jlbdt Privacy Policy
How We Collect, Use, and Protect Your Data

Introduction

This Privacy Policy applies to all personal data collected, processed, and stored by the jlbdt online betting and casino platform, accessible at jlbdt.io and through any associated mobile applications or services. It covers data collected from registered players, prospective players who browse the platform without registering, and individuals who contact jlbdt support.

jlbdt is committed to responsible, transparent, and lawful handling of personal data. We recognise that players across Bangladesh — from Dhaka and Chittagong to Sylhet, Khulna, Rajshahi, and beyond — entrust us with sensitive personal and financial information when they register and engage with our platform. Protecting that information is central to the trust we aim to build with every player.

By registering a jlbdt account or using jlbdt services, you acknowledge that you have read, understood, and accepted the practices described in this Privacy Policy. This Policy forms part of the jlbdt Terms & Conditions and should be read alongside them. Capitalised terms used but not defined in this Policy carry the meanings given to them in the jlbdt Terms & Conditions.

Data We Collect

jlbdt collects personal data in three primary ways: data you provide directly during registration and ongoing account use, data generated automatically by your interaction with the platform, and data received from trusted third-party sources as part of identity verification and fraud prevention processes.

Data You Provide Directly:

• Registration data: Full legal name, date of birth, gender, residential address (including city, district, and postal code), mobile phone number, and email address.
• Identity verification (KYC) data: National ID card number, passport number, or other government-issued identification; selfie photographs submitted for facial matching; proof of residential address documents.
• Payment data: Mobile wallet account numbers (bKash, Nagad, Rocket, Upay), bank account details (Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank), and transaction references. jlbdt does not store full card numbers — payment card data is handled exclusively by PCI-DSS-compliant payment processors.
• Support communications: The content of messages, complaints, and queries submitted via live chat, email, or any other support channel.
• Responsible gaming data: Deposit limit settings, self-exclusion requests, time-out preferences, and any disclosures you make regarding your gambling behaviour.

Data Collected Automatically:

• Device and technical data: IP address, device type, operating system, browser type and version, screen resolution, and device identifiers.
• Usage and behavioural data: Pages visited, games played, bet amounts and types, session duration, click-stream data, and feature interactions on the jlbdt platform.
• Location data: Approximate geographic location derived from IP address. jlbdt does not collect GPS-level precise location data.
• Cookie and tracking data: Information collected through cookies, web beacons, and similar technologies as described in Section 7 of this Policy.

Data from Third-Party Sources:

• KYC and identity verification providers: Results of document authenticity checks and facial matching scores provided by our third-party KYC partners.
• Fraud and AML screening providers: Risk scores, PEP (politically exposed persons) status, and sanctions screening results provided by compliance data vendors.
• Payment processors: Transaction status confirmations, payment method verification outcomes, and chargeback notifications.

How We Use Your Data

jlbdt uses personal data collected from players for the following specific and disclosed purposes. We do not use your data for any purpose not listed here without first obtaining your explicit consent or being required to do so by applicable law.

• Account creation and management: To register your jlbdt account, verify your identity and age, maintain your account records, and communicate with you about your account status, security alerts, and policy updates.
• Service delivery: To process your bets and casino game sessions, credit winnings to your account, process deposits and withdrawals via bKash, Nagad, Rocket, Upay, and supported bank channels, and deliver the core jlbdt betting and casino experience.
• Regulatory and legal compliance: To meet Know Your Customer (KYC) obligations, conduct Anti-Money Laundering (AML) screening, maintain required transaction records, respond to law enforcement or regulatory requests, and satisfy age verification requirements (21+ restriction).
• Fraud prevention and platform security: To detect, investigate, and prevent fraudulent activity, unauthorised account access, collusion, money laundering, and other prohibited conduct. This includes automated analysis of usage patterns and transaction behaviours.
• Responsible gaming: To monitor for indicators of problem gambling behaviour, enforce deposit limits and self-exclusion requests you have set, deliver reality check notifications, and provide gambling support information where appropriate.
• Customer support: To respond to your queries, process complaints and disputes, maintain records of support interactions for quality assurance, and follow up on unresolved issues.
• Platform improvement and analytics: To understand how players use the jlbdt platform, identify areas for improvement, test new features, and optimise the betting and gaming experience. Analytics data is used in aggregated or pseudonymised form wherever possible.
• Marketing communications: To send you promotional offers, bonus notifications, and news about new features on the jlbdt platform, where you have provided consent or where we have a legitimate interest in doing so. You may opt out of marketing communications at any time by contacting jlbdt support or using the unsubscribe mechanism in any marketing email.

