Privacy Policy — jf999 Bangladesh

1.1 This Privacy Policy ("Policy") describes how jf999 ("jf999", "we", "us", "our") collects, uses, stores, discloses, and protects the personal information of individuals ("you", "your", "player", "member") who access or use the jf999 platform, available at jf999.io, including all associated services, games, promotions, and customer support channels.

1.2 jf999 is committed to protecting the privacy and personal data of all players, with particular regard for the standards and expectations applicable in the Bangladesh market. We take our data protection responsibilities seriously and have designed our systems, processes, and policies to reflect that commitment.

1.3 This Policy applies to all personal data collected from you through any channel, including but not limited to: the jf999 website, the jf999 mobile platform, email communications, live chat sessions, telephone interactions, and any third-party identity verification or payment processing services used in connection with your jf999 account.

1.4 By registering an account with jf999, you acknowledge that you have read, understood, and agreed to the terms of this Privacy Policy. This Policy forms part of jf999's Terms & Conditions and should be read together with that document.

1.5 If you do not agree with any aspect of this Privacy Policy, you should not register an account or continue using jf999. If you have existing concerns, please contact us at [email protected] before proceeding.

2.1 For the purposes of this Privacy Policy, jf999 acts as the data controller in respect of all personal data collected from players using the platform. As data controller, jf999 determines the purposes for which, and the means by which, your personal data is processed.

2.2 Where jf999 engages third-party service providers to process personal data on its behalf (for example, payment processors, KYC providers, and fraud detection services), those parties act as data processors and are contractually bound to process personal data only on jf999's documented instructions and in accordance with appropriate data protection standards.

2.3 Any questions, requests, or complaints relating to the processing of your personal data by jf999 should be directed to our support team at [email protected]. We aim to respond to all data-related enquiries within 14 business days of receipt.

3.1 jf999 collects the following categories of personal data from players. We collect only data that is necessary for the specific purposes described in Section 5 of this Policy.

3.2 jf999 does not intentionally collect special categories of sensitive personal data (such as health data, biometric data for identification purposes, racial or ethnic origin, political opinions, or religious beliefs) unless you voluntarily disclose such information, for example in the context of a responsible gaming self-exclusion request that references a health condition. Any such data disclosed voluntarily will be handled with the highest degree of care and used only to provide the service you requested.

4.1 jf999 collects personal data through the following channels and mechanisms:

• Direct collection: Data you actively provide when registering your account, completing identity verification, making a deposit or withdrawal, contacting customer support, or responding to a survey or promotion.
• Automated technical collection: Data collected automatically by our web and application servers when you visit jf999.io, including IP address, session data, device fingerprints, and cookie data. See Section 8 for full details on our cookie practices.
• Third-party payment providers: When you make a deposit or withdrawal via bKash, Nagad, Rocket, Upay, or a bank transfer, the relevant payment provider may share transaction confirmation data with jf999 to reconcile your account balance. jf999 receives only the data necessary to confirm and record the transaction — we do not receive your full payment account credentials from these providers.
• Identity verification partners: Where jf999 uses a third-party KYC or identity verification service to verify your identity documents, that service processes your document images and returns a verification result to jf999. The raw document images may be retained by the KYC provider in accordance with their own privacy policy, a copy of which will be made available to you on request.
• Fraud and AML screening services: jf999 may cross-reference your details against third-party databases used for anti-money laundering (AML) screening, sanctions list checking, and fraud pattern detection. These services return a risk score or flag, not your full data record.
• Analytics providers: jf999 uses server-side analytics to understand how players interact with the platform. This data is aggregated and used to improve our services. See Section 8 for further details.

4.2 jf999 does not purchase personal data lists from data brokers or any other third party for the purpose of marketing to individuals who have not consented to receive communications from jf999.

