JB8 Privacy Policy: How Your Personal Data Is Collected, Used, Shared, and Protected in 2026

This Privacy Policy explains how JB8, operated by Gaming Services Provider N.V. under Curaçao gaming license #365/JAZ, collects, stores, processes, shares, and protects the personal data of its users ("Players"). It applies to all data collected through the JB8 website (jb8b.com), the JB8 mobile application, and any related services operated by JB8.

By registering an account, making a deposit, or using any feature on JB8, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein. This Policy forms part of the overall agreement between you and JB8, alongside the Terms and Conditions, the Responsible Gaming Policy, and the Disconnect Policy.

1. Who Is Responsible for Your Data

The data controller responsible for your personal information is Gaming Services Provider N.V., which operates the JB8 platform under Curaçao gaming license #365/JAZ. For any privacy-related queries, you can contact JB8 through live chat on the website or via the Contact Us page.

2. What Personal Data JB8 Collects

JB8 collects several categories of personal data, each serving a specific purpose essential to platform operations, regulatory compliance, or service improvement. The table below outlines what is collected, when it is collected, and why.

3. Legal Basis for Processing Your Data

JB8 processes your personal data based on the following legal grounds:

• Contractual necessity — Processing required to fulfill the agreement between you and JB8, including account management, transaction processing, game delivery, bet settlement, and bonus administration. Without this processing, JB8 cannot provide its services.
• Legal and regulatory obligations — Processing required by the Curaçao gaming license, anti-money laundering regulations, KYC requirements, tax reporting obligations, and law enforcement requests. JB8 is legally required to collect, verify, and retain certain data regardless of Player preference.
• Legitimate interests — Processing that serves JB8's legitimate business interests where the Player's privacy rights do not override those interests. This includes fraud prevention, platform security, service improvement, and marketing to existing Players.
• Consent — Processing based on the Player's explicit consent, such as receiving promotional communications or opting into specific marketing channels. Consent can be withdrawn at any time through account settings or by contacting support.

4. How JB8 Uses Your Data

JB8 uses the data it collects for the specific purposes outlined below. Data is not used for purposes beyond those described in this Policy without prior notice to the Player.

4.1 Account and Service Operations

• Creating, managing, and maintaining your JB8 account.
• Processing deposits and withdrawals through your chosen payment methods. Refer to the Deposit Tutorial for details on available methods.
• Delivering gaming services across all categories — slots, live casino, sports betting, cricket betting, crash games, jackpots, fishing games, and cockfight betting.
• Settling bets and crediting winnings based on game outcomes and official sports results.
• Administering promotions, including the 120% slots welcome bonus, 15% daily cashback, 1.6% instant rebate, and referral program.
• Tracking and managing VIP program tier progression based on cumulative wagering activity.
• Providing customer support through live chat and other channels.

4.2 Security and Fraud Prevention

• Monitoring account activity using iovation/ThreatMetrix fraud detection technology to identify unauthorized access, identity theft, and suspicious transaction patterns.
• Analyzing device fingerprints, login patterns, geographic data, and behavioral signals to detect and prevent fraud in real time.
• Verifying Player identity through KYC processes to prevent underage gambling, identity fraud, and money laundering.
• Investigating and resolving suspected Terms violations, including multiple account creation, collusion, and bonus abuse.

4.3 Regulatory Compliance

• Fulfilling KYC and anti-money laundering obligations required by the Curaçao gaming license (#365/JAZ).
• Maintaining records of financial transactions and Player identity for the periods mandated by applicable regulations.
• Responding to lawful requests from regulatory authorities, law enforcement, or courts.
• Reporting suspicious activity to the relevant authorities as required by anti-money laundering regulations.

4.4 Responsible Gaming

• Monitoring gameplay patterns for indicators of potentially harmful gambling behavior.
• Enforcing Player-configured deposit limits, session time reminders, loss limits, cool-off periods, and self-exclusion settings.
• Implementing platform-initiated restrictions when patterns of play suggest potential harm, as described in the Responsible Gaming policy.

4.5 Platform Improvement and Analytics

• Analyzing aggregated, anonymized usage data to improve platform performance, navigation, and user experience.
• Identifying popular games, features, and market types to inform content and provider decisions.
• Testing new features, interfaces, and optimizations to enhance service quality.

4.6 Marketing and Communications

• Sending transactional communications — deposit confirmations, withdrawal status updates, bet settlement notifications, and account security alerts. These are operational and cannot be opted out of.
• Sending promotional communications — new game releases, upcoming sporting events, promotional offers, and VIP benefits — to Players who have consented to receive marketing. These can be opted out of at any time.

5. Who JB8 Shares Your Data With

JB8 does not sell your personal data to third parties. Data is shared only with the categories of recipients described below, and only to the extent necessary for the stated purposes.

