zbajee Privacy Policy

1. Introduction

zbajee ("zbajee", "we", "us", "our") is committed to protecting the privacy and personal data of all users of the zbajee platform, accessible at zbajee.bio. This Privacy Policy ("Policy") describes how zbajee collects, uses, stores, shares, and protects personal data in connection with the operation of its online casino, sportsbook, and associated services, with specific reference to players based in Bangladesh.

By registering an account on zbajee, making a deposit, placing a bet, or otherwise using the zbajee platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not consent to these practices, you must not use the zbajee platform.

This Policy should be read alongside zbajee's Terms & Conditions and Responsible Gaming Policy, which are available on the zbajee website. In the event of any conflict between this Policy and another zbajee document, this Policy shall govern matters relating to personal data and privacy.

2. Data Controller

For the purposes of this Privacy Policy, zbajee acts as the data controller in respect of the personal data of players who use the zbajee platform. As data controller, zbajee determines the purposes and means by which your personal data is processed. If you have any questions about the identity of the data controller or how your data is processed, please contact us at [email protected].

3. Data We Collect

zbajee collects the following categories of personal data from players:

3.1 Identity Data

• Full legal name
• Date of birth
• Gender (where provided)
• National Identity Card (NID) number or passport number (for verification purposes)
• Copies of government-issued identity documents submitted during verification

3.2 Contact Data

• Email address
• Mobile phone number
• Residential address (city, district, postal code — Bangladesh)

3.3 Financial Data

• bKash, Nagad, Rocket, or Upay mobile wallet identifiers (account numbers)
• Bank account details (where bank transfer is used as a payment method)
• Transaction history — deposits, withdrawals, and associated amounts in BDT
• Bonus and promotional credit history

3.4 Technical Data

• IP address
• Browser type and version
• Device type and operating system
• Time zone and language settings
• Cookie identifiers and session tokens
• Pages visited, click-path data, and time spent on platform

3.5 Usage & Gaming Data

• Betting and wagering history across all zbajee products (sportsbook, casino, slots, jackpot bingo, live dealer games)
• Game session duration and frequency
• Responsible gaming tool usage (deposit limits set, self-exclusion requests, time-out periods)
• Customer support interaction records

3.6 Communications Data

• Records of emails, live chat messages, and other communications between you and zbajee's support team
• Survey responses and feedback submitted voluntarily

4. How We Collect Data

zbajee collects personal data through the following means:

• Direct interactions: Data you provide when registering your zbajee account, completing identity verification, making a deposit or withdrawal, contacting support, or participating in a promotion.
• Automated technologies: Technical and usage data collected automatically when you access and interact with the zbajee platform, including via cookies, server logs, and analytics tools.
• Third-party sources: Identity verification data obtained from document verification partners; fraud-prevention signals from payment processors; and publicly available data used to verify identity or comply with anti-money laundering requirements.

5. Legal Basis for Processing

zbajee processes your personal data on the following legal grounds:

Processing Purpose	Legal Basis
Account registration and management	Contractual necessity
Processing deposits and withdrawals	Contractual necessity
Identity and age verification	Legal obligation / contractual necessity
Anti-money laundering checks	Legal obligation
Fraud prevention and security monitoring	Legitimate interest
Responsible gaming monitoring	Legal obligation / legitimate interest
Customer support communications	Contractual necessity / legitimate interest
Platform analytics and improvement	Legitimate interest
Promotional communications (opt-in)	Consent

6. How We Use Your Data

zbajee uses your personal data for the following purposes:

• Account administration: Creating and maintaining your zbajee account, verifying your identity and age (18+ requirement), and managing account settings.
• Service delivery: Processing deposits in BDT via bKash, Nagad, Rocket, Upay, and bank transfer; processing withdrawal requests; enabling access to casino games, sportsbook markets, jackpot bingo, and live dealer services.
• Security and fraud prevention: Monitoring account activity for signs of fraudulent transactions, multi-accounting, money laundering, or other prohibited conduct as defined in zbajee's Terms & Conditions.
• Responsible gaming: Monitoring gaming patterns to identify at-risk behaviour; administering deposit limits, session limits, cooling-off periods, and self-exclusion requests submitted by players.
• Legal compliance: Meeting anti-money laundering (AML) obligations; responding to lawful requests from competent authorities; maintaining records as required by applicable law.
• Customer support: Responding to enquiries, resolving disputes, and improving support quality through interaction records.
• Platform improvement: Analysing aggregated usage data to understand how Bangladesh players interact with zbajee, identify technical issues, and enhance product features.
• Marketing (with consent only): Sending promotional communications about zbajee offers, new games, seasonal promotions (such as Eid, Pohela Boishakh, or BPL season offers), and platform updates — only where you have opted in to receive such communications. You may withdraw consent at any time by contacting support.

7. Data Sharing & Disclosure

zbajee does not sell, rent, or trade your personal data to any third party for commercial or marketing purposes. Your data may be shared with the following categories of third parties, strictly on a need-to-know basis and subject to appropriate contractual protections:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard — to process transactions. These processors operate under their own privacy policies and are independently responsible for data they collect.
• Identity verification providers: Third-party document verification services used to confirm identity and age as part of zbajee's Know Your Customer (KYC) procedures.
• Game studios and software providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other game providers may receive session data necessary to deliver their games via the zbajee platform. These providers do not receive your identity or payment data.
• IT and infrastructure providers: Cloud hosting, data storage, and cybersecurity service providers who process data on zbajee's behalf under strict data processing agreements.
• Legal and regulatory authorities: Law enforcement agencies, financial intelligence units, or other competent authorities where zbajee is required by law to disclose information. zbajee will notify affected players of such disclosures where legally permitted to do so.
• Professional advisers: Legal counsel, auditors, and compliance consultants, subject to professional confidentiality obligations.

