zbajje Privacy Policy

zbajje is the data controller responsible for personal data collected and processed through the Platform. As data controller, zbajje determines the purposes and means of processing your personal data and is accountable for ensuring that processing activities comply with applicable data protection standards.

For all privacy-related enquiries, data subject requests, or complaints, you may contact our Data Protection team using the email address displayed in the footer of this page. We will acknowledge receipt of your request within 48 hours and respond substantively within 30 calendar days.

zbajje collects personal data from you directly when you register, deposit, withdraw, or interact with the Platform, and automatically as you use the Platform. The categories of personal data we collect include:

Identity & Contact Data

• Full legal name as it appears on your government-issued identity document
• Date of birth (used to verify you meet the 21+ age requirement)
• Email address and mobile phone number
• Residential address, including city (Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, or other) and postal code
• National ID number or passport number, provided during identity verification

Financial & Payment Data

• Mobile financial service account details (bKash, Nagad, Rocket, Upay) associated with your deposits and withdrawals
• Bank account details where bank transfer methods are used (Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank)
• Transaction history including deposit amounts, withdrawal amounts, dates, and payment method references
• Records of bonus claims and wagering activity

Identity Verification Documents

• Scanned copies or photographs of government-issued identity documents (National ID card, passport, or driving licence)
• Proof of address documents where required
• Selfie photographs submitted for live identity verification checks

Technical & Usage Data

• IP address and approximate geographic location derived from IP
• Device type, operating system, and browser version
• Session timestamps, pages visited, games played, bets placed, and in-Platform navigation paths
• Cookie identifiers and similar tracking technologies (see Section 8 for details)

zbajje processes your personal data only for specific, legitimate purposes and only to the extent necessary for those purposes. The primary purposes for which we process personal data are:

• Account management: Creating and maintaining your zbajje player account, including processing registrations, profile updates, and account closures.
• Identity verification: Confirming that you meet the minimum age requirement of 21 years and verifying that you are who you claim to be, in order to prevent fraud and underage gambling.
• Payment processing: Executing deposits and withdrawals through your chosen payment method, reconciling transactions, and resolving payment disputes.
• Regulatory compliance: Fulfilling our anti-money-laundering (AML) and Know Your Customer (KYC) obligations, including transaction monitoring and suspicious activity reporting where required by law.
• Responsible gaming: Monitoring play patterns that may indicate problem gambling, enforcing self-exclusion requests, and applying deposit limits or cooling-off periods activated by the player.
• Customer support: Responding to enquiries, resolving complaints, and maintaining records of support interactions.
• Security & fraud prevention: Detecting, investigating, and preventing fraudulent transactions, account takeovers, bonus abuse, and other prohibited activities.
• Platform improvement: Analysing aggregated and anonymised usage data to improve game selection, site performance, and user experience.
• Marketing communications: Sending promotional offers, bonus notifications, and platform updates to players who have opted in to receive such communications. You may opt out at any time.

zbajje does not use your personal data for automated decision-making that produces legal or similarly significant effects without human review, except where required by law or with your explicit consent.

zbajje does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share personal data with third parties only in the following circumstances:

• Payment service providers: We share necessary financial data with bKash, Nagad, Rocket, Upay, and partnering banks solely to process your deposits and withdrawals.
• Identity verification partners: We use accredited KYC and AML service providers to verify identity documents. These providers process your data on our behalf under strict data processing agreements.
• Game content providers: Game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive anonymised session and game-play data as part of their platform integration. These providers do not receive your personally identifiable information.
• Security and fraud prevention services: We work with specialist providers to detect and prevent fraud, account abuse, and other security threats. Data shared for this purpose is minimised to what is strictly necessary.
• Legal and regulatory authorities: We may disclose personal data to government bodies, law enforcement agencies, or regulators where we are legally required to do so, or where disclosure is necessary to protect the rights, property, or safety of zbajje, its players, or the public.
• Business transfers: In the event of a merger, acquisition, or sale of zbajje assets, personal data held by zbajje may be transferred to the acquiring entity. Affected players will be notified of any such transfer and of any changes to this Privacy Policy that result from it.

