JB Casino Privacy Policy

What personal information is collected

• Identity and verification: full name, date of birth, nationality, Ghana Card or other ID details, verification results, and proof of address where required.
• Contact details: mobile number, email address, and residential address.
• Account details: username, hashed credentials, security questions, and preferences.
• Transactions and gameplay: deposits, withdrawals, bets, wins or losses, responsible gambling limits or self-exclusion.
• Payment information: tokens and references from payment providers, last four digits of cards, and mobile money identifiers. Full payment details are handled by authorised processors.
• Device and usage data: IP address, device type, browser, app identifiers, language, approximate location, and cookies.
• Communications: support tickets, call recordings where permitted, and marketing consents.

Special categories of data are not intentionally collected. If identity checks capture biometric images or scans, they are processed only for verification and fraud prevention.

Why this information is collected

• To provide account registration, verification, and age checks.
• To process transactions and deliver services under the user agreement.
• To meet legal and regulatory duties under the Gaming Commission of Ghana and anti-money laundering laws.
• To maintain platform security, prevent fraud, and support responsible gambling tools.
• To improve online services, conduct analytics, and personalise user experience where consented.
• To handle user support and service communications.

Technical and organisational protection measures

• Encryption in transit and at rest, secure key management, and hardened infrastructure.
• Role-based access controls, multi-factor authentication, and least-privilege policies.
• Network segmentation, firewalls, continuous monitoring, and audit logging.
• Secure development practices, vulnerability testing, and incident response procedures.
• Staff training on data protection and confidentiality.
• Vendor due diligence and contractual safeguards for processors, including PCI DSS compliant payment partners.

Data retention and secure destruction

• Personal data is kept only for as long as needed for the purposes stated or as required by law and regulatory retention schedules.
• When no longer needed, information is securely deleted, anonymised, or archived in a non-active state where legal retention applies.

User rights under Ghana law

• Access: request a copy of personal data held.
• Correction: ask to fix inaccurate or incomplete data.
• Deletion: request erasure where retention is not legally required.
• Restriction and objection: limit or object to certain processing, including direct marketing.
• Portability: receive certain data in a portable format where applicable.
• Withdraw consent: opt out of consent-based uses at any time.
• Complaint: lodge a complaint with the Data Protection Commission (DPC) Ghana.

JB Casino operates in accordance with the Data Protection Act, 2012 (Act 843), the Gaming Act, 2006 (Act 721), and the Anti-Money Laundering Act, 2020 (Act 1044), and aligns its practices to recognised international standards of fair and transparent processing.

Contact for privacy requests: [email protected]. Complaints can also be raised with the DPC: dpc.gov.gh.

Processing is lawful, fair, and transparent. Information is used for:

• Account creation, onboarding, verification, and age confirmation.
• Payments, withdrawals, and transaction processing through authorised providers.
• Customer support and service communications.
• Service operations, security monitoring, fraud prevention, and risk management.
• Responsible gambling features such as self-exclusion and limits.
• Analytics and service improvement, including performance and user experience testing.
• Marketing communications based on consent or legitimate interest, with opt-out options.
• Meeting legal, regulatory, tax, and reporting obligations, and handling disputes.

Legal bases include consent, performance of a contract, legal obligation, and legitimate interests that do not override user rights. Personal data is not sold.

How to access, update, or delete data

• Submit a request by email to [email protected], specifying the action required.
• Identity verification may be requested before actioning a request.
• A response will be provided within a reasonable period, typically within 30 days, subject to legal allowances.

Corrections and deletions

• Incorrect or incomplete records will be corrected upon verification.
• Deletion requests will be honoured where retention is not required by law, regulatory rules, or for the establishment, exercise, or defence of legal claims.

By using the website, the user consents to security checks for fraud and compliance, and agrees that payment information may be processed by authorised payment service providers for transactions and chargeback handling.

• Services are intended for persons aged 18 and above in line with Ghanaian gambling laws.
• The operator cannot verify age without identity documents and may request proof during verification.
• If a minor’s details are found, the account will be suspended and the data deleted. A parent or legal guardian can contact [email protected] to request deletion and must provide proof of relationship and identity.

Personal data may be stored or processed outside Ghana where technology partners, payment processors, verification providers, and support teams operate, including the EEA, UK, and other jurisdictions. Using the site signifies consent to such international transfers. Partners are required to maintain confidentiality and protect information through contracts, technical safeguards, and recognised transfer mechanisms such as standard contractual clauses or equivalent measures permitted by law.

This disclaimer may limit or clarify the scope and effect of certain rules in this policy as permitted by applicable law. It applies once the user indicates acceptance of the policy through signature, electronic acceptance, or accession during account registration or continued use. Where any term conflicts with mandatory law, the law prevails. Nothing in this policy limits rights granted by the Data Protection Act, 2012 (Act 843).

Cookies are small files stored on a device to remember settings and improve online services. They are used for:

• Essential functions such as security and login.
• Statistics and analytics to understand usage and improve the site.
• Behaviour analysis for fraud detection and service optimisation.
• Personalisation, including remembering preferences and language.
• Marketing subject to consent and browser settings.

Cookie retention is normally up to 1 year unless a shorter or longer period is needed for security or compliance. Users can manage or delete cookies in browser settings or through the site’s cookie tools. Disabling cookies may impact some functions.

Use of the platform means full acceptance of this Privacy Policy and any updates posted here. The current version published on the website prevails over previous versions. If material changes are made, reasonable notice will be provided where required by law.

Personal information may be shared with third parties for the purposes described, including service providers, payment processors, identity verification partners, analytics vendors, dispute resolution bodies, regulators, and law enforcement where required. The website lists key processors and partners; if any partner is not listed, information about the purpose and scope of sharing will be provided as appropriate. Providing personal data is consent to such sharing as outlined and does not limit any contractual or legal basis for the sharing.

Third parties process data under their own privacy notices and are required to maintain confidentiality and use information only for agreed purposes.

The website may contain links to third-party websites or services that have their own privacy policies. The operator is not responsible for how external websites handle personal data. Users should exercise caution and review the privacy information presented on those websites before providing any information.