jz387 Privacy Policy

1 Introduction

jz387 ("jz387", "we", "us", "our") operates the online casino and sports betting platform accessible at https://jz387.io and its associated web properties (collectively, the "Platform"). This Privacy Policy explains how jz387 collects, uses, stores, shares, and protects the personal data of individuals who visit, register on, or use the Platform ("you", "your", "Player").

This policy applies exclusively to personal data collected through the jz387 Platform in connection with services offered to players based in Bangladesh. jz387 is committed to handling all personal data with care, transparency, and in a manner consistent with widely recognised data protection principles, including purpose limitation, data minimisation, accuracy, storage limitation, integrity, and confidentiality.

This Privacy Policy should be read alongside the jz387 Terms and Conditions and the Responsible Gaming Policy, both of which are incorporated by reference. Definitions used in the Terms and Conditions carry the same meaning in this policy unless the context requires otherwise.

The effective date of this Privacy Policy is 1 January 2026. We will notify registered players of any material changes in accordance with Section 12 of this policy.

2 Data We Collect

jz387 collects personal data through several channels: directly from you when you register, deposit, or contact support; automatically when you interact with the Platform; and from third-party service providers involved in identity verification and payment processing. The categories of personal data we collect are described in the table below.

Data You Are Not Required to Provide: You are not legally obligated to provide personal data to jz387. However, certain data — particularly identity and contact data — is necessary to create and maintain a player account. Without this data, jz387 cannot provide its services to you. Optional data, such as city of residence beyond the purposes of localisation, does not affect your ability to access the Platform.

Sensitive Personal Data: jz387 does not intentionally collect sensitive personal data categories such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic or biometric data (other than what is strictly required for KYC liveness verification), or data concerning sexual orientation. If any such data is incidentally included in documents you submit for KYC purposes, it will not be processed beyond what is necessary to complete identity verification.

3 How We Use Your Data

jz387 processes your personal data for the following specific, legitimate purposes. We do not use personal data in ways that are incompatible with the purpose for which it was originally collected without your separate consent.

• Account Creation and Management: To register your player account, verify your identity and age (21+ compliance), manage your account settings, and communicate with you about your account status.
• Payment Processing: To process BDT deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard; to verify that payment instruments belong to the registered account holder; and to maintain accurate financial records.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent transactions, multi-accounting, money laundering, and other prohibited conduct described in the jz387 Terms and Conditions. This includes automated behavioural analysis of account and betting activity.
• Legal and Regulatory Compliance: To fulfil obligations under applicable anti-money laundering (AML) frameworks, to respond to lawful requests from relevant authorities, and to maintain records required by law.
• Platform Improvement: To analyse anonymised usage patterns, diagnose technical issues, test new features, and improve the overall performance and user experience of the jz387 Platform.
• Customer Support: To respond to your queries, resolve complaints, and provide technical assistance via live chat or email.
• Responsible Gaming: To monitor betting patterns for signs of problem gambling behaviour, to administer deposit limits, cool-off periods, and self-exclusion requests, and to direct players to responsible gaming resources where appropriate.
• Marketing Communications (with consent): To send promotional emails, SMS messages, or on-platform notifications about bonuses, new games, seasonal promotions (e.g., Eid, Pohela Boishakh, BPL cricket tournaments), and other jz387 offers — only where you have opted in to marketing communications and have not subsequently withdrawn consent.

Automated Decision-Making: jz387 uses automated systems to flag accounts for fraud review and to enforce responsible gaming limits. Automated decisions that have a significant effect on your account — such as account suspension pending investigation — can be reviewed by a human member of the jz387 compliance team upon your written request.

4 Legal Basis for Processing

jz387 processes personal data on the following legal bases, consistent with widely recognised data protection principles:

• Contractual Necessity: Processing of identity, contact, and financial data is necessary to perform the contract between jz387 and the player (i.e., to provide online casino and sports betting services as described in the Terms and Conditions). Without this processing, jz387 cannot deliver its services.
• Legal Obligation: Processing of KYC verification data and transaction records is necessary to comply with applicable anti-money laundering and counter-terrorism financing requirements.
• Legitimate Interests: Processing of technical and usage data for fraud prevention, platform security, and service improvement is carried out on the basis of jz387's legitimate interests in maintaining a safe and reliable platform — provided that such interests are not overridden by your fundamental privacy rights.
• Consent: Processing of personal data for marketing communications is carried out only where you have given freely, specific, informed, and unambiguous consent at the time of registration or subsequently through your account settings. You may withdraw this consent at any time without affecting the lawfulness of processing carried out before withdrawal.

