jk22 Privacy Policy

1Introduction

This Privacy Policy ("Policy") sets out how jk22 ("we", "us", "our", "the Platform") collects, uses, stores, shares, and protects the personal data of players and visitors who access or use the jk22 online gaming platform at jk22.one ("the Site"). This Policy applies to all users of the Site, including registered players, visitors who browse without registering, and individuals who contact jk22 through any channel including live chat and email.

By registering an account on jk22 or by continuing to use the Site, you confirm that you have read and understood this Policy and that you consent to the collection and use of your personal data as described herein. If you do not agree with this Policy, you must not use the Site. This Policy should be read alongside our Terms and Conditions, which are available at jk22.one/terms-conditions and govern your use of the platform.

2Information We Collect

jk22 collects personal data through several channels: directly from you when you register, deposit, or contact support; automatically through your use of the platform; and from third-party sources such as payment processors and identity verification services. The categories of personal data we collect are described in the table below.

jk22 does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data beyond what is strictly required for identity verification as part of the KYC process. If such data is incidentally included in documents submitted for KYC, it is used solely for verification purposes and is not processed for any other purpose.

3How We Use Your Information

jk22 processes your personal data only for specific, legitimate purposes that are proportionate to the data collected. We do not use your personal data in any manner that is incompatible with the purposes for which it was collected. The primary purposes for which we use your personal data are as follows.

• Account creation and management: to register your account, verify your identity, authenticate your logins, and manage your account settings and preferences throughout your relationship with jk22.
• Processing financial transactions: to process your deposits, withdrawals, and any bonus payments; to maintain accurate records of all financial activity on your account; and to comply with anti-money laundering (AML) obligations.
• Customer support: to respond to your enquiries, complaints, and support requests via live chat and email, and to maintain records of communications to ensure consistent service quality and dispute resolution.
• Responsible gaming compliance: to monitor your gaming patterns, identify signs of problem gambling, implement deposit limits or self-exclusion measures where requested, and to fulfil our obligation to provide a safe gaming environment to all players.
• Platform improvement and analytics: to analyse aggregate, anonymised usage data to understand how players use jk22, identify technical issues, improve game selection and platform performance, and develop new features that better serve Bangladesh players.
• Fraud prevention and security: to detect, investigate, and prevent fraudulent activity, money laundering, identity theft, and other prohibited conduct on the platform; to protect the financial integrity of the platform and the interests of legitimate players.
• Marketing and promotions: where you have given your consent or where we have a legitimate interest, to send you information about jk22 promotions, bonuses, new game releases, and seasonal offers relevant to Bangladesh players such as BPL season offers and Eid promotions.

Where jk22 intends to use your personal data for a purpose that is new or materially different from the purposes described in this Policy, we will notify you in advance and, where required, seek your consent before doing so. You will always have the option to object to new processing purposes.

4Legal Basis for Processing

jk22 processes your personal data on the basis of one or more of the following legal grounds. The applicable legal basis depends on the specific processing activity and the nature of the data involved.

• Contractual necessity: Processing that is necessary to perform the contract between you and jk22 — for example, processing your account registration details, executing your deposits and withdrawals, and settling your bets. Without this processing, jk22 could not provide the services you have contracted for.
• Legal obligation: Processing that is necessary for jk22 to comply with a legal obligation, including KYC/AML requirements, age verification obligations, responsible gaming regulations, and any reporting obligations to relevant authorities.
• Legitimate interests: Processing carried out on the basis of jk22's legitimate business interests, including fraud prevention, platform security, improving user experience, and sending marketing communications where the player has not opted out, provided jk22's interests do not override your fundamental privacy rights.
• Consent: Where jk22 relies on your consent as the legal basis for processing — for example, for certain marketing communications — you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

5Sharing Your Information

jk22 does not sell, rent, or trade your personal data to any third party for marketing or commercial purposes. We may share your personal data with third parties only in the limited circumstances described below, and only to the extent necessary for the stated purpose.

