Privacy Policy — How jilivat Collects, Uses, and Protects Your Personal Data

1. Information We Collect

jilivat collects personal information from you in several ways — directly when you register and use our platform, automatically when you browse our site, and occasionally from third parties who assist us in providing our services. The categories of personal data we collect are described below.

1.1 Information You Provide Directly

When you register a jilivat account, complete identity verification, make deposits or withdrawals, or contact our support team, you may provide us with the following categories of information:

• Identity data: Full legal name, date of birth, gender, and nationality;
• Contact data: Email address, mobile phone number, and residential address (including city, district, and postcode);
• Identity verification documents: National ID card (NID), passport, or driver's licence, together with selfie images or proof of address where required for KYC compliance;
• Financial data: Mobile banking account identifiers (bKash, Nagad, Rocket, Upay numbers), bank account details for bank transfer methods, and transaction history on the jilivat platform;
• Account credentials: Username and encrypted password used for jilivat login — note that jilivat never stores your password in plain text;
• Communication data: Records of your correspondence with the jilivat support team, including live chat logs, email threads, and any supporting materials you submit.

1.2 Information Collected Automatically

When you access the jilivat website or mobile platform, our systems automatically collect certain technical and behavioural data. This includes:

• Device and technical data: IP address, device type, operating system, browser type and version, screen resolution, and language settings;
• Usage data: Pages visited, games played, bets placed, session duration, click patterns, and navigation paths through the jilivat platform;
• Location data: General geographic location inferred from your IP address (country and city level) — jilivat does not collect precise GPS location data;
• Cookie and tracking data: Information collected through cookies, web beacons, and similar technologies as described in Section 4 of this Privacy Policy.

1.3 Information from Third Parties

jilivat may receive personal data about you from the following categories of third parties:

• Payment processors: Transaction confirmation data from bKash, Nagad, Rocket, Upay, Visa, Mastercard, and banking partners to verify deposits and withdrawals;
• Identity verification providers: Results of automated document and biometric checks performed by third-party KYC service providers;
• Fraud prevention services: Risk scores and flagging data from third-party fraud detection tools used to protect the integrity of the jilivat platform;
• Analytics providers: Aggregated and anonymised behavioural data used to improve platform performance and user experience.

2. How We Use Your Data

jilivat uses the personal data we collect for a defined set of purposes, all of which are necessary to operate a safe, fair, and legally compliant online gaming platform for players in Bangladesh. We do not use your data for purposes that are incompatible with the reasons for which it was originally collected.

Purpose	Data Used	Legal Basis
Account registration and jilivat login	Identity data, contact data, credentials	Contract performance
Identity and age verification (KYC)	Identity documents, financial data	Legal obligation
Processing deposits and withdrawals	Financial data, transaction history	Contract performance
Fraud prevention and security monitoring	Technical data, usage data, financial data	Legitimate interest
Responsible gaming monitoring	Usage data, transaction history	Legal obligation / legitimate interest
Customer support communications	Contact data, communication data	Contract performance
Personalised promotional offers	Usage data, transaction history	Consent
Platform analytics and improvement	Technical data, usage data (anonymised)	Legitimate interest
Legal and regulatory compliance	All categories as required	Legal obligation

jilivat will never sell your personal data to third-party advertisers, data brokers, or marketing companies. We do not use your data to build advertising profiles for external platforms. Any personalised communications you receive from jilivat relate exclusively to jilivat's own products and services, and only where you have consented to receive them.

3. Legal Basis for Processing

jilivat processes personal data on one or more of the following legal bases, depending on the specific purpose of the processing activity:

• Contract performance: Processing that is necessary to provide you with the services you have requested by registering a jilivat account, including managing your account, processing transactions, and delivering game results;
• Legal obligation: Processing that is required by applicable law, including identity verification obligations, anti-money laundering (AML) compliance, and responsible gaming monitoring requirements;
• Legitimate interest: Processing where jilivat has a genuine and proportionate interest that is not overridden by your rights — for example, fraud prevention, platform security, network monitoring, and aggregated analytics;
• Consent: Processing based on your freely given, specific, and informed agreement — primarily for optional marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

Where jilivat relies on legitimate interest as a legal basis, we conduct a balancing test to ensure that our interest does not unjustifiably override your fundamental data rights. You may contact [email protected] to request further information about any specific legitimate interest assessment.

