Privacy Policy — jtea7

Data We Collect

jtea7 collects personal data that you voluntarily provide to us during registration and ongoing use of the platform, as well as data we observe automatically through your interaction with our services. We collect only the data that is necessary to deliver a safe, fair, and personalised gaming experience.

The categories of personal data we collect are set out in the table below:

We do not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data (beyond KYC photo matching), or health information. If any such data is inadvertently submitted, it will be deleted as soon as reasonably practicable.

How We Use Your Data

jtea7 uses the personal data we collect for specific, legitimate purposes. We do not use your data for purposes that are incompatible with those originally communicated. The primary purposes for which we process your personal data are:

• Account Management: To create, maintain, and administer your jtea7 account, including processing your registration, verifying your identity, and managing your account settings and preferences;
• Service Delivery: To provide access to casino games, sports betting markets, live dealer tables, and all other platform features you use during your time on jtea7;
• Payment Processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, and partner banks, and to maintain accurate financial records of all transactions;
• Identity & Age Verification: To verify that you are who you say you are and that you are aged 18 or above, in compliance with responsible gaming obligations;
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, money laundering, unauthorised access, and other illegal or policy-violating conduct on the platform;
• Responsible Gaming: To monitor your gaming activity for signs of problem gambling, apply self-exclusion restrictions, enforce deposit limits, and send responsible gaming reminders where appropriate;
• Customer Support: To respond to your queries, complaints, and requests submitted via live chat, email, or WhatsApp, and to maintain records of those interactions;
• Platform Improvement: To analyse usage patterns and behavioural data to identify areas for improvement, fix bugs, optimise performance, and develop new features;
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates via email or SMS — but only where you have given explicit consent to receive such communications. You may opt out at any time;
• Legal Compliance: To comply with applicable laws, regulations, court orders, and requests from competent authorities, including anti-money laundering (AML) and counter-terrorism financing (CTF) obligations.

jtea7 processes personal data on one or more of the following legal bases: performance of a contract (your account agreement), compliance with a legal obligation, protection of vital interests, or our legitimate interest in operating a secure, fair, and commercially viable platform — provided that such interests are not overridden by your rights and freedoms.

For marketing communications, we rely exclusively on your freely given, specific, and informed consent. Where consent is the basis for processing, you retain the right to withdraw that consent at any time without affecting the lawfulness of processing that occurred prior to withdrawal.

Data Sharing & Third Parties

jtea7 does not sell your personal data to third parties. We do not share your information with external organisations for their own independent marketing purposes. Your data is shared only in the limited circumstances described below, and only to the extent necessary for the specific purpose.

• Game Providers: When you play a game hosted by a third-party provider such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Ezugi, certain technical data (such as a pseudonymous session token) is passed to that provider to facilitate the game session. Game providers do not receive your full identity data or financial information.
• Payment Processors: To process deposits and withdrawals, we share the minimum necessary financial data with payment partners including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, and Sonali Bank. These partners are bound by their own privacy obligations and by contractual agreements with jtea7.
• Identity Verification Services: To fulfil KYC (Know Your Customer) obligations, we may share identity documents with accredited third-party verification service providers who compare submitted documents against official records. These providers act as data processors under instruction from jtea7.
• Analytics Providers: We use analytics services to understand how users interact with the platform. Data shared for analytics purposes is aggregated or pseudonymised wherever possible. We do not share individually identifiable data with analytics providers for their own use.
• Legal and Regulatory Authorities: We may be required to disclose personal data to law enforcement agencies, financial intelligence units, or other government bodies in response to a lawful request, court order, or where we have a legal obligation to do so under anti-money laundering or counter-terrorism financing legislation.
• Business Transfers: In the event that jtea7's business or assets are acquired by or merged with another entity, your personal data may be transferred to the acquiring entity as part of that transaction, subject to equivalent privacy protections.

Cookies & Tracking Technologies

jtea7 uses cookies and similar tracking technologies to operate the platform, remember your preferences, maintain your authenticated session, analyse usage patterns, and deliver relevant promotional content. A cookie is a small text file placed on your device by a web server when you visit a website.

We use the following categories of cookies:

You can control cookie settings through your browser preferences. Most modern browsers allow you to view, manage, block, or delete cookies stored on your device. Please note that disabling strictly necessary cookies will impair your ability to log in and use the platform. Disabling functional or analytics cookies will not affect your access to the core service.

In addition to cookies, jtea7 may use web beacons (pixel tags) in promotional emails to determine whether those emails were opened and whether the recipient subsequently visited the platform. You can prevent web beacon tracking by disabling image loading in your email client.