Legal Basis for Processing

jlbdt processes your personal data on the following legal bases, depending on the specific processing activity involved:

• Performance of a contract: Processing necessary to open and maintain your jlbdt account, deliver betting and casino services, process deposits and withdrawals, and provide customer support. Without this processing, jlbdt cannot provide its services to you.
• Legal obligation: Processing required to comply with applicable legal and regulatory requirements, including KYC identity verification, AML screening, age verification, and record-keeping obligations. This processing cannot be refused or opted out of — it is a mandatory condition of holding a jlbdt account.
• Legitimate interests: Processing carried out for jlbdt's legitimate business interests where those interests are not overridden by your rights and interests. This includes fraud detection, platform security, responsible gaming monitoring, and analytical activities aimed at improving the platform. We conduct a balancing assessment before relying on this basis.
• Consent: Processing for optional purposes where you have given explicit, freely given, informed, and specific consent. This primarily covers optional marketing communications. You may withdraw consent at any time by contacting jlbdt support; withdrawal of consent does not affect processing carried out before the withdrawal.

Data Sharing and Disclosure

jlbdt does not share your personal data with third parties except in the specific circumstances set out below. All third parties with whom jlbdt shares personal data are required to maintain appropriate technical and organisational security measures and are prohibited from using your data for any purpose beyond those specified in their service agreements with jlbdt.

Service Partners (data processors acting on jlbdt's behalf):

• KYC and identity verification providers: Third-party services that perform document authenticity checks, facial recognition matching, and age verification on our behalf. Identity data is shared with these providers solely for the purpose of verifying your identity at registration and during KYC reviews.
• Payment processors and mobile wallet gateways: Payment infrastructure providers that facilitate deposits and withdrawals via bKash, Nagad, Rocket, Upay, and supported bank channels. Financial data is shared with these providers to the extent necessary to process your transactions.
• Game technology providers: Licensed game content providers including Evolution Gaming, Pragmatic Play, Ezugi, Spribe, NetEnt, and Microgaming. These providers may process technical and usage data in connection with delivering their game content. Their data practices are governed by their own privacy policies.
• Fraud and AML compliance vendors: Specialised compliance data services that screen player data against sanctions lists, PEP databases, and fraud risk indicators as part of our regulatory compliance obligations.
• IT infrastructure and hosting providers: Cloud hosting, database, and content delivery providers that provide the technical infrastructure on which the jlbdt platform operates. These providers process data only as instructed by jlbdt and under binding data processing agreements.
• Customer support platforms: Live chat and ticketing software providers that facilitate the delivery of jlbdt's support services. Support interaction data may be processed through these platforms.

Disclosure Required by Law:

• jlbdt may disclose personal data to law enforcement agencies, regulatory authorities, courts, or other public bodies where required to do so by applicable law, court order, or regulatory direction. Where permitted, jlbdt will notify affected players of such disclosure requests.
• In the event of a merger, acquisition, or sale of jlbdt's business or assets, player personal data may be transferred to the acquiring entity as part of that transaction, subject to equivalent privacy protections being maintained.

