jllll Privacy Policy — How We Collect, Use, and Protect Your Data

1. Introduction

jllll ("we", "us", "our") is committed to protecting the privacy and personal data of all players who register and use the jllll platform at jllll.io. This Privacy Policy describes our practices regarding the collection, use, storage, and disclosure of personal information in connection with the jllll casino and sports betting services offered to players in Bangladesh.

This Policy applies to all personal data collected through the jllll website, any customer support channels, and any communications we send to registered players. It covers data collected from players based in Bangladesh and is written in English as the operational language of the jllll platform.

We encourage you to read this Privacy Policy in its entirety alongside our Terms & Conditions and Responsible Gaming page to obtain a complete picture of your rights and our obligations as a platform operator.

2. Data Controller

For the purposes of this Privacy Policy, the data controller responsible for your personal information is the jllll platform operating under the domain jllll.io. As data controller, jllll determines the purposes and means by which personal data is processed and is accountable for ensuring that such processing complies with applicable data protection principles.

All data protection enquiries, access requests, and complaints may be directed to the jllll data protection team at [email protected]. We aim to acknowledge all data-related enquiries within 48 hours and to provide a substantive response within 14 calendar days.

3. Personal Data We Collect

The categories of personal data jllll collects about you depend on how you interact with the platform. The table below summarises the primary data categories and examples of specific data points within each:

jllll does not intentionally collect or process special categories of sensitive personal data such as health information, racial or ethnic origin, political opinions, or biometric data, except where a document submitted for identity verification incidentally contains such information (for example, a national identity card photograph).

4. How We Collect Your Data

4.1 Data You Provide Directly

The majority of personal data jllll holds is provided directly by you during the registration process, the KYC verification process, when making deposits or withdrawal requests, when contacting customer support, or when updating your account profile or preferences. You are under no legal obligation to provide this data, but failure to provide required information may prevent us from opening or maintaining your account or processing transactions.

4.2 Data Collected Automatically

When you access and use the jllll platform, certain technical data is collected automatically by our systems. This includes your IP address, the type and version of your browser, your device's operating system, the pages you visit on jllll.io, the time and duration of your sessions, and the clickstream path through the platform. This data is used for security monitoring, fraud prevention, and platform performance optimisation. It is not used to identify you personally in isolation but may be combined with your account data for security or compliance purposes.

4.3 Data from Third Parties

jllll may receive personal data about you from third-party sources in limited circumstances, including:

• Identity verification service providers who confirm the authenticity of documents submitted during KYC
• Payment service providers (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank) who confirm deposit and withdrawal transactions
• Fraud prevention and anti-money laundering screening services that flag accounts associated with known fraudulent patterns
• Responsible gaming databases where you have registered a self-exclusion applicable to the jllll platform

In each case, data received from third parties is used only for the specific purpose for which it was shared and is not combined with your jllll account data for marketing purposes.

5. Purposes of Processing

jllll processes your personal data for the following defined purposes:

• Account Management: Creating, maintaining, and administering your jllll account, including authentication and access control.
• KYC and Age Verification: Verifying that you meet the minimum age requirement of 21 years and confirming your identity in compliance with anti-money laundering obligations.
• Payment Processing: Facilitating deposits via bKash, Nagad, Rocket, Upay, and supported Bangladeshi banks, and processing withdrawal requests to your verified payment method.
• Game Delivery and Fairness: Delivering casino games and sports betting markets, recording game outcomes, and maintaining the integrity of all betting records.
• Fraud and Security: Detecting, preventing, and investigating fraudulent activity, account compromise, bonus abuse, and other security threats.
• Responsible Gaming: Monitoring gaming patterns to identify potentially problematic behaviour, enforcing deposit limits and self-exclusion requests, and fulfilling our duty of care obligations.
• Customer Support: Responding to enquiries, resolving disputes, and processing complaints submitted to [email protected].
• Legal Compliance: Meeting obligations under applicable anti-money laundering, counter-terrorism financing, and financial record-keeping requirements.
• Platform Improvement: Analysing aggregated, anonymised usage data to improve the design, performance, and game selection of the jllll platform.
• Marketing (with consent): Sending promotional communications about bonuses, new games, cricket betting markets, slots, and seasonal offers where you have explicitly opted in.

