Your Privacy Matters to jbaj

Information We Collect

When you register for and use a jbaj account, we collect several categories of personal information. This section describes each category, the specific data points within it, and the mechanism by which that data enters our systems. We are committed to collecting only what is genuinely necessary for the purposes described in this Policy.

We do not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data beyond what is contained in a government-issued identity document submitted for age and identity verification purposes.

How We Use Your Data

jbaj processes your personal data for specific, clearly defined purposes. We do not use your data for any purpose that is incompatible with the original reason it was collected. The table below sets out each processing purpose, the category of data used, and the legal basis on which we rely. Legal bases are described in full in Section 3.

• Account Creation and Management: We use your identity and contact data to create and maintain your jbaj account, verify your credentials at login, and keep your account record accurate and up to date.
• Age and Identity Verification (KYC): We use your identity documents and date of birth to confirm that you are at least 18 years old and that you are who you say you are. This is a legal and responsible gaming obligation.
• Payment Processing: We use your financial data to process deposits received from bKash, Nagad, Rocket, Upay, and Bangladeshi bank accounts, and to route withdrawals back to your verified payment method. Transaction records are maintained for legal and audit purposes.
• Game and Betting Services: We use your usage data and account balance to operate the betting and gaming services you access — including settling bets, recording game outcomes, applying bonus credits, and maintaining your transaction history.
• Fraud Prevention and Security: We use technical data (IP address, device fingerprint, login history) to detect suspicious activity, prevent unauthorised access to your account, and identify patterns consistent with fraud, money laundering, or collusion.
• Responsible Gaming Monitoring: We use usage data to identify patterns that may indicate problem gambling behaviour — such as unusually frequent deposits, rapid loss-chasing, or requests for self-exclusion — and to proactively offer support tools where appropriate.
• Customer Support: We use communications data and account records to respond to your support enquiries, resolve complaints, and maintain a record of interactions for quality and compliance purposes.
• Marketing Communications: Where you have opted in, we use your contact data and marketing preferences to send you information about relevant promotions, bonuses, and seasonal offers. You may opt out at any time via your account settings or by emailing [email protected].
• Legal Compliance: We use identity, financial, and communications data to fulfil our obligations under applicable law, including responding to lawful requests from government or regulatory authorities and maintaining records required by anti-money-laundering regulations.
• Platform Improvement: We use aggregated, anonymised usage data to analyse how players interact with jbaj, identify areas for improvement, and develop new features. This analysis does not identify individual players.

Legal Basis for Processing

Every processing activity carried out by jbaj is supported by at least one of the following recognised legal bases. We identify the applicable legal basis for each major processing purpose below.

• Contractual Necessity: The majority of our data processing is necessary to perform the contract between you and jbaj — that is, to provide the gaming and betting Services you have registered for. This includes account management, payment processing, game operation, and bet settlement. Without this processing, we cannot deliver the Services.
• Legal Obligation: Some processing is required by law, regardless of your consent or our contractual relationship. This includes age verification (KYC), anti-money-laundering checks, retention of financial transaction records, and cooperation with lawful requests from relevant authorities.
• Legitimate Interests: We process technical and usage data to detect and prevent fraud, maintain platform security, and monitor for responsible gaming concerns. These are legitimate interests that do not override your fundamental rights where we have implemented appropriate safeguards.
• Consent: Where we send you marketing communications, we rely on your explicit opt-in consent. You have the right to withdraw this consent at any time, and withdrawal does not affect the lawfulness of any processing carried out before the withdrawal.

Data Sharing & Disclosure

jbaj does not sell, rent, or trade your personal data to third parties for their own marketing or commercial purposes. We share your data only in the specific circumstances described below, and only with parties who are contractually bound to handle it with the same level of care and confidentiality that we apply ourselves.

• Payment Service Providers: To process deposits and withdrawals, we share the minimum necessary financial and identity data with bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, and Sonali Bank. These providers operate under their own privacy policies and are subject to applicable Bangladeshi financial regulations.
• Identity Verification Partners: Where automated KYC checks are performed, we may share identity document images and relevant personal data with a trusted identity verification service provider operating under a strict data processing agreement with jbaj.
• Game Technology Partners: Game content on jbaj is supplied by third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive session data necessary to operate their games (such as player session tokens). They do not receive your full identity or payment information.
• Fraud Prevention Services: We may share IP addresses, device identifiers, and account behaviour data with fraud detection partners to identify and prevent suspicious activity, multi-accounting, and financial crime.
• Legal and Regulatory Disclosure: We may disclose your personal data to government authorities, law enforcement agencies, or courts where we are required to do so by applicable law, or where we reasonably believe that disclosure is necessary to protect the safety or rights of jbaj, our players, or third parties.
• Business Transfers: In the event that jbaj undergoes a merger, acquisition, or sale of all or part of its assets, your personal data may be transferred to the acquiring entity as part of that transaction. We will notify registered players of any such transfer via the registered email address before it takes effect.

Cookies & Tracking Technologies

jbaj uses cookies and similar tracking technologies to operate the platform, maintain your session, remember your preferences, and analyse how the site is used. This section explains what types of cookies we use and how you can manage them.

You can manage cookie preferences through your browser settings. Most modern browsers allow you to block or delete cookies; however, disabling strictly necessary cookies will prevent you from logging into your jbaj account and using core platform features. Disabling functional or analytics cookies will not affect your ability to place bets or access games.

