jbdt Privacy Policy

1 Introduction

This Privacy Policy ("Policy") describes how jbdt ("we", "us", "our", or "the Platform") collects, uses, stores, shares, and protects the personal data of individuals ("you", "User", or "Player") who access or use the jbdt website at https://jbdt.io and all associated services (collectively, the "Service").

jbdt is committed to handling your personal information responsibly and in accordance with applicable data protection principles. We recognise that privacy is important to our players, particularly those in Bangladesh who trust us with sensitive financial and identity information as part of the account registration and payment process.

By registering an account, making a deposit, or otherwise using the jbdt Service, you acknowledge that you have read and understood this Policy and consent to the data practices described herein. If you do not agree with this Policy, you should not use the Service.

2 Data We Collect

jbdt collects the following categories of personal data, depending on how you interact with the Service:

3 How We Collect Your Data

jbdt collects personal data through the following means:

• Direct Submission: Data you actively provide when creating an account, completing KYC verification, making a deposit or withdrawal request, contacting customer support, or setting responsible gaming limits.
• Automated Technical Collection: Data collected automatically when you access the jbdt website, including IP address, browser fingerprint, device type, referral URL, pages visited, and session duration. This data is collected via server logs, cookies, and similar tracking technologies described in Section 6.
• Payment Processors: When you make a deposit or withdrawal via bKash, Nagad, Rocket, Upay, Visa, or Mastercard, the relevant payment provider may share transaction reference data with jbdt to confirm successful payment and facilitate reconciliation.
• Identity Verification Partners: Where jbdt uses a third-party KYC or age-verification service, that provider may share the outcome of identity checks (e.g., verified / not verified) with jbdt. We do not store raw document images received from third-party providers beyond the minimum retention period required.
• Anti-Fraud and AML Tools: jbdt uses risk-scoring tools that analyse transaction patterns, login behaviour, and device data to detect suspicious activity. These tools may generate derived data about your account that is used for compliance purposes.

4 Purpose & Legal Basis for Processing

jbdt processes your personal data only where a lawful basis exists for doing so. The primary purposes and their corresponding legal bases are set out below:

• Contract Performance: Processing your registration data, managing your account, processing deposits and withdrawals, and settling bets is necessary for the performance of our contract with you as a registered player.
• Legal Obligation: We are required by applicable law to conduct age verification, identity checks (KYC), and anti-money laundering (AML) screening. Data processed for these purposes is retained for the legally mandated period.
• Legitimate Interests: jbdt processes technical and behavioural data to maintain platform security, detect fraud, improve the user experience, and conduct internal analytics. We balance these interests against your privacy rights and implement appropriate safeguards.
• Consent: Where we send you marketing communications about promotions, new games, or seasonal offers (such as Eid or BPL season specials), we do so only with your explicit consent, which you may withdraw at any time by contacting [email protected] or updating your account preferences.
• Vital Interests / Responsible Gaming: Where jbdt processes data to identify and assist players who may be experiencing gambling-related harm — for example, by flagging unusual loss patterns and offering access to self-exclusion tools — this processing is justified by the vital interests of our players and our commitment to responsible gaming standards.

5 Data Sharing & Disclosure

jbdt does not sell, rent, or trade your personal data. We share your data only in the following limited circumstances, and always subject to appropriate contractual safeguards:

• Payment Service Providers: bKash, Nagad, Rocket, Upay, Visa, and Mastercard receive the minimum data necessary to process your deposit or withdrawal transaction. These providers operate under their own privacy policies and are independently regulated.
• Identity & Age Verification Services: Third-party KYC providers receive your identity document data solely for the purpose of verifying your identity and age. They are contractually prohibited from using this data for any other purpose.
• Game Studio Providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other certified game providers receive a session token and anonymised player identifier to launch game sessions. They do not receive your full name, contact details, or financial data.
• Fraud Prevention & AML Screening: jbdt may share data with fraud prevention agencies and financial intelligence tools where necessary to detect and prevent money laundering, bonus abuse, or identity fraud.
• Legal Authorities: jbdt will disclose personal data to law enforcement, regulatory bodies, or courts where required by applicable law, a valid court order, or in response to a legitimate governmental request. We will notify you of such disclosure where legally permitted to do so.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your personal data may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy. You will be notified in advance of any such transfer.

6 Cookies & Tracking Technologies

jbdt uses cookies and similar tracking technologies to operate the platform, remember your preferences, maintain session security, and understand how players interact with the site. The following categories of cookies are used:

• Essential Cookies: Required for the website to function. These include session cookies that maintain your logged-in state and security tokens. Without these, the Service cannot be delivered. These cannot be disabled.
• Functional Cookies: Store your preferences such as language settings, preferred payment method display, and responsible gaming tool configurations. These persist between sessions to provide a personalised experience.
• Analytics Cookies: Used to collect aggregate, anonymised data about how players navigate the jbdt website — which pages are visited most frequently, where users exit, and how long sessions last. This data helps us improve the platform. No individually identifiable information is shared with analytics providers.
• Security Cookies: Help jbdt detect and prevent fraudulent login attempts, account takeover, and bot activity by analysing device fingerprinting and behaviour patterns within the session.