5 Data Sharing & Third Parties

jz387 does not sell, rent, or trade your personal data to any third party for their own commercial purposes. We share personal data with third parties only in the following limited circumstances, and only to the extent necessary for the stated purpose:

• Payment Service Providers: bKash, Nagad, Rocket, Upay, and card processing networks (Visa, Mastercard) receive the financial data necessary to process your deposit and withdrawal transactions. These providers operate under their own privacy policies and are regulated financial institutions.
• KYC and Identity Verification Providers: Third-party KYC service providers process identity documents and perform liveness verification on our behalf. These providers are contractually bound to process data solely for jz387's identity verification purposes and are prohibited from retaining or repurposing your documents.
• Game Software Studios: Game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive technical session data (e.g., player session tokens) to facilitate real-time game functionality. No personally identifiable information beyond what is technically required is shared with game studios.
• Analytics Providers: Anonymised, aggregated usage data may be shared with analytics service providers to help jz387 understand platform performance and user behaviour. These providers receive no data that could identify an individual player.
• Legal and Regulatory Authorities: jz387 will disclose personal data to law enforcement, regulatory bodies, or other competent authorities where required to do so by applicable law, court order, or in connection with AML/CTF reporting obligations.
• Business Transfers: In the event that jz387 undergoes a merger, acquisition, restructuring, or sale of all or a material portion of its assets, player data may be transferred to the acquiring entity as part of that transaction, subject to equivalent data protection obligations.

6 Cookies & Tracking Technologies

jz387 uses cookies and similar tracking technologies (collectively, "Cookies") to operate and improve the Platform. Cookies are small text files stored on your device when you visit the Platform. They enable the Platform to recognise your device, maintain your session, and remember your preferences between visits.

Types of Cookies Used by jz387:

• Strictly Necessary Cookies: These cookies are essential for the Platform to function and cannot be switched off. They include session authentication tokens, CSRF protection tokens, and load-balancing cookies. No opt-out is available for strictly necessary cookies while you continue to use the Platform.
• Performance and Analytics Cookies: These cookies collect anonymised information about how players use the Platform — such as which pages are visited most frequently and whether any errors are encountered. This data is aggregated and cannot be used to identify individual players. We use this information solely to improve Platform performance.
• Functionality Cookies: These cookies enable the Platform to remember your language preferences, display settings, and last-visited game category so that your experience is more personalised on return visits.
• Responsible Gaming Cookies: These cookies store your responsible gaming settings (such as active session reminders or deposit limit amounts) locally on your device to ensure these controls remain active throughout your session.

Managing Cookies: You can manage or delete cookies through your browser settings at any time. Most browsers allow you to refuse new cookies, delete existing cookies, and be notified when new cookies are set. Please note that disabling strictly necessary cookies will prevent you from logging into your jz387 account and using core Platform features.

jz387 does not use third-party advertising cookies or tracking pixels that feed data to external advertising networks. No cookie data collected by jz387 is used to build a profile of you for the purpose of serving targeted advertisements on external websites.

7 Data Retention

jz387 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply:

• Active Account Data: Identity, contact, financial, and usage data associated with an active player account is retained for the duration of the account's existence on the jz387 Platform.
• Closed Account Data: Following account closure, jz387 retains identity and transaction records for a minimum period of 5 years to comply with AML record-keeping requirements. After this period, data is securely deleted or anonymised.
• KYC Documents: Copies of identity documents submitted for KYC verification are retained for a minimum of 5 years from the date of verification, or from the date of account closure if later, in accordance with applicable AML standards.
• Support Communications: Live chat transcripts and email correspondence are retained for 2 years from the date of the last communication in a thread, to support ongoing dispute resolution and quality assurance processes.
• Technical and Analytics Data: Anonymised analytics data may be retained indefinitely as it cannot be used to identify individual players. Non-anonymised technical logs (e.g., IP address logs) are retained for up to 12 months and then deleted.
• Marketing Consent Records: Records of marketing consent and withdrawal of consent are retained for the lifetime of the account plus 1 year, to demonstrate compliance with consent requirements.

When personal data is no longer required for its retained purpose, jz387 will securely delete, destroy, or anonymise it in a manner that prevents reconstruction or re-identification.

8 Security Measures

jz387 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include, but are not limited to:

• TLS/SSL Encryption: All data in transit between your device and jz387 servers is encrypted using TLS 1.2 or higher. This protects your login credentials, payment information, and session data from interception during transmission.
• Data Encryption at Rest: Sensitive personal data fields stored in jz387 databases — including identity numbers, payment instrument identifiers, and hashed passwords — are encrypted using industry-standard encryption algorithms.
• Access Controls: Access to personal data within jz387 is restricted to authorised personnel on a strict need-to-know basis. All internal access to player data is logged and subject to periodic audit.
• Firewall and Intrusion Detection: jz387 servers are protected by enterprise-grade firewalls and intrusion detection systems that monitor for and alert on suspicious access patterns.
• Vulnerability Management: jz387 conducts regular security assessments and penetration testing of the Platform. Identified vulnerabilities are remediated according to a risk-based priority schedule.
• Staff Training: All jz387 personnel with access to personal data receive data protection and security awareness training upon onboarding and at regular intervals thereafter.

