Jackbit Privacy Policy: Data Protection & User Rights

Last updated: June 8, 2026

This privacy policy sets out how Jackbit collects, uses, stores and protects personal information when you access or use the platform. The policy applies to all registered users, visitors and anyone who interacts with casino, live casino, sportsbook or other services. By using Jackbit official site, you acknowledge that your personal data will be processed in accordance with the terms described below and in compliance with applicable data protection legislation. The company operates under the licence of Data Link Digital B.V., registered in Curaçao under company number 164124, and holds licence OGL/2024/1562/1139 issued by the Curaçao Gaming Authority on 15 May 2026. This policy explains what information is collected, why it is necessary, how it is protected and what rights you have over your data. The platform is intended for users aged 18 and over, and all data processing is subject to strict security and compliance measures.

Definitions and Interpretation

Certain terms used throughout this privacy policy carry specific meanings tied to how the platform operates. Understanding these definitions helps clarify how data is collected, processed and protected. The term “personal data” refers to any information that identifies or can be used to identify an individual user, including name, email address, payment details, IP address and device identifiers. “Processing” means any operation performed on personal data, whether automated or manual, such as collection, storage, use, disclosure, transfer or deletion. An “account” is the registered profile created when a user completes sign-up, providing identity and contact details to access casino, sportsbook or other services. A “device” includes any hardware used to access the platform, such as a smartphone, tablet, laptop or desktop computer. “Service” refers to the full range of products offered by Jackbit, including slots, live casino, table games, originals, crash games, sportsbook, virtual sports, promotions and VIP features. “Third party” means any external entity that provides services or support to the platform, such as payment processors, analytics providers, hosting companies, regulatory authorities and compliance partners.

Controller and Processor

Data Link Digital B.V. acts as the data controller, meaning it determines how and why personal data is processed. The controller is responsible for ensuring compliance with data protection legislation and implementing appropriate security measures. Data processors are third-party service providers who handle data on behalf of the controller, such as hosting companies, KYC verification partners and payment gateways. Processors operate under strict contractual agreements that require them to protect data and use it only for specified purposes.

User and Visitor

A “user” is any individual who has created an account and provided personal information to access platform services. A “visitor” is anyone who browses the website without registering or logging in. Both users and visitors are subject to data collection practices, although the scope and depth of data collected differ based on interaction level.

Data We Collect

Jackbit collects several categories of personal data to provide services, maintain security and comply with regulatory requirements. Data collection occurs at different stages of interaction, from browsing the website to registering an account, making deposits, placing bets, requesting withdrawals or contacting support. The platform collects identity data such as full name, date of birth, nationality and government-issued identification documents including passport, driver licence or national ID card. Contact data includes email address, registered physical address and mobile phone number if provided. Account data covers username, password, security questions, account preferences, marketing consent status and communication history with support. Payment data includes card details, e-wallet account information, crypto wallet addresses, transaction history, deposit and withdrawal records and payment method ownership proof. Technical data is collected automatically and includes IP address, browser type and version, device type and operating system, screen resolution, time zone settings, cookie identifiers, session data and referral source. Usage data tracks how the platform is used, including pages visited, games played, bet history, bonus participation, tournament activity, withdrawal requests, login frequency and interaction patterns.

Identity and Verification Data

Identity data is collected during account registration and KYC verification. The platform requires users to provide accurate personal details including full legal name, date of birth, nationality and residential address. This data is essential for age verification, compliance with anti-money laundering legislation and prevention of duplicate accounts. KYC documents such as passport, driver licence or government photo ID are requested before the first withdrawal or when triggered by security checks, large deposits above £1,000 equivalent or unusual activity patterns. Proof of address documents such as utility bills, bank statements or government correspondence dated within 90 days may also be required. Verification documents are reviewed within 24 to 72 hours for straightforward cases, although complex compliance or AML investigations may extend to 2 to 5 business days.

Payment and Transaction Data

Payment data is collected to process deposits, withdrawals and bonus claims. The platform records credit and debit card details including card number, expiry date, CVV and cardholder name, as well as alternative payment methods such as e-wallets and crypto wallet addresses. Crypto payments include BTC, USDT, USDC, ETH, SOL, XRP, TRX, LTC, BNB, DOGE, BCH, POL, DAI, SHIB, DASH, LINK and XMR. Transaction history logs all deposits, withdrawals, bonus claims, bet placements, win payouts and VIP rakeback rewards. Payment ownership verification may require bank statements, card photos with middle digits masked, e-wallet screenshots or crypto wallet ownership proof. Third-party payment methods are forbidden, and all deposits must come from accounts or wallets registered in the user’s own name.

