jllevo Privacy Policy

Section 1

Data We Collect

When you interact with the jllevo platform — whether by browsing, registering an account, making a deposit, placing a bet, or contacting our support team — we collect certain categories of personal data. This section explains in full what data we collect and the circumstances under which each category is gathered.

Identity and Contact Data

During the account registration process, we collect your full legal name, date of birth, email address, Bangladeshi mobile phone number, and residential address. This information is required to create and maintain your player account, to verify your identity in accordance with our Know Your Customer (KYC) obligations, and to communicate with you about your account, transactions, and any changes to our services or policies.

Financial Data

When you make a deposit or request a withdrawal, we collect data associated with your chosen payment method. For mobile financial services such as bKash, Nagad, Rocket, and Upay, this includes the registered mobile number linked to your wallet. For card payments via Visa or Mastercard, we collect the card number (masked after processing), expiry date, and billing name. We do not store full card numbers on our servers — payment processing is handled by PCI-DSS compliant payment processors who operate under strict data security standards.

Identity Verification Documents

As part of our KYC verification process, we may request copies of government-issued identity documents such as your National Identity Card (NID), passport, or birth certificate. We may also request proof of address in the form of a recent utility bill or bank statement. These documents are stored securely and used solely for identity verification and fraud prevention purposes. They are never shared with third parties for commercial purposes.

Technical and Usage Data

When you access jllevo from any device, we automatically collect certain technical data including your IP address, device type, operating system, browser type and version, screen resolution, time zone setting, and the pages or features you access within the platform. We also collect data about your gaming activity, including games played, bets placed, session duration, and transaction history. This data helps us maintain platform security, detect fraudulent activity, and improve our services.

Communications Data

If you contact our support team by email, live chat or any other channel, we retain a record of that correspondence including the content of your messages, the date and time of contact, and the outcome of any support interaction. This information is used to resolve disputes, improve customer service quality, and maintain a clear record of our interactions with you.

Summary of Data Categories

Section 3

Data Sharing & Disclosure

jllevo does not sell, rent or trade your personal data. We share your data only in the limited circumstances described below, and always subject to appropriate contractual safeguards or legal requirements.

Payment Service Providers

To process your deposits and withdrawals, we share the minimum necessary financial data with our approved payment partners, including mobile financial service operators such as bKash, Nagad, Rocket, and Upay, as well as card networks operating under Visa and Mastercard. These providers process your data solely to facilitate the specific transaction you have authorised and are bound by their own data protection obligations.

Identity Verification Partners

Where we engage specialist third-party KYC and anti-money-laundering (AML) service providers to assist with identity verification, we share the relevant identity and document data with those providers. They are contractually bound to use your data only for the specific verification purpose commissioned by jllevo and to delete or return the data once that purpose has been fulfilled.

Game Software Providers

jllevo's game lobby is powered by leading third-party game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive certain anonymised or pseudonymised session data (such as a session token and stake amount) to deliver game content and settle game rounds. They do not receive your full name, address, or payment details unless you contact them directly.

Legal and Regulatory Disclosure

We may disclose your personal data to law enforcement agencies, regulatory bodies, courts, or other public authorities where we are legally required to do so, or where we believe in good faith that such disclosure is necessary to prevent a crime, protect public safety, or enforce our Terms & Conditions. We will notify you of any such disclosure request where we are legally permitted to do so.

Business Transfers

In the event that jllevo undergoes a merger, acquisition, restructuring, or sale of all or part of its assets, your personal data may be transferred to the acquiring entity as part of that transaction. In such circumstances, we will take reasonable steps to ensure that the acquiring entity honours the commitments made in this Privacy Policy, and we will notify affected players before any such transfer takes effect.

Section 5

Data Retention & Storage

jllevo retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The specific retention periods we apply to different categories of data are set out below.

• Account and identity data is retained for the duration of your active player account plus a minimum of five years after account closure. This is required to satisfy our anti-money-laundering (AML) record-keeping obligations.
• Financial transaction records including deposit and withdrawal histories are retained for a minimum of seven years from the date of the transaction, in accordance with standard financial record-keeping requirements.
• KYC and identity verification documents are retained for five years from the date of verification or from the date of account closure, whichever is later.
• Customer support communications are retained for three years from the date of the last interaction in a given support thread, unless the matter relates to an ongoing dispute, in which case records are kept until the dispute is fully resolved.
• Technical and usage data collected for platform analytics purposes is retained for up to 24 months in identifiable form before being aggregated and anonymised for longer-term trend analysis.
• Marketing consent records are retained for the duration of your consent plus three years after withdrawal of consent, to demonstrate that we operated lawfully during the consent period.

When the applicable retention period expires, jllevo will securely delete or irreversibly anonymise the relevant data. Where deletion is not technically feasible in the short term (for example, in respect of data held in encrypted backup archives), we will isolate that data from active processing and ensure it is deleted as soon as reasonably practicable during the next scheduled backup rotation cycle.

Section 7

Data Security Measures

jllevo takes the security of your personal data seriously and implements a comprehensive set of technical and organisational measures to protect it from unauthorised access, accidental loss, destruction, or disclosure. The following describes the principal security controls we have in place.

Encryption

All data transmitted between your browser or mobile device and the jllevo platform is encrypted using TLS 1.3, the current industry standard for transport layer security. All data stored on our servers — including your account data, transaction records, and identity documents — is encrypted at rest using AES-256 encryption. Encryption keys are managed separately from the encrypted data and are rotated on a regular schedule.

Access Controls

Access to personal data within jllevo's internal systems is strictly controlled on a need-to-know basis. Staff members are granted only the minimum level of data access necessary to perform their specific job functions. All internal access to production data is logged and subject to regular audit review. Administrative access to sensitive systems requires multi-factor authentication.

Penetration Testing and Vulnerability Management

jllevo conducts regular penetration testing of its platform and infrastructure using qualified independent security professionals. Any vulnerabilities identified are triaged, prioritised, and remediated in accordance with our defined risk management framework. We also operate a responsible disclosure programme — if you discover a potential security vulnerability in the jllevo platform, please report it to [email protected] rather than attempting to exploit it.

Employee Training

All jllevo staff who handle personal data receive mandatory data protection and information security training upon joining and at regular intervals thereafter. Our data protection policies and procedures are reviewed and updated annually or whenever there is a material change in the applicable legal or technical environment.

Incident Response

jllevo maintains a formal data breach response procedure. In the event of a confirmed breach that poses a material risk to player data, we will take immediate containment action, assess the scope and impact of the breach, notify affected players without undue delay, and report the incident to the relevant regulatory authorities where required by law. Our incident response team is available around the clock to respond to security events.