Third-Party Data Protection Standards

JB8 requires all third-party recipients to handle shared data in accordance with applicable data protection laws and regulations. Game providers, payment processors, and security partners operate under their own privacy policies and regulatory obligations. JB8 selects partners who demonstrate appropriate security practices, but the Player is encouraged to review the privacy policies of any third-party service they interact with directly (such as payment providers).

6. Data Security Measures

JB8 employs multiple layers of security technology to protect your data at every stage — from the moment it leaves your device through storage and processing on JB8's systems.

6.1 Encryption in Transit

All data transmitted between your device and JB8's servers is encrypted using GoDaddy SSL (Secure Socket Layer) technology. This includes login credentials, personal details, deposit and withdrawal transactions, gameplay data, and support communications. SSL encryption makes intercepted data unreadable to unauthorized parties. You can verify the active SSL connection by checking for the padlock icon in your browser's address bar.

6.2 Encryption at Rest

Personal data stored on JB8's servers is protected by encryption and access control mechanisms. Sensitive data, such as passwords,s is stored in hashed format — meaning even JB8's own systems cannot reverse-engineer your original password. Financial data and identity documents are stored with restricted access limited to authorized personnel with a documented business need.

6.3 Fraud Detection and Monitoring

iovation (part of TransUnion) and ThreatMetrix provide continuous real-time monitoring of account activity. The system analyzes device fingerprints, geographic patterns, login behavior, and transaction characteristics to identify and block suspicious activity before it affects your account. This operates automatically in the background without requiring any action from the Player.

6.4 Access Controls

Access to Player personal data within JB8 is restricted to personnel who require it for their specific role — such as customer support agents handling your query, compliance officers processing KYC verification, or security analysts investigating suspected fraud. Access is logged and auditable.

6.5 Incident Response

In the unlikely event of a data breach that compromises Player personal data, JB8 will notify affected Players and the relevant regulatory authority within the required timeframe under applicable regulations. The notification will include details of the breach, the data potentially affected, and the steps JB8 is taking to mitigate the impact.

7. Cookies and Tracking Technologies

7.1 What Cookies Are

Cookies are small text files stored on your device when you visit the JB8 website or use the app. They enable the Platform to recognize your device, maintain your session, and remember your preferences between visits.

7.2 Types of Cookies JB8 Uses

7.3 Managing Cookies

You can manage or delete cookies through your browser settings. Most browsers allow you to block all cookies, block only third-party cookies, or delete cookies when you close the browser. Be aware that disabling essential or security cookies may prevent you from logging in, playing games, or accessing critical Platform features. Instructions for managing cookies vary by browser — consult your browser's help documentation for specific guidance.

8. Data Retention

JB8 retains personal data for the periods necessary to fulfill the purposes described in this Policy, or as required by regulatory obligations — whichever is longer.

When data is no longer required for its stated purpose and the regulatory retention period has expired, it is securely deleted or anonymized so that it cannot be associated with an individual Player.

9. Your Data Rights

As a JB8 Player, you have the following rights regarding your personal data. To exercise any of these rights, contact JB8 support through live chat or the Contact Us page. JB8 will respond to data rights requests within a reasonable timeframe.

9.1 Right of Access

You have the right to request a copy of the personal data JB8 holds about you. This includes registration data, transaction records, gameplay history, and any KYC documents on file. JB8 will provide this data in a commonly used electronic format.

9.2 Right to Rectification

You have the right to request correction of inaccurate or incomplete personal data. If your name, address, email, phone number, or other details change, update your account settings directly or contact support to request a correction. Accurate data is essential for KYC compliance and account security.

9.3 Right to Erasure

You have the right to request deletion of your personal data, subject to limitations. JB8 cannot delete data that it is legally required to retain (such as KYC records, financial transaction records, and self-exclusion records for the mandatory retention periods described in Section 8). Data that is not subject to regulatory retention will be deleted or anonymized upon request.

9.4 Right to Restrict Processing

You have the right to request that JB8 restrict how your data is processed in certain circumstances — for example, while a dispute about data accuracy is being resolved. Restriction means the data is stored but not actively processed beyond storage until the issue is resolved.

9.5 Right to Object

You have the right to object to processing based on legitimate interests or for marketing purposes. If you object to marketing, JB8 will cease sending promotional communications. Objections to processing based on legitimate interests will be evaluated on a case-by-case basis, balancing your rights against JB8's operational and regulatory requirements.

9.6 Right to Withdraw Consent

Where processing is based on your consent (such as marketing communications), you can withdraw that consent at any time through your account settings or by contacting support. Withdrawal of consent does not affect the lawfulness of processing that occurred before the withdrawal.

9.7 Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit that data to another service provider, where technically feasible.