While jz387 takes all reasonable steps to protect your personal data, no internet-based platform can guarantee absolute security. You are responsible for keeping your own account credentials secure and for logging out of your account when using shared or public devices. If you suspect that your jz387 account has been compromised, contact support immediately at [email protected].

9 Your Rights

As a jz387 player whose personal data is processed under this Privacy Policy, you hold the following rights with respect to your personal data. To exercise any of these rights, contact the jz387 support team with your account username and a clear description of your request. jz387 will respond within 30 calendar days of receiving a verifiable request.

• Right of Access: You have the right to request a copy of the personal data that jz387 holds about you, along with information about how it is processed and with whom it has been shared.
• Right to Rectification: You have the right to request that jz387 correct any inaccurate or incomplete personal data held in your account. Some corrections (such as name changes) will require documentary evidence.
• Right to Erasure: You have the right to request deletion of your personal data in certain circumstances — for example, where data is no longer necessary for the purpose for which it was collected, or where you have withdrawn consent and there is no other lawful basis for processing. This right does not apply to data that jz387 is required to retain by law (e.g., AML transaction records).
• Right to Restrict Processing: You have the right to request that jz387 restrict the processing of your personal data in certain circumstances, such as while the accuracy of data is being contested or while a complaint is under review.
• Right to Data Portability: Where processing is based on your consent or on a contractual necessity, you have the right to request that jz387 provide your personal data in a structured, commonly used, machine-readable format so that you can transfer it to another service provider.
• Right to Object: You have the right to object to processing of your personal data where jz387 relies on legitimate interests as the legal basis. jz387 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to Withdraw Consent: Where processing is based on your consent (primarily marketing communications), you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
• Right Against Automated Decision-Making: You have the right not to be subject to decisions based solely on automated processing where those decisions produce significant effects on you — for example, automated account suspension. You may request human review of any such decision by contacting the jz387 compliance team.

jz387 will not charge a fee for exercising any of these rights in standard circumstances. Where requests are manifestly unfounded or excessive, jz387 reserves the right to charge a reasonable administrative fee or to decline the request, with written reasons provided.

10 Children's Privacy

The jz387 Platform is strictly intended for adults aged 21 years and above. jz387 does not knowingly collect personal data from any person under the age of 21. If jz387 determines at any point — through age verification, KYC review, or any other means — that personal data has been collected from a person under 21, the following actions will be taken immediately:

• The account will be suspended and then permanently closed.
• All wagers placed will be voided and all winnings will be forfeited.
• Deposited funds will be returned to the payment source used, to the extent technically possible.
• All personal data collected in relation to the underage account will be deleted as soon as the closure process is complete, except where retention is required for legal or regulatory purposes.

If you are a parent or guardian and believe that a person under 21 in your care has created a jz387 account, please contact our support team immediately at [email protected]. jz387 takes underage gambling prevention very seriously and will investigate all such reports with priority.

11 Third-Party Links

The jz387 Platform may contain references to game studios and payment providers whose own privacy practices govern the data they collect independently. While jz387 takes care to work with reputable service partners, jz387 has no control over and accepts no responsibility for the privacy practices of third-party organisations. This Privacy Policy applies solely to data collected by jz387 through the jz387 Platform.

We encourage you to review the privacy policies of any third-party service provider whose services you use in conjunction with your jz387 account — for example, bKash's privacy policy when using the bKash mobile wallet to make a deposit, or the privacy policy of your device's operating system provider.

12 Policy Amendments

jz387 reserves the right to amend this Privacy Policy at any time to reflect changes in applicable law, our data processing practices, or the structure of our services. The effective date shown at the top of this document will be updated whenever a material change is made.

When material changes are made to this Privacy Policy, jz387 will provide reasonable advance notice to registered players via a prominent on-platform notification or by email to the address registered on your account. In the case of minor, non-material changes (such as corrections to typographical errors or clarifications that do not alter the substance of the policy), jz387 may update the policy without individual notification.

Your continued use of the jz387 Platform following the effective date of any amended Privacy Policy constitutes your acceptance of the updated policy. If you do not agree with any amendment, you may request account closure in accordance with the Terms and Conditions. The most current version of the Privacy Policy is always available at jz387.io/privacy-policy.

13 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way in which jz387 handles your personal data, please contact our support team. The support team is available 24 hours a day, 7 days a week via the live chat feature accessible after completing jz387 Login.

You may also contact us by email. Our data protection contact address is displayed as plain text only: [email protected]

When submitting a data-related request, please include your registered username, a description of your request or concern, and — for erasure or portability requests — a brief statement of the grounds on which you are relying. This information will help us locate your account and process your request within the 30-day response window.

jz387 is committed to resolving all privacy-related queries and complaints fairly and transparently. Where a complaint cannot be resolved through direct communication with the support team, it may be escalated to the jz387 compliance team for independent review.