Privacy Policy — jbajje

01 Data Controller

For the purposes of this Privacy Policy, jbajje is the data controller responsible for the personal information collected through the Platform at https://jbajje.net. As data controller, jbajje determines the purposes and means by which your personal data is processed.

If you have any questions or concerns about how your personal data is handled, or wish to exercise any of your data rights as described in Section 10 of this Policy, you may contact the jbajje data protection team using the contact details provided in Section 13.

02 Information We Collect

jbajje collects the following categories of personal information from Players and prospective Players:

2.1 Registration & Identity Data

• Full legal name as it appears on your official identification document;
• Date of birth (collected to verify you are 18 years of age or older);
• Username and encrypted password;
• Contact information, including a valid mobile number or email address.

2.2 Verification (KYC) Data

• Copy of a government-issued photo identification document (National ID, passport, or driving licence);
• Proof of address where required;
• Proof of ownership of the payment method used (e.g., screenshot of registered bKash or Nagad account).

2.3 Financial Data

• Mobile financial service account identifiers (bKash, Nagad, Rocket numbers) registered to your Account;
• Transaction history, including deposit amounts, withdrawal amounts, dates, and references;
• Account Balance history.

2.4 Usage & Technical Data

• IP address and approximate geographic location derived from it;
• Device type, operating system, and browser information;
• Pages visited, time spent on pages, and navigation paths within the Platform;
• Session timestamps and login history;
• Betting and gaming activity logs, including wager amounts, game selections, and outcomes.

2.5 Communications Data

• Records of live chat conversations with the jbajje support team;
• Email correspondence sent to or received from jbajje;
• Feedback, complaints, or dispute records submitted through any channel.

03 How We Collect Data

jbajje collects personal information through the following means:

3.1 Directly From You

The majority of personal data jbajje holds is provided directly by you — during account registration, identity verification, deposit and withdrawal transactions, and any communications you initiate with the support team. You are always aware when you are providing this information.

3.2 Automatically During Platform Use

When you access the Platform, certain technical data is collected automatically by our servers and analytics systems. This includes your IP address, device information, session data, and browsing behaviour within the Platform. This data is collected to maintain Platform security, detect fraud, and improve the user experience.

3.3 From Payment Processors

When you make a deposit or request a withdrawal via bKash, Nagad, or Rocket, jbajje receives transactional confirmation data from those payment providers. This is limited to the information necessary to match, verify, and record the transaction in your Account. jbajje does not receive your full mobile banking credentials from these providers.

3.4 From Identity Verification Partners

Where jbajje uses a third-party identity verification service to assist with KYC procedures, that provider may return a verification outcome and relevant identity data points to jbajje. The use of such providers is subject to their own privacy policies and contractual data processing agreements with jbajje.

04 How We Use Your Data

jbajje uses the personal information it collects for the following purposes:

jbajje does not use your personal data for any purpose not listed above without first obtaining your explicit consent or having a clear legitimate interest that does not override your privacy rights.

05 Legal Basis for Processing

jbajje processes your personal data on the following legal bases:

• Contractual necessity: Processing required to create and manage your Account, execute transactions, and deliver the services you have requested by registering on the Platform;
• Legal obligation: Processing required to comply with applicable laws, including anti-money laundering (AML) requirements, age verification obligations, and responses to lawful requests from regulatory or law enforcement authorities;
• Legitimate interests: Processing carried out for fraud prevention, Platform security, responsible gaming monitoring, and improvement of our services — where these interests are not overridden by your privacy rights;
• Consent: Processing for optional purposes such as sending promotional communications, where you have provided explicit opt-in consent. You may withdraw this consent at any time by contacting the support team.

06 Data Sharing & Disclosure

jbajje does not sell your personal data. We share your information only in the circumstances described below:

6.1 Payment Processors

To process deposits and withdrawals, jbajje shares the minimum necessary financial and identity data with its payment partners — bKash, Nagad, and Rocket. Each of these partners processes your data under their own privacy policy and is contractually bound to handle your information securely.

6.2 Identity Verification Providers

Where third-party KYC services are used to verify your identity, we share the relevant identity documents and data points required for that verification. These providers are selected on the basis of their security standards and are bound by data processing agreements that limit their use of your data to the verification purpose only.

6.3 IT & Infrastructure Providers

jbajje works with hosting, cloud infrastructure, and security providers to operate the Platform. These providers may process certain technical data (such as server logs containing IP addresses) in the course of providing their services to jbajje. They are not permitted to use this data for their own purposes.

6.4 Legal & Regulatory Disclosure

jbajje may disclose personal data to regulatory bodies, law enforcement agencies, courts, or other authorities where we are legally required to do so — for example, in connection with an investigation into fraud, money laundering, or another criminal matter. We will disclose only the minimum information required to comply with such requests.

6.5 Business Transfers

In the event of a merger, acquisition, or sale of substantially all of jbajje's assets, your personal data may be transferred to the successor entity as part of that transaction. You will be notified of any such transfer and the privacy practices of the acquiring entity before the transfer takes effect.

07 Data Retention

jbajje retains your personal data for as long as your Account remains active and for such periods thereafter as are required by applicable law or legitimate operational need. The following general retention periods apply:

• Account and identity data: Retained for the duration of your Account and for a minimum of five (5) years following permanent Account closure, in accordance with standard AML record-keeping obligations;
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction;
• Communication records: Retained for a minimum of two (2) years from the date of the communication;
• Technical and usage logs: Retained for up to twelve (12) months for security and fraud detection purposes, after which they are anonymised or deleted;
• Marketing consent records: Retained for as long as your consent remains active, plus one (1) year following withdrawal of consent as evidence of the consent history.

When personal data is no longer required for any of the purposes for which it was collected, jbajje will securely delete or anonymise it in accordance with standard data destruction procedures.

08 Data Security

jbajje takes the security of your personal information seriously and implements appropriate technical and organisational measures to protect it against unauthorised access, disclosure, alteration, or destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your device and jbajje's servers;
• Encrypted storage of sensitive data fields, including passwords (stored as salted hashes) and financial identifiers;
• Access controls ensuring that only authorised jbajje personnel can access personal data, on a strict need-to-know basis;
• Regular security assessments of the Platform