Privacy Policy — jbdt

jbdt collects personal data that is necessary to operate the platform, verify player identity, process financial transactions, and comply with applicable legal and regulatory obligations. We collect information in three primary ways: directly from you when you register or use the platform, automatically when you interact with the site, and from third-party service providers involved in payment processing and identity verification.

Information You Provide Directly

When you create a jbdt account or interact with the platform, we may collect the following categories of personal data:

• Identity data: full legal name, date of birth, and national identity details where required for verification.
• Contact data: mobile phone number and email address used for account registration and communication.
• Financial data: bKash wallet number, Nagad account number, Rocket number, bank account details, and transaction history relating to deposits and withdrawals on jbdt.
• Account credentials: username and hashed password (passwords are never stored in plain text).
• Verification documents: copies of national identity cards, passports, or utility bills submitted to satisfy identity or age verification requirements.
• Communication records: messages sent to or received from jbdt support, including live chat transcripts and email correspondence.

Information Collected Automatically

When you access jbdt.app, certain technical data is collected automatically by our servers and analytics systems:

• Device and browser data: device type, operating system, browser type and version, screen resolution, and language settings.
• Network data: IP address, approximate geographic location derived from IP, and internet service provider.
• Usage data: pages visited, time spent on each page, game sessions initiated, wagers placed, and navigation paths through the platform.
• Session data: login timestamps, session duration, and logout events.

jbdt processes personal data only for legitimate, specified purposes. The table below outlines the primary purposes for which your data is used and the legal basis that justifies each type of processing.

jbdt does not use automated decision-making that produces legal or similarly significant effects on players without human review. Where automated systems flag an account for review (e.g., fraud detection), a member of the jbdt compliance team will conduct a manual assessment before any consequential action is taken.

Marketing Communications

If you have opted in to receive promotional communications from jbdt — such as bonus offers, tournament announcements, or seasonal promotions tied to events like Eid, Pohela Boishakh, or BPL season — we will send these to your registered email address or phone number. You may withdraw your consent to marketing communications at any time by contacting support at [email protected]. Withdrawal of marketing consent does not affect your ability to use the platform or your right to receive service-related communications.

jbdt does not sell personal data to any third party. However, in order to operate the platform, we share certain categories of data with trusted third-party service providers under strict contractual data protection obligations. All third-party processors are required to handle your data only for the specific purpose for which it was shared and to maintain security standards consistent with those applied by jbdt.

Categories of Third-Party Recipients

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, and Sonali Bank receive financial data necessary to process deposit and withdrawal transactions. These providers operate under their own privacy frameworks and regulatory obligations.
• Identity verification providers: Third-party KYC (Know Your Customer) services that assist in verifying player identity and age as required by our compliance obligations.
• Game providers: Software providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive session-level data required to operate their games within the jbdt platform. These providers do not receive full player profiles.
• Fraud detection and security services: Specialist providers that help identify suspicious behaviour, unusual transaction patterns, and potential account compromise.
• Customer support platforms: Tools used to manage live chat and email support interactions. Support agents have access to account and communication data necessary to resolve queries.

Disclosure to Authorities

jbdt may disclose personal data to law enforcement agencies, regulatory bodies, or other government authorities where required to do so by applicable law, court order, or where we have a good-faith belief that disclosure is necessary to protect the rights, property, or safety of jbdt, its players, or the public. We will notify affected players of such disclosures where we are legally permitted to do so.

jbdt uses cookies and similar tracking technologies to ensure the platform functions correctly, to maintain the security of your session, and to understand how players use the site so that we can improve it. A cookie is a small text file stored on your device when you visit a website. Cookies do not contain executable code and cannot access other files on your device.

