Privacy Policy — How jlibdt Handles Your Data

Data We Collect

jlibdt collects personal data only to the extent necessary to operate a licensed online gaming and sports betting platform, fulfil our regulatory obligations, and deliver a secure and personalised experience to players across Bangladesh. We collect information in the following categories:

1.1 Registration and Identity Data

When you create a jlibdt account, we collect the information you provide directly, including:

• Full legal name (as it appears on your government-issued ID)
• Date of birth (to verify the 18+ age requirement)
• Residential address (district, city — e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi)
• Email address and mobile phone number
• Username and (hashed, never stored in plain text) password

1.2 Identity Verification (KYC) Documents

As part of our mandatory Know Your Customer process, you will be required to submit scanned or photographed copies of one or more of the following documents before your first withdrawal is approved:

• Bangladesh National Identity Card (NID)
• Valid passport (biographical data page)
• Birth registration certificate (for age verification, where NID is not yet issued)
• Proof of address (utility bill, bank statement, or government letter dated within 90 days)

KYC documents are stored in an isolated, access-controlled vault separate from your main account record. Access is restricted to authorised compliance personnel only.

1.3 Financial and Transaction Data

We collect data relating to every financial transaction on your account, including:

• Deposit amounts, timestamps, and the payment method used (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank)
• Withdrawal requests, amounts, destination payment account identifiers (masked), and processing status
• Betting history: wager amounts, game or market selected, outcome, and settlement amount
• Bonus credit issued, wagering progress, and bonus expiry events

We do not store full payment account credentials (e.g., full bKash wallet PIN or bank card numbers). Only masked identifiers and transaction reference numbers are retained.

1.4 Technical and Device Data

When you access jlibdt through a web browser or mobile device, we automatically collect certain technical data, including:

• IP address and approximate geolocation (country and city level)
• Device type, operating system, and browser version
• Session start and end timestamps, pages visited, and features accessed
• Referring URL (the page you navigated from, if applicable)

How We Use Your Data

jlibdt uses the personal data we collect for specific, lawful purposes. We do not use your data for any purpose beyond what is listed below without first obtaining your explicit consent or as otherwise required by applicable law.

Where we rely on your consent as the legal basis for processing (for example, sending you promotional emails or SMS notifications about new games and offers), you may withdraw that consent at any time by updating your communication preferences in your account settings or by contacting our support team at [email protected]. Withdrawal of consent does not affect the lawfulness of any processing carried out before the withdrawal.

Data Sharing and Third Parties

jlibdt does not sell, rent, or trade your personal data to any third party for commercial or marketing purposes. We share your data only in the limited circumstances described below, and only to the extent strictly necessary for the stated purpose.

3.1 Licensed Service Providers

We engage carefully vetted third-party service providers who process data on our behalf under binding data processing agreements. These providers are permitted to use your data only as instructed by jlibdt and for no other purpose. Categories of service providers include:

• Payment processors: bKash, Nagad, Rocket, Upay, and banking partners — to execute deposit and withdrawal transactions. These providers receive only the transaction data required to process the payment.
• KYC and identity verification vendors: Third-party identity verification services that assist with document authentication and watchlist screening. Your submitted documents are shared with these vendors under strict confidentiality obligations.
• Game content providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other licensed studios. These providers may receive anonymised session tokens to deliver games but do not receive your full identity or financial data.
• Cloud infrastructure and hosting providers: Server infrastructure partners who provide the technical environment on which jlibdt operates. Data is encrypted at rest on all infrastructure systems.
• Analytics platforms: Anonymised, aggregated usage data may be processed by analytics tools to help us understand platform performance. No personally identifiable information is shared with analytics providers.

3.2 Regulatory and Law Enforcement Disclosure

jlibdt may be required to disclose your personal data to regulatory authorities, financial intelligence units, or law enforcement agencies where such disclosure is required or permitted by applicable law. We will only make such disclosures to the extent legally compelled and will not notify third parties of the existence of an investigation where we are legally prohibited from doing so.

3.3 Business Transfers

In the event that jlibdt undergoes a merger, acquisition, restructuring, or sale of all or substantially all of its assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified via the email address registered to your account prior to any such transfer taking effect, and the acquiring entity will be required to honour the commitments made in this Privacy Policy.

Cookies and Tracking Technologies

jlibdt uses cookies and similar lightweight tracking technologies to ensure the platform functions correctly, to remember your preferences, and to gather anonymised usage statistics that help us improve the service. We do not use advertising cookies or permit third-party advertising networks to place tracking technologies on our platform.

4.1 Cookie Categories We Use

4.2 Managing Your Cookie Preferences

You can control and delete cookies through your web browser settings. Most modern browsers allow you to block all cookies, accept only first-party cookies, or delete stored cookies at any time. Please note that disabling strictly necessary cookies will prevent you from logging in to your jlibdt account and using core platform features.

