jetbus Privacy Policy

1.1 About This Policy

jetbus ("we", "us", "our", "the Platform") is committed to protecting the privacy and personal data of all individuals who interact with our online gaming platform. This Privacy Policy ("Policy") sets out the types of personal data we collect from players and visitors, the purposes for which that data is processed, the legal basis on which we rely to process it, how long we retain it, the circumstances in which we may share it with third parties, and the rights available to you as a data subject.

This Policy applies to all personal data collected through the jetbus website, mobile platform, customer support channels, and any other touchpoint associated with the jetbus brand. It should be read alongside the jetbus Terms and Conditions and Responsible Gaming policy, both of which are published on this platform.

1.2 Data Controller

For the purposes of this Privacy Policy, jetbus acts as the data controller in respect of all personal data collected from players and visitors to the platform. As data controller, jetbus determines the purposes and means by which personal data is processed. Any queries regarding data processing activities, requests to exercise data subject rights, or concerns about how your information is handled should be directed to the jetbus support team using the contact details provided in Section 13 of this Policy.

2.1 Registration and Account Data

When you register an account on the jetbus platform, we collect the following categories of personal data:

• Full legal name as it appears on your government-issued identity document.
• Date of birth, for the purpose of verifying that you meet the minimum age requirement of 18 years.
• Email address and chosen username, used for account identification and communication.
• Residential address, including city (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi) and postal code.
• Mobile phone number, used for account verification and fraud prevention.
• Password (stored in hashed form — we never store plain-text passwords).

2.2 Financial and Payment Data

To process deposits and withdrawals, jetbus collects financial data associated with your chosen payment method. This may include:

• Mobile financial service account numbers (bKash, Nagad, Rocket, Upay) registered in your name.
• Bank account details for Dutch-Bangla Bank, City Bank, BRAC Bank, Sonali Bank, Islami Bank, and other supported Bangladeshi banks.
• Card details (where applicable — Visa, Mastercard) processed through our PCI-DSS-compliant payment gateway. Full card numbers are never stored on our servers.
• Transaction history, including deposit amounts in Bangladeshi Taka (৳), withdrawal requests, and processing timestamps.

All payment data is transmitted using 256-bit SSL encryption. jetbus does not retain full card numbers or mobile wallet PINs. Payment processing is handled by certified third-party payment processors subject to strict data processing agreements with jetbus.

2.3 Identity Verification (KYC) Data

As part of our Know Your Customer (KYC) procedures, we may collect and securely store copies of the following documents:

• National Identity Card (NID) or passport.
• Proof of residential address, such as a recent utility bill or bank statement.
• Selfie photograph submitted for liveness verification.
• Proof of payment method, such as a screenshot of your registered bKash or Nagad account.

KYC documents are reviewed by our compliance team and stored securely for the period required by our data retention obligations. Documents are not used for any purpose other than identity verification and regulatory compliance.

2.4 Usage and Behavioural Data

When you use the jetbus platform, we automatically collect certain technical and behavioural data, including:

• IP address and approximate geographic location derived from it.
• Device type, operating system, browser type and version.
• Pages visited, time spent on each page, and navigation paths through the platform.
• Game sessions played, bet amounts, game outcomes, and session durations.
• Login timestamps and frequency of platform access.
• Interaction with bonuses, promotional offers, and responsible gaming tools.

This data is used primarily for platform improvement, fraud detection, responsible gaming monitoring, and compliance purposes. It is processed on the basis of our legitimate interests in maintaining a secure and well-functioning gaming environment.

2.5 Customer Support Communications

When you contact the jetbus support team via live chat or email, we collect and retain a record of those communications. This includes the content of messages, timestamps, the nature of the query, and any resolutions provided. Support records are maintained for quality assurance, staff training, and dispute resolution purposes.

