jb666 Privacy Policy

1 Overview

jb666 ("we", "us", "our", "the Platform") is Bangladesh's trusted online casino and sports betting platform, accessible at jb666.io. We operate a BDT-denominated gaming service for adults aged 21 and above, integrating with local payment providers including bKash, Nagad, Rocket, and Upay. As a platform that processes financial transactions and identity documents, the responsible handling of personal data is not merely a legal obligation — it is a core part of how jb666 operates.

This Policy sets out the principles that govern our approach to personal data. We collect only the data that is necessary for the purposes described below. We store it securely using 256-bit SSL encryption and industry-standard cryptographic practices. We do not sell your personal data to any third party for commercial purposes. We give you meaningful control over the data we hold about you, including the right to access, correct, restrict, and delete it.

This Policy applies to personal data collected through the jb666 website, mobile interface, customer support channels, and promotional communications. It does not apply to third-party websites or services that may be linked from the platform — those are governed by their own privacy policies.

2 Data We Collect

The categories of personal data we may collect about you are set out in the table below:

Category	Examples	Required?
Identity Data	Full legal name, date of birth, national identity card (NID) number, passport number, photograph	Required for KYC
Contact Data	Email address, mobile phone number, residential address in Bangladesh (city, district, postcode)	Required for registration
Financial Data	bKash account number, Nagad account number, Rocket number, Upay ID, bank account details, transaction history, deposit and withdrawal records	Required for payments
Account Data	Username, hashed password, account tier, wallet balance, bonus balance, wagering history, game session logs	Required for account operation
Technical Data	IP address, device type, browser type and version, operating system, screen resolution, time zone, session duration	Collected automatically
Usage Data	Pages visited, games played, bets placed, features used, click paths, search queries within the platform	Collected automatically
Communications Data	Support chat transcripts, email correspondence, feedback submissions, complaint records	Collected when you contact us
Marketing Preferences	Promotional opt-in status, preferred communication channel, campaign interaction history	Optional

We do not intentionally collect sensitive personal data such as racial or ethnic origin, religious beliefs, health data, or political opinions. If any such data is inadvertently disclosed to us through a support communication, it will not be recorded or used for any purpose beyond resolving the specific interaction.

3 How We Collect Data

3.1 Directly From You

The majority of personal data we hold about you is provided directly by you at the following touchpoints: account registration, KYC document submission, deposit and withdrawal requests, jb666 Login and account settings updates, customer support interactions, and promotional or survey participation.

3.2 Automatically

When you access the jb666 platform, certain technical and usage data is collected automatically via server logs, session tracking, and first-party cookies. This includes your IP address, device identifiers, browser characteristics, and the sequence of pages and games you interact with during a session. This data is collected to ensure platform security, detect fraud, and improve the user experience.

3.3 From Third Parties

In limited circumstances, jb666 may receive data about you from third parties. This includes identity verification data returned by KYC service providers, payment confirmation data from bKash, Nagad, Rocket, Upay, and banking partners, and fraud-screening signals from security service providers. We do not purchase personal data lists from data brokers or marketing companies.

4 Purpose of Processing

jb666 processes your personal data for the following specific purposes:

• Account creation and management: To register your account, verify your identity, and maintain your jb666 profile and wallet.
• Payment processing: To facilitate deposits and withdrawals via bKash, Nagad, Rocket, Upay, and other supported payment methods, and to maintain accurate BDT transaction records.
• KYC and compliance: To meet age verification obligations (21+ requirement), verify ownership of payment methods, and fulfil anti-money laundering (AML) screening requirements.
• Fraud prevention and security: To detect and prevent unauthorised account access, fraudulent transactions, bonus abuse, and platform manipulation.
• Service delivery: To provide access to casino games, sports betting markets, promotions, and customer support.
• Responsible gaming: To monitor player activity for indicators of problem gambling and to administer self-exclusion, deposit limit, and session timer tools where requested or required.
• Platform improvement: To analyse usage patterns, identify technical issues, and develop new features that improve the jb666 experience for Bangladeshi players.
• Marketing communications: To send promotional offers, bonus notifications, and platform updates to users who have opted in to receive such communications.
• Legal obligations: To respond to lawful requests from competent authorities, preserve records required by applicable regulations, and defend jb666's legal rights in the event of a dispute.