6. Legal Basis for Processing

jllll processes personal data only where a valid legal basis exists. The primary legal bases applied to jllll's data processing activities are:

• Contract Performance: Processing necessary to open your account, deliver games, and process payments pursuant to the jllll Terms & Conditions you accepted at registration.
• Legal Obligation: Processing required to comply with anti-money laundering regulations, KYC obligations, and financial record-keeping requirements.
• Legitimate Interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and platform analytics — where these interests are not overridden by your privacy rights.
• Consent: Processing for direct marketing communications and the use of non-essential cookies, where you have provided explicit, freely given consent that may be withdrawn at any time.

7. Data Sharing and Disclosure

7.1 Service Providers

jllll shares personal data with carefully selected third-party service providers who assist in delivering the jllll platform and its associated services. These include:

• KYC and identity verification providers
• Payment processing partners (bKash, Nagad, Rocket, Upay, and partner banks)
• Game studio technology partners (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and others) who may receive limited session data necessary to deliver their games
• Cloud hosting and data storage providers operating secure, access-controlled infrastructure
• Fraud detection and AML screening service providers
• Customer support platform providers

All third-party service providers are bound by contractual data processing agreements that restrict their use of your data to the specific purposes for which it was shared. They are prohibited from using your data for their own marketing or commercial purposes.

7.2 Legal Disclosures

jllll may disclose personal data to law enforcement agencies, regulatory authorities, financial intelligence units, or courts where required to do so by applicable law, a valid legal order, or where jllll reasonably believes disclosure is necessary to prevent fraud, protect the safety of a player, or enforce its Terms & Conditions. Where legally permitted, jllll will notify affected players of such disclosures.

7.3 No Sale of Data

jllll does not sell, rent, trade, or otherwise transfer personal data to third parties for their own marketing, advertising, or commercial purposes. This prohibition applies absolutely and without exception.

8. International Data Transfers

Due to the global nature of internet infrastructure and the use of third-party service providers with international operations, your personal data may be transferred to and processed in countries outside Bangladesh. Where such transfers occur, jllll takes reasonable steps to ensure that appropriate safeguards are in place, including contractual protections equivalent to recognised international data protection standards, to protect your data during transfer and processing in jurisdictions that may not have data protection laws equivalent to those in Bangladesh.

By using the jllll platform, you acknowledge and consent to the transfer of your personal data as described in this section.

9. Data Retention

jllll retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods:

• Account and KYC data: Minimum 5 years from account closure, in compliance with anti-money laundering record-keeping obligations.
• Transaction and financial records: Minimum 5 years from the date of each transaction.
• Gaming and betting history: Minimum 3 years from the date of each game or bet, retained for dispute resolution and fairness audit purposes.
• Customer support correspondence: 3 years from the date of the most recent interaction.
• Marketing preference records: Until you withdraw consent, plus 1 year thereafter as evidence of the consent record.
• Technical and log data: Up to 12 months from the date of collection, unless required for an active security investigation.

Upon the expiry of the applicable retention period, data is securely and permanently deleted or irreversibly anonymised so that it can no longer be associated with your identity.

10. Security Measures

jllll implements a layered, defence-in-depth approach to data security. Key security measures in place to protect your personal data include:

• Encryption in Transit: All data transmitted between your browser or device and jllll.io is encrypted using TLS 1.2 or higher (256-bit SSL). Connections via unencrypted HTTP are automatically redirected to HTTPS.
• Encryption at Rest: Sensitive data fields including financial information and KYC document copies are encrypted at rest using industry-standard encryption algorithms.
• Access Controls: Access to personal data is restricted to jllll personnel and authorised service providers on a strict need-to-know basis. All access is logged, monitored, and subject to regular review.
• Password Security: Player passwords are stored in hashed form using a one-way cryptographic hash function. jllll staff cannot retrieve plaintext passwords and will never ask you for your password.
• Fraud Monitoring: Automated systems monitor account activity continuously for patterns consistent with unauthorised access, account takeover, or fraudulent behaviour, triggering alerts for manual review where thresholds are exceeded.
• Security Audits: jllll conducts regular internal security reviews and engages third-party security specialists to perform penetration testing on a periodic basis.

