jte7 Privacy Policy — How We Protect Your Personal Data

01 Introduction

jte7 ("we", "us", "our") operates the online betting and casino platform accessible at jte7.io, which is designed and operated for adult players aged 21 and above residing in Bangladesh. As the data controller for personal data collected through this Platform, jte7 is committed to handling that data responsibly, transparently, and securely.

This Privacy Policy describes the categories of personal data we collect from Players, the purposes for which that data is processed, the legal bases that justify each processing activity, the third parties with whom data may be shared, and the rights available to you as a data subject.

This Policy applies to all personal data collected through:

• The jte7.io website and all pages accessible thereon
• The Account registration and login processes
• Deposit and withdrawal transactions
• Live chat, email, and support communications
• Participation in promotions, tournaments, or bonus programmes
• Use of responsible gaming tools such as self-exclusion or deposit limits

02 Data We Collect

jte7 collects personal data across the following categories. We collect only what is necessary for the stated purposes and do not retain data beyond its useful life.

03 How We Collect Data

jte7 collects personal data through the following channels and mechanisms:

• Direct input by you: Data you provide when completing the registration form, updating your Account profile, submitting KYC documents, contacting support, or participating in a promotion.
• Automated technical collection: When you visit jte7.io, our servers automatically record Technical Data such as your IP address, device identifiers, browser fingerprint, and session timestamps. This occurs as a standard feature of internet-based platforms.
• Payment provider data: When you initiate a deposit or withdrawal, the payment provider (bKash, Nagad, Rocket, Upay, Visa, Mastercard) transmits transaction confirmation data to jte7 for reconciliation purposes. We do not receive your full account credentials from these providers.
• Game provider data: When you play games hosted by third-party providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, etc.), game session logs and outcomes are transmitted to jte7 for account crediting, bet settlement, and responsible gaming monitoring.
• Fraud and AML screening: jte7 may use third-party fraud detection and anti-money laundering screening services that supply risk-scoring information derived from publicly available or commercially licensed data sets.
• Cookies and similar technologies: As described in Section 7, jte7 uses cookies and session tokens to maintain your login state, remember preferences, and analyse Platform performance.

04 Purpose & Legal Basis for Processing

jte7 processes your personal data only where a lawful basis exists for doing so. The following table maps each processing purpose to its corresponding legal basis:

05 Data Retention

jte7 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or to comply with applicable legal and regulatory obligations. The following retention schedule applies:

• Account and Identity Data: Retained for the duration of your active Account plus a minimum of 5 years following account closure, to satisfy AML record-keeping obligations.
• Financial Transaction Records: Retained for a minimum of 7 years from the date of each transaction, in line with standard financial record-keeping requirements.
• KYC Verification Documents: Retained for the duration of your Account plus 5 years after closure. Documents may be retained longer where required by a specific regulatory or legal obligation.
• Gaming Session Logs: Retained for 2 years from the date of each session for dispute resolution and responsible gaming monitoring purposes.
• Customer Support Communications: Retained for 2 years from the date of last interaction, or longer where the communication relates to an ongoing dispute or investigation.
• Responsible Gaming Records (self-exclusion, limits): Retained indefinitely for Players who have self-excluded, to prevent re-registration during the exclusion period.
• Technical and Analytics Data: Retained in anonymised or aggregated form for up to 12 months from collection date, after which individual-level data is deleted.
• Marketing Consent Records: Retained for 3 years from the date of consent, or until consent is withdrawn, whichever is earlier.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised such that it can no longer be attributed to any individual Player.

06 Third-Party Data Sharing

jte7 does not sell, rent, or trade your personal data. We share data with third parties only in the following strictly defined circumstances:

• Payment Processors: bKash, Nagad, Rocket, Upay, Visa, and Mastercard receive the minimum data necessary to process your deposit or withdrawal transaction (name, account reference, amount). These providers operate under their own privacy policies and are bound by applicable financial data protection standards.
• Game Providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other licensed studios receive session initiation data (Player ID, stake amount, game token) to host games. They do not receive your full identity or financial details.
• KYC & Identity Verification Providers: Third-party identity verification services may process your submitted documents to confirm identity and age. These providers are contractually prohibited from using your data for any purpose other than verification.
• Fraud Detection & AML Services: Specialised screening services may process Technical and Financial Data to generate risk scores. These services are engaged solely to protect the integrity of the Platform and its Players.
• Regulatory and Law Enforcement Bodies: jte7 will disclose personal data to competent authorities where required by law, court order, or legitimate regulatory demand. We will notify you of such disclosure where legally permitted to do so.
• Platform Infrastructure Providers: Hosting, cloud storage, and content delivery providers that process data on jte7's behalf under binding data processing agreements that require them to maintain equivalent data protection standards.

07 Cookies & Tracking Technologies

jte7 uses cookies and similar technologies (session tokens, local storage, pixel tags) to operate the Platform effectively and to improve your experience. The following categories of cookies are in use:

• Strictly Necessary Cookies: Required for core Platform functionality including login session management, Wallet balance display, and security token validation. These cannot be disabled without impairing core functionality.
• Functional Cookies: Store your preferences such as language settings, preferred game categories, and notification choices. Disabling these may reduce personalisation but will not prevent access to the Platform.
• Performance & Analytics Cookies: Collect aggregated, anonymised data about how Players navigate jte7.io — which pages are visited most, where users drop off, and page load performance metrics. This data is used solely to improve the Platform experience.
• Security Cookies: Used to detect fraudulent login attempts, identify unusual session behaviour, and protect against cross-site request forgery (CSRF) attacks.

jte7 does not use advertising cookies or third-party behavioural tracking pixels. No cross-site tracking of your browsing behaviour outside of jte7.io is conducted.

