Privacy Policy

This Privacy Policy explains how Jet Ton, provided via the website jettonsc.com and related interfaces (including messenger-based casino access), collects, uses, shares, and protects your personal data. It applies to visitors to our website, people who contact our support team, and registered players who use our gambling services from the United Kingdom and other supported locations. By using our services, you acknowledge that you have read this Privacy Policy.

This Privacy Policy is intended to comply with applicable data protection laws, including the UK General Data Protection Regulation ("UK GDPR") and the Data Protection Act 2018, and, where relevant, other international privacy standards. It should be read together with our Terms and Conditions and any game- or promotion-specific rules.

Effective date: 6 November 2025

Who We Are

For the purposes of data protection law, the primary data controller responsible for your personal data in connection with Jet Ton is the operator of the online gambling service marketed under the brand "Jet Ton" and made available through jettonsc.com (the "Operator", "we", "us", "our"). Jet Ton is the UK-facing configuration of this service.

The Operator provides online crypto-gambling services under a licence issued by Gaming Curaçao, licence number 365/JAZ, sub-licence GLH-OCCHKTW0712302023. The Operator is not licensed by the UK Gambling Commission and operates from offshore jurisdictions. Payments for our services may be processed through subsidiary or partner entities located in countries such as Cyprus and the Marshall Islands.

Details of the current licence status and the licensing entity are published in the footer of the official website at https://jettonsc.com and may be verified via the Gaming Curaçao registry.

Contact for Data Protection Matters

If you have any questions about this Privacy Policy or how we handle your personal data, you can contact our data protection team using the following details:

Email: support@jettonsc.com (please include "Data Protection" in the subject line)
Website: https://jettonsc.com (support channel or help section as available)

We may designate a specific Data Protection Officer ("DPO") or equivalent role from time to time. Where we do so, the DPO's contact details will be published in this Privacy Policy or on the website.

What Personal Data We Collect

We collect and process different categories of personal data depending on how you interact with Jet Ton and the services available through jettonsc.com. This includes data you provide directly, data generated when you use our services, and data obtained from third parties (such as payment or verification providers).

Identification and Contact Data

Account details: username, password (stored in hashed form), security settings, preferred language, and account status.
Identity information (KYC): full name, date of birth, nationality, place of residence, copies or details of identity documents (e.g. passport, ID card, driving licence), address verification documents (e.g. utility bill, bank statement) where required. In line with our Terms and Conditions, we reserve the right to request KYC at any time.
Contact details: email address (including but not limited to support@jettonsc.com for correspondence), telephone number or messenger handle where provided, and communication preferences.

Technical and Usage Data

Technical identifiers: IP address, device identifiers, browser type and version, operating system, time zone setting, language settings, and similar technical data.
Usage logs: dates and times of access, login/logout activity, pages and interfaces visited, clickstream data, referral URLs, in-app or in-bot navigation, and error logs.
Security and system logs: authentication attempts, changes to security settings, unusual activity flags, and data used for fraud and abuse detection.

Payment and Financial Data

Transaction data: deposits, wagers, wins, losses, withdrawals, currency used, transaction dates and times, and payment status.
Payment method data: for fiat or other traditional payment methods, partial card or account details (masked where possible), country of card issuance or bank, and payment gateway identifiers. For crypto payments, wallet addresses, transaction hashes, and related metadata.
Payment processing data: information shared with or received from payment processors, which may be located in countries such as Cyprus or the Marshall Islands, including risk scores and confirmation of successful or failed transactions.

Behavioural and Profile Data

Gaming behaviour: betting history, games played, stakes, session duration, frequency of play, game preferences, bonus use, and tournament participation.
Account status and lifecycle: active, suspended, self-excluded, closed, or dormant status, including the time elapsed since last login or transaction. For example, dormant account status and any applicable fees (such as dormant account fees after 12 months of inactivity) are linked to your usage history.
Marketing and interaction data: records of promotional communications sent to you, your responses (e.g. opening emails, clicking links), and participation in campaigns or loyalty programmes.
Responsible gambling and self-exclusion data: records of self-exclusion or cooling-off requests, including requests submitted by email (for example, using "Self Exclusion" in the subject line to support@jettonsc.com), and any limits or restrictions requested or agreed.

Cookies and Similar Technologies

Cookie data: unique identifiers stored on your device, which may be session or persistent cookies, used for functionality, analytics, and advertising purposes.
Tracking technologies: web beacons, pixels, tags, local storage, and similar tools that help us track user interactions with the website and our communications.

