jtea7 Privacy Policy — Your Data, Protected

jtea7 is an online cricket betting and casino platform operated under the domain jtea7.io, providing sports betting, casino games, live dealer tables, and related services to eligible players across Bangladesh. jtea7 is committed to protecting the privacy and personal data of every registered user in accordance with internationally recognised data protection principles.

As the operator of the jtea7 platform, we act as the data controller in respect of all personal information collected from you during registration, during the use of our services, and in connection with any support or promotional interaction you have with us.

If you have any question, concern, or request relating to this Privacy Policy or to the personal data we hold about you, you may contact our dedicated privacy team at any time:

This Privacy Policy applies to all users of the jtea7 platform, including visitors who browse without registering, registered account holders, and former account holders whose data we are legally required to retain. It covers data collected via the jtea7 website, any associated mobile-optimised interface, and through our customer support channels.

jtea7 collects personal information from you in several ways: directly when you provide it during registration or account management, automatically as you use the platform, and from third parties such as payment processors or identity verification services. The categories of personal data we collect are set out below.

We do not collect any special categories of sensitive personal data (such as health data, racial or ethnic origin, religious beliefs, or biometric data) unless this is strictly required by applicable law or regulatory obligation, and only with your explicit consent where required.

jtea7 uses the personal data we collect for specific, clearly defined purposes. We do not use your data in ways that are incompatible with the purpose for which it was originally collected. The primary purposes for which we process your personal data are as follows:

• Account Registration and Management: To create and administer your jtea7 account, verify your identity, manage your account preferences, and maintain accurate account records.
• Service Delivery: To enable you to place bets on cricket, BPL, T20 World Cup, IPL, and other sports markets, to access casino games and live dealer tables, and to interact with all features of the jtea7 platform.
• Payment Processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, Mastercard, and Dutch-Bangla Bank, and to maintain an accurate record of all financial transactions on your account.
• Identity Verification and Fraud Prevention: To comply with know-your-customer (KYC) requirements, to verify that you meet the 21+ age eligibility requirement, and to detect, investigate, and prevent fraudulent activity, money laundering, and abuse of promotional offers.
• Responsible Gaming Compliance: To monitor gambling patterns for signs of problem gambling behaviour, to apply and enforce deposit limits, self-exclusion requests, and cooling-off periods, and to provide appropriate support to players who may be experiencing difficulties.
• Customer Support: To respond to your enquiries, resolve complaints, provide technical assistance, and maintain records of support interactions for quality assurance purposes.
• Platform Improvement: To analyse usage patterns and technical performance data in order to improve the jtea7 platform, fix bugs, optimise game loading times, and develop new features that serve the needs of Bangladeshi players.
• Legal and Regulatory Compliance: To comply with applicable laws, regulations, and binding legal obligations, including the retention of transaction records and the provision of information to lawfully authorised regulatory bodies.
• Marketing Communications: To send you promotional emails, bonus notifications, and relevant offers — but only where you have given your consent to receive marketing communications, and subject always to your right to withdraw consent at any time.

Every instance of personal data processing carried out by jtea7 is grounded in one or more recognised legal bases. We process your personal data only where we have a valid lawful reason to do so. The legal bases we rely upon are:

• Contractual Necessity: Processing that is necessary to perform our contract with you — specifically, to provide the betting and casino services you have registered to use, to process payments, and to manage your account. Without this processing, we would be unable to deliver the jtea7 service.
• Legal Obligation: Processing that is required to comply with a legal obligation, including KYC verification, anti-money-laundering (AML) checks, the enforcement of age verification requirements, and the retention of financial transaction records for the statutory period.
• Legitimate Interests: Processing that is in jtea7's legitimate interests as a platform operator, provided those interests are not overridden by your rights and interests. This includes fraud detection, security monitoring, platform analytics, and responsible gaming monitoring.
• Consent: Processing that is based on your freely given, specific, informed, and unambiguous consent — primarily in relation to marketing communications and, where applicable, the use of non-essential cookies. You may withdraw your consent at any time without detriment.

jtea7 does not sell your personal data to third parties. We do not share your data with external organisations for their own marketing purposes. We share your personal data only in the specific circumstances described below, and only to the extent necessary for the stated purpose.

