Privacy Policy —
jata33 Online Casino
Your privacy matters to us. This Privacy Policy explains exactly what personal data jata33 collects, why we collect it, how it is used, and the controls you have over your own information. We are committed to handling your data with transparency and care.
Our Commitment
Privacy at jata33 — The Short Version
The sections below contain the full legal text of this Privacy Policy. The cards below summarise our core privacy commitments in plain English. These summaries are for convenience only and do not replace the binding full text.
Minimal Data Collection
jata33 collects only the personal data that is strictly necessary to operate your account, process payments, prevent fraud, and comply with applicable regulations. We do not collect data for its own sake.
No Data Selling
jata33 does not sell, rent, or trade your personal data to any third party, advertiser, data broker, or marketing network. Your information is used solely to operate and improve the jata33 platform.
SSL Encryption
All data transmitted between your device and jata33 servers is protected by industry-standard SSL/TLS encryption. Your payment details are never stored on jata33 servers — all transaction processing is handled by the respective payment provider.
Your Data, Your Control
You have the right to access, correct, export, or request deletion of your personal data at any time. Submit a request to our support team and we will respond within 30 days in accordance with your rights under applicable data protection law.
Transparent Cookie Use
jata33 uses strictly necessary cookies to keep you logged in and maintain session integrity, plus optional analytics cookies to improve platform performance. You can manage cookie preferences from your browser settings at any time.
Defined Retention Periods
jata33 retains your data only for as long as necessary to fulfil the purposes for which it was collected, including legal and regulatory obligations. Account data is held for a maximum of 5 years after account closure unless a longer period is required by law.
Section 1
Data We Collect
1.1 Data You Provide Directly
When you register an account on jata33, you provide us with information that is necessary to create and manage your player profile. This includes your chosen username, a password (stored exclusively as a one-way cryptographic hash — we never store your plaintext password), and a contact method such as a phone number or email address. Where identity verification (KYC) is required, you may also provide a government-issued photo identification document, proof of address, and confirmation of your registered payment method. All KYC documents are transmitted over encrypted connections and stored in a restricted-access environment.
1.2 Transaction and Payment Data
When you make a deposit or request a withdrawal via bKash, Nagad, Rocket, or Upay, jata33 receives a transaction reference number, the amount transacted, the timestamp, and a masked identifier of the payment account used. jata33 does not receive or store your full mobile banking PIN, full account number, or any authentication credentials for these services. Payment processing takes place entirely within the infrastructure of the respective payment provider. We retain transaction records for fraud prevention, dispute resolution, and regulatory compliance purposes.
1.3 Platform Usage Data
jata33 automatically collects certain technical and behavioural data when you use the platform. This includes your IP address, browser type and version, operating system, device type, screen resolution, referring URL, pages visited, game sessions initiated, bet amounts and outcomes, session duration, and timestamps of all platform interactions. This data is used to maintain platform security, detect suspicious activity, improve user experience, and generate aggregate analytics. It is not used to build individual advertising profiles or sold to third-party marketers.
1.4 Communications Data
If you contact jata33 support via live chat, email, or any other channel, we retain a record of the communication, including the content of your messages and any attachments you provide. This data is used to resolve your query, improve our support quality, and maintain an audit trail of customer interactions. Support communications are stored for a period of 24 months from the date of the interaction, after which they are deleted unless they are relevant to an ongoing investigation or legal proceeding.
1.5 Data We Do Not Collect
jata33 does not collect your national identity number (NID) unless expressly required for KYC verification of high-value accounts. We do not collect biometric data, health data, political opinions, religious beliefs, or any other special-category personal data. We do not collect data from individuals known or suspected to be under 18 years of age — any account found to have been created by a minor will be closed immediately and all associated data deleted in accordance with our child protection obligations.
1.6 Summary of Data Categories
| Data Category | Examples | Purpose |
|---|---|---|
| Account Data | Username, hashed password, contact method | Account creation and authentication |
| KYC Data | Photo ID, proof of address | Age and identity verification |
| Transaction Data | Deposit/withdrawal reference, amount, timestamp | Payment processing, AML compliance |
| Usage Data | IP address, device type, game sessions | Security, fraud detection, analytics |
| Communications Data | Support chat logs, email correspondence | Support quality, dispute resolution |
Lawful Basis for Processing
jata33 processes your personal data on the following lawful bases: (a) performance of the contract between you and jata33; (b) compliance with legal obligations such as anti-money laundering regulations; and (c) legitimate interests in operating a secure and fair platform.