Technical and Usage Data

Technical data is collected automatically when you access the platform. The system logs IP address, device type, browser type and version, operating system, time zone, language preference, screen resolution and cookie identifiers. Usage data tracks interaction patterns including pages visited, games accessed, bet types placed, bonus code usage, VIP points earned, tournament participation, withdrawal requests submitted and support messages sent. This data is used for analytics, fraud prevention, service improvement, personalised game recommendations and marketing optimisation.

How We Use Your Data

Personal information is processed for specific purposes directly connected to the operation, security and legal compliance of the platform. Data is used to provide casino, live casino and sportsbook services, manage user accounts, verify identity and payment methods, process deposits and withdrawals, administer bonuses and promotions, calculate VIP rakeback and tournament rewards, deliver customer support, prevent fraud and abuse, comply with regulatory and legal obligations, and improve platform functionality and user experience. Service provision includes registration, login authentication, game access, bet placement, win payouts, bonus activation and withdrawal processing. Account management covers profile updates, password resets, marketing preference changes, self-exclusion requests and account closure procedures. Identity verification and KYC checks are performed to confirm age, prevent duplicate accounts, satisfy regulatory requirements and detect false or incomplete personal data. Payment processing involves validating deposits, reviewing withdrawal requests, verifying payment ownership, detecting third-party payments and monitoring transaction patterns for AML compliance. Bonus and promotion administration includes tracking wagering requirements, enforcing max bet limits, validating promo code usage, calculating VIP rakeback and distributing tournament prizes.

Fraud Prevention and Security

Data is processed to detect and prevent fraudulent activity, bonus abuse, duplicate accounts, collusion, software exploitation, bots and automated scripts. The platform monitors login patterns, IP addresses, device fingerprints, payment methods and betting behaviour to identify unusual or suspicious activity. Security checks may trigger account restrictions, bonus cancellations or withdrawal holds until verification is completed. AML procedures involve reviewing source of funds, screening transaction history and requesting additional documentation for deposits above £1,000 or withdrawals exceeding £50,000 per 7 days.

Marketing and Communication

With user consent, data is used to send promotional emails, SMS messages, push notifications and in-platform alerts about new games, bonus offers, VIP rewards, tournament leaderboards and sportsbook events. Marketing messages may include personalised game recommendations, reload bonuses, free spin campaigns and social promo codes. Users can withdraw consent at any time by adjusting account preferences or contacting support. Transactional messages such as account confirmations, withdrawal approvals, bonus activations and security alerts are sent regardless of marketing preferences.

Analytics and Improvement

Usage and technical data are analysed to understand player behaviour, optimise platform performance, improve game recommendations, refine bonus structures and enhance mobile and desktop user experience. Analytics providers process aggregated and anonymised data to generate insights into traffic sources, conversion rates, game popularity, payment method preferences and retention patterns.

Legal Basis for Processing

Data processing is based on one or more legal grounds that comply with applicable data protection legislation. The platform processes personal data under consent, contractual necessity, legal obligation or legitimate interests. Consent is obtained when you create an account, accept the terms and conditions, tick marketing preference boxes or submit identity documents for verification. You may withdraw consent at any time, although this may limit access to certain services. Contractual necessity applies when data processing is essential to deliver the services you requested, such as registering an account, processing deposits, placing bets, paying out winnings or activating bonuses. Without this data, the platform cannot fulfil its contractual obligations. Legal obligation covers processing required by law, including age verification, AML checks, KYC procedures, source-of-funds reviews, regulatory reporting and cooperation with law enforcement or gaming authorities. Legitimate interests include fraud prevention, security monitoring, duplicate account detection, platform improvement, analytics and direct marketing to existing customers, provided these interests do not override your privacy rights.

Consent Mechanism

Consent is collected during account registration and through in-platform preference settings. Users may adjust marketing consent, cookie preferences and data-sharing options via the account control panel or by contacting support. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal. Certain data processing activities, such as KYC and AML checks, do not rely on consent and will continue under legal obligation or contractual necessity.

Contractual Necessity Scope

Processing under contractual necessity applies to core platform services including registration, login, game access, bet placement, payment processing, bonus activation, VIP reward calculation, withdrawal approval and customer support. Failure to provide required data may result in account suspension, withdrawal delays or service restrictions.

