryption for all communications. Sensitive data at rest — including identity documents and financial records — is encrypted using AES-256 encryption, a standard used by financial institutions and government agencies worldwide.
jitaplay's infrastructure is hosted on secure cloud servers with multiple layers of access control, including network-level firewalls, intrusion detection systems, and regular vulnerability scanning. Access to production systems is restricted to a limited number of authorised technical personnel and requires multi-factor authentication.
Organisational Security Measures
Access to player data within jitaplay is governed by a strict role-based access control policy. Staff members are granted access only to the data they require to perform their specific job function. All data access is logged and subject to periodic audit. Staff with access to personal data receive regular training on data protection obligations and best practices.
In the event of a data security incident that is likely to result in a risk to your rights or interests, jitaplay will notify affected players without undue delay and will take all necessary steps to contain the incident, assess its impact, and prevent recurrence. We will also take any further steps required by applicable law in response to a confirmed data breach.
Where Your Data Is Stored
jitaplay's primary data storage infrastructure is located in secure data centres within the Asia-Pacific region. Player data from Bangladesh is not routinely transferred to countries outside this region. In the event that a data transfer to a third country is required — for example, to a game content provider or identity verification partner located outside the region — jitaplay will ensure that appropriate safeguards are in place to protect your data during and after the transfer.
Your Privacy Rights
As a jitaplay player, you have a number of rights with respect to your personal data. jitaplay is committed to honouring these rights and will respond to all valid requests within 30 days. In complex cases, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it. There is no charge for exercising your rights under this policy in ordinary circumstances.
You may request a copy of all personal data that jitaplay holds about you, together with information about how that data is being processed.
If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated promptly.
You may request that jitaplay delete your personal data, subject to our legal obligations to retain certain records (e.g., for AML compliance purposes).
You may request that jitaplay restrict the processing of your data — for example, while a dispute about accuracy is being resolved.
Where technically feasible, you may request that your personal data be provided to you in a structured, commonly used, machine-readable format.
You have the right to object to the processing of your data where it is based on legitimate interests, including profiling for fraud prevention purposes.
Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting prior processing.
You have the right to request human review of any automated decision that significantly affects your account status or access to services.
To exercise any of the rights listed above, please contact our data protection team by email at , clearly stating your request and the right you wish to exercise. We may need to verify your identity before processing your request to ensure that we do not disclose or modify data at the request of an unauthorised person. Verification will typically involve confirming details already held on your account and may require the submission of a copy of a valid identity document.
Data Retention Policy
jitaplay retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or for as long as required by applicable law. The table below sets out the standard retention periods applied to the main categories of personal data processed by jitaplay. These periods may be extended where there is an ongoing legal dispute, regulatory investigation, or other circumstance that necessitates the continued retention of specific records.
| Data Category | Retention Period | Reason for Retention |
|---|---|---|
| Account registration data | Duration of account + 5 years after closure | Legal obligation / Dispute resolution |
| KYC identity documents | Duration of account + 5 years after closure | AML compliance / Legal obligation |
| Financial transaction records | 7 years from the date of each transaction | AML compliance / Tax and audit obligations |
| Customer support correspondence | 3 years from the date of the interaction | Dispute resolution / Quality assurance |
| Technical and usage logs | 12 months from date of capture | Security monitoring / Fraud prevention |
| Marketing consent records | Until consent is withdrawn + 3 years | Legal obligation to evidence consent |
| Responsible gaming interaction records | Duration of account + 5 years after closure | Regulatory compliance / Duty of care |
When personal data reaches the end of its applicable retention period, jitaplay will securely delete or anonymise it in accordance with our data disposal procedures. Anonymised data — from which all identifying information has been irreversibly removed — may be retained beyond the periods specified above for statistical and analytical purposes, as anonymised data no longer constitutes personal data for the purposes of this Privacy Policy.
Policy Updates & Contact
Changes to This Privacy Policy
jitaplay reserves the right to update or amend this Privacy Policy at any time. When material changes are made to this policy, we will notify registered players via email or via a prominent notice on the jitaplay platform at least 14 days before the changes take effect. The updated policy will always be available at this URL. Your continued use of jitaplay after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms.
We encourage you to review this Privacy Policy periodically to stay informed about how jitaplay protects your personal data. If you have any concerns about a change to this policy, please contact us before the effective date so that we can address your questions.
Contacting Us About Privacy
If you have any questions, concerns, or requests relating to this Privacy Policy or to the way jitaplay handles your personal data, please contact our data protection team using the details below. We take all privacy enquiries seriously and aim to respond within 5 business days for general queries and within 30 days for formal data subject access requests.
- Email: (please include "Privacy Request" in the subject line)
- Support Hours: 24/7 Live Chat & Email | Peak hours: 8:00 AM – 11:00 PM BST (UTC+6)
- Response Time: General privacy queries within 5 business days; data subject requests within 30 days
jitaplay is committed to resolving all privacy-related concerns in a timely and transparent manner. If you are not satisfied with our response to your privacy query, you retain the right to escalate your complaint by writing to our complaints handling team, clearly marking your correspondence as a formal privacy escalation.
Have Questions About Your Privacy?
Our support team is available around the clock to answer any questions about how jitaplay handles your data. You can also explore our FAQ for quick answers, read our Responsible Gaming policy, or head back to the casino lobby and start playing with confidence.