jatace Privacy Policy

jatace operates the online gaming and sports betting platform accessible at jatace.net (the "Platform"). As the operator of this Platform, jatace acts as the data controller with respect to all personal data collected from Members and visitors.

This Privacy Policy has been prepared to communicate, in clear and accessible language, the full scope of our data practices. It covers the types of personal data we collect, the purposes and legal bases for which that data is processed, the circumstances in which it may be disclosed to third parties, the security measures we apply to protect it, how long we retain it, and the rights you hold as a data subject.

jatace is committed to processing personal data responsibly, in accordance with internationally recognised data protection principles including purpose limitation, data minimisation, storage limitation, and integrity and confidentiality. We do not sell personal data to third parties for marketing purposes and we do not engage in the sale of Member data to data brokers.

This Policy applies to all personal data collected through the Platform, whether submitted directly by Members during registration, collected automatically through your use of the website, or obtained from authorised third-party verification and payment service providers.

jatace collects personal data in three principal ways: information you provide to us directly, information we collect automatically when you use the Platform, and information we receive from authorised third-party service providers. The categories of personal data we collect are set out below.

We may receive identity verification results, fraud-risk scores, and payment status confirmations from authorised third-party service providers including identity verification agencies, payment processors (bKash, Nagad, Rocket, Upay, and banking partners), and fraud prevention networks. This data supplements the information you provide directly and is used solely for the purposes described in Section 3.

jatace processes personal data only for defined, legitimate purposes. We do not repurpose data in ways that are incompatible with the original reason for which it was collected. The table below summarises our primary processing activities.

jatace does not use automated decision-making processes that produce legally significant or similarly significant effects on Members without human review. Responsible gaming alerts and account-limit triggers are generated automatically but are reviewed by the support team before action is taken.

jatace processes personal data on the following legal bases, depending on the specific purpose of processing:

• Contractual Necessity: Processing is necessary to perform the contract between jatace and a Member — specifically, to operate the Account, process deposits and withdrawals, provide access to games and betting markets, and deliver customer support.
• Legal Obligation: Processing is required to comply with applicable legal obligations, including anti-money-laundering (AML) requirements, age-verification obligations, and lawful requests from competent authorities.
• Legitimate Interests: Processing is carried out to pursue jatace's legitimate interests in fraud prevention, platform security, abuse detection, and the improvement of services — where those interests are not overridden by a Member's fundamental rights and freedoms.
• Consent: Where processing is based on consent — for example, sending promotional emails or newsletters — we will obtain your explicit consent before doing so. You may withdraw consent at any time by contacting [email protected] or using the communication preference settings in your Account. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

jatace does not sell, rent, or trade your personal data to third parties for their own marketing purposes. Personal data is shared only in the following defined circumstances:

To process deposits and withdrawals in BDT, we share necessary financial and identity data with payment partners including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, and Sonali Bank. These providers process your data solely to execute the financial transaction and are contractually prohibited from using it for other purposes.

To fulfil our age-verification and KYC obligations, we may share identity documents and personal details with authorised third-party identity verification agencies. These agencies verify the authenticity of submitted documents and return a pass/fail result to jatace. Verification providers are required to handle data in accordance with strict confidentiality and data-security standards.

Game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive session tokens and anonymised player identifiers to operate game sessions on jatace. These providers do not receive your full identity, financial data, or contact details. Session data shared with providers is used solely for the purpose of delivering the game experience.

To protect Members and the Platform from fraud, jatace may share device fingerprint data, IP addresses, and risk-signal indicators with fraud prevention networks and cybersecurity service providers. These disclosures are made solely to detect, investigate, and prevent fraudulent activity.

jatace will disclose personal data to competent authorities where required to do so by law, by a valid court order, or in connection with a lawful regulatory or law-enforcement request. In all such cases, jatace will disclose only the minimum data necessary to satisfy the legal obligation and will, where legally permissible, notify the affected Member.

In the event that jatace undergoes a corporate restructuring, merger, acquisition, or asset sale, Member personal data may be transferred to the successor entity as part of that transaction. Members will be notified of any such transfer and of any material change to data-processing arrangements that results from it, with a reasonable period in which to close their Account before the transfer takes effect if they do not consent to the new terms.

jatace uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files placed on your device when you visit the site. The following categories of cookies are used:

• Strictly Necessary Cookies: These cookies are essential for the Platform to function. They enable session authentication, maintain your login state, and support security features. These cookies cannot be disabled without rendering core Platform functions inoperable.
• Functional Cookies: These cookies remember your preferences — such as language settings and display preferences — and allow the Platform to provide an enhanced, personalised experience. Disabling these cookies may reduce Platform functionality.
• Analytics Cookies: jatace uses analytics tools to understand how Members navigate the Platform, which pages attract the most engagement, and where technical errors occur. Data collected by analytics cookies is aggregated and anonymised where possible. Analytics cookies can be disabled by adjusting your browser settings.
• Security and Fraud-Detection Cookies: These cookies support our fraud prevention systems by identifying anomalous behaviour patterns and flagging potential account compromise. They form part of our legitimate interest in Platform security.