5 Legal Basis for Processing

jb666 processes personal data on the following legal bases:

• Contractual necessity: Processing required to perform the contract between you and jb666 — including account registration, payment processing, and game access — is lawful on the basis that it is necessary to deliver the services you have requested.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and analytics is conducted on the basis of jb666's legitimate interests in operating a safe and reliable platform, where those interests are not overridden by your data protection rights.
• Legal obligation: Processing required to comply with AML regulations, age verification requirements, and lawful authority requests is conducted on the basis of legal obligation.
• Consent: Processing for direct marketing communications is conducted solely on the basis of your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6 Sharing Your Data

jb666 does not sell, rent, or trade your personal data to any third party for commercial purposes. We may share personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data processing agreements:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard receive the minimum data necessary to process your deposit or withdrawal transaction.
• KYC and identity verification providers: Third-party identity verification services may receive copies of your NID, passport, or supporting documents for the purpose of age and identity confirmation.
• Game providers: Game studios such as Pragmatic Play, Evolution Gaming, Spribe, Ezugi, NetEnt, and Microgaming may receive your account identifier and session data to deliver their games via the jb666 platform. These providers operate under their own data processing agreements and may be located outside Bangladesh.
• Fraud and security providers: Specialist cybersecurity and fraud screening services may receive technical identifiers (IP address, device fingerprint) for the purpose of risk assessment.
• Legal and regulatory authorities: jb666 will disclose personal data to competent governmental or regulatory authorities where required to do so by applicable law or a valid court order.
• Professional advisers: Legal counsel, auditors, and compliance consultants engaged by jb666 may access personal data on a strictly confidential basis where necessary to provide their professional services.

7 Data Retention

jb666 retains personal data only for as long as is necessary for the purpose for which it was collected, subject to any longer retention period required by applicable law or regulatory obligation. The following retention periods apply as a general guide:

• Account and identity data: Retained for the duration of the active account plus a minimum of 5 years following account closure, in compliance with AML record-keeping requirements.
• Financial transaction records: Retained for a minimum of 5 years from the date of the transaction.
• KYC documents: Retained for a minimum of 5 years following the completion of the KYC process or account closure, whichever is later.
• Support communications: Retained for 2 years from the date of the last interaction, or longer if the subject matter relates to an unresolved dispute.
• Marketing preference records: Retained for 3 years from the date of the last marketing interaction, or until consent is withdrawn, whichever is earlier.
• Technical and usage logs: Retained for 12 months on a rolling basis, after which they are anonymised or deleted.

Where jb666 no longer has a lawful basis for retaining personal data, it will be securely deleted or anonymised so that it can no longer be associated with any identifiable individual.

8 Data Security

jb666 implements a comprehensive set of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. Key security measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the jb666 platform.
• Hashed and salted storage of all account passwords — plain-text passwords are never stored.
• Two-factor authentication (2FA) available for all accounts via SMS verification.
• Role-based access controls limiting internal access to personal data to staff who require it for their specific job functions.
• Regular penetration testing and vulnerability assessments of the platform infrastructure.
• Encrypted database storage for all financial and identity records.
• Automated anomaly detection systems that flag unusual login patterns or transaction behaviour for human review.

Despite these measures, no internet-based system can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, jb666 will notify affected users as soon as reasonably practicable and will take all necessary steps to contain and remediate the incident.

9 Cookies & Tracking Technologies

9.1 What Are Cookies

Cookies are small text files placed on your device by a website when you visit it. jb666 uses first-party cookies to support essential platform functionality and to improve your experience. We do not use third-party advertising cookies or cross-site tracking technologies.

9.2 Types of Cookies Used

• Essential cookies: Required for the platform to function. These include session authentication cookies that keep you logged in during your visit and security cookies that protect against cross-site request forgery (CSRF). These cookies cannot be disabled without impairing your ability to use the platform.
• Functional cookies: Remember your preferences such as language settings, last-visited game category, and responsible gaming tool settings to personalise your experience.
• Analytics cookies: First-party analytics cookies help jb666 understand how players navigate the platform, which games are most popular, and where technical issues occur. This data is aggregated and anonymised and is not used to identify individual users.

