ja79 Privacy Policy

1 Who We Are

ja79 is an online betting and casino platform accessible at ja79.io, serving registered players across Bangladesh, including Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar. For the purposes of this Privacy Policy, ja79 acts as the data controller in respect of personal data collected from players who use the platform.

As data controller, ja79 determines the purposes and means by which personal data is processed. If you have any questions or concerns about this Policy or the way your personal data is handled, you may contact ja79 using the details provided in Section 14.

2 Personal Data We Collect

ja79 collects the following categories of personal data in connection with your use of the platform:

2.1 Identity Data

Full legal name, date of birth, gender, and nationality. This information is collected at the point of account registration and may be verified through the KYC process using copies of government-issued identification such as a National Identity Card, passport, or driving licence.

2.2 Contact Data

Email address, mobile phone number, and residential address (including city, district, and postal code). Contact data is used for account management, transactional notifications, support communications, and, where you have opted in, promotional communications.

2.3 Financial Data

Payment method identifiers including bKash account numbers, Nagad account numbers, Rocket account numbers, Upay identifiers, Visa or Mastercard card numbers (masked, with full PAN not stored by ja79), and Dutch-Bangla Bank account references. Transaction history including deposit amounts, withdrawal amounts, dates, and processing status is retained as part of your account record.

2.4 Technical Data

IP address, device type, browser type and version, operating system, screen resolution, and device identifiers. Session data including login timestamps, session durations, and pages visited within the platform is also collected automatically.

2.5 Behavioural and Gaming Data

Betting history, game play records (including game titles, stakes, outcomes, and session times), bonus usage records, and responsible gaming tool usage (including deposit limit settings and self-exclusion requests).

2.6 Communications Data

Records of your communications with ja79 support, including support ticket content, chat transcripts, and email correspondence. These records are retained to maintain service quality, resolve disputes, and train support staff.

2.7 KYC Document Data

Copies of identity documents, proof-of-address documents, and payment method verification documents submitted as part of the KYC process. Document images are stored securely and access is restricted to authorised compliance personnel only.

3 How We Collect Your Data

ja79 collects personal data through the following methods:

• Direct collection: Information you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting support, or entering a promotion.
• Automated collection: Technical and behavioural data collected automatically as you navigate and interact with the ja79 platform, using cookies, server logs, and similar tracking technologies (see Section 6).
• Third-party sources: Identity verification data returned by KYC service providers following document checks; fraud risk signals provided by payment processors; and device reputation data from fraud detection partners.
• Inferred data: Profiles and risk assessments generated internally by ja79 based on your account activity, used for responsible gaming monitoring and fraud prevention purposes.

4 Why We Use Your Personal Data

The following table summarises the primary purposes for which ja79 processes your personal data and the corresponding data categories used for each purpose:

ja79 will not use your personal data for any purpose other than those listed above without first notifying you and, where required, obtaining your consent.

5 Legal Bases for Processing

ja79 processes personal data only where a valid legal basis exists. The legal bases we rely upon are as follows:

5.1 Contractual Necessity

The majority of data processing by ja79 is necessary for the performance of the contract between ja79 and you as a registered player. This includes processing your registration data, verifying your identity, processing financial transactions, delivering betting and gaming services, and managing your account. Without this processing, ja79 cannot provide the services you have requested.

5.2 Legal Obligation

Certain processing activities are required by applicable law, including KYC and age verification (to comply with responsible gaming obligations), transaction record-keeping (to comply with financial regulations), and disclosure of data to law enforcement or regulatory authorities upon receipt of a lawful request.

5.3 Legitimate Interests

ja79 processes certain data on the basis of legitimate interests, where those interests are not overridden by your rights and interests. Legitimate interest processing includes fraud detection and prevention, platform security monitoring, responsible gaming risk profiling, and aggregated analytics for service improvement. ja79 has conducted legitimate interest assessments for each of these purposes to confirm that the processing is proportionate and necessary.

