Privacy Policy

This Privacy Policy explains how Jet Bahis, operating the jetbehis.com website (including the Jet Bahis version for users accessing from the United Kingdom), collects, uses, stores, shares, and protects your personal data. It applies to visitors to our website, registered players, prospective customers, and any person who contacts us or otherwise interacts with our services. By visiting jetbehis.com or creating an account, you acknowledge that you have read and understood this Privacy Policy.

This Privacy Policy is effective from 6 November 2025 and was last updated in January 2026. We recommend that you read this document carefully and review it periodically, as it forms part of the terms governing your use of jetbehis.com.

Who We Are

The online gambling services offered through jetbehis.com, including the Jet Bahis configuration targeting players accessing from the UK, are operated by:

• Operator: Throne Entertainment B.V.
• Legal form: Private limited company (B.V.)
• Registered jurisdiction: Curaçao
• Company registration number: 150615
• Gambling licence: Online gambling (sports betting and casino) under sub-licence No. 5536/JAZ issued by C.I.L. Curaçao Interactive Licensing N.V. (master licence holder)
• Registered/Legal address: Throne Entertainment B.V., Registration No. 150615, Curaçao (full postal address may be updated from time to time in our Terms and Conditions)

Throne Entertainment B.V. is established in Curaçao and is not licensed by the UK Gambling Commission. Nevertheless, for users in the United Kingdom and other regions where data protection laws apply extraterritorially, we process personal data in line with the UK General Data Protection Regulation ("UK GDPR"), the Data Protection Act 2018, and, where relevant, Regulation (EU) 2016/679 ("EU GDPR").

We have designated an internal function responsible for data protection matters:

• Data Protection Officer / Privacy Contact: "Data Protection Officer" (DPO), Throne Entertainment B.V.
• Email: [email protected] (please include "Data Protection" in the subject line)
• Website: https://jetbehis.com

At present, we provide data protection support primarily by email. Where we later provide dedicated telephone or web-form contact options for privacy matters, we will update this Privacy Policy.

What Personal Data We Collect

We collect and process different categories of personal data depending on how you interact with jetbehis.com and the Jet Bahis service. These categories include, but are not limited to, the following:

Identification and contact data

• Account details: full name, username, password (stored in hashed form), date of birth, gender (where provided).
• Contact information: email address (such as the address used to communicate with [email protected]), telephone number, postal address (where provided for KYC, verification or payment purposes).
• Verification data (KYC): copies or data from identity documents (passport, ID card, driving licence), proof of address (utility bill, bank statement), and where applicable, information about source of funds or source of wealth.

Technical and usage data

• Technical data: IP address, country and approximate location derived from IP, device identifiers, browser type and version, operating system, preferred language, time zone settings, access times, and referring URLs.
• Log data: login and logout times, session identifiers, security logs, change history (for example, password changes, updates of personal details).
• Cookies and similar technologies: unique cookie IDs, session tokens, web beacons, pixels and similar technologies used to recognise your browser or device (see "Cookies & Tracking Technologies" below).

Gaming, behavioural and profile data

• Gaming history: bets placed, games played, stakes, winnings and losses, bonuses claimed, loyalty and VIP activity, responsible gambling tools used (e.g. deposit limits, self-exclusion via email to [email protected]), and account status.
• Behavioural data: clicks, page views, navigation paths, time spent on pages, response to offers, and communication preferences.
• Marketing and communication data: your choices about receiving marketing communications, your responses to campaigns, and records of your consent or withdrawal of consent.

Payment and financial data

• Payment data: payment method type (e.g. card, e-wallet, bank transfer, voucher), partial card information (where permitted), payment account identifiers (such as IBAN, e-wallet ID), transaction references, and payment provider details.
• Financial transaction data: deposits, withdrawals, refunds, chargebacks, bonuses and promotional credits applied to your account.

Support, complaints and correspondence data

• Customer support data: records of emails, chats and other communications with our support team, including manual self-exclusion or complaint requests sent to [email protected].
• Complaints and dispute data: details of complaints, internal assessments, decisions, and any relevant supporting documentation.

Special categories and sensitive data

• We do not intentionally seek to collect special categories of personal data (such as health data) except where you voluntarily provide information in connection with responsible gambling or vulnerability disclosures. Where this occurs, we process such data only to the extent necessary to protect you and to comply with applicable law.

