jiaace Privacy Policy

This Privacy Policy ("Policy") describes how jiaace ("jiaace", "we", "us", "our") collects, processes, stores, and protects the personal data of individuals ("Player", "you", "your") who access or use the jiaace online gambling platform at https://jiaace.net ("Platform", "Website").

jiaace operates an online gambling and sports betting service with particular depth of coverage for cricket — including the Bangladesh Premier League (BPL), IPL, T20 World Cup, and Bangladesh Tigers fixtures — as well as live casino tables, slot games, fishing arcade titles, and crash games. The Platform is designed for adult players aged 18 and above in Bangladesh.

By registering a jiaace account, accessing the Platform, or otherwise engaging with jiaace's services, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection and processing of your personal data as described herein. This Policy should be read alongside the jiaace Terms & Conditions and the Responsible Gaming Policy, both of which are published on this website.

This Policy applies to all data collected through the jiaace website, mobile browser interface, live chat, email correspondence, and any other channel through which jiaace receives information from or about you.

jiaace is the data controller responsible for the personal data processed under this Privacy Policy. As data controller, jiaace determines the purposes and means by which your personal data is processed. All data protection enquiries, access requests, and complaints should be directed to the jiaace data protection team at the contact details provided in Section 15 of this Policy.

jiaace takes its responsibilities as data controller seriously and has implemented appropriate technical and organisational measures to ensure that personal data is processed lawfully, fairly, and transparently at all times.

jiaace collects the following categories of personal data, depending on how you interact with the Platform:

3.1 Registration Data

• Full legal name
• Date of birth
• Residential address (city, district, Bangladesh)
• Email address
• Mobile phone number
• Username and encrypted password
• Preferred currency (Bangladeshi Taka, BDT)

3.2 Identity Verification (KYC) Data

• National Identity Card (NID) number and scanned image
• Passport number and copy (where submitted)
• Proof of address documents (utility bills, bank statements dated within 90 days)
• Mobile wallet account confirmation (bKash, Nagad, Rocket, or Upay account holder name and registered number)
• Selfie or photograph for facial verification (where required for enhanced KYC)

3.3 Financial Data

• Deposit and withdrawal transaction records (amounts , dates, payment method references)
• Mobile wallet identifiers used for deposits and withdrawals (bKash, Nagad, Rocket, Upay)
• Bank account details where bank transfer is used (account holder name, bank name, branch)
• Bonus and promotion records linked to your account

3.4 Betting & Gaming Activity Data

• Bet history, including sport, market, odds, stake, and outcome
• Casino game session logs, including game titles, wagers, wins, and losses
• Slot, fishing arcade, and crash game activity records
• Account balance snapshots and transaction ledger entries
• Bonus wagering progress and promotion redemption history

3.5 Technical & Device Data

• IP address and geolocation derived from IP
• Device type, operating system, and browser version
• Session timestamps, login history, and session duration
• Cookie identifiers and similar tracking technology data (see Section 9)
• Referral source data (how you arrived at the jiaace website)

3.6 Communications Data

• Content of emails, live chat transcripts, and support tickets sent to or received from jiaace
• Records of promotional communications you have opted into or out of
• Feedback, survey responses, and complaint records

jiaace collects personal data through the following channels:

• Directly from you: when you register an account, complete KYC verification, make a deposit or withdrawal, contact support, respond to a survey, or interact with any feature of the Platform that requires input.
• Automatically via technology: when you visit the jiaace website, our servers automatically collect technical data including your IP address, device information, and browsing behaviour through cookies and server logs. See Section 9 for full details on cookies.
• From payment providers: when you use bKash, Nagad, Rocket, Upay, or a bank transfer, the relevant payment provider may share transaction confirmation data with jiaace to facilitate crediting your account.
• From identity verification services: where jiaace uses a third-party KYC or fraud-screening provider to verify your identity documents, that provider may return verification results and risk scores to jiaace.
• From fraud detection and security partners: jiaace may receive signals from sports integrity bodies, financial crime detection networks, or device fingerprinting services to help identify and prevent fraudulent use of the Platform.

