jo999 Privacy Policy

This Privacy Policy ("Policy") describes how jo999 ("jo999", "we", "us", "our") collects, uses, stores, discloses, and protects personal data in connection with the operation of the online betting and casino platform at jo999.io ("Platform"). It applies to all registered players, prospective players, and visitors to the Platform, including those accessing from Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, Cox's Bazar, and all other locations across Bangladesh.

This Policy should be read alongside our Terms and Conditions, which govern the overall contractual relationship between jo999 and its players. Defined terms not otherwise defined in this Policy carry the meanings given to them in the Terms and Conditions.

For the purposes of this Privacy Policy, the data controller responsible for your personal data is jo999, the operator of the Platform at jo999.io. As the data controller, jo999 determines the purposes and means of processing your personal data and is accountable for ensuring that such processing is conducted lawfully, fairly, and transparently.

If you have any questions regarding how jo999 processes your personal data, or if you wish to exercise any of the rights described in Section 11, please contact our Data Protection contact using the details provided in Section 15 of this Policy.

jo999 collects the following categories of personal data from players and Platform visitors:

jo999 does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, or biometric identification data, unless specifically required for identity verification under applicable law.

jo999 collects personal data through the following channels:

• Direct interactions: Data you provide when completing the account registration form, submitting KYC documentation, initiating deposits or withdrawals, contacting our support team, or responding to surveys and promotions.
• Automated technologies: Technical and usage data collected automatically as you navigate the Platform, including through cookies, server logs, and session tracking technologies (see Section 8).
• Third-party payment providers: Transaction confirmation and payment status data received from bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank, Visa, and Mastercard when you initiate payment transactions.
• Identity verification providers: Results of identity and age verification checks conducted by third-party KYC service providers, where applicable.
• Fraud prevention partners: Risk signals and device fingerprint data from third-party fraud prevention tools integrated into the Platform to protect against unauthorised account access and payment fraud.
• Sports and game data providers: Market and odds data from licensed sports data and casino content providers, including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi, used to populate the Platform's betting and gaming interfaces.

jo999 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

1. Contractual necessity: Processing required to perform the contract between jo999 and you (the Terms and Conditions), including account management, payment processing, and bet settlement.
2. Legal obligation: Processing necessary to comply with applicable laws and regulations, including anti-money-laundering (AML) obligations, know-your-customer (KYC) requirements, and financial record-keeping obligations.
3. Legitimate interests: Processing carried out in pursuit of jo999's legitimate business interests where those interests are not overridden by your rights and interests. This includes fraud prevention, platform security, service improvement, and responsible gaming monitoring.
4. Consent: Processing based on your freely given, specific, informed, and unambiguous consent. This applies primarily to marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

jo999 uses the personal data it collects for the following purposes:

• Account management: To create, maintain, and administer your jo999 account, including processing registration, verifying identity, and managing jo999 Login credentials.
• Payment processing: To execute deposit and withdrawal transactions via bKash, Nagad, Rocket, Upay, and other supported payment channels in Bangladeshi Taka (৳).
• Regulatory compliance: To fulfil our AML, KYC, and age verification obligations, including screening against sanctions and watchlists where required.
• Fraud and security: To detect, investigate, and prevent fraudulent activity, multi-accounting, bonus abuse, unauthorised access, and other security threats to the Platform and its players.
• Responsible gaming: To monitor for signs of problem gambling behaviour and to administer responsible gaming tools including deposit limits, session timers, and self-exclusion requests as described in our Responsible Gaming Policy.
• Customer support: To respond to enquiries, resolve disputes, and process complaints submitted via live chat, email, or other support channels.
• Personalisation: To tailor the Platform experience to your preferences, including game recommendations, personalised odds highlights, and relevant promotional offers related to cricket (BPL, IPL, T20), slots, and casino events.
• Marketing communications: To send promotional emails, SMS alerts, and push notifications about jo999 offers, seasonal promotions (including Eid cashback, Victory Day free bets, and Pohela Boishakh special events), and platform updates — where you have provided consent to receive such communications.
• Analytics and improvement: To analyse aggregate usage patterns and performance metrics to improve Platform functionality, game selection, and user experience.