Legal Compliance Requirements

The platform is required by Curaçao gaming legislation and international AML frameworks to verify identity, monitor transactions, detect suspicious activity and report to regulatory authorities. Compliance processing includes age verification, duplicate account screening, payment ownership checks, transaction monitoring, source-of-funds reviews and cooperation with law enforcement investigations.

Data Sharing and Disclosure

Personal data is shared with third parties only when necessary to provide services, ensure security or comply with legal obligations. The platform does not sell personal data to advertisers or marketing companies. Data is shared with service providers including payment processors, hosting companies, KYC verification partners, analytics providers and customer support tools. These processors operate under strict contractual agreements that require them to protect data, use it only for specified purposes and delete it when no longer needed. Affiliates and group companies may receive data to support shared services such as fraud prevention, compliance monitoring or consolidated reporting. Regulatory authorities and law enforcement agencies receive data when required by law, including reports to the Curaçao Gaming Authority, AML compliance authorities, tax agencies and law enforcement investigations. Legal disclosures occur in response to court orders, subpoenas or regulatory requests. Data may also be shared to enforce terms and conditions, investigate fraud or abuse, protect platform security or defend legal claims. Business transfers involve data disclosure in the event of a merger, acquisition, asset sale or restructuring, provided the acquiring party agrees to protect data under equivalent terms.

Payment Processors and Gateways

Payment processors handle deposits and withdrawals for credit and debit cards, e-wallets, alternative payment methods and cryptocurrency transactions. These processors receive payment details, transaction amounts, timestamps and user identifiers. Crypto wallet addresses are validated to confirm ownership and prevent third-party deposits. Payment processors comply with PCI DSS standards and data protection legislation.

KYC and Compliance Partners

KYC verification partners process identity documents, proof of address and payment ownership evidence to confirm user identity, verify age and detect duplicate accounts. These partners use secure systems to store and review documents, and data is retained only for the period required by compliance procedures.

Analytics and Hosting Providers

Analytics providers process technical and usage data to generate insights into platform performance, user behaviour and marketing effectiveness. Hosting companies store platform data on secure servers and implement encryption, access controls and backup procedures. Analytics data is often anonymised or aggregated to protect privacy.

Data Retention

Personal data is retained only for as long as necessary to fulfil the purposes for which it was collected, comply with legal obligations or resolve disputes. Account data including identity, contact and payment details is stored while the account remains active and for a specified period after closure. The platform retains data for 5 to 7 years after account closure to satisfy regulatory, tax and AML requirements. Transaction history including deposits, withdrawals, bet records and bonus activity is stored for 7 years to comply with financial reporting and audit obligations. KYC documents such as passport copies, proof of address and payment ownership evidence are retained for 5 to 7 years after verification or account closure. Marketing consent records and communication history are stored for 3 years after consent withdrawal. Technical and usage data including IP logs, device identifiers and session data are retained for 1 to 2 years for security and analytics purposes. Anonymised data used for statistical analysis may be retained indefinitely. Data is deleted or anonymised at the end of the retention period unless legal obligations require continued storage. Users may request deletion by contacting support, although certain data may be retained to comply with legislation or defend legal claims.

Deletion Procedures

When data is no longer needed, it is permanently deleted from active systems and backups. Deletion includes removal from databases, secure erasure of documents and deactivation of account profiles. Anonymised data used for aggregate statistics is stripped of personal identifiers and cannot be linked back to individuals.

Retention Criteria

Retention periods are determined by regulatory requirements, contractual obligations, legal claims risk and operational needs. Data is reviewed periodically, and expired records are flagged for deletion. Users may request information about retention periods for specific data categories by contacting the data protection team.

Your Data Rights

You have several rights over your personal data under applicable data protection legislation. These rights allow you to access, correct, delete, restrict or object to the processing of your information. The platform provides mechanisms to exercise these rights through support channels and account settings. The right of access allows you to request a copy of the personal data held about you, including account details, transaction history, KYC documents and communication records. Access requests are processed within 30 days. The right to rectification allows you to correct inaccurate or incomplete personal data. You may update your contact details, address or payment methods via account settings or by contacting support. The right to erasure, also known as the right to be forgotten, allows you to request deletion of your personal data when it is no longer necessary, when consent is withdrawn or when processing is unlawful. Erasure may be refused if data must be retained for legal compliance, regulatory reporting or defence of legal claims. The right to restriction allows you to limit how data is processed while a dispute is resolved, such as when accuracy is contested or processing is challenged. The right to data portability allows you to receive your personal data in a structured, commonly used and machine-readable format, such as CSV or JSON, and transfer it to another service provider. The right to object allows you to oppose processing based on legitimate interests or direct marketing. Marketing objections are processed immediately, and promotional messages will cease.

