Privacy Policy — jz023

Information We Collect

jz023 collects personal data in several ways: directly from you when you register an account or interact with the platform; automatically through your use of the site; and from trusted third-party service providers where necessary to fulfil our legal and operational obligations. We collect only the minimum data required for each specific purpose.

jz023 does not knowingly collect personal data from individuals under 18 years of age. If we become aware that a minor has provided personal data, that data will be deleted immediately and the associated account will be permanently closed. If you believe a minor has registered on jz023, please contact us at [email protected] without delay.

How We Use Your Data

jz023 processes your personal data only where we have a lawful basis to do so. The primary legal bases we rely on are: (a) performance of a contract — where processing is necessary to operate your account and deliver the services you have requested; (b) legal obligation — where processing is required to comply with applicable laws such as anti-money laundering (AML) requirements; (c) legitimate interests — where processing is necessary for jz023's operational and security interests, provided those interests are not overridden by your fundamental rights; and (d) consent — for optional communications such as promotional emails and non-essential cookies, where you have given explicit consent.

• Account Management: To create, verify, maintain, and close your jz023 Account, including processing KYC documentation and enabling secure login via password or SMS OTP.
• Transaction Processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard; to apply bonuses to your balance; and to settle wagers accurately in Bangladeshi Taka (৳).
• Fraud and AML Prevention: To detect, investigate, and prevent fraudulent activity, bonus abuse, money laundering, identity theft, and other prohibited conduct as defined in the jz023 Terms & Conditions.
• Responsible Gaming: To monitor gameplay patterns for signs of problem gambling; to enforce deposit limits, time-out periods, and self-exclusion requests; and to facilitate referrals to responsible gaming support organisations where appropriate.
• Customer Support: To respond to your support enquiries, resolve disputes, and maintain a record of communications for quality assurance and regulatory compliance purposes.
• Platform Improvement: To analyse aggregated, anonymised usage data to improve the performance, stability, and user experience of the jz023 platform, including game loading speeds and payment flow optimisation.
• Promotional Communications (with consent): To send you personalised offers, bonus notifications, and seasonal promotions — for example, BPL cricket season bonuses, Eid special offers, or Pohela Boishakh reload promotions — where you have opted in to marketing communications.
• Legal Compliance: To meet our obligations under applicable data protection, financial crime prevention, and consumer protection regulations, including responding to lawful requests from competent authorities.

Data Sharing & Disclosure

jz023 does not sell, rent, or trade your personal data to any third party for their own commercial purposes. We share your data only with carefully selected partners where such sharing is strictly necessary for the operation of the platform, fulfilment of legal obligations, or protection of our players and business. All third-party data processors engaged by jz023 are contractually required to handle your data securely, to use it only for the purposes specified, and to comply with applicable data protection standards.

The following categories of third parties may receive limited personal data from jz023:

• KYC and Identity Verification Providers: Specialist third-party services that assist jz023 in verifying player identity and age. These providers receive your identity documents and biographic data solely for the purpose of verification and are prohibited from using it for any other purpose.
• Payment Processors: Licensed payment service operators including bKash, Nagad, Rocket, and Upay receive transaction data (mobile wallet number, amount, reference ID) necessary to process your deposits and withdrawals. Card-based payments via Visa and Mastercard are processed by PCI-DSS compliant payment gateways.
• Game Providers: Software studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive a player session token and bet data necessary to deliver their games within the jz023 platform. These providers do not receive your full identity or payment details.
• Analytics and Security Providers: Trusted technology partners that provide platform performance monitoring, fraud detection, and cybersecurity services. These providers process technical data (IP address, device fingerprint, session logs) under strict data processing agreements.
• Regulatory and Law Enforcement Authorities: Where required by law, jz023 may disclose personal data to competent regulatory bodies, law enforcement agencies, or courts in response to a lawful request. We will notify you of any such disclosure to the extent permitted by law.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of jz023's business, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer and given the opportunity to exercise your privacy rights before the transfer takes effect.

jz023 does not transfer your personal data to countries outside your region unless appropriate safeguards — such as contractual data transfer clauses equivalent to established international standards — are in place. All game providers and payment processors engaged by jz023 are required to demonstrate adequate data protection standards as a condition of their engagement.

Cookies & Tracking Technologies

jz023 uses cookies and similar tracking technologies to operate the platform securely, remember your preferences, analyse usage patterns, and deliver relevant content. A cookie is a small text file stored on your device by your web browser when you visit jz023. Cookies do not contain executable code and cannot access other files on your device.

You can manage or delete cookies at any time through your browser settings. Please note that disabling strictly necessary cookies will prevent jz023 from functioning correctly and you will not be able to log in or place wagers. For optional cookies, you may update your preferences at any time via your jz023 Account settings. Most modern browsers also support privacy-focused extensions that give you granular control over cookies from specific domains.