jo999 does not sell, rent, or trade your personal data to third-party advertisers or data brokers. Your data may be shared with the following categories of third parties only where necessary and on a strictly need-to-know basis:

• Payment service providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank, Visa, and Mastercard — to process deposit and withdrawal transactions.
• Identity verification providers: Third-party KYC and age verification services used to confirm the identity and eligibility of players.
• Fraud prevention providers: Security and anti-fraud technology partners who assist in detecting and preventing account compromise, payment fraud, and platform abuse.
• Game content providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other licensed game studios — to facilitate game session management and resolve game-related disputes. These providers receive only the minimum technical data necessary for session delivery.
• IT and infrastructure providers: Cloud hosting, database management, and content delivery network (CDN) providers who process data on jo999's behalf under strict data processing agreements.
• Legal and regulatory authorities: Law enforcement agencies, financial intelligence units, or regulatory bodies where jo999 is legally required to disclose data, for example in connection with AML investigations or court orders.
• Professional advisors: Legal counsel, auditors, and compliance consultants under binding confidentiality obligations.

Where jo999 shares data with third-party processors, it does so under contractual terms that require those processors to handle your data securely, use it only for the specified purpose, and not disclose it to unauthorised parties.

jo999 uses cookies and similar tracking technologies to operate and improve the Platform. A cookie is a small text file placed on your device when you visit a website. The following categories of cookies are used on jo999.io:

• Strictly necessary cookies: Essential for the Platform to function. These include session authentication cookies that maintain your jo999 Login state and security tokens that protect against cross-site request forgery (CSRF). These cannot be disabled without breaking core Platform functionality.
• Performance cookies: Collect anonymised data about how players interact with the Platform — which pages are visited most frequently, how long sessions last, and where errors occur. This data is used exclusively for Platform improvement.
• Functional cookies: Remember your preferences such as language settings, display options, and responsible gaming tool configurations so you do not need to re-enter them on every visit.
• Analytics cookies: Used by our internal analytics tools to generate aggregate usage reports. These cookies do not identify you personally.

jo999 does not currently deploy third-party advertising or retargeting cookies. If this changes in the future, this Policy will be updated accordingly and players will be notified in advance.

jo999 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that ensures it can no longer be linked to an identifiable individual.

jo999 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, loss, destruction, alteration, or disclosure. These measures include:

• Transport-layer encryption: All data transmitted between your device and jo999.io is encrypted using TLS 1.2 or higher (SSL encryption). The Platform enforces HTTPS at all times.
• Data encryption at rest: Sensitive data fields including passwords (hashed using bcrypt), financial account numbers (tokenised), and KYC document content are encrypted at rest using AES-256 encryption.
• Access controls: Access to personal data within jo999's internal systems is granted on a strict need-to-know basis and is controlled via role-based access management. All internal access is logged and subject to periodic review.
• Two-factor authentication: jo999 supports two-factor authentication (2FA) for player accounts to reduce the risk of unauthorised account access. Players are strongly encouraged to enable 2FA via their account settings.
• Security monitoring: jo999 operates continuous security monitoring across its infrastructure, including intrusion detection systems, automated anomaly alerts, and regular third-party penetration testing.
• Staff training: All jo999 personnel with access to personal data receive regular training on data protection obligations and security best practices.

Despite these measures, no online platform can guarantee absolute security. In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, jo999 will notify affected players without undue delay and will take all reasonable steps to mitigate the impact of the breach.

You can strengthen the security of your own account by using a strong, unique password, enabling 2FA, and never sharing your jo999 Login credentials with any third party.