Password Security
Your password is stored as a one-way cryptographic hash using industry-standard algorithms. jata33 staff cannot read your password. If you forget it, it must be reset — it cannot be retrieved.
Section 2
How We Use Your Data
2.1 Platform Operation
The primary purpose for which jata33 processes your personal data is to operate the platform and deliver the services you have registered for. This includes creating and managing your player account, processing your deposits and withdrawals via your chosen payment method, recording your wagering activity for your own account history, and enabling you to participate in games and betting markets offered on jata33. Without processing this data, we would be unable to provide you with the jata33 service.
2.2 Identity Verification and Fraud Prevention
jata33 is committed to operating a secure and fair platform. We use your personal data to verify your identity, confirm that you meet the minimum age requirement of 18 years, detect and prevent fraudulent account activity, identify patterns consistent with money laundering, and investigate suspected breaches of our Terms & Conditions. Our fraud prevention systems analyse transaction patterns, login behaviour, and device fingerprints to flag anomalous activity for manual review. This processing is necessary both for the performance of our contract with you and for compliance with our legal obligations.
2.3 Responsible Gaming
jata33 uses your platform usage data — including session frequency, session duration, deposit frequency, and wagering volume — to identify players who may be exhibiting signs of problem gambling behaviour. Where such patterns are identified, jata33 may proactively contact the player with information about responsible gaming tools, suggest a voluntary deposit limit review, or in serious cases impose a temporary account restriction as a protective measure. This processing is carried out in the legitimate interests of player welfare and in accordance with our Responsible Gaming Policy.
2.4 Platform Improvement and Analytics
We use aggregated and anonymised usage data to understand how players interact with the jata33 platform, which games are most popular, which payment methods are most used, and where technical issues arise. This analysis informs decisions about feature development, game catalogue expansion, and performance optimisation. Aggregate analytics data does not identify individual players and is not shared with third parties in identifiable form.
2.5 Marketing Communications
jata33 may send you promotional communications about new games, bonus offers, and seasonal promotions that we believe may be relevant to your interests, based on your activity on the platform. You may opt out of marketing communications at any time by contacting support and requesting removal from our mailing list. Opting out of marketing communications does not affect your ability to use the platform or receive transactional notifications such as deposit confirmations and withdrawal updates, which are sent as part of the service.
2.6 Legal and Regulatory Compliance
jata33 processes and retains certain categories of personal data in order to comply with applicable legal and regulatory obligations. These include anti-money laundering (AML) record-keeping requirements, financial transaction reporting obligations, and the preservation of evidence in connection with disputes or investigations. Where jata33 is required by law to disclose personal data to a regulatory authority or law enforcement body, we will do so and will notify you where we are legally permitted to do so.
Permitted Uses at a Glance
- Account creation and management
- Payment processing
- Age and identity verification (KYC)
- Fraud and AML detection
- Responsible gaming monitoring
- Platform analytics (aggregated)
- Opt-in marketing communications
- Legal and regulatory compliance
What We Never Do
jata33 never sells your data, never shares it with advertisers, and never uses it to build third-party advertising profiles. Your data is used only to operate and protect the jata33 platform.
Section 3
Data Sharing & Disclosure
3.1 Payment Service Providers
To process your deposits and withdrawals, jata33 shares the minimum necessary transaction data with the payment service providers you use — bKash, Nagad, Rocket, and Upay. This sharing is strictly limited to the information required to initiate, authenticate, and confirm your transaction. Each of these payment providers operates under its own privacy policy and regulatory framework. jata33 is not responsible for the data practices of these providers once data is transferred to their systems, and we encourage you to review their privacy policies directly.