• Payment processors and mobile wallet operators: jk22 shares transaction data with bKash, Nagad, Rocket, Upay, and other payment partners strictly to the extent necessary to process your deposit and withdrawal transactions. These partners are contractually bound to protect your financial data and to use it solely for the purpose of executing the relevant transaction.
• Game providers: jk22 operates as a platform that hosts games from third-party providers including Evolution Gaming, Pragmatic Play, Spribe, Ezugi, and others. These providers may receive session and game-play data — typically a pseudonymised player identifier and session token — necessary to deliver the game experience and calculate game outcomes. They do not receive your name, contact details, or payment data.
• Identity verification services: jk22 uses third-party KYC service providers to verify the identity and age of players. These providers receive only the specific documents and data points necessary to complete verification. Verification providers are contractually bound by strict data confidentiality obligations.
• Legal and regulatory authorities: jk22 may disclose your personal data to law enforcement agencies, financial intelligence units, courts, or other government authorities where required to do so by applicable law, court order, or regulatory requirement. jk22 will disclose only the minimum data necessary to satisfy the legal obligation and will, where legally permitted, notify you of such disclosure.

6Payment Data and Financial Information

jk22 processes payment data — including bKash account numbers, Nagad wallet identifiers, Rocket numbers, bank account details, and transaction amounts — for the sole purpose of executing financial transactions on your account. Payment data is stored in encrypted form and is accessible only by authorised personnel directly involved in transaction processing, fraud investigation, or AML compliance functions.

jk22 does not store full card numbers for Visa or Mastercard transactions. Card payments are processed by PCI-DSS compliant payment gateway partners; jk22 receives only a tokenised representation of card details which cannot be used to initiate new transactions without re-authorisation by the cardholder. Full payment card data is never stored on jk22 servers.

7Cookies and Tracking Technologies

jk22 uses cookies and similar tracking technologies (such as local storage tokens and session identifiers) to operate and improve the platform. Cookies are small text files placed on your device when you visit the Site. They allow jk22 to recognise your device across sessions, maintain your login state, and collect analytical data about how the Site is used. The categories of cookies used by jk22 are as follows.

• Strictly necessary cookies: These cookies are essential for the Site to function correctly. They enable core features such as secure login authentication, session management, and navigation between pages. These cookies cannot be disabled without disabling core platform functionality.
• Functional cookies: These cookies remember your preferences — such as your chosen language, your preferred deposit method, and your responsible gaming settings — so that you do not need to re-enter them on each visit. Disabling these cookies may result in a degraded experience.
• Analytical cookies: These cookies collect anonymised data about how players use the Site — including which pages are visited most frequently, where players come from, how long sessions last, and what errors occur. This data is used in aggregate form only, to improve the platform. No individual player is identified through analytical cookies.
• Marketing cookies: Where you have consented to receive personalised marketing, jk22 may use cookies to track which promotions you have seen and to tailor subsequent offers to your gaming interests. You can withdraw consent for marketing cookies at any time by contacting support or adjusting your account privacy settings.

You can manage cookie preferences through your mobile browser settings. Please note that disabling strictly necessary cookies will prevent you from logging in to or using the jk22 platform. jk22 does not use third-party advertising networks or social media tracking pixels on the Site.

8Data Retention

jk22 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected or as required by applicable legal obligations. The retention periods below reflect our standard data retention schedule.

• Account data (name, contact details, KYC documents): Retained for the duration of your active account plus 5 years following account closure, to satisfy AML, fraud investigation, and dispute resolution obligations.
• Financial transaction records: Retained for a minimum of 7 years from the date of each transaction in accordance with financial record-keeping requirements applicable to online payment operations.
• Support communications: Retained for 3 years from the date of the communication, to enable consistent dispute resolution and to support any investigations into platform conduct or player complaints.
• Technical logs (IP addresses, session data): Retained for 12 months from the date of generation, after which they are automatically deleted or anonymised. Logs associated with an open fraud investigation or legal proceeding may be retained for longer.