5.1 jf999 uses the personal data it collects for the following purposes:

• Account creation and management: To register your account, authenticate your identity at login, manage your profile and preferences, and maintain your account in good standing.
• Payment processing: To process deposits and withdrawals in Bangladeshi Taka (৳ BDT) via your chosen payment method, to reconcile transactions, and to detect and prevent payment fraud.
• Identity verification (KYC): To verify that you are who you say you are, that you are at least 21 years of age, and that you are not a restricted person as defined in our Terms & Conditions.
• Service delivery: To make sports betting markets, casino games, slot games, fishing games, and all other jf999 services available to you in a personalised, functional, and reliable manner.
• Customer support: To respond to your enquiries, resolve disputes, process responsible gaming requests (such as deposit limits, cooling-off periods, and self-exclusion), and maintain records of your support interactions for quality assurance.
• Legal and regulatory compliance: To fulfil our obligations under applicable anti-money laundering (AML) regulations, to respond to lawful requests from law enforcement and regulatory authorities, and to maintain records required by law.
• Fraud prevention and platform security: To detect, investigate, and prevent fraudulent activity, bonus abuse, money laundering, match-fixing involvement, and any other conduct prohibited by our Terms & Conditions.
• Responsible gaming: To monitor your gaming behaviour for indicators of problem gambling, to apply responsible gaming limits that you have requested, and to fulfil our obligations relating to player protection.
• Platform improvement: To analyse how players use jf999, to identify technical issues, and to develop and test new features and products. This analysis uses aggregated or pseudonymised data wherever possible.
• Marketing communications: Where you have provided explicit consent, to send you promotional emails, SMS messages, or in-platform notifications about jf999 bonuses, new games, seasonal promotions (including Eid specials, Pohela Boishakh offers, BPL and IPL betting promotions), and other relevant offers. See Section 13 for full details and opt-out instructions.

5.2 jf999 will not use your personal data for any purpose that is incompatible with the purposes listed in Section 5.1 without first obtaining your explicit consent, or unless we are required to do so by law.

6.1 jf999 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing that is necessary to perform the contract between jf999 and you as a registered member — including account management, payment processing, and service delivery.
• Legal obligation: Processing required to comply with applicable laws and regulations, including AML obligations, age verification requirements, and responses to lawful authority requests.
• Legitimate interests: Processing conducted in pursuit of jf999's legitimate business interests where those interests are not overridden by your rights — including fraud prevention, platform security, analytics for service improvement, and responsible gaming monitoring.
• Consent: Processing activities for which jf999 has obtained your explicit, freely given consent — primarily direct marketing communications. Where consent is the legal basis, you retain the right to withdraw it at any time without affecting your account status or the lawfulness of prior processing.

7.1 jf999 does not sell, rent, or trade your personal data to any third party for commercial or marketing purposes. Personal data is shared with third parties only in the limited circumstances described below.

7.2 Categories of third parties with whom jf999 may share your personal data:

• Payment service providers: bKash, Nagad, Rocket (Dutch-Bangla Bank), Upay (United Commercial Bank), City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, Mastercard, and any other payment provider you select. Data shared is limited to what is necessary to process your specific transaction.
• Identity verification (KYC) providers: Third-party services used to verify your identity documents and confirm your age and residential address. These providers act as data processors under contract with jf999.
• Fraud prevention and AML screening services: Specialist third-party services that help jf999 detect and prevent financial crime, bonus abuse, and other prohibited conduct.
• Game content providers: Studios such as Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, Ezugi, Habanero, and Play'n GO may receive session data (such as your account ID, game session token, and bet amounts) as required to operate and settle their games within the jf999 platform. These providers are bound by strict contractual data protection obligations.
• Technical infrastructure providers: Cloud hosting providers, content delivery networks, and cybersecurity services that support the operation of jf999.io. These providers process data only as instructed by jf999 and are subject to data processing agreements.
• Regulatory and law enforcement authorities: Where jf999 is required by law or by a court order to disclose player data to a competent authority, we will comply with that obligation. Where legally permissible, we will notify you of such a disclosure.

7.3 Any third party with whom jf999 shares personal data is required to implement appropriate technical and organisational security measures to protect that data, and is prohibited from using it for any purpose other than the specific purpose for which it was shared.

8.1 jf999 uses cookies and similar tracking technologies on jf999.io to ensure the platform functions correctly, to remember your preferences, and to improve our understanding of how players use our services.

