jbajee Privacy Policy

jbajee is committed to protecting the privacy and security of every player who uses its online casino and sports betting services. As a platform serving the Bangladesh market, jbajee operates with the highest standards of data stewardship — treating your personal information with the same level of professional care that a licensed financial institution would apply to customer records.

This Policy applies to all personal data collected through the jbajee website at jbajee.biz, including data gathered during account registration, identity verification, deposits and withdrawals, gameplay, customer support interactions, and marketing communications. It covers data processed by jbajee directly and by authorised third-party processors acting on jbajee's behalf.

We encourage you to read this Policy in full before registering an account or making use of any jbajee service. If you have questions about any aspect of this Policy, please contact our dedicated data protection team at [email protected].

jbajee collects the following categories of personal data, depending on the nature of your interaction with the Platform:

Where jbajee requests identity or verification documents, such documents are used solely for the purposes of confirming player eligibility, satisfying Know Your Customer (KYC) obligations, and complying with applicable anti-money-laundering requirements. Document copies are stored in an encrypted environment with access restricted to authorised compliance personnel only.

jbajee collects personal data through the following channels:

• Direct interactions: Data you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting support, or responding to promotions.
• Automated technologies: When you visit or interact with the Platform, technical and usage data is collected automatically via cookies, server logs, session tracking, and similar technologies. See Section 7 for full details on cookie use.
• Payment processors: When you transact via bKash, Nagad, Rocket, Upay, or a bank transfer, the payment provider confirms transaction status and may share relevant transaction metadata with jbajee to reconcile your account balance.
• KYC verification providers: jbajee works with authorised third-party identity verification services that process submitted documents and return a verification outcome. These providers do not retain your documents beyond the period required to complete verification.
• Fraud and risk screening tools: Automated systems analyse login patterns, device fingerprints, and transaction behaviour to detect and prevent fraud, money laundering, and multi-accounting.

jbajee does not purchase personal data from data brokers or source personal information about you from social media platforms without your explicit consent.

jbajee processes your personal data for the following purposes:

• Account management: Creating, maintaining, and administering your jbajee player account, including processing login requests, password resets, and account preference updates.
• Identity and age verification: Confirming that you meet the 18+ age requirement and that the identity information provided at registration is accurate and genuine.
• Transaction processing: Executing deposit and withdrawal requests across supported payment methods including bKash, Nagad, Rocket, Upay, and bank transfers, all settled in Bangladeshi Taka.
• Responsible gaming compliance: Monitoring gameplay patterns to identify potential problem gambling behaviour, enforcing self-exclusion requests and deposit limits, and fulfilling obligations under responsible gaming policy.
• Fraud prevention and security: Detecting unauthorised account access, identifying multi-accounting, preventing money laundering, and protecting the integrity of all games and betting markets on the Platform.
• Customer support: Responding to enquiries, resolving complaints, and maintaining a record of communications for quality assurance and dispute resolution purposes.
• Marketing communications: Sending promotional offers, bonus notifications, and tournament announcements to players who have opted in to receive such communications. You may withdraw consent at any time by contacting [email protected].
• Platform improvement: Analysing aggregated usage data to improve game selection, website performance, payment flow design, and overall user experience.
• Legal and regulatory compliance: Fulfilling obligations under applicable anti-money-laundering, counter-terrorist financing, and data protection regulations, including maintaining transaction records for the minimum statutory retention period.

jbajee processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform the player account agreement, including account creation, deposit and withdrawal execution, and gameplay facilitation.
• Legal obligation: Processing required to comply with applicable anti-money-laundering laws, age verification requirements, financial record-keeping regulations, and law enforcement requests made through lawful channels.
• Legitimate interests: Processing necessary for fraud prevention, platform security, multi-accounting detection, and aggregate analytics — where such processing does not override your fundamental privacy rights.
• Consent: Processing for marketing communications and optional personalisation features, where you have given express consent. You may withdraw this consent at any time without affecting the lawfulness of processing carried out before withdrawal.

jbajee does not sell, rent, or trade your personal data to unaffiliated third parties for their own commercial purposes. We share personal data only in the following circumstances and only to the extent strictly necessary:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, and card networks (Visa, Mastercard) receive transaction-relevant data to process your deposits and withdrawals.
• KYC and identity verification providers: Authorised third-party services receive identity document data solely to perform verification checks on jbajee's behalf. These providers are bound by confidentiality obligations and are not permitted to use your data for any other purpose.
• Game providers: Licensed game studios including Pragmatic Play, NetEnt, Microgaming, Spribe, Evolution Gaming, and Ezugi receive a pseudonymised player identifier and stake/win data to facilitate gameplay and calculate outcomes. No directly identifiable personal data (name, NID, mobile number) is passed to game providers.
• Fraud and risk platforms: Anonymised or pseudonymised device and behavioural signals may be shared with fraud screening services to identify and block suspicious activity patterns.
• Law enforcement and regulatory authorities: jbajee will disclose personal data to competent authorities when required to do so by law, by court order, or where disclosure is necessary to prevent or report suspected financial crime.
• Corporate transactions: In the event of a merger, acquisition, or asset sale, player data may be transferred to the successor entity. Players will be notified of any such transfer before it takes effect and, where required, consent will be sought.

