Jackbit Privacy Policy and Data Protection

Last updated: June 8, 2026

This Privacy Policy at [Jackbit](/) explains how Data Link Digital B.V., trading as Jackbit and operating under Curaçao licence OGL/2024/1562/1139, collects, uses and protects personal information when users access the casino, live casino, sportsbook and related services. The policy applies to all visitors and registered players, regardless of location or device.

By creating an account or browsing the website, users agree to the terms set out in this document. All data processing follows applicable legislation and regulatory requirements established by the Curaçao Gaming Authority.

Key Terms and Definitions

Understanding the terminology in this document helps users recognise how their information is handled. Each term connects directly to real interactions within the platform.

Personal Data and Identifiers

Personal data includes any information that identifies or relates to an individual user. This covers names, email addresses, payment details, account credentials, and technical identifiers such as IP addresses and device fingerprints. The definition extends to derived data such as transaction histories and betting patterns.

Data Processing and Control

Processing refers to any operation performed on personal data, including collection, storage, analysis, transfer or deletion. Data Link Digital B.V. acts as the data controller, making decisions about how and why information is used. Users, referred to as data subjects, retain specific rights over their information under applicable privacy legislation.

Information We Collect

The platform collects several categories of personal data to deliver casino services, verify identities and meet compliance obligations. Collection occurs at registration, during gameplay and through automated systems.

Account and Identity Information

When users register, they provide a username, email address, date of birth, country of residence and password. This information establishes the account and confirms eligibility under the 18+ age restriction. Additional identity data such as passport details, driver licence numbers and proof of address may be requested during KYC verification, typically before the first withdrawal or when AML checks are triggered.

Payment and Transaction Data

The system records all deposit and withdrawal transactions, including cryptocurrency wallet addresses, card details if applicable, and transaction amounts. For crypto payments—Bitcoin, USDT, USDC, Ethereum, Solana, XRP, Litecoin, Dogecoin and others—the platform logs wallet addresses and blockchain transaction IDs. Payment ownership verification may require bank statements, card photos or wallet screenshots showing the user's name.

Technical and Usage Data

Each session generates technical data such as IP address, browser type, operating system, device identifiers and screen resolution. The platform also collects usage statistics including pages visited, games played, bet history, session duration and navigation patterns. This data supports security monitoring, fraud detection and product analytics.

How Personal Data Is Used

Data processing serves specific operational, regulatory and security purposes. Every use case connects to a function users interact with or a compliance requirement the operator must meet.

Service Delivery and Account Management

Personal information enables account creation, login authentication, game access, bet placement, transaction processing and customer support. Technical data ensures the website loads correctly across devices and that users see their balance, bet history and bonus status in real time. Identity data verifies that only eligible players access the platform and that one account per person rules are enforced.

Compliance and Verification

KYC procedures rely on identity, address and payment documents to confirm age, prevent duplicate accounts and verify payment ownership. AML checks use transaction patterns, wallet addresses and source-of-funds documentation to detect fraud, money laundering or third-party payment use. Regulatory obligations under Curaçao Gaming Authority licence OGL/2024/1562/1139 require detailed record-keeping for audits and investigations.

Marketing and Product Development

With consent, the platform may send promotional emails about bonuses, tournaments such as the AU$50,000 World Cup leaderboard or VIP Club updates. Usage data informs game selection, lobby layout and feature development, but aggregated analytics are used to protect individual privacy. Marketing communications can be controlled through account settings or by contacting support.

Legal Basis for Data Processing

Every processing activity relies on one or more legal grounds under applicable privacy legislation. Users encounter these grounds through registration, gameplay and compliance checks.

Consent and Contractual Necessity

Account [registration at Jack Bit](/) creates a contractual relationship that requires processing of identity, payment and gameplay data. Users consent to this processing by accepting the Terms and Conditions during signup. Certain activities—such as receiving promotional emails or participating in optional surveys—rely on explicit, revocable consent rather than contract performance.

Legitimate Interests and Legal Obligations

The operator processes data to detect fraud, prevent underage gambling, enforce one-account rules and maintain platform security. These activities reflect legitimate interests balanced against user privacy. Legal obligations, such as responding to regulatory requests or preserving records for licensing audits, justify processing even without user consent.

Data Sharing and Third-Party Disclosure

Personal information is shared with external parties only when necessary for service delivery, compliance or security. The platform does not sell user data or share it for unrelated commercial purposes.

All third parties are required to process data only for specified purposes and to maintain equivalent security standards. International transfers, particularly to jurisdictions outside the European Economic Area, are protected by standard contractual clauses or equivalent safeguards.

Data Retention and Storage Periods

Personal information is retained only as long as required for the purpose it was collected or to meet legal obligations. Retention periods vary by data type and regulatory framework.

Active Account Data

Data for active accounts is stored indefinitely while the account remains open and in use. This includes identity records, transaction history, KYC documents and gameplay logs. Users can request account closure and data deletion at any time, subject to legal retention requirements.

