jilii Privacy Policy — How We Handle Your Personal Data

This Privacy Policy describes how jilii ("we", "us", "our"), operator of jilii.ws, collects, uses, stores, shares and protects personal information provided by users ("you", "your") who access or use the jilii platform, including the website at jilii.ws and any related services. By registering an account or using the jilii platform in any capacity, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein.

We take data privacy seriously. jilii collects only the personal information that is necessary to provide a safe, functional and legally compliant gaming service to players in Bangladesh. We do not sell your personal data to third parties for marketing purposes. All data handling practices described in this policy apply to users across Bangladesh — whether you are in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi or any other city.

When you register and use the jilii platform, we collect the following categories of personal information directly from you:

• Identity information: full name, date of birth, and any government-issued identity document details submitted during the KYC verification process.
• Contact information: mobile phone number (used as your primary account identifier and for account security notifications).
• Payment information: the identifiers associated with your registered payment method (bKash number, Nagad number, Rocket number, Upay number, or masked card number for Visa/Mastercard). Full card numbers are processed by the payment provider, not stored by jilii.
• Transaction history: a record of all deposits, withdrawals, wagers and bonus transactions on your account, maintained for fraud prevention and regulatory compliance purposes.
• Account credentials: your chosen username and an encrypted hash of your password. We never store your password in plain text.

We also collect certain technical and behavioural data automatically when you use the platform:

• Device and browser data: device type, operating system, browser type and version, screen resolution and language preference. This data is used to optimise the platform for your device.
• IP address and approximate location: used to detect and prevent fraudulent account access and to ensure the platform is not being used in jurisdictions where access is not permitted.
• Session and usage logs: pages visited, games played, bet amounts, session duration and feature interactions. These logs are used for platform improvement, responsible gaming monitoring and fraud detection.

jilii uses the personal information collected for the following specific purposes. We rely on one or more of the following legal bases for each use: contract performance (necessary to provide the service you signed up for), legal obligation (required by applicable law), legitimate interest (fraud prevention, platform security, product improvement), or your explicit consent (marketing communications).

• Account creation and management: to register your account, verify your identity in accordance with our KYC obligations, and manage your account settings and preferences throughout your time as a jilii player.
• Payment processing: to process deposits made via bKash, Nagad, Rocket, Upay, Visa and Mastercard, to facilitate withdrawals, and to maintain an accurate transaction record for your account.
• Fraud prevention and security: to monitor account activity for signs of fraud, money laundering, collusion, account sharing or other prohibited conduct; to investigate suspicious activity; and to protect the integrity of the jilii platform and the interests of legitimate players.
• Legal and regulatory compliance: to meet our obligations under applicable anti-money laundering laws, age verification requirements and any other legal obligations applicable to the operation of an online gaming platform.
• Responsible gaming: to monitor your gaming activity for patterns that may indicate problem gambling behaviour, such as rapidly escalating bet sizes, unusually long sessions or frequent rapid deposits. This monitoring is used to trigger responsible gaming interventions where appropriate.
• Marketing communications (consent-based): where you have opted in to receiving promotional communications from jilii, we will use your contact details to send you information about new games, promotions, bonuses and seasonal offers. You may withdraw your consent at any time by contacting [email protected].

jilii takes particular care with financial data. When you make a deposit or request a withdrawal via bKash, Nagad, Rocket or Upay, the transaction is processed directly between your mobile financial service account and jilii's payment gateway. jilii records the transaction reference number, amount, timestamp and associated payment method identifier. We do not store your full bKash PIN, Nagad PIN or any equivalent secret credential.

For card payments via Visa or Mastercard, full card numbers are collected and processed exclusively by our payment service provider under PCI-DSS standards. jilii receives only a masked card number (e.g. the last four digits) and a payment token for transaction reference purposes. jilii never has access to your full card number, CVV or card expiry date in an unencrypted form.

jilii does not sell, rent or trade your personal data to third parties for any purpose. We share personal information only in the following circumstances:

• Payment processors: we share transaction-level data with payment service providers (bKash, Nagad, Rocket, Upay, Visa/Mastercard network providers) strictly for the purpose of processing your deposits and withdrawals. These providers are bound by their own security and privacy obligations.
• Game content providers: your account identifier and session token are shared with third-party game studios such as Pragmatic Play, Evolution Gaming, Ezugi, Spribe and NetEnt to authenticate your game session and maintain game state. These studios do not receive your full identity or payment information.
• Identity verification services: when KYC verification is required, your identity documents and personal details may be passed to a third-party identity verification service provider for document authentication and age verification. These providers are contractually bound to handle your data in confidence.
• Law enforcement and regulatory authorities: jilii may disclose personal information to police, financial intelligence units or other government authorities if required to do so by a valid legal process, court order or applicable law. Such disclosures will be made without notice to the account holder where the law requires or permits this.