3.2 Game Technology Providers
Games on the jata33 platform are delivered by third-party game studios including Pragmatic Play, Evolution Gaming, Spribe, Ezugi, NetEnt, and Microgaming. To enable game functionality, certain session identifiers and wagering data are transmitted to and processed by the game provider's servers. This data is used exclusively to facilitate the game session and calculate outcomes. It does not include your full name, payment details, or contact information. Game providers are contractually obligated to process this data solely for the purpose of game delivery and are not permitted to use it for any secondary purpose.
3.3 Regulatory and Law Enforcement Disclosure
jata33 may disclose personal data to regulatory authorities, financial intelligence units, or law enforcement agencies where we are legally compelled to do so, or where we have a good-faith belief that disclosure is necessary to prevent serious harm, investigate fraud, or respond to a valid legal process. In such cases, jata33 will disclose only the minimum data necessary to satisfy the legal requirement and will seek to notify the affected player where legally permitted.
3.4 Professional Advisers
jata33 may share personal data with our legal advisers, accountants, or auditors where necessary for the purposes of obtaining professional advice, conducting an audit, or resolving a legal dispute. Such parties are bound by strict confidentiality obligations and are permitted to use the data only for the specific professional purpose for which it was disclosed.
3.5 Business Transfers
In the event of a merger, acquisition, restructuring, or sale of all or part of jata33's business assets, personal data held by jata33 may be transferred to the acquiring entity as part of the transaction. In such circumstances, jata33 will take reasonable steps to ensure that the acquiring entity is bound by privacy obligations that are at least as protective as those set out in this Privacy Policy. Players will be notified of any such transfer and of any material changes to data processing arrangements that result from it.
3.6 No Sale of Data
jata33 does not sell, rent, licence, or otherwise transfer your personal data to any third party for commercial gain, advertising purposes, or data brokerage. This prohibition applies to all categories of personal data collected by jata33, including anonymised or pseudonymised data that could reasonably be used to re-identify an individual player.
Third-Party Recipients
- bKash, Nagad, Rocket, Upay (payments)
- Pragmatic Play, Evolution, Spribe, Ezugi, NetEnt, Microgaming (game delivery)
- Legal advisers and auditors (professional services)
- Regulatory / law enforcement (legal obligation only)
Data Processing Agreements
All third parties who process personal data on jata33's behalf are bound by contractual data processing agreements that restrict the use of your data to the specific, permitted purpose.
Section 5
Data Security
5.1 Technical Safeguards
jata33 implements a range of technical security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. All data in transit between your device and our servers is encrypted using TLS 1.2 or higher. Data at rest — including account records, transaction histories, and KYC documents — is stored on encrypted servers with access restricted to authorised personnel only. Our infrastructure is protected by firewalls, intrusion detection systems, and regular vulnerability scanning. We apply security patches promptly and conduct periodic security audits of our platform.
5.2 Organisational Safeguards
Access to personal data within jata33 is controlled on a strict need-to-know basis. Staff who require access to player data to perform their job functions are granted the minimum level of access necessary. All staff with access to personal data are bound by confidentiality obligations and receive regular training on data security and privacy best practices. Access logs are maintained and reviewed periodically to detect any anomalous internal access patterns.
5.3 Account Security — Your Responsibilities
While jata33 implements robust server-side security controls, the security of your account also depends on the steps you take to protect your own credentials. You are responsible for choosing a strong, unique password for your jata33 account, keeping your password confidential, logging out of your account when using shared or public devices, and keeping your device and browser up to date with the latest security patches. If you suspect that your account has been compromised, you must contact jata33 support immediately via live chat so that we can take protective action.
5.4 Data Breach Response
In the event of a personal data breach that poses a risk to the rights and freedoms of players, jata33 will take immediate steps to contain the breach, assess its scope, and remediate the vulnerability. Affected players will be notified promptly where the breach is likely to result in a high risk to their personal data, and the notification will include a description of the nature of the breach, the categories of data affected, the likely consequences, and the measures jata33 has taken or proposes to take to address the breach. jata33 maintains an incident response plan that is reviewed and tested regularly.
Security Measures
- TLS 1.2+ encryption in transit
- Encrypted storage at rest
- Firewalls & intrusion detection
- Role-based access controls
- Regular security audits
- Staff confidentiality obligations
- OTP on new device logins
- Incident response plan
Suspected Account Compromise?
Contact jata33 support via live chat immediately if you believe your account credentials have been compromised. We can freeze your account and initiate a security review within minutes.