4. Cookies and Tracking Technologies

jilivat uses cookies and similar tracking technologies on its website and platform to ensure core functionality, improve user experience, and gather anonymised analytics data. This section explains what cookies we use, why we use them, and how you can manage them.

4.1 What Are Cookies?

Cookies are small text files placed on your device by websites you visit. They allow the website to remember information about your visit — such as your preferred language, session state, and login status — so that you do not need to re-enter information every time you return. Cookies cannot run programs, deliver viruses, or access other information stored on your device.

4.2 Types of Cookies Used by jilivat

• Strictly necessary cookies: These are essential for the jilivat platform to function. They enable core features such as jilivat login session management, account security, and transaction processing. These cookies cannot be disabled without breaking the platform's core functionality;
• Performance and analytics cookies: These collect anonymised data about how visitors use the jilivat website — which pages are visited most often, where users navigate from, and whether any error messages are encountered. This data helps jilivat improve platform performance and user experience;
• Functional cookies: These remember your preferences such as display settings, language selection, and notification preferences, providing a more personalised experience when you return to jilivat;
• Marketing cookies (optional): These are only set with your explicit consent and are used to deliver relevant promotional content related to jilivat's own products. jilivat does not use third-party advertising network cookies.

4.3 Managing Your Cookie Preferences

You can manage cookie preferences through your browser settings at any time. Most modern browsers allow you to block or delete cookies, or to alert you before a cookie is stored. Please note that disabling strictly necessary cookies will prevent you from using core jilivat platform features, including the jilivat login function. For specific instructions on managing cookies in your browser, refer to your browser's help documentation.

5. Data Sharing and Third Parties

jilivat shares personal data with third parties only where strictly necessary, lawful, and proportionate. We never sell personal data to third parties. The categories of recipients with whom jilivat may share your data are set out below.

5.1 Payment and Financial Partners

To process your deposits and withdrawals, jilivat shares the minimum necessary financial and identity data with payment processors including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard. These partners are contractually required to handle your data in accordance with applicable data protection standards and may not use it for any other purpose.

5.2 Identity Verification (KYC) Providers

Where identity verification is required, jilivat shares relevant identity documents and data with third-party KYC service providers who conduct automated and manual document checks. These providers are bound by strict data processing agreements and operate in compliance with applicable law.

5.3 Game Software Providers

jilivat's casino games and sports betting markets are powered by third-party software providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive technical session data (such as a pseudonymous session token) necessary to deliver the game experience. They do not receive your full identity or financial data unless required for specific compliance purposes.

5.4 Fraud Prevention and Security Services

jilivat uses third-party fraud detection and cybersecurity services. These services may process technical data such as your IP address, device fingerprint, and behavioural patterns to identify and prevent fraudulent activity on the platform.

5.5 Legal and Regulatory Disclosures

jilivat may disclose personal data to law enforcement agencies, regulatory bodies, or other competent authorities where required to do so by applicable law, court order, or in connection with the investigation of suspected fraud, money laundering, or other illegal activity. jilivat will only make such disclosures to the minimum extent required and will seek to notify affected players where permitted by law.

5.6 Business Transfers

In the event that jilivat undergoes a merger, acquisition, restructuring, or sale of assets, personal data held by jilivat may be transferred to the successor entity as part of that transaction. Affected players will be notified in advance of any such transfer and of any material changes to the way their data is handled.

6. Data Retention

jilivat retains personal data for as long as is necessary to fulfil the specific purpose for which it was collected, or for as long as required by applicable legal or regulatory obligations. The key retention periods applied by jilivat are summarised below.

Data Category	Retention Period	Reason
Account registration data	Duration of account + 5 years after closure	Legal and regulatory compliance
Identity verification documents (KYC)	Duration of account + 5 years after closure	AML and financial regulation
Transaction and financial records	7 years from transaction date	Financial record-keeping obligations
Customer support communications	3 years from last interaction	Dispute resolution and quality assurance
Game and betting session logs	5 years from session date	Fair play monitoring and dispute resolution
Marketing consent records	Until consent withdrawn + 1 year	Proof of consent
Technical and usage logs	13 months from collection	Security monitoring and analytics

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification. Where anonymised data is retained for analytical purposes after the retention period, it no longer constitutes personal data and falls outside the scope of this Privacy Policy.