10. Children's Privacy

JB8 does not knowingly collect personal data from anyone under 18. The Platform requires all Players to confirm during registration that they are at least 18 years old (or the legal gambling age in their jurisdiction, whichever is higher). If JB8 discovers that data has been collected from a minor, the account will be permanently closed and the data deleted, as required by applicable law, with any deposited funds handled in accordance with regulatory requirements.

11. International Data Transfers

JB8 operates under a Curaçao gaming license, and its servers, service providers, and partners may be located in different jurisdictions. Your personal data may be transferred to and processed in countries outside your country of residence. When such transfers occur, JB8 ensures that appropriate safeguards are in place to protect your data in accordance with applicable data protection standards, including contractual protections with third-party recipients.

12. Changes to This Privacy Policy

JB8 reserves the right to update this Privacy Policy at any time. Changes will be published on this page with an updated effective date. Material changes that significantly affect how your data is collected, used, or shared will be communicated through the Platform's notification channels. Continued use of JB8 after changes are published constitutes acceptance of the revised Policy. Players are encouraged to review this page periodically.

13. Contact and Complaints

For any questions, requests, or complaints regarding this Privacy Policy or the handling of your personal data, contact JB8 through the following channels:

• Live chat — Available on the JB8 website for real-time assistance with privacy queries.
• Contact Us — Dedicated support page with all available channels and response time expectations.
• FAQ — Searchable knowledge base that may address common privacy-related questions.

If you are not satisfied with JB8's response to a privacy complaint, you may escalate the matter to the Curaçao Gaming Authority, which oversees JB8's regulatory compliance, or to the relevant data protection authority in your country of residence.

Related Policy Documents

• Terms and Conditions — The complete user agreement governing account eligibility, financial transactions, bonus rules, bet settlement, and dispute resolution.
• Responsible Gaming — Player protection tools including deposit limits, session reminders, self-exclusion, and links to external support organizations.
• Disconnect Policy — How in-progress bets and transactions are handled during connectivity interruptions.
• About Us — Company background, licensing, security certifications, and provider partnerships.

Frequently Asked Questions About JB8 Privacy

What personal data does JB8 collect?

JB8 collects registration data (name, date of birth, email, phone, address), KYC identity documents, financial transaction records, gameplay and betting data, technical data (IP address, device info, browser), communication records from support interactions, and cookie/tracking data. Each category serves a specific purpose detailed in Section 2 above.

Does JB8 sell my personal data?

No. JB8 does not sell personal data to third parties. Data is shared only with service providers necessary for platform operations (game providers, payment processors, security services) and with regulatory authorities when legally required. Full details are in Section 5.

How is my data protected?

JB8 uses GoDaddy SSL encryption for all data in transit, encryption and access controls for data at rest, iovation/ThreatMetrix for real-time fraud detection, and role-based access restrictions for internal personnel. Passwords are stored in hashed format. Full security measures are described in Section 6.

How long does JB8 keep my data?

Retention periods vary by data type. Registration, KYC, financial, and gameplay data are retained for the duration of your account plus a minimum of 5 years after closure, as required by anti-money laundering regulations. Communication records are retained for a minimum of 2 years. Technical and cookie data are typically retained for up to 12 months. Full details are in Section 8.

Can I request a copy of my data?

Yes. You have the right to request a copy of all personal data JB8 holds about you. Contact support via live chat or the Contact Us page to submit a data access request. JB8 will provide the data in a commonly used electronic format within a reasonable timeframe.

Can I request deletion of my data?

You can request deletion of personal data that JB8 is not legally required to retain. Data subject to mandatory regulatory retention (KYC documents, financial records, self-exclusion records) cannot be deleted until the retention period expires. Non-regulated data will be deleted or anonymized upon request.

How can I opt out of marketing communications?

You can opt out of promotional communications at any time through your account settings or by contacting support. Transactional communications (deposit confirmations, security alerts, withdrawal status updates) are operational and cannot be opted out of, as they relate directly to your account activity.

What are cookies, and can I control them?

Cookies are small text files stored on your device that enable session management, personalization, analytics, and security. You can manage cookies through your browser settings. Essential and security cookies cannot be turned off without affecting Platform functionality. Analytics and marketing cookies can be opted out of through browser settings or cookie consent preferences.

Does JB8 transfer my data internationally?

Yes. JB8's servers, service providers, and partners may be in different jurisdictions. When data is transferred internationally, JB8 ensures appropriate safeguards are in place, including contractual protections with recipients. The Platform operates under Curaçao's regulatory framework.

Who can I contact about privacy concerns?

Contact JB8 through live chat or the Contact Us page for any privacy query or complaint. If unsatisfied with the response, you may escalate to the Curaçao Gaming Authority or the data protection authority in your country of residence.