jitach Privacy Policy

Information We Collect

When you register, verify, deposit, play, or communicate with jitach, we collect certain categories of personal data. We collect only the information that is necessary for the purposes described in this Privacy Policy. The following table outlines the categories of data collected, the source of that data, and the legal basis for processing it.

jitach does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data, or health information. If you choose to disclose any such information voluntarily during a support interaction (for example, disclosing a health condition relevant to a responsible gaming request), jitach will treat that information with strict confidentiality and will not use it for any purpose other than responding to your specific request.

Minors. jitach operates a strict 18+ policy. We do not knowingly collect or process personal data belonging to individuals under the age of 18. If jitach becomes aware that an Account has been registered by a minor, the Account will be immediately closed, all associated data will be retained only for the minimum period required for legal compliance, and all deposits will be returned to the originating payment method.

How jitach Uses Your Data

jitach processes your personal data only for specific, explicit, and legitimate purposes. We do not use your data in any manner that is incompatible with the purposes for which it was originally collected. The following sets out the primary purposes for which your data is used and the legal basis on which jitach relies for each activity.

• Account creation and management: We use your identity and contact data to create and maintain your jitach Account, verify your eligibility to play, and allow you to log in, manage your profile, set deposit limits, and access your transaction history.
• Processing deposits and withdrawals: Your financial data is used to process Bangladeshi Taka (৳) transactions through bKash, Nagad, Rocket, Upay, and bank transfer channels. Transaction reference data is retained for dispute resolution and KYC compliance purposes.
• Identity and age verification (KYC): jitach is required to verify that all players are aged 18 or above before processing any withdrawal. Your identity documents (NID card, passport) are reviewed and stored for this purpose.
• Fraud prevention and platform security: Technical data including IP addresses, device fingerprints, and session logs are analysed to detect suspicious activity, prevent multi-accounting, identify unauthorised access, and protect the integrity of the jitach platform and all registered players.
• Responsible gaming monitoring: Usage data including wagering history, session frequency, and deposit patterns is monitored to identify players who may be exhibiting signs of problematic gambling behaviour. Where such patterns are detected, jitach may contact the player to offer responsible gaming resources or apply protective measures.
• Customer support: Communications data (support tickets, email correspondence, live chat transcripts) is used to respond to your queries, resolve disputes, and improve the quality of jitach's support service.
• Promotional communications: Where you have opted in to receive marketing communications, jitach will use your contact data and marketing preferences to send you relevant promotions, bonus offers, and updates about new games or cricket/BPL betting markets. You may withdraw this consent at any time.
• Platform analytics and improvement: Aggregated and anonymised usage data is used to understand how players navigate jitach, which games are most popular, and how the platform can be improved. This data is statistical in nature and is not linked back to any individual player.
• Legal obligations: jitach may be required to process and retain certain data to comply with applicable laws including anti-money laundering requirements, fraud reporting obligations, or orders from competent authorities. In such cases, the relevant legal obligation constitutes the lawful basis for processing.

Data Sharing and Third Parties

jitach does not sell, rent, or trade your personal data to any third party for commercial purposes. However, in order to operate the platform and deliver the services you have requested, jitach shares limited, necessary data with the following categories of trusted third-party service providers. All such parties are required by contract to process your data solely for the specified purpose and to maintain appropriate security standards.

If jitach undergoes a business restructuring, merger, or acquisition, your personal data may be transferred to the acquiring or successor entity. In such an event, jitach will notify affected players by email at least 30 days before any such transfer takes effect and will ensure that the new entity is contractually bound to honour the terms of this Privacy Policy with respect to your data.

International transfers. Some of jitach's third-party service providers (particularly game studio providers and IT infrastructure partners) may process data outside Bangladesh. Where such transfers occur, jitach ensures that appropriate contractual safeguards are in place to protect your data to a standard equivalent to that described in this Privacy Policy.

Cookies and Tracking Technologies

jitach uses cookies and similar tracking technologies (including local storage and session tokens) to ensure the platform functions correctly, to remember your preferences, to maintain your logged-in session, and to analyse how players interact with the site. This section explains each category of cookie used by jitach and your options for managing them.

You can manage or delete cookies at any time through your browser settings. Please note that disabling functional or analytical cookies will not affect your ability to place wagers or access your Account, but may reduce the personalisation of your jitach experience. Disabling strictly necessary or security cookies is not supported and may prevent you from logging in or completing transactions.

jitach does not use third-party advertising or retargeting cookies. No data collected through cookies on jitach.net is shared with advertising networks or social media platforms for the purpose of serving targeted advertisements to you on other websites.

Data Retention and Storage

jitach retains your personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable legal obligations. The following retention periods apply to the principal categories of data held by jitach.

