jt66 Privacy Policy

Who We Are

jt66 operates the online betting and casino platform accessible at jt66.im ("the Platform"). For the purposes of this Privacy Policy, jt66 acts as the data controller in respect of all personal data collected from users who access or register on the Platform.

jt66 is built specifically for players in Bangladesh, offering cricket betting, live casino games, slots, and specialty game categories including Win Drop and Fishing Yi Lu Fa. All services are delivered in English and denominated in Bangladeshi Taka (৳ BDT) or USDT where applicable.

If you have any questions about how jt66 handles your personal data, or if you wish to exercise any of your data rights described in this policy, you may contact our Data Protection team directly at [email protected] with the subject line "Privacy Request".

Data We Collect

jt66 collects personal data across several categories depending on how you interact with the Platform. The table below summarises the data types we collect, the context in which they are gathered, and the primary reason for collection.

2.1 Data You Provide Voluntarily

The majority of personal data jt66 holds about you is data you provide directly — through the registration form, KYC submission portal, payment method entry fields, or support contact channels. Providing accurate information in these contexts is a requirement of our Terms & Conditions, and providing false information may result in account closure.

2.2 Data Collected Automatically

When you access jt66.im, our servers automatically log certain technical data including your IP address, browser fingerprint, and session activity. This data is collected via server-side logging and, where applicable, first-party cookies. We do not use this data to build advertising profiles; it is used exclusively for security monitoring, fraud detection, and aggregate platform analytics.

2.3 Data From Third Parties

In limited circumstances, jt66 may receive personal data from third parties. This includes identity verification results from KYC processing partners, fraud risk scores from payment processors, and, where applicable, supplementary identity data from public records databases used to validate the information you have provided during registration. jt66 does not purchase data from third-party data brokers for marketing purposes.

How We Use Your Data

jt66 uses your personal data only for clearly defined, lawful purposes. The following table maps each primary use to the data categories it draws upon.

Legal Basis for Processing

jt66 processes personal data only where a valid legal basis exists. The primary legal bases on which jt66 relies are as follows:

• Contractual Necessity: Processing required to deliver the services you have contracted for — including account management, transaction processing, and customer support. Without this processing, jt66 cannot provide its services to you.
• Legal Obligation: Processing required to comply with applicable law — including anti-money-laundering (AML) obligations, Know Your Customer (KYC) requirements, and fraud reporting duties. jt66 cannot waive these obligations at a player's request.
• Legitimate Interests: Processing carried out in furtherance of jt66's legitimate business interests where those interests are not overridden by your privacy rights. This includes fraud detection, security monitoring, platform analytics, and responsible gaming monitoring. jt66 conducts a balancing test before relying on this basis.
• Consent: Where jt66 relies on your consent — for example, for optional marketing communications — you retain the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

Data Sharing

jt66 does not sell personal data. We share data only in the specific, limited circumstances described below, and only to the minimum extent necessary for the stated purpose.

5.1 Service Providers

jt66 engages third-party service providers to perform certain functions on our behalf, including payment processing (bKash, Nagad, Rocket, Upay, USDT infrastructure providers, Visa and Mastercard network processors), identity verification and KYC processing, cloud hosting and data storage, and customer support platform software. All such providers are bound by data processing agreements that prohibit them from using your data for any purpose other than delivering the contracted service to jt66.

5.2 Game Providers

When you play games powered by third-party studios — including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi — limited session data (such as a pseudonymous player ID and game session token) is transmitted to the relevant provider to enable the game to function. No directly identifying information such as your name, national ID, or payment details is shared with game providers for this purpose.

5.3 Legal and Regulatory Disclosures

jt66 may disclose personal data to law enforcement authorities, regulatory bodies, or courts where required to do so by applicable law or in response to a valid legal process. Where permitted by law, jt66 will endeavour to notify the affected player of any such disclosure request before complying, unless doing so would prejudice the investigation or is otherwise prohibited.

