Privacy Policy

1. Introduction

This Privacy Policy ("Policy") applies to all personal data collected and processed by zbaji ("zbaji", "we", "us", "our") in connection with the online gaming and sports betting services offered at https://zbaji.lat. It governs the personal data of all registered players, prospective players, and visitors to the zbaji platform, with particular relevance to users accessing zbaji from Bangladesh, including Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar.

By registering a zbaji account or continuing to use the zbaji platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. This Policy should be read alongside the zbaji Terms & Conditions, which also form part of your agreement with zbaji.

zbaji takes the privacy of its players seriously. We collect only the personal data we genuinely need to operate our services, process payments, comply with applicable legal obligations, and keep your account secure. We do not sell your personal data to third-party marketers.

2. Personal Data We Collect

zbaji collects personal data across several categories, depending on the nature of your interaction with the platform. The primary categories of data we collect are as follows:

2.1 Registration & Identity Data

• Full legal name
• Date of birth
• Residential address (including city and district within Bangladesh)
• Email address
• Mobile phone number
• Username and encrypted password
• National Identity Card (NID) number or passport number (provided during KYC verification)

2.2 Payment & Financial Data

• bKash, Nagad, Rocket, or Upay mobile banking account numbers associated with deposits and withdrawals
• Bank account details where bank transfer is used (Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank, or other institutions)
• Visa or Mastercard card type and last four digits (full card numbers are not stored by zbaji)
• Transaction history including deposit amounts, withdrawal requests, and bonus credits

2.3 Account Activity Data

• Game session history, bet records, and wagering activity
• Sports betting selections and stakes placed on cricket (BPL, IPL, T20), football, and other markets
• Bonus claims, promotion participation records, and wagering progress
• Responsible gaming settings including deposit limits, cool-off periods, and self-exclusion records

2.4 Technical & Device Data

• IP address at time of registration and login
• Device type, operating system, and browser version
• Mobile network operator (e.g., Grameenphone, Banglalink, Robi, Teletalk)
• Session timestamps and duration
• Geolocation data (country and city level, derived from IP address)

2.5 Communication Data

• Records of email correspondence with zbaji support at [email protected]
• WhatsApp message records where you contact zbaji via the published support number
• Complaint records and dispute correspondence

2.6 Verification Documents

• Copies of government-issued identity documents (NID, passport, driver's licence) submitted for KYC
• Utility bills or bank statements submitted as proof of address
• Payment account screenshots submitted to verify ownership of bKash, Nagad, or Rocket accounts

3. How We Collect Your Data

zbaji collects personal data through the following channels:

• Account Registration: When you create a zbaji account, you voluntarily provide your name, date of birth, contact details, and chosen login credentials.
• Identity Verification (KYC): When you submit identity documents in response to a verification request, either at registration or prior to your first withdrawal.
• Deposits and Withdrawals: When you initiate a transaction via bKash, Nagad, Rocket, Upay, bank transfer, Visa, or Mastercard, payment reference data is passed to zbaji by the payment processor.
• Platform Usage: Automatically as you browse, bet, and play on zbaji. This includes technical data such as your IP address, device identifiers, and session activity logged by our platform systems.
• Cookies and Tracking Technologies: Via browser cookies, local storage, and similar technologies as described in Section 7 of this Policy.
• Customer Support Interactions: When you contact zbaji via email or WhatsApp, we retain records of those communications to assist with follow-up and complaint resolution.
• Third-Party Sources: zbaji may receive supplementary data from identity verification partners and fraud prevention services in the course of KYC checks. This data is used solely for the purpose of verifying your identity and assessing account security.

4. How We Use Your Personal Data

zbaji processes your personal data for specific, defined purposes. We do not use your data for any purpose that is incompatible with the reason it was originally collected. The primary purposes for which zbaji uses your personal data are:

5. Legal Basis for Processing

zbaji processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual Necessity: Processing required to fulfil our obligations under the zbaji Terms & Conditions — including account creation, payment processing, game delivery, and customer support.
• Legal Obligation: Processing required to comply with applicable legal and regulatory obligations, including identity verification, anti-money-laundering checks, and record retention requirements.
• Legitimate Interests: Processing carried out in zbaji's legitimate business interests, such as fraud detection, platform security monitoring, and service improvement analytics, provided such interests are not overridden by your fundamental privacy rights.
• Consent: Processing based on your freely given, specific, and informed consent — primarily in relation to direct marketing communications and the placement of non-essential cookies. You may withdraw consent at any time without affecting any other processing activity.

6. Sharing Your Personal Data

zbaji does not sell your personal data to third parties. We share your data only with organisations that are necessary to the delivery of zbaji's services or that we are legally required to share it with. The categories of third-party recipients are as follows:

6.1 Payment Processors

Transaction data is shared with payment service providers including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank, Visa, and Mastercard as necessary to process your deposits and withdrawals. These providers process your data under their own privacy policies and security standards.

6.2 Identity Verification Partners

Where required for KYC compliance, zbaji shares identity document data with trusted third-party verification service providers. These partners are contractually bound to process your data solely for verification purposes and to maintain appropriate data security standards.

6.3 Game Providers

Game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive technical session data (such as player ID and stake information) necessary to deliver their games on the zbaji platform. These providers do not receive your name, contact details, or payment information.

6.4 Fraud Prevention & Security Services

zbaji works with specialised fraud detection and cybersecurity providers to protect the integrity of the platform. Relevant technical data (such as IP addresses, device fingerprints, and transaction patterns) may be shared with these providers for risk assessment purposes.

