zbajje Privacy Policy

1. Introduction

zbajje ("we", "us", "our") operates the online gaming and sports betting platform accessible at zbajje.app. As a platform serving players across Bangladesh, we are committed to handling all personal data with transparency, security, and respect. This Privacy Policy sets out the complete framework for how zbajje collects, processes, stores, shares, and protects personal data provided by our players and website visitors.

This policy applies to all individuals who visit the zbajje website, register a player account, make deposits or withdrawals, participate in promotions, contact our customer support team, or otherwise interact with the zbajje platform through any device or interface. It covers data collected via our website, cashier system, live chat, email correspondence, and any associated mobile interface.

zbajje is committed to the principle that you retain meaningful control over your personal data. We collect only what is genuinely necessary for operating a safe, compliant, and high-quality gaming platform for Bangladeshi players. We do not sell your personal data to third parties for commercial marketing purposes.

2. Personal Data We Collect

2.1 Registration and Identity Data

When you create a zbajje account, we collect the following categories of personal data:

• Identity Data: Full legal name, date of birth, gender, and nationality.
• Contact Data: Email address, mobile phone number, and residential address (including city, district, and postal code).
• Account Credentials: Username and encrypted password (passwords are never stored in plain text).
• Verification Documents: Where KYC (Know Your Customer) verification is required — copies of government-issued photo identification (e.g., NID, passport), proof of address, and proof of payment method ownership.

2.2 Financial and Transaction Data

To facilitate deposits, withdrawals, and account management, zbajje collects:

• Payment method details (e.g., bKash account number, Nagad wallet number, Rocket number, Upay number, Visa/Mastercard card details as required by the payment processor).
• Transaction history: deposit amounts, withdrawal amounts, dates, and payment method references.
• Account balance history and bonus credit/debit records.

2.3 Gaming and Behavioural Data

zbajje automatically records data about your activity on the platform, including:

• Games played, bet amounts, win/loss outcomes, and session durations.
• Sports betting selections, stake amounts, odds accepted, and settlement outcomes.
• Responsible gaming tool usage (e.g., deposit limits set, cooling-off periods activated, self-exclusion requests).
• Bonus and promotion participation history.

2.4 Technical and Device Data

When you access zbajje, our servers automatically collect certain technical data:

This technical data is used for security monitoring, fraud detection, and platform performance optimisation. It is not used to identify individual users except where a security or compliance investigation requires it.

2.5 Communications Data

When you contact zbajje customer support — whether by email, live chat, or any other channel — we retain records of those communications, including the content of messages, timestamps, and any attachments. These records are maintained for quality assurance, dispute resolution, and compliance purposes.

3. How We Use Your Personal Data

zbajje uses the personal data we collect for the following purposes:

Purpose	Data Categories Used
Account creation and management	Identity, contact, credentials
Processing deposits and withdrawals	Financial, identity, contact
Identity and age verification (KYC)	Identity, verification documents
Fraud prevention and security monitoring	Technical, financial, gaming behaviour
Providing customer support and resolving disputes	Communications, identity, gaming behaviour
Delivering bonuses and promotions	Identity, contact, gaming behaviour
Responsible gaming monitoring and intervention	Gaming behaviour, financial, contact
Legal and regulatory compliance	All categories as required
Platform improvement and analytics	Technical, gaming behaviour (anonymised)
Communicating platform updates and policy changes	Contact data

We do not use your personal data for automated profiling that produces legal or similarly significant effects without human review. Responsible gaming flags are reviewed by our support team before any account action is taken.

4. Legal Basis for Processing

zbajje processes your personal data on the following legal grounds:

• Contractual Necessity: Processing your identity, contact, and financial data is necessary to create and maintain your account, process transactions, and deliver the services you have registered for.
• Legal Obligation: We are required to collect and retain certain data — particularly KYC verification documents and transaction records — to comply with applicable anti-money laundering (AML) and counter-terrorism financing (CTF) obligations.
• Legitimate Interests: zbajje has a legitimate interest in processing technical and behavioural data to detect and prevent fraud, secure the platform, and improve service quality — provided this does not override your fundamental privacy rights.
• Consent: Where we seek to send you marketing communications or use non-essential cookies, we will ask for your explicit consent. You may withdraw consent at any time by contacting [email protected].

5. Data Sharing and Disclosure

zbajje does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We may share your data only in the following limited circumstances:

5.1 Service Providers

We engage trusted third-party service providers to support platform operations, including payment processors (bKash, Nagad, Rocket, Upay, Visa, and Mastercard networks), identity verification services, game content providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi), customer support infrastructure, and hosting and cloud services. All such providers are contractually bound to process your data only on zbajje's instructions and in compliance with applicable data protection standards.

5.2 Legal and Regulatory Disclosure

zbajje may disclose personal data to government authorities, law enforcement agencies, financial intelligence units, or courts of competent jurisdiction where we are legally required or compelled to do so. This includes disclosures required under AML/CTF regulations, court orders, or formal legal process. We will notify you of such disclosures where permitted by law.

5.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of zbajje's business, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified in advance of any such transfer and of any material changes to data handling practices that may result.

5.4 Responsible Gaming Partners

Where a player activates self-exclusion, zbajje may share relevant account status information with responsible gaming support organisations to give effect to that exclusion across participating platforms. This sharing is conducted strictly in the player's interest and is subject to appropriate confidentiality arrangements.