While jllll employs robust security measures, no internet-based platform can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights, jllll will notify affected players promptly and take all reasonable steps to contain and remediate the breach.

11. Cookies and Tracking Technologies

11.1 What Are Cookies

Cookies are small text files placed on your device by a website when you visit it. jllll uses cookies and similar tracking technologies (including local storage and session tokens) to operate the platform, remember your preferences, maintain your login session, and analyse platform usage patterns.

11.2 Types of Cookies Used by jllll

• Strictly Necessary Cookies: Required for the platform to function. These include session management cookies, security tokens, and cookies that keep you logged into your jllll account. These cannot be disabled.
• Functional Cookies: Used to remember your preferences such as language settings (English), preferred game categories, and responsible gaming configuration. Disabling these may affect platform functionality.
• Analytics Cookies: Used in anonymised or aggregated form to understand how players navigate jllll.io, which games are most popular, and where technical issues arise. This data is used solely to improve the platform.
• Marketing Cookies: Used only where you have provided explicit consent, to track engagement with jllll promotional content and to personalise bonus offers based on your gaming history.

11.3 Managing Cookies

You can control non-essential cookies through your browser settings, which allow you to block or delete cookies at any time. Please note that disabling certain cookies may impair the functionality of the jllll platform. Strictly necessary cookies cannot be disabled as they are essential to platform operation.

12. Your Data Rights

Subject to applicable data protection principles, you have the following rights in relation to the personal data jllll holds about you:

• Right of Access: You may request a copy of the personal data jllll holds about you, together with information about how it is processed.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data we hold.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to overriding legal retention obligations (such as AML record-keeping requirements).
• Right to Restrict Processing: You may request that jllll temporarily restrict processing of your data in certain circumstances, such as while the accuracy of the data is being contested.
• Right to Object: You may object to processing based on jllll's legitimate interests, including profiling for responsible gaming monitoring purposes, where your particular circumstances justify an objection.
• Right to Withdraw Consent: Where processing is based on your consent (such as marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
• Right to Data Portability: You may request that jllll provide your personal data in a structured, commonly used, and machine-readable format.

To exercise any of these rights, please submit a written request to [email protected] with the subject line "Data Rights Request" and your registered account details for identity verification. jllll will respond to all valid requests within 14 calendar days. In complex cases, this period may be extended by a further 14 days, with prior notice provided.

13. Minors and Under-Age Players

The jllll platform is strictly for adults aged 21 years and above. jllll does not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory step in the jllll account registration and KYC process, and accounts found to belong to under-age individuals will be closed immediately with any balance handled in accordance with our Terms & Conditions.

If you have reason to believe that a minor has registered a jllll account or that personal data of a minor is being processed by jllll, please notify us immediately at [email protected] and we will investigate and take appropriate action without delay.

14. Changes to This Privacy Policy

jllll reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or platform services. Material changes to this Policy will be communicated to registered players via the email address associated with their account at least 7 days before the amended Policy takes effect, except where immediate changes are required to address a security incident or comply with an urgent legal obligation.

The current effective version of this Privacy Policy is always accessible at jllll.io/privacy-policy. The "Effective Date" displayed at the top of this document indicates when the current version came into force. Continued use of the jllll platform following the effective date of any updated Policy constitutes acceptance of the revised terms.

15. Contact and Data Complaints

For any questions, concerns, or requests relating to this Privacy Policy or jllll's data processing practices, please contact the jllll data protection team:

• Email: [email protected] (subject line: "Privacy Enquiry")
• Response Time: Acknowledgement within 48 hours; substantive response within 14 calendar days
• Support Hours: 24/7, with priority handling during Bangladesh Standard Time business hours (9 AM – 6 PM BST, UTC+6)

If you are dissatisfied with jllll's response to a data protection complaint, you have the right to escalate the matter to the appropriate data protection authority or to seek independent legal advice. jllll encourages players to contact us in the first instance so we can attempt to resolve any concerns directly and promptly.