8.2 The following categories of cookies are used by jf999:

• Strictly necessary cookies: Essential for the platform to function. These include session authentication cookies that keep you logged in, security tokens, and load-balancing cookies. These cannot be disabled without breaking core platform functionality.
• Preference cookies: Used to remember your platform settings, such as your preferred language, display preferences, and notification settings. These improve your experience on return visits.
• Analytical cookies: Used to collect aggregated information about how players interact with jf999.io — for example, which pages are visited most frequently, how long sessions last, and where players encounter errors. This data is used to improve the platform and is not used to identify you individually.
• Responsible gaming cookies: Used to enforce any responsible gaming limits or self-exclusion measures that you have activated, and to maintain session-time tracking for players who have enabled session time alerts.

8.3 jf999 does not use third-party advertising or retargeting cookies that track your behaviour across other websites or platforms. You will not see jf999 advertisements served to you on other websites based on your jf999 browsing activity.

8.4 Most web browsers allow you to manage cookie settings. You may set your browser to refuse all or some cookies, or to alert you when cookies are set. Please note that disabling strictly necessary cookies will prevent core jf999 features — including account login, deposits, and game play — from functioning correctly.

8.5 Cookies set by jf999 do not store full payment card numbers, passwords, or government-issued ID numbers. Sensitive credentials are never stored in cookies.

9.1 jf999 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law. The following retention periods apply:

9.2 After the applicable retention period has elapsed, personal data is securely deleted or anonymised in a manner that prevents reconstruction of individual identities. Anonymised, aggregated data may be retained indefinitely for statistical and analytical purposes.

9.3 Where you request deletion of your personal data before the end of the applicable retention period, jf999 will assess the request and delete data where no legal obligation requires its continued retention. Where retention is legally required, we will inform you of the specific obligation and the earliest date at which deletion can be completed.

10.1 As a jf999 player whose personal data we process, you hold the following rights in relation to your information:

• Right of access: You have the right to request a copy of the personal data jf999 holds about you, along with information about how it is being used. We will respond to verified access requests within 30 days.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it. You may also update many details directly within your jf999 account settings.
• Right to erasure: You have the right to request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where the data has been processed unlawfully. This right is subject to legal retention obligations as described in Section 9.
• Right to restriction of processing: You have the right to request that jf999 restrict the processing of your personal data in certain circumstances — for example, while a dispute about the accuracy of your data is being resolved.
• Right to data portability: Where processing is based on consent or contractual necessity, and is carried out by automated means, you have the right to receive a copy of your personal data in a structured, commonly used, and machine-readable format.
• Right to object: You have the right to object to the processing of your personal data where that processing is based on jf999's legitimate interests. jf999 will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

10.2 To exercise any of the above rights, please contact jf999 at [email protected] with the subject line "Data Rights Request — [Your Account Username]". We will verify your identity before processing any rights request and will respond within 30 days. Complex requests may require up to a further 60 days, in which case we will notify you of the extension and the reason for it.

11.1 jf999 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• Encryption in transit: All data transmitted between your browser or mobile device and jf999's servers is encrypted using 256-bit SSL/TLS protocols. We enforce HTTPS across the entire jf999.io domain.
• Encryption at rest: Personal data stored in jf999's databases is encrypted using AES-256 encryption. Encryption keys are managed separately from the encrypted data and are rotated on a defined schedule.
• Access controls: Access to personal data within jf999's internal systems is strictly role-based. Only personnel with a legitimate need to access specific data categories are granted access. All internal access is logged and audited.
• Two-factor authentication: All jf999 internal systems that hold personal data are protected by multi-factor authentication. We also offer two-factor authentication to players for their account login.
• Regular security assessments: jf999 conducts periodic security reviews, vulnerability assessments, and penetration testing to identify and remediate potential weaknesses in our infrastructure.
• Incident response: jf999 maintains a formal data breach response procedure. In the event of a breach affecting player data, we will notify affected individuals and take immediate containment action.

11.2 While jf999 takes every reasonable precaution to secure your personal data, no internet-based platform can guarantee absolute security. You should also take steps to protect your own account, including using a strong unique password, enabling two-factor authentication, and keeping your login credentials confidential.

12.1 jf999 does not knowingly collect personal data from any individual under the age of 21. jf999's services are strictly intended for adults aged 21 and above, in accordance with our responsible gaming policy and age restriction requirements.

12.2 All registration applicants are required to confirm that they are aged 21 or above, and jf999 conducts age verification checks as part of its KYC process. Any account found to belong to a person under 21 years of age will be closed immediately, and any personal data collected in relation to that account will be securely deleted, subject only to any legal obligation to retain records of the violation.