Data Retention

jz023 retains your personal data only for as long as is necessary for the purposes outlined in this Privacy Policy, or as required by applicable legal and regulatory obligations. The following retention schedule applies to the main categories of personal data we hold:

• Active Account Data: Retained for the full duration of your account relationship with jz023, plus a minimum of 5 years following account closure to satisfy financial record-keeping and AML obligations.
• KYC Documents: Retained for a minimum of 5 years from the date of submission, in line with anti-money laundering best practices. Where a specific regulatory requirement mandates a longer retention period, that longer period applies.
• Financial Transaction Records: Retained for 7 years from the date of the transaction, reflecting standard financial record-keeping requirements applicable to payment service operations.
• Customer Support Communications: Retained for 3 years from the date of the last interaction, to support dispute resolution and quality assurance reviews.
• Marketing Consent Records: Retained for the duration of your marketing consent plus 2 years, to demonstrate compliance with consent-based processing obligations.
• Analytics Data: Anonymised and aggregated analytics data that cannot be linked back to an individual player may be retained indefinitely for platform improvement purposes.
• Self-Exclusion Records: Retained for the full duration of the self-exclusion period plus 5 years thereafter, to prevent re-registration by self-excluded players and to protect vulnerable users.

When your personal data is no longer required and the applicable retention period has elapsed, jz023 will securely delete or irreversibly anonymise it. Secure deletion involves overwriting stored data using industry-accepted methods so that it cannot be recovered or reconstructed.

Security Measures

jz023 takes the security of your personal data seriously and maintains a range of technical and organisational measures designed to protect your data against unauthorised access, accidental loss, alteration, or disclosure. While no digital system can guarantee absolute security, jz023 operates to a standard commensurate with the sensitivity of the data we hold and the risks associated with online gaming platforms serving the Bangladeshi market.

• TLS/SSL Encryption: All data transmitted between your device and jz023 servers is protected by Transport Layer Security (TLS 1.2 or higher). The padlock icon in your browser confirms an active encrypted connection.
• AES-256 Data-at-Rest Encryption: Sensitive stored data — including KYC documents, financial records, and hashed passwords — is encrypted at rest using AES-256, the same standard used by major financial institutions worldwide.
• Password Hashing: Player passwords are never stored in plaintext. jz023 uses an industry-standard cryptographic hashing algorithm (bcrypt with a work factor appropriate to current hardware) to store password verifiers. Even jz023 staff cannot retrieve your plaintext password.
• Two-Factor Authentication (2FA): SMS OTP-based 2FA is available to all players and strongly recommended. Enabling 2FA significantly reduces the risk of unauthorised access even if your password is compromised.
• Access Controls: Access to personal data within jz023's systems is restricted on a need-to-know basis. Staff members can only access the minimum data required to perform their specific role. All internal data access is logged and audited.
• Fraud Detection Systems: Automated anomaly detection monitors account activity in real time for patterns consistent with unauthorised access, credential stuffing, or account takeover attempts. Suspicious activity triggers immediate protective measures including temporary account locks and player notification.
• Security Incident Response: jz023 maintains a documented incident response plan. In the event of a data breach that poses a risk to your rights, we will notify affected players promptly and take all reasonable steps to contain the breach and prevent recurrence.

Your Privacy Rights

As a jz023 player, you hold the following rights with respect to your personal data. jz023 is committed to honouring these rights promptly and without unnecessary barriers. All requests should be submitted to [email protected] with the subject line "Privacy Rights Request" and will be processed within 30 calendar days of receipt. In complex cases, this period may be extended by a further 30 days, in which case you will be notified of the extension and the reason for it.

jz023 will not charge a fee for processing your privacy rights requests in the vast majority of cases. Where a request is manifestly unfounded, repetitive, or excessive, jz023 reserves the right to charge a reasonable administrative fee or decline to act on the request, providing written reasons for that decision.

Contact & Policy Updates

If you have any questions, concerns, or requests relating to this Privacy Policy or jz023's data handling practices, please contact our privacy team. We aim to respond to all privacy enquiries within 5 business days (Bangladesh Standard Time, UTC+6).

Policy Updates: jz023 reviews this Privacy Policy regularly and will update it as necessary to reflect changes in our data practices, applicable regulations, or the services we offer. When material changes are made, we will notify active players by email to the registered address on their Account and by posting a prominent notice on the jz023 website for a minimum of 30 days prior to the changes taking effect.

The version of the Privacy Policy currently published at jz023.app/privacy-policy supersedes all prior versions. The effective date at the top of this document indicates when the current version came into force. Continued use of the jz023 platform after the effective date of any updated version constitutes acceptance of the revised policy. If you do not agree with any update, you should discontinue use of the platform and request Account closure as described in the Account Closure section of the jz023 Terms & Conditions.

jz023 is committed to maintaining an open and transparent relationship with every player on our platform. We believe that trust is the foundation of a sustainable and responsible gambling service, and this Privacy Policy reflects that commitment. If you have suggestions for how jz023 can improve its privacy practices, we genuinely welcome your feedback at [email protected].