jbajji Privacy Policy

jbajji ("we", "us", "our") operates the online gaming and sports betting platform accessible at jbajji.app (the "Platform"). jbajji is the data controller responsible for the personal data of all registered players.

If you have any questions about this Privacy Policy, wish to exercise your data rights, or need to report a data security concern, please contact us at:

• Email: [email protected] (plain text — not a clickable link)
• Response time: Within 2 business days for standard privacy enquiries (BST)

jbajji is committed to handling all privacy enquiries promptly, professionally, and confidentially.

jbajji collects personal data only where there is a lawful basis for doing so. The following table summarises the data we collect and the purpose behind each category:

• Identity Data (name, date of birth, NID/passport): collected for account registration, age verification (21+), and identity confirmation during withdrawal processing.
• Contact Data (mobile number, email, city): collected to enable account communications, deposit/withdrawal confirmations, security alerts, and responsible gaming notifications.
• Financial Data (mobile wallet IDs, transaction history): collected to process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard; to comply with anti-money laundering regulations; and to detect fraudulent transactions.
• Technical Data (IP address, device fingerprint, browser type, session logs): collected for security monitoring, fraud prevention, and to ensure the Platform functions correctly across different devices commonly used by players in Dhaka, Chittagong, Sylhet, and other areas of Bangladesh.
• Gameplay Data (bet history, session duration, win/loss records): collected for account management, dispute resolution, responsible gaming monitoring, and to personalise the gaming experience.
• Cookie & Analytics Data: collected via first-party cookies to maintain session state, remember player preferences, and generate anonymised usage statistics that help us improve Platform performance.

jbajji does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or biometric data beyond what is required for identity verification purposes.

jbajji uses the personal data we collect for the following operational purposes:

• Account management: creating, maintaining, and securing your jbajji account; resetting passwords; processing account closure requests.
• Financial transactions: processing deposits and withdrawals via bKash, Nagad, Rocket, and card payment networks; issuing bonus credits; calculating and paying out winnings.
• Security & fraud prevention: detecting unauthorised login attempts, identifying multi-accounting, investigating suspicious betting patterns, and complying with anti-money laundering obligations.
• Responsible gaming: monitoring gameplay behaviour for signs of problem gambling; applying deposit limits, cooling-off periods, and self-exclusions as requested by or on behalf of a player.
• Legal compliance: retaining transaction records as required by applicable financial regulations; responding to lawful information requests from competent authorities.
• Service improvement: analysing aggregated, anonymised usage data to identify bugs, improve game loading speeds, and optimise the mobile experience for players across Bangladesh.
• Communications: sending transactional messages (deposit confirmations, withdrawal status updates, security alerts). Marketing communications are only sent where you have given explicit consent and can be unsubscribed at any time.

jbajji does not use personal data for automated decision-making that produces significant legal effects on players, except in cases of fraud detection where account suspension may be applied pending human review.

jbajji does not sell, rent, or trade your personal data. We may share your data only in the following strictly limited circumstances:

• Payment processors: we share the minimum financial data necessary with bKash, Nagad, Rocket, Upay, Visa, and Mastercard to process your deposit and withdrawal transactions. These providers operate under their own privacy policies and data security standards.
• Game providers: we share anonymised session identifiers with game providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi) solely to load game sessions and record RNG-certified game outcomes. Providers do not receive your full identity or payment data.
• Legal obligations: where required by law, regulation, or a lawful order from a competent government authority or court, jbajji may disclose personal data to the extent strictly necessary to comply with that obligation.
• Fraud prevention services: jbajji may share device fingerprint and behavioural data with specialist fraud-prevention and identity-verification service providers operating under strict data-processing agreements with jbajji.
• Business transfers: in the event of a merger, acquisition, or sale of all or substantially all of jbajji's assets, personal data held by jbajji may be transferred as part of that transaction. Affected players will be notified in advance.

All third-party data processors engaged by jbajji are contractually required to process data only on jbajji's documented instructions and to implement appropriate technical and organisational security measures.

jbajji uses cookies and similar tracking technologies to operate the Platform. The following categories of cookies are in use:

• Strictly necessary cookies: essential for the Platform to function. These maintain your login session, remember your language preference, and protect against cross-site request forgery. These cookies cannot be disabled.
• Preference cookies: remember settings you have chosen (e.g., deposit limit preferences, game display settings) so you do not need to reconfigure them on each visit.
• Analytics cookies: collect anonymised data on how players navigate the Platform (which pages are visited most, how long sessions last, which device types are used). This data is processed in aggregate and cannot be traced back to individual players.
• Security cookies: used by jbajji's fraud detection systems to assign a risk score to login events based on device fingerprint consistency and IP location patterns.

