Your Privacy at jilbat —
Transparent, Secure & Clear

1. Information We Collect

jilbat collects personal data through several channels: directly from you when you register or interact with the platform, automatically through your use of the site, and from trusted third-party sources where permitted. The categories of data we collect are set out below.

1.1 Registration & Account Data

When you create a jilbat account, we collect the following information:

• Required Full legal name
• Required Date of birth (to verify you are 18 or older)
• Required Bangladesh mobile phone number
• Required Email address
• Required Preferred username and password (stored in hashed form)
• Optional Residential district within Bangladesh (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh)

1.2 Identity Verification (KYC) Data

Before processing your first withdrawal, and periodically thereafter as required by our anti-money laundering (AML) procedures, jilbat may request:

• Required A copy of a valid government-issued photo ID — National Identity Card (NID), passport, or driving licence
• Required Proof of address (utility bill, bank statement, or official correspondence dated within the last three months)
• Required Proof of payment method ownership (screenshot of bKash, Nagad, or Rocket account registered in your name)
• Optional Source of funds declaration for high-value transactions

1.3 Financial Transaction Data

Every deposit, withdrawal, and bonus transaction on jilbat generates a transaction record that includes:

• Transaction amount in Bangladeshi Taka (BDT / ৳)
• Payment method used (bKash, Nagad, Rocket, Upay, bank transfer, card)
• Transaction reference number provided by the payment gateway
• Date, time (Bangladesh Standard Time, UTC+6), and status of the transaction

1.4 Betting & Gaming Activity Data

jilbat records a complete log of your platform activity, including bets placed (sport, event, market, odds, stake, outcome), casino game sessions (game title, provider, rounds played, stakes, wins/losses), fishing game sessions, bonus claims and wagering progress, and self-exclusion or limit-setting interactions.

1.5 Automatically Collected Technical Data

When you visit jilbat, our servers and analytics tools automatically collect:

• Auto IP address and approximate geographic location (city/district level within Bangladesh)
• Auto Device type, operating system, and browser version
• Auto Pages visited, time on page, clickstream data, and referral source
• Auto Session duration and login/logout timestamps
• Auto Device fingerprint (used for duplicate account and fraud detection)

1.6 Communications Data

If you contact jilbat's customer support via live chat or email, we retain a record of that correspondence, including the content of messages, timestamps, and the support agent's responses. This data is used to resolve disputes, improve service quality, and maintain a record of your account history.

2. How We Use Your Data

jilbat uses the personal data we collect for the following purposes:

Purpose	Data Categories Used
Creating and managing your player account	Registration data, contact details
Verifying your age (18+) and identity (KYC)	Date of birth, ID documents, proof of address
Processing deposits and withdrawals in Bangladeshi Taka	Financial transaction data, payment method details
Detecting and preventing fraud, money laundering, and duplicate accounts	Technical data, device fingerprint, transaction data
Providing customer support and resolving disputes	Communications data, account data, betting activity
Sending promotional offers and platform updates (with consent)	Contact details, betting preferences, activity data
Personalising your experience (game recommendations, relevant promotions)	Betting activity, gaming session data
Responsible gaming monitoring and intervention	Betting activity, login frequency, deposit patterns
Platform security, performance optimisation, and analytics	Technical data, clickstream data
Compliance with AML obligations and legal requirements	KYC data, transaction data, communications

3. Legal Basis for Processing

jilbat processes personal data on the following legal grounds, consistent with internationally recognised data protection principles:

• Contractual necessity: Processing your registration data, transaction data, and KYC documents is necessary to fulfil our contractual obligations to you as a registered player. Without this data, we cannot operate your account or process your Taka deposits and withdrawals.
• Legal obligation: AML verification, KYC checks, and fraud reporting are required by our obligations to maintain safe and reliable platform operations consistent with financial crime prevention standards.
• Legitimate interests: We process technical data, device fingerprints, and clickstream data on the basis of our legitimate interest in securing the platform, preventing duplicate accounts, and improving the jilbat experience for all players in Bangladesh.
• Consent: We process your data for direct marketing communications (promotional emails and SMS) only where you have given clear, freely given, and revocable consent. You may withdraw this consent at any time via your account settings or by contacting [email protected].

