Privacy Policy — jillbet

jillbet collects personal data in several categories depending on the nature of your interaction with the Platform. The following table summarises the data types we may collect and their primary purpose:

We do not collect sensitive personal data such as biometric data, religious beliefs, political opinions, or health information, except where a Player voluntarily discloses a health-related reason in the context of a responsible gaming self-exclusion request, in which case such information is treated with the highest level of confidentiality and used solely to action the exclusion.

jillbet collects personal data through the following channels and mechanisms:

Direct Submission by You

• Completing the jillbet account registration form, including your name, date of birth, email address, and Bangladeshi mobile number.
• Uploading KYC identity documents (NID, passport, or driving licence) through the verification portal.
• Making a deposit or submitting a withdrawal request, which involves providing or confirming your payment method details.
• Contacting jillbet via live chat, email, or support ticket — the content of those communications is recorded.
• Submitting a responsible gaming tool request (deposit limit, self-exclusion, cooling-off period), which may include a voluntary explanation.
• Opting in to promotional communications, newsletters, or bonus notifications through your Account settings.

Automated Technical Collection

• Session cookies and browser storage mechanisms that record your login state, preferences, and navigation path within the Platform.
• Server-side logging of IP addresses, request timestamps, and page load performance metrics.
• Device fingerprinting technologies used for duplicate account detection and fraud prevention — these collect device-level attributes without storing personal files.
• Analytics tools that aggregate anonymised behavioural data (page views, session duration, click paths) to improve Platform performance.

Third-Party Sources

• Payment gateway providers (bKash, Nagad, Rocket, Upay, bank partners) who confirm transaction status and, where required for AML compliance, provide limited transaction metadata.
• Identity verification service providers who cross-reference submitted KYC documents against national records to confirm authenticity.
• Game software providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, Habanero) who return certified game outcome logs to jillbet servers for record-keeping and dispute resolution purposes.

jillbet processes your personal data only for defined, legitimate purposes. The following table maps each processing activity to its legal basis:

jillbet does not use personal data for automated decision-making or profiling that produces legal or similarly significant effects on Players, except in the context of duplicate account detection (where an automated flag triggers a manual review by the compliance team) and responsible gaming threshold alerts (where automated session data triggers a support outreach).

jillbet uses cookies and similar browser-based storage technologies to operate the Platform securely and efficiently. The following categories of cookies may be active when you use jillbet:

Strictly Necessary Cookies

These cookies are essential for the Platform to function and cannot be disabled without breaking core functionality. They include session authentication tokens (which keep you logged in during an active session), CSRF protection tokens (which prevent cross-site request forgery attacks), and load-balancing cookies (which direct your requests to the correct server). No personal data is extracted from strictly necessary cookies beyond what is required for session management.

Functional Cookies

Functional cookies remember your preferences — such as your selected language (English), preferred payment method display, and responsible gaming reminder intervals — so that you do not need to re-enter these settings on every visit. These cookies store only non-sensitive preference values.

Analytics Cookies

jillbet uses anonymised analytics cookies to understand how Players navigate the Platform — which game categories are most visited, where Players encounter errors, and how long sessions typically last. This data is aggregated and does not identify individual Players. Analytics data is used solely for internal Platform improvement and is not shared with external advertising networks.

What We Do Not Use

• Third-party advertising cookies or retargeting pixels that track your behaviour across other websites.
• Social media tracking pixels from Facebook, Twitter, TikTok, or any other social platform.
• Cross-site tracking technologies that build a profile of your activity outside jillbet.

Managing Cookies

You may configure your browser to block or delete cookies at any time. Please note that disabling strictly necessary cookies will prevent you from logging in and using core Platform features. Browser-level cookie management instructions are available through the help documentation of your specific browser (Chrome, Firefox, Safari, Samsung Internet, Opera Mini, etc.).

jillbet does not sell your personal data. We share personal data only in the following strictly defined circumstances:

Payment Processing Partners

To process your deposits and withdrawals, jillbet must share the minimum necessary data with your selected payment provider — bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, or Sonali Bank. The data shared is limited to the transaction amount, your registered mobile number or account reference, and a transaction reference ID. jillbet does not share your full KYC documents with payment providers.

KYC & Identity Verification Providers

To verify your age and identity, jillbet may share your submitted identity document images and basic personal details (name, date of birth, ID number) with a certified identity verification service provider. These providers are contractually bound to use your data solely for the purpose of identity verification and are prohibited from retaining or repurposing it.

Game Software Providers

When you play a casino game provided by Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, or Habanero, the game provider's software receives your anonymised Player ID (not your name or contact details), your bet amount, and the game outcome in order to operate the game and return a certified result. Your full personal data is not transmitted to game providers.

Legal and Regulatory Disclosure

jillbet may be required to disclose your personal data to law enforcement agencies, regulatory authorities, or financial intelligence units in response to a lawful request, court order, or mandatory reporting obligation under applicable AML regulations. In such cases, disclosure is limited to what is strictly required by the relevant legal instrument and jillbet will endeavour, where legally permissible, to notify the affected Player.