Section 6
Data Retention
6.1 Retention Principles
jata33 retains your personal data only for as long as is necessary to fulfil the specific purposes for which it was collected, as described in this Privacy Policy, and to comply with our legal obligations. We do not retain data indefinitely — each category of data has a defined maximum retention period, after which it is securely deleted or anonymised. The retention periods set out below reflect a balance between operational needs, legal requirements, and your privacy interests.
6.2 Retention Schedule
| Data Category | Retention Period | Reason |
|---|---|---|
| Account Data | Duration of account + 5 years after closure | Legal obligation, dispute resolution |
| Transaction Records | 7 years from transaction date | AML regulatory requirement |
| KYC Documents | 5 years after account closure | Identity verification compliance |
| Support Communications | 24 months from last interaction | Service quality, dispute evidence |
| Analytics Data | 13 months (rolling, aggregated) | Platform improvement |
| Marketing Preferences | Until opt-out or account closure | Consent management |
6.3 Deletion and Anonymisation
When a retention period expires, jata33 will either securely delete the personal data in question or anonymise it so that it can no longer be linked to an identifiable individual. Secure deletion means overwriting the data in a manner that makes recovery infeasible. Anonymisation means removing or replacing all identifiers such that the remaining data cannot reasonably be used to re-identify the individual, even when combined with other available data sets. Anonymised data may be retained indefinitely for aggregate statistical purposes without further notice to you.
6.4 Retention Following Account Closure
When you close your jata33 account, we do not immediately delete all data associated with it. Certain records must be retained for the periods specified in section 6.2 above in order to comply with our legal obligations — for example, transaction records must be kept for seven years from the transaction date to satisfy anti-money laundering record-keeping requirements. After the applicable retention period has elapsed, your data will be deleted or anonymised in accordance with our standard deletion schedule. You may request confirmation of the specific data categories being retained and the expected deletion date by contacting our support team.
Maximum Retention
The longest retention period applied by jata33 is 7 years for financial transaction records, driven by anti-money laundering regulatory requirements. All other data categories have shorter retention periods.
Request Your Data Deletion
Once your retention period has elapsed, you can request confirmation that your data has been deleted by contacting jata33 support via live chat or at [email protected] (plain text — not a link).
Section 7
Your Privacy Rights
7.1 Right of Access
You have the right to request a copy of the personal data that jata33 holds about you. This is sometimes referred to as a Subject Access Request (SAR). Upon receiving a valid SAR, jata33 will provide you with a structured summary of the personal data we hold, the purposes for which it is processed, the categories of third parties with whom it has been shared, and the retention period applicable to each data category. We will respond to your request within 30 days. Where the request is complex or involves a large volume of data, we may extend this period by a further 30 days and will notify you accordingly.
7.2 Right to Rectification
If any personal data that jata33 holds about you is inaccurate or incomplete, you have the right to request that we correct it. You can update certain account details directly from within your jata33 account settings. For data that cannot be self-corrected — such as KYC verification records — please contact our support team and provide documentation supporting the correction you are requesting. We will process rectification requests within 14 days of receiving the supporting documentation.
7.3 Right to Erasure
You have the right to request the deletion of your personal data where: (a) the data is no longer necessary for the purposes for which it was collected; (b) you withdraw consent and there is no other lawful basis for processing; (c) you object to the processing and there are no overriding legitimate grounds; or (d) the data has been unlawfully processed. Please note that the right to erasure is not absolute — jata33 may be required to retain certain data to comply with legal obligations, such as transaction records required under anti-money laundering regulations. Where we are unable to fulfil an erasure request in full, we will explain which data must be retained and why.
7.4 Right to Restriction of Processing
You have the right to request that jata33 restricts the processing of your personal data in certain circumstances — for example, while a rectification request is being assessed, or where you have objected to processing and we are considering whether our legitimate interests override your objection. During a restriction period, jata33 will store the data but will not process it for any other purpose without your consent, except to establish, exercise, or defend legal claims.