Where we need to collect personal data by law or under our contract with you and you fail to provide that data when requested, we may be unable to provide you with some or all of our services.

Legal Basis for Processing

We process your personal data only where we have a valid legal basis to do so under applicable data protection laws, notably the UK GDPR. Depending on the specific processing activity, one or more of the following legal grounds will apply:

Performance of a Contract

Account creation and management: we process identification, contact, and technical data to create and maintain your player account, authenticate you, provide customer support, and manage your relationship with us.
Provision of gambling services: we use your data to enable deposits and withdrawals, process bets, determine game outcomes, credit winnings, and administer bonuses and promotions in line with the Terms and Conditions.
Service communications: we may send you transactional messages about changes to our services, game interruptions, security notices, or updates to our Terms and this Privacy Policy, as necessary to perform our agreement with you.

Compliance with Legal Obligations

KYC and AML requirements: we process your identity and transaction data to comply with "know your customer" (KYC), anti-money laundering (AML), counter-terrorist financing, fraud prevention, and other regulatory obligations that apply to licensed gambling and payment services.
Accounting and tax rules: we retain transaction records and related financial information as required by applicable tax, corporate, and accounting laws.
Legal claims and law enforcement: we may process and retain data where necessary to respond to lawful requests from regulators, Gaming Curaçao, law enforcement bodies, or other competent authorities, or to establish, exercise, or defend legal claims.

Legitimate Interests

Service improvement and analytics: we analyse aggregated and pseudonymised usage data to improve the performance, functionality, and security of our website, interfaces, and games, and to understand how players use our services.
Fraud and abuse prevention: we monitor accounts, transactions, and device usage to detect and prevent fraud, misuse of promotions, multiple account abuse, money laundering, or other prohibited activities.
Internal administration: we process data for internal reporting, risk management, and business planning, where these interests are not overridden by your rights and interests.

Consent

Marketing communications: where required, we rely on your consent to send you electronic marketing communications (such as email or in-app messages) about offers, bonuses, and promotions. You can withdraw your consent at any time.
Non-essential cookies and tracking: we rely on your consent for certain analytics, advertising, or personalisation cookies and similar technologies, as explained in the Cookies & Tracking Technologies section.
Specific optional processing: for example, when you participate in surveys or promotional activities that are not necessary to provide the service, we may ask for your consent to use your responses for specific purposes.

Where we rely on consent, you have the right to withdraw it at any time without affecting the lawfulness of processing based on consent before its withdrawal.

Purpose of Processing

We use your personal data for clearly defined purposes, in line with the legal bases described above. The main purposes include:

Provision and Management of Our Services

Operating player accounts: setting up, authenticating, and managing your account; processing your requests, queries, and complaints; and maintaining your account status (active, closed, self-excluded, or dormant).
Enabling gameplay: providing access to games, recording bets and outcomes, updating balances, managing tournaments and leaderboards, and ensuring the correct functioning of game systems.
Processing payments: handling deposits, withdrawals, refunds where applicable, chargeback investigations, and other financial operations, including via third-party payment processors or crypto networks.

Security, Compliance, and Risk Management

Identity verification and KYC: verifying your identity and eligibility to use our services, including performing checks against third-party databases where required for AML or fraud prevention purposes.
Fraud, abuse, and AML monitoring: monitoring transactions and behaviour patterns to detect and prevent fraud, bonus abuse, multiple account misuse, money laundering, and other unlawful or prohibited activities.
Regulatory and legal compliance: keeping records and generating reports necessary to demonstrate compliance with Gaming Curaçao licensing requirements, AML rules, and any applicable court orders or regulatory directions.

Service Improvement and Analytics

Performance and usability analysis: analysing how players interact with games and the platform (including via messenger interfaces) to improve layout, functionality, responsiveness, and user experience.
Product development: evaluating game popularity, player engagement, and feedback to develop new features, games, or promotions and to enhance existing offerings.
Statistics and aggregated reporting: producing anonymised or aggregated statistics for internal reporting and business planning; such data no longer identifies individual players.

Marketing and Personalisation

Direct marketing: sending you information about promotions, bonuses, loyalty rewards, and new features, in line with your communication preferences and applicable legal requirements.
Targeted content: adapting the content of our website, messages, and offers based on your past activity, preferences, or participation in promotions, where permitted by law and your consent.
Third-party advertising: where applicable and with your consent, collaborating with advertising partners and affiliate websites to measure campaign performance and reach relevant audiences.