jiaace processes your personal data only when there is a clear and legitimate purpose for doing so. The table below sets out the primary purposes for which your data is used and the corresponding legal basis for processing:

jiaace will not use your personal data for any purpose that is incompatible with those listed above without first obtaining your consent or establishing a separate legitimate legal basis for doing so.

jiaace does not sell, rent, or trade your personal data to third parties for marketing purposes. We may share your data with the following categories of recipients only to the extent necessary for a specific, disclosed purpose:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, and other payment partners, for the sole purpose of processing deposit and withdrawal transactions.
• Identity verification providers: third-party KYC and document verification services that help jiaace confirm the identity and age of Players as part of mandatory compliance obligations.
• Game providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other licensed game studios whose titles are hosted on the jiaace Platform. These providers may receive anonymised session identifiers to facilitate game delivery and fairness auditing.
• Fraud and security services: providers of anti-fraud, anti-money-laundering, and sports integrity monitoring services that help jiaace protect the Platform and its players.
• Technology and infrastructure partners: cloud hosting providers, content delivery networks, and platform analytics services that support the operation of the jiaace website and back-end systems, subject to binding data processing agreements.
• Legal and regulatory authorities: law enforcement agencies, regulatory bodies, courts, or government authorities where jiaace is legally required to disclose personal data, including in response to a lawful order, subpoena, or investigation related to fraud, financial crime, or match-fixing.
• Business successors: in the event of a merger, acquisition, restructuring, or sale of all or part of jiaace's business, your personal data may be transferred to the acquiring entity, subject to equivalent data protection obligations.

All third-party recipients with whom jiaace shares personal data are required to implement appropriate technical and organisational safeguards and to process data only for the purposes specified by jiaace.

jiaace retains personal data only for as long as is necessary to fulfil the purposes described in this Policy, or as required by applicable legal, regulatory, or contractual obligations. The general retention periods applied by jiaace are as follows:

• Active account data: retained for the duration of the Player's account relationship with jiaace, plus a minimum of five (5) years after account closure, in accordance with anti-money-laundering record-keeping requirements.
• KYC and identity documents: retained for a minimum of five (5) years from the date of verification, or longer if required by applicable law or an ongoing investigation.
• Transaction and betting records: retained for a minimum of five (5) years from the date of each transaction.
• Support and communications records: retained for three (3) years from the date of the last communication, unless the communication forms part of a complaint or legal matter that requires longer retention.
• Cookie and technical data: retained for periods specified in the cookie management settings, typically between 30 days and 24 months depending on the cookie type.

When personal data is no longer required, jiaace will securely delete or anonymise it in a manner that prevents reconstruction or re-identification.

jiaace employs a layered security architecture to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Key security measures include:

• TLS 1.3 encryption: all data transmitted between your device and the jiaace servers is encrypted using Transport Layer Security (TLS) version 1.3, the current industry standard for secure web communications.
• Password hashing: account passwords are never stored in plain text. jiaace uses a cryptographic hashing algorithm with salting to store password credentials securely.
• Two-factor authentication (2FA): jiaace strongly recommends — and provides tools for — two-factor authentication on all player accounts to prevent unauthorised login.
• Access controls: internal access to player personal data is restricted on a strict need-to-know basis. jiaace staff members who access personal data are subject to confidentiality obligations and regular data protection training.
• Intrusion detection and monitoring: jiaace's infrastructure is monitored continuously for suspicious activity, including anomalous login attempts, unusual transaction patterns, and potential data exfiltration events.
• Regular security audits: the jiaace Platform undergoes periodic security assessments and penetration testing by independent cybersecurity professionals.

jiaace uses cookies and similar tracking technologies to operate the Platform, improve user experience, and analyse site usage. A cookie is a small text file placed on your device by a website you visit. The following categories of cookies are used on the jiaace website:

• Strictly necessary cookies: essential for the basic operation of the jiaace Platform, including maintaining your login session, remembering your account preferences, and processing transactions securely. These cookies cannot be disabled without impairing Platform functionality.
• Performance and analytics cookies: used to collect anonymised data about how Players navigate and interact with the Platform, such as which pages are visited most frequently and how long sessions last. This information helps jiaace identify areas for improvement.
• Functional cookies: used to remember preferences such as your preferred language, display settings, or last-visited game category, enabling a more personalised experience on return visits.
• Fraud prevention and security cookies: used to identify unusual or potentially fraudulent behaviour, such as multiple accounts being accessed from the same device or session hijacking attempts.