08 Data Security

jte7 implements a multi-layered security architecture to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our security measures include:

• Transport Layer Security: All data in transit between your browser/device and jte7.io is encrypted using TLS 1.2 or higher (256-bit encryption). HTTPS is enforced site-wide via HSTS (HTTP Strict Transport Security).
• Data-at-Rest Encryption: Databases containing personal data are encrypted at rest using AES-256. Encryption keys are managed and rotated by dedicated key management infrastructure.
• Access Controls: Access to personal data is restricted to jte7 personnel on a strictly need-to-know basis. All internal access is logged and subject to regular audit. Multi-factor authentication is required for all administrative system access.
• Intrusion Detection: jte7 operates continuous intrusion detection and prevention systems (IDPS) that monitor for anomalous access patterns and automatically block suspicious traffic.
• Vulnerability Management: Regular penetration testing and vulnerability scanning are conducted by independent security specialists. Critical vulnerabilities are patched within 24 hours of identification.
• Incident Response: jte7 maintains a documented data breach response plan. In the event of a breach affecting your personal data, you will be notified promptly where required by applicable law, with clear information about the nature of the breach, data affected, and remedial steps taken.

09 Your Data Rights

As a Player on jte7, you hold the following rights over your personal data. Requests to exercise these rights should be submitted to [email protected] with the subject line "Data Rights Request". jte7 will respond within 30 calendar days of receipt.

10 Children & Minors

jte7 is strictly prohibited to persons under the age of 21. We do not knowingly collect, store, or process personal data belonging to individuals under 21 years of age. This is a firm platform-wide policy with zero exceptions.

• Age verification is conducted as a mandatory step during the registration process and again at the point of first withdrawal request.
• Where jte7 discovers or has reasonable grounds to believe that an Account is held by a person under 21, the Account will be suspended immediately pending investigation.
• Any funds deposited by a verified minor will be refunded to the originating payment method after deducting any bonuses claimed, in accordance with the Terms & Conditions.
• All personal data inadvertently collected from a person under 21 will be permanently deleted upon discovery, without exception.

11 International Data Transfers

jte7 is primarily operated to serve Players based in Bangladesh. However, certain third-party service providers (game providers, fraud screening services, cloud infrastructure partners) may process data in jurisdictions outside Bangladesh.

Where personal data is transferred internationally, jte7 ensures that appropriate safeguards are in place, including:

• Contractual safeguards: Standard contractual clauses (SCCs) or equivalent contractual protections are in place with all international data processors, requiring them to apply data protection standards equivalent to those applied by jte7.
• Adequacy assessments: Before engaging any international processor, jte7 conducts a transfer impact assessment to evaluate whether the destination jurisdiction provides adequate protection for personal data.
• Data minimisation in transfers: Only the minimum necessary data is transferred internationally. Where a processing task can be performed domestically or with anonymised data, that approach is preferred.

12 Responsible Gaming & Data

jte7's responsible gaming programme depends on data. The following explains how personal and gaming data is specifically used in the context of player protection:

• Behavioural monitoring: Gaming session data is analysed to identify patterns that may indicate problem gambling behaviour — such as rapid escalation in stake size, extended uninterrupted sessions, or unusually frequent deposits following losses. This monitoring is conducted in the interest of Player welfare.
• Self-exclusion enforcement: If you activate self-exclusion through the Platform or request it via support, your contact data and identity information is retained on a restricted exclusion list for the duration of the exclusion period. This data is used exclusively to prevent re-registration and enforce the exclusion.
• Deposit and session limits: Your configured limits are stored and enforced at the account level. Support agents may access your limit history where necessary to process a limit reduction request or to investigate a responsible gaming concern.
• Intervention communications: Where our monitoring identifies a potential concern, jte7 may contact you via email or live chat using your stored contact details to offer responsible gaming resources or suggest a cooling-off period. This outreach is conducted on the basis of legitimate interests in Player welfare.

For full details of responsible gaming tools available on jte7, including how to set limits, activate self-exclusion, or access external support organisations, please visit our Responsible Gaming page.

13 Policy Amendments

jte7 reserves the right to amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, Platform features, or data processing practices. The following process applies to all amendments:

• The revised Privacy Policy will be published at jte7.io/privacy-policy with an updated "Last Updated" date at the top of the document.
• Where amendments are material — meaning they significantly affect the manner in which your personal data is processed or your rights as a data subject — jte7 will provide advance notice via email to your registered address and/or a prominent in-Platform notification, at least 14 days before the changes take effect.
• For minor or administrative amendments (such as corrections of typographical errors, clarifications that do not alter the substance of data processing, or updates to contact details), jte7 may update the Policy without advance notification.
• Your continued use of jte7.io following the effective date of any amendment constitutes your acceptance of the updated Privacy Policy.
• If you do not agree with a material amendment, you have the right to close your Account and request deletion of your personal data (subject to legal retention obligations) by contacting [email protected] before the amendment takes effect.

14 Contact & Complaints

If you have any questions, concerns, or requests relating to this Privacy Policy or the manner in which jte7 processes your personal data, please contact our Data Protection team through the following channel:

• Email: [email protected] — use the subject line "Privacy Enquiry" for general questions or "Data Rights Request" for formal rights exercises.
• Live Chat: Available 24/7 via jte7.io in English, with agents available across Bangladesh Standard Time (UTC+6) business hours for complex privacy matters.
• Response Time: All privacy enquiries are acknowledged within 24 hours. Formal data rights requests are responded to in full within 30 calendar days.

jte7 takes all privacy complaints seriously and aims to resolve them fairly and transparently through direct dialogue. If you submit a formal complaint and are not satisfied with jte7's response within 30 days, you may escalate the matter through any dispute resolution mechanism available under the laws applicable in your jurisdiction.