5.4 Consent

Where ja79 processes data on the basis of consent — for example, sending you promotional emails or SMS communications — you may withdraw that consent at any time by contacting ja79 support or updating your communication preferences in your account settings. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

6 Cookies & Tracking Technologies

ja79 uses cookies and similar tracking technologies on the platform to ensure the site functions correctly, to improve the user experience, and to support security and fraud prevention measures. The following categories of cookies are used:

6.1 Strictly Necessary Cookies

These cookies are essential for the platform to function and cannot be disabled. They are used to maintain your authenticated session, remember your account preferences, and protect against cross-site request forgery (CSRF) attacks. No personal data collected through strictly necessary cookies is used for marketing purposes.

6.2 Performance and Analytics Cookies

These cookies collect aggregated, anonymised information about how players use the ja79 platform — for example, which pages are visited most frequently and where players encounter errors. This data is used exclusively for improving the platform and is not linked to identifiable individuals.

6.3 Functionality Cookies

These cookies remember your platform settings and preferences, such as your display language and preferred payment method. They improve the convenience of your experience and do not track activity across external websites.

6.4 Security and Fraud Prevention Cookies

ja79 uses device fingerprinting and session integrity cookies to detect suspicious login attempts, identify potentially fraudulent activity, and enforce the one-account-per-player rule. These are applied on the basis of ja79's legitimate interest in maintaining platform security.

7 Sharing Your Personal Data

ja79 does not sell your personal data. We share personal data only in the following strictly defined circumstances:

7.1 Payment Processors

When you make a deposit or withdrawal via bKash, Nagad, Rocket, Upay, Visa, Mastercard, or Dutch-Bangla Bank, the minimum necessary data is shared with the relevant payment service provider to process the transaction. These providers operate under their own privacy policies and are bound by contractual data processing agreements with ja79.

7.2 KYC and Identity Verification Partners

Identity document data submitted during KYC verification may be processed by a third-party identity verification service provider. These providers verify document authenticity and return a verification result to ja79. Document images are not retained by third-party providers beyond the verification process.

7.3 Fraud Prevention Services

Technical data — including device identifiers, IP addresses, and behavioural signals — may be shared with specialist fraud prevention platforms to assess transaction risk and detect account takeover attempts. These services do not use your data for any purpose other than the fraud prevention services they provide to ja79.

7.4 Legal and Regulatory Authorities

ja79 may disclose personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by applicable law, or where such disclosure is necessary to protect the rights, property, or safety of ja79, its players, or the public. ja79 will only disclose the minimum data necessary to satisfy the specific legal requirement.

7.5 Business Transfers

In the event that ja79's business or the ja79 platform is transferred to a third party through a merger, acquisition, or asset sale, personal data held by ja79 may be transferred as part of that transaction. In such circumstances, affected players will be notified in advance, and any new data controller will be required to honour the commitments set out in this Privacy Policy.

8 Data Retention

ja79 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, and in accordance with applicable legal and regulatory retention requirements. The following retention periods apply as general guidelines:

At the end of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked to an identifiable individual. Anonymised data may be retained indefinitely for statistical and analytical purposes.

9 Data Security

ja79 implements a multi-layered approach to data security designed to protect personal data against unauthorised access, disclosure, alteration, and destruction. Key security measures include:

• Transport Layer Security (TLS): All data transmitted between your device and ja79 servers is encrypted using current TLS standards, preventing interception in transit.
• Encryption at Rest: Sensitive data fields — including payment method identifiers and identity document references — are encrypted in the database using AES-256 or equivalent encryption.
• Access Controls: Access to personal data is restricted to ja79 employees and contractors who have a demonstrable need to access that data in the course of their duties. Access rights are reviewed periodically and revoked promptly upon change of role or termination of employment.
• Penetration Testing: ja79 conducts periodic security assessments, including penetration testing by independent specialists, to identify and remediate vulnerabilities in the platform.
• Incident Response: ja79 maintains a documented data breach response procedure. In the event of a breach that poses a risk to your rights and interests, ja79 will notify affected players without undue delay and, where required by applicable law, report the breach to the relevant authorities.
• Employee Training: All ja79 staff with access to personal data receive training in data protection principles and security awareness on a regular basis.