7 Data Retention

jbdt retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply as a general guide:

• Account & Identity Data: Retained for the duration of your account and for a minimum of 5 years following account closure, in line with standard financial record-keeping obligations.
• Transaction & Financial Records: Retained for a minimum of 7 years from the date of the transaction, as required for AML compliance and financial audit purposes.
• KYC Documents: Verification documents are retained for the duration required by applicable law, typically 5 years from account closure, after which they are securely destroyed.
• Technical & Log Data: Server logs and technical access data are retained for up to 12 months and then deleted or anonymised.
• Support Communications: Customer support chat and email records are retained for 3 years to assist with dispute resolution and service quality review.
• Marketing Consent Records: Records of your consent to receive marketing communications are retained for as long as you remain a registered player and for 2 years following account closure.

When data reaches the end of its retention period, jbdt ensures it is securely deleted, anonymised, or archived in a manner that prevents re-identification.

8 Data Security

jbdt implements a multi-layered security architecture to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. Key security measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and jbdt servers is encrypted using industry-standard TLS protocols. You can confirm this by the padlock icon in your browser address bar when accessing jbdt.io.
• Encryption at Rest: Sensitive personal data, including identity documents and financial records, is encrypted at rest using AES-256 encryption on our database infrastructure.
• Access Controls: Access to systems containing personal data is restricted to authorised employees and contractors on a strict need-to-know basis, enforced through role-based access control (RBAC) and multi-factor authentication (MFA).
• Regular Security Audits: jbdt conducts periodic internal and third-party security assessments to identify and remediate vulnerabilities in our systems and processes.
• Incident Response: In the event of a confirmed data breach that poses a risk to your rights and freedoms, jbdt will notify affected players without undue delay and will take immediate steps to contain the breach and prevent recurrence.

9 Your Data Rights

As a player on the jbdt platform, you have the following rights with respect to your personal data. To exercise any of these rights, please contact us at [email protected] with a clear description of your request. We aim to respond within 30 days.

• Right of Access: You may request a copy of the personal data jbdt holds about you, along with information about how it is being used and who it has been shared with.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it.
• Right to Erasure ("Right to be Forgotten"): You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to jbdt's legal obligations to retain certain records (e.g., financial transaction data required for AML compliance).
• Right to Restriction: You may request that jbdt temporarily restricts the processing of your data in certain circumstances, for example while the accuracy of data is being contested.
• Right to Object: You have the right to object to the processing of your personal data where that processing is based on jbdt's legitimate interests, including profiling for fraud detection purposes. We will cease such processing unless we can demonstrate compelling legitimate grounds.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.
• Right to Data Portability: Where processing is carried out by automated means and based on your consent or a contract with you, you may request that we provide your data in a structured, commonly used, machine-readable format.

10 Children & Minors

jbdt is strictly a 21+ platform. We do not knowingly collect personal data from individuals under the age of 21. Our registration process requires date-of-birth confirmation, and we enforce age verification checks to prevent underage access to the Service.

If jbdt becomes aware that personal data has been collected from a person under 21 years of age, we will immediately close the account, delete all associated personal data, and return any deposits made to the source payment method, net of any administrative costs incurred.

If you are a parent or guardian and believe your child may have accessed or registered on jbdt, please contact us immediately at [email protected]. We take this matter extremely seriously and will act promptly.

11 International Data Transfers

jbdt's primary server infrastructure is located in secure data centres within the Asia-Pacific region. In the course of delivering the Service — particularly in relation to game provision, payment processing, and identity verification — some personal data may be transferred to or processed in jurisdictions outside Bangladesh.

Where such transfers occur, jbdt ensures that appropriate safeguards are in place to protect your personal data, including:

• Contractual data processing agreements with all third-party processors that include standard data protection clauses requiring equivalent levels of protection to those described in this Policy.
• Restricting international data transfers to third parties who operate in jurisdictions with recognised data protection standards or who have implemented certified security frameworks.
• Minimising the scope of data transferred internationally to only what is strictly necessary for the service function being performed.

12 Responsible Gaming & Data

jbdt processes certain categories of player data specifically to support responsible gaming obligations. This includes monitoring betting patterns, deposit frequency, session lengths, and self-exclusion status in order to identify players who may be experiencing gambling-related harm.

Data processed for responsible gaming purposes is used exclusively for player welfare and compliance functions. It is not used for commercial profiling, targeted advertising, or any purpose unrelated to player protection. This processing is considered justified by the vital interests of our players.

If you activate a deposit limit, cooling-off period, or self-exclusion on your jbdt account, those instructions are recorded and enforced in our systems. Self-exclusion data is retained for the full duration of the exclusion period and for 5 years thereafter to prevent re-registration during the exclusion window.

For more information about the responsible gaming tools available to jbdt players, please visit our dedicated Responsible Gaming page.

13 Changes to This Privacy Policy

jbdt reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. When material changes are made, we will:

• Publish the updated Policy on this page with a revised "Last Updated" date.
• Notify registered players via the email address associated with their jbdt account at least 7 days before the changes take effect, where the changes materially affect how we use their data.

Your continued use of the jbdt Service after the effective date of any amended Privacy Policy constitutes your acceptance of the revised terms. We recommend reviewing this page periodically to stay informed of how we protect your information.

14 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or jbdt's data practices, please contact our support team through the following channel:

• Email: [email protected] (plain text — not a clickable link)
• Support Hours: 24 hours a day, 7 days a week, Bangladesh Standard Time (BST, UTC+6)
• Response Time: Privacy-related requests are acknowledged within 48 hours and resolved within 30 days

When contacting us regarding a data rights request, please include your registered email address, a brief description of your request, and your preferred contact method. We will verify your identity before processing any request that involves access to or deletion of personal data.