• Payment Service Providers: We share relevant financial data with bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, and other authorised payment processors to facilitate deposits and withdrawals. These providers process your data under their own privacy policies and applicable payment industry security standards.
• Identity Verification Partners: We may share identity documents and personal details with certified KYC and AML verification service providers to confirm your identity and age in accordance with our eligibility requirements. All such partners are contractually obligated to maintain the confidentiality of your data.
• Game and Content Providers: Third-party game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive limited technical data (such as session tokens and bet values) in order to deliver their games through the jtea7 platform. These providers do not receive your identity or contact data.
• Technology and Infrastructure Providers: We use third-party cloud hosting, server infrastructure, and security monitoring services. These providers act as data processors under binding contractual agreements and may access personal data only as necessary to perform their contracted services.
• Legal and Regulatory Authorities: We will disclose personal data to lawfully authorised regulatory bodies, law enforcement agencies, or courts if required to do so by applicable law or in response to a valid legal process. We will notify you of any such disclosure where legally permitted to do so.
• Business Transfers: In the event of a merger, acquisition, or transfer of all or part of jtea7's business, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer in advance, and your rights under this Privacy Policy will continue to apply.

The jtea7 platform uses cookies and similar tracking technologies to improve your browsing experience, maintain your login session, analyse platform usage, and support responsible gaming monitoring. A cookie is a small text file stored on your device by your web browser when you visit the jtea7 website.

We use the following categories of cookies:

• Strictly Necessary Cookies: These cookies are essential for the jtea7 platform to function correctly. They enable core functions such as user authentication, session management, security enforcement, and payment processing. These cookies cannot be disabled without impairing your ability to use the platform.
• Functional Cookies: These cookies remember your preferences such as language settings, display preferences, and responsible gaming tool configurations, so that you do not need to re-enter them each time you visit.
• Analytics Cookies: These cookies help us understand how players use the jtea7 platform — which pages are visited most frequently, where users encounter difficulties, and how session flows can be improved. Analytics data is aggregated and does not identify you personally.
• Marketing and Tracking Cookies: Where you have given consent, these cookies allow us to deliver relevant promotional content and to measure the effectiveness of our marketing campaigns. You may withdraw consent for marketing cookies at any time.

You can manage your cookie preferences through your browser settings. Most modern browsers allow you to block or delete cookies. Please note that disabling strictly necessary cookies may prevent parts of the jtea7 platform from working correctly.

jtea7 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. When personal data is no longer required, it is securely deleted or anonymised in accordance with our internal data disposal procedures.

The general retention periods applied by jtea7 are as follows:

• Active Account Data: Retained for the full duration of your account's active status, and for a period of five years following account closure, in order to fulfil legal and regulatory obligations relating to financial record-keeping and AML compliance.
• Transaction Records: All deposit and withdrawal records are retained for a minimum of five years from the date of the transaction, in compliance with applicable financial record-keeping requirements.
• KYC and Identity Documents: Identity verification documents are retained for a minimum of five years following account closure or the date of the last transaction, whichever is later.
• Customer Support Records: Live chat transcripts and support ticket records are retained for two years from the date of the last interaction, for quality assurance and dispute resolution purposes.
• Responsible Gaming Records: Records of self-exclusion requests, deposit limits, and cooling-off periods are retained for a minimum of five years to prevent re-registration during an active exclusion period.
• Marketing Consent Records: Records of your marketing consent preferences are retained for the duration of your account and for two years following account closure.

Where jtea7 is required by law to retain data beyond the periods stated above, we will comply with that legal obligation and will not delete the relevant data until the legally mandated retention period has expired.

As a registered player on the jtea7 platform, you have a number of rights in relation to the personal data we hold about you. jtea7 is committed to respecting and facilitating the exercise of these rights in a timely and transparent manner.