6. Payment Data and Financial Privacy

zbajje takes the security of payment data with the utmost seriousness. The following principles govern how we handle financial information provided by Bangladeshi players:

• All payment transactions are processed via 256-bit SSL-encrypted connections. Financial data is never transmitted over unencrypted channels.
• Full card numbers (for Visa and Mastercard) are handled exclusively by PCI-DSS-compliant payment processors. zbajje does not store complete card numbers on its own servers.
• Mobile financial service data (bKash, Nagad, Rocket, Upay) is processed in compliance with the respective service provider's API security standards and applicable Bangladeshi financial regulations.
• Transaction records are retained for the period required by applicable AML regulations and for dispute resolution purposes, after which they are securely deleted or anonymised.
• Withdrawal requests are matched against the deposit method on record to prevent financial fraud and protect player funds.

7. Cookies and Tracking Technologies

7.1 What Are Cookies

Cookies are small text files placed on your device by a website to store information about your session, preferences, and behaviour. zbajje uses cookies and similar technologies (including local storage and session storage) to operate the platform, maintain your login session, detect fraud, and analyse usage patterns.

7.2 Types of Cookies We Use

• Strictly Necessary Cookies: Required for the platform to function. These include session authentication tokens, security identifiers, and load-balancing cookies. They cannot be disabled without preventing access to the platform.
• Functional Cookies: Store your preferences such as language settings, game display options, and responsible gaming tool configurations.
• Analytics Cookies: Help us understand how players interact with the zbajje platform — which games are most popular, where users encounter difficulties, and how the platform can be improved. Analytics data is aggregated and does not identify individual players.
• Security Cookies: Used to detect and prevent fraudulent activity, including bot traffic, credential stuffing, and multi-account abuse.

7.3 Managing Cookies

You can control non-essential cookies through your browser settings. Please be aware that disabling certain cookies may impair the functionality of the zbajje platform, including your ability to maintain a login session or access certain game features. Instructions for managing cookies in popular browsers (Chrome, Firefox, Safari, Edge) are available in each browser's help documentation.

8. Data Retention

zbajje retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Active Account Data: Retained for the full duration of your account registration and for a minimum of five (5) years following account closure, to satisfy AML/CTF record-keeping obligations.
• KYC Verification Documents: Retained for a minimum of five (5) years from the date of submission, as required by applicable financial regulations.
• Transaction Records: Retained for a minimum of five (5) years from the date of the transaction.
• Customer Support Communications: Retained for three (3) years following the resolution of the relevant enquiry or dispute.
• Technical and Device Logs: Retained for up to twelve (12) months for security and fraud detection purposes, after which they are deleted or anonymised.
• Marketing Consent Records: Retained for the duration of your consent and for one (1) year following withdrawal of consent, as proof of compliance.

Upon expiry of the applicable retention period, personal data is securely deleted using industry-standard data destruction methods, or anonymised such that it can no longer be linked to an identifiable individual.

9. Data Security

zbajje implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the zbajje platform is encrypted using industry-standard SSL/TLS protocols.
• Encrypted Data Storage: Sensitive personal data — including passwords, payment references, and KYC documents — is stored in encrypted form. Passwords are hashed using a strong one-way cryptographic algorithm and are never stored or transmitted in plain text.
• Access Controls: Access to player personal data within zbajje's internal systems is restricted on a strict need-to-know basis. Staff with access to personal data are subject to confidentiality obligations.
• Intrusion Detection: zbajje maintains real-time monitoring systems to detect and respond to suspicious activity, unauthorised access attempts, and security incidents.
• Regular Security Audits: Our platform infrastructure undergoes periodic security assessments to identify and remediate vulnerabilities before they can be exploited.

10. Your Data Protection Rights

As a zbajje player, you have the following rights with respect to your personal data. To exercise any of these rights, contact us at [email protected] with "Data Rights Request" in the subject line:

• Right of Access: You have the right to request a copy of the personal data zbajje holds about you, along with information about how it is being used.
• Right to Rectification: If any personal data we hold is inaccurate or incomplete, you have the right to request that we correct it without undue delay.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to our legal retention obligations.
• Right to Restriction of Processing: You may request that we restrict how we use your data in certain circumstances — for example, while a rectification request is being assessed.
• Right to Data Portability: Where processing is based on your consent or contractual necessity, you may request that we provide your personal data in a structured, machine-readable format.
• Right to Object: You may object to processing of your data based on our legitimate interests. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

zbajje will respond to all data rights requests within thirty (30) calendar days of receipt. In complex cases, this period may be extended by a further two months, and you will be notified accordingly.

11. Children's Privacy

zbajje is strictly an 18+ platform. We do not knowingly collect, process, or retain personal data belonging to individuals under the age of 18. The zbajje registration process includes date-of-birth verification, and accounts found to belong to minors are immediately closed and all associated data is deleted.

If you believe that a minor has registered an account on zbajje or that personal data of a child has been inadvertently collected, please contact us immediately at [email protected]. We take such reports seriously and will investigate and act promptly.

12. Updates to This Privacy Policy

zbajje may update this Privacy Policy from time to time to reflect changes in our data practices, operational requirements, or applicable law. When material changes are made, we will update the "Last Updated" date at the top of this page and notify registered players via email or in-platform notification. We encourage you to review this policy periodically to stay informed about how zbajje protects your data.

Your continued use of the zbajje platform following the effective date of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the revised policy, you should cease using the platform and request account closure by contacting [email protected].

13. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way zbajje handles your personal data, our dedicated support team is available around the clock:

• Email: [email protected]
• Subject Line for Data Requests: Data Rights Request
• Website: zbajje.app
• Response Time: Within 30 calendar days for formal data rights requests; within 24 hours for general enquiries
• Support Hours: 24/7, 365 days a year
• Time Zone: Bangladesh Standard Time (BST, UTC+6)