jo999 Privacy Policy

01 Information We Collect

jo999 collects personal data from players in a number of ways throughout the lifecycle of the player relationship. The categories of data we collect, and the primary means by which each category is obtained, are described below.

1.1 Registration Data

When you create a jo999 player account, we collect the personal information you provide during the registration process. This includes your full legal name, date of birth, residential address (including district, division, and postal code within Bangladesh), email address, and mobile phone number. This information is required to establish your account identity and to fulfil our know-your-customer (KYC) obligations.

1.2 Identity Verification Data

In order to verify your identity and age in accordance with our Terms and Conditions, we may request documentary evidence at the time of registration or prior to processing a withdrawal. Documents collected may include a copy of your National Identity Card (NID), passport, birth certificate, or utility bill. These documents are stored securely and used exclusively for verification purposes.

1.3 Financial and Transaction Data

When you make a deposit or request a withdrawal on the jo999 platform, we collect transaction data including the payment method used (such as bKash, Nagad, Rocket, Upay, or bank account details), the transaction amount in Bangladeshi Taka (BDT), transaction timestamps, and unique transaction reference numbers. jo999 does not store full payment card numbers. Card transactions processed via Visa or Mastercard are handled by certified payment processors who operate under their own data security standards.

1.4 Gameplay and Betting Activity Data

jo999 records all gameplay activity on the platform, including game sessions, wager amounts, outcomes, bet history, and any in-game actions. This data is used for account management, dispute resolution, bonus eligibility tracking, and platform integrity monitoring. Gameplay records are retained in accordance with the data retention periods set out in Section 5.

1.5 Technical and Device Data

When you access jo999.vip, our systems automatically collect technical data about your device and connection. This includes your IP address, device type and operating system, browser type and version, screen resolution, referring URL, pages visited on the site, session duration, and click-path data. This information is used primarily for security monitoring, fraud detection, and improving the platform's performance and user experience.

1.6 Communication Data

When you contact the jo999 support team via live chat, email, or WhatsApp, we retain records of that correspondence. Communication records are used to resolve support queries, improve service quality, and as evidence in the event of a dispute. Support interactions are logged and may be reviewed internally as part of quality assurance processes.

02 How We Use Your Data

jo999 processes your personal data only where a valid lawful basis exists. The primary purposes for which your data is used, together with the corresponding legal basis for each, are set out in the table below.

2.1 Marketing Communications

If you have opted in to receive promotional communications from jo999, we may contact you by email or mobile message to inform you of new promotions, bonuses, tournaments, and platform updates. You may opt out of marketing communications at any time by updating your account communication preferences or by emailing [email protected] with an unsubscribe request. Opting out of marketing does not affect your ability to receive transactional or account-related communications that are necessary for the operation of your account.

2.2 Automated Decision-Making

jo999 uses automated systems for fraud detection, bonus eligibility assessment, and responsible gaming monitoring. In some cases, these systems may produce automated decisions that affect your account (for example, temporarily restricting a withdrawal pending fraud review). Where a significant automated decision is made, you have the right to request a manual review by a member of the jo999 compliance team. Contact [email protected] to request a review of any automated decision that has affected your account.

03 Cookies and Tracking Technologies

jo999.vip uses cookies and similar client-side technologies to maintain the functionality and security of the platform. A cookie is a small text file placed on your device by a web server. jo999 uses the following categories of cookies:

3.1 Strictly Necessary Cookies

These cookies are essential for the platform to function correctly. They enable core features such as session management, login state persistence, security token validation, and language preference storage. These cookies cannot be disabled without significantly impairing platform functionality.

3.2 Analytical Cookies

jo999 uses anonymised analytical cookies to understand how players navigate the platform, which pages are most frequently visited, and where users encounter difficulties. Analytical data is aggregated and does not identify individual players. This data informs platform improvements and content decisions.

3.3 Security Cookies

Security cookies are used to detect and prevent fraudulent activity, including bot traffic, multi-account detection, and session hijacking attempts. These cookies are an integral part of our platform integrity infrastructure.

04 Data Sharing and Disclosure

jo999 does not sell, rent, or commercially share your personal data. Data is disclosed to third parties only in the limited circumstances described below, and in every case only to the minimum extent necessary for the specific purpose.

4.1 Payment Processing Partners

To process your deposits and withdrawals, jo999 shares transaction data with payment service providers including bKash, Nagad, Rocket, Upay, and partner banking institutions. These providers receive only the data necessary to complete the transaction. They are bound by their own data protection obligations and are not permitted to use your data for any purpose beyond processing the specific transaction.

4.2 Game Content Providers

Game studios whose titles are available on the jo999 platform (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) may receive anonymised session data for the purpose of game performance monitoring, RNG certification, and fairness auditing. No personally identifiable information is shared with game studios without your knowledge.

4.3 Legal and Regulatory Disclosures

jo999 may disclose personal data to law enforcement agencies, regulatory bodies, or other government authorities where required to do so by applicable law, court order, or official legal process. In such cases, jo999 will disclose only the data specifically requested and will, where legally permissible, notify the affected player of the disclosure.