Legal Basis for Processing

We process your personal data only when we have a valid legal basis under applicable data protection laws, in particular the UK GDPR and, where relevant, the EU GDPR and other national laws such as Mexican data protection law. Depending on the specific processing activity, we rely on one or more of the following legal grounds:

• Performance of a contract: We process data that is necessary to enter into and perform our contract with you, including:
  • creating and managing your player account on jetbehis.com (including Jet Bahis),
  • verifying your identity and age,
  • processing deposits and withdrawals,
  • providing access to games, promotions and support, and
  • implementing self-exclusion or deposit limits that you request.
• Compliance with legal obligations: We process personal data to comply with laws and regulations that apply to us as a licensed gambling operator in Curaçao and, where applicable, in other jurisdictions, including:
  • anti-money laundering (AML), counter-terrorist financing (CTF) and fraud prevention rules,
  • know-your-customer (KYC) requirements and ongoing due diligence,
  • record-keeping and accounting obligations, and
  • responsible gambling and safer gambling requirements that may apply in certain jurisdictions or under our licence.
• Legitimate interests: We process certain data where this is necessary for our legitimate interests and where your interests and fundamental rights do not override those interests, including:
  • ensuring network and information security (for example, detecting and preventing fraud, abuse, multi-accounting or bonus misuse),
  • protecting the integrity of our games and systems,
  • monitoring and improving our services, user experience and website performance,
  • personalising offers and content in a proportionate manner, and
  • defending our legal rights and handling disputes or claims.
  You have the right to object to processing based on our legitimate interests (see "Your Rights" below).
• Consent: In some cases we rely on your consent, for example:
  • sending direct electronic marketing communications (such as email or SMS) where required by law,
  • using certain non-essential cookies and similar technologies for analytics or advertising purposes, and
  • processing any special category data (e.g. information you provide regarding vulnerabilities) where applicable.
  You may withdraw your consent at any time, without affecting the lawfulness of processing carried out before withdrawal.
• Protection of vital interests or legal claims: In rare cases we may need to process personal data to protect your vital interests or those of another person, or to establish, exercise or defend legal claims.

Purpose of Processing

We use your personal data only for specified, explicit and legitimate purposes. The main purposes for which we process data in connection with jetbehis.com and Jet Bahis are:

• Provision of gambling and related services:
  • to register and manage your account,
  • to provide access to sports betting and casino games,
  • to process deposits, wagers, winnings and withdrawals, and
  • to provide customer support and handle your requests.
• Account verification, risk management and legal compliance:
  • to verify your identity, age and place of residence,
  • to conduct KYC and AML/CTF checks, including ongoing monitoring,
  • to detect and prevent fraud, money laundering, bonus abuse or other prohibited activities, and
  • to meet our regulatory and record-keeping obligations under Curaçao law and, where relevant, other applicable regulations.
• Service improvement and analytics:
  • to analyse how our website is used (for example, via logs and analytics cookies),
  • to understand performance of games, features and campaigns,
  • to troubleshoot technical issues and improve security, and
  • to develop and optimise new products, features and offers.
• Marketing, promotions and personalisation:
  • to send promotional communications and offers (where permitted and in line with your preferences),
  • to manage loyalty programmes, tournaments and bonuses, and
  • to personalise content (for example, recommended games or tailored bonuses) based on your activity, in a proportionate manner.
• Responsible gambling and player protection:
  • to manage deposit limits, time-outs and manual self-exclusion requests sent via [email protected],
  • to monitor activity for potential signs of harmful gambling behaviour, and
  • to provide information or support where vulnerabilities are identified.
• Legal, regulatory and business purposes:
  • to manage audits, inspections and regulatory enquiries (for example, from the Curaçao authorities),
  • to respond to requests from competent authorities or courts where legally required, and
  • to manage business restructuring, mergers, acquisitions or asset transfers, subject to appropriate safeguards.

Disclosure & Sharing

We do not sell your personal data. However, we may share your data with third parties where necessary for the purposes described in this Privacy Policy, subject to appropriate contractual and security safeguards.

Service providers and business partners

• Payment processors and financial institutions: to process deposits, withdrawals, refunds and chargebacks, perform AML/CTF checks and verify payment instruments.
• Game providers and platform vendors: to deliver games and services you access via jetbehis.com, including RNG providers, live casino studios and sportsbook risk-management services.
• IT, hosting and security providers: for website hosting, infrastructure, data storage, content delivery networks, security monitoring and technical support.
• Analytics and marketing partners: to help us understand user behaviour, manage campaigns and measure performance, including advertising networks and affiliates, where such processing is based on our legitimate interests or your consent (for example, for non-essential cookies or behavioural advertising).

