jbaji Privacy Policy — How We Handle Your Data

Your Privacy at a Glance

The following cards summarise jbaji's key privacy commitments. Please read the full policy below for complete details.

1. Introduction

jbaji ("we", "us", "our") operates the online gaming platform at jbaji.asia ("the Platform"). This Privacy Policy explains how we collect, use, store, share, and protect personal information relating to individuals who register for or use the Platform ("you", "the Player"). This policy also explains the rights you have in relation to your personal data and how to exercise those rights.

By registering an account on jbaji.asia, you acknowledge that you have read and understood this Privacy Policy. We are committed to handling your personal information with care, transparency, and in accordance with applicable data protection principles. We do not sell personal data, and we collect only the data that is necessary to operate the Platform safely and in compliance with our obligations.

2. Information We Collect

We collect personal information from you directly when you register and use the Platform. The categories of information we collect include:

• Identity information: your full legal name, date of birth, and copies of government-issued identification documents submitted for KYC verification purposes.
• Contact information: your registered mobile number (in 01XXXXXXXXX format) and, where provided, your email address. These are used for account verification, transaction notifications, and customer support communications.
• Account and transaction data: your account username, account balance history, deposit and withdrawal records, betting history, game session logs, and bonus activity. This data is required to operate your account and is retained for regulatory and dispute resolution purposes.
• Technical data: your IP address, device type, operating system, browser type and version, screen resolution, and session timestamps. This data is collected automatically when you access the Platform and is used for fraud prevention, security monitoring, and performance optimisation.
• Communications data: records of your interactions with our customer support team, including support tickets, live chat transcripts, and email correspondence with [email protected].

We also collect certain information automatically through cookies and similar tracking technologies when you use the Platform. This includes:

• Page visit data: which pages you visit, how long you spend on each page, and which links you click. This helps us understand how players use the Platform and identify areas for improvement.
• Referral data: if you arrived at jbaji.asia via a specific link or referral source, we record that referral source for internal analytics and affiliate tracking purposes.
• Device fingerprint data: a non-personally-identifiable device signature used to detect and prevent fraud, account sharing across prohibited multiple accounts, and automated bot activity.

3. How We Use Your Information

jbaji uses the personal information we collect for the following purposes:

• Account administration: to create and manage your jbaji account, verify your identity, process deposits and withdrawals, and maintain your transaction history.
• Service delivery: to provide access to games, live casino tables, sports betting markets, and all other features of the Platform that you use.
• Regulatory compliance and fraud prevention: to comply with anti-money laundering (AML) obligations, Know Your Customer (KYC) requirements, and to detect and investigate suspected fraud, bonus abuse, or prohibited activities.
• Customer support: to respond to your support queries, resolve complaints, and maintain records of our communications with you for quality assurance and dispute resolution purposes.
• Responsible gaming: to monitor your gaming activity for signs of problem gambling and to facilitate your use of responsible gaming tools such as deposit limits, session reminders, and self-exclusion. Where we identify indicators of problem gambling, we may proactively contact you.
• Marketing and promotions: to inform you about jbaji promotions, bonuses, and special offers that may be of interest to you. You may opt out of marketing communications at any time by contacting [email protected]. Opting out of marketing does not affect your ability to use the Platform.

4. Legal Basis for Processing

jbaji processes your personal data on the following legal bases:

• Contractual necessity: processing your identity, contact, and transaction data is necessary to fulfil our contract with you — specifically, to provide the gaming services you have signed up for. Without this processing, we cannot operate your account.
• Legal obligation: processing data for KYC, AML, and fraud prevention is required by applicable regulatory and legal frameworks. jbaji must collect and retain this data to comply with these obligations regardless of your consent.
• Legitimate interests: processing technical data, device data, and analytics data to prevent fraud, maintain platform security, and improve the Platform's performance serves our legitimate interests and those of our players. This processing does not override your fundamental rights.
• Consent: where we send you optional marketing communications about promotions or bonuses, we do so on the basis of your implied consent at registration. You may withdraw this consent at any time without affecting your ability to use the Platform.

5. Sharing Your Information

jbaji does not sell your personal data. We share personal data with third parties only in the following limited circumstances:

• Payment processors: we share transaction data (including your mobile number and payment account reference) with bKash, Nagad, Rocket, Upay, Visa, and Mastercard to process deposits and withdrawals. These parties process your data under their own privacy policies and are bound by contractual data protection obligations.
• Game providers: we share your account identifier (not your full personal details) with licensed game providers such as Pragmatic Play, Evolution Gaming, Spribe, Ezugi, NetEnt, and Microgaming to authenticate your game sessions and record game outcomes.
• Fraud prevention and security services: we may share technical data and account data with third-party fraud prevention and identity verification services to detect and investigate suspected fraudulent activity, money laundering, or breaches of our Terms and Conditions.
• Legal and regulatory authorities: we will disclose personal data to law enforcement agencies, regulatory bodies, or courts when required to do so by applicable law, court order, or regulatory directive. We will notify you of such disclosures where we are legally permitted to do so.

All third parties with whom jbaji shares personal data are required to handle that data in accordance with applicable data protection standards and to use it only for the specific purpose for which it was shared. jbaji does not permit third parties to use your data for their own marketing purposes.