Responsible Gambling and Player Protection

Self-exclusion and limits: processing your requests for self-exclusion (including requests submitted by email with "Self Exclusion" in the subject line) or other responsible gambling tools, and enforcing those measures.
Risk assessment: monitoring gameplay and transaction patterns to identify problematic gambling behaviour and adapt communications or restrictions where appropriate.

Disclosure & Sharing

We do not sell your personal data. However, we do share personal data with carefully selected third parties where necessary for the purposes described in this Privacy Policy and subject to appropriate safeguards.

Service Providers and Business Partners

Payment processors and banking partners: to process deposits, withdrawals, and other financial transactions, including entities based in countries such as Cyprus and the Marshall Islands that provide payment processing services on our behalf.
Technical and infrastructure providers: providers of hosting, IT, cloud, security, messaging, and customer support services that enable our platform to operate reliably and securely.
Game providers and platform integrators: where games are supplied via third-party studios or platforms, we may share limited account and transactional data necessary to operate games and resolve technical or fairness issues.

Compliance and Risk Management Partners

KYC and AML partners: identity verification providers, fraud detection services, and other due diligence partners who help us verify player identity, assess risk, and comply with AML obligations.
Professional advisers: lawyers, auditors, consultants, and similar professionals who assist us with legal, financial, or regulatory matters under appropriate confidentiality obligations.

Group and Affiliate Relationships

Affiliates and marketing partners: where you register through an affiliate link or promotional partner, we may share limited performance data (for example, whether you registered, deposited, or played) so that they can measure campaign performance and receive agreed remuneration.
Related entities: where we operate through associated companies or subsidiaries (including those involved in payment processing), we may share data within this group for internal administrative purposes, consistent with this Privacy Policy.

Regulators and Authorities

Gaming regulators: Gaming Curaçao and any other competent gambling authorities that may require records to assess compliance with licence conditions or to investigate complaints.
Law enforcement and other authorities: public authorities, courts, or law enforcement bodies where we are legally required to disclose information, or where disclosure is necessary to prevent or detect crime or to protect our rights or the rights of others.

Business Transfers

Corporate transactions: in the event of a merger, acquisition, reorganisation, asset sale, or similar corporate transaction involving Jet Ton or the Operator, your personal data may be transferred to the relevant successor entity, subject to applicable data protection laws and continued protection consistent with this Privacy Policy.

International Transfers

Because Jet Ton is operated from offshore jurisdictions and uses service providers located in several countries, your personal data may be transferred to and processed in countries outside the United Kingdom (and, where relevant, outside the European Economic Area) that may have different data protection laws.

Locations of Processing

Curaçao: as the jurisdiction of our Gaming Curaçao licence, certain operational and compliance processing may occur in or in relation to Curaçao.
Cyprus and Marshall Islands: some payment and related processing is carried out via entities located in Cyprus or the Marshall Islands.
Other countries: our hosting, IT, and service providers may operate in other countries, including within the EEA and in other jurisdictions, depending on their infrastructure.

Safeguards for International Transfers

Contractual safeguards: where required by UK data protection law, we implement appropriate safeguards such as standard contractual clauses (or their UK-approved equivalents) or other legally recognised mechanisms for data transfers to countries without an adequacy decision.
Technical and organisational measures: we use security measures such as encryption, access controls, and data minimisation to protect your data during and after transfer.
Limited access: only personnel and service providers who need access to your personal data for the purposes described in this Privacy Policy are granted such access, and they are subject to contractual confidentiality obligations.

By using our services, you understand that your data may be processed in jurisdictions that may not offer the same level of protection as the UK. Where required, we rely on your explicit consent or contractual necessity, in addition to the safeguards described above, to legitimise these transfers.

Data Retention

We keep your personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements. Retention periods may vary depending on the category of data and applicable laws.

General Retention Principles

Active accounts: while your account remains active, we retain your personal data for the duration of your relationship with us, to provide our services and meet legal obligations.
After account closure: once your account is closed (including closure due to self-exclusion or inactivity), we generally retain your core account and transactional data for a period of up to five (5) years, or longer where necessary for legal or regulatory reasons, such as AML and accounting rules.
KYC and AML data: identity verification records and transaction histories may be retained for a minimum of five (5) years after the end of the customer relationship or the date of the last transaction, or as otherwise required by applicable AML regulations.

Category-Specific Retention

Marketing data: data related to your marketing preferences and the history of communications may be retained while you remain subscribed and for a reasonable period (typically up to two (2) years) after you opt out, to document your preferences and comply with legal requirements.
Technical and log data: logs and technical data used for security, troubleshooting, and analytics are generally retained for shorter periods (typically from several days up to twelve (12) months), unless a longer retention is necessary for incident investigation, legal proceedings, or regulatory inquiries.
Responsible gambling and self-exclusion data: records of self-exclusion or other responsible gambling measures are retained for the duration of the relevant restriction and for an additional period (up to five (5) years or longer where justified) to demonstrate compliance and prevent circumvention.

