jeeway Privacy Policy — How We Collect, Use, and Protect Your Personal Data

When you register for and use a jeeway account, we collect several categories of personal information. This section describes what we collect, how it is gathered, and why each category is necessary for the platform to function correctly and compliantly.

1.1 Information You Provide Directly

When you create an account, make a deposit, contact support, or interact with any jeeway form or feature, you may provide us with the following information:

1.2 Information Collected Automatically

When you access jeeway through a web browser or mobile device, our servers and analytics systems automatically collect certain technical information. This data is not linked to your personal identity in isolation, but may be combined with account data for fraud detection and platform optimisation purposes:

• Device & Browser Data: Device type (mobile, tablet, desktop), operating system version, browser type and version, screen resolution, and language settings.
• Network & Connection Data: IP address, approximate geolocation derived from IP (country and city level — not precise GPS), internet service provider (ISP), and connection type.
• Usage & Behavioural Data: Pages visited on jeeway, time spent on each page, games played, bets placed (amounts, markets, outcomes), session start and end times, clicks, scroll depth, and navigation paths through the platform.
• Cookie & Tracking Data: Identifiers stored in cookies and similar technologies placed on your device. See Section 4 for a full explanation of our cookie practices.

1.3 Information from Third Parties

In limited circumstances, jeeway may receive information about you from trusted third-party sources, including:

• Payment processors (bKash, Nagad, Rocket, Upay, and banking partners) who confirm the status and ownership of a payment method during transaction verification.
• Identity verification service providers who assist in authenticating the NID or other documents you submit during KYC review.
• Fraud prevention databases that flag suspicious patterns associated with a device or IP address, enabling us to protect all players on the platform.

jeeway does not purchase personal data lists or obtain data from social media platforms without your explicit authorisation.

jeeway uses the personal information we collect for clearly defined purposes, each of which is necessary either to fulfil our contract with you, to comply with applicable legal obligations, or to pursue a legitimate operational interest. We do not use your data for purposes incompatible with those disclosed in this policy.

Account Operation and Service Delivery

The primary use of your personal data is to create and maintain your jeeway account, process your deposits and withdrawals in Bangladeshi Taka (৳), deliver access to sports betting markets including BPL and IPL cricket, live casino tables, slot games, virtual sports, and other platform features, and to provide customer support when you need assistance. Without this data processing, we cannot provide the service at all.

Identity Verification and Fraud Prevention

We use your identity and financial data to verify that you are who you claim to be, that you meet the 18+ age requirement, and that payment methods belong to you. This processing protects both you and the platform from fraud, account takeover, and financial crime. jeeway's anti-money-laundering (AML) obligations require us to retain and review transaction records and to report suspicious activity to relevant authorities where required by applicable law.

Responsible Gaming Monitoring

Behavioural data — including session frequency, deposit patterns, and wagering volumes — is analysed internally to identify players who may be exhibiting signs of problem gambling. This processing is undertaken in the interest of player welfare and supports the responsible gaming tools described in jeeway's Responsible Gaming Policy, available at jeeway.net/responsible-gaming.

Communications and Marketing

With your consent, jeeway may send you promotional communications about bonuses, new games, cricket betting opportunities, seasonal promotions aligned with events like Eid or Pohela Boishakh, and other offers that may be of interest to you as a Bangladesh-based player. You may withdraw your marketing consent at any time by contacting support or adjusting your account notification preferences. Withdrawal of marketing consent does not affect our ability to send you transactional or service-related messages (such as deposit confirmations, withdrawal status updates, or security alerts).

Platform Improvement and Analytics

Aggregated and anonymised usage data helps jeeway understand how players navigate the platform, which features are most valued, and where the user experience can be improved. This analysis does not involve identifying you as an individual and is used solely to make jeeway a better product for all players.

jeeway does not sell your personal data to any third party. We share your information only in the limited circumstances described below, and only to the minimum extent necessary for the stated purpose.

Service Providers and Technology Partners

To operate the jeeway platform, we engage trusted third-party service providers who process data on our behalf under strict contractual obligations. These include:

• Payment Processors: bKash, Nagad, Rocket, Upay, Visa, Mastercard, and our Bangladeshi banking partners (BRAC Bank, City Bank, Dutch-Bangla Bank, and others) receive the minimum financial data necessary to execute your deposit or withdrawal transaction.
• Game Providers: Software studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive session-level data (game round results, bet amounts, player ID) to power the games you play and to enable their RNG audit and certification processes. They do not receive your full identity information.
• KYC and Identity Verification Providers: When you submit identity documents for verification, our third-party KYC service processes document images and cross-references them against public identity databases. These providers are contractually prohibited from retaining your data beyond the verification process.
• Cloud Infrastructure and Security Providers: jeeway uses reputable cloud infrastructure services for hosting, content delivery, and security monitoring (including DDoS protection and web application firewall services). These providers operate on a data-processing basis only and do not independently access or use your data.

Legal and Regulatory Disclosures

jeeway may disclose your personal information to law enforcement agencies, courts, or regulatory bodies if required to do so by applicable law, a valid court order, or a lawful request from a government authority. In all cases, jeeway will share only the specific data requested and will endeavour to notify you of any such disclosure where legally permitted to do so.

Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of jeeway's business, your personal data may be transferred to the acquiring entity as part of that transaction. In such circumstances, jeeway will provide notice of the transfer and ensure that the receiving entity is bound by privacy obligations no less protective than those set out in this policy.

jeeway uses cookies and similar tracking technologies to keep you logged in between sessions, remember your preferences, measure platform performance, and detect suspicious activity. A cookie is a small text file placed on your device by the jeeway website. It does not give us access to your device or any files stored on it beyond the cookie's own contents.

Types of Cookies We Use

You may manage cookie preferences through your browser settings. Most modern browsers allow you to block or delete cookies, restrict cookies to specific sites, or receive a notification before a cookie is placed. Note that disabling strictly necessary cookies will prevent you from logging in or using core platform features. Instructions for managing cookies in popular browsers are available through the browser provider's help documentation.

jeeway does not currently use third-party advertising cookies or retargeting pixels. We do not share behavioural data with advertising networks for the purpose of serving targeted advertisements on other websites.

jeeway takes data security seriously and has implemented a layered approach to protecting your personal information both in transit and at rest. The following measures represent our standard security posture, which is reviewed and updated on a regular basis to address emerging threats.

• Transport Layer Security (TLS): All communications between your browser or app and the jeeway platform are encrypted using TLS 1.2 or higher. The padlock icon in your browser's address bar confirms that your connection is encrypted.
• Encryption at Rest: Sensitive fields in our database — including identity document data, financial details, and authentication credentials — are encrypted using AES-256 encryption. Passwords are hashed using a one-way cryptographic function and are never stored in plaintext.
• Access Controls: Access to production systems containing personal data is restricted to a small number of authorised personnel. Access is granted on a role-based, least-privilege basis and is logged for audit purposes. All internal access to sensitive data triggers an automated alert.
• Penetration Testing: jeeway's platform undergoes regular security assessments to identify and remediate vulnerabilities before they can be exploited. Critical findings are addressed on a priority basis.
• Incident Response: jeeway maintains a documented incident response plan. In the event of a data breach that poses a risk to your rights and freedoms, we will notify affected players and relevant authorities within a reasonable timeframe consistent with applicable legal requirements.

Despite these measures, no online platform can guarantee absolute security against all possible threats. You also have a role to play in keeping your account secure — use a strong unique password, never share your credentials, and contact us immediately at [email protected] if you suspect your account has been compromised.

As a jeeway player, you hold a number of rights with respect to the personal data we hold about you. jeeway is committed to honouring these rights promptly and transparently. To exercise any of the rights listed below, contact us at [email protected] with the subject line "Data Rights Request" and include your registered mobile number or username so we can locate your account record.

jeeway retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or for as long as required by applicable legal, regulatory, or contractual obligations. The following retention periods apply as standard across data categories held by jeeway:

• Active Account Data: Retained for the full duration of your account's active status, plus a minimum of five years following account closure. This period accommodates AML record-keeping requirements and potential dispute resolution needs.
• Transaction Records: Deposit, withdrawal, and wagering transaction records are retained for a minimum of seven years from the date of the transaction, consistent with financial record-keeping standards applicable in Bangladesh.
• KYC and Identity Documents: Copies of identity documents submitted for verification are retained for five years following account closure, or longer if required by a specific regulatory obligation or ongoing investigation.
• Support Communications: Live chat transcripts and email correspondence are retained for three years from the date of the interaction. After this period, transcripts are anonymised and retained only in aggregated form for quality assurance analysis.
• Marketing Consent Records: Records of your marketing consent (or withdrawal of consent) are retained for five years from the relevant consent event, to demonstrate compliance with communications regulations.
• Technical Logs (IP, Device, Session): Server access logs and session event logs are retained for 12 months, after which they are aggregated and anonymised. Raw log data is not retained beyond this period unless required in connection with an active security investigation or legal proceeding.

At the end of any applicable retention period, personal data is securely deleted or permanently anonymised so that it can no longer be associated with any individual. jeeway does not retain personal data "just in case" — deletion schedules are implemented systematically as part of our data governance processes.

jeeway reserves the right to update this Privacy Policy at any time to reflect changes in platform features, applicable law, or industry best practices. When we make a material change to this policy — meaning a change that substantively affects how we collect, use, or share your personal data — we will notify you via a prominent notice on the jeeway platform and, where appropriate, by direct communication to your registered mobile number or email address.

The effective date at the top of this page will be updated whenever a new version is published. We encourage you to review this Privacy Policy periodically. Your continued use of the jeeway platform following the publication of a revised policy constitutes your acceptance of the revised terms.

If you have questions about any aspect of this Privacy Policy, or if you wish to exercise any of your data rights, please contact the jeeway support team at [email protected]. Our support team is available 24/7 via live chat on the platform and will direct data-specific queries to the appropriate internal team. All privacy-related enquiries receive a substantive response within five business days.

This Privacy Policy applies exclusively to the jeeway.net platform and its associated services. It does not apply to third-party websites or services that may be referenced from the platform — for example, payment provider apps such as bKash or Nagad. Please consult the respective privacy policies of those third-party services directly to understand how they handle your personal information.