JL999 Privacy Policy — Your data is safe with us

Jl999's privacy policy applies to anyone who visits the jl999 website, opens an account, plays games, or uses any of its services — whether a registered member or an unregistered visitor, parts of this policy apply to both.

Using jl999's services means you have read and accepted this privacy policy. If you disagree with anything, please stop using the service or contact support — we are ready to explain everything.

Jl999 only collects information necessary to provide its services. Here is what we collect:

Data collected at registration:

• Full name and date of birth (for age verification)
• Mobile Number & Email Address
• Password (stored in encrypted form — even we cannot see it)
• Current Location (District/Division)

Data collected during KYC verification:

• Copy of National ID (NID) or passport
• Selfie or photo (for identity verification)
• Proof of address document (in some cases)

Data collected automatically during use:

• IP Address & Device Type
• Browser name and version
• Which pages you visited and how long you spent on them
• Transaction history and gaming activity
• Cookies & session data

Jl999 uses the data it collects for the following purposes — and these purposes only:

Jl999 never sells or shares your data with advertisers, data brokers, or any third party for commercial purposes. This is our unwavering commitment.

Jl999 does not retain your data longer than necessary. Retention periods vary by data type:

• Active account data: Retained for as long as your account remains active.
• Transaction Records: Financial transaction records must be retained for a minimum of 5 years as required by law.
• KYC Documents: May be retained for up to 5 years after account closure — in compliance with international anti-money laundering regulations.
• Support Conversations: Deleted 2 years after last contact.
• Browsing Logs: Automatically deleted after 90 days as a general rule.

Upon an account deletion request, all data beyond legal retention requirements will be permanently deleted within 30 days.

Jl999 never shares your data for commercial purposes. However, limited sharing may occur in the following circumstances:

• Payment Processors: Payment gateways such as bKash, Nagad, Rocket, and Upay receive only the minimum information needed to process transactions. Each operates under its own privacy policy.
• Legal Authorities: Data may be disclosed in compliance with a valid court order or lawful request from a government authority.
• Security Services: Service providers specializing in cybersecurity or fraud detection may receive limited technical data — but no personally identifiable information.
• Company Restructuring: In the event of any change in jl999's ownership or business structure, users will be notified in advance and assured that the same privacy standards will be maintained.

Jl999 uses cookies on its website to improve service quality and make your browsing experience smoother. A cookie is a small file stored in your browser.

Types of cookies used by jl999:

• Essential Cookies: Essential for maintaining login sessions and security. The site cannot function without these.
• Performance Cookies: To analyze which pages are visited most and where issues occur — fully anonymized.
• Functional Cookies: To remember your preferred language, theme, and other settings.

Jl999 does not use third-party advertising cookies. You can disable cookies in your browser settings, though doing so may cause some features to not work properly.

Jl999 follows the highest industry standards to protect your data. Security is ensured on both technical and organizational levels:

• Transfer Encryption: All data sent to and from the site is encrypted with TLS/SSL.
• Storage Encryption: Sensitive data stored on our servers is encrypted with AES-256.
• Access Control: Only authorized jl999 staff can access specific data — and every access is logged.
• Password hashing: Your password is never stored directly. Only a bcrypt hash is kept, so no one at jl999 can ever see your password.
• Regular Penetration Testing: Independent security experts regularly audit jl999's systems.
• Data Backup: Data is backed up regularly and all backups are encrypted.

In the unlikely event of a security breach, we will notify affected users within 72 hours and take immediate action.

As a jl999 member, you have several important rights regarding your personal data:

To exercise any of these rights, email our support team: support@jl999.world — we respond within 30 days.

Jl999 strictly enforces an 18+ policy. No data is collected from anyone under 18. Age is verified at registration, and KYC documents may be requested if there is any doubt.

If a parent discovers that their child has registered on jl999, please contact support immediately. We will close that account right away and delete all collected data.

Jl999's servers may be located in multiple countries, so your data may be processed outside of Bangladesh. Regardless of where processing takes place, the same standards set out in this Privacy Policy apply.

For international transfers, GDPR and international data protection standards are followed. Appropriate safeguards are in place to ensure the security of transfers to third countries.

Jl999 may update this Privacy Policy from time to time. When changes are made:

• A notice will be displayed at the top of the website.
• For significant changes, a notification will be sent to your registered email or mobile number.
• The date of any update will always be shown at the top of this page.
• Continued use of the service after any changes takes effect will be considered acceptance of the updated policy.

We always work to strengthen our privacy practices, never weaken them. Putting our users' interests first is at the core of everything we do.

For any privacy-related questions, complaints, or requests, please contact jl999's Data Privacy Team:

• Email: support@jl999.world (use "Privacy Request" as the subject line)
• Live Chat: Bottom-right corner of the website
• Response time: 7 days for standard requests, 24 hours for urgent ones

If we are unable to resolve your complaint to your satisfaction, you may escalate the matter to the relevant data protection authority.