You may manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies may prevent certain features of the jiaace Platform from functioning correctly. jiaace does not currently support a separate cookie preference centre but may introduce one in a future update to this Policy.

As a jiaace player, you hold the following rights in relation to your personal data. To exercise any of these rights, please submit a written request to [email protected] with the subject line "Data Rights Request" and sufficient information to verify your identity.

• Right of Access: you may request a copy of the personal data jiaace holds about you, along with information about how it is processed.
• Right to Rectification: you may request that inaccurate or incomplete personal data be corrected without undue delay.
• Right to Erasure: you may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to overriding legal retention obligations (such as anti-money-laundering record-keeping requirements).
• Right to Restrict Processing: you may request that jiaace temporarily restrict the processing of your data while a rectification or objection request is being assessed.
• Right to Data Portability: you may request that jiaace provide your personal data in a structured, commonly used, machine-readable format so that it can be transferred to another service provider.
• Right to Object: you may object to the processing of your personal data where it is based on jiaace's legitimate interests, particularly in relation to direct marketing communications.
• Right to Withdraw Consent: where processing is based on your consent (for example, receiving promotional emails), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal. To unsubscribe from marketing communications, use the unsubscribe link in any jiaace email or contact support.

jiaace will respond to all data rights requests within 30 days of receipt. Where a request is complex or involves a large volume of data, jiaace may extend this period by a further 60 days, in which case you will be notified of the extension and the reason for it.

The jiaace Platform is strictly intended for adults aged 18 and above. jiaace does not knowingly collect personal data from any person under the age of 18. If jiaace discovers or reasonably suspects that a Player is under 18, the account will be immediately suspended, all data relating to the minor will be securely deleted to the extent permitted by law, and any funds held in the account will be returned via the original deposit method.

Parents and guardians are strongly encouraged to install parental control or internet filtering software on shared devices to prevent minors from accessing online gambling platforms including jiaace. If you believe a minor has registered an account on jiaace, please contact [email protected] immediately so that the matter can be investigated and resolved promptly.

The jiaace Platform integrates games and services from third-party providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. When you play a game hosted by one of these providers, certain technical data (such as session tokens and game outcome records) may be transmitted to the provider's servers as part of the normal operation of the game. jiaace requires all game providers to handle this data in accordance with data protection obligations equivalent to those described in this Policy.

The jiaace website may contain links to third-party pages in certain informational contexts. jiaace is not responsible for the privacy practices of any third-party website and encourages Players to review the privacy policies of any external site they visit. jiaace does not endorse the privacy practices of third parties and cannot be held responsible for data collected by them.

jiaace's primary platform infrastructure is designed to serve players in Bangladesh. However, some of the third-party service providers used by jiaace — including cloud hosting providers, KYC verification services, and game studios — may process data in countries other than Bangladesh. Where such transfers occur, jiaace ensures that appropriate safeguards are in place, including contractual data processing agreements that impose data protection standards consistent with this Policy. jiaace does not transfer personal data to countries or organisations that cannot provide an adequate level of data protection.

jiaace reserves the right to update or revise this Privacy Policy at any time to reflect changes in the law, our data processing practices, or the services we offer. Material changes will be communicated to Players via a prominent notice on the jiaace website and, where appropriate, by direct email to the address registered on the account. The updated Policy will take effect on the date specified in the notice. We encourage you to review this page periodically to stay informed about how jiaace protects your personal data. Your continued use of the Platform after the effective date of any revision constitutes your acceptance of the updated Policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way jiaace handles your personal data, please contact us using the details below:

• Data Protection Enquiries: [email protected] — Subject line: "Privacy / Data Rights Request"
• Support Hours: 24 hours a day, 7 days a week (Bangladesh Standard Time, UTC+6)
• Response Commitment: jiaace acknowledges all privacy-related enquiries within 48 hours and aims to resolve requests within 30 days.

If you are not satisfied with jiaace's response to your privacy concern, you have the right to escalate your complaint to the relevant data protection authority or regulatory body in your jurisdiction.