All third-party processors who handle personal data on our behalf are contractually required to protect that data to a standard consistent with this Policy and to process it only for the purposes we specify.

zbajje implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the zbajje Platform
• Encryption of sensitive stored data, including identity documents and financial records, using industry-standard encryption algorithms
• Strict role-based access controls, ensuring that only authorised personnel can access personal data, and only to the extent required for their specific job function
• Regular penetration testing and vulnerability assessments conducted by independent security specialists
• Multi-factor authentication requirements for administrative system access
• Comprehensive audit logging of all access to systems holding personal data
• Incident response procedures to detect, contain, and report data breaches in accordance with applicable obligations

While zbajje takes all reasonable precautions to secure your personal data, no online platform can guarantee absolute security. Players are encouraged to use strong, unique passwords for their zbajje accounts and to enable any available two-factor authentication features. You should notify zbajje support immediately if you suspect any unauthorised access to your account.

zbajje retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. Our standard retention periods are as follows:

Following the expiry of applicable retention periods, personal data is securely deleted or anonymised. Anonymised data may be retained indefinitely for statistical and analytical purposes, as it can no longer be linked to any identifiable individual.

As a player whose personal data is processed by zbajje, you have the following rights with respect to your personal data:

• Right of Access: You may request a copy of the personal data zbajje holds about you at any time. We will provide this within 30 calendar days of a verified request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. You may also update certain information directly through your account settings.
• Right to Erasure: You may request deletion of your personal data. We will honour this request where we are not legally required to retain the data. Note that AML and regulatory obligations may require us to retain certain records for a defined period even after account closure.
• Right to Restriction of Processing: In certain circumstances, you may request that we restrict the processing of your personal data while a dispute or correction request is being resolved.
• Right to Data Portability: You may request a copy of certain personal data you have provided to zbajje in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests where you believe your fundamental rights override those interests.
• Right to Withdraw Consent: Where processing is based on your consent (for example, marketing communications), you may withdraw that consent at any time by contacting zbajje support or updating your communication preferences in your account settings. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

To exercise any of these rights, please contact zbajje at the support email displayed in the footer of this page. We may need to verify your identity before processing certain requests. We will not charge a fee for exercising your rights except in cases of manifestly unfounded or excessive requests.

zbajje uses cookies and similar tracking technologies to ensure the Platform functions correctly, to remember your preferences, and to understand how players use the Platform so that we can improve it. The types of cookies we use are as follows:

• Essential cookies: Strictly necessary for the Platform to function. These include session cookies that keep you logged in during your visit and security cookies that protect your account from CSRF attacks. These cannot be disabled without affecting Platform functionality.
• Preference cookies: Remember your settings and preferences (such as language choice or display settings) to personalise your experience on return visits.
• Analytics cookies: Collect anonymised information about how visitors use the Platform — which pages are visited most, where sessions originate, and how users navigate between sections. This data helps us improve Platform performance and content. Analytics cookies are only placed with your consent.

zbajje does not use third-party advertising cookies, retargeting pixels, or social media tracking technologies. Your browsing activity on the Platform is not shared with advertising networks.

You can manage or delete cookies through your browser settings at any time. Disabling essential cookies will impair Platform functionality, including your ability to stay logged in. Disabling analytics cookies will not affect your ability to use any Platform feature.

zbajje's primary player base is in Bangladesh, and we take steps to keep data processing as close to the point of collection as possible. However, some of our third-party service providers — including identity verification and payment processing partners — may process personal data on servers located outside Bangladesh.

Where personal data is transferred internationally, zbajje takes reasonable steps to ensure that appropriate safeguards are in place to protect your data to a standard equivalent to that required under this Policy. These safeguards may include contractual clauses binding the recipient to data protection obligations consistent with those applicable to zbajje.

By using the Platform and accepting this Policy, you acknowledge that your personal data may be transferred and processed in countries outside Bangladesh, including countries whose data protection laws may differ from those in force in Bangladesh.

zbajje's Platform is strictly for adults aged 21 and above. We do not knowingly collect personal data from individuals under the age of 21. If you are under 21, you must not register an account or use the Platform in any capacity.

If zbajje discovers or has reasonable grounds to believe that a registered player is under 21 years of age, we will immediately suspend the account, conduct a review, and take appropriate action including permanent closure and return of any deposited funds to the payment source, subject to applicable verification requirements.

Parents and guardians who believe a minor in their care has registered on the Platform are asked to contact zbajje support immediately so that the account can be closed and any personal data associated with it can be deleted.

zbajje reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or the services we offer. When we make material changes to this Policy, we will update the effective date at the top of the page and, where the changes are significant, notify registered players by email.

We encourage you to review this Policy periodically to stay informed about how zbajje protects your personal data. Your continued use of the Platform after the publication of a revised Policy constitutes your acceptance of the updated terms.

If you have any questions about changes to this Policy or about how your data is processed at any time, please contact us using the email address in the footer of this page. We are committed to being transparent and to answering your questions clearly and promptly.