jet9 Privacy Policy

Effective Date: 1 January 2026

1 Introduction

This Privacy Policy ("Policy") describes how jet9 ("jet9", "we", "us", "our") collects, uses, stores, discloses, and protects the personal data of individuals ("you", "Player", "User") who access or use the jet9 online betting and casino platform available at jet9.io and any associated applications or services (collectively, the "Platform").

By registering an account or otherwise using the Platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not agree with the terms of this Policy, you must not use the Platform.

This Policy should be read alongside the jet9 Terms & Conditions and Responsible Gaming policy, all of which together constitute the full agreement governing your use of the Platform.

2 Data Controller

jet9 acts as the data controller in respect of personal data collected through the Platform. As data controller, jet9 determines the purposes and means by which personal data is processed. All enquiries relating to this Policy or to the exercise of your data rights should be directed to the jet9 support team using the contact details provided in Section 14 of this Policy.

3 Data We Collect

jet9 collects the following categories of personal data, depending on how you interact with the Platform:

3.1 Identity Data

• Full legal name as it appears on your government-issued identification
• Date of birth (used to verify you meet the minimum age requirement of 21 years)
• Nationality and country of residence
• Copies of identity documents submitted during KYC verification (National Identity Card, passport, driving licence)
• Proof of address documents (utility bills, bank statements dated within three months)

3.2 Contact Data

• Email address
• Mobile telephone number
• Residential address (city, district, division — e.g., Dhaka, Chittagong, Sylhet)

3.3 Account Data

• Username and encrypted password
• Account registration date and time
• Account status (active, suspended, self-excluded, closed)
• Communication preferences and notification settings

3.4 Financial Data

• Deposit and withdrawal transaction records, including amounts, timestamps, and method used (bKash, Nagad, Rocket, Upay, bank transfer)
• Mobile financial service account references (e.g., bKash registered number) — jet9 does not store full payment credentials
• Account balance history and bonus credit records

3.5 Betting & Gaming Data

• Betting history, including selections, stakes, odds accepted, and outcomes
• Casino game session records, including game title, provider, session duration, and results
• Bonus usage and wagering requirement progress

3.6 Technical Data

• IP address at time of login and account activity
• Device type, operating system, and browser information
• Session timestamps and duration
• Geolocation data (city-level, derived from IP address)
• Cookies and similar tracking technologies (see Section 9)

3.7 Communications Data

• Records of support interactions via live chat, email, or any other communication channel
• Responses to surveys, feedback forms, and promotional communications where you have opted in

4 How We Collect Data

jet9 collects personal data through the following means:

• Direct collection: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting support, or participating in promotions.
• Automated collection: Technical and usage data collected automatically when you access the Platform, including through cookies, server logs, and similar technologies.
• Third-party sources: Identity verification data returned by our KYC service providers; fraud-scoring data from risk management partners; payment confirmation data from bKash, Nagad, Rocket, Upay, and supported banks.

5 How We Use Your Data

The table below sets out the primary purposes for which jet9 uses your personal data and the corresponding legal basis for each use:

Where jet9 relies on your consent as a legal basis — for example, for marketing communications — you have the right to withdraw that consent at any time by updating your notification preferences within your account settings or by contacting support.

6 Legal Basis for Processing

jet9 processes personal data only where a valid legal basis exists. The primary legal bases relied upon are:

• Contract performance: Processing that is necessary to open your account, execute your bets, process payments, and deliver the Platform service as agreed in our Terms & Conditions.
• Legal obligation: Processing required to comply with applicable laws and regulations, including age verification, anti-money laundering (AML) requirements, and responsible gaming obligations.
• Legitimate interests: Processing carried out to protect the security of the Platform, prevent fraud, and improve service quality, where those interests are not overridden by your data protection rights.
• Consent: Processing for optional purposes such as marketing emails or SMS promotions, where you have given explicit, informed, and freely-given consent.

7 Data Sharing

jet9 does not sell, rent, or trade your personal data. We may share data with the following categories of third party, strictly on a need-to-know basis and subject to appropriate data processing agreements:

7.1 Payment Processors

Transaction data is shared with the payment service providers you select (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank) to the extent necessary to process your deposit or withdrawal. These providers have their own privacy policies governing the data they receive.

7.2 Identity Verification Providers

Identity and address data submitted during KYC is processed by our third-party verification partners to confirm your identity and age. These partners are bound by strict confidentiality obligations and may only use the data for the specific verification purpose.

7.3 Game Studio Partners

Casino and betting game providers (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) may receive limited session and technical data necessary to deliver their games within the Platform. No identity or financial data is passed to game studios.

7.4 Fraud Prevention and Risk Management

Technical and financial data may be shared with specialist fraud prevention and risk management platforms to detect and investigate suspicious account activity or transactions.

7.5 Legal and Regulatory Authorities

jet9 may disclose personal data to law enforcement agencies, regulatory bodies, or other governmental authorities where required to do so by applicable law or by a valid legal order. jet9 will, where lawfully permitted, notify the affected player of such a disclosure.