4.4 Business Transfers

In the event of a merger, acquisition, or sale of all or a substantial portion of jo999's assets, player data may form part of the transferred assets. In such an event, affected players will be notified via email and through a notice on jo999.vip at least 30 days before any data transfer takes effect. The acquiring entity will be required to honour the commitments set out in this Privacy Policy with respect to all transferred player data.

05 Data Retention and Storage

jo999 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following minimum and maximum retention periods:

Upon expiry of the applicable retention period, personal data is securely deleted or permanently anonymised. Anonymised aggregate data (such as platform usage statistics) may be retained indefinitely as it no longer constitutes personal data.

5.1 Data Storage Location

jo999 player data is stored on servers located in secure, access-controlled data centres. All servers used to store personal data of Bangladesh-based players are operated under industry-standard physical and technical security protocols. Data is backed up regularly, and backup copies are protected by the same security standards as primary data stores.

06 Your Data Rights

As a jo999 player, you hold a number of rights in relation to your personal data. These rights may be exercised at any time by submitting a written request to [email protected]. jo999 will respond to all data rights requests within 30 calendar days of receipt. No fee is charged for exercising these rights under normal circumstances.

• Right of Access: You have the right to request a copy of all personal data that jo999 holds about you. We will provide this in a structured, commonly used format within 30 days.
• Right to Rectification: If any of your personal data held by jo999 is inaccurate or incomplete, you have the right to request that it be corrected or updated. You may also update basic account details directly within your account settings.
• Right to Erasure: You may request that jo999 delete your personal data. This right is subject to certain limitations — for example, data that must be retained to comply with legal obligations or that is required for the resolution of an outstanding dispute cannot be deleted on request. Where deletion is not possible for these reasons, jo999 will explain the specific grounds.
• Right to Data Portability: You may request that jo999 provide your personal data in a machine-readable format (such as CSV or JSON) so that it can be transferred to another service provider.
• Right to Restrict Processing: You may request that jo999 restrict the processing of your personal data in certain circumstances, such as while the accuracy of data is being contested.
• Right to Withdraw Consent: Where processing is based on your consent (such as marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.
• Right to Object: You have the right to object to the processing of your personal data where processing is based on legitimate interests. jo999 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.

07 Security Measures

jo999 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, loss, alteration, or disclosure. Our security framework includes the following controls:

7.1 Technical Controls

• 256-bit TLS/SSL encryption on all data in transit between player devices and jo999 servers.
• AES-256 encryption applied to sensitive data fields stored in the platform database, including identity document references and payment method identifiers.
• Multi-factor authentication (MFA) available to all players for account login, strongly recommended and enforced for all withdrawal requests above ৳10,000 BDT.
• Intrusion detection and prevention systems (IDS/IPS) monitoring network traffic for anomalous patterns in real time.
• Web Application Firewall (WAF) protecting the jo999 platform against common web-layer attacks including SQL injection, cross-site scripting (XSS), and request forgery.
• Penetration testing conducted by independent security firms on a periodic basis, with findings actioned within defined remediation timelines.

7.2 Organisational Controls

• Access to personal data is restricted to authorised jo999 personnel on a strict need-to-know basis. Access privileges are reviewed and re-certified regularly.
• All personnel with access to personal data receive mandatory data protection training as part of their onboarding and on an annual basis thereafter.
• jo999 maintains a documented data breach response procedure. In the event of a confirmed data breach affecting player personal data, affected players will be notified without undue delay and no later than 72 hours after jo999 becomes aware of the breach.

7.3 Your Responsibilities

While jo999 takes extensive measures to protect your data, the security of your account is also partly dependent on actions you take. You are responsible for keeping your login credentials confidential, using a strong and unique password for your jo999 account, and logging out of your account when using a shared device. jo999 will never ask you for your password through any communication channel. If you receive any communication claiming to be from jo999 that requests your password, treat it as fraudulent and report it immediately.

08 Policy Updates and Contact

jo999 reserves the right to update or amend this Privacy Policy at any time. Changes may be made in response to new legal requirements, changes in platform functionality, updated data processing practices, or feedback from players. All amendments become effective immediately upon publication at jo999.vip/privacy-policy.

Where a change to this Privacy Policy is material — meaning it affects the way your data is used in a manner that may be unexpected based on previous versions — jo999 will provide notice to registered players via email to the address registered on their account, at least 14 days before the change takes effect. Your continued use of the jo999 platform after that notice period constitutes acceptance of the revised Privacy Policy.

We encourage you to review this page periodically to remain informed about how jo999 handles your personal data. The effective date at the top of this document will be updated whenever the policy is revised.

8.1 Contact the jo999 Privacy Team

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way jo999 processes your personal data, please contact us using the details below. All privacy-related enquiries are handled by the jo999 compliance and data protection team.

• Email: [email protected] (subject line: "Privacy Enquiry")
• Live Chat: Available 24/7 at jo999.vip
• WhatsApp: +880 1700 000 999
• Response Time: Within 24 hours for standard enquiries; within 72 hours for formal data rights requests