You may control cookie settings through your browser's privacy preferences. Note that disabling strictly necessary cookies will impair your ability to log in and use the Platform. jatace does not use third-party advertising cookies or cross-site behavioural tracking cookies.

jatace retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal obligations. The following retention guidelines apply:

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where data cannot be immediately deleted due to a legal hold, active investigation, or unresolved dispute, deletion is deferred until resolution and then completed without unnecessary delay.

jatace implements appropriate technical and organisational security measures to protect personal data against unauthorised access, accidental loss, alteration, or disclosure. Our security framework includes the following controls:

• TLS/SSL Encryption in Transit: All data transmitted between your browser and jatace servers is encrypted using current-generation TLS protocols. This applies to login credentials, payment data, and all API communications.
• Encryption at Rest: Sensitive personal data stored in jatace databases — including identity documents, financial data, and authentication credentials — is encrypted at rest using AES-256 or equivalent standards.
• Access Controls: Access to personal data is restricted on a strict need-to-know basis. Internal systems apply role-based access control (RBAC), and all administrative access is logged and audited.
• Password Security: Member passwords are hashed using industry-standard algorithms (bcrypt or equivalent) and are never stored in plain text. jatace staff cannot recover or read your password; only a password reset is possible.
• Fraud Detection Systems: Automated systems continuously monitor for unusual login patterns, atypical transaction volumes, and anomalous game session behaviour. Detected anomalies trigger security reviews.
• Incident Response: jatace maintains a documented data-breach response procedure. In the event of a confirmed personal data breach that poses a risk to Members, jatace will notify affected Members as soon as reasonably practicable and take immediate remediation steps.

As a data subject, you hold the following rights with respect to your personal data held by jatace. To exercise any of these rights, contact us at [email protected] with the subject line "Data Rights Request". jatace will respond to verified requests within thirty (30) calendar days.

jatace will not discriminate against any Member for exercising their data rights. Exercising your rights will not result in degraded service, reduced bonus eligibility, or Account suspension, except where a restriction or deletion request makes continued provision of the Service technically impossible (e.g., requesting erasure of all identity data while an Account is open).

The jatace Platform is strictly restricted to individuals aged 18 years and above. jatace does not knowingly collect personal data from any person under the age of 18. Age verification is performed during the Account registration process, and jatace reserves the right to request documentary proof of age at any time.

If jatace becomes aware that personal data has been collected from a person under the age of 18, all data associated with that individual will be permanently deleted, the Account will be closed, any deposited funds will be returned to the payment source, and any winnings generated will be voided. If you believe a minor has accessed the Platform using your Account or personal details, you must notify jatace immediately at [email protected].

The jatace Platform integrates third-party software and service providers to deliver the gaming experience and operational infrastructure. While jatace selects these providers carefully and requires them to maintain appropriate data-protection standards, jatace is not responsible for the independent privacy practices of third-party providers.

Game software providers — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — operate their game engines under their own data-handling agreements. These providers receive only the minimum technical data required to operate a game session (typically a session token and anonymised player identifier). Members wishing to understand a specific provider's data practices should refer to that provider's published privacy policy.

jatace's Platform does not contain embedded social media widgets, third-party advertising trackers, or affiliate tracking pixels that collect personal data without disclosure. All third-party integrations present on the Platform are disclosed in this Policy or in associated technical documentation.

jatace operates as an international platform, and some of the service providers we work with — including game software studios, cloud infrastructure providers, and fraud-prevention networks — may process personal data in jurisdictions outside Bangladesh. Where personal data is transferred to a jurisdiction that does not offer an equivalent level of data protection, jatace ensures that appropriate safeguards are in place, which may include:

• Standard contractual clauses that impose data-protection obligations on the recipient entity equivalent to those applied by jatace.
• Data processing agreements that specify purpose limitations, security requirements, sub-processing restrictions, and data-subject rights obligations.
• Adequacy assessments conducted before establishing a new data-sharing relationship with an overseas provider.

jatace does not transfer personal data to jurisdictions subject to internationally recognised sanctions or to service providers that cannot demonstrate adequate data-protection standards. Members may request information about the specific safeguards applied to international transfers by contacting [email protected].

jatace reserves the right to update or amend this Privacy Policy at any time. The effective date at the top of this page will be updated to reflect the date of the most recent revision. Where amendments are material — for example, where they introduce a new category of data collection, a new purpose for processing, or a new category of third-party recipient — jatace will notify registered Members via email to the address held on their Account, providing a minimum of fourteen (14) days' notice before the amended Policy takes effect.

For non-material amendments (such as clar ifications of existing language, typographical corrections, or updates to contact details), jatace may update the Policy without advance notice, though the revised effective date will always be displayed prominently at the top of the page.

Your continued use of the Platform after the effective date of any amended Privacy Policy constitutes your acknowledgement of the amended terms. If you do not agree with the revised Policy, you must discontinue use of the Platform and contact [email protected] to request Account closure.

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact the jatace Privacy Team using the details below. All privacy-related correspondence is handled by dedicated staff and will receive a substantive response within thirty (30) calendar days.