Instructions for managing cookies vary by browser. Consult the help documentation of your specific browser (Chrome, Firefox, Samsung Internet, Opera Mini, or other) for guidance on viewing, blocking, or deleting cookies stored on your device.

Data Retention

jbaj retains personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying any legal, accounting, or reporting requirements. The retention periods below apply to the major categories of personal data we hold.

• Active Account Data: All personal data associated with an active account (identity, contact, financial, and usage data) is retained for the duration of your account's active status and for a period of 5 years following the date of account closure. This retention period is required to satisfy anti-money-laundering record-keeping obligations.
• Financial Transaction Records: Records of all deposits, withdrawals, wagers, and winnings are retained for a minimum of 7 years following the date of each transaction. This period is consistent with standard financial record-keeping requirements.
• Identity Verification Documents: Copies of National ID cards, passports, and other KYC documents are retained for 5 years following account closure. After this period, documents are securely deleted from our systems.
• Support Communications: Chat transcripts, email correspondence, and complaint records are retained for 3 years following the resolution of the relevant interaction. Records relating to unresolved disputes are retained until the dispute is fully resolved.
• Marketing Consent Records: Records of your marketing opt-in or opt-out preference are retained for as long as your account is active and for 3 years following account closure, to demonstrate compliance with applicable marketing regulations.
• Server Logs and Technical Data: IP address logs and session logs are retained for a rolling period of 12 months for security monitoring purposes and then deleted unless they form part of an ongoing fraud or legal investigation.

Your Privacy Rights

As a jbaj player, you hold the following rights with respect to your personal data. To exercise any of these rights, please contact our support team at [email protected] with the subject line "Privacy Rights Request" and a description of your request. We will respond within 30 calendar days.

• Right of Access: You have the right to request a copy of all personal data jbaj holds about you. We will provide this in a clear, readable format within 30 days of receiving your verified request.
• Right to Rectification: If any of the personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it. Basic corrections (such as updating your phone number or address) can also be made directly through your account settings.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where you object to processing and there is no overriding legal ground. We will honour erasure requests to the fullest extent permitted by law.
• Right to Restriction: You have the right to request that we restrict the processing of your personal data in certain circumstances — for example, while a rectification request is being assessed, or where you have objected to processing and we are verifying our legitimate grounds.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity, you have the right to receive your personal data in a structured, commonly used, machine-readable format, and to request that it be transmitted directly to another service provider where technically feasible.
• Right to Object: You have the right to object to processing based on our legitimate interests at any time. We will cease that processing unless we can demonstrate compelling legitimate grounds that override your interests, or where the processing is necessary for the establishment, exercise, or defence of legal claims.
• Right to Withdraw Consent: Where processing is based on your consent — specifically, marketing communications — you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
• Right Not to Be Subject to Automated Decision-Making: jbaj does not make significant decisions about your account (such as account closure or withdrawal restrictions) solely by automated means without human review, except where strictly required by our fraud detection systems, in which case you have the right to request human review of that decision.

Data Security

jbaj takes the security of your personal data seriously. We implement a layered set of technical and organisational security measures to protect your data from unauthorised access, disclosure, alteration, and destruction. The key measures in place are described below.

• SSL/TLS Encryption in Transit: All communication between your browser or mobile device and jbaj's servers is encrypted using industry-standard TLS 1.2 or higher. This ensures that your login credentials, payment data, and personal information cannot be intercepted during transmission.
• Encrypted Storage: Sensitive data at rest — including identity documents, payment account numbers, and password hashes — is stored in encrypted format using AES-256 or equivalent standards. Plain-text storage of sensitive fields is strictly prohibited in our systems.
• Access Controls: Access to personal data is restricted to jbaj staff and contractors who require it to perform their job functions. All staff with access to personal data are subject to confidentiality obligations and receive regular data protection training. Access privileges are reviewed periodically and revoked promptly when no longer required.
• Two-Factor Authentication: jbaj's internal administrative systems require two-factor authentication for all staff accessing player data. We also offer two-factor authentication to players for account login, and we strongly encourage you to enable this feature in your account security settings.
• Incident Response: jbaj maintains a documented data breach response procedure. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify affected players without undue delay and take immediate steps to contain and remediate the breach.
• Third-Party Security Assessments: jbaj's technical infrastructure undergoes periodic security assessments. Game content is supplied by certified studios that maintain their own security standards consistent with international online gaming industry requirements.

Despite our best efforts, no data transmission over the internet or electronic storage system can be guaranteed to be 100% secure. If you believe that the security of your jbaj account has been compromised, please contact us immediately at [email protected] and change your account password without delay.

Contact for Privacy Matters: For any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by jbaj, please contact our support team at [email protected]. Our team is available 24 hours a day, 7 days a week on Bangladesh Standard Time (BST, UTC+6) and will direct your enquiry to the appropriate person for data protection matters.

Changes to This Policy: jbaj reserves the right to update this Privacy Policy at any time. Where a material change is made — for example, a change to the categories of data we collect, the purposes for which we use it, or the third parties with whom we share it — we will notify registered players via their registered email address at least 14 days before the change takes effect. Your continued use of jbaj after the effective date of a revised Policy constitutes your acceptance of the updated terms. The version currently published on this page is always the operative version.