7.5 Right to Data Portability
Where jata33 processes your personal data by automated means and on the basis of your consent or the performance of a contract, you have the right to receive a copy of that data in a structured, commonly used, machine-readable format (such as CSV or JSON). You may also request that we transmit the data directly to another service provider where technically feasible. To submit a portability request, contact jata33 support and specify the data categories you wish to receive and your preferred format.
7.6 Right to Object to Marketing
You have the right to object at any time to the processing of your personal data for direct marketing purposes. Upon receiving your objection, jata33 will cease processing your data for marketing purposes immediately and will update your communication preferences accordingly. To opt out of marketing communications, contact jata33 support via live chat or send a request to [email protected] (plain text — not a link) with the subject line "Marketing Opt-Out".
7.7 Exercising Your Rights
To exercise any of the rights described in this section, contact jata33 support via live chat inside the platform, or by email at [email protected] (plain text — not a link). We may need to verify your identity before processing your request in order to protect against unauthorised access to your data. Verification will typically involve confirming details already associated with your account. jata33 will not charge a fee for processing privacy rights requests in ordinary circumstances. We reserve the right to charge a reasonable administrative fee for manifestly unfounded or excessive requests.
Your Rights Summary
- Access your personal data (SAR)
- Correct inaccurate data
- Request erasure ("right to be forgotten")
- Restrict processing
- Data portability (CSV / JSON)
- Object to marketing
Response Timeframe
jata33 will acknowledge all privacy rights requests within 5 business days and provide a full response within 30 days. Complex requests may take up to 60 days with prior notice to you.
Section 8
Policy Updates & Contact
8.1 Changes to This Privacy Policy
jata33 may update this Privacy Policy from time to time to reflect changes in our data processing practices, changes in applicable law, or improvements to our platform. When we make material changes to this Policy — that is, changes that significantly affect how we collect, use, or share your personal data — we will notify active players via a notice displayed on the jata33 platform upon login, or by direct communication to the contact method registered on your account. The updated Policy will be published on this page with a revised "Last Updated" date. Your continued use of the jata33 platform after the effective date of any updated Policy constitutes your acknowledgement of the changes. If you do not agree to the updated Policy, you should cease using the platform and contact support to discuss your options, including account closure.
8.2 Minor and Clarificatory Changes
Not all changes to this Privacy Policy will be material. We may make minor updates to improve clarity, correct typographical errors, or reflect minor operational changes that do not affect your substantive privacy rights. Such clarificatory changes will be reflected in the updated "Last Updated" date on this page but will not trigger a direct notification to players. We encourage you to review this page periodically to stay informed of how jata33 manages your personal data.
8.3 Contact the jata33 Privacy Team
If you have any questions, concerns, or complaints about this Privacy Policy or about the way jata33 processes your personal data, please contact us in the first instance via our 24/7 live chat support inside the platform. Our support team can answer general privacy questions and can escalate data protection matters to the appropriate internal team. For formal privacy rights requests (access, rectification, erasure, portability), please contact us at [email protected] (plain text — not a link) with the subject line "Privacy Request — [type of request]". We are committed to responding to all privacy enquiries promptly and to resolving any concerns fairly.
8.4 Scope of This Policy
This Privacy Policy applies to all personal data collected by jata33 through the jata33.net website and the jata33 platform, including through any mobile-optimised version of the site. It does not apply to the websites or services of third parties linked to or from the jata33 platform — for example, the websites of payment providers such as bKash or Nagad, or the platforms of game studios. jata33 is not responsible for the privacy practices of those third parties and encourages you to review their privacy policies before providing them with any personal data.
8.5 Governing Language
This Privacy Policy is written in English. In the event of any inconsistency between an English version of this Policy and any translation, the English version shall prevail. jata33 operates its platform in English to serve Bangladesh's English-speaking online gaming community, and all formal communications, legal documents, and policy texts are maintained in English as the authoritative language.
Policy Change Notifications
Material changes to this Privacy Policy will be communicated via an in-platform notice upon your next login. Minor clarificatory edits will be reflected only in the updated "Last Updated" date at the top of this page.
Privacy Contact
Live chat: Available 24/7 inside the platform
Email: [email protected]
(plain text — not a link)
Questions About Your Privacy?
Our support team is available around the clock to answer your data protection questions. You can also explore our FAQ, review our Responsible Gaming tools, or head back to the casino.