jj999 Privacy
Policy & Data Rights

jj999 collects personal data through several channels: directly from you when you register an account or interact with the platform, automatically when you use our services, and occasionally from trusted third-party sources as described below. The categories of personal data we collect are as follows.

Account Registration Data

When you create a jj999 account, we collect the information you provide in the registration form, which includes your full legal name, date of birth, email address, mobile phone number, and residential address (including city, for example Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, or Barisal). This information is required to create your account, verify your identity, and ensure you meet the minimum age requirement of 18 years.

Identity Verification (KYC) Data

To comply with our internal Know Your Customer (KYC) and anti-money laundering (AML) procedures, jj999 may request copies of government-issued identity documents such as your National Identity Card (NID), passport, or driving licence. We may also request proof of address documents (such as a utility bill or bank statement dated within the last three months) and, where relevant, proof of ownership of the payment method used for deposits. These documents are used solely for verification purposes.

Financial Transaction Data

When you make deposits or withdrawals, jj999 records transaction details including the payment method used (for example bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, BRAC Bank, Islami Bank, Sonali Bank, or City Bank), transaction amounts in BDT, transaction reference numbers, and timestamps. We do not store full card numbers or mobile banking PINs — sensitive payment credentials are handled directly by our payment processing partners using their own secure environments.

Usage and Behavioural Data

As you use the jj999 platform, we automatically collect data about your activity, including the games you play, bet amounts and outcomes, session durations, pages visited, features used, and search queries entered within the platform. This data helps us improve the platform, personalise your experience, and identify potential responsible gaming concerns at an early stage.

Technical and Device Data

We automatically collect certain technical data when you access jj999, including your IP address, browser type and version, operating system, device type (desktop, mobile, tablet), screen resolution, referring URL, and time zone. This information is used for security monitoring, fraud detection, and platform optimisation.

Communications Data

If you contact jj999 support via live chat, email, or any other channel, we retain records of those communications, including the content of your messages, timestamps, and any attachments. This is necessary for resolving disputes, improving customer service quality, and maintaining an accurate account of interactions for compliance purposes.

jj999 does not sell your personal data to third parties. We share your data only in the limited circumstances described below, and only to the extent necessary for the specific purpose stated.

Payment Processing Partners

To process your deposits and withdrawals, jj999 shares the minimum necessary transaction data with our payment processing partners, including mobile financial service providers such as bKash, Nagad, Rocket, and Upay, as well as card networks including Visa and Mastercard, and supported Bangladeshi banks. These partners are independent data controllers operating under their own privacy policies and regulatory obligations. jj999 does not have control over how these partners handle data once it has been transmitted to them for the purpose of processing your transaction.

Game Software Providers

Game content on the jj999 platform is provided by third-party software suppliers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. To deliver their games on our platform, these providers may receive technical data such as your session token and game activity data. They do not receive your name, contact details, or payment information unless separately required for their own compliance procedures, which would be governed by their own privacy notices.

Identity Verification Services

jj999 may engage specialist identity verification service providers to assist with KYC and AML checks. These providers process your identity document data on jj999's behalf under strict contractual data processing agreements and are prohibited from using your data for any purpose beyond the verification service they provide to jj999.

Legal and Regulatory Disclosure

jj999 may disclose your personal data to law enforcement agencies, regulatory bodies, courts, or other government authorities where we are legally required to do so, or where disclosure is necessary to protect the rights, safety, or property of jj999, its players, or the public. Where possible and legally permissible, jj999 will notify you of any such disclosure.

Business Transfers

In the event of a merger, acquisition, reorganisation, or sale of all or substantially all of jj999's assets, your personal data may be transferred to the acquiring entity as part of the transaction. In such circumstances, jj999 will ensure that the acquiring party is bound by privacy obligations at least as protective as those set out in this policy, and will notify affected players of the transfer prior to its completion where practicable.

jj999 takes the security of your personal data seriously. We implement a layered set of technical and organisational measures designed to protect your data against unauthorised access, accidental loss, destruction, alteration, or disclosure. While no online platform can guarantee absolute security, the safeguards jj999 has in place reflect current industry best practices.

• 256-bit SSL/TLS encryption: All data transmitted between your browser or mobile device and jj999's servers is encrypted using industry-standard TLS 1.3 protocols. This ensures that data in transit cannot be intercepted or read by unauthorised parties.
• Encryption at rest: Sensitive personal data stored on jj999's servers — including identity document copies, payment records, and account credentials — is encrypted at rest using AES-256 encryption.
• Access controls: Access to personal data within jj999 is governed by strict role-based access controls. Only staff members who genuinely need access to specific categories of data to perform their job functions are granted it. Access logs are maintained and reviewed regularly.
• Two-factor authentication: jj999's internal systems require two-factor authentication for all staff accessing player data. Players are also strongly encouraged to enable 2FA on their own accounts.
• Regular security audits: jj999 conducts regular internal security reviews and periodic independent security assessments to identify and remediate vulnerabilities before they can be exploited.
• Incident response: In the event of a data breach that is likely to result in a risk to your rights or interests, jj999 will notify affected players without undue delay and take immediate steps to contain and remediate the breach.

As a jj999 player, you hold a number of rights in respect of your personal data. jj999 is committed to honouring these rights in a timely and transparent manner. The rights available to you are described below.

• Right of Access: You have the right to request a copy of the personal data jj999 holds about you. This is commonly referred to as a Subject Access Request (SAR). jj999 will provide a copy of your data in a structured, commonly used, and machine-readable format within 30 days of receiving a verified request.
• Right to Rectification: If any of the personal data jj999 holds about you is inaccurate or incomplete, you have the right to request that we correct or complete it. Many data fields can be updated directly within your account settings; for data that cannot be self-corrected, contact support.
• Right to Erasure: You have the right to request deletion of your personal data in the circumstances described in Section 6 above. Note that legal and regulatory retention obligations may limit our ability to fully satisfy a deletion request in certain cases.
• Right to Restrict Processing: In certain circumstances, you have the right to request that jj999 restrict the processing of your personal data — for example, while a dispute about the accuracy of your data is being resolved. Restricted data will not be processed for any purpose beyond storage.
• Right to Data Portability: You have the right to receive the personal data you have provided to jj999 in a structured, commonly used, machine-readable format, and to transmit that data to another controller where technically feasible.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes at any time, with immediate effect. You may also object to processing based on jj999's legitimate interests, though jj999 may continue processing if it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where jj999 processes your data on the basis of your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

To exercise any of the above rights, please contact jj999 support via 24/7 live chat within your account or send a written request by email to [email protected] (plain text — not a link). We may ask you to verify your identity before processing your request to ensure that personal data is not disclosed to an unauthorised person. jj999 will not charge a fee for the first data access or deletion request each calendar year; subsequent requests within the same year may incur a reasonable administrative fee.