All third-party processors engaged by jbajee are required to implement data security measures consistent with industry standards and to process personal data solely on jbajee's documented instructions.

jbajee uses cookies and similar tracking technologies to ensure the Platform functions correctly, to maintain session state, and to gather analytical data about how the Platform is used. The following cookie categories are used:

Essential and security cookies are strictly necessary for the Platform to operate and cannot be disabled without breaking core functionality. Functional and analytical cookies may be managed through your browser settings. Note that disabling functional cookies may affect the availability of certain personalisation features.

jbajee does not use advertising cookies or third-party retargeting pixels that track your browsing behaviour across unaffiliated websites.

jbajee retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following indicative retention periods apply:

• Account and identity data: Retained for the duration of the account relationship and for a minimum of 5 years following account closure, in accordance with anti-money-laundering record-keeping requirements.
• Transaction records: Retained for a minimum of 5 years from the date of each transaction, in line with financial record-keeping obligations.
• KYC documents: Retained for a minimum of 5 years from the date of verification or from the date of account closure, whichever is later.
• Customer support communications: Retained for 3 years from the date of the last interaction, to support dispute resolution and regulatory enquiries.
• Usage and gameplay data: Retained for 2 years in identifiable form; thereafter aggregated and anonymised for long-term analytical purposes.
• Marketing consent records: Retained for the duration of consent and for 1 year following withdrawal of consent, to demonstrate compliance.

When data is no longer required and no legal obligation mandates its retention, jbajee will securely delete or irreversibly anonymise it using industry-standard procedures.

jbajee implements a layered security architecture designed to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Key security measures include:

• 256-bit SSL/TLS encryption: All data transmitted between your device and the jbajee Platform is encrypted using 256-bit SSL/TLS protocols. This applies to all Platform sessions including account login, deposits, withdrawals, and support interactions.
• Encrypted data storage: Personal data and financial records stored on jbajee servers are encrypted at rest using AES-256 encryption. Database access is restricted to authorised personnel through role-based access control.
• Two-factor authentication: Players are encouraged to enable two-factor authentication (2FA) on their accounts. jbajee support staff accounts are required to use 2FA as a mandatory access control.
• Real-time anomaly detection: Automated systems monitor login events, transaction patterns, and API calls for anomalous behaviour indicative of account compromise or fraud. Suspicious events trigger automatic session termination and account review.
• Penetration testing: The Platform's technical infrastructure undergoes regular security assessments by qualified professionals to identify and remediate vulnerabilities before they can be exploited.
• Staff training: All jbajee personnel who handle personal data receive mandatory data protection and security awareness training on joining and at regular intervals thereafter.

As a jbajee player, you have the following rights in respect of your personal data. To exercise any of these rights, please submit a written request to [email protected] from your registered email address, quoting your account username or registered mobile number for identification purposes:

• Right of access: You may request a copy of the personal data jbajee holds about you, together with information about how it is processed.
• Right to rectification: You may request correction of any personal data that is inaccurate or incomplete. For identity data, updated documentation may be required to effect the correction.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected. This right is subject to jbajee's legal obligations to retain certain records — notably transaction and identity data subject to statutory minimum retention periods.
• Right to restrict processing: You may request that jbajee restricts processing of your data in certain circumstances, for example while a rectification request is being assessed.
• Right to data portability: You may request that jbajee provides your account data in a structured, machine-readable format where technically feasible and where processing is based on consent or contract.
• Right to object: You may object to processing carried out on the basis of legitimate interests, including direct marketing. Objections to marketing will be acted upon immediately. Objections to other processing will be assessed against jbajee's compelling legitimate grounds.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

jbajee will acknowledge all privacy rights requests within 5 business days and aim to provide a substantive response within 30 calendar days. Where a request is complex or numerous, the response period may be extended by a further 30 days with prior notification.

The jbajee Platform is strictly restricted to individuals who are 18 years of age or older. jbajee does not knowingly collect, process, or retain personal data from any person under the age of 18. Age verification is applied during account registration and as part of the KYC process to enforce this restriction.

If jbajee becomes aware that personal data has been collected from a person under 18, the account will be suspended immediately, any funds will be returned to the originating payment method after appropriate due diligence, and all associated personal data will be deleted without undue delay.

If you believe that a person under the age of 18 has registered an account on the jbajee Platform, please report this immediately to [email protected]. We take all such reports seriously and will investigate and act upon them promptly.

The jbajee Platform may contain references to third-party payment providers and game studios in the context of explaining supported services. jbajee does not operate or control any third-party websites and is not responsible for the privacy practices or content of such sites. This Privacy Policy applies solely to data collected and processed by jbajee through the jbajee Platform at jbajee.biz.

We encourage you to review the privacy policies of any third-party services you interact with independently of the jbajee Platform, including your mobile financial services provider (bKash, Nagad, Rocket, Upay) and your bank.

jbajee reserves the right to update this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, Platform functionality, or data processing practices. When material changes are made, the revised Policy will be published on this page with an updated effective date. Where the changes are significant, jbajee will provide advance notice via your registered contact details.

Your continued use of the Platform following the publication of an updated Privacy Policy constitutes your acknowledgement of the revised terms. We recommend reviewing this page periodically to remain informed about how jbajee protects your personal data. If you do not agree with a revised Policy, you may request account closure by contacting [email protected].

For all privacy-related enquiries, data subject rights requests, or concerns about how jbajee handles your personal information, please contact us using the following details:

• Email: [email protected] (plain text — not a clickable link)
• Subject line: Use "Privacy Request" or "Data Protection Enquiry" for faster routing to the relevant team
• Response time: Acknowledgement within 5 business days; substantive response within 30 calendar days
• Operating hours: 24/7, Bangladesh Standard Time (BST, UTC+6)

Please include your registered account username or mobile number in all privacy-related communications to allow us to identify and retrieve your account records accurately.