Privacy Policy — jatabat
At jatabat, protecting the personal information of our players across Bangladesh is a core responsibility we take seriously. This Privacy Policy explains exactly what data we collect, why we collect it, how we use and store it, and the rights you hold over your own information. We are committed to transparency, security, and compliance with applicable data protection principles.
Privacy at a Glance
A plain-English summary of how jatabat handles your personal data. These highlights supplement — and do not replace — the full policy sections below.
Information We Collect
jatabat collects personal information from players across Bangladesh through several channels: account registration, identity verification, payment processing, platform usage, and customer support interactions. The categories of information we collect, and the specific data points within each category, are detailed below.
Registration & Account Data
When you create a jatabat account, we collect the following information you provide directly:
- Full legal name (as it appears on your official identification document);
- Date of birth (for age verification — players must be 18 years of age or older);
- Residential address in Bangladesh (division, district, and full postal address);
- Email address (used for account communications and security alerts);
- Mobile phone number registered to your bKash, Nagad, Rocket, or Upay account;
- Preferred username and encrypted password.
Identity Verification (KYC) Data
To comply with our Know Your Customer (KYC) obligations and anti-money laundering (AML) requirements, we may collect the following documents from registered players:
- Copy of National Identity Card (NID) or passport;
- Recent utility bill, bank statement, or official correspondence confirming your Bangladesh address;
- A live selfie or photograph for facial recognition comparison against your ID document.
KYC documents are processed and stored by our verified identity verification partner under a strict data processing agreement. Originals are never retained longer than necessary to complete the verification process.
Financial & Transaction Data
When you make deposits or withdrawals, we collect:
- Payment method type (bKash, Nagad, Rocket, Upay, or bank transfer);
- Transaction reference numbers and timestamps;
- Deposit and withdrawal amounts in BDT (৳);
- Account balance history for AML monitoring purposes.
jatabat does not store your full mobile banking PIN, bKash wallet password, or bank account credentials. Payment authentication is handled entirely by the respective payment provider's secure environment.
Technical & Usage Data
When you access jatabat through a browser or mobile device, we automatically collect certain technical information:
- IP address and approximate geolocation (division/district level);
- Browser type and version, device operating system;
- Pages visited, time spent on each page, and click-path data;
- Game history (games played, bet amounts, outcomes) — retained for fair play auditing;
- Session login and logout timestamps.
Data Categories Summary
| Category | Collected |
|---|---|
| Registration Info | Yes |
| KYC Documents | Yes |
| Payment Data | Yes |
| Game History | Yes |
| Device & Browser | Yes |
| Marketing Profile | No |
| Payment PIN/Password | No |
How We Use Your Data
jatabat uses the personal information we collect for specific, defined purposes only. We do not process your data in ways that are incompatible with the purposes stated at the time of collection. The primary purposes for which we use your personal data are as follows:
- Account creation and management: To register your account, verify your identity, and provide access to jatabat's casino games, sports betting markets, and VIP loyalty programme;
- Payment processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, and Bangladesh bank transfers, and to reconcile your account balance in BDT (৳);
- Age and identity verification: To confirm that you meet the minimum age requirement of 18 years and that your identity details are accurate, as required by our KYC process;
- Anti-money laundering compliance: To monitor transactions for suspicious activity, comply with AML regulations, and report to relevant authorities where legally required;
- Customer support: To respond to your queries, complaints, and account requests submitted via email or live chat;
- Security and fraud prevention: To detect, investigate, and prevent unauthorised account access, bonus abuse, bot activity, and other fraudulent conduct;
- Service improvement: To analyse aggregated, anonymised usage data in order to improve platform performance, game selection, and the overall player experience for users across Bangladesh;
- Promotional communications: To send you information about relevant bonuses, VIP rewards, and promotions — but only where you have opted in to receive marketing communications. You may opt out at any time by updating your notification preferences in your account settings or by contacting support@jatabat.
jatabat processes your personal data on the following legal bases: (a) performance of a contract — processing necessary to provide the services you have registered for; (b) legal obligation — processing required to comply with AML, KYC, and other applicable legal duties; (c) legitimate interests — processing for fraud prevention and platform security; and (d) consent — where you have explicitly opted in to marketing communications or optional analytics cookies.
Data Sharing & Third Parties
jatabat does not sell, rent, or trade your personal data to any third party for commercial purposes. Your information is shared only in the limited circumstances described below, and only to the extent necessary to fulfil the stated purpose:
| Recipient Category | Purpose | Data Shared |
|---|---|---|
| Payment Processors (bKash, Nagad, Rocket, Upay, Banks) | Processing deposits and withdrawals in BDT | Transaction reference, amount, account identifiers |
| KYC / Identity Verification Partners | Age and identity verification for new accounts | Name, date of birth, NID/passport copy, selfie |
| Cloud Hosting & Infrastructure Providers | Secure data storage and platform delivery | Encrypted account and transaction data |
| Fraud Prevention & Security Services | Detection and prevention of account fraud and AML monitoring | IP address, device fingerprint, transaction patterns |
| Legal & Regulatory Authorities | Compliance with legal orders, AML reporting obligations | As required by the specific legal directive |
| Customer Support Tools | Managing player support tickets and communications | Account username, email, support correspondence |
All third-party service providers that handle personal data on behalf of jatabat are bound by data processing agreements that restrict how they may use that data, require them to implement appropriate security measures, and prohibit them from processing the data for any purpose beyond what jatabat has authorised.
