zbaji Privacy
Policy

1. Introduction

zbaji ("we", "us", "our") is committed to protecting the privacy of every person who uses zbaji.io or the zbaji mobile app. This Privacy Policy explains what personal data zbaji collects from you, how that data is used, who it may be shared with, and what rights you have in relation to your personal data.

This policy applies to all users of zbaji regardless of how they access the platform — whether through the website at zbaji.io, through the zbaji Android app, or through any other access method. It covers all personal data collected from the moment you visit zbaji.io, whether or not you register an account.

zbaji takes data privacy seriously. We only collect the data we genuinely need, we store it securely, and we never sell it to third parties. We have written this policy in plain language so that every zbaji player — whether you are new to online gaming or a long-time member — can understand exactly how your information is handled.

2. Data We Collect

zbaji collects personal data in two main categories: data you provide directly to us, and data we collect automatically when you use the platform.

Data you provide directly:

• Account registration data: your full name, date of birth, email address, and phone number.
• Identity verification data: a copy of your national ID card, passport, or other government-issued identification document, and in some cases a selfie or proof of address, required for KYC (Know Your Customer) verification.
• Payment data: your bKash or Nagad mobile number, bank account details (where applicable), and transaction records. zbaji does not store your full mobile banking PIN or password.
• Communications data: messages you send to zbaji support via live chat, email, or any other channel.
• Responsible gaming data: any deposit limits, self-exclusion requests, or cooling-off periods you set on your account.

Data collected automatically:

• Device and technical data: your IP address, browser type and version, operating system, device type, and screen resolution.
• Usage data: pages visited on zbaji.io, games played, bet amounts, session duration, and navigation patterns.
• Cookie data: information stored via cookies and similar tracking technologies as described in Section 6.
• Location data: approximate geographic location derived from your IP address, used to verify that you are accessing zbaji from a permitted location.

3. How We Collect It

zbaji collects your personal data through the following methods:

zbaji does not collect personal data from third-party sources such as social media platforms or data brokers. All data zbaji holds about you comes directly from your interactions with zbaji.io or the zbaji app.

4. How We Use Your Data

zbaji uses your personal data only for the purposes described below. We do not use your data for any purpose that is incompatible with the reason it was originally collected.

• Account management: to create, maintain, and secure your zbaji account, and to verify your identity when you log in.
• Transaction processing: to process deposits and withdrawals via bKash, Nagad, and other BDT payment methods, and to maintain accurate transaction records.
• Identity verification (KYC): to verify that you meet the eligibility requirements to use zbaji, including age verification and anti-money laundering checks.
• Customer support: to respond to your queries, resolve disputes, and improve the quality of our support service.
• Platform improvement: to analyse how players use zbaji.io and the zbaji app, identify technical issues, and develop new features.
• Responsible gaming: to monitor for signs of problem gambling behaviour and to apply responsible gaming tools where appropriate.
• Legal compliance: to comply with applicable laws and regulations, including anti-money laundering (AML) obligations, and to respond to lawful requests from regulatory or law enforcement authorities.
• Marketing communications: to send you promotional offers, bonus notifications, and platform updates — but only if you have opted in to receive these. You can opt out at any time.
• Fraud prevention: to detect and prevent fraudulent activity, bonus abuse, and other violations of zbaji's Terms and Conditions.

5. Sharing Your Data

zbaji does not sell, rent, or trade your personal data to any third party. However, zbaji may share your data with the following categories of third parties in limited circumstances:

• Payment processors: bKash, Nagad, Rocket, and bank partners receive the payment data necessary to process your deposits and withdrawals. These providers are bound by their own privacy and security obligations.
• Identity verification providers: third-party KYC service providers may process your identity documents to verify your age and identity. These providers operate under strict data processing agreements with zbaji.
• Game providers: game software providers may receive anonymised gameplay data (such as bet amounts and game outcomes) for the purpose of operating their games on the zbaji platform. They do not receive your personal contact or payment details.
• IT and infrastructure providers: cloud hosting and technical service providers who support the operation of zbaji.io and the zbaji app. These providers process data only on zbaji's instructions and under strict confidentiality obligations.
• Regulatory and law enforcement authorities: zbaji may be required by law to disclose your personal data to government agencies, regulators, or law enforcement bodies. zbaji will only do so when legally required and will notify you where permitted by law.
• Fraud prevention agencies: in cases where fraud or money laundering is suspected, zbaji may share relevant data with fraud prevention agencies or financial intelligence units.

