Privacy Policy — How jiliho Protects Your Data

1 Information We Collect

jiliho collects personal data from you through several channels: directly when you register an account or interact with the platform, automatically through your use of the website, and from third-party sources such as payment processors and identity verification services. The categories of personal data we collect are described in full below.

1.1 Registration and Account Data

When you create a jiliho account, we collect the information you provide during the registration process. This includes your full legal name as it appears on your government-issued identification document, your email address, your Bangladesh mobile phone number, your date of birth, and the password you select. This data forms the foundation of your account record and is used throughout your relationship with jiliho.

1.2 Identity Verification (KYC) Data

As part of our Know Your Customer (KYC) compliance process, jiliho may request and retain copies of identity documents. These may include your Bangladesh National Identity (NID) card, a valid passport, a birth certificate issued by a Bangladeshi government authority, and proof of address such as a recent utility bill or bank statement. Where payment method verification is required, we may also retain confirmation of the bKash, Nagad, Rocket, or bank account used for deposits. KYC documents are stored securely and accessed only by authorised compliance personnel.

1.3 Financial and Transaction Data

jiliho maintains records of all financial transactions conducted through your account, including deposit amounts, withdrawal requests, bonus credits, wager histories, and net win/loss figures — all denominated in Bangladeshi Taka (৳). We also retain transaction reference numbers issued by payment partners such as bKash and Nagad, and partial payment instrument identifiers (for example, the last four digits of a linked Visa or Mastercard). Full card numbers and full mobile banking PINs are never stored by jiliho.

1.4 Technical and Device Data

When you access jiliho via a browser or mobile device, our servers automatically record certain technical information. This includes your IP address, device type and model, operating system and version, browser type and version, screen resolution, time zone setting, and the URLs of pages visited within the jiliho platform. This data is used for security monitoring, fraud prevention, platform optimisation, and analytics purposes.

1.5 Behavioural and Usage Data

jiliho tracks how you interact with the platform, including which games you play, how long your gaming sessions last, which sports markets you browse, which promotions you view, and how you navigate between sections of the site. This behavioural data helps us personalise your experience, surface relevant promotions, and identify responsible gaming patterns that may warrant proactive outreach.

1.6 Communications Data

If you contact jiliho's customer support team via live chat or email, we retain a record of those communications, including the content of messages, timestamps, and the resolution outcome. This data is used for quality assurance, dispute resolution, and staff training purposes. Support communications are retained for a minimum of 24 months.

1.7 Summary of Data Categories Collected

2 How We Use Your Data

jiliho uses the personal data it collects for a defined set of purposes. We do not use your data for purposes that are incompatible with those stated in this policy without first obtaining your explicit consent. The primary purposes for which we process your personal data are as follows.

2.1 Account Management and Service Delivery

The core purpose for collecting your registration data is to create and maintain your jiliho account, to verify your identity and age, to process deposits and withdrawals in BDT, to award and manage bonuses, and to deliver the full range of gaming and betting services offered on the platform. Without this processing, jiliho cannot provide its services to you.

2.2 Security, Fraud Prevention, and Compliance

jiliho processes your technical data, financial transaction history, and identity documents to detect and prevent fraudulent activity, money laundering, multiple-account abuse, and underage gambling. This includes automated monitoring of unusual transaction patterns, IP-based geolocation checks, and device fingerprinting. Where suspicious activity is detected, jiliho may freeze an account and initiate a manual review. We are also required by applicable compliance standards to retain certain data for audit and investigation purposes.

2.3 Responsible Gaming Monitoring

jiliho uses your behavioural and usage data to identify patterns consistent with problem gambling — including unusually long sessions, rapid increases in deposit frequency, and self-exclusion request history. This data is processed to fulfil our duty of care to players and to enable proactive outreach by our responsible gaming team when warranted. For further details, please review our Responsible Gaming page.

2.4 Customer Support

Communications data collected during live chat sessions and support emails is used to investigate and resolve player queries, process complaints, and train our customer support team. When you contact jiliho with a question about a transaction, a bonus, or an account issue, our support agents access the relevant sections of your account record and communication history to provide an accurate and timely response.

2.5 Personalisation and Platform Improvement

Behavioural data is used to personalise the jiliho experience — for example, surfacing cricket markets that match your historical betting preferences, or recommending slot titles similar to games you have played previously. Aggregated and anonymised usage data is also used to improve the platform's design, performance, and game catalogue.

2.6 Marketing Communications (Consent-Based)

Where you have explicitly opted in to receive marketing communications, jiliho may contact you via email or SMS to inform you of new promotions, bonus offers, tournament announcements, and seasonal campaigns — such as those tied to Eid, Pohela Boishakh, BPL, or IPL season events. You may withdraw your marketing consent at any time through your account settings or by contacting [email protected] (plain text — not a link). Withdrawal of marketing consent does not affect our ability to send transactional communications (such as deposit confirmations and withdrawal notifications), which are sent regardless of marketing preference.