In the event that jatabat undergoes a business restructuring, merger, or acquisition, player personal data may form part of the transferred assets. In such a scenario, you will be notified via your registered email address and the incoming entity will be required to honour the terms of this Privacy Policy.
Data Security & Retention
jatabat implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. Our security framework includes the following protections:
- SSL/TLS encryption in transit: All data transmitted between your device and jatabat is encrypted using industry-standard TLS 1.2 or higher. This applies to all pages of the platform, including login, deposit, and withdrawal flows;
- AES-256 encryption at rest: Sensitive personal data stored in jatabat's databases — including KYC documents and identity records — is encrypted at rest using AES-256 encryption;
- Access controls: Internal access to personal data is restricted on a strict need-to-know basis. Staff members who handle player data undergo data protection training and are bound by confidentiality obligations;
- Two-factor authentication: Players are encouraged to enable two-factor authentication (2FA) via SMS to add an additional layer of security to their jatabat account;
- Regular security audits: jatabat conducts periodic internal security reviews and vulnerability assessments of its platform infrastructure.
Despite these measures, no online platform can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights or freedoms, jatabat will notify affected players without undue delay via their registered email address, and will take all reasonable steps to contain and remediate the breach.
Data Retention Periods
jatabat retains personal data for no longer than is necessary for the purposes for which it was collected, subject to the following minimum retention periods required by applicable law and responsible gaming obligations:
- Account data & KYC records: Retained for 5 years following permanent account closure, to meet anti-money laundering record-keeping requirements;
- Transaction records: Retained for 5 years from the date of each transaction;
- Customer support correspondence: Retained for 2 years from the date of resolution;
- Marketing consent records: Retained for the duration of the consent plus 1 year following withdrawal of consent;
- Game history logs: Retained for 2 years for fair play auditing purposes.
Following the expiry of applicable retention periods, personal data is securely deleted or anonymised such that it can no longer be attributed to any identifiable individual.
Retention At a Glance
| Data Type | Retention |
|---|---|
| Account & KYC | 5 years |
| Transactions | 5 years |
| Support Logs | 2 years |
| Game History | 2 years |
| Marketing Consent | +1 year |
Your Rights Over Your Data
As a registered player on jatabat, you hold specific rights with respect to the personal data we hold about you. jatabat is committed to honouring these rights promptly and without undue restriction. To exercise any of the rights described below, please contact us in writing at support@jatabat, including your registered username and a description of your request. We will respond within 30 calendar days.
Minors & Child Protection
jatabat is strictly an adult platform. We do not knowingly collect personal data from any individual under the age of 18. The platform's registration process requires players to confirm their date of birth and subjects all accounts to KYC age verification before full access to real-money features is granted.
If jatabat becomes aware that personal data has been collected from a person under the age of 18 — whether through a false declaration of age at registration or any other means — we will take the following immediate steps:
- Suspend and permanently close the account;
- Securely delete all personal data associated with the underage account as soon as legally permissible;
- Return any deposited funds to the verified payment source used at registration;
- Report the incident to relevant authorities where required by law.
Parents and guardians in Bangladesh who believe their child may have registered on jatabat are encouraged to contact us immediately at support@jatabat. We treat all such reports as high-priority and will investigate and respond within 48 hours.
Policy Updates & Contact
jatabat reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. When material changes are made — changes that affect how we collect or use your personal data in a significant way — we will notify registered players via their registered email address and through an in-platform notification at least 7 days before the changes take effect.
The "Last Updated" date displayed at the top of this page will always reflect when the most recent revision was made. We encourage you to review this Privacy Policy periodically, particularly after receiving a notification of changes. Your continued use of the jatabat platform following the effective date of any revised Privacy Policy constitutes your acknowledgement of the updated terms.
For minor, non-material changes — such as corrections of typographical errors or clarifications that do not alter the substance of the policy — we reserve the right to update this page without prior notice or individual notification.
How to Contact Us About Privacy
If you have any questions, concerns, or requests regarding this Privacy Policy or the way jatabat handles your personal data, please contact our team using the details below. We are committed to responding to all privacy-related enquiries within 30 calendar days.
This Privacy Policy should be read alongside jatabat's Terms & Conditions and Responsible Gaming Policy, both of which contain additional provisions relevant to the way your account and personal data are managed on the platform.
Ready to Explore jatabat?
Your data is protected. Your gaming experience is secure. Browse our full range of casino games and sports betting markets, or visit our FAQ for quick answers about your account.