jbajji does not use third-party advertising cookies, retargeting pixels, or social media tracking scripts. You can manage cookie preferences through your browser settings; however, disabling strictly necessary cookies will prevent the Platform from functioning correctly.

jbajji retains personal data only for as long as it is necessary for the purpose it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply:

• Active account data: retained for the full duration of the account's active status plus a minimum of 5 years following account closure, to satisfy financial record-keeping and fraud investigation requirements.
• Transaction records: retained for a minimum of 5 years from the date of each transaction, consistent with standard financial compliance practice.
• Identity verification documents: retained for the duration of the account plus 5 years post-closure. Documents are stored in encrypted format with restricted-access controls.
• Session and gameplay logs: retained for 2 years from the date of the session. Anonymised aggregate analytics data may be retained indefinitely.
• Support correspondence: retained for 3 years from the date of the last interaction, to enable consistent dispute resolution and service quality review.

When data reaches the end of its retention period, it is securely deleted or irreversibly anonymised. Players who request early deletion of their data may submit a deletion request to [email protected]; jbajji will process requests within 30 days subject to any overriding legal retention obligations.

As a jbajji player, you have the following rights in relation to your personal data. To exercise any of these rights, contact [email protected] with the subject line "Data Rights Request":

• Right of Access: you may request a copy of all personal data jbajji holds about you. We will provide this within 30 days of a verified request.
• Right to Rectification: if any data we hold about you is inaccurate or incomplete, you have the right to request correction. Most account data (name, contact number) can be updated directly within your account settings.
• Right to Erasure: you may request deletion of your personal data. jbajji will fulfil erasure requests where no overriding legal obligation requires continued retention. Transaction records subject to financial compliance rules cannot be deleted early.
• Right to Restriction: you may request that jbajji restricts processing of your data (e.g., while an accuracy dispute is being resolved) without deleting it.
• Right to Data Portability: you may request a copy of your personal data in a structured, commonly used, machine-readable format (e.g., CSV) for transfer to another service.
• Right to Object: you may object to processing of your personal data for direct marketing purposes at any time. Objections to processing for legal compliance purposes will be assessed on a case-by-case basis.
• Right to Withdraw Consent: where processing is based on your consent (e.g., marketing emails), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

jbajji will respond to all data rights requests within 30 days (BST). Complex requests may be extended by a further 60 days where necessary; you will be notified of any extension within the initial 30-day period.

jbajji implements a layered security architecture to protect player data against unauthorised access, disclosure, alteration, or destruction:

• Transport security: all data transmitted between the Platform and player devices is encrypted using TLS 1.2 or higher.
• Storage security: sensitive data fields (passwords, payment wallet identifiers) are stored using strong one-way hashing or reversible encryption with keys held separately from the data.
• Access controls: internal access to player data is governed by role-based access controls. Staff access is logged and reviewed regularly. Only personnel with a documented operational need may access identifiable player records.
• Network security: jbajji's infrastructure is protected by web application firewalls, intrusion detection systems, and regular vulnerability scanning.
• Incident response: jbajji maintains a documented data breach response procedure. In the event of a breach that poses a material risk to affected players, jbajji will notify affected individuals within 72 hours of becoming aware of the breach.

While jbajji employs industry-standard security practices, no internet-connected system can be guaranteed 100% secure. Players are responsible for maintaining the security of their own login credentials and should never share their password or OTP with any third party.

jbajji's Platform is strictly for adults aged 21 years and above. jbajji does not knowingly collect personal data from individuals under the age of 21.

If jbajji discovers that a player has provided false age information during registration and is under the age of 21, the account will be immediately suspended, all balances forfeited, and all personal data associated with the underage account deleted in accordance with our data retention policy, subject to any fraud investigation requirements.

If you believe an individual under the age of 21 has registered a jbajji account, please notify us immediately at [email protected] so that we can investigate and take appropriate action.

jbajji reviews this Privacy Policy periodically and may update it to reflect changes in our data practices, legal obligations, or Platform features. The following process applies to all updates:

• The "Last Updated" date at the top of this page will be revised with each update.
• For material changes — those that significantly affect how your data is processed — jbajji will notify registered players via their registered mobile number or email address at least 7 days before the change takes effect.
• For minor or clarificatory changes that do not affect the substance of how data is processed, the updated policy will be published on this page without prior notice.
• Continued use of the Platform after the effective date of any update constitutes your acceptance of the revised Privacy Policy.

We encourage you to revisit this page periodically to stay informed about how jbajji protects your personal information.