JitoWin Privacy Policy

1 Introduction

This Privacy Policy describes how JitoWin ("we", "us", "our") collects, uses, stores, and protects the personal data of users ("you", "your") who access or use the JitoWin platform at jitowin.app. JitoWin is an online gaming platform serving players in Bangladesh, and this policy is written with that audience in mind.

By registering an account on JitoWin, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described here. This policy forms part of the overall agreement between you and JitoWin, alongside the Terms and Conditions and the Responsible Gaming Policy.

JitoWin takes privacy seriously. We do not treat data collection as a revenue stream. Every piece of data we collect has a specific, justified purpose — and we are transparent about what those purposes are. If you have questions about anything in this policy, contact us at [email protected] before registering.

2 Data We Collect

JitoWin collects personal data in two broad categories: data you provide directly, and data collected automatically when you use the platform. The table below summarises the main types of data we collect and why.

3 How We Collect Your Data

JitoWin collects personal data through the following channels:

• Direct input: Data you enter during registration, account verification, deposit or withdrawal requests, and support interactions.
• Automated collection: Technical and usage data collected automatically when you access the platform, via cookies, server logs, and analytics tools.
• Payment providers: Transaction confirmation data received from bKash, Nagad, and Rocket when you make a deposit or withdrawal.
• Identity verification services: Data returned by third-party KYC providers when we verify your identity documents.
• Fraud prevention systems: Risk signals and device fingerprint data from security tools used to protect the platform.

JitoWin does not purchase personal data from data brokers or any other third-party data sources. All data we hold about you originates from your direct interactions with the platform or from service providers acting on our behalf.

4 How We Use Your Data

Every use of your personal data by JitoWin is tied to a specific, legitimate purpose. We do not use your data for purposes beyond those listed below without first obtaining your consent:

• To create and manage your JitoWin account and verify your identity.
• To process deposits, withdrawals, and bonus transactions accurately and securely.
• To detect and prevent fraud, money laundering, and other prohibited activities.
• To comply with legal and regulatory obligations applicable to online gaming platforms.
• To provide customer support and resolve disputes or complaints.
• To monitor gameplay for responsible gaming purposes and apply limits where requested.
• To send transactional communications — deposit confirmations, withdrawal updates, security alerts.
• To send marketing communications, only where you have explicitly opted in.
• To analyse platform usage and improve the JitoWin experience for all players.
• To enforce the Terms and Conditions and other platform policies.

5 Who We Share Your Data With

JitoWin shares personal data only with parties that have a legitimate need to access it in order to provide services to you or to JitoWin. We do not share data for commercial gain. The categories of recipients are:

• Payment processors: bKash, Nagad, and Rocket receive the minimum data necessary to process your transactions.
• Identity verification providers: Third-party KYC services receive your identity documents to verify your account.
• Fraud prevention services: Security tools receive technical data to identify and block fraudulent activity.
• Game providers: Your player ID and session data are shared with game providers to deliver the games you play. Game providers do not receive your financial or identity data.
• Legal and regulatory authorities: JitoWin will disclose personal data to law enforcement or regulatory bodies where required by law or court order.
• Professional advisers: Lawyers, auditors, and insurers may access data where necessary for their professional services to JitoWin.

All third parties with whom JitoWin shares data are contractually required to handle that data securely and to use it only for the specific purpose for which it was shared. JitoWin does not permit third parties to use your data for their own marketing purposes.

6 Cookies

JitoWin uses cookies and similar tracking technologies to operate the platform, remember your preferences, and analyse usage patterns. Cookies are small text files stored on your device when you visit the platform.

• Essential cookies: Required for the platform to function. These include session cookies that keep you logged in and security cookies that protect against cross-site request forgery. These cannot be disabled.
• Functional cookies: Remember your preferences such as language settings and display options. These improve your experience but are not strictly necessary.
• Analytics cookies: Collect anonymised data about how players use the platform — which pages are visited most, where users drop off, and how long sessions last. This data helps JitoWin improve the platform.
• Security cookies: Used by fraud detection systems to identify unusual patterns of behaviour that may indicate account compromise or fraudulent activity.

You can manage cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from using JitoWin, but some features may not work as intended. JitoWin does not use third-party advertising cookies or tracking pixels for ad targeting.

7 Data Retention

JitoWin retains personal data for as long as your account is active and for a defined period after account closure, as required by applicable law and our internal compliance obligations. The general retention periods are:

• Account and identity data: Retained for the duration of your account and for five years after account closure, in line with standard anti-money laundering record-keeping requirements.
• Transaction records: Retained for five years from the date of each transaction.
• Support communications: Retained for two years from the date of the interaction.
• Technical and usage data: Retained for up to 12 months in identifiable form, after which it is anonymised or deleted.
• Marketing preferences: Retained until you withdraw consent or close your account.

When data reaches the end of its retention period, it is securely deleted or irreversibly anonymised. JitoWin does not retain data indefinitely. If you close your account and request deletion of your data, JitoWin will delete all data that is not subject to a legal retention obligation within 30 days of the request.

8 Security

JitoWin implements a range of technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, or alteration. These measures include:

• TLS encryption for all data in transit between your device and JitoWin's servers.
• Encryption at rest for sensitive data including identity documents and financial records.
• Access controls that restrict employee access to personal data on a need-to-know basis.
• Regular security audits and penetration testing of the platform infrastructure.
• Two-factor authentication options for player accounts.
• Automated fraud detection systems that monitor for unusual account activity in real time.
• Incident response procedures that ensure prompt action in the event of a data breach.

In the event of a data breach that is likely to result in a risk to your rights and freedoms, JitoWin will notify affected users without undue delay and will take immediate steps to contain and remediate the breach.

9 Your Rights

As a JitoWin user, you have the following rights in relation to your personal data. To exercise any of these rights, contact support at [email protected] with your account details and a description of your request.

JitoWin will respond to all data rights requests within 30 days. In complex cases, this may be extended by a further 60 days, in which case you will be notified of the extension and the reason for it.

10 Minors

JitoWin does not knowingly collect personal data from individuals under the age of 18. The platform is strictly for adults. Age verification is conducted during the registration process and may be repeated at any time during your use of the platform.

If JitoWin discovers that personal data has been collected from a minor, that data will be deleted immediately, the account will be closed, and any deposits will be returned to the original payment method after verification. If you believe a minor has registered on JitoWin, please contact support at [email protected] immediately.

11 Changes to This Policy

JitoWin may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or platform features. When changes are made, the updated policy will be published on this page with a revised "Last Updated" date.

For material changes that significantly affect how your data is used, JitoWin will notify registered users via email or an in-platform notification before the changes take effect. Continued use of the platform after the effective date of any change constitutes your acceptance of the updated policy.

We recommend reviewing this Privacy Policy periodically to stay informed about how JitoWin protects your data. The current version is always available at jitowin.app/privacy-policy.

12 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way JitoWin handles your personal data, please get in touch. The support team is available 24/7 and will respond to privacy-related queries promptly.

• Email: [email protected]
• Live Chat: Available within the JitoWin platform after login
• For data rights requests, include your registered email address and a clear description of your request

JitoWin takes every privacy concern seriously. If you are not satisfied with the response you receive, you have the right to escalate your complaint to the relevant data protection authority in your jurisdiction.