jo99 Privacy Policy

Last Updated: 1 January 2026

1. Introduction

jo99 ("jo99", "we", "us", "our") operates the online casino and sports betting platform accessible at https://jo99.io (the "Platform"). We are committed to protecting the privacy and personal data of every registered player and visitor. This Privacy Policy ("Policy") sets out the lawful basis on which we process your personal data, the categories of data we handle, the purposes for which we use it, and the rights available to you as a data subject.

This Policy applies to all personal data collected through the Platform, including data provided during account registration, depositing and withdrawing funds, participation in games and betting markets, use of our customer support services, and any other interaction you have with jo99. It applies equally to all players accessing the Platform from Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, Cox's Bazar, and all other locations within Bangladesh and internationally.

This Policy should be read alongside jo99's Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference. In the event of any conflict between this Policy and those documents, this Policy shall govern with respect to data privacy matters.

2. Categories of Personal Data We Collect

jo99 collects the following categories of personal data in the course of providing the Platform's services:

2.1 Identity and Registration Data

• Full legal name as it appears on your government-issued identification document.
• Date of birth (for age verification — players must be 21 years or older).
• Gender (optional, collected where provided voluntarily during registration).
• Username or display name chosen at registration.
• Copies of government-issued photo ID (National ID Card, passport, or driving licence) submitted during KYC verification.
• Proof of address documents such as utility bills or bank statements dated within the last three months.

2.2 Contact Data

• Email address (used for account verification, transaction notifications, and support correspondence).
• Mobile telephone number (used for two-factor authentication and account recovery).
• Residential address (collected during KYC verification for address verification purposes).

2.3 Financial and Transaction Data

• Details of deposits and withdrawals including transaction amounts in BDT, timestamps, and payment method identifiers (e.g., bKash mobile number, Nagad account reference, masked card number).
• Transaction history, account balance movements, and bonus credit/debit records.
• Bank account or mobile financial service account details provided for withdrawal processing.

2.4 Gaming and Betting Activity Data

• Records of all bets placed, games played, stakes wagered, winnings credited, and bonus wagers completed.
• Game session duration, frequency of play, and responsible gaming tool usage (deposit limits, cooling-off periods, self-exclusion status).
• Sporting event selections, in-play betting activity, and market preferences.

2.5 Technical and Device Data

• IP address at the time of login and at the time of each transaction.
• Device type, operating system, browser type and version.
• Session cookies and authentication tokens.
• Geolocation data derived from IP address (country and region level only — precise GPS coordinates are not collected).
• Platform usage logs including page views, feature interactions, and error reports.

2.6 Communications Data

• Records of all correspondence between you and jo99's customer support team, including live chat transcripts and email threads.
• Records of your responses to optional surveys, feedback forms, and promotional communications where you have opted in to receive them.

3. How We Collect Your Personal Data

jo99 collects personal data through the following channels and mechanisms:

• Direct provision by you: Data submitted when you complete the registration form, undergo KYC verification, make a deposit or withdrawal request, contact customer support, or respond to a promotional communication.
• Automated collection during Platform use: Technical and device data collected automatically by our servers and analytics systems when you access the Platform, including IP address, session cookies, and interaction logs.
• Third-party sources: Identity verification data returned by our KYC service providers; fraud risk scores provided by fraud detection partners; payment confirmation data relayed by bKash, Nagad, Rocket, Upay, Visa, and Mastercard payment gateways.
• Publicly available sources: In limited circumstances, jo99 may cross-reference data against publicly available registers or databases to support fraud prevention, sanctions screening, or responsible gaming obligations.

4. How We Use Your Personal Data

jo99 processes your personal data for the following purposes, each supported by a lawful basis under applicable data protection principles:

Purpose	Categories of Data Used	Lawful Basis
Account registration and identity verification	Identity, Contact, KYC documents	Contractual necessity
Processing deposits, withdrawals, and game settlements	Financial, Transaction, Identity	Contractual necessity
Anti-money laundering (AML) and fraud prevention	Identity, Financial, Technical, KYC documents	Legal obligation
Age verification and responsible gaming compliance	Identity, Gaming Activity, Contact	Legal obligation
Customer support and dispute resolution	Identity, Communications, Transaction	Contractual necessity
Platform security, integrity, and abuse prevention	Technical, Identity, Gaming Activity	Legitimate interest
Personalisation of game recommendations and promotions	Gaming Activity, Technical	Legitimate interest
Sending transactional notifications (deposit confirmations, withdrawal updates)	Contact, Transaction	Contractual necessity
Sending optional promotional communications (bonuses, offers)	Contact, Gaming Activity	Consent
Platform analytics and performance improvement	Technical, Gaming Activity	Legitimate interest

jo99 will not process your personal data for any purpose that is incompatible with the purposes listed above without first providing you with notice and, where required, obtaining your consent.

