ja666 Privacy Policy — How We Collect, Use, and Protect Your Personal Data

1 Introduction

ja666 operates the online gambling and sports betting platform accessible at ja666.io, serving players based in Bangladesh. As part of delivering a secure, personalised, and legally compliant service, ja666 collects and processes certain categories of personal data relating to registered players and website visitors. This Privacy Policy sets out, in plain and accessible English, the full scope of that data processing activity.

The terms "ja666", "we", "us", and "our" refer to the ja666 platform and its operating entity. The terms "you", "your", and "player" refer to any individual who accesses the ja666 website, creates a player account, or uses any feature of the ja666 service. This policy should be read in conjunction with the ja666 Terms & Conditions, which govern the overall relationship between you and ja666.

ja666 takes its data protection obligations seriously. We apply appropriate technical and organisational safeguards to protect personal data against unauthorised access, alteration, disclosure, or destruction. We do not sell your personal data to third parties for commercial marketing purposes unrelated to the delivery of our service.

2 Data We Collect

ja666 collects personal data in several ways: directly from you when you register or interact with the platform, automatically through your device and browser when you visit ja666.io, and from third parties such as payment processors and identity verification services. The categories of data we may collect include:

2.1 Identity and Registration Data

• Full legal name as it appears on your National Identity Card (NID) or passport
• Date of birth (used to verify you are 21 years of age or older)
• Gender (optional, collected during KYC in some verification workflows)
• Residential address in Bangladesh, including district and division
• Nationality and country of residence

2.2 Contact Data

• Email address registered to your ja666 account
• Mobile phone number, including the operator prefix (Grameenphone, Robi, Banglalink, Teletalk, Airtel)

2.3 Financial and Payment Data

• bKash, Nagad, Rocket, or Upay wallet numbers used for deposits and withdrawals
• Bank account details where bank transfers via Dutch-Bangla Bank, City Bank, or BRAC Bank are used
• Transaction history, including deposit amounts in BDT, withdrawal requests, and bonus credits
• We do not store full payment card numbers or authentication PINs; these are handled entirely by the relevant payment service providers

2.4 Identity Verification Documents

• Copies of government-issued identification (NID, passport, or birth certificate) submitted during KYC verification
• Proof of address documents such as utility bills or bank statements issued within the preceding three months
• Selfie or video verification images where required as part of enhanced due diligence

2.5 Technical and Device Data

• IP address and approximate geolocation derived from it
• Browser type, version, and operating system
• Device type (mobile, tablet, desktop) and screen resolution
• Session duration, pages visited, and features accessed on ja666.io
• Referring URL if you arrived at ja666 from another website

2.6 Gameplay and Betting Data

• Betting history across all sports markets including cricket, BPL, IPL, T20 World Cup, and football
• Casino game history including slots, live dealer tables, crash games, and card games
• Wager amounts, outcomes, and running account balance over time
• Bonus usage history and wagering requirement progress

2.7 Communications Data

• Records of correspondence between you and the ja666 customer support team, including email threads and live chat transcripts
• Feedback, complaints, or dispute records submitted through official ja666 channels

3 How We Use Your Data

ja666 uses the personal data described above for the following purposes. We collect only what is necessary for each purpose and do not use your data in ways that are incompatible with the reason it was originally gathered.

Where ja666 uses your data for direct marketing purposes — such as notifying you of seasonal promotions tied to events like Eid, Pohela Boishakh, or the Bangladesh Premier League (BPL) — we will only do so where you have given your explicit consent or where we have a legitimate interest in communicating with you as an active registered player. You may withdraw your marketing consent at any time by contacting our support team at [email protected].