On mobile devices, cookie-equivalent storage (such as local storage and session storage) may be used in place of traditional cookies for the same functional purposes listed in the table above. The same categorisation and user-control principles apply.

Data Retention and Storage

jlibdt retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable regulatory and legal obligations. The following retention periods apply:

Once the applicable retention period expires, personal data is securely deleted or irreversibly anonymised using industry-standard data destruction procedures. Anonymised, aggregated data (from which no individual can be identified) may be retained indefinitely for statistical and business planning purposes.

All data is stored on encrypted servers. Access to production databases is restricted to authorised personnel using multi-factor authentication and role-based access controls. Regular security audits are conducted to verify that access controls remain appropriate and effective.

Your Privacy Rights

As a jlibdt player, you hold the following rights with respect to your personal data. These rights are exercisable by submitting a written request to [email protected]. We will respond to all valid requests within 30 calendar days. In complex cases, this period may be extended by a further 30 days, in which case we will notify you of the extension and the reason for it.

• Right of access. You have the right to request confirmation of whether jlibdt processes personal data about you, and if so, to receive a copy of that data along with information about how and why it is processed.
• Right to rectification. If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or completed without undue delay.
• Right to erasure. You may request that we delete your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where the data has been processed unlawfully. This right is subject to overriding regulatory retention obligations — for example, AML regulations require us to retain certain records for a minimum of five years regardless of your request.
• Right to restrict processing. In certain circumstances (for example, where you have contested the accuracy of the data), you may request that we restrict processing of your data while the matter is under review.
• Right to data portability. Where we process your data on the basis of your consent or to perform a contract with you, and where that processing is carried out by automated means, you have the right to receive your data in a structured, commonly used, machine-readable format.
• Right to withdraw consent. Where processing is based on your consent (such as marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that occurred before withdrawal.
• Right to object to marketing. You may opt out of receiving promotional emails and SMS messages from jlibdt at any time by updating your notification preferences in your account settings or by contacting support at [email protected].

Data Security Measures

jlibdt applies a layered, defence-in-depth approach to data security. Our security programme covers technical controls, organisational procedures, and ongoing monitoring to protect your personal data against unauthorised access, disclosure, alteration, and destruction.

7.1 Technical Controls

• Transport encryption: All data transmitted between your browser or app and jlibdt servers is protected by TLS 1.3, the current industry standard for secure web communications. Any connection attempt using an older, less secure protocol is rejected.
• Storage encryption: All personal data stored on jlibdt servers — including account records, KYC documents, and transaction histories — is encrypted at rest using AES-256.
• Password security: Passwords are never stored in plain text. We use a modern one-way cryptographic hashing algorithm with per-account salting. Even jlibdt personnel cannot retrieve your original password.
• Two-factor authentication: SMS-based 2FA is available for all player accounts and is strongly recommended. Staff accounts with access to production systems are required to use 2FA without exception.
• Intrusion detection: Automated systems monitor platform traffic around the clock for anomalous patterns indicative of account takeover attempts, credential stuffing, or brute-force attacks. Suspicious activity triggers automatic rate-limiting and alerts to the security team.

7.2 Organisational Controls

• Access to personal data is granted on a strict need-to-know basis. Staff members can only access the data categories required for their specific role.
• All staff with access to personal data undergo background checks and regular data protection training as a condition of employment.
• Third-party service providers are contractually bound by data processing agreements that mandate equivalent security standards and restrict sub-processing without jlibdt's written consent.
• A formal data breach response procedure is in place. In the event of a confirmed breach affecting your personal data, we will notify you and the relevant regulatory authority within the timeframe required by applicable law.

Despite these measures, no security system is entirely impenetrable. jlibdt cannot guarantee absolute security of your data in transit over the public internet. You are encouraged to use a strong, unique password for your jlibdt account and to enable two-factor authentication for maximum protection.

Changes to This Policy

jlibdt reviews this Privacy Policy at least annually and whenever there is a material change to the way we collect, use, or store personal data. Where changes are significant, we will notify registered players by email to the address associated with their account at least 14 days before the new policy takes effect. The updated "Last updated" date at the top of this document will always reflect the date of the most recent revision.

For minor, non-material changes — such as clarifications of existing practices, typographical corrections, or updates to contact information — we may update the policy without individual notification, relying on the posted "Last updated" date as sufficient notice. We encourage you to review this page periodically to stay informed of how jlibdt protects your privacy.

Your continued use of the jlibdt platform after a revised Privacy Policy takes effect constitutes your acceptance of the updated policy. If you do not agree with the changes, you should stop using the platform and contact [email protected] to request account closure prior to the effective date of the new policy.

Questions, concerns, or requests relating to this Privacy Policy or jlibdt's data handling practices should be directed to our support team at [email protected]. We are committed to resolving all privacy-related inquiries promptly and transparently.