Group entities and affiliates

• We may share data with current or future affiliated companies or brands operated by or associated with Throne Entertainment B.V. to the extent necessary for centralised operations, risk management, responsible gambling, fraud prevention, and harmonised user account management, in accordance with applicable law.

Regulators, authorities and dispute bodies

• Regulators and licensing bodies: We may share data with Curaçao regulatory bodies or other competent authorities if required by law or as part of our licensing obligations.
• Law enforcement and authorities: We may disclose data when required to comply with a legal obligation, court order or lawful request, or to protect our rights, property or safety, or those of players or third parties.

Professional advisers and business transactions

• Professional advisers: lawyers, auditors, accountants and similar advisers may access relevant data where reasonably necessary for the provision of their services and subject to confidentiality obligations.
• Corporate transactions: in the event of a merger, acquisition, reorganisation or sale of assets, personal data may be transferred to the relevant third parties as part of the transaction, subject to appropriate safeguards and, where required, notification or consent.

Advertising networks and affiliates

• Where you have given consent, or where permitted by law, we may share limited data (for example, anonymised or pseudonymised identifiers and conversion information) with advertising networks, affiliate partners and traffic sources to measure performance and optimise campaigns related to jetbehis.com and Jet Bahis. Such partners are required to process data in compliance with applicable privacy laws and our instructions.

International Transfers

Throne Entertainment B.V. is established in Curaçao, and many of our technical systems, service providers and partners are located outside the United Kingdom and the European Economic Area (EEA). As a result, your personal data may be transferred to, and processed in, countries that may not provide the same level of data protection as the UK or EEA.

• Primary location: Personal data is processed in Curaçao and other locations where our core infrastructure, payment partners, game providers and support services are hosted.
• Transfers from the UK/EEA: When personal data is transferred from the UK or EEA to a country that has not been recognised by the UK government or European Commission as providing an "adequate" level of protection, we implement appropriate safeguards, such as:
  • standard contractual clauses (SCCs) approved by the European Commission and/or the UK Information Commissioner's Office,
  • technical measures such as encryption in transit and at rest, access controls and data minimisation, and
  • organisational measures, including strict internal policies and staff training.
• Transfers to third-party providers: Where third-party service providers, including payment processors, game studios or marketing partners, process data in third countries, we require them to implement appropriate safeguards and to process data only on our documented instructions.
• Access from other jurisdictions: If you access jetbehis.com from outside the UK/EEA (for example, from Turkey or Mexico), your data will be transferred to Curaçao and other relevant locations. In such cases, the local privacy laws in your country of residence may also apply to our processing activities to the extent they have extraterritorial effect.

Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including to meet legal, regulatory, accounting and reporting requirements. Retention periods may vary depending on the category of data and applicable law, but we generally apply the following guidelines:

• Account and identification data: We retain core account and identification data (such as name, date of birth, KYC documentation and account history) for the duration of your relationship with us and typically for at least five (5) years after account closure. In some cases, we may need to retain such data for up to ten (10) years where required by AML/CTF or other legal obligations.
• Gaming and transaction data: Records of bets, game outcomes, deposits, withdrawals and bonuses are usually kept for at least five (5) years after the relevant transaction, and longer where necessary to comply with law, resolve disputes or enforce our rights.
• Technical and log data: Server logs, security logs and similar technical data are generally retained for a shorter period, typically between six (6) months and two (2) years, unless a longer period is necessary for security investigations, fraud prevention or legal proceedings.
• Marketing data: Data used for marketing purposes is retained for as long as you remain subscribed to marketing communications and for a short period (usually up to two (2) years) after you unsubscribe, to demonstrate compliance with your preferences and avoid further contact.
• Complaints and dispute data: Records related to complaints, disputes or legal claims are retained for the duration of the matter and for the applicable limitation period afterwards, which may be up to six (6) years or longer depending on the jurisdiction and nature of the claim.
• Special category and responsible gambling data: Data relating to vulnerability or responsible gambling interventions is retained for as long as necessary to protect you and comply with relevant legal and regulatory obligations, and thereafter in line with our general retention rules.

When data is no longer required for the purposes for which it was collected and no longer needs to be retained to comply with legal or regulatory obligations, we will securely delete, anonymise or irreversibly de-identify it. Where you exercise your right to erasure, we will also assess our legal obligations and technical feasibility before implementing deletion (see "Your Rights" below).

Your Rights

Depending on your place of residence and the laws that apply to our processing of your data (including the UK GDPR, EU GDPR and, where relevant, Mexican privacy law), you may have some or all of the rights set out below. We will always respect your rights in accordance with applicable law.