5.4 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of jt66's business or assets, personal data held by jt66 may be transferred to the acquiring entity as part of that transaction. jt66 will notify affected players via their registered email address prior to any such transfer and will ensure that the receiving entity is bound by privacy obligations at least as protective as those set out in this policy.

Data Retention

jt66 retains personal data for the minimum period necessary to fulfil the purpose for which it was collected, subject to any longer retention period required by applicable law. The following retention schedule applies under normal circumstances:

At the end of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked to any individual. Where data is anonymised rather than deleted, it may be retained indefinitely for aggregate statistical purposes without constituting personal data under applicable law.

Cookies & Tracking Technologies

jt66 uses cookies and similar technologies (collectively "cookies") on jt66.im. A cookie is a small text file placed on your device by a web server. The following categories of cookies are in use on the Platform:

7.1 Essential Cookies

These cookies are strictly necessary for the Platform to function. They enable core features such as user authentication (keeping you logged in during a session), session security tokens, shopping cart/bet slip state, and load balancing. Essential cookies cannot be disabled without breaking the Platform. They do not collect personal data for marketing purposes.

Retention: Session duration (deleted on browser close) or up to 24 hours for authentication tokens.

7.2 Functional Cookies

These cookies remember your preferences to improve your experience — for example, your preferred language, display settings, or last-viewed game category. They are not used for tracking across external sites.

Retention: Up to 12 months from last activity.

7.3 Analytics Cookies

jt66 uses first-party analytics cookies to understand how players interact with the Platform in aggregate — for example, which game categories are most popular, which pages have high exit rates, and how navigation flows between sections. All analytics data is aggregated and anonymised before review. jt66 does not use Google Analytics or any third-party analytics service that passes your data to external advertising networks.

Retention: Up to 24 months on a rolling basis.

7.4 Security Cookies

These cookies assist in detecting fraudulent activity, bot traffic, and account takeover attempts. They record device fingerprint data that is compared against known fraud patterns. This processing is carried out on the basis of legitimate interest in protecting the integrity of the Platform and the security of all players.

Retention: Up to 90 days from placement.

Most browsers allow you to manage cookie preferences via their settings menus. Disabling essential cookies will impair the Platform's functionality; disabling functional or analytics cookies will reduce the quality of your experience but will not prevent you from using the Platform. Instructions for managing cookies in major browsers are available from the respective browser vendor's help documentation.

Data Security

jt66 implements a multi-layered security programme to protect personal data against unauthorised access, disclosure, alteration, and destruction. Key security measures in place include:

• TLS 1.3 Encryption in Transit: All data transmitted between your browser and jt66.im is encrypted using TLS 1.3. Older, insecure protocol versions (SSLv3, TLS 1.0, TLS 1.1) are disabled.
• AES-256 Encryption at Rest: Sensitive fields in jt66's database — including identity document data, payment method identifiers, and authentication credentials — are encrypted at rest using AES-256.
• Password Security: Account passwords are stored as salted cryptographic hashes using bcrypt. jt66 staff cannot read your plain-text password. If you forget your password, it must be reset — it cannot be retrieved.
• Two-Factor Authentication (2FA): jt66 offers 2FA on all accounts. We strongly recommend enabling 2FA to add an additional layer of protection against unauthorised login attempts.
• Regular Security Audits: jt66 conducts periodic security assessments including penetration testing and vulnerability scanning. Critical findings are remediated on a priority basis within defined SLA timeframes.
• Access Controls: Access to production systems and player data is restricted to authorised jt66 personnel on a need-to-know basis. All internal access is logged and subject to periodic review.
• Incident Response: jt66 maintains an incident response plan. In the event of a data breach that is likely to result in harm to affected players, jt66 will notify affected individuals via their registered email address within 72 hours of becoming aware of the breach, where technically feasible.

While jt66 takes all reasonable technical and organisational measures to protect your data, no online system can be guaranteed to be 100% secure. You are responsible for keeping your login credentials confidential and for reporting any suspected unauthorised access to [email protected] immediately.