Post-Closure Retention

After account closure, certain records are retained for up to seven years to comply with AML legislation, tax obligations and licensing audits. This typically includes identity verification documents, transaction records and correspondence. Marketing data and non-essential logs are deleted within 90 days of closure unless a specific legal hold applies.

User Rights Over Personal Information

Users have enforceable rights to access, correct, restrict or delete their personal data. Exercising these rights involves contacting support with a clear description of the request.

• 🔍 Access: Users can request a copy of all personal data held by the platform, delivered in a structured, commonly used format within 30 days.
• ✏️ Rectification: Incorrect or incomplete information can be updated through account settings or by submitting corrected documents to support.
• 🗑️ Erasure: Users may request deletion of their data, though legal retention obligations for AML, tax or licensing purposes may require some records to be preserved.
• ⏸️ Restriction: Processing can be limited while disputes over accuracy or lawfulness are resolved, freezing the data without full deletion.
• 📦 Portability: Account and transaction data can be provided in machine-readable format for transfer to another service where technically feasible.
• 🚫 Objection: Users may object to processing based on legitimate interests, such as direct marketing, at which point the operator must stop unless overriding legal grounds exist.

Requests must be submitted to support@jack.com with sufficient detail to verify identity. Response times typically range from 24 to 72 hours for straightforward requests, though complex cases may take up to 30 days.

Data Security and Protection Measures

The platform employs technical and organisational controls to safeguard personal information from unauthorised access, loss or misuse. Security is integrated into every layer of the system.

Encryption and Secure Transmission

All data transmitted between user devices and the platform is encrypted using industry-standard SSL/TLS protocols. Payment information and cryptocurrency wallet addresses are encrypted both in transit and at rest. Login credentials are hashed and salted, meaning plain-text passwords are never stored on servers.

Access Control and Monitoring

Internal access to personal data is restricted to authorised personnel who require it for their roles. Systems log all data access and flag unusual patterns for review. Multi-factor authentication protects administrative accounts, and regular audits ensure compliance with internal security policies.

Fraud Detection and Account Security

Automated systems monitor for duplicate accounts, shared IP addresses, unusual payment patterns and VPN or proxy use. Suspected fraud triggers manual review, additional KYC checks or account restrictions. Users are advised to enable two-factor authentication where available and to use unique, strong passwords.

Cookies and Tracking Technologies

The website uses cookies and similar technologies to enable functionality, personalise content and analyse usage. Users have control over most cookie types through browser settings.

Essential and Functional Cookies

These cookies enable core platform functions such as login persistence, session management, language selection and secure navigation. Without them, features like the shopping cart equivalent—bet slip—or account access would not work. Essential cookies do not require consent because they are strictly necessary for service delivery.

Analytics and Performance Cookies

Performance cookies collect aggregated data about page load times, navigation patterns and error rates. This information helps optimise website speed and identify technical issues. Individual users are not identified; analytics focus on trends and system performance.

Marketing and Targeting Cookies

With consent, marketing cookies track user behaviour across sessions to deliver personalised promotions, recommend games and display relevant bonus offers. Users who decline these cookies still access the full platform but receive generic rather than tailored content. Cookie preferences can be adjusted at any time through browser settings or the website's cookie consent banner.

Third-Party Links and External Services

The platform may link to external websites for payment processing, game providers or informational resources. This Privacy Policy does not govern those external sites.

Users who navigate to third-party websites are subject to the privacy policies of those services. The operator is not responsible for data practices, security standards or content on external platforms. Users are encouraged to review the privacy policies of any linked sites before sharing personal information.

Age Restrictions and Minors

The platform is restricted to users aged 18 and over. No services are directed at minors, and the operator does not knowingly collect data from individuals under the legal gambling age.

If evidence suggests a user is underage, the account is suspended immediately and any funds are returned to the original payment source after identity verification. Parents or guardians who believe a minor has provided personal data should contact support@jack.com. Upon confirmation, all associated data is deleted within 72 hours, subject to legal record-keeping requirements.

Policy Updates and Amendments

This Privacy Policy may be updated to reflect changes in legislation, regulatory guidance, platform features or data processing practices. Updates are published on the website with a revised date at the top of the document.

Users are encouraged to review the policy periodically, particularly before making deposits, submitting KYC documents or updating account details. Significant changes may be communicated via email or account notification. Continued use of the platform after updates take effect constitutes acceptance of the revised terms.

Contact and Data Protection Inquiries

Questions, requests or complaints regarding personal data should be directed to the operator's support team. Multiple channels are available for privacy-related inquiries.

Response times for privacy requests typically range from 24 to 72 hours for straightforward cases. Complex inquiries involving multiple systems or legal review may take up to 30 days. Users who believe their data protection rights have been violated may also file a complaint with the Curaçao Gaming Authority or the relevant data protection authority in their jurisdiction.