jk22 Privacy Policy

jk22 ("jk22", "we", "us", "our") operates the online casino and sports betting platform available at jk22.io and its associated sub-domains (collectively, "the Platform"). jk22 is the data controller responsible for the personal data of players who register and use the Platform.

This Privacy Policy governs all personal data collected from players based in Bangladesh and from any other individuals who interact with the jk22 Platform, whether through a desktop browser, mobile browser, or any other supported access method. It applies to all services offered on the Platform, including casino games, live dealer games, crash games, fishing games, sports betting, and payment processing.

For all privacy-related enquiries, data subject requests, or concerns, you may contact jk22 directly at: [email protected]. Our data team is available 24 hours a day, 7 days a week on Bangladesh Standard Time (BST, UTC+6).

jk22 collects personal data in several categories depending on how you interact with the Platform. The table below summarises the categories of personal data we collect and specific examples of data within each category:

jk22 does not collect sensitive personal data such as biometric data, health records, or political opinions. The only exception is where a player voluntarily discloses a gambling-related health concern when accessing responsible gaming support, in which case that disclosure is treated with the highest level of confidentiality.

jk22 collects personal data through the following methods:

• Direct collection: When you register a jk22 account, complete identity verification (KYC), make a deposit or withdrawal, contact customer support, or submit a feedback form, you provide data directly to jk22.
• Automated collection: When you access and use the Platform, jk22's systems automatically collect technical and usage data such as your IP address, device identifiers, browser details, session timestamps, and betting activity. This data is collected via server logs, session tracking tools, and first-party analytics.
• Cookies and similar technologies: jk22 uses first-party cookies and similar tracking technologies to maintain your login session, remember your preferences, and monitor Platform performance. See Section 5 (Cookies and Tracking Technologies) for full details.
• Third-party KYC providers: Where jk22 uses a third-party identity verification service to assist with KYC compliance, that provider may supply jk22 with the results of their verification checks (e.g., a verified/not-verified status) under a binding data processing agreement. jk22 does not receive raw biometric data from these providers.
• Payment providers: When you make a deposit or withdrawal via bKash, Nagad, Rocket, Upay, or a bank transfer, the relevant payment provider shares transaction confirmation data (amount, timestamp, reference number) with jk22 to credit your account balance.

jk22 processes your personal data only where there is a valid legal basis for doing so. The primary purposes for which jk22 uses your data, and the corresponding legal basis for each, are as follows:

• Contract performance: Processing your account registration, deposits, withdrawals, bet settlement, and customer support requests — all of which are necessary to deliver the services you have contracted with jk22 to receive.
• Legal obligation: Conducting KYC identity verification, age verification (21+), fraud screening, and anti-money-laundering checks in order to fulfil obligations required for responsible operation of the Platform.
• Legitimate interests: Detecting and preventing fraud, abuse, bonus exploitation, and multi-accounting; monitoring Platform performance and stability; improving the quality and security of our services. These interests are weighed against your privacy rights and do not override them.
• Consent: Sending you marketing emails, SMS promotions, and bonus offer notifications — but only where you have explicitly opted in. You may withdraw marketing consent at any time without affecting your account status.
• Responsible gaming: Monitoring your wagering patterns and usage data to identify potential problem gambling indicators, in order to offer appropriate responsible gaming interventions, deposit limits, or cooling-off tools. This processing is carried out in your direct interest as a player.

jk22 uses cookies — small text files stored on your device — and similar technologies (such as local storage and session tokens) to operate the Platform effectively and provide you with a consistent, secure experience. The following types of cookies are in use on jk22:

• Essential cookies: Required for the Platform to function. These include session authentication cookies that keep you logged in during a gaming session, and security tokens that protect your account from cross-site request forgery attacks. These cookies cannot be disabled without preventing you from using the Platform.
• Functional cookies: Remember your preferences such as language setting and display options. These are not strictly required but improve your experience on jk22.
• Analytics cookies: First-party analytics cookies that help jk22 understand how players navigate the Platform — which pages are visited most, where sessions typically begin and end, and where technical errors are encountered. This data is anonymised and used solely for Platform improvement purposes.
• Responsible gaming cookies: Store your active session duration and reality-check interval preferences to support the responsible gaming features described in the jk22 Responsible Gaming page.