8 Retention Periods

jet9 retains personal data for as long as is necessary to fulfil the purposes set out in this Policy, unless a longer retention period is required by law. The following general retention periods apply:

• Account and identity data: Retained for the duration of your account and for a minimum of five (5) years after account closure, in line with standard AML and financial record-keeping requirements.
• Transaction and financial data: Retained for a minimum of five (5) years following the date of the transaction.
• Betting and gaming records: Retained for three (3) years from the date of the relevant session or transaction.
• Support communications: Retained for two (2) years from the date of the last communication in a support thread.
• Marketing consent records: Retained until consent is withdrawn, plus one (1) year thereafter as a compliance record.
• Technical and log data: Retained for a rolling twelve (12) months unless flagged for fraud investigation, in which case data may be retained for the duration of the investigation.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents recovery or reconstruction.

9 Cookies & Tracking Technologies

jet9 uses cookies and similar tracking technologies on the Platform to deliver core functionality, maintain your session, and improve platform performance. The following categories of cookies are used:

• Strictly necessary cookies: Required for the Platform to function. These include session authentication tokens, security cookies, and load-balancing cookies. These cannot be disabled without affecting Platform functionality.
• Performance cookies: Used to collect aggregated, anonymous data on how players navigate the Platform — for example, which pages are visited most frequently and where errors occur. This data is used solely to improve Platform performance.
• Functional cookies: Store your preferences such as language settings and responsible gaming tool configurations so they persist across sessions.
• Analytics cookies: Used to measure engagement metrics and inform product development decisions. Data collected via analytics cookies is anonymised before analysis.

You may manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will impair your ability to use the Platform. jet9 does not use third-party advertising or retargeting cookies.

10 Your Rights

You have the following rights with respect to your personal data held by jet9. To exercise any of these rights, please contact the support team using the details in Section 14:

• Right of access: You may request a copy of the personal data jet9 holds about you, along with information about how it is processed.
• Right to rectification: You may request correction of inaccurate or incomplete personal data. Some corrections can be made directly within your account settings.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for its original purpose, where you have withdrawn consent, or where processing is unlawful. This right is subject to jet9's legal retention obligations — data we are required by law to keep cannot be deleted on request.
• Right to restrict processing: You may request that jet9 temporarily suspend active processing of your data while a rectification or objection request is being assessed.
• Right to data portability: Where processing is based on your consent or on contract performance, you may request that we provide your data in a structured, machine-readable format.
• Right to object: You may object to processing carried out on the basis of legitimate interests. jet9 will cease such processing unless it can demonstrate compelling legitimate grounds that override your rights.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

jet9 will respond to verified data rights requests within thirty (30) days of receipt. Where a request is complex or numerous, this period may be extended by a further two (2) months, in which case you will be notified of the extension and the reason for it.

11 Data Security

jet9 implements a range of technical and organisational measures to protect personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include but are not limited to:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the Platform
• Encryption of sensitive data fields (including passwords and identity document images) at rest
• Role-based access controls limiting staff access to personal data on a strict need-to-know basis
• Regular internal and external security audits and penetration testing
• Two-factor authentication (2FA) available for all player accounts
• Automated fraud and anomaly detection systems monitoring for unusual account activity in real time
• Incident response procedures with defined timelines for breach notification

In the event of a personal data breach that poses a risk to your rights and freedoms, jet9 will notify affected players without undue delay and will take all reasonable steps to contain and remediate the breach.

Despite these measures, no system is completely immune to risk. You are responsible for maintaining the security of your own account credentials. jet9 strongly recommends enabling 2FA and using a unique, strong password for your jet9 account.

12 Minors

The jet9 Platform is strictly intended for adults aged 21 years or older. jet9 does not knowingly collect personal data from persons under this age. If jet9 discovers or is notified that it has inadvertently collected data from a person under 21, the relevant account will be closed immediately, all associated data will be deleted, and any deposits made will be returned to the originating payment method.

If you believe a minor has registered an account on jet9, please notify us immediately using the contact details in Section 14.

13 Changes to This Policy

jet9 reserves the right to update this Privacy Policy at any time. Where changes are material — meaning they affect how we collect, use, or share your personal data in a way that may impact your rights — jet9 will provide registered players with notice of the change via in-platform notification or email at least fourteen (14) days before the revised Policy takes effect.

The date of the most recent revision is always displayed at the top of this page. We encourage you to review this Policy periodically. Your continued use of the Platform after the effective date of any revision constitutes your acceptance of the updated Policy.

14 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the processing of your personal data by jet9, please contact our support team through the following channels:

• Live Chat: Available 24/7 directly within the Platform — this is the fastest way to reach the jet9 team.
• Email: support at jet9.io

Please note that email addresses are displayed as plain text only and are not clickable links. Our team aims to respond to all privacy-related enquiries within two (2) business days (Bangladesh Standard Time, UTC+6). Data rights requests will be processed within the timeframes specified in Section 10.