How to Exercise Rights

Data rights requests must be submitted via email to support@jack.com or through the live support channel available 24/7. The platform may request additional information to verify your identity before processing the request. Requests are handled within 30 days, although complex cases may require an extension. If a request is refused, the platform will explain the reason and inform you of your right to lodge a complaint with a supervisory authority.

Limitations and Exceptions

Certain rights may be limited by legal obligations, regulatory requirements or contractual necessity. For example, KYC data cannot be deleted while the account is active or during the retention period required by AML legislation. Data may also be retained to defend legal claims, investigate fraud or comply with court orders.

Security Measures

The platform implements technical and organisational measures to protect personal data from unauthorised access, disclosure, alteration or destruction. Security controls include encryption, secure storage, access restrictions, fraud detection systems and regular security audits. All data transmitted between your device and the platform is encrypted using SSL/TLS protocols. Encryption ensures that payment details, login credentials and personal information cannot be intercepted during transmission. Stored data is encrypted at rest using industry-standard algorithms. Databases and file storage systems are secured with encryption keys managed by authorised personnel. Access to personal data is restricted to employees, contractors and service providers who need it to perform their duties. Access controls include password protection, role-based permissions and multi-factor authentication. Logs track who accessed data, when and for what purpose. Fraud detection systems monitor account activity, login patterns, IP addresses, payment methods and betting behaviour to identify suspicious activity. Alerts trigger manual review, account restrictions or bonus cancellations. Payment security includes PCI DSS compliance for card transactions, crypto wallet ownership verification and third-party payment detection. All deposits must come from accounts in the user’s own name. Regular security audits and vulnerability assessments are conducted to identify and address risks. The platform uses firewalls, intrusion detection systems and DDoS protection to defend against cyber threats.

Data Breach Response

In the event of a data breach that poses a risk to user rights, the platform will notify affected users and relevant supervisory authorities within 72 hours. Notification will include the nature of the breach, categories of data affected, likely consequences and measures taken to mitigate harm. Users will receive guidance on how to protect their accounts and personal information.

Limitations of Security

No system is completely secure, and the platform cannot guarantee absolute protection. Users are responsible for maintaining the confidentiality of their login credentials, using strong passwords and reporting suspicious activity. Sharing account access, using public Wi-Fi without VPN or falling for phishing attempts may compromise security.

Cookies and Tracking Technologies

The platform uses cookies, pixels, web beacons and similar tracking technologies to enhance user experience, analyse traffic, personalise content and deliver targeted marketing. Cookies are small text files stored on your device that record preferences, session data and activity history. You can control cookies through browser settings and account preferences. Essential cookies are necessary for platform functionality and cannot be disabled. These cookies enable login, session management, payment processing, game access and security features. Without essential cookies, the platform cannot operate correctly. Performance cookies collect information about how the website is used, including pages visited, time spent, click patterns and error messages. This data is used to improve platform performance, identify technical issues and optimise user experience. Performance cookies are often anonymised and do not identify individuals. Functional cookies remember user preferences such as language, currency, game filters and display settings. These cookies enhance convenience by personalising the interface and remembering previous choices. Marketing cookies track activity across websites to deliver targeted advertisements, measure campaign effectiveness and build user profiles. Marketing cookies may be provided by third-party networks such as Google Ads, Facebook Pixel or affiliate tracking platforms. You may opt out of marketing cookies through browser settings or cookie consent tools.

Cookie Management

You can control cookies through browser settings, in-platform cookie preferences or third-party tools. Most browsers allow you to block or delete cookies, although this may limit functionality. Instructions for managing cookies are available in browser help sections. You may also use browser extensions such as Ghostery or Privacy Badger to block trackers. Mobile users can adjust cookie settings via device privacy controls or in-app preferences.

Third-Party Cookies

Third-party cookies are set by external services such as analytics providers, payment processors and advertising networks. These cookies track activity across multiple websites and build cross-site profiles. The platform does not control third-party cookies, and you should review the privacy policies of external services to understand their data practices.

