jbaj Privacy Policy

01 Introduction

jbaj is committed to protecting the privacy and personal data of all individuals who interact with our platform, including registered players, visitors to the jbaj.io website, and individuals who contact our support team. This Privacy Policy sets out, in clear and formal language, the basis on which any personal data we collect from you — or that you provide to us — will be processed by jbaj.

This policy applies to all services offered by jbaj at jbaj.io, including sports betting, live casino, slots, fishing games, and all associated account management, payment processing, and customer support functions. It applies to all platforms through which the jbaj service is accessed, including desktop browsers and mobile browsers.

Please read this policy carefully and in full. If you have questions about any part of this policy, contact our support team at [email protected] before proceeding with registration. Our team is available 24 hours a day, 7 days a week, including all Bangladeshi public holidays.

02 Data Controller

For the purposes of applicable data protection legislation, jbaj acts as the data controller in respect of the personal data of its registered players and website visitors. As data controller, jbaj determines the purposes for which and the means by which personal data is processed.

Where jbaj engages third-party service providers — such as KYC verification firms, payment processing partners, or analytics providers — to process personal data on jbaj's behalf, those parties act as data processors and are subject to binding data processing agreements that require them to implement appropriate technical and organisational security measures and to process data only on jbaj's documented instructions.

03 Data We Collect

jbaj collects personal data across several categories. The specific data collected depends on the nature of your interaction with the platform. The primary categories of personal data that jbaj collects and processes are described in the table below:

jbaj does not collect or process special categories of sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data (except where a biometric document scan is used solely for identity verification purposes), or health data, unless explicitly required by applicable law or regulatory obligation.

04 How We Collect Data

jbaj collects personal data through the following means:

• Direct Provision: Data you provide when completing the jbaj registration form, submitting KYC documents, making deposits or withdrawals, updating your account profile, or contacting our support team.
• Automated Technical Collection: Data collected automatically when you access or use the jbaj platform, including IP addresses, device identifiers, browser fingerprints, session logs, and clickstream data, via cookies, server logs, and similar tracking technologies.
• Third-Party Sources: Data received from KYC verification partners (such as identity document verification services), payment providers (such as bKash, Nagad, Rocket, Upay, Visa, and Mastercard), fraud prevention databases, and publicly available records, for the purposes of identity verification, fraud detection, and regulatory compliance.
• Gameplay and Betting Activity: Data generated automatically as a result of your use of jbaj gaming and betting products, including bet placement records, game session data, and transaction logs maintained by game providers such as Pragmatic Play, Evolution Gaming, Spribe, and Ezugi.

05 Legal Basis for Processing

jbaj processes your personal data on one or more of the following legal bases, depending on the specific processing activity concerned:

• Contractual Necessity: Processing that is necessary for the performance of our contract with you — namely, providing the jbaj betting and gaming services you have registered to use — including account management, payment processing, and gameplay delivery.
• Legal Obligation: Processing that is required for jbaj to comply with applicable legal obligations, including anti-money laundering (AML) regulations, KYC verification requirements, regulatory reporting duties, and fraud prevention obligations.
• Legitimate Interests: Processing that is necessary for jbaj's legitimate business interests, including platform security monitoring, fraud detection, responsible gaming oversight, internal analytics, and service improvement — provided such interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing for which you have given us your specific, informed, and freely given consent — primarily in the context of receiving direct marketing communications and promotional material from jbaj. You may withdraw this consent at any time by contacting [email protected] or by adjusting your account communication preferences.

06 How We Use Your Data

jbaj uses the personal data we collect for the following purposes:

• Creating and managing your jbaj player account, including verifying your identity and age in accordance with our 21+ age policy.
• Processing deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard, and maintaining accurate financial records of all transactions.
• Delivering the jbaj gaming and sports betting services you have requested, including real-time bet settlement, game session management, and account balance updates.
• Communicating with you regarding your account, including security notifications, transaction confirmations, KYC requests, account status updates, and responses to your support enquiries.
• Detecting, investigating, and preventing fraudulent activity, collusion, money laundering, and other prohibited conduct on the platform.
• Monitoring your gameplay patterns for responsible gaming purposes, including identifying indicators of problematic gambling behaviour and triggering player protection interventions where appropriate.
• Complying with our legal and regulatory obligations, including submitting required reports to relevant authorities and retaining records as mandated by applicable Bangladeshi law and international AML standards.
• Analysing aggregated, anonymised usage data to improve the jbaj platform, optimise game performance, and develop new features for the benefit of our player community.
• Sending you promotional communications, offers, and information about new games, bonuses, and seasonal promotions — but only where you have given your explicit consent to receive such communications.