When personal data is no longer required for the purposes described above and no longer needed to comply with legal obligations, we will delete it, anonymise it, or securely store it in an archived form that is no longer used for active processing.

Your Rights

Subject to applicable law, including the UK GDPR and, where relevant, other data protection regimes, you have the following rights in relation to your personal data processed by Jet Ton via jettonsc.com:

Core Data Protection Rights

Right of access: you can request confirmation of whether we process your personal data and obtain a copy of that data, along with information about how we use it.
Right to rectification: you can ask us to correct inaccurate or incomplete personal data. Where possible, you may update certain details directly in your account settings.
Right to erasure ("right to be forgotten"): you can request deletion of your personal data where, for example, it is no longer necessary for the purposes for which it was collected, or you withdraw consent (where consent was the legal basis) and we have no other legal basis to continue processing. This right is subject to important exceptions, such as when we must retain data for AML, tax, or other legal reasons.
Right to restriction of processing: you may request that we restrict processing of your data in certain circumstances, for example if you contest the accuracy of the data or object to processing and we are verifying our legitimate grounds.
Right to object: you can object at any time, on grounds relating to your particular situation, to processing based on our legitimate interests. We will stop processing unless we can demonstrate compelling legitimate grounds which override your interests, rights, and freedoms or the processing is required for legal claims. You also have an unconditional right to object at any time to processing of your personal data for direct marketing purposes.
Right to data portability: where processing is based on your consent or on a contract and carried out by automated means, you may request that we provide your personal data in a structured, commonly used, machine-readable format, or that we transmit it directly to another controller where technically feasible.

Consent and Marketing Choices

Withdrawal of consent: where processing is based on consent (such as certain marketing communications or non-essential cookies), you may withdraw your consent at any time. This will not affect the lawfulness of processing carried out before withdrawal.
Marketing opt-out: you can opt out of receiving marketing emails or similar communications at any time by using the unsubscribe link included in each message or by contacting us at support@jettonsc.com. We will process your request as soon as reasonably practicable.

Regional Notes, Including Mexico

UK and EEA residents: your rights arise primarily from the UK GDPR and, where relevant, the EU GDPR. You also have the right to lodge a complaint with a supervisory authority, as explained in the Complaints & Contacts section.
Residents of Mexico: if you are located in Mexico, you may have additional rights under Mexican data protection law, including the Federal Law on Protection of Personal Data Held by Private Parties (Ley Federal de Protección de Datos Personales en Posesión de los Particulares). These rights are generally consistent with the rights described above (access, rectification, cancellation, opposition, and related rights). You can exercise these rights using the procedures described below.

How to Exercise Your Rights

Submitting a request: to exercise any of your rights, please contact us at support@jettonsc.com with sufficient information to identify your account and verify your identity. For privacy-related requests, please include "Data Protection Request" in the subject line.
Verification: to protect your account and privacy, we may ask for additional information to verify your identity before we act on your request (for example, confirming certain account details or providing identification documents where necessary and lawful).
Response times: we aim to respond to all legitimate requests without undue delay and, in any event, within one (1) month of receipt. Where your request is particularly complex or we receive a number of requests, we may extend this period by up to two further months, in which case we will inform you of the extension and the reasons.
Fees: exercising your rights is generally free of charge. However, we may charge a reasonable fee or refuse to act on requests that are manifestly unfounded, repetitive, or excessive, as permitted by law.

Cookies & Tracking Technologies

We use cookies and similar technologies to make our website and services work, to improve performance, and to provide relevant content and advertising. Cookies are small text files stored on your device when you visit our website.

Types of Cookies We Use

Strictly necessary cookies: essential for the operation of the website and basic functions such as page navigation, secure login, and transaction processing. The website cannot function properly without these cookies.
Functional cookies: enable enhanced functionality and personalisation, such as remembering your login details, preferred language, or display settings.
Analytics and performance cookies: help us understand how visitors use our website and services, for example by collecting information about the number of visitors, pages visited, and error messages. This information is used in aggregated form to improve performance and user experience.
Advertising and targeting cookies: used, where applicable and with your consent, to deliver relevant advertisements, measure the effectiveness of campaigns (including affiliate campaigns), and limit the frequency with which you see certain ads.
Third-party cookies: some cookies may be set by third-party service providers, such as analytics providers or advertising networks, to support the functions described above.