Data protection rights under UK/EU GDPR

• Right of access: You can request confirmation as to whether we process your personal data and obtain a copy of that data, along with information about how and why it is processed.
• Right to rectification: You can request that inaccurate or incomplete personal data be corrected or completed. In many cases you can update key information directly in your account settings.
• Right to erasure: You can request deletion of your personal data where, for example, it is no longer necessary for the purposes for which it was collected, you withdraw consent (where consent is the legal basis), or you successfully object to processing. This right is not absolute and may be limited where we are required to retain data (for example, for AML/CTF, accounting or legal claims).
• Right to restriction of processing: You can request restriction of processing under certain circumstances, such as when you contest the accuracy of data or object to our legitimate interests, for a period enabling us to verify the matter.
• Right to object: You can object at any time to processing based on our legitimate interests, including profiling. We will stop processing unless we demonstrate compelling legitimate grounds or the processing is needed for legal claims. You can also object to processing for direct marketing at any time, in which case we will stop such marketing.
• Right to data portability: In certain cases, you can request to receive personal data that you have provided to us, in a structured, commonly used and machine-readable format, and to have that data transmitted to another controller where technically feasible.
• Right to withdraw consent: Where we rely on your consent (for example, for certain marketing or cookie uses), you can withdraw that consent at any time via your account settings, the unsubscribe link in our communications, or by contacting us at [email protected].

Rights under Mexican privacy law (where applicable)

If you are in Mexico and the Federal Law on Protection of Personal Data Held by Private Parties applies to our processing of your data, you may have ARCO rights (Acceso, Rectificación, Cancelación y Oposición), which broadly correspond to the rights of access, correction, cancellation and objection. We will handle such requests in line with Mexican law and this Privacy Policy.

Procedures, timeframes and charges

• How to exercise your rights: You may exercise your rights by contacting our DPO/Privacy Contact at [email protected] from the email address linked to your account. Please clearly describe the right you wish to exercise and provide any necessary information to locate your data.
• Verification: For your security, we may ask you to provide additional information to verify your identity (for example, logging into your account or providing identification information) before we act on your request.
• Response timeframe: We aim to respond to all valid requests within one (1) month (30 days) of receipt. This period may be extended by up to two (2) further months for particularly complex or numerous requests, in which case we will inform you of the extension and reasons for the delay.
• Fees: We handle your requests free of charge. However, we may charge a reasonable fee or refuse to act on a request that is manifestly unfounded, excessive or repetitive, in accordance with applicable law.

Cookies & Tracking Technologies

We use cookies and similar technologies on jetbehis.com and Jet Bahis to ensure the proper functioning of our services, enhance your experience, perform analytics and, where permitted, provide personalised content and marketing. The use of cookies in the UK is governed by the Privacy and Electronic Communications Regulations 2003 ("PECR") and the UK GDPR.

Types of cookies we use

• Strictly necessary (functional) cookies: These cookies are essential for the website to function and cannot be switched off in our systems. They are usually set in response to actions you take, such as logging in, setting privacy preferences or filling in forms.
• Performance and analytics cookies: These cookies collect information about how visitors use our website, such as which pages are visited most often and whether users encounter error messages. We use this information to improve the performance and usability of jetbehis.com.
• Preference cookies: These cookies allow the website to remember choices you make (such as language or region) and provide enhanced, more personalised features.
• Advertising and targeting cookies: These cookies may be set by us or by our advertising and affiliate partners to build a profile of your interests and show you relevant adverts on our site or on other websites. They may also be used to measure the effectiveness of promotions for Jet Bahis.
• Session vs. persistent cookies: Session cookies are temporary and are deleted when you close your browser. Persistent cookies remain on your device for a defined period or until you delete them.
• First-party and third-party cookies: First-party cookies are set by us; third-party cookies are set by external providers (for example, analytics or ad networks) when you use our site.

Managing cookies

• Browser settings: You can usually configure your browser to refuse all or some cookies, or to alert you when websites set or access cookies. Please note that blocking some types of cookies may impact your experience and prevent you from using certain features (including logging in or placing bets).
• Cookie banners and preferences: Where required by law, we will obtain your consent before placing non-essential cookies. You can manage your cookie preferences via our cookie banner or settings tools when available.
• Third-party opt-outs: For certain third-party analytics or advertising cookies, you may also be able to opt out directly via the provider's own tools.

For more information about specific cookies used on jetbehis.com, you may consult our dedicated Cookie Policy (where published) or contact us at [email protected].

Data Security

We take the security of your personal data very seriously and implement appropriate technical and organisational measures to protect it against unauthorised access, alteration, disclosure or destruction.