07 Data Sharing & Disclosure

jbaj does not sell, rent, or trade your personal data to any third party for their own marketing or commercial purposes. We may, however, share your personal data with the following categories of recipients where necessary and proportionate:

• KYC and Identity Verification Providers: Third-party services that verify the authenticity of identity documents, confirm date of birth, and check player details against sanction lists and politically exposed person (PEP) databases as required by AML regulations.
• Payment Processing Partners: bKash, Nagad, Rocket, Upay, Visa, Mastercard, and any other payment provider through which you transact on jbaj. These partners receive only the data necessary to process your specific transaction.
• Game Technology Providers: Partners such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive session-level data necessary to deliver their game content and maintain game integrity. These providers operate under contractual data protection obligations.
• Fraud Prevention and Security Services: Third-party fraud detection and cybersecurity services that assist jbaj in identifying suspicious activity, preventing unauthorised account access, and maintaining platform integrity.
• Legal and Regulatory Authorities: Government bodies, law enforcement agencies, financial intelligence units, and courts where jbaj is required by law, regulation, or valid legal process to disclose personal data. In such cases, jbaj will disclose only the minimum data required to satisfy the legal obligation.
• Professional Advisers: Legal counsel, auditors, accountants, and insurers who require access to personal data in connection with the provision of professional services to jbaj, subject to strict confidentiality obligations.
• Business Transfers: In the event of a merger, acquisition, restructuring, or sale of all or part of jbaj's business, personal data held by jbaj may be transferred to the relevant successor entity, subject to that entity assuming the data protection obligations set out in this policy.

08 Cookies & Tracking Technologies

jbaj uses cookies and similar tracking technologies on the jbaj.io website and platform to support the delivery of our services, maintain the security of user sessions, and gather anonymised analytical data about platform usage. The categories of cookies used by jbaj are as follows:

• Strictly Necessary Cookies: These cookies are essential for the jbaj platform to function correctly. They enable session management, keep you logged in during an active session, and support core security features. These cookies cannot be disabled as doing so would prevent the platform from functioning.
• Functional Cookies: These cookies remember your preferences and settings — such as your preferred language, display settings, and responsible gaming limit configurations — to personalise your experience on subsequent visits.
• Analytical Cookies: These cookies collect anonymised data about how visitors use the jbaj platform, including pages visited, time spent on each page, and navigation paths. This data is used in aggregate form to improve platform performance and user experience.
• Security and Fraud-Prevention Cookies: These cookies assist jbaj in detecting and preventing fraudulent account activity, identifying unusual login patterns, and protecting the integrity of the platform against automated attacks.

You may adjust your cookie preferences through your browser settings. Please note that disabling functional or analytical cookies may affect your experience on the jbaj platform. Disabling strictly necessary cookies will prevent you from using the platform entirely.

09 Data Security

jbaj implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include but are not limited to:

• 256-bit SSL/TLS encryption for all data in transit between your device and the jbaj platform.
• AES-256 encryption for all sensitive personal data stored in jbaj's databases, including financial data and KYC documents.
• Role-based access controls ensuring that jbaj personnel can access personal data only to the extent required for their specific job function.
• Multi-factor authentication requirements for all jbaj administrative system access.
• Continuous intrusion detection and prevention monitoring on all jbaj infrastructure.
• Regular third-party penetration testing and security audits of the jbaj platform.
• Formal data breach response procedures, including notification protocols in the event of a significant data breach affecting player personal data.

Despite these measures, no data transmission over the internet or electronic storage system can be guaranteed to be 100% secure. If you have reason to believe that your jbaj account or personal data has been compromised, you must contact our support team at [email protected] immediately so that we can take appropriate protective action.

10 Data Retention

jbaj retains personal data for no longer than is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The primary retention periods applied by jbaj are as follows:

• Active Account Data: Retained for the full duration of your active account relationship with jbaj, including periods during which your account is temporarily suspended.
• Post-Closure Account Data: Following account closure, jbaj retains identity, KYC, and financial transaction data for a minimum period of five years in compliance with anti-money laundering record-keeping requirements under applicable Bangladeshi financial regulations.
• Support and Correspondence Records: Retained for three years from the date of the last communication to support dispute resolution and quality assurance purposes.
• Marketing Consent Records: Retained for three years from the date of consent withdrawal or account closure, whichever is later, to demonstrate compliance with consent obligations.
• Anonymised Analytics Data: Aggregated, anonymised usage data from which individual players cannot be identified may be retained indefinitely for statistical and platform improvement purposes.