4 Legal Basis for Processing

ja666 processes your personal data only where there is a valid legal basis for doing so. Depending on the specific processing activity, the applicable legal basis will be one or more of the following:

• Contractual necessity: Processing that is necessary to perform the contract between you and ja666 — for example, verifying your identity, processing your deposits and withdrawals, and maintaining your account.
• Legal obligation: Processing required to comply with applicable legal requirements, including anti-money laundering regulations, counter-terrorism financing rules, and age verification obligations.
• Legitimate interests: Processing carried out to pursue the legitimate business interests of ja666, provided those interests are not overridden by your rights and freedoms. This includes fraud prevention, platform security, and responsible gaming monitoring.
• Consent: Processing based on a freely given, specific, informed, and unambiguous indication of your wishes — primarily used for direct marketing communications and certain categories of non-essential cookies.

5 Data Sharing & Disclosure

ja666 does not sell your personal data to third parties. We may, however, share your data with the following categories of recipients where necessary to deliver our service or meet our legal obligations:

5.1 Payment Service Providers

To process deposits and withdrawals in Bangladeshi Taka (BDT), ja666 shares necessary financial and identity data with licensed payment processors including the operators of bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank. These providers process your data under their own privacy policies and are required to apply appropriate data security standards.

5.2 Identity Verification Services

ja666 uses third-party KYC and identity verification providers to confirm player identity and age. These providers process identification documents, selfie images, and personal data on our behalf under strict contractual data processing agreements.

5.3 Game Technology Providers

The casino and live gaming features on the ja666 platform are powered by third-party game studios and platform providers including Evolution Gaming, Ezugi, Pragmatic Play, NetEnt, Microgaming, and Spribe. These providers may receive certain session and gameplay data necessary to deliver their games and maintain game integrity.

5.4 Regulatory and Law Enforcement Authorities

ja666 may disclose personal data to government bodies, law enforcement agencies, financial intelligence units, or other regulatory authorities where required by law or where disclosure is necessary to prevent fraud, money laundering, or other serious criminal activity. Such disclosures will be made strictly within the bounds of applicable legal requirements.

5.5 Professional Advisers

ja666 may share data with its legal advisers, auditors, accountants, and insurers where necessary in the context of providing professional services to the platform. All such recipients are bound by confidentiality obligations.

6 Cookies & Tracking Technologies

The ja666.io website uses cookies and similar tracking technologies to ensure the platform functions correctly, to remember your preferences, to keep you securely logged in to your account, and to analyse how players use the site so that we can improve the experience over time.

6.1 Types of Cookies Used

• Strictly necessary cookies: Essential for the platform to operate. These include session authentication cookies that keep you logged in to your ja666 account and security cookies that protect against cross-site request forgery (CSRF).
• Functional cookies: Remember your preferences such as language settings and display options, so you do not need to re-enter them on each visit.
• Analytics cookies: Collect aggregated, anonymised information about how visitors interact with ja666.io — for example, which game categories are most visited or which pages have the highest exit rate. This data is used solely to improve platform performance.
• Marketing cookies: Used, where you have consented, to show you relevant promotional content related to ja666 on third-party platforms. These cookies do not track you across sites unrelated to our service.

6.2 Managing Cookies

You may control or disable non-essential cookies through your browser settings. Please note that disabling strictly necessary cookies may impair the functionality of the ja666 platform, including your ability to log in or maintain a secure session. Instructions for managing cookies in common browsers (Chrome, Firefox, Safari, Edge) are available through those browsers' respective help documentation.

7 Data Retention

ja666 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention periods apply:

• Active account data: Retained for the duration of your registered account on ja666, plus a minimum of five years following account closure, in order to meet anti-money laundering and financial record-keeping requirements.
• KYC and identity documents: Retained for a minimum of five years from the date of submission, in line with financial compliance obligations.
• Transaction and betting records: Retained for a minimum of five years from the date of each transaction or wager.
• Customer support communications: Retained for three years from the date of the last interaction, unless the communication relates to an ongoing dispute or legal matter, in which case it is retained for the duration of that matter plus two additional years.
• Marketing consent records: Retained for the period during which consent is active, plus three years following withdrawal of consent, to demonstrate compliance with consent requirements.
• Technical and device data (non-aggregated): Retained for up to 13 months from the date of collection for fraud and security monitoring purposes.