10 Your Data Protection Rights

As a player on the ja79 platform, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact ja79 support using the details provided in Section 14. ja79 will acknowledge your request within 48 hours and provide a substantive response within 30 days.

10.1 Right of Access

You have the right to request a copy of the personal data that ja79 holds about you, together with information about how and why it is being processed. This is commonly referred to as a Subject Access Request (SAR).

10.2 Right to Rectification

If any personal data ja79 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. For account details such as your address or contact number, you may be able to update these directly through your account settings without contacting support.

10.3 Right to Erasure

You have the right to request deletion of your personal data where: (a) the data is no longer necessary for the purpose for which it was collected; (b) you withdraw consent and no other legal basis exists for continued processing; (c) you object to processing and there is no overriding legitimate interest; or (d) the data has been processed unlawfully. Note that this right is subject to exceptions — for example, ja79 is required by law to retain certain financial and identity records for defined periods as described in Section 8.

10.4 Right to Restrict Processing

You may request that ja79 restricts processing of your data in certain circumstances — for example, while the accuracy of data you have contested is being verified, or while an objection you have raised is being assessed.

10.5 Right to Data Portability

Where processing is based on your consent or on contractual necessity and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to request that it be transmitted directly to another data controller where technically feasible.

10.6 Right to Object

You have the right to object at any time to processing of your personal data that is carried out on the basis of legitimate interests. ja79 will cease that processing unless it can demonstrate compelling legitimate grounds that override your interests, or the processing is necessary for the establishment, exercise, or defence of legal claims.

10.7 Right to Withdraw Consent

Where processing is based on your consent (for example, receiving promotional communications), you may withdraw that consent at any time without detriment. Withdrawal of consent does not affect the lawfulness of any processing that took place prior to withdrawal.

11 Children's Privacy

The ja79 platform is strictly for adults. Persons under the age of 21 are not permitted to register an account, access any part of the platform, or engage in any betting or gaming activity. ja79 does not knowingly collect personal data from individuals under the age of 21.

If ja79 discovers or is notified that personal data has been collected from a person under 21, the affected account will be immediately suspended, all funds associated with that account will be handled in accordance with applicable responsible gaming protocols, and all personal data linked to the account will be deleted as promptly as possible subject to any overriding legal obligations.

12 Third-Party Links

The ja79 platform does not contain links to third-party websites. All navigational links on the platform point exclusively to internal ja79 pages. However, payment service providers (bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank) operate their own independent platforms and privacy policies. When you interact with a payment provider's interface to complete a transaction, that interaction is governed by the payment provider's own privacy policy and not by this Policy.

ja79 has no control over and accepts no responsibility for the content, privacy practices, or data handling of any third-party service provider's own platform. We encourage you to read the privacy notices of any third-party services you use in connection with your ja79 account.

13 Updates to This Privacy Policy

ja79 reviews this Privacy Policy on a regular basis and updates it when necessary to reflect changes in our data processing practices, changes in applicable law, or changes to the services we offer. The date of the most recent update is shown at the top of this page.

When material changes are made — that is, changes that significantly affect your rights or the way your data is used — ja79 will notify all registered players by email to the address associated with their account at least 14 days before the revised Policy takes effect. We will also display a prominent notice on the platform during the notice period.

For non-material changes (such as corrections of typographical errors, clarifications that do not alter the substance of the Policy, or updates to contact information), ja79 will update the Policy without individual notification. It is your responsibility to review this Policy periodically to stay informed of any such minor updates.

14 Contact Us

If you have any questions about this Privacy Policy, wish to exercise a data protection right, or have a concern about the way your personal data has been handled by ja79, please contact the ja79 Data Protection team:

• Email: [email protected] (plain text — not a clickable link)
• Response Time: ja79 aims to acknowledge all data protection enquiries within 48 hours and provide a full response within 30 days.
• Language: All correspondence regarding data protection matters is conducted in English.
• Operating Hours: The ja79 support team is available 7 days a week, Bangladesh Standard Time (BST, UTC+6).