Managing Cookies

Browser controls: most browsers allow you to view, manage, delete, and block cookies from websites. You can usually find these settings in the "Options", "Settings", or "Privacy" menus of your browser.
Device and system settings: some devices and operating systems offer additional controls to restrict or clear stored identifiers.
Internal preferences: where available, we may provide in-site settings or banners that allow you to adjust your cookie preferences, particularly for non-essential cookies.

Please note that if you block or disable certain cookies, some parts of the website or some features of Jet Ton may not function properly or may become unavailable.

Data Security

We take the security of your personal data seriously and implement appropriate technical and organisational measures designed to protect it against unauthorised or unlawful processing, accidental loss, destruction, or damage. However, no system can be guaranteed to be 100% secure, particularly in the context of online and crypto-based transactions.

Technical Security Measures

Encryption in transit: we use modern Transport Layer Security (TLS 1.2 or higher) or equivalent standards to encrypt data transmitted between your device and our servers.
Encryption and protection at rest: where appropriate and feasible, we use encryption, tokenisation, or other security techniques to protect stored data and limit access to readable information.
Access controls: access to personal data is restricted to authorised personnel and service providers who require access to perform their duties, in line with role-based access controls and the principle of least privilege.
System monitoring: we maintain logs and monitoring systems to detect suspicious activities, potential intrusions, or service abuse, and to support timely response.

Organisational Safeguards

Policies and procedures: we maintain internal policies and procedures relating to data protection, information security, incident response, and acceptable use.
Staff training: employees and contractors who handle personal data receive appropriate training on data protection, confidentiality, and security obligations.
Third-party management: where we use service providers, we seek to ensure that they implement appropriate security measures and are bound by contractual obligations to protect your personal data.

Incident Response

Detection and response: in the event of a suspected personal data breach, we will investigate promptly, take appropriate remedial actions, and implement measures to reduce the risk of recurrence.
Notification: where required by law, we will notify relevant supervisory authorities and, where appropriate, affected individuals, taking into account the nature and severity of the breach.

We may align our security practices with recognised industry standards and frameworks where appropriate. However, unless explicitly stated, we do not claim formal certification under specific standards such as ISO 27001 or SOC 2.

Complaints & Contacts

If you have questions, concerns, or complaints about how we handle your personal data, we encourage you to contact us first so that we can try to resolve the issue directly.

Contacting Us

Email: support@jettonsc.com (please include "Privacy Complaint" or "Data Protection" in the subject line).
Online: where available, you may also use any support channels or feedback forms provided via jettonsc.com.

We will review and investigate your complaint and aim to respond as soon as reasonably possible, and in any case within one (1) month where your complaint involves the exercise of data protection rights or other requests under applicable privacy laws.

Escalating to Supervisory Authorities

If you are not satisfied with our response or believe that we are processing your personal data in breach of applicable data protection law, you have the right to lodge a complaint with a supervisory authority.

United Kingdom: if you are in the UK, you can contact the Information Commissioner's Office (ICO). Information on how to raise a concern is available on the ICO's official website.
European Economic Area (EEA): if the EU GDPR applies to you, you may lodge a complaint with the data protection authority in the EEA member state of your habitual residence, place of work, or place of alleged infringement.
Mexico: if you are located in Mexico and believe your rights under Mexican data protection legislation have been violated, you may contact the Mexican data protection authority, the Instituto Nacional de Transparencia, Acceso a la Información y Protección de Datos Personales (INAI), through the channels published on its official website.

We encourage you to contact us first, but you do not need to do so before contacting a supervisory authority.

Updates

We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or privacy practices. When we make significant changes, we will take appropriate steps to inform you.

How We Notify You of Changes

Website notices: we will publish the updated Privacy Policy on jettonsc.com, update the "Last updated" date, and may display banners or pop-up notices to draw attention to material changes.
Email or account notifications: where changes are significant or required by law, we may also notify you by email or through in-account messages or alerts in the interfaces you use (such as messenger bots linked to your account).

Effective Date and Advance Notice

Effective date: unless otherwise specified, changes to this Privacy Policy take effect on the date indicated in the "Last updated" statement.
Advance notice for material changes: where we make material changes that significantly affect your rights or how we use your personal data, we will, where reasonably practicable, provide at least thirty (30) days' advance notice before the new terms become effective.
Your options: if you do not agree with the updated Privacy Policy, you may choose to stop using our services and request closure of your account. Continued use of the services after the effective date of the updated Privacy Policy will constitute your acceptance of the changes.

Last updated: November 2025