The JohnBit privacy policy governs the processing of player personal data by operator Infiniza N.V. under Curaçao eGaming license №8048/JAZ. The platform does not hold a local Ukrainian PlayCity license, so data processing follows GDPR norms and Curaçao anti-money laundering law.
Data Controller and Contacts
The data controller is Infiniza N.V. — a legal entity registered in Curaçao. All personal data processing questions, access requests and complaints go to [email protected] or through the on-site live chat.
For everyday support questions, the Telegram bot @johnbit_support and WhatsApp are available — they are not an official channel for GDPR requests and are used only for operational matters.
What Data the Operator Collects
The operator collects three data categories:
- Registration
- Verification
- Behavioral
Each category has its own legal basis for processing and its own retention period.
| Category | Contents | Retention |
|---|---|---|
| Registration | Email, phone, name, date of birth | Until account closure + 2 years |
| KYC documents | Passport scan, selfie, proof of address | Up to 5 years after last activity |
| Financial | Transactions, card details, crypto addresses | Up to 5 years (AML requirement) |
| Behavioral | Bet logs, IP, cookies, session history | 1–3 years |
Who Receives the Data
Personal data is shared with a limited set of third parties:
- Payment providers (Skrill, Neteller, Google Pay)
- KYC providers for document checks
- The Curaçao licensing authority on official request
- Game providers for payout settlement
Data is not sold to advertisers and is not used for marketing purposes outside the user's account. Promotional email subscriptions can be turned off in the account settings.
User Rights
Under GDPR, the user has the right to:
- Request a copy of their data
- Ask for correction of inaccuracies
- Deletion of information or restriction of processing
The request goes to [email protected] with identity confirmation via the registration email.
Response time is up to 30 days from receipt of the complete request. Deletion is not possible if the data falls under mandatory AML retention — in that case, the operator explains the refusal grounds in writing.
Security and Cookies
Data transfer between browser and server is protected by SSL/TLS 1.3 encryption. Passwords are stored in hashed form, and payment credentials are not kept on operator servers — they are handled by the payment provider under PCI DSS.
The website uses cookies for session authorization, analytics and interface personalization. Cookie management is available in the consent banner on the first visit and in the site footer at any time. Gambling is for adults only (18+); the account area offers deposit limits and time-outs from 24 hours.
johnbit-ua.com.ua editorial team
Prepared by the johnbit-ua.com.ua editorial team. Bonus terms, cashier limits and verification requirements were checked against public data published by the operator Infiniza N.V.. Updated: October 2026.
This material is informational and is not a call to gamble. Gambling is for adults only.