Third-Party Links and Services

The platform may contain links to external websites, social media profiles, affiliate partners or payment providers. The platform is not responsible for the privacy practices or content of third-party websites. When you click a link and leave the platform, you are subject to the privacy policy and terms of the external site. The platform does not control how third parties collect, use or share your data. External websites may use different security measures, cookie policies and data retention practices. You should review the privacy policy of any third-party service before providing personal information. Social media links may allow third parties to track your activity, build profiles and deliver targeted advertising. The platform integrates with payment processors, KYC verification partners and hosting providers that operate under their own privacy policies. These partners are contractually required to protect data and use it only for specified purposes.

External Payment Processors

Payment processors such as credit card gateways, e-wallet providers and crypto exchanges operate under their own privacy and security policies. The platform shares only the minimum data necessary to process transactions. You should review processor privacy policies to understand how they handle your information.

Affiliate and Marketing Partners

Affiliate tracking cookies may be used to identify traffic sources and attribute registrations to marketing partners. These cookies do not collect sensitive personal data, but they track referral activity and conversion events. Affiliate partners are prohibited from using data for purposes beyond attribution and commission calculation.

Children and Age Restrictions

The platform is intended exclusively for users aged 18 and over. Individuals below the legal gambling age are prohibited from creating accounts, placing bets or accessing real-money services. The platform does not knowingly collect personal data from minors. Age verification is performed during account registration and KYC checks. Users must provide accurate date of birth and identity documents that confirm legal gambling age. False age declarations may result in account closure, bonus cancellation and forfeiture of winnings. If the platform becomes aware that a minor has registered or provided personal data, the account will be closed immediately and any deposits will be returned. The platform encourages parents and guardians to monitor device usage and enable parental controls to prevent minors from accessing gambling websites. Tools such as browser restrictions, device filters and screen-time limits can help protect children from age-restricted content.

Removal of Minor Data

If you believe a minor has provided personal data, contact support immediately at support@jack.com. The platform will investigate, close the account and delete associated data within 48 hours. Deposits made by minors will be refunded to the payment source.

Parental Controls and Resources

Responsible gambling tools and parental control resources are available through support and account settings. The platform supports self-exclusion, deposit limits and account closure for users who require assistance. Additional resources such as GamCare, BeGambleAware and national gambling helplines are accessible via the responsible gambling section.

Policy Updates and Changes

This privacy policy may be updated to reflect changes in legislation, platform services, data processing practices or regulatory requirements. Updates may occur to improve transparency, clarify terminology, add new features or respond to user feedback. The platform will notify users of material changes via email, in-platform alerts or prominent website notices. The “Last updated” date at the top of the policy indicates when the most recent revision was published. Continued use of the platform after an update constitutes acceptance of the revised policy. Users are encouraged to review the policy periodically to stay informed about how data is collected, used and protected. Significant changes that affect user rights, data sharing practices or retention periods will be highlighted in notifications. You may request a copy of previous policy versions by contacting support. If you do not agree with an updated policy, you may close your account and request deletion of personal data, subject to legal retention requirements.

Notification Methods

Policy updates are communicated via email to the address associated with your account, in-platform pop-up messages upon login and announcements on the homepage or promotions section. Registered users will receive advance notice of material changes, with a summary of key updates and a link to the full revised policy.

Effective Date

The revised policy becomes effective on the date stated in the “Last updated” field. Changes apply immediately to new users and after the notification period for existing users. Data processed before the update remains subject to the previous policy unless you provide fresh consent for new processing activities.

Contact and Data Protection Inquiries

For questions, concerns or requests related to this privacy policy, data protection practices or your privacy rights, contact the platform via support@jack.com or the 24/7 live support channel. The support team handles data access requests, rectification and deletion requests, consent withdrawals, marketing opt-outs, KYC inquiries, security concerns and general privacy questions. Data protection inquiries are prioritised and processed within 30 days. For complex requests such as data portability or restriction of processing, the platform may require additional information to verify your identity and clarify the scope of the request. If you are not satisfied with how your request is handled, you have the right to lodge a complaint with a supervisory authority in your jurisdiction. The platform is committed to resolving disputes amicably and will work with you to address concerns before escalation. Account-related issues such as login problems, payment disputes, bonus questions or withdrawal delays should be directed to the general support team via live chat or email. For urgent security issues such as unauthorised account access, suspected fraud or data breaches, contact support immediately for priority assistance.