6. Payment Data and Financial Privacy

jbaji does not store full card numbers, bKash PINs, Nagad PINs, or other sensitive payment authentication credentials on our servers. Payment transactions are processed through the secure infrastructure of our payment partner networks (bKash, Nagad, Rocket, Upay, Visa, Mastercard). jbaji receives only a transaction confirmation reference and the outcome of each transaction.

We do retain a record of each deposit and withdrawal transaction, including the amount in Bangladeshi Taka (৳), the date and time of the transaction, the payment method used, and the transaction status. This record is part of your account transaction history and is retained for the periods described in Section 8 (Data Retention) of this policy.

7. Cookies and Tracking Technologies

jbaji uses cookies and similar tracking technologies on jbaji.asia. Cookies are small text files stored on your device by your browser. We use three categories of cookies:

• Essential cookies: these are required for the Platform to function. They maintain your login session, remember your language preference, and ensure secure transmission of data between your device and our servers. Essential cookies cannot be disabled without affecting your ability to use the Platform.
• Analytics cookies: these help us understand how players navigate the Platform, which pages are most visited, and where technical issues occur. Analytics data is aggregated and anonymised wherever possible. We use this data to make informed decisions about Platform improvements.
• Fraud prevention cookies: these record a non-identifiable device signature to detect anomalous behaviour patterns, prevent account takeover attempts, and identify coordinated multi-account activity that violates our Terms and Conditions.

You can manage cookie preferences through your browser settings. Please note that disabling cookies beyond essential cookies may affect the functionality of the Platform, including your ability to maintain a logged-in session or access certain game features. We do not use third-party advertising cookies or cross-site tracking cookies.

8. Data Retention

jbaji retains your personal data for as long as your account remains active and for a period thereafter as required by applicable legal and regulatory obligations. Specifically: account and identity data is retained for a minimum of 5 years following account closure to satisfy AML and KYC record-keeping requirements; transaction records are retained for a minimum of 5 years; communications with customer support are retained for 3 years; technical and analytics data is retained for up to 24 months before being anonymised or deleted.

Where data is no longer required for the purposes for which it was collected, and no legal obligation requires its continued retention, jbaji will securely delete or anonymise that data. If you request deletion of your account, we will action that request within 30 days subject to our legal retention obligations described above.

9. Your Data Rights

As a registered player on jbaji, you have the following rights in relation to your personal data. To exercise any of these rights, contact us at [email protected] with the subject line "Data Rights Request":

• Right of access: you have the right to request a copy of the personal data jbaji holds about you, along with information about how it is used and with whom it has been shared. We will respond to access requests within 30 days.
• Right to rectification: if any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it. We will act on rectification requests within 14 days.
• Right to erasure: you have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent. This right is subject to our legal retention obligations — we cannot delete data we are required by law to retain.
• Right to restrict processing: you have the right to request that we limit how we use your personal data in certain circumstances, for example while you are contesting the accuracy of data we hold about you.
• Right to object to marketing: you have an unconditional right to object to the use of your personal data for direct marketing purposes at any time. Contact [email protected] to opt out. We will process opt-out requests immediately.

To submit a data rights request, email [email protected] with the subject line "Data Rights Request" and describe the right you wish to exercise. We will acknowledge your request within 48 hours and respond in full within 30 days. We may need to verify your identity before processing your request to ensure we are disclosing or acting on data belonging to the correct individual.

10. Data Security

jbaji takes the security of your personal data seriously. We implement a range of technical and organisational security measures to protect your data against unauthorised access, accidental loss, destruction, or alteration. These measures include: SSL/TLS encryption on all data transmitted between your device and our servers; encrypted storage of sensitive account data; access controls that restrict internal access to personal data to authorised personnel only on a need-to-know basis; regular security reviews and vulnerability assessments of our Platform infrastructure.

While we apply industry-standard security practices, no online platform can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, jbaji will notify affected players without undue delay and will take immediate steps to contain the breach and mitigate its impact. If you suspect that your account has been compromised, contact [email protected] immediately.

11. Children and Minors

jbaji is strictly an adult platform. We do not knowingly collect personal data from individuals under the age of 21. Our registration process is designed to prevent minors from creating accounts, and we conduct age verification checks as part of our KYC process. If we discover that we have collected personal data from an individual under 21, we will immediately suspend the relevant account, delete the personal data, and return any deposited funds following verification. If you believe a minor may have registered on jbaji, please contact [email protected] immediately.

12. Changes to This Privacy Policy

jbaji may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or Platform features. When we make material changes to this policy, we will update the "Last updated" date at the top of this page and, where the changes are significant, notify registered players via their registered mobile number or email address.

We encourage you to review this Privacy Policy periodically. Your continued use of the jbaji platform following the publication of a revised policy constitutes your acceptance of the updated terms. If you disagree with the changes, you should stop using the Platform and may request deletion of your account by contacting [email protected].

13. Contact and Data Queries

If you have any questions about this Privacy Policy, wish to exercise your data rights, or have a concern about how jbaji handles your personal data, please contact our support team. We handle all data-related queries with priority. Our contact address is [email protected] — please note this is displayed as plain text and is not a clickable link. Copy it manually into your email client.

jbaji aims to respond to all privacy-related queries within 48 hours. For formal data rights requests (access, deletion, rectification), we will provide a full response within 30 days. All communications should be made in writing via email to [email protected] to ensure a complete record is maintained.