When personal data is no longer required for any of the above purposes, jk22 will securely delete or anonymise it. Where technical constraints prevent immediate deletion, the data will be isolated from active processing systems and scheduled for deletion at the earliest practicable opportunity.

9Your Data Rights

As a player whose personal data is processed by jk22, you hold the following rights in relation to your data. To exercise any of these rights, contact the jk22 privacy team at [email protected] with the subject line "Privacy Rights Request". jk22 will respond to all verified rights requests within 30 days.

Please note that certain rights are subject to limitations where jk22 is required to retain data to comply with legal obligations — for example, financial transaction records that must be kept for regulatory purposes cannot be deleted simply on request. jk22 will always clearly explain any limitations that apply to your specific request and will fulfil the request to the maximum extent that applicable law permits.

10Security Measures

jk22 applies a multi-layered approach to data security, combining technical, organisational, and procedural controls to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. Our security infrastructure is reviewed and updated on a regular basis to address evolving threats.

• 256-bit SSL/TLS encryption is applied to all data in transit between your device and our servers. All sensitive data at rest — including identity documents, payment method details, and account credentials — is stored using AES-256 encryption.
• Access to personal data within jk22 is restricted on a strict need-to-know basis. Personnel who have legitimate access to personal data are subject to confidentiality obligations and receive regular data protection training. Access logs are maintained for all access to sensitive data records.
• jk22 conducts regular security assessments, including vulnerability scanning and penetration testing of the platform's technical infrastructure. Identified vulnerabilities are remediated within defined timeframes according to their risk severity.
• In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, jk22 will notify affected players without undue delay, describing the nature of the breach, the categories of data affected, and the steps jk22 is taking to address it.

While jk22 applies robust security measures, no online platform can guarantee absolute security against all possible threats. You are responsible for keeping your account credentials — including your password and OTP codes — confidential and for notifying jk22 immediately if you believe your account security has been compromised.

11Children's Privacy

jk22 is an online gaming platform strictly intended for adults aged 21 and above. jk22 does not knowingly collect, process, or retain personal data from any person under the age of 21. All registration processes include an age confirmation step and jk22 requires KYC verification to confirm the age of players before withdrawals are processed.

12Marketing Communications

With your consent, jk22 may contact you via SMS, mobile push notification, or email to inform you of promotions, bonuses, new game releases, and seasonal offers. Examples of marketing communications you may receive include welcome bonus notifications, BPL season promotions, Eid special offers, and jk22 loyalty programme updates. You can withdraw your consent for marketing communications at any time by replying STOP to any SMS, contacting live chat, or by adjusting your notification preferences in your account settings.

If you have not opted in to marketing communications, jk22 will send you only essential service communications — such as transaction confirmations, security alerts, and account status notifications. These essential communications are not marketing and cannot be disabled while your account remains active.

13Third-Party Links and Services

The jk22 platform hosts games provided by third-party game studios. When you launch a game provided by a third-party studio, you may be interacting with software and servers operated by that studio. jk22 has contractual agreements with all game providers that restrict their use of any player data they receive to the specific purpose of delivering the game experience. However, the privacy practices of individual game studios are governed by their own privacy policies, which jk22 does not control.

jk22 is not responsible for the privacy practices of third-party game providers, payment partners, or any other external service that you interact with through the platform. If you have concerns about the privacy practices of a specific game provider, we recommend reviewing that provider's privacy policy directly. jk22 does not include links to external websites outside its own domain.

14Changes to This Privacy Policy

jk22 may update this Privacy Policy from time to time to reflect changes in our data processing practices, changes in applicable law, or improvements to the platform. Where we make a material change to this Policy — meaning a change that could reasonably be expected to affect your rights — we will notify you by displaying a notice on the platform and, where possible, by sending a notification to your registered contact details. The date at the top of this Policy always reflects the date it was last updated.

15Contact and Privacy Enquiries

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, want to report a suspected data breach, or have any other privacy-related concern, please contact the jk22 privacy team. Our support team is available 24 hours a day, 7 days a week, and will direct your enquiry to the appropriate privacy team member.

Privacy enquiries email: [email protected]