6.5 Legal Authorities

zbaji may disclose personal data to law enforcement agencies, courts, or other government authorities where required to do so by applicable law, court order, or in connection with the investigation of suspected fraudulent or criminal activity related to a zbaji account.

7. Cookies & Tracking Technologies

zbaji uses cookies and similar tracking technologies to operate and improve the platform. A cookie is a small text file stored on your device when you visit a website. zbaji uses the following categories of cookies:

7.1 Strictly Necessary Cookies

These cookies are essential for the zbaji platform to function. They maintain your login session, remember your account preferences, and ensure the security of your account. You cannot opt out of strictly necessary cookies without ceasing to use the platform, as they are required for core functionality.

7.2 Performance & Analytics Cookies

These cookies collect aggregated, anonymised data about how players use the zbaji platform — such as which pages are visited most frequently, how long sessions last, and which games are most popular. This information helps zbaji improve the platform experience. These cookies do not identify you personally.

7.3 Functional Cookies

These cookies remember your preferences — such as your selected language, display settings, and responsible gaming choices — so that you do not need to re-enter them on every visit.

7.4 Managing Cookies

You may manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the zbaji platform. Most modern browsers allow you to block cookies from specific websites or to clear all stored cookies. Refer to your browser's help documentation for instructions.

8. Data Retention

zbaji retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by applicable legal or regulatory obligations. The general retention principles zbaji applies are as follows:

• Active Account Data: Retained for the duration of your active zbaji account relationship.
• Closed Account Data: Following closure of your zbaji account, core account and transaction data is retained for a minimum of five (5) years to comply with anti-money-laundering and record-keeping obligations.
• KYC & Identity Documents: Retained for a minimum of five (5) years from the date of verification or account closure, whichever is later.
• Support & Complaint Records: Retained for three (3) years from the date of the final correspondence in a support thread.
• Marketing Consent Records: Retained for as long as you remain on our marketing list, plus one (1) year following withdrawal of consent, as evidence of the consent previously given.
• Technical & Device Logs: Retained for up to twelve (12) months for fraud prevention and security investigation purposes.

When personal data is no longer required, zbaji securely deletes or anonymises it in accordance with industry-standard data destruction procedures.

9. Data Security

zbaji implements a range of technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Key security measures include:

• 256-Bit SSL Encryption: All data transmitted between your browser and the zbaji platform is encrypted using industry-standard TLS/SSL protocols, ensuring that your login credentials, payment details, and personal information cannot be intercepted in transit.
• Encrypted Password Storage: zbaji never stores your password in plain text. Passwords are stored using strong cryptographic hashing algorithms with individual salting to protect against database compromise.
• Access Controls: Access to personal data within zbaji's systems is restricted on a strict need-to-know basis. Staff members are granted access only to the data necessary to perform their specific job function.
• Payment Security: Full payment card numbers are not stored on zbaji's servers. Card transactions are processed through PCI-DSS-compliant payment gateways. bKash, Nagad, and Rocket transactions are processed through the official APIs of those payment providers.
• Intrusion Detection: zbaji employs automated monitoring systems to detect and respond to suspicious login activity, brute-force attempts, and unusual transaction patterns.
• Regular Security Reviews: zbaji conducts periodic reviews of its security infrastructure and data handling practices to identify and address emerging risks.

10. Your Privacy Rights

As a zbaji player, you have a number of rights in relation to your personal data. zbaji is committed to honouring these rights promptly and transparently. To exercise any of the rights below, please contact our support team at [email protected] with the subject line "Data Rights Request" and include your registered account username.

11. Children's Privacy

The zbaji platform is strictly for adults aged 18 years and above. zbaji does not knowingly collect, process, or retain personal data belonging to individuals under the age of 18. If zbaji discovers or has reasonable grounds to believe that a registered account belongs to a person under 18 years of age, the account will be suspended immediately, access to all games and betting markets will be blocked, any deposits made will be returned to the originating payment method, and all personal data associated with the account will be deleted in accordance with our data retention procedures.

If you are a parent or guardian and believe that a minor has registered a zbaji account or submitted personal data to zbaji without your consent, please contact us immediately at [email protected] so that we may take prompt action.

12. Third-Party Links

The zbaji platform does not include links to external third-party websites. All navigation and content on zbaji is internal to the zbaji platform. However, game content delivered by third-party studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi is served within the zbaji platform environment. While zbaji carefully selects its game providers, it is not responsible for the data practices of those providers in relation to any separate accounts or interactions you may have with them outside of the zbaji platform.

Payment processors including bKash, Nagad, Rocket, and Upay operate under their own privacy policies when you authenticate transactions through their respective interfaces. zbaji encourages you to review the privacy policies of any payment provider you use in connection with your zbaji account.

13. Updates to This Privacy Policy

zbaji reserves the right to update or revise this Privacy Policy at any time. When material changes are made, zbaji will publish the revised Policy on this page with an updated effective date. Where practicable and where the changes are significant, zbaji will notify registered players by email or via an in-platform notification.

Your continued use of the zbaji platform following the publication of a revised Privacy Policy constitutes your acceptance of the updated terms. zbaji recommends that you review this Policy periodically — at a minimum once every three months — to remain informed of how your personal data is being processed.

If you disagree with any material change to this Policy, you may request closure of your zbaji account at any time by contacting [email protected]. Account closure does not affect zbaji's right to retain data for the periods specified in Section 8 above.

14. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or zbaji's handling of your personal data, please contact our support team using the details below. Our team is available 24 hours a day, 7 days a week, Bangladesh Standard Time (UTC+6).