Where personal data is shared with any third party, zbajee takes reasonable steps to ensure that the recipient provides an adequate level of protection for that data consistent with this Privacy Policy.

8. Cookies & Tracking Technologies

8.1 What Are Cookies

Cookies are small text files placed on your device when you visit the zbajee website. They allow the platform to recognise your browser, remember your preferences, maintain your login session, and gather analytics data about how the platform is used.

8.2 Types of Cookies Used by zbajee

• Essential cookies: Required for the zbajee platform to function correctly. These include session cookies that keep you logged in and security cookies that protect against cross-site request forgery. These cannot be disabled without breaking core platform functionality.
• Functional cookies: Remember your preferences such as language settings, preferred payment method, and display options to improve your experience on zbajee.
• Analytics cookies: Collect anonymised data about how players navigate the zbajee platform — which pages are visited most, where users drop off, and how long sessions last. This data is used solely to improve platform performance and user experience.
• Security cookies: Used to detect and prevent fraudulent activity, enforce login session timeouts, and monitor for suspicious access patterns.

8.3 Managing Cookies

You can manage or disable cookies through your browser settings at any time. Please note that disabling essential cookies will impair your ability to use the zbajee platform, including logging in and accessing your account. Disabling analytics or functional cookies will not prevent you from using the platform but may affect your experience.

9. Data Retention

zbajee retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention periods apply:

• Account data: Retained for the duration of your active zbajee account plus a minimum of five (5) years following account closure, to comply with anti-money laundering record-keeping requirements.
• Transaction records: Retained for a minimum of five (5) years from the date of the transaction.
• Identity verification documents: Retained for the duration of your account plus five (5) years following closure.
• Customer support records: Retained for three (3) years from the date of the interaction.
• Marketing consent records: Retained until consent is withdrawn plus one (1) year thereafter, as evidence of consent.
• Technical and analytics data: Typically retained in aggregated or anonymised form for up to two (2) years.

When personal data is no longer required, zbajee will securely delete or anonymise it in a manner that prevents reconstruction of the original data.

10. Data Security

zbajee implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the zbajee platform.
• Encrypted data storage for sensitive personal and financial data at rest on zbajee's servers.
• Access controls: Strict role-based access controls limiting zbajee staff access to personal data on a need-to-know basis, with access logs maintained and reviewed regularly.
• Regular security audits and penetration testing conducted by qualified cybersecurity professionals.
• Automated intrusion detection systems monitoring for suspicious access patterns in real time.
• Staff training: All zbajee personnel with access to personal data receive regular privacy and data security training.

While zbajee takes all reasonable steps to protect your personal data, no internet-based platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your zbajee login credentials. If you believe your account has been compromised, please contact support immediately at [email protected].

11. Your Rights

As a zbajee account holder, you have the following rights in relation to your personal data:

• Right of access: You may request a copy of the personal data zbajee holds about you.
• Right to rectification: You may request correction of any inaccurate or incomplete personal data zbajee holds about you.
• Right to erasure: You may request deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purposes for which it was collected. This right is subject to zbajee's legal retention obligations, which may require certain data to be retained even after a deletion request.
• Right to restriction of processing: You may request that zbajee restricts the processing of your data in certain circumstances, such as where you contest the accuracy of the data.
• Right to data portability: Where processing is based on your consent or contractual necessity, you may request a copy of your personal data in a structured, machine-readable format.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time by contacting support. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.
• Right to object: You may object to processing carried out on the basis of zbajee's legitimate interests, including direct marketing.

To exercise any of these rights, please contact zbajee's support team at [email protected]. zbajee will respond to all verified requests within thirty (30) calendar days. In complex cases, this period may be extended by a further thirty (30) days, in which case you will be notified of the extension and the reason for it.

12. Children's Privacy

The zbajee platform is strictly intended for adults aged 18 years and over. zbajee does not knowingly collect personal data from individuals under the age of 18. If zbajee becomes aware that personal data has been collected from a person under the age of 18, that data will be deleted promptly and the associated account will be closed. If you believe that a person under 18 has submitted personal data to zbajee, please notify us immediately at [email protected].

13. Third-Party Links

The zbajee platform may contain references to third-party game studios, payment providers, and other services. This Privacy Policy applies solely to data processed by zbajee. Where you interact with third-party services — including bKash, Nagad, Rocket, Upay, or game providers such as Pragmatic Play or Evolution Gaming — those interactions are governed by the respective third party's own privacy policy. zbajee is not responsible for the privacy practices of third-party services.

14. Changes to This Policy

zbajee reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, operational requirements, or applicable legal obligations. Where material changes are made, zbajee will provide reasonable prior notice to registered players via email or an on-platform notification, and will update the effective date displayed at the top of this page. Your continued use of the zbajee platform following publication of an updated Privacy Policy constitutes your acceptance of the revised policy. If you do not agree to the revised policy, you must discontinue use of the platform and may request account closure in accordance with the Terms & Conditions.

15. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or zbajee's data practices, please contact the zbajee privacy team using the details below. Bangladesh players across Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar are welcome to reach out at any time.

• Email: [email protected] (plain text — not a clickable link)
• Subject line: "Privacy Request – [Your Account Username]"
• Support Hours: 24 hours a day, 7 days a week
• Response Time: Within 30 calendar days for data subject requests; within 24 hours for general privacy enquiries