jk22 does not use third-party advertising cookies or behavioural tracking cookies to serve advertisements on external websites. You may manage cookie preferences through your browser settings at any time. Please note that disabling essential cookies will prevent you from logging into your jk22 account.

jk22 does not sell your personal data. We share your data only in the following limited and controlled circumstances:

• KYC and identity verification providers: jk22 may share identity document images and personal details with trusted third-party KYC verification providers for the purpose of confirming your age and identity. These providers operate under binding data processing agreements and are prohibited from using your data for any purpose other than verification on jk22's behalf.
• Payment processors: To facilitate deposits and withdrawals, jk22 shares the minimum necessary financial data with payment service providers including bKash, Nagad, Rocket, Upay, and participating banks (Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank). These providers have independent privacy policies governing how they handle payment data on their own platforms.
• Game providers: When you launch a casino game supplied by a third-party studio (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Ezugi), a session token and minimal gameplay data is shared with that provider's game servers to load and operate the game. Game providers do not receive your full profile or payment data.
• Fraud prevention services: jk22 may share technical data (IP address, device fingerprint, transaction metadata) with fraud prevention service providers to detect and block suspicious activity. This sharing occurs under contractual data protection safeguards.
• Legal and regulatory disclosure: jk22 will disclose personal data to law enforcement agencies, regulatory bodies, or courts if required to do so by applicable law, or where jk22 reasonably believes that disclosure is necessary to prevent fraud, money laundering, or serious harm.
• Business succession: In the event of a merger, acquisition, or sale of substantially all of jk22's assets, player data may be transferred to the acquiring entity as part of that transaction. Players will be notified of any such transfer by email at least 30 days in advance.

jk22 retains your personal data only for as long as it is necessary to fulfil the purposes for which it was collected, or as required to comply with applicable legal, regulatory, and operational obligations. The following general retention periods apply:

• Account data (identity, contact, financial): Retained for the duration of your active jk22 account plus a minimum of 5 years following account closure, in order to comply with anti-money-laundering record-keeping requirements and to handle any retrospective disputes or legal claims.
• KYC documents: Identity verification documents are retained for a minimum of 5 years following account closure and are stored in encrypted format with access restricted to authorised compliance personnel only.
• Transaction records: Full deposit, withdrawal, and betting history records are retained for a minimum of 5 years following the date of each transaction.
• Support communications: Live chat transcripts and support email threads are retained for 2 years following the date of the conversation, after which they are permanently deleted.
• Technical / usage data: Anonymised and aggregated usage analytics are retained indefinitely for Platform improvement purposes. Raw session logs containing IP addresses are retained for 12 months and then deleted.
• Marketing preference records: Consent records for marketing communications are retained for 5 years from the date of consent or withdrawal of consent, for compliance documentation purposes.

Upon the expiry of the applicable retention period, personal data is securely and permanently deleted or anonymised in a manner that prevents re-identification. You may request early deletion of your data (subject to legal retention obligations) as described in Section 9.

jk22 applies a layered approach to data security, combining technical controls, organisational policies, and staff training to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Key security measures in place include:

• SSL/TLS encryption: All data transmitted between your device and the jk22 Platform is encrypted in transit using industry-standard SSL/TLS protocols. You will always see a secure connection indicator in your browser when using jk22.
• Encryption at rest: Personal data and financial records stored on jk22's servers are encrypted at rest using AES-256 encryption. Encryption keys are managed under a strict key management policy with regular rotation.
• Access controls: Access to personal data systems is restricted on a role-based, need-to-know basis. Staff with access to player data are required to use strong unique credentials and multi-factor authentication.
• Regular security reviews: jk22 conducts periodic internal security reviews and vulnerability assessments of its Platform infrastructure. Critical vulnerabilities are addressed as a priority within defined response timeframes.
• Incident response: In the event of a data breach that poses a risk to player rights, jk22 will notify affected players by email without undue delay and take immediate steps to contain and remediate the breach.

While jk22 applies commercially reasonable security measures, no online platform can guarantee absolute security. If you suspect that your account has been compromised, contact [email protected] immediately and change your password without delay.

As a jk22 player, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, contact jk22 at [email protected]. jk22 will respond to all verified data subject requests within 14 business days.