When data is no longer needed and no retention obligation applies, ja666 will securely delete or anonymise it in a manner that prevents any possibility of reconstruction.

8 Data Security

ja666 applies a layered approach to data security, combining technical controls, organisational policies, and staff training to protect personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. The core security measures in place include:

• SSL/TLS encryption: All data transmitted between your device and the ja666 servers is encrypted using industry-standard Transport Layer Security (TLS) protocols. The padlock icon in your browser address bar confirms an active encrypted connection.
• Encrypted data storage: Sensitive data fields including identity document copies and payment details are encrypted at rest using AES-256 encryption.
• Access controls: Access to personal data within the ja666 organisation is restricted on a strict need-to-know basis. Staff with access to player data are subject to confidentiality obligations and receive regular data protection training.
• Two-factor authentication: Administrative access to systems holding player data is protected by multi-factor authentication requirements.
• Vulnerability monitoring: The ja666 platform undergoes regular security assessments, penetration testing, and patch management reviews to identify and remediate potential vulnerabilities.

9 Your Rights Over Your Personal Data

As a player on the ja666 platform, you hold the following rights in relation to your personal data. To exercise any of these rights, contact us in writing at [email protected] with the subject line "Data Rights Request" and include your registered username and a clear description of your request. We will respond within 30 calendar days of receiving a valid request.

Please note that some rights are subject to limitations where compliance with applicable law requires continued processing — for example, financial records must be retained for the periods specified in Section 7 regardless of an erasure request.

10 Children & Minors

The ja666 platform is strictly for adults aged 21 years and above. ja666 does not knowingly collect personal data from any person under the age of 21. The platform employs mandatory age verification at the point of registration and may request additional documentation to confirm age at any subsequent point.

If ja666 becomes aware that an account has been registered by, or on behalf of, a person under the age of 21, the account will be immediately suspended, all associated personal data will be securely deleted (subject to any legal reporting obligations relating to underage gambling), and the matter will be escalated in accordance with our safeguarding procedures. Parents or guardians who believe a minor may have accessed the ja666 platform should contact us immediately at [email protected].

11 Third-Party Services and External Links

The ja666 platform integrates third-party technology from game providers such as Evolution Gaming, Ezugi, Pragmatic Play, NetEnt, Microgaming, and Spribe to deliver casino and live gaming content. These providers operate their own privacy practices governing data processed within their game environments. ja666 recommends reviewing the privacy documentation of these providers if you have questions about data handling within specific game products.

The ja666 website does not contain links to external third-party websites outside the ja666 ecosystem. In the event that you navigate away from ja666.io independently, ja666 accepts no responsibility for the privacy practices of any external website you visit.

12 Changes to This Privacy Policy

ja666 may update this Privacy Policy from time to time to reflect changes in our data processing activities, applicable legal requirements, or the features and services offered on the platform. Where changes are material — such as the introduction of a new category of data collection or a new third-party sharing arrangement — we will notify registered players by email or via an in-platform notification before the changes take effect.

Minor updates, such as clarifications of existing descriptions or corrections to formatting, may be made without prior notice. The "Last Updated" date at the top of this page always reflects the date of the most recent revision. We encourage you to review this policy periodically to stay informed about how ja666 handles your personal data.

Continued use of the ja666 platform following notification of a material change to this Privacy Policy constitutes your acceptance of the updated policy.

13 Contact Us

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have concerns about the way ja666 handles your personal data, please contact our data team using the details below. All data-related correspondence should be submitted in writing to ensure it is correctly routed and acknowledged.

• Email: [email protected] (plain text — not a clickable link)
• Subject Line for Data Requests: "Data Rights Request"
• Subject Line for Privacy Concerns: "Privacy Concern"
• Response Time: Within 30 calendar days of a valid written request
• Support Hours: 24 hours a day, 7 days a week

If you are not satisfied with ja666's response to your data rights request or privacy concern, you have the right to escalate the matter to the relevant data protection authority in your jurisdiction.