• Active Account data (identity, contact, financial, usage data): Retained for the full duration of your Account's active status on jitach, plus a minimum of 5 years following permanent Account closure. This retention period supports KYC compliance, dispute resolution, and anti-money laundering obligations.
• KYC documents (NID card images, passport scans): Retained for a minimum of 5 years from the date of submission. Originals are held in encrypted storage and are not accessible to general support staff without a specific authorised request.
• Transaction records (deposit and withdrawal history in Bangladeshi Taka ৳): Retained for a minimum of 7 years following each transaction date, in line with financial record-keeping best practices and potential audit requirements.
• Communications data (support tickets, chat transcripts): Retained for 2 years from the date of the last communication in a given support thread, after which records are anonymised or deleted.
• Analytical and usage data: Anonymised and aggregated usage statistics are retained indefinitely for platform improvement purposes. Any individually identifiable usage data is deleted or anonymised within 13 months of collection.
• Marketing preference records: Retained for 3 years from the date of the last opt-in or opt-out action, to demonstrate compliance with consent requirements.

When your data reaches the end of its applicable retention period, jitach will securely delete or irreversibly anonymise it. Secure deletion means that the data is overwritten and cannot be recovered or reconstructed. If you request deletion of your data before the end of the retention period, jitach will delete all data that is not subject to a mandatory legal retention obligation and will inform you of any categories of data that must be retained and the reason for retention.

Your Privacy Rights

As a registered player on jitach, you hold the following rights with respect to your personal data. To exercise any of these rights, submit a written request to [email protected] from the email address registered to your Account. jitach will acknowledge receipt within 3 business days and will respond substantively within 30 days of receiving a valid request.

jitach will not charge a fee for any data rights request unless the request is manifestly unfounded or excessive, in which case a reasonable administrative fee may apply. jitach will notify you of any such fee before processing the request. To verify your identity before responding to a data request, jitach may ask you to confirm your registered email address and to answer a security question, or to provide a copy of your registered NID card.

Data Security Measures

jitach takes data security seriously and implements a layered set of technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. The following measures are in place across the jitach platform at all times.

• TLS 1.3 SSL encryption: All data transmitted between your device (mobile or desktop) and jitach.net is encrypted using Transport Layer Security 1.3, the current industry gold standard for in-transit data protection. This applies to login credentials, payment data, and all Account activity.
• AES-256 at-rest encryption: Sensitive data stored on jitach servers — including identity documents, financial records, and KYC data — is encrypted at rest using AES-256 encryption. Encryption keys are managed separately from the data they protect.
• Access controls: Access to personal data within jitach's internal systems is restricted on a strict need-to-know basis. Staff roles are segmented so that, for example, customer support agents can view Account status but cannot access raw KYC document images without specific authorisation.
• Two-factor authentication (2FA): jitach supports two-factor authentication for registered player Accounts. Enabling 2FA adds a second layer of protection — typically an OTP (one-time password) sent to your registered mobile number — before your Account can be accessed from a new device.
• Regular security audits: jitach conducts periodic internal security reviews and engages independent third-party auditors to assess platform security, including penetration testing, vulnerability scanning, and code review of payment and authentication systems.
• Fraud detection systems: Automated real-time monitoring systems analyse login activity, transaction patterns, and wagering behaviour to detect and flag unusual activity. Suspicious sessions are escalated to jitach's security team for manual review.
• Incident response: In the event of a confirmed data breach that poses a risk to your personal data, jitach will notify affected players by email within 72 hours of becoming aware of the breach, describe the nature of the incident, the categories of data affected, and the steps jitach is taking to address it.

While jitach takes every reasonable precaution to secure your data, no online platform can guarantee absolute security against all possible threats. You also play an important role in keeping your Account secure: use a strong, unique password for your jitach Account, do not share your login credentials with anyone, and contact [email protected] immediately if you suspect unauthorised access to your Account.

Updates to This Policy

jitach may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable legal requirements, or improvements to the jitach platform. When material changes are made — for example, a new category of data is collected, or data is shared with a new category of third party — jitach will notify all registered players by email at the address associated with their Account at least 14 days before the change takes effect.

Minor or administrative changes (such as corrections to typographical errors, clarifications that do not alter the substance of any provision, or updates to contact email addresses) may be made without advance notice. The "Last updated" date at the top of this page will always reflect when the most recent change — of any kind — was made.

Your continued use of the jitach platform after the effective date of a revised Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with any changes to this Privacy Policy, you should stop using jitach and submit a written Account closure request to [email protected]. Upon Account closure, your data will be handled in accordance with the retention schedule set out in Section 5.

Contact jitach about this Privacy Policy. If you have any questions, concerns, or complaints about the way jitach processes your personal data, or if you wish to exercise any of the data rights described in Section 6, please contact the jitach Data team in writing at: [email protected]. Please include your registered username, a clear description of your query or request, and — for identity verification — the mobile number associated with your bKash or Nagad payment method on file. jitach's support team operates 24 hours a day, 7 days a week, in the UTC+6 Bangladesh Standard Time zone.