Data Retention

jlbdt retains personal data only for as long as necessary to fulfil the purposes for which it was collected, to comply with applicable legal and regulatory obligations, and to resolve disputes or enforce our agreements. The following general retention principles apply:

• Active account data: Personal data associated with an active jlbdt account is retained for the full duration of the account relationship and for a period of at least five years following account closure, to meet AML record-keeping and regulatory compliance requirements.
• KYC and identity verification records: Identity documents and verification records are retained for a minimum of five years from the date of the last transaction on the account, in accordance with standard financial compliance retention periods.
• Transaction records: Records of deposits, withdrawals, bets, and bonus transactions are retained for at least five years following the date of the transaction.
• Support and communications records: Records of customer support interactions are retained for a minimum of two years from the date of the interaction, or longer where the interaction relates to an unresolved dispute or formal complaint.
• Marketing consent records: Records of marketing consents and opt-outs are retained for the period necessary to demonstrate compliance with consent obligations.
• Anonymised and aggregated data: Data that has been fully anonymised — where it is no longer possible to identify an individual — may be retained indefinitely for analytical and product development purposes.

When personal data is no longer required, jlbdt will securely delete or anonymise it in accordance with our internal data disposal procedures. Players who request account closure may request confirmation of data deletion following the expiry of any applicable mandatory retention period by contacting jlbdt support.

Cookies and Tracking Technologies

jlbdt uses cookies and similar technologies — including web beacons, pixel tags, and local storage — to operate the platform, maintain session state, understand user behaviour, and improve the player experience. The following categories of cookies are used on the jlbdt platform:

• Strictly necessary cookies: Required for the platform to function. These include session authentication cookies that keep you logged in during a betting or gaming session, security tokens, and load-balancing cookies. These cookies cannot be disabled without impairing your ability to use the jlbdt platform.
• Functional cookies: Store your preferences and settings — such as language preferences, display settings, and recently viewed games — to personalise your experience on subsequent visits. These can be disabled, but doing so may affect platform functionality.
• Analytics cookies: Used by jlbdt to collect aggregated information about how players navigate and use the platform. This data helps us identify performance issues, popular features, and areas for improvement. Analytics data is pseudonymised where possible.
• Responsible gaming cookies: Store responsible gaming settings such as session time alerts and deposit limit display preferences to ensure these features function correctly during your session.

You can manage cookie preferences through your browser's settings. Most modern browsers allow you to block or delete cookies, receive warnings before cookies are stored, or browse in private mode. Note that disabling strictly necessary cookies will prevent you from logging in or using core platform features.

Data Security

jlbdt implements a layered set of technical and organisational security measures designed to protect your personal data against unauthorised access, loss, disclosure, alteration, and destruction. These measures include:

• TLS/SSL encryption: All data in transit between your device and jlbdt's servers is encrypted using industry-standard TLS (Transport Layer Security) protocols. The jlbdt platform operates exclusively over HTTPS.
• Encryption at rest: Sensitive personal data stored on jlbdt's infrastructure — including identity verification records and financial data — is encrypted at rest using AES-256 or equivalent encryption standards.
• Access controls: Access to personal data within jlbdt's systems is restricted to authorised personnel on a strict need-to-know basis. Access rights are reviewed regularly and revoked immediately upon a staff member's departure from the organisation.
• Multi-factor authentication: Internal jlbdt systems handling personal data require multi-factor authentication for staff access. Players are strongly encouraged to enable any available two-factor authentication features on their jlbdt accounts.
• Security monitoring: jlbdt's infrastructure is subject to continuous security monitoring, intrusion detection, and vulnerability scanning. Security incidents are assessed and responded to in accordance with our internal incident response procedures.
• Staff training: All jlbdt staff with access to personal data receive regular data protection and information security training.

While jlbdt employs robust security measures, no internet-based platform can guarantee absolute security. You are responsible for maintaining the security of your own jlbdt account credentials. If you suspect that your account has been compromised, contact jlbdt support immediately.

Your Privacy Rights

Registered jlbdt players have the following rights in relation to their personal data. To exercise any of these rights, contact jlbdt support using the details in Section 13. jlbdt will respond to all valid rights requests within a reasonable period and in any event within 30 days of receipt.

