jay 999 Privacy Policy

jay 999 collects personal data from you directly when you register an account, make a deposit, place a wager, contact our support team, or interact with the Platform in any meaningful way. We also collect certain data automatically through your use of the website, including technical and behavioural data generated by your device and browser. The categories of personal data we collect are set out below.

Identity and Registration Data

When you register a jay 999 account, we collect your full legal name (as it appears on your Bangladesh National ID card or passport), your date of birth, your chosen username, your email address, and a hashed version of your chosen password. This data is required to create and maintain your account, verify your identity, and comply with Know Your Customer (KYC) obligations.

Identity Verification (KYC) Documents

To comply with Anti-Money Laundering (AML) regulations and to verify your age and identity before processing withdrawals, jay 999 may collect copies of the following documents: your Bangladesh National ID card (NID), passport, or driver's licence; a recent utility bill or bank statement issued in Bangladesh as proof of address; and where applicable, documentation confirming ownership of the payment method used.

Financial and Transaction Data

jay 999 records all financial transactions associated with your account, including deposits, withdrawals, bonus credits, wagering activity, and account balance history. For mobile financial service transactions via bKash, Nagad, Rocket, or Upay, we store the registered mobile number and transaction reference identifier. For bank transfers (BRAC Bank, City Bank, Dutch-Bangla Bank, Islami Bank, Sonali Bank), we retain the account holder name and bank reference number. We do not store full bank account numbers or mobile wallet PINs.

Behavioural and Usage Data

We automatically collect data about how you use the jay 999 Platform, including the games you play, the sports markets you browse, your betting patterns, session duration, pages visited, features used, and in-platform search queries. This data is used to improve the Platform experience, personalise your game recommendations, and detect unusual activity that may indicate fraud or problem gambling behaviour.

Technical and Device Data

Communication Data

When you contact jay 999 via live chat, email, or any other support channel, we retain records of those communications — including the content of your messages, the date and time of contact, and the resolution provided. This data is used to resolve your enquiry, improve our support quality, and maintain an audit trail for regulatory purposes.

jay 999 uses your personal data only for the lawful purposes described in this section. We process your data on the basis of contractual necessity (to deliver the services you have requested), legal obligation (to comply with applicable AML, KYC, and financial regulations), legitimate interest (to improve our Platform and protect against fraud), and, where required, your explicit consent (for marketing communications).

• Account Management: Creating and maintaining your jay 999 player account, authenticating your logins, processing password resets, and managing account settings.
• Identity Verification: Conducting KYC checks to verify your age, identity, and payment method ownership before processing withdrawal requests, as required by AML regulations.
• Payment Processing: Facilitating deposits and withdrawals via your chosen payment method (bKash, Nagad, Rocket, Upay, or bank transfer), verifying transaction integrity, and investigating payment disputes.
• Bonus and Promotion Administration: Determining your eligibility for promotional offers, crediting bonus amounts, tracking wagering progress, and investigating bonus abuse claims.
• Customer Support: Responding to your enquiries, resolving complaints, and maintaining records of support interactions for quality assurance and regulatory audit purposes.
• Fraud Prevention and Security: Detecting and preventing fraudulent activity, multi-account violations, money laundering, and other prohibited conduct described in the Terms & Conditions.
• Responsible Gaming: Monitoring betting patterns for signs of problem gambling behaviour, enforcing self-exclusion and deposit limit settings, and communicating responsible gaming resources to at-risk players.
• Legal Compliance: Meeting our obligations under applicable financial crime, data protection, and gambling-related regulations, including responding to lawful requests from regulatory authorities and law enforcement bodies.
• Platform Improvement: Analysing aggregated and anonymised usage data to improve Platform performance, game selection, user interface design, and the overall player experience.
• Marketing Communications: Sending you promotional offers, bonus notifications, and event-based communications (such as BPL season promotions or Eid special offers) where you have given your consent or where we have a legitimate interest. You may opt out at any time.

jay 999 does not sell your personal data to third parties. We do not share your information with advertisers, data brokers, or any party for their own commercial purposes. We may, however, disclose your personal data to the categories of recipients listed below, strictly for the purposes described and subject to appropriate data protection safeguards.

Payment Processing Partners

To facilitate deposits and withdrawals, we share the minimum necessary financial and identity data with our payment processing partners — including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, and Sonali Bank. These partners process your data solely to complete the requested transaction and are prohibited from using it for any other purpose.

Game and Technology Providers

jay 999 integrates games from certified third-party providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. When you play games from these providers, certain session and account data (such as a pseudonymised player ID and bet history) is shared with the relevant provider for game delivery, RNG certification, and fair play auditing purposes. These providers are contractually prohibited from using this data for purposes beyond game delivery and compliance.

Regulatory and Law Enforcement Bodies

jay 999 may disclose personal data to relevant regulatory authorities, financial intelligence units, or law enforcement bodies when required to do so by applicable law, court order, or official government request. Such disclosures are made only to the extent required by law and are documented in our internal compliance records.

KYC and Identity Verification Services

To conduct identity verification efficiently, jay 999 may use the services of third-party KYC technology providers. These providers process your identification documents and return a verified/unverified result. They are not permitted to retain copies of your documents beyond the period necessary to complete the verification check.

Professional Advisors

jay 999 may share personal data with our legal advisors, auditors, and accountants where strictly necessary for them to provide professional services to jay 999. All such advisors are bound by professional confidentiality obligations.

jay 999 uses cookies and similar tracking technologies to operate the Platform, authenticate your session, remember your preferences, and collect analytical data about Platform usage. A cookie is a small text file stored on your device by your web browser when you visit the jay 999 website.