Business Transfers

In the event of a merger, acquisition, restructuring, or sale of jillbet's business or assets, Player data may be transferred to the acquiring entity as part of that transaction. Players will be notified of any such transfer and the privacy protections applicable to their data under the new ownership, prior to the transfer taking effect where practicable.

No Third-Party Marketing Sharing

jillbet does not share your personal data with any third-party marketers, affiliate networks, data brokers, or advertising platforms for the purpose of targeting you with third-party advertising. Promotional communications from jillbet itself are sent only where you have provided explicit opt-in consent.

jillbet retains personal data for the minimum period necessary to fulfil the purpose for which it was collected, subject to any longer retention periods mandated by applicable legal or regulatory obligations. The following retention schedule applies:

At the end of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked to an identifiable individual. Anonymised aggregate data (such as overall game popularity statistics or regional deposit volume trends) may be retained indefinitely as it no longer constitutes personal data.

Players who request account deletion may do so by contacting support@jillbet. Please be aware that even following an account deletion request, certain data categories (financial records, KYC documents) must be retained for the full regulatory period stated above and cannot be deleted early regardless of the Player's request.

jillbet implements a multi-layered security architecture to protect Player data against unauthorised access, alteration, disclosure, or destruction. Our core security measures include:

• Transport Layer Security (TLS): All data transmitted between your browser or mobile device and jillbet servers is encrypted using TLS 1.2 or TLS 1.3. The site is accessible exclusively over HTTPS — unencrypted HTTP connections are automatically redirected.
• Data Encryption at Rest: Sensitive data fields — including KYC document files, financial account references, and password hashes — are stored in encrypted format using AES-256 encryption on secured database servers.
• Password Security: Player passwords are never stored in plain text. Passwords are hashed using a salted cryptographic algorithm (bcrypt) before storage. jillbet staff cannot retrieve your password — only a reset can be performed.
• Two-Factor Authentication (2FA): jillbet supports OTP-based two-factor authentication via your registered Bangladeshi mobile number. Players are strongly encouraged to enable 2FA to protect their account from unauthorised access.
• Access Controls: Internal access to Player personal data is restricted on a strict need-to-know basis. Staff access is role-based, logged, and subject to regular audit. No staff member has unrestricted access to the full Player data estate.
• Penetration Testing & Security Audits: jillbet conducts periodic security assessments and penetration tests to identify and remediate vulnerabilities in the Platform before they can be exploited.
• Incident Response: In the event of a data security incident that affects Player personal data, jillbet will notify affected Players and relevant authorities within the timeframes required by applicable law. The notification will describe the nature of the incident, the data affected, and the steps jillbet is taking to address it.

As a Player on jillbet, you hold the following rights with respect to your personal data. To exercise any of these rights, submit a written request to support@jillbet with "Privacy Request" in the subject line and your registered account email address in the message body. jillbet will respond within 30 days.

jillbet does not knowingly collect personal data from individuals under the age of 18. If we become aware that a Player account has been registered by a person under 18, the account will be immediately closed, all balances forfeited, and any personal data associated with that account will be deleted from our systems as promptly as legally permissible (subject to AML regulatory minimum retention obligations that apply regardless of account closure reason).

If you are a parent or guardian and believe that a person under your care has registered an account on jillbet, please contact us immediately at support@jillbet with the registered email address of the account concerned. We will act on verified reports of underage registration with immediate effect.

jillbet recommends that parents and guardians in Bangladesh use parental control software to restrict access to online gambling websites for minors sharing the same device or internet connection. The Platform does not use advertising networks that target users on third-party children's websites or mobile applications.

jillbet reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, new legal or regulatory requirements, or improvements to Platform functionality that affect how data is collected or used.

When material changes are made — those that meaningfully affect how your personal data is used, who it is shared with, or what rights you hold — jillbet will notify registered Players by email to their registered address at least 7 days before the changes take effect. The updated Policy will also be published at the /privacy-policy page of the Platform, and the "Last Updated" date at the top of this document will be revised accordingly.

For minor, non-material changes (such as updated contact details, clarifications of existing practices, or corrections to typographical errors), the Policy may be updated immediately upon publication without advance notice. The "Last Updated" date will still be revised to reflect any change.

Continued use of jillbet following the publication of an updated Privacy Policy constitutes acceptance of the revised terms. If you do not agree with any change to this Policy, you should cease using the Platform and close your account by contacting support@jillbet before the effective date of the revision.

For all privacy-related enquiries, data subject access requests, consent withdrawal requests, or data deletion requests, please contact the jillbet privacy team using the details below. To protect your account security, all privacy requests must be submitted from the email address registered to your jillbet account so that we can verify your identity before processing the request.

jillbet is committed to resolving privacy concerns fairly and transparently. We aim to acknowledge all privacy requests within 5 business days and to provide a substantive response within 30 days. For complex requests requiring extensive data retrieval or legal review, the response period may be extended by a further 30 days, in which case we will notify you of the extension and the reason for it within the initial 30-day window.