9.3 Managing Cookies

You can control and delete cookies through your browser settings. Please note that disabling essential cookies will prevent you from logging in and using core platform features. Instructions for managing cookies are available through the help section of all major browsers. Continuing to use the jb666 platform after being presented with our cookie notice constitutes consent to the use of non-essential cookies as described above.

10 Your Data Rights

As a jb666 user whose personal data we process, you have the following rights. To exercise any of these rights, contact us at [email protected] with the subject line "Data Rights Request". We will respond within 30 days of receipt.

Please note that certain rights are subject to limitations. For example, the right to erasure does not apply where jb666 is required to retain data to comply with a legal obligation such as AML record-keeping. We will always explain the reason if we are unable to fulfil a data rights request in full.

11 Children's Privacy

The jb666 platform is strictly intended for adults aged 21 years and above. We do not knowingly collect personal data from any person under the age of 21. Age verification is a mandatory step in the account registration and KYC process. If jb666 discovers that personal data has been submitted by or on behalf of a person under the age of 21, the associated account will be suspended immediately, all data will be securely deleted, and any deposited funds will be returned to the source payment method after completing necessary compliance checks.

If you are a parent or guardian and believe that a person under your care has registered an account on jb666, please contact us immediately at [email protected] so we can investigate and take appropriate action.

12 Cross-Border Data Transfers

jb666 is operated primarily for and within the Bangladesh market. However, some of our third-party service providers — including game studios such as Pragmatic Play, Evolution Gaming, Spribe, NetEnt, Ezugi, and Microgaming, as well as our cloud infrastructure and KYC verification partners — may process personal data outside Bangladesh. Where such transfers occur, jb666 ensures that appropriate safeguards are in place, including contractual data processing agreements that require the receiving party to maintain standards of data protection equivalent to those described in this Policy. jb666 does not transfer personal data to jurisdictions that do not provide an adequate level of data protection without first implementing appropriate safeguards.

13 Third-Party Services

The jb666 platform may contain links to game provider interfaces or informational pages operated by third parties. These third-party services have their own privacy policies, which govern how they handle your data independently of jb666. We recommend reviewing the privacy policies of any third-party service you interact with. jb666 is not responsible for the privacy practices, content, or data handling of any third-party service, and the inclusion of a game provider or payment partner on the jb666 platform does not constitute an endorsement of their data practices.

14 Marketing Communications

jb666 may send you promotional communications via email or SMS, including information about bonuses, new games, seasonal promotions tied to events such as Eid, Pohela Boishakh, BPL season, or IPL season, and platform updates. We will only send marketing communications where you have explicitly opted in to receive them during account registration or through your account settings. Each marketing communication will include a clear and simple mechanism to unsubscribe from future messages.

Withdrawing consent for marketing communications will not affect your ability to use the jb666 platform, access your account, or process deposits and withdrawals. Transactional communications — such as deposit confirmations, withdrawal notifications, and account security alerts — are not marketing communications and will continue to be sent regardless of your marketing preference.

15 Changes to This Policy

jb666 reserves the right to update this Privacy Policy at any time. Where changes are material — for example, a new category of data being collected or a new purpose for processing — we will notify registered users via the email address on file at least 7 days before the change takes effect. The updated Policy will always be available at jb666.io/privacy-policy and will be dated at the top of the document. Your continued use of the jb666 platform after the effective date of any update constitutes your acceptance of the revised Policy. We encourage you to review this Policy periodically to stay informed about how we are protecting your data.

16 Contact & Complaints

If you have any questions, concerns, or requests relating to this Privacy Policy or the personal data jb666 holds about you, please contact the jb666 data support team using the details below:

• Email: [email protected] (plain text — not a clickable link)
• Subject line for data requests: "Data Rights Request" or "Privacy Enquiry"
• Support Hours: 24 hours a day, 7 days a week (Bangladesh Standard Time, UTC+6)
• Response Time: Within 30 days for data rights requests; within 24 hours for general privacy enquiries

If you are not satisfied with our response to a privacy complaint, you have the right to escalate your concern to the relevant data protection authority or seek independent legal advice. jb666 takes all privacy complaints seriously and will investigate every concern raised through the above channel.