3 Data Sharing & Disclosure

jiliho does not sell your personal data to third parties. However, in certain defined circumstances, we share data with trusted third-party service providers and, where legally required, with authorities. All third-party data processors engaged by jiliho are contractually required to handle your data securely and to use it only for the specific purpose for which it was shared.

3.1 Payment Processing Partners

To process your deposits and withdrawals, jiliho shares the minimum necessary financial data with our payment processing partners. In the case of bKash, Nagad, Rocket, and Upay transactions, this means sharing your registered mobile number and transaction reference information. For bank transfers, relevant account details are shared with the participating institution (Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, or Sonali Bank as applicable). For Visa and Mastercard transactions, data is shared with the relevant card network and acquiring bank. No payment partner receives access to your full jiliho account history or KYC documents.

3.2 Identity Verification Providers

jiliho may use third-party identity verification services to assist with KYC document checks. Where this occurs, your identity documents (NID card, passport) and the personal data contained within them are shared with the verification provider solely for the purpose of confirming your identity and age. Verification providers are prohibited from retaining your documents beyond the period required to complete the check.

3.3 Game Software Providers

jiliho's platform hosts games and live casino content from third-party studio providers including Pragmatic Play, Evolution Gaming, Spribe, Ezugi, NetEnt, and Microgaming. These providers may receive anonymised session data (such as a session token or player ID, not your name or contact details) to facilitate game loading, result recording, and RTP auditing. They do not receive your full personal profile.

3.4 Fraud Detection and Security Services

jiliho uses third-party fraud detection and cybersecurity tools that may process your technical data (IP address, device fingerprint, behavioural signals) for the purpose of identifying and blocking fraudulent activity. These tools operate in the background and do not have access to your personal communications or full financial history.

3.5 Legal and Regulatory Disclosure

jiliho will disclose your personal data to law enforcement agencies, regulatory bodies, or other government authorities when required to do so by applicable law, a court order, or a lawful investigative request. In such cases, jiliho will disclose only the minimum data necessary to comply with the legal obligation and will, where legally permitted, notify the affected account holder of the disclosure.

4 Cookies & Tracking Technologies

jiliho uses cookies and similar tracking technologies on its website to ensure the platform functions correctly, to maintain your session while you are logged in, to remember your preferences, and to collect analytics data that helps us improve the platform. This section explains what cookies we use and how you can manage them.

4.1 What Are Cookies?

Cookies are small text files placed on your device by a website when you visit it. They allow the website to recognise your device on subsequent visits, maintain your session state, and store preferences you have set. Cookies themselves do not contain executable code and cannot access other files on your device.

4.2 Categories of Cookies Used by jiliho

4.3 Managing Your Cookie Preferences

Strictly necessary cookies cannot be disabled as they are essential to the operation of the jiliho platform. For all other cookie categories, you can manage your preferences through your browser's built-in cookie controls. Most modern browsers allow you to block, delete, or receive alerts before cookies are set. Please be aware that disabling functional or analytics cookies may affect your platform experience — for example, your game history preferences may not be retained between sessions.

4.4 Local Storage and Similar Technologies

In addition to cookies, jiliho may use browser local storage and session storage to retain small amounts of data on your device — for example, to cache game assets and improve loading speed on subsequent visits. This data is stored locally on your device and is not transmitted to jiliho's servers independently of your regular browsing activity.

5 Data Retention

jiliho retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, or for as long as is required by applicable legal, regulatory, or compliance obligations. We do not retain data beyond the period for which a legitimate purpose exists.

5.1 Account Data

Your core account data — including your registration details, KYC documents, and account history — is retained for the duration of your active account relationship with jiliho and for a minimum of 5 years following permanent account closure. This retention period reflects standard financial record-keeping obligations.

5.2 Transaction Data

All financial transaction records, including deposit confirmations, withdrawal histories, and bonus credit logs denominated in BDT, are retained for a minimum of 5 years from the date of each transaction. This is consistent with financial compliance requirements applicable to operators handling real-money transactions.

5.3 Communications Data

Live chat transcripts and support email records are retained for a minimum of 24 months from the date of the most recent interaction. Records relating to a formal complaint or dispute are retained for a minimum of 5 years from the date of final resolution.

5.4 Technical and Analytical Data

IP address logs and device fingerprint data collected for fraud prevention purposes are retained for up to 12 months from the date of collection. Aggregated analytics data (which cannot be linked back to individual players) may be retained for longer periods for platform improvement purposes.

5.5 Marketing Data

Records of your marketing consent status — including the date and method by which consent was given or withdrawn — are retained for the duration of your account relationship and for 3 years following account closure. This allows jiliho to demonstrate compliance with consent requirements if a dispute arises.

6 Data Security Measures

jiliho takes the security of your personal data seriously and implements a multi-layered approach to protecting player information from unauthorised access, disclosure, alteration, and destruction. No online platform can guarantee absolute security, but jiliho applies industry-standard technical and organisational measures to minimise the risk of a data security incident.