• Right of access: You may request a copy of the personal data that jk22 holds about you, including the categories of data processed, the purposes of processing, and any third parties with whom your data has been shared.
• Right to rectification: If any personal data held by jk22 is inaccurate or incomplete, you have the right to request that it be corrected or updated. You may also update certain account details directly from within your jk22 account settings.
• Right to erasure ("right to be forgotten"): You may request that jk22 delete your personal data. Note that jk22 may be unable to fulfil this request in full where retention is required by law (e.g., anti-money-laundering record-keeping obligations). In such cases, jk22 will inform you of the specific data categories that must be retained and the applicable legal basis.
• Right to restriction of processing: You may request that jk22 restrict the processing of your personal data in certain circumstances — for example, while jk22 investigates a data accuracy dispute you have raised.
• Right to data portability: Where processing is based on your consent or contract performance, you may request that jk22 provide your personal data in a structured, commonly used, machine-readable format so that you can transfer it to another service provider.
• Right to withdraw consent: Where jk22 processes your data on the basis of your consent (primarily for marketing communications), you may withdraw that consent at any time. Withdrawing consent does not affect the lawfulness of any processing that occurred before withdrawal.
• Right to object: You may object to jk22 processing your personal data on the basis of legitimate interests. jk22 will then assess whether its legitimate interests are overridden by your privacy rights in the specific circumstances.

jk22 will not charge a fee for handling routine data subject requests. jk22 reserves the right to charge a reasonable administrative fee for requests that are manifestly unfounded, excessive, or repetitive. Before processing a data subject request, jk22 may ask you to verify your identity by providing a copy of your registered identity document.

The jk22 Platform is strictly intended for adults aged 21 years and above. jk22 does not knowingly collect personal data from any individual under the age of 21. Our registration process includes date-of-birth verification and KYC identity checks specifically designed to prevent underage access.

If jk22 becomes aware that personal data has been collected from an individual under the age of 21 — whether through a misrepresentation at registration or any other means — jk22 will immediately close the relevant account, return any withdrawable balance to the registered payment method, and permanently delete all personal data associated with that account.

The jk22 Platform hosts casino games supplied by third-party game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. When you launch a game from one of these providers, the game loads within the jk22 environment but the game server itself is operated by the relevant provider. These providers have their own privacy practices governing the minimal gameplay session data processed on their servers.

jk22 does not control the data practices of third-party game providers and is not responsible for their privacy policies. jk22 recommends that you review the privacy documentation of any third-party game studio if you have specific concerns about how gameplay data is handled at the provider level.

The jk22 Privacy Policy applies solely to data collected and processed by jk22 itself. Any links within the Platform that lead to external websites or third-party services are clearly identified, and jk22 is not responsible for the privacy practices of those external destinations.

jk22 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, Platform functionality, applicable law, or regulatory guidance. When material changes are made, jk22 will:

• Notify all registered players by email at least 7 days before the revised policy takes effect
• Display a prominent notice on the jk22 Platform homepage and login page for the same 7-day notice period
• Update the version number and "Last Updated" date shown at the top of this document

Your continued use of the jk22 Platform following the effective date of any updated Privacy Policy constitutes your acknowledgement and acceptance of the revised terms. If you do not agree with the changes, you must stop using the Platform and may request account closure by contacting [email protected] before the updated policy takes effect.

The most current version of this Privacy Policy is always available at jk22.io/privacy-policy. Previous versions are retained by jk22 for internal records and can be requested by emailing [email protected].

For all privacy-related enquiries, data subject rights requests, marketing opt-out requests, or data breach reports, please contact the jk22 data team using the details below. All communications are handled in strict confidence.

• Email: [email protected] (plain text — not a clickable link)
• Subject line: Please use "Privacy Request" or "Data Subject Request" as your email subject for faster routing to the correct team
• Response time: jk22 will acknowledge your request within 3 business days and provide a full response within 14 business days of verifying your identity
• Operating hours: 24 hours a day, 7 days a week — Bangladesh Standard Time (BST, UTC+6)

When submitting a data subject request by email, please include your registered jk22 username and the email address associated with your account so that we can locate your records efficiently. jk22 may ask you to provide a copy of your identity document to verify the request before processing it.