12.3 If you believe that jf999 has inadvertently collected personal data from an individual under the age of 21, please contact us immediately at [email protected]. We will investigate promptly and take appropriate action.

13.1 With your explicit consent, jf999 may send you marketing communications via email, SMS to your registered Bangladeshi mobile number, or in-platform notifications. These communications may include information about new games, bonus offers, seasonal promotions (such as Eid, Pohela Boishakh, BPL, and IPL betting specials), and other jf999 news relevant to you as a player.

13.2 You may withdraw your consent to marketing communications at any time by:

• Clicking the "Unsubscribe" link included in any marketing email from jf999;
• Updating your communication preferences in your jf999 account settings;
• Contacting jf999 support at support @jf999.io with the subject line "Unsubscribe — [Your Account Username]".

13.3 Withdrawal of marketing consent will be processed within 5 business days. Please note that even after opting out of marketing communications, you will continue to receive transactional and service-related communications such as deposit confirmations, withdrawal notifications, security alerts, and responsible gaming notifications. These are sent on the basis of contractual necessity and cannot be opted out of while your account remains active.

13.4 jf999 does not share your contact details with third-party marketers for the purpose of sending you marketing communications on behalf of those third parties. All marketing communications sent to you will be from jf999 only.

14.1 jf999 operates in the Bangladesh market and processes the majority of player data within secure infrastructure. However, certain third-party service providers engaged by jf999 — including game content studios, KYC verification services, and cloud infrastructure providers — may be located outside Bangladesh or may process data in data centres located in multiple jurisdictions.

14.2 Where personal data is transferred to a third party located outside Bangladesh, jf999 takes steps to ensure that appropriate safeguards are in place to protect that data. These safeguards may include contractual data protection clauses, data processing agreements, and assessment of the recipient's security standards.

14.3 By registering and using jf999, you acknowledge that your personal data may be transferred to, stored in, and processed in countries other than Bangladesh. In all cases, jf999 requires that any recipient of your data provides a level of protection equivalent to that described in this Privacy Policy.

14.4 If you have concerns about the international transfer of your personal data, please contact jf999 at [email protected] for further information about the specific safeguards applicable to your data.

15.1 jf999 reserves the right to update, amend, or replace this Privacy Policy at any time. Changes may be made to reflect updates to our data practices, changes in applicable law or regulation, or improvements to the way we describe our privacy commitments to players.

15.2 When material changes are made to this Privacy Policy, jf999 will notify registered players by email to their registered address, by a prominent notice on the jf999.io homepage, or by in-platform notification. The updated Policy will indicate the effective date of the changes at the top of the document.

15.3 Your continued use of jf999 following the notification of changes to this Privacy Policy constitutes your acceptance of those changes. If you do not agree with a revised Policy, you should stop using jf999 and contact [email protected] to discuss the closure of your account.

15.4 Prior versions of this Privacy Policy are available on request by contacting [email protected]. We recommend that all players review this Policy periodically to stay informed about how jf999 protects their personal data.

16.1 If you have any questions, concerns, or complaints about this Privacy Policy or about how jf999 handles your personal data, please contact us using the details below:

• Email: [email protected] (plain text — not a clickable link)
• Subject line for data enquiries: "Privacy Enquiry — [Your Account Username]"
• Subject line for data rights requests: "Data Rights Request — [Your Account Username]"
• Subject line for formal complaints: "Formal Privacy Complaint — [Your Account Username]"
• Live Chat: Available on every page of jf999, 24 hours a day, 7 days a week, Bangladesh Standard Time (UTC+6)
• Support Hours: 00:00–24:00 BST, every day including public holidays

16.2 jf999 aims to acknowledge all privacy-related enquiries within 2 business days and to provide a full response within 14 business days. Complex data rights requests, such as subject access requests or erasure requests, may require up to 30 days for a full response, as described in Section 10.

16.3 For responsible gaming concerns — including deposit limit requests, self-exclusion, or cooling-off periods — please contact support via live chat for the fastest response. All responsible gaming requests are treated as the highest priority by jf999's support team. Further guidance is available on our Responsible Gaming page.