ju99 Privacy
Policy

1.1 Information You Provide Directly

When you register a ju99 account, make a deposit, contact our support team, or participate in a promotion, you may provide us with the following categories of personal information:

• Identity data: Full legal name, date of birth, gender, and nationality as provided during registration or KYC verification.
• Contact data: Mobile phone number, email address, and residential address.
• Identity documents: Copies of a national ID card, passport, or driving licence submitted during the KYC verification process.
• Financial data: bKash or Nagad mobile wallet numbers, Rocket (Dutch-Bangla Bank) account details, and bank account information used for deposits and withdrawals. We do not store full card numbers — payment processing is handled by the payment provider directly.
• Communications data: The content of emails, support chat messages, or any other correspondence you send to ju99.
• Preference data: Any marketing or communication preferences you set within your account dashboard.

1.2 Information Collected Automatically

When you access ju99.bet, our systems automatically collect certain technical data about your device and browsing behaviour. This includes:

• Device data: Device type, operating system, browser type and version, screen resolution, and device language settings.
• Usage data: Pages visited, games played, bet amounts and outcomes (for platform integrity purposes), session duration, click patterns, and navigation paths.
• Location data: Country and city-level location derived from your IP address. We do not collect precise GPS-level location data.
• Log data: Server logs recording your IP address, access timestamps, HTTP request details, and any error messages generated during your session.
• Cookie and tracking data: Data collected via cookies and similar technologies as described in Section 4 of this policy.

1.3 Information from Third Parties

In limited circumstances, ju99 may receive personal data about you from third parties. This includes identity verification data returned by KYC service providers during the verification process, and fraud-risk signals from payment processors when a transaction is flagged for review. We do not purchase marketing lists or obtain personal data from data brokers.

3.1 Payment Processing Partners

To process deposits and withdrawals, ju99 must share necessary transaction data with our payment processing partners. In the Bangladesh market this includes bKash, Nagad, Rocket (Dutch-Bangla Bank), Upay (UCB), and the banking partners used for direct bank transfers. Each of these providers processes your payment data under their own privacy policy and in accordance with applicable financial regulations. ju99 shares only the minimum transaction data needed to execute each payment instruction.

3.2 Game Technology Providers

The casino games and sports betting markets on ju99 are powered by third-party technology providers including Pragmatic Play, Evolution Gaming, Spribe, Ezugi, NetEnt, and Microgaming. These providers may receive a session token and anonymised player identifier to deliver game content and to record game round outcomes. They do not receive your full name, contact details, or payment information. Game providers are contractually bound to use player data only for delivering and auditing game sessions.

3.3 Identity Verification and KYC Providers

ju99 uses specialist third-party KYC and identity verification service providers to process the identity documents you submit. These providers receive the documents and identity data necessary to perform the verification check and return a verification decision. They are bound by strict data processing agreements and may not use your data for any other purpose.

3.4 Legal and Regulatory Disclosure

ju99 may be required to disclose personal data to law enforcement agencies, financial intelligence units, regulatory bodies, or courts when required to do so by applicable law or a valid legal order. In such cases, ju99 will disclose only the data specifically required by the request and, where legally permitted, will notify the affected player of the disclosure.

3.5 Business Transfers

In the event that ju99 undergoes a merger, acquisition, or sale of all or part of its business assets, personal data held by the platform may be transferred to the acquiring entity as part of that transaction. Players will be notified of any such transfer and of any changes to this Privacy Policy that may result from it before the transfer takes effect.

5.1 Technical Security Measures

ju99.bet enforces HTTPS across all pages and all subdomains — no data is transmitted over unencrypted HTTP connections. Passwords are stored using strong cryptographic hashing (bcrypt with a high work factor); plaintext passwords are never stored or logged anywhere on our systems.

The platform's infrastructure is hosted in secured data centres with physical access controls, 24/7 monitoring, and redundant systems. Database servers are not publicly accessible — they sit behind multiple layers of network firewalls and are accessible only via authenticated, encrypted internal connections from authorised application servers.

KYC identity documents are stored in encrypted object storage with access restricted to a named group of authorised compliance team members. Document access events are logged and audited regularly.

5.2 Organisational Security Measures

Access to personal data within the ju99 organisation is governed by a strict role-based access control (RBAC) policy. Staff members can access only the categories of data necessary to perform their specific job function. Access rights are reviewed when roles change and are revoked immediately upon any staff departure.

All staff who handle personal data undergo training on data protection obligations and the requirements of this Privacy Policy. Access to sensitive systems requires multi-factor authentication (MFA). ju99 conducts periodic internal security reviews to identify and remediate vulnerabilities before they can be exploited.

5.3 Data Breach Response

In the event that ju99 discovers or is notified of a data security breach that affects your personal information, we will take immediate steps to contain the breach and assess its scope. Where the breach is likely to result in a risk to your rights or interests, we will notify affected players without undue delay. The notification will describe the nature of the breach, the categories of data affected, the steps we have taken to address it, and any steps you are recommended to take to protect yourself.

5.4 Your Responsibilities

While ju99 maintains strong platform-side security, account security also depends on you. You are responsible for choosing a strong, unique password for your ju99 account, keeping that password confidential, logging out of your account on shared or public devices, and reporting any suspected unauthorised access to [email protected] immediately. ju99 will never ask you to reveal your password through any communication channel.

When a retention period expires, ju99 will either securely delete the personal data or anonymise it so that it can no longer be linked to any individual. Anonymised data (for example, aggregated statistical reports on platform usage) may be retained indefinitely because it no longer constitutes personal data.

If you request account closure, your personal data will be retained for the applicable post-closure retention periods set out in the table above. The data will not be actively processed for account operations after closure, but it will remain in our secure archive systems for the duration of the relevant retention period.

Where ju99 is involved in legal proceedings or a formal regulatory investigation, personal data relevant to those proceedings may be retained beyond the standard retention periods until the matter is fully resolved.