• Right of Access: You have the right to request a copy of the personal data that jtea7 holds about you. We will provide this information in a structured, commonly used format within 30 days of receiving a verified request.
• Right to Rectification: If any of the personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it. You may also update certain account details directly through your account settings.
• Right to Erasure: In certain circumstances, you have the right to request that jtea7 delete your personal data. This right applies where the data is no longer necessary for the purpose for which it was collected, or where you withdraw consent and there is no other lawful basis for processing. Please note that this right may be limited by our legal retention obligations.
• Right to Restrict Processing: You have the right to request that jtea7 restrict the processing of your personal data in certain circumstances — for example, while a dispute about the accuracy of the data is being resolved.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity, you have the right to receive your personal data in a structured, machine-readable format so that you may transfer it to another service provider.
• Right to Object: You have the right to object to processing that is based on jtea7's legitimate interests, including profiling. You also have an absolute right to object to your personal data being used for direct marketing purposes at any time.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that took place before the withdrawal.

To exercise any of the above rights, please contact the jtea7 privacy team at [email protected] with the subject line "Privacy Request" and a clear description of the right you wish to exercise. We may ask you to verify your identity before processing your request.

jtea7 implements a comprehensive suite of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security framework is reviewed and updated regularly to address emerging threats and to maintain alignment with current industry best practices.

Our key security measures include:

• 256-bit SSL Encryption: All data transmitted between your device and the jtea7 platform is encrypted using 256-bit Secure Sockets Layer (SSL) technology. The padlock icon in your browser confirms this encryption is active during every session.
• Password Hashing: Account passwords are never stored in plain text. We use industry-standard cryptographic hashing algorithms with unique salts to store password data securely, ensuring that passwords cannot be recovered even in the event of a data breach.
• Two-Factor Authentication: jtea7 offers optional two-factor authentication (2FA) for registered accounts, adding an additional layer of security beyond your password. We strongly encourage all players to enable 2FA from within their account settings.
• Access Controls: Access to personal data within jtea7's internal systems is restricted on a strict need-to-know basis. Staff members access only the data necessary to perform their specific job functions, and all internal data access is logged and audited.
• Intrusion Detection: jtea7's infrastructure is monitored continuously by automated intrusion detection systems that alert our security team to any suspicious activity in real time.
• Regular Security Audits: Our platform and data processing systems are subject to regular independent security audits and penetration testing to identify and remediate vulnerabilities before they can be exploited.

Despite these measures, no data transmission over the internet or electronic storage system can be guaranteed to be 100% secure. While jtea7 takes every reasonable precaution to protect your personal data, you also play an important role in maintaining your account security by using a strong, unique password and enabling two-factor authentication.

The jtea7 platform is strictly intended for use by adults aged 21 years and above. jtea7 does not knowingly collect, process, or store personal data from any individual who is under 21 years of age. Our registration process includes mandatory age verification steps to enforce this requirement.

If jtea7 becomes aware that personal data has been collected from a person under the age of 21 without the knowledge of a parent or legal guardian, we will take immediate steps to delete all such data and to permanently close the relevant account. Any funds deposited by an underage user will be handled in accordance with applicable legal and regulatory requirements.

Parents and guardians who have reason to believe that a minor in their care has accessed or attempted to access the jtea7 platform should contact us immediately at [email protected] with subject line "Minor Account Report". We will investigate and respond within 24 hours.

jtea7 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable law, or improvements to the jtea7 platform. The effective date at the top of this document will be updated whenever a material change is made.

Where changes are material — meaning they significantly affect how we collect, use, or share your personal data — jtea7 will notify registered account holders by email and by an on-platform notification at least 14 days before the revised policy takes effect. Non-material corrections, clarifications, or minor updates may be applied without prior notice.

Your continued use of the jtea7 platform following the effective date of any updated Privacy Policy constitutes your acknowledgement of the revised terms. If you do not agree with any change to this Privacy Policy, you may close your account by contacting jtea7 support, and you may request deletion of your personal data in accordance with the rights described in Section 8 above.

We encourage you to review this Privacy Policy periodically so that you remain informed about how jtea7 protects your data. The most current version of this Privacy Policy is always available at jtea7.io/privacy-policy.