In all cases where data is shared with third parties, jilii requires that those parties treat the data with confidentiality and use it only for the specific purpose for which it was shared. jilii does not authorise any third party to use your personal data for their own independent marketing or commercial purposes.

jilii uses cookies — small text files placed on your device — to make the platform function correctly and to improve your experience. We use the following categories of cookies:

• Essential cookies: required for the platform to function. These include your session authentication cookie (which keeps you logged in during your visit), CSRF protection tokens, and load-balancing cookies. These cookies cannot be disabled without breaking platform functionality.
• Analytics cookies: used to understand how players navigate and use the platform so we can improve it. Analytics data is aggregated and anonymised before analysis; it is not used to identify individual players for marketing purposes.
• Preference cookies: used to remember your language preference and any display settings you have customised. These improve your experience on return visits but are not strictly necessary for the platform to function.

jilii does not use third-party advertising cookies, tracking pixels or cross-site behavioural tracking technologies. You may disable non-essential cookies (analytics and preference cookies) by adjusting your browser settings. Disabling essential cookies will prevent you from logging in and using the platform.

jilii retains your personal data for as long as your account is active and for a period after account closure as required by applicable law. Specifically: account registration data and KYC documents are retained for a minimum of five years following account closure, in compliance with anti-money laundering record-keeping requirements. Transaction records are retained for the same period. Session and usage logs are retained for up to twelve months , then anonymised or deleted.

If you request closure of your jilii account, we will deactivate your account and cease processing your data for service delivery purposes. However, we are legally required to retain certain records (identity documents, transaction history, KYC files) for the retention periods described above, even after your account is closed. Data held solely for marketing purposes will be deleted promptly upon account closure or upon withdrawal of your marketing consent, whichever is earlier.

As a jilii player, you have the following rights in respect of your personal data. To exercise any of these rights, please contact us at [email protected] with your registered username or phone number so we can identify your account:

• Right of access: you may request a copy of the personal data jilii holds about you. We will provide this within a reasonable timeframe, subject to identity verification.
• Right to rectification: if any personal data we hold about you is inaccurate or incomplete, you may request that we correct or update it. We will action valid rectification requests promptly.
• Right to erasure: you may request deletion of your personal data. This right is subject to our legal retention obligations — we may not be able to delete data that we are legally required to retain. We will delete all data that is not subject to a mandatory retention requirement.
• Right to restrict processing: in certain circumstances (for example, where you contest the accuracy of the data we hold), you may request that we restrict our processing of your data while the matter is resolved.
• Right to withdraw consent: where our processing of your data is based on your consent (for example, marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

We will respond to all data rights requests within 30 days of receipt. In complex cases we may extend this period by a further 30 days; if so, we will notify you of the extension and the reason for it within the initial 30-day period. There is no charge for exercising your data rights unless requests are manifestly unfounded or excessive.

jilii uses industry-standard technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration or destruction. These measures include SSL/TLS encryption for all data in transit between your browser and jilii.ws, encryption of sensitive data stored in our databases, access controls that limit internal access to personal data to authorised personnel with a verified operational need, and regular security reviews of our platform and infrastructure.

Despite our security measures, no internet-based platform can guarantee absolute security against all possible threats. You also play an important role in keeping your account secure: use a strong, unique password for your jilii account, enable any two-factor authentication features offered, do not share your login credentials with anyone, and contact support immediately if you suspect your account has been compromised.

The jilii platform is strictly for adults aged 21 and above. We do not knowingly collect personal data from individuals under the age of 21. If we discover that an account has been registered by or for a person under 21, we will immediately close the account and delete all associated personal data, subject to any mandatory retention requirements arising from the financial transactions that may have occurred. If you are a parent or guardian and believe a minor in your care has registered with jilii, please contact us immediately at [email protected] so that we can investigate and act promptly.

jilii reviews and updates this Privacy Policy periodically to reflect changes in our data handling practices, applicable law or platform features. When we make material changes to this policy, we will update the "Last updated" date at the top of this page and, where the changes significantly affect your rights, make reasonable efforts to notify active account holders via their registered contact details. Your continued use of the jilii platform following the publication of an updated Privacy Policy constitutes your acceptance of the updated policy. We encourage you to review this page from time to time to stay informed about how we protect your personal information.

If you have any questions, concerns or complaints about this Privacy Policy or about the way jilii handles your personal data, please contact our support team using the details below. Please include your registered username or mobile number in your message so we can locate your account and respond efficiently. All privacy-related enquiries are handled in confidence.