In all cases where zbaji shares your data with third parties, we ensure that appropriate data protection safeguards are in place. zbaji does not transfer your personal data outside of Bangladesh except where necessary for the operation of the platform and where adequate data protection standards are maintained.

6. Cookies & Tracking Technologies

zbaji uses cookies and similar tracking technologies on zbaji.io and in the zbaji app to improve your experience, keep you logged in, remember your preferences, and analyse how the platform is used.

Types of cookies zbaji uses:

• Essential cookies: required for the platform to function. These include session cookies that keep you logged in during your visit. You cannot opt out of essential cookies without affecting your ability to use zbaji.
• Preference cookies: remember your settings and preferences, such as your preferred language and display options, so you do not have to reset them each time you visit.
• Analytics cookies: collect anonymised data about how players use zbaji.io — which pages are visited most, how long sessions last, and where users navigate from. This data helps zbaji improve the platform.
• Security cookies: help zbaji detect and prevent fraudulent activity, including identifying unusual login patterns or suspicious account behaviour.

You can manage your cookie preferences through your browser settings. Most browsers allow you to block or delete cookies. However, blocking essential cookies will affect your ability to log in and use zbaji normally. zbaji does not use third-party advertising cookies or tracking pixels for external ad targeting.

7. Data Retention

zbaji retains your personal data for as long as your account is active and for a period after account closure as required by applicable law and our internal data retention policies.

• Account data: retained for the duration of your account and for a minimum of 5 years after account closure, as required for anti-money laundering compliance.
• Transaction records: retained for a minimum of 5 years from the date of each transaction.
• KYC documents: retained for a minimum of 5 years after account closure or the completion of the last transaction, whichever is later.
• Support communications: retained for 3 years from the date of the last interaction.
• Marketing preferences: retained until you withdraw consent or close your account.

After the applicable retention period, zbaji will securely delete or anonymise your personal data. Where data is anonymised rather than deleted, it may be retained indefinitely for analytical purposes, but it will no longer be linked to you personally.

8. Data Security

zbaji takes the security of your personal data seriously and implements a range of technical and organisational measures to protect it from unauthorised access, loss, alteration, or disclosure.

• Encryption: all data transmitted between your device and zbaji.io is encrypted using TLS (Transport Layer Security). Data stored on zbaji's servers is encrypted at rest using AES-256 encryption.
• Access controls: access to personal data is restricted to zbaji staff who need it to perform their job functions. All staff with access to personal data are subject to confidentiality obligations.
• Two-factor authentication: zbaji supports two-factor authentication (2FA) for player accounts to provide an additional layer of security against unauthorised access.
• Regular security audits: zbaji conducts regular security assessments and penetration testing to identify and address vulnerabilities in the platform.
• Incident response: zbaji has a data breach response procedure in place. In the event of a data breach that poses a risk to your rights, zbaji will notify affected users as required by applicable law.

9. Your Rights

As a zbaji user, you have the following rights in relation to your personal data. To exercise any of these rights, contact zbaji at [email protected]. zbaji will respond to all valid requests within 30 days.

Please note that some rights are subject to limitations. For example, zbaji cannot delete transaction records that are required to be retained for legal compliance purposes. Where zbaji is unable to fulfil a request in full, we will explain the reason clearly.

10. Minors

zbaji is strictly an adult platform. We do not knowingly collect personal data from anyone under the age of 18. Age verification is a mandatory part of the zbaji registration process, and accounts found to belong to persons under 18 will be closed immediately and all associated data deleted, except where retention is required by law.

If you believe that a minor has registered an account on zbaji, please contact us immediately at [email protected]. zbaji will investigate and take appropriate action without delay.

11. Third-Party Links

zbaji.io may contain links to third-party websites or services, such as game provider information pages. These third-party sites have their own privacy policies, and zbaji is not responsible for their content or privacy practices. Clicking on a third-party link will take you away from zbaji.io, and zbaji's Privacy Policy will no longer apply once you leave our platform.

zbaji recommends that you review the privacy policy of any third-party website you visit before providing any personal information.

12. Policy Changes

zbaji reserves the right to update this Privacy Policy at any time. When changes are made, the updated policy will be published on this page with a revised "Last Updated" date. For significant changes, zbaji may also notify registered users via email or an in-platform notification.

Your continued use of zbaji after any changes to this Privacy Policy constitutes your acceptance of the updated policy. It is your responsibility to review this page periodically to stay informed of any updates. If you do not agree with any changes, you should stop using zbaji and close your account.

13. Contact Us

If you have any questions about this Privacy Policy, want to exercise your data rights, or need to report a privacy concern, please contact the zbaji privacy team. We are available 24 hours a day, 7 days a week.