• Encryption: We use industry-standard encryption technologies, such as Transport Layer Security (TLS) 1.2 or higher, to protect data transmitted between your browser and our servers. Where feasible, we encrypt sensitive data at rest using strong cryptographic algorithms.
• Access controls: Access to personal data is restricted to authorised personnel who need it to perform their job duties. We apply role-based access control, strong authentication mechanisms and regular access reviews.
• Account security: We encourage secure password practices and may employ additional security features such as multi-factor authentication where available. You are responsible for keeping your login credentials confidential and for notifying us promptly if you suspect unauthorised use of your account.
• Network and infrastructure security: Our systems are protected by firewalls, intrusion detection and prevention systems, and other security controls designed to safeguard against external attacks and unauthorised access.
• Monitoring, logging and audits: We monitor our systems for suspicious activity and maintain logs that support security analysis and incident response. Periodic security testing and reviews are conducted to assess and improve our defences.
• Staff training and policies: Employees and contractors who handle personal data are subject to confidentiality obligations and receive training on data protection, security and responsible gambling considerations.
• Vendor risk management: Where we use third-party service providers, we select partners that commit to appropriate security standards and we include data protection clauses in our contracts.
• Incident response: We maintain procedures for identifying, investigating and responding to data security incidents. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority and, where required, affected individuals, in accordance with applicable law.

We aim to align our security controls with recognised international standards and best practices (such as ISO 27001 or SOC 2 frameworks) where appropriate for our size and risk profile, even if we do not publicly claim formal certification.

Complaints & Contacts

If you have questions, concerns or complaints about how we handle your personal data, we encourage you to contact us first so that we can try to resolve the issue directly.

How to contact us

• Primary email for privacy and complaints: [email protected] (please indicate whether your query relates to data protection, responsible gambling, or a general complaint).
• Postal correspondence: Throne Entertainment B.V., Registration No. 150615, Curaçao (full mailing details, if updated, may be listed in our Terms and Conditions or on our website).
• Online forms: Where available, you may also submit complaints or feedback via account support or contact forms on jetbehis.com.

Internal complaint procedure

1. Step 1 - Initial contact: Send your complaint or query to [email protected] from the email address linked to your account, including your username, relevant details and any supporting evidence.
2. Step 2 - Acknowledgement: We aim to acknowledge receipt of your complaint within a reasonable time, usually within 3 - 5 business days.
3. Step 3 - Investigation and response: We will investigate your complaint and aim to provide a substantive response within 30 days. For complex matters requiring more time, we will let you know and provide an estimated timeframe.
4. Step 4 - Escalation: If you are not satisfied with the outcome, you may request that your complaint be escalated internally, including to our DPO or senior management where appropriate.

Supervisory authorities and external escalation

• United Kingdom (UK GDPR and Data Protection Act 2018): If you are located in the UK and you believe that we have not handled your personal data lawfully, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):
  • Website: https://www.ico.org.uk
• European Union (EU GDPR): If EU data protection law applies and you reside in the EEA, you may lodge a complaint with the data protection authority in your country of residence or place of work, or where an alleged infringement occurred. Contact details are available on the European Data Protection Board website.
• Mexico: If Mexican data protection law applies to our processing of your data, you may have the right to lodge a complaint with the Mexican data protection authority (Instituto Nacional de Transparencia, Acceso a la Información y Protección de Datos Personales - INAI). For further information, please see:
  • Website: https://www.inai.org.mx

We invite you to contact us first at [email protected] so that we can seek to resolve your concerns before you approach a supervisory authority, although you are not obliged to do so.

Updates

We may update this Privacy Policy from time to time to reflect changes in our services, technologies, legal or regulatory environment (including developments under the Curaçao LOK regime and data protection laws such as the UK GDPR), or for other operational reasons.

• Notification of changes: When we make material changes, we will inform you in advance by appropriate means, which may include:
  • email notifications sent to the address associated with your jetbehis.com account,
  • prominent notices or banners on our website (including the Jet Bahis pages), and/or
  • alerts within your account dashboard.
• Advance notice: For significant changes that materially affect your rights or the way we process your data, we will provide, where reasonably practicable, at least thirty (30) days' advance notice before the new version takes effect.
• Your options: If you do not agree with the updated Privacy Policy, you may close your account and stop using our services before the changes take effect. Continued use of jetbehis.com after the effective date of an updated Privacy Policy will constitute your acceptance of the changes.
• Versioning and date: The current version of this Privacy Policy is identified by the "Last updated" date below. Earlier versions may be made available on request where required by law.

Last updated: January 2026