5. Data Sharing & Third-Party Disclosure

jo99 does not sell, rent, or trade your personal data to any third party for marketing or commercial purposes. We share personal data with third parties only in the following controlled circumstances:

5.1 Payment Service Providers

To process deposits and withdrawals, jo99 shares transaction-relevant personal data — including your name, account reference, and transaction amount in BDT — with our payment partners: bKash, Nagad, Rocket, Upay, Visa, and Mastercard. Each payment partner operates under its own privacy policy and data processing standards. jo99 requires all payment partners to maintain data security standards consistent with industry best practice.

5.2 KYC and Identity Verification Providers

jo99 uses accredited third-party KYC verification services to validate the identity documents submitted by players during account verification. These providers receive copies of identity documents solely for the purpose of conducting verification checks and are contractually prohibited from using this data for any other purpose.

5.3 Fraud Detection and AML Partners

To fulfil our anti-money laundering obligations and protect the integrity of the Platform, jo99 shares relevant technical and transactional data with specialist fraud detection and AML screening services. These partners process data under contractual data processing agreements and applicable legal frameworks.

5.4 Game Content Providers

Licensed game providers — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — may receive limited technical data (such as a pseudonymous player session token and wager data) to facilitate game session management and fair-play auditing. No directly identifiable personal data such as your name or contact details is passed to game providers.

5.5 Legal and Regulatory Authorities

jo99 will disclose personal data to competent legal authorities, law enforcement agencies, or regulatory bodies where required by law, court order, or to protect the legal rights of jo99 or its players. We will notify affected players of such disclosures where we are legally permitted to do so.

5.6 Corporate Transactions

In the event of a merger, acquisition, restructuring, or sale of all or part of jo99's business, player personal data may be transferred to the acquiring entity as part of that transaction. Affected players will be notified in advance of any such transfer and of any changes to this Privacy Policy that result from it.

6. Cookies & Tracking Technologies

jo99 uses cookies and similar tracking technologies to operate and improve the Platform. The following categories of cookies are used:

6.1 Strictly Necessary Cookies

These cookies are essential for the Platform to function correctly. They maintain your authenticated session, preserve your account preferences during an active session, and protect against cross-site request forgery (CSRF) attacks. These cookies cannot be disabled without impairing the functionality of the Platform.

6.2 Analytics Cookies

With your consent, jo99 uses first-party analytics cookies to understand aggregate patterns of how players interact with the Platform — such as which game categories are most popular, how players navigate between pages, and where errors occur. This data is processed in anonymised or pseudonymised form and is used exclusively to improve Platform performance and user experience.

6.3 Functional Cookies

These cookies remember your preferences between sessions, such as your chosen language display or last-used game category, to provide a more personalised experience. They do not track your activity outside the jo99 Platform.

6.4 Advertising Cookies

jo99 does not currently use third-party advertising cookies or retargeting pixels. No data collected on the jo99 Platform is shared with advertising networks for the purpose of displaying targeted advertisements on third-party websites.

You may manage your cookie preferences through your browser settings at any time. Disabling strictly necessary cookies may affect your ability to log in or use core Platform features. Disabling analytics or functional cookies will not prevent you from accessing any part of the Platform.

7. Data Retention Periods

jo99 retains personal data only for as long as is necessary for the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following retention schedule applies:

Data Category	Retention Period	Basis for Retention
Account registration and KYC documents	5 years from account closure	AML regulatory obligation
Financial transaction records	7 years from transaction date	Financial record-keeping obligation
Gaming and betting activity logs	3 years from last activity	Dispute resolution and audit
Customer support communications	3 years from last communication	Dispute resolution
Technical and device logs	12 months from collection	Security and fraud prevention
Marketing consent records	Until consent is withdrawn + 1 year	Demonstrating lawful processing
Self-exclusion records	Indefinitely (responsible gaming obligation)	Player protection obligation

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised in accordance with jo99's data destruction procedures. Anonymised data that can no longer be linked to an identifiable individual may be retained indefinitely for aggregate statistical analysis.

8. Security Measures

jo99 implements a layered security architecture to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our key security measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and jo99's servers.
• Encryption at rest for sensitive data categories including identity documents, payment credentials, and account passwords (stored as salted cryptographic hashes — plain-text passwords are never stored).
• Role-based access controls ensuring that jo99 staff can only access personal data that is strictly necessary for their specific role and function.
• Two-factor authentication (2FA) available to all players and enforced for all internal staff accessing player data systems.
• Regular penetration testing and vulnerability assessments conducted by independent security specialists.
• Intrusion detection and monitoring systems operating continuously on all production infrastructure.
• Incident response procedures with defined escalation paths and timelines for notifying affected players in the event of a data breach that presents a risk to their rights and freedoms.

Despite these measures, no system connected to the internet can guarantee absolute security. jo99 encourages all players to use strong, unique passwords, to enable two-factor authentication, and to contact [email protected] immediately upon suspecting any unauthorised access to their account.