7. Data Security Measures

jilivat takes the security of your personal data seriously and implements a comprehensive set of technical, organisational, and procedural measures to protect it against unauthorised access, loss, alteration, or disclosure.

7.1 Technical Security Measures

• SSL/TLS encryption: All data transmitted between your device and jilivat servers is encrypted using current-generation SSL/TLS protocols. This includes jilivat login sessions, financial transactions, and all API communications;
• Password hashing: Account passwords are never stored in plain text. jilivat uses industry-standard one-way hashing algorithms with salting to store password data securely;
• Two-factor authentication (2FA): Players are strongly encouraged to enable 2FA on their jilivat accounts via SMS OTP or authenticator app, providing an additional layer of protection beyond the password alone;
• Database encryption: Sensitive fields within jilivat's databases — including identity document data and financial identifiers — are encrypted at rest using AES-256 encryption;
• Firewall and intrusion detection: jilivat's infrastructure is protected by enterprise-grade firewalls, intrusion detection systems (IDS), and continuous network monitoring to identify and respond to threats in real time.

7.2 Organisational Security Measures

• Access to personal data is restricted to authorised personnel on a strict need-to-know basis, with role-based access controls enforced across all internal systems;
• All employees and contractors with access to personal data undergo data protection training and are bound by contractual confidentiality obligations;
• Regular internal security audits and penetration testing are conducted to identify and remediate vulnerabilities before they can be exploited;
• jilivat maintains a documented data breach response procedure. In the event of a confirmed breach affecting your personal data, we will notify affected players in accordance with applicable legal requirements.

8. Your Data Rights

As a player registered on the jilivat platform, you hold a number of rights over the personal data we hold about you. jilivat is committed to honouring these rights promptly and transparently.

8.1 Right of Access

You have the right to request a copy of all personal data that jilivat holds about you, together with information about how it is being used. This is commonly referred to as a Subject Access Request (SAR). jilivat will respond to verified SARs within 30 days of receipt.

8.2 Right to Rectification

If any personal data held by jilivat about you is inaccurate or incomplete, you have the right to request that we correct or complete it. Minor corrections — such as updating your contact email or mobile number — can be made directly via your jilivat account settings. For more significant corrections involving identity data, please contact [email protected].

8.3 Right to Erasure

You may request that jilivat deletes your personal data in circumstances where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (and no other legal basis applies), or where you object to processing and jilivat has no overriding legitimate interest. Please note that jilivat may be required to retain certain data for legal, regulatory, or fraud prevention purposes even following an erasure request — we will notify you of any such restriction at the time of processing your request.

8.4 Right to Restrict Processing

You have the right to request that jilivat restricts the processing of your personal data in certain circumstances — for example, while the accuracy of data is being contested, or while an objection to processing is being considered. During a restriction period, jilivat will continue to store the data but will not actively process it except where you have consented or where processing is necessary for legal claims.

8.5 Right to Object

You have the right to object to jilivat processing your personal data where the legal basis for that processing is legitimate interest. You also have the right to object at any time to the processing of your data for direct marketing purposes. jilivat will comply with an objection to marketing immediately upon receipt.

8.6 Right to Data Portability

Where jilivat processes your data on the basis of your consent or in the performance of a contract, and that processing is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, and machine-readable format. You may also request that we transmit that data directly to another data controller where technically feasible.

8.7 How to Exercise Your Rights

To exercise any of the rights described above, please contact jilivat's data team at [email protected], clearly stating your name, registered account email address, and the specific right you wish to exercise. jilivat will respond within 30 days of receiving a complete and verified request. We may need to verify your identity before processing certain requests to protect against fraudulent data access attempts.

9. Contact and Privacy Queries

If you have any questions, concerns, or requests relating to this Privacy Policy or to how jilivat handles your personal data, please get in touch with our support and data team at [email protected]. Our team is available 24 hours a day, 7 days a week, Bangladesh Standard Time (UTC+6), and will acknowledge your query within 48 hours.

jilivat is committed to resolving privacy-related concerns directly and transparently. If you are not satisfied with jilivat's response to a privacy concern, you may have the right to raise the matter with a relevant supervisory authority in your jurisdiction.

jilivat may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or platform features. When material changes are made, we will notify registered players by displaying a prominent notice on the jilivat platform or by sending an email to the address associated with your account. The date of the most recent update is always displayed at the top of this page. Continued use of the jilivat platform following notification of a change constitutes acceptance of the revised Privacy Policy.