As a data subject, you hold the following rights in relation to your personal data held by jo999. Requests to exercise these rights should be submitted in writing to our Data Protection contact (see Section 15). jo999 will respond to all valid requests within thirty (30) calendar days of receipt.

• Right of access: You have the right to request a copy of all personal data that jo999 holds about you, together with information about how that data is used and with whom it is shared.
• Right to rectification: You have the right to request correction of any inaccurate or incomplete personal data held about you. Minor details such as your contact number or address may be updated directly via your account settings panel.
• Right to erasure ("right to be forgotten"): You have the right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (and no other legal basis applies), or where the data has been unlawfully processed. This right is subject to overriding legal retention obligations — for example, jo999 is required to retain AML and KYC records for a minimum period regardless of erasure requests.
• Right to restriction of processing: You have the right to request that jo999 restrict its processing of your data in certain circumstances, such as while the accuracy of data is contested or while an objection to processing is under consideration.
• Right to data portability: You have the right to receive a copy of personal data you have provided to jo999 in a structured, commonly used, machine-readable format, and to transmit that data to another data controller where technically feasible.
• Right to object: You have the right to object at any time to processing of your personal data that is based on jo999's legitimate interests, including profiling. You also have an absolute right to object to processing for direct marketing purposes at any time.
• Rights related to automated decision-making: You have the right not to be subject to a decision based solely on automated processing that produces a significant legal or similarly significant effect on you, and to request human review of such decisions.

The jo999 Platform is strictly intended for adults aged 21 years and above. jo999 does not knowingly collect personal data from individuals under the age of 21. If you believe that a minor has registered an account or provided personal data to jo999, please contact our support team immediately so that we can investigate and take appropriate action, including account closure and data deletion.

jo999 employs age verification procedures at the point of registration and at withdrawal to prevent underage access. Account holders are responsible for ensuring that minors do not gain access to their jo999 account credentials or active sessions on shared devices.

The jo999 Platform may contain references to third-party services, payment providers, and game studios. jo999 does not operate or control any third-party websites or services and is not responsible for the privacy practices, cookie policies, or data handling of any third party. This Privacy Policy applies solely to data collected and processed by jo999 in connection with the operation of jo999.io.

If you access any third-party service (for example, by initiating a bKash mobile payment through the bKash interface), your interaction with that service is governed by that service's own privacy policy and terms of use, which we encourage you to review independently.

jo999 reserves the right to update or revise this Privacy Policy at any time. Changes may be made in response to evolving legal requirements, regulatory guidance, changes in our data processing practices, or new Platform features. All amendments will be reflected in the updated "Last Updated" date at the top of this document.

For material changes — those that significantly affect how your personal data is processed or your rights as a data subject — jo999 will provide advance notice by displaying a prominent notice on the Platform and/or sending a notification to your registered email address. Advance notice will be provided at least fourteen (14) days before material changes take effect, giving you an opportunity to review the updated Policy and, if you do not agree, to close your account before the changes apply.

Your continued use of the Platform after the effective date of any amendment constitutes your acknowledgement of the revised Policy. jo999 recommends that you revisit this page periodically to stay informed of how your data is being handled.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data that jo999 holds about you, please contact our Data Protection team using the details below. All correspondence should be in English. Our team is available to assist players across Bangladesh seven days a week.

• General Support (Live Chat): Available within the Platform following jo999 Login. Median response time under five minutes.
• Privacy and Data Rights Enquiries: [email protected] — plain text only, not a clickable link.
• General Support Email: [email protected] — plain text only, not a clickable link.
• Response Time: Data rights requests are acknowledged within 48 hours and resolved within 30 calendar days. General privacy queries are typically answered within 24 hours.

jo999 takes all privacy concerns seriously. If you are not satisfied with the resolution of your enquiry, you may escalate your complaint to our senior compliance team by clearly marking your correspondence "Formal Privacy Complaint". A substantive written response will be provided within ten (10) business days of receipt.