3.1 Purposes of Processing

jetbus uses the personal data we collect for the following specific purposes:

• Account management: Creating, maintaining, and securing your jetbus player account, including authentication and access control.
• Payment processing: Executing deposits and withdrawals via bKash, Nagad, Rocket, Upay, bank transfer, Visa, and Mastercard, and maintaining accurate financial records in BDT.
• Identity verification: Confirming your age and identity in compliance with our KYC obligations and to prevent underage gambling.
• Fraud prevention and security: Detecting and preventing fraudulent transactions, unauthorised account access, bonus abuse, money laundering, and other prohibited activities.
• Platform improvement: Analysing usage patterns to improve the user experience, game selection, platform performance, and feature development.
• Responsible gaming: Monitoring player activity to identify potential problem gambling behaviour and to enforce self-exclusion, deposit limits, and other responsible gaming controls that you or our team have applied to your account.
• Customer support: Responding to queries, resolving disputes, and providing assistance across all support channels.
• Marketing communications: Sending promotional offers, bonus notifications, and platform updates, where you have provided your consent to receive such communications. You may opt out at any time.
• Legal and regulatory compliance: Meeting our obligations under applicable law, responding to lawful requests from authorities, and maintaining records required for audit purposes.

4.1 Grounds for Processing

jetbus processes personal data on the following legal grounds, depending on the specific purpose of the processing activity:

5.1 Third-Party Service Providers

jetbus may share personal data with carefully selected third-party service providers who assist in delivering our platform services. These providers are contractually obligated to process data only as instructed by jetbus and to maintain appropriate technical and organisational security measures. Categories of third-party recipients include:

• Payment processors and financial service providers (e.g., operators of bKash, Nagad, Rocket integrations and card payment gateways).
• Identity verification and KYC service providers.
• Game content providers and software studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, Spribe). These providers receive only the minimum technical data required to deliver game content — they do not receive your full personal profile.
• Cloud infrastructure and hosting providers used to operate the jetbus platform securely.
• Customer support software providers enabling our live chat and ticketing systems.
• Fraud detection and cybersecurity service providers.

5.2 Legal and Regulatory Disclosure

jetbus may disclose personal data to law enforcement agencies, regulatory bodies, courts, or other government authorities where we are required to do so by applicable law, court order, or where disclosure is necessary to protect the safety, rights, or property of jetbus, our players, or third parties. We will only disclose the minimum amount of data necessary to satisfy the legal obligation in question and will, where permitted by law, notify the affected player of any such disclosure.

5.3 No Sale of Personal Data

jetbus does not sell, rent, or trade your personal data to third-party advertisers, data brokers, or any commercial entity for marketing purposes. Your information is used exclusively to operate, improve, and secure the jetbus platform and to fulfil our obligations to you as a registered player.

6.1 Retention Periods

jetbus retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or for as long as required by applicable law or regulatory obligation. The following general retention principles apply:

• Active account data: Retained for the full duration of your account relationship with jetbus, plus a period of up to five years following account closure, to meet anti-money laundering record-keeping requirements.
• Financial transaction records: Retained for a minimum of five years from the date of the transaction, in line with financial record-keeping obligations.
• KYC documentation: Retained for the duration of your account and for up to five years after account closure.
• Customer support records: Retained for up to three years from the date of the last interaction, unless a dispute remains unresolved.
• Marketing consent records: Retained until you withdraw consent or for up to three years from the last engagement, whichever is sooner.
• Technical and behavioural logs: Retained for up to 12 months, after which they are anonymised or deleted.

Upon expiry of the applicable retention period, jetbus will securely delete or irreversibly anonymise your personal data in accordance with our internal data disposal procedures.

7.1 Technical and Organisational Safeguards

jetbus takes the security of your personal data seriously and has implemented a comprehensive set of technical and organisational measures to protect it against unauthorised access, disclosure, alteration, and destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the jetbus platform.
• Bcrypt password hashing — plain-text passwords are never stored at any point.
• Multi-factor authentication options for player accounts.
• Role-based access controls limiting internal staff access to personal data on a strict need-to-know basis.
• Regular penetration testing and security audits conducted by independent cybersecurity professionals.
• Encrypted storage for all sensitive data at rest, including KYC documents and financial records.
• Continuous monitoring of platform activity for anomalous access patterns and potential security incidents.
• Staff training on data protection obligations and secure data handling procedures.