• Right of access: You have the right to request confirmation of whether jlbdt holds personal data about you, and to receive a copy of that data along with information about how it is used. This is commonly referred to as a Subject Access Request (SAR).
• Right to rectification: You have the right to request correction of inaccurate or incomplete personal data held about you. Where data cannot be corrected without completing a KYC amendment review, jlbdt will guide you through the process.
• Right to erasure: You have the right to request deletion of personal data held about you where it is no longer necessary for the purposes for which it was collected, or where you have withdrawn consent. This right is subject to limitations where retention is required by law — for example, AML and KYC records must be retained for the statutory minimum period regardless of deletion requests.
• Right to restriction of processing: You have the right to request that jlbdt restricts processing of your personal data in certain circumstances — for example, while the accuracy of data is being contested, or while a complaint is under investigation.
• Right to data portability: You have the right to request that jlbdt provides your personal data in a structured, commonly used, machine-readable format, where technically feasible and where processing is based on your consent or a contract.
• Right to object: You have the right to object to processing of your personal data where that processing is based on legitimate interests. You also have an unconditional right to object to direct marketing at any time.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time by contacting jlbdt support. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

Protection of Minors

jlbdt operates exclusively for adults aged 21 and above. The jlbdt platform is not intended for and does not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory component of the jlbdt registration and KYC process.

Where jlbdt discovers or is notified that an account has been opened by or on behalf of an individual under 21 years of age, the account will be immediately suspended, all associated activity will be reviewed, and any personal data collected in connection with that account will be deleted in accordance with applicable data protection obligations, except where retention is required to fulfil legal obligations related to the underage access incident.

If you have reason to believe that a minor has registered a jlbdt account, please notify jlbdt support immediately at [email protected] so that the matter can be investigated and resolved without delay.

International Data Transfers

jlbdt's primary operations and data storage are maintained with infrastructure serving the Bangladesh region. However, some of jlbdt's third-party service partners — including KYC providers, game technology suppliers, and platform infrastructure vendors — may process data in data centres located outside Bangladesh.

Where personal data is transferred to a third party operating outside Bangladesh, jlbdt ensures that appropriate safeguards are in place to protect your data to a standard consistent with this Privacy Policy. These safeguards may include contractual data processing agreements incorporating standard data protection clauses, partner certification under recognised privacy frameworks, or other legally recognised transfer mechanisms.

By registering a jlbdt account and using our services, you acknowledge that your personal data may be transferred to and processed in countries outside Bangladesh as described in this Section, in connection with the delivery of the jlbdt platform and services.

Amendments to This Policy

jlbdt reserves the right to update or amend this Privacy Policy at any time. We will provide advance notice of material changes by emailing registered players at their registered email address and by displaying a prominent notice on the jlbdt platform for a minimum of seven days before the revised Policy takes effect.

The effective date at the top of this document reflects when the current version of the Policy took effect. Where you continue to use the jlbdt platform after a revised Privacy Policy takes effect, your continued use constitutes acceptance of the updated Policy. If you do not agree with the revised Policy, you may request account closure and deletion of your personal data (subject to mandatory retention obligations) by contacting jlbdt support before the revised Policy's effective date.

We recommend that you review this Privacy Policy periodically to stay informed of any updates. The current version is always accessible from the footer of the jlbdt website.

Contact and Complaints

If you have any questions about this Privacy Policy, wish to exercise any of your privacy rights, or have a concern about how jlbdt handles your personal data, please contact the jlbdt support team using the details below:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24 hours a day, 7 days a week via the jlbdt platform interface
• Response Time: Privacy-related queries and Subject Access Requests are acknowledged within 24 hours and responded to substantively within 30 days
• Support Hours: 24/7, including Bangladesh public holidays (Bangladesh Standard Time, UTC+6)

When submitting a Subject Access Request or data deletion request, please include your registered jlbdt username, the nature of your request, and a description of the specific data or processing activity your request concerns. This helps our team locate your records accurately and respond efficiently.