Data Retention & Storage

jtea7 retains personal data for as long as it is necessary to fulfil the purposes for which it was collected, or for as long as required by applicable law. The specific retention periods we apply are as follows:

• Account Data: Retained for the duration of your active account plus a minimum of five (5) years following account closure, to satisfy anti-money laundering record-keeping obligations;
• Transaction Records: Financial transaction data is retained for a minimum of seven (7) years from the date of the transaction, consistent with financial record-keeping requirements;
• KYC Documents: Identity verification documents are retained for five (5) years following account closure or the last material transaction, whichever is later;
• Customer Support Communications: Records of support interactions are retained for three (3) years from the date of the last interaction in a given case;
• Marketing Consent Records: Records of your consent to receive marketing communications are retained for the duration of your account plus three (3) years, to demonstrate compliance with consent obligations;
• Analytics and Technical Data: Aggregated and pseudonymised analytics data may be retained indefinitely for platform improvement purposes. Raw technical logs (server logs, IP logs) are retained for up to twelve (12) months.

Upon expiry of the applicable retention period, personal data is either securely deleted or anonymised such that it can no longer be associated with an identifiable individual. Where anonymisation is applied, the resulting data may be retained and used for statistical or research purposes without further notice to you.

All personal data is stored on servers that apply industry-standard physical and technical security controls. Where data is processed by third-party service providers, we require those providers to maintain equivalent security standards through contractual data processing agreements.

Your Privacy Rights

jtea7 respects your rights in relation to your personal data. Depending on the circumstances, you may be entitled to exercise the following rights by contacting us at [email protected]:

• Right of Access: You have the right to request a copy of the personal data we hold about you. We will provide this in a structured, commonly used format within a reasonable timeframe, and at no charge for first requests.
• Right to Rectification: If the personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. Many data points (email address, phone number) can be updated directly in your account settings.
• Right to Erasure ("Right to Be Forgotten"): You may request that we delete your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (and no other legal basis applies), or where processing is unlawful. Please note that certain data may be retained to comply with legal obligations even following an erasure request.
• Right to Restriction of Processing: You may request that we restrict the processing of your data in certain circumstances — for example, while a dispute about data accuracy is being resolved.
• Right to Data Portability: Where processing is based on your consent or a contract, and is carried out by automated means, you may request that we provide your data in a machine-readable format so that it can be transferred to another service provider.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on our legitimate interests, though we may be entitled to continue processing if we can demonstrate compelling legitimate grounds.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

To exercise any of the above rights, please submit a written request to [email protected] from the email address associated with your jtea7 account. We may need to verify your identity before processing the request. We aim to respond to all valid requests within 30 calendar days.

Data Security Measures

jtea7 takes the security of your personal data seriously and has implemented a layered set of technical and organisational measures designed to protect your information against unauthorised access, accidental loss, disclosure, alteration, or destruction.

Our key security measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your browser or mobile device and jtea7's servers is encrypted using 256-bit SSL/TLS protocols. This is the same standard applied by major financial institutions and prevents interception of data in transit;
• Encrypted Data Storage: Sensitive data fields — including national ID numbers, financial account references, and password hashes — are stored in encrypted form at rest. Plaintext passwords are never stored;
• Two-Factor Authentication (2FA): We support SMS-based two-factor authentication for all user accounts. We strongly encourage all jtea7 users to enable 2FA in their account security settings;
• Brute-Force Protection: Automated rate-limiting and account lockout mechanisms are applied to login endpoints to prevent credential-stuffing and brute-force attacks;
• Access Controls: Access to personal data within jtea7's internal systems is restricted on a strict need-to-know basis. Staff with access to personal data are subject to confidentiality obligations;
• Regular Security Reviews: Our platform and infrastructure undergo periodic security assessments to identify and remediate potential vulnerabilities before they can be exploited;
• Incident Response: In the event of a data security incident that poses a risk to your rights and freedoms, jtea7 will notify affected users promptly and take all reasonable remediation steps.

While jtea7 maintains robust security measures, no online platform can guarantee absolute security. You also have a role to play in keeping your account secure — please refer to the account security guidance in our Terms & Conditions for best practices.

Policy Updates & Contact

jtea7 may update this Privacy Policy from time to time to reflect changes in our data practices, changes to applicable law, or improvements to our platform. When we make material changes to this policy, we will update the "Last Updated" date at the top of this page.

Where changes are significant — for example, where we introduce a new purpose for processing your data or a new category of third-party sharing — we will notify registered users via the email address associated with their jtea7 account, or via an in-platform notification, at least fourteen (14) days before the changes take effect. Your continued use of the platform following the effective date of any revised policy constitutes your acceptance of the updated terms.

We encourage you to review this Privacy Policy periodically to remain informed about how jtea7 handles your personal data. The most current version of this policy will always be available at https://jtea7.app/privacy-policy.

If you have any questions, concerns, or requests in relation to this Privacy Policy or the way jtea7 handles your personal data, please contact our support team using the details below. All privacy-related correspondence will be handled with appropriate confidentiality.