Types of Cookies We Use

Managing Cookies

Strictly necessary cookies cannot be disabled as they are essential for the Platform to function. For all other cookie types, you may manage your preferences through your browser settings. Most modern browsers allow you to block, delete, or receive notification of cookies. Please note that disabling functional or analytical cookies may affect the quality of your Platform experience — certain features, such as remembered game preferences, may no longer be available.

Third-Party Tracking

jay 999 does not allow third-party advertising networks to place tracking cookies on the Platform for the purpose of serving targeted advertisements to our players on other websites. The only third-party cookies that may be present are those placed by our game providers (for game session management) and our analytics tool (for aggregated, anonymised traffic analysis).

jay 999 takes the security of your personal data seriously and maintains a comprehensive set of technical and organisational measures designed to protect your information against unauthorised access, loss, alteration, disclosure, or destruction.

• 256-Bit SSL/TLS Encryption: All data transmitted between your browser or mobile device and the jay 999 servers is encrypted using industry-standard 256-bit TLS encryption. This ensures that your login credentials, payment details, and personal information cannot be intercepted in transit.
• Encrypted Data Storage: Sensitive data — including identity documents, financial records, and KYC documentation — is stored in encrypted form on access-controlled servers. Encryption keys are managed separately from the encrypted data.
• Access Controls: Access to personal data within the jay 999 organisation is restricted on a strict need-to-know basis. Staff members can only access the specific data categories required to perform their designated role. All data access is logged and audited.
• Password Security: Player passwords are never stored in plain text. jay 999 uses industry-standard bcrypt hashing with a cost factor appropriate to current hardware capabilities, meaning even in the hypothetical event of a data breach, raw passwords cannot be recovered from stored hashes.
• Regular Security Audits: jay 999 conducts regular internal security reviews and engages independent third-party security experts to perform periodic penetration testing and vulnerability assessments of the Platform.
• Incident Response: In the event of a personal data breach that poses a risk to the rights and freedoms of affected players, jay 999 will notify affected users via their registered email address within a reasonable timeframe, describing the nature of the breach, the data affected, and the steps we are taking to mitigate its impact.

jay 999 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The retention periods applicable to each category of personal data are set out below.

At the end of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be attributed to an identified or identifiable individual. Anonymised data may be retained indefinitely for statistical and platform improvement purposes without restriction.

Where you request deletion of your personal data before the end of the applicable retention period, jay 999 will delete all data that is not subject to a mandatory legal retention obligation and will inform you of any categories of data that must be retained and the reason for that obligation.

As a player registered with jay 999, you have a number of rights in relation to the personal data we hold about you. jay 999 is committed to honouring these rights promptly and transparently. To exercise any of the rights described below, please contact our Data Protection contact at [email protected] with the subject line "Privacy Rights Request" and include your registered username and a description of your request.

• Right of Access: You have the right to request a copy of all personal data that jay 999 holds about you, along with information about how that data is being used, who it has been shared with, and how long it will be retained. We will respond to valid access requests within 30 calendar days.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Minor corrections (such as correcting a misspelled email address) can be made directly through your account settings panel. Corrections to identity data such as your full name or date of birth require submission of updated documentation.
• Right to Erasure ("Right to Be Forgotten"): You may request that jay 999 delete your personal data. We will action such requests where we are not subject to a legal obligation to retain the data. Where mandatory retention obligations apply (for example, AML-related financial records), we will inform you precisely which data must be retained and for how long, and will delete all other data immediately.
• Right to Restriction of Processing: You have the right to request that jay 999 restrict the processing of your personal data in certain circumstances — for example, while a dispute about the accuracy of your data is being resolved, or while you are contesting whether we have a legitimate basis to process your data.
• Right to Data Portability: Where technically feasible, you have the right to receive a copy of the personal data you provided to jay 999 in a structured, commonly used, machine-readable format (such as JSON or CSV), so that you may transfer it to another service provider.
• Right to Object to Marketing: You have the absolute right to object to the processing of your personal data for direct marketing purposes at any time. You may exercise this right by updating your communication preferences in your account settings or by contacting support. Marketing opt-out requests are processed within 5 business days.
• Right to Withdraw Consent: Where jay 999 processes your data on the basis of your consent (for example, for marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of any processing that occurred before withdrawal.

jay 999 takes its data protection responsibilities seriously. If you have any questions about this Privacy Policy, wish to exercise your privacy rights, or have a concern about how your personal data is being handled, please contact us using the details below. All privacy-related correspondence is handled by our dedicated compliance and data protection team.

Primary Contact

For general privacy enquiries, rights requests, and data-related complaints, please contact us at:

Submitting a Privacy Rights Request

When contacting us to exercise a privacy right, please include the following in your email to help us locate your records and process your request efficiently:

• Your full name as registered on your jay 999 account
• Your registered email address and account username
• The specific right you wish to exercise (e.g., "Right to Erasure", "Right of Access")
• A brief description of the specific data or processing activity your request relates to
• A copy of a valid identity document (required for erasure and portability requests)

Policy Updates

jay 999 reserves the right to update this Privacy Policy at any time. When material changes are made, we will notify registered players via their registered email address at least 14 days before the updated policy takes effect. The updated policy will also be published on this page with a revised "Last Updated" date. Your continued use of the Platform after the effective date of any update constitutes acceptance of the revised Privacy Policy.

Minor updates — such as corrections of typographical errors, clarifications that do not change the substance of the policy, or updates to contact information — may be made without prior notice and will take effect immediately upon publication.