6.1 Encryption in Transit

All data transmitted between your browser or mobile device and jiliho's servers is protected by SSL/TLS encryption (minimum TLS 1.2). This means that any data you enter on the jiliho platform — including your login credentials, payment details, and personal information — is encrypted during transmission and cannot be read by any party intercepting the connection.

6.2 Encryption at Rest

Sensitive data stored in jiliho's databases — including KYC documents, NID card copies, and passport images — is encrypted at rest using AES-256 encryption. Database access is restricted to authorised personnel only, and access events are logged for audit purposes.

6.3 Access Controls

Access to personal data within jiliho's internal systems is governed by the principle of least privilege. Staff members are granted access only to the data required to perform their specific job function. Customer support agents, for example, can view account details relevant to resolving a query but cannot access KYC document images or full financial histories without an escalated access request. All internal access is logged and subject to periodic review.

6.4 Two-Factor Authentication

jiliho strongly encourages all players to enable two-factor authentication (2FA) on their accounts. When 2FA is active, logging into your jiliho account from a new device requires both your password and a one-time verification code sent to your registered Bangladesh mobile number. This significantly reduces the risk of unauthorised access, even in the event that your password is compromised.

6.5 Security Incident Response

In the event of a data security incident that affects your personal data, jiliho will assess the severity of the breach, take immediate steps to contain it, and notify affected players via their registered email address within a reasonable timeframe. We will provide details of the nature of the incident, the categories of data affected, the steps jiliho has taken in response, and the actions you should take to protect yourself.

7 Your Privacy Rights

As a jiliho player, you hold a number of rights in relation to the personal data we hold about you. jiliho is committed to honouring these rights in a timely and transparent manner. To exercise any of the rights described below, please contact our support team via live chat or email [email protected] (plain text — not a link) with the subject line "Privacy Rights Request".

7.1 Right of Access

You have the right to request a copy of the personal data jiliho holds about you. Upon receiving a valid access request and confirming your identity, jiliho will provide a summary of your personal data within 30 days. This summary will cover the categories of data held, the purposes for which it is processed, and any third parties with whom it has been shared.

7.2 Right to Rectification

If any personal data jiliho holds about you is inaccurate or incomplete, you have the right to request that it be corrected. For example, if your name is misspelled in our records or your registered mobile number is outdated, you may request an update. jiliho will action valid rectification requests within 14 days, subject to identity verification.

7.3 Right to Erasure

You have the right to request the deletion of your personal data where: the data is no longer necessary for the purpose for which it was collected; you withdraw consent and no other legal basis for processing exists; or the data has been processed unlawfully. As noted in the Data Retention section, certain data cannot be deleted before mandatory retention periods have elapsed. Where a deletion request cannot be fully actioned, jiliho will explain the reason in writing.

7.4 Right to Restrict Processing

In certain circumstances — for example, while a dispute about the accuracy of your data is being resolved — you may request that jiliho restrict the processing of your personal data. During a restriction period, your data will be stored but not actively used except for the purpose of resolving the dispute.

7.5 Right to Object to Marketing

You have the absolute right to object to jiliho processing your personal data for direct marketing purposes. Upon receiving a valid objection, jiliho will immediately stop sending marketing communications to you. Transactional communications (deposit confirmations, withdrawal notifications, security alerts) are not considered marketing and will continue to be sent as they are essential to your account.

7.6 Right to Data Portability

Where jiliho processes your personal data on the basis of your consent or contractual necessity, you have the right to request that your data be provided to you in a structured, machine-readable format (such as a CSV file). This right applies to data you have actively provided to jiliho, such as your registration details and transaction history.

8 Policy Updates & Contact

8.1 Changes to This Privacy Policy

jiliho reserves the right to update, amend, or revise this Privacy Policy at any time. Changes may be made to reflect developments in applicable data protection standards, changes in jiliho's data processing practices, or updates to the services offered on the platform. When material changes are made to this policy, jiliho will notify registered players via their registered email address and update the "Last Updated" date and version number displayed at the top of this document. Continued use of the jiliho platform after the effective date of a revised Privacy Policy constitutes your acceptance of the revised terms.

8.2 Third-Party Websites

The jiliho website does not contain links to third-party websites. However, if at any point you navigate from jiliho to an external site — for example, by entering a URL directly — please be aware that this Privacy Policy does not apply to those external sites. jiliho has no control over and accepts no responsibility for the privacy practices of any third-party website.

8.3 Children and Minors

The jiliho platform is strictly for adults aged 18 and above. jiliho does not knowingly collect personal data from individuals under the age of 18. If we become aware that a minor has registered an account or provided personal data, we will immediately close the account and delete the associated personal data to the extent permitted by our compliance obligations. If you believe a minor has accessed jiliho, please contact [email protected] (plain text — not a link) immediately.

8.4 Contacting Our Privacy Team

For any question, concern, or request relating to this Privacy Policy or the personal data jiliho holds about you, please contact our support team using the details below. We aim to respond to all privacy-related enquiries within 2 business days.