While jetbus implements industry-standard security measures, no online platform can guarantee absolute security. Players are encouraged to use strong, unique passwords for their jetbus account and to contact our support team immediately if they suspect any unauthorised activity on their account.

8.1 Types of Cookies Used

The jetbus platform uses cookies and similar tracking technologies to ensure the proper functioning of the site, to remember your preferences, and to analyse how players use our platform. The categories of cookies we use are as follows:

Strictly necessary cookies cannot be disabled as they are essential to the operation of the platform. You may adjust your browser settings to block or delete functional and analytics cookies, although doing so may affect your experience on the platform. jetbus does not use third-party advertising cookies or behavioural retargeting technologies.

9.1 Rights Available to You

As a data subject, you have a number of rights in relation to the personal data that jetbus holds about you. These rights are summarised below. To exercise any of these rights, please contact the jetbus support team using the details provided in Section 13.

• Right of access: You have the right to request a copy of the personal data jetbus holds about you, along with information about how it is being processed.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated.
• Right to erasure: In certain circumstances, you may request that jetbus delete your personal data. This right is subject to our legal and regulatory retention obligations — we may not be able to erase data where we are required to retain it by law.
• Right to restrict processing: You may request that we restrict the processing of your personal data in certain circumstances, for example while a dispute is being investigated.
• Right to data portability: Where processing is based on your consent or on the performance of a contract, you have the right to request that we provide your personal data in a structured, commonly used, and machine-readable format.
• Right to withdraw consent: Where processing is based on your consent (e.g., for marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.
• Right to object: You have the right to object to processing activities carried out on the basis of jetbus's legitimate interests, including profiling for fraud detection purposes.

jetbus will respond to all data subject rights requests within a reasonable timeframe. We may ask you to verify your identity before processing your request to ensure the security of your personal data.

10.1 No Services to Under-18s

The jetbus platform is strictly intended for adults aged 18 years and above. We do not knowingly collect personal data from individuals under the age of 18. Age verification is a mandatory step in our registration and KYC process, and we apply automated and manual checks to detect and prevent underage registration.

If jetbus becomes aware that personal data has been collected from an individual who is under 18 years of age, we will take immediate steps to delete that data, close the associated account, and void any transactions that may have occurred. If you believe that a minor may have registered on the jetbus platform, please contact our support team immediately at the email address provided in Section 13.

11.1 Cross-Border Processing

Some of the third-party service providers engaged by jetbus may process personal data on servers located outside of Bangladesh. Where personal data is transferred to a third country, jetbus takes steps to ensure that an adequate level of protection is in place, including through the use of contractual safeguards such as standard data protection clauses incorporated into agreements with the relevant service providers. In all cases, the security and confidentiality of your data is maintained to the same standard as if it were processed within Bangladesh.

12.1 Policy Updates

jetbus reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform operations. Where material changes are made, we will notify registered players via the email address associated with their account or via a prominent notice displayed on the platform, with a reasonable notice period before the changes take effect. We encourage players to review this Policy periodically. The date at the top of this page indicates when the Policy was most recently updated. Continued use of the jetbus platform after the effective date of any revised Policy constitutes your acceptance of the updated terms.

13.1 How to Reach Us

If you have any questions about this Privacy Policy, wish to exercise any of your data subject rights, or have a concern about how jetbus processes your personal data, please contact our support team. We aim to acknowledge all data-related enquiries within two business days (Bangladesh Standard Time, UTC+6) and to provide a substantive response within a reasonable period thereafter.

You may reach us via live chat directly on the jetbus platform at any time, or by email at the address below. Please note that the email address below is displayed as plain text only and is not a clickable link:

[email protected]

When submitting a data subject rights request by email, please include your registered username and a brief description of your request. We may ask you to provide proof of identity before processing the request to ensure the security of your personal data.