Types of Cookies Used

Managing Cookies

You can control cookie behaviour through your browser settings. Most modern browsers allow you to block or delete cookies, or to be notified when a cookie is being set. Please note that disabling essential cookies will prevent the jbdt platform from functioning correctly — you will not be able to log in or maintain an active game session without essential session cookies enabled.

jbdt does not use third-party advertising cookies or cross-site tracking cookies. Analytics cookies used on the platform collect only aggregated, anonymised data and cannot be used to identify you personally.

jbdt retains personal data for as long as is necessary to fulfil the purposes for which it was collected, to comply with legal and regulatory obligations, to resolve disputes, and to enforce our agreements. The following retention principles apply:

• Active account data: Retained for the full duration of the account's active status plus a minimum of five years after account closure, in order to meet financial record-keeping and anti-money-laundering obligations.
• Transaction records: All deposit and withdrawal records, including associated payment method data, are retained for a minimum of seven years from the date of the transaction.
• Identity verification documents: Retained for the duration of the account plus five years post-closure, or longer if required by applicable law.
• Support communications: Chat transcripts and email records are retained for three years from the date of the interaction, or longer if the communication relates to an ongoing dispute or investigation.
• Marketing consent records: Retained for three years from the date consent was granted or withdrawn, whichever is later.
• Anonymised analytics data: May be retained indefinitely, as it cannot be used to identify individual players.

Once a retention period has expired and there is no other legal basis for continued processing, personal data is securely deleted or irreversibly anonymised. Where data cannot be deleted immediately due to backup schedules, it is isolated from active processing until secure deletion can be confirmed.

Players and visitors to jbdt have the following rights with respect to their personal data. To exercise any of these rights, please contact our support team at [email protected] with the subject line "Privacy Request". We will acknowledge your request within three business days and aim to resolve it within 30 calendar days.

• Right of access: You may request a copy of the personal data that jbdt holds about you, along with information about how it is being used.
• Right to rectification: If any of the personal data we hold about you is inaccurate or incomplete, you may request that it be corrected. For account details such as email address or phone number, you may also update these directly through your account settings.
• Right to erasure: You may request that jbdt delete your personal data where it is no longer necessary for the purpose for which it was collected, or where you have withdrawn consent and there is no other legal basis for processing. Please note that erasure requests cannot override legal retention obligations described in the Data Retention section.
• Right to restrict processing: In certain circumstances, you may request that jbdt pause the processing of your personal data — for example, while a rectification request is being verified.
• Right to data portability: You may request that jbdt provide your personal data in a structured, machine-readable format so that you can transfer it to another service provider where technically feasible.
• Right to object: You may object to the processing of your personal data for marketing purposes at any time. You may also object to processing based on legitimate interest, though such objections will be assessed against jbdt's legal obligations.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

jbdt implements a layered approach to data security, combining technical controls, operational procedures, and access management policies to protect personal data against unauthorised access, disclosure, alteration, or destruction.

Technical Controls

• Encryption in transit: All communications between players and jbdt servers are encrypted using TLS 1.2 or higher. Connections over unencrypted HTTP are automatically redirected to HTTPS.
• Encryption at rest: Sensitive personal data fields, including payment method identifiers and identity document references, are encrypted at the database level.
• Password security: Player passwords are hashed using a modern, salted cryptographic algorithm. Plain-text passwords are never stored or transmitted.
• OTP verification: High-risk account actions — including withdrawals, password changes, and contact detail updates — require OTP confirmation to the registered mobile number, preventing unauthorised changes even if a password is compromised.
• Intrusion detection: Network traffic is monitored for anomalous patterns that may indicate attempted intrusion or distributed denial-of-service activity.

Operational Controls

• Access to personal data is restricted to jbdt staff members who have a documented operational need for that access. Role-based access controls are applied and reviewed periodically.
• All staff members with access to personal data are bound by confidentiality obligations.
• Security practices are reviewed regularly and updated in response to emerging threats.

Despite these measures, no method of electronic transmission or storage is completely impenetrable. jbdt cannot guarantee absolute security, but we are committed to responding swiftly to any security incident. In the event of a data breach that is likely to affect your rights, jbdt will notify affected players as promptly as practicable.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way jbdt processes your personal data, please contact the jbdt support team. Privacy-related correspondence is handled with priority and strict confidentiality.

Support email (plain text — not a link): [email protected]
Support availability: 24 hours a day, 7 days a week, in English.
Response target: Privacy requests acknowledged within 3 business days; resolved within 30 calendar days.

When contacting us about a privacy matter, please include your registered mobile number or email address so that we can verify your identity before proceeding. Do not include sensitive documents as email attachments unless specifically requested by our team.

This Privacy Policy was last reviewed and updated on 1 January 2026. jbdt reserves the right to update this policy at any time. Material changes will be communicated to registered players via email or in-platform notification. Continued use of jbdt after the effective date of a revised Privacy Policy constitutes acceptance of the updated terms.