When personal data is no longer required, jbaj will securely delete or anonymise it in accordance with our data disposal procedures. Where complete deletion is not immediately possible due to backup retention cycles, the data will be isolated from active processing until deletion is completed.

11 Your Rights

Subject to applicable law, you have the following rights in respect of the personal data that jbaj holds about you. To exercise any of these rights, please contact our support team at [email protected] with the subject line "Data Rights Request". jbaj will respond to all valid requests within 30 days.

• Right of Access: You have the right to request a copy of the personal data jbaj holds about you, along with information about how it is being used and the legal basis for that use.
• Right to Rectification: You have the right to request that jbaj corrects any inaccurate or incomplete personal data held about you without undue delay.
• Right to Erasure: You have the right to request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where the data has been unlawfully processed — subject to jbaj's legal retention obligations.
• Right to Restriction of Processing: You have the right to request that jbaj restricts the active processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or where you have objected to processing and a determination is pending.
• Right to Data Portability: Where processing is based on your consent or contractual necessity and carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to the processing of your personal data where that processing is based on jbaj's legitimate interests, including profiling for responsible gaming purposes. jbaj will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

12 Children & Minors

The jbaj platform is strictly intended for adults aged 21 years and above. jbaj does not knowingly collect, store, or process the personal data of any individual under the age of 21. Our registration process includes mandatory age verification steps, and KYC procedures are designed to identify and reject any registration attempt made by a person under the minimum age.

If jbaj becomes aware, through any means, that personal data has been collected from an individual who is under the age of 21, we will immediately close the associated account, delete all personal data collected from or about that individual as quickly as technically possible, void any transactions carried out under the account, and return any deposits to the source payment method where technically feasible.

If you are a parent or legal guardian and believe that your child has registered on the jbaj platform without your knowledge, please contact our support team immediately at [email protected] so that we can take prompt remedial action.

13 Cross-Border Data Transfers

In the course of operating the jbaj platform, personal data may be transferred to and processed in countries outside Bangladesh, including in the countries where our game technology providers, KYC verification partners, and cloud infrastructure providers are based. Such transfers are necessary for the provision of the jbaj services.

Where personal data is transferred outside Bangladesh, jbaj ensures that appropriate safeguards are in place to protect the data to a standard that is equivalent to or exceeds the protections afforded under applicable Bangladeshi data protection law. These safeguards include contractual data protection clauses in our agreements with all third-party data processors receiving transfers, as well as assessments of the data protection laws of the recipient countries where applicable.

14 Third-Party Links

The jbaj platform may, from time to time, contain references or links to third-party platforms operated by our game provider partners. These third-party platforms are governed by their own privacy policies and data protection practices, which are entirely independent of this Privacy Policy. jbaj has no control over and accepts no responsibility for the privacy practices or content of any third-party platform.

We recommend that you review the privacy policy of any third-party platform before providing personal data to it. The inclusion of a reference to a third-party platform in the jbaj service does not constitute an endorsement of that platform's privacy practices by jbaj.

15 Policy Amendments

jbaj reserves the right to amend, update, or replace this Privacy Policy at any time. When material changes are made — for example, changes that affect the categories of personal data we collect, the legal basis on which we process data, or your rights as a data subject — we will notify registered players by email to their registered address or via an in-platform notification at least seven calendar days before the changes take effect.

Minor clarifications, corrections of typographical errors, or non-material updates may be made without notification. The current effective date of this policy is always shown at the top of this page. We encourage you to review this policy periodically to stay informed about how jbaj protects your personal data.

Your continued use of the jbaj platform following the effective date of any amendment constitutes your acknowledgement of the revised policy. If you do not accept the amended policy, you must cease using the platform and request account closure before the effective date of the change.

16 Contact & Complaints

If you have any questions, concerns, or complaints regarding this Privacy Policy or the manner in which jbaj processes your personal data, please contact our compliance and support team using the details below. We are committed to resolving all privacy-related enquiries promptly, professionally, and in good faith.

If you are not satisfied with the manner in which jbaj has handled your privacy concern or data rights request, you have the right to escalate your complaint to the relevant data protection authority or consumer protection body in Bangladesh. jbaj will cooperate fully with any investigation conducted by a competent supervisory authority.

jbaj treats all privacy complaints seriously and views them as an important mechanism for improving our data protection practices. No player will be penalised or disadvantaged in any way for raising a legitimate privacy concern or exercising their data rights under this policy.