4. Cookies & Tracking Technologies

jilbat uses cookies and similar tracking technologies on https://jilbat.net to deliver a functional, personalised, and secure experience. A cookie is a small text file stored on your device when you visit a website. The cookies jilbat uses fall into the following categories:

• Strictly Necessary Cookies: Essential for basic platform functionality including session management, secure login, and anti-fraud token validation. These cannot be disabled without breaking core platform features.
• Functional Cookies: Store your language preference, last-visited game category, and UI layout preferences so that the platform behaves consistently across visits.
• Analytics Cookies: Collect anonymised data about how players navigate jilbat — which pages are most visited, where users spend time, and which features are most popular. This data helps us improve the platform continuously.
• Marketing Cookies: Used only where you have consented to receiving personalised promotional content. These cookies track which promotions and game categories you engage with so that we can present relevant offers.

jilbat does not deploy third-party advertising network cookies or cross-site tracking pixels that would allow external advertisers to build a profile of your browsing behaviour outside of the jilbat platform.

5. Data Sharing & Disclosure

jilbat does not sell, rent, or trade your personal data to any third party. We share data only in the limited circumstances described below, and only with parties who are contractually bound to protect it:

5.1 Payment Processing Partners

To process deposits and withdrawals in Bangladeshi Taka, jilbat shares the minimum necessary transaction data with our payment gateway partners, which facilitate transactions via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard. These partners receive only the data required to process your specific transaction and are prohibited from using it for any other purpose.

5.2 Identity Verification Providers

jilbat may share your KYC documents (NID copy, proof of address) with a trusted third-party identity verification service provider for automated document authentication. All such providers are bound by strict data processing agreements and may not retain your documents beyond the period required to complete the verification check.

5.3 Game Technology Providers

Game studios including Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Ezugi, and Spribe may receive session-level data (player session token, stake amount, game result) necessary to operate their games within the jilbat platform. These providers do not receive your full personal profile, payment details, or identity documents.

5.4 Legal & Regulatory Disclosure

jilbat may disclose personal data to law enforcement authorities, financial intelligence units, or other competent bodies where required to do so by applicable law, court order, or in connection with a suspected financial crime investigation. In such cases, we will disclose only the minimum data necessary to satisfy the legal requirement.

5.5 Business Transfers

In the event of a merger, acquisition, or sale of substantially all assets of jilbat, player data held by jilbat may be transferred to the acquiring entity as part of the transaction. We will notify registered players of any such transfer and the new data controller's identity before the transfer takes effect.

6. Data Retention

jilbat retains personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply:

• Account data and KYC documents: Retained for the lifetime of your account plus a minimum of five (5) years following account closure, in line with standard AML record-keeping requirements.
• Financial transaction records: Retained for a minimum of seven (7) years from the date of the transaction, consistent with financial record-keeping obligations.
• Betting and gaming activity logs: Retained for five (5) years from the date of activity. These records may be required to resolve disputes or support responsible gaming investigations.
• Customer support communications: Retained for three (3) years from the date of the last communication in a support thread.
• Technical and analytics data: Retained in aggregated, anonymised form indefinitely for platform improvement purposes. Individual-level technical logs are retained for up to twelve (12) months.
• Marketing consent records: Retained for the period of your account plus three (3) years after unsubscription, as evidence of your consent decision.

When personal data is no longer required and no legal retention obligation applies, jilbat securely deletes or anonymises that data so that it can no longer be attributed to an identifiable individual.