9. Your Data Subject Rights

As a player on the jo99 Platform, you hold the following rights in relation to your personal data. To exercise any of these rights, contact jo99's data support team at [email protected] with the subject line "Data Rights Request". jo99 will acknowledge your request within five business days and provide a substantive response within 30 days.

9.1 Right of Access

You have the right to request a copy of the personal data jo99 holds about you, together with information about how that data is processed, the categories of data held, the purposes for processing, and the third parties with whom it has been shared.

9.2 Right to Rectification

If any personal data jo99 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or completed without undue delay. Note that certain data fields — particularly those verified during KYC — may require re-submission of documentary evidence before a correction can be applied.

9.3 Right to Erasure

You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw your consent (and no other lawful basis exists), or where the data has been unlawfully processed. This right is subject to jo99's legal obligations to retain certain data categories as described in Section 7, which take precedence over erasure requests during the applicable retention period.

9.4 Right to Restriction of Processing

You have the right to request that jo99 restrict the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or where you have objected to processing pending verification of whether jo99's legitimate interests override your own.

9.5 Right to Data Portability

Where processing is based on your consent or on contractual necessity, and is carried out by automated means, you have the right to receive a structured, commonly used, and machine-readable copy of the personal data you have provided to jo99, and to transmit that data to another data controller where technically feasible.

9.6 Right to Object

You have the right to object at any time to the processing of your personal data where that processing is based on jo99's legitimate interests, including profiling for personalisation purposes. Where you object, jo99 will cease processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.

9.7 Right to Withdraw Consent

Where processing is based solely on your consent — for example, for receiving optional promotional communications — you may withdraw that consent at any time by contacting support or by using the unsubscribe mechanism included in each marketing communication. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

10. Minors & Age Policy

The jo99 Platform is strictly intended for use by adults aged 21 years or older. jo99 does not knowingly collect or process personal data belonging to individuals under the age of 21. All account registrations are subject to age verification, and accounts found to be held by persons under 21 will be immediately and permanently closed.

If you are a parent or guardian and believe that a minor has registered an account on jo99 or submitted personal data to the Platform without your consent, please contact us immediately at [email protected]. jo99 will investigate and, where confirmed, will delete all personal data associated with the minor's account without delay.

11. International Data Transfers

jo99 operates from servers located in secure data centre facilities. Where personal data is transferred to or processed by third-party partners located outside Bangladesh — such as internationally based KYC providers, game content providers, or fraud detection services — jo99 ensures that appropriate safeguards are in place to protect the data in transit and at the destination.

Such safeguards may include contractual data processing agreements incorporating standard data protection clauses, as well as technical and organisational security measures equivalent to those applied to data processed within Bangladesh. By using the Platform, you consent to the transfer of your personal data to such third-party partners as described in this Policy, subject to the safeguards described above.

12. Third-Party Links & Integrated Services

The jo99 Platform integrates third-party game content provided by licensed game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These game environments operate within the jo99 Platform interface but are governed in part by the data practices of the respective game provider. jo99 does not control and is not responsible for the privacy practices of third-party game providers beyond the contractual data processing agreements in place.

The Platform does not contain links to external third-party websites. If jo99 ever provides links to external resources in the future, those third-party sites will operate under their own privacy policies and jo99 accepts no liability for their data practices.

13. Changes to This Privacy Policy

jo99 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or Platform features. Where changes are material — meaning they affect your rights or the way in which jo99 processes your personal data in a significant way — jo99 will provide at least 14 days' advance notice by email to your registered address or by a prominent notice on the Platform before the changes take effect.

Non-material clarifications or corrections (such as fixing typographical errors or improving the clarity of existing descriptions without changing their substance) may take effect immediately upon publication. The "Last Updated" date at the top of this page will always reflect the date of the most recent revision. We encourage you to review this Policy periodically to remain informed of how jo99 protects your personal data.

Your continued use of the Platform following the effective date of any revised Policy constitutes your acceptance of the changes. If you do not agree with any changes, you should close your account and withdraw your remaining balance before the revised Policy takes effect.

14. Contact Us

If you have any questions about this Privacy Policy, wish to exercise your data subject rights, or want to report a privacy concern, please reach out to the jo99 data support team using the contact details below. Our support team is available 24 hours a day, 365 days a year, on Bangladesh Standard Time (BST, UTC+6).

Data Support Email (plain text — not a clickable link):
[email protected]

Please use the subject line "Privacy Policy Enquiry" or "Data Rights Request" so your message is routed to the appropriate team member promptly. jo99 aims to acknowledge all privacy-related enquiries within five business days and to provide a full response within 30 days of receipt.

This Privacy Policy was last reviewed and updated on 1 January 2026. jo99 — Bangladesh's premier online casino and sports betting platform. 21+ Only. Gambling involves risk. Please play responsibly.