Your Rights

As a player on jt66, you hold the following rights in respect of your personal data. These rights are available to all players and may be exercised free of charge by contacting [email protected] with the subject line "Data Rights Request".

To exercise any of the above rights, email [email protected] from the address registered to your jt66 account. For security purposes, jt66 may ask you to verify your identity before processing a data rights request. We will not charge a fee for any data rights request unless the request is manifestly unfounded, excessive, or repetitive — in which case jt66 reserves the right to charge a reasonable administrative fee or decline the request, with written reasons provided.

Children & Minors

jt66 is strictly an adults-only platform. Access to and use of jt66's services is permitted only for individuals who are aged 21 years or older. This age restriction is enforced through our KYC verification process, which requires all players to submit government-issued identity documentation confirming their date of birth before withdrawal privileges are activated.

jt66 does not knowingly collect personal data from individuals under the age of 21. If jt66 becomes aware that personal data has been collected from a minor — whether through a misrepresentation during registration or any other means — jt66 will immediately close the relevant account, void any associated transactions, return any deposits where technically feasible, and securely delete all associated personal data without delay.

If you are a parent or guardian and believe that a person under the age of 21 in your care has registered on jt66.im, please contact us immediately at [email protected] with the subject line "URGENT — Underage Account". We will investigate and act on all such reports as a priority matter.

Third-Party Links

jt66.im may contain links to third-party websites or services — for example, within game lobby descriptions that reference a game provider's official site, or within payment method information referencing bKash, Nagad, or Rocket's official platforms. This Privacy Policy applies solely to jt66.im and the services operated directly by jt66.

jt66 is not responsible for the privacy practices, data collection methods, or content of any third-party websites linked from jt66.im. We strongly encourage you to review the privacy policy of any third-party site before providing personal data to that site. The presence of a link on jt66.im does not constitute an endorsement of the linked site's privacy practices.

Third-party game providers whose games are playable within the jt66 platform — including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi — operate their game engines under their own data processing arrangements. jt66 ensures that data shared with game providers is limited to the pseudonymous session data necessary to run the game, as described in Section 5.2.

Policy Updates

jt66 reviews this Privacy Policy periodically and may update it to reflect changes in our data practices, applicable law, or the services we offer. The current version of the Privacy Policy is always accessible at jt66.im/privacy-policy. The "Last Updated" date at the top of this document indicates when the most recent revision was made.

Where a change to this Privacy Policy is material — meaning it affects the way jt66 uses your data in a manner that could be adverse to your interests — jt66 will notify registered players via their registered email address at least 14 days before the change takes effect. For minor or administrative updates that do not affect the substance of how your data is used, jt66 will update the policy without advance notice, though the revised date will always be updated.

Your continued use of jt66.im after a policy update takes effect constitutes your acknowledgement of the revised Privacy Policy. If you do not agree with any changes, you should discontinue use of the Platform and may request account closure and data erasure (subject to legal retention obligations) by contacting [email protected].

Contact & Data Rights Requests

For any questions, concerns, or requests relating to this Privacy Policy or your personal data, please contact the jt66 Data Protection team using the details below. All communications should be sent in English to ensure they are handled promptly and routed to the correct team member.

• Email: [email protected]
• Subject Line for Data Rights Requests: "Privacy Request" or "Data Rights Request"
• Subject Line for Underage Concerns: "URGENT — Underage Account"
• Subject Line for Data Breach Reports: "URGENT — Security Concern"
• Support Hours: 24 hours a day, 7 days a week, Bangladesh Standard Time (UTC+6)
• Response Time: Data rights requests acknowledged within 48 hours; resolved within 30 days

When submitting a data rights request, please include your registered email address, a description of the right you wish to exercise, and any relevant context that will help jt66 locate and process your data accurately. jt66 may ask for additional verification before processing sensitive requests such as erasure or portability.