7. Data Security

jilbat takes the security of your personal data seriously. We implement a range of technical and organisational measures to protect your data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• SSL/TLS Encryption: All data in transit between your device and jilbat's servers is encrypted using industry-standard TLS 1.2 or higher. Our SSL certificate is maintained and renewed automatically.
• Password Hashing: Your account password is never stored in plain text. It is hashed using a modern cryptographic algorithm (bcrypt) before being stored. jilbat staff cannot view your password.
• Two-Factor Authentication (2FA): jilbat offers SMS OTP-based two-factor authentication for account login. We strongly encourage all players to enable 2FA in Account Settings.
• Access Controls: Access to player personal data is restricted to jilbat staff who have a legitimate operational need to process that data. All staff with data access are subject to confidentiality obligations.
• Fraud Detection Systems: jilbat operates automated fraud and anomaly detection systems that monitor login attempts, transaction patterns, and device changes to identify and block suspicious activity in real time.
• Regular Security Reviews: jilbat's platform infrastructure and data processing practices are reviewed periodically to identify and remediate security vulnerabilities.

8. Your Rights Over Your Data

As a jilbat player, you have the following rights with respect to the personal data we hold about you. To exercise any of these rights, contact our support team at [email protected] with the subject line "Data Rights Request". We will respond within 30 calendar days.

• Right of Access: You may request a copy of all personal data jilbat holds about you in a structured, commonly used format.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you may request that we correct or update it. Some corrections (e.g., name changes) will require supporting documentary evidence.
• Right to Erasure ("Right to Be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes it was collected, where you have withdrawn consent (for consent-based processing), or where processing was unlawful. Note that we may be unable to delete data that we are legally required to retain (e.g., financial transaction records).
• Right to Restrict Processing: You may request that we restrict the processing of your data while a dispute about its accuracy or the lawfulness of its processing is being resolved.
• Right to Data Portability: Where processing is based on consent or contractual necessity, you may request that we provide your data in a machine-readable format for transfer to another service provider.
• Right to Object: You may object to processing carried out on the basis of legitimate interests or for direct marketing purposes. Marketing objections will be actioned immediately; other objections will be considered in light of our legitimate interests.
• Right to Withdraw Consent: Where we process your data based on consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

9. Children's Privacy

jilbat is an adults-only platform. We do not knowingly collect, process, or store personal data from individuals under the age of 18. Our registration process includes a date-of-birth field and an age verification step specifically to prevent minors from accessing the platform.

If jilbat becomes aware that personal data has been collected from a person under 18, we will immediately suspend the associated account, delete the personal data in question, and — where applicable — report the matter to the relevant authorities. Parents or guardians who believe a minor has registered on jilbat should contact [email protected] immediately so that we can take swift action.

10. Updates to This Policy

jilbat may update this Privacy Policy from time to time to reflect changes in our data practices, technology, legal obligations, or the services we offer. When material changes are made, we will notify registered players by displaying a prominent notice on the jilbat platform for a minimum of 7 days before the updated Policy takes effect.

The effective date at the top of this page will be updated whenever a new version is published. We encourage you to review this Policy periodically so that you remain informed about how your personal data is being handled. The version number is also incremented with each update so that you can track changes over time.

Your continued use of jilbat after the effective date of any updated Policy constitutes your acknowledgement and acceptance of the changes. If you disagree with any material change, you should stop using the platform and request account closure. Your real-money balance (excluding non-withdrawable bonus funds) will be returned to your verified payment method following standard processing times.

11. Contact & Complaints

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data jilbat holds about you, please contact our Data Privacy team at:

Email: [email protected]
Subject line: Privacy Policy Enquiry / Data Rights Request
Response time: We acknowledge all privacy-related emails within 5 business days (Bangladesh Standard Time, UTC+6).

jilbat takes all privacy complaints seriously and will investigate every concern thoroughly. If your complaint is not resolved to your satisfaction within 30 calendar days, you may escalate by marking a follow-up email as "Formal Privacy Escalation". Our senior compliance team will provide a written final response within a further 14 calendar days.

This Privacy Policy applies exclusively to data collected and processed via https://jilbat.net. It does not apply to any third-party websites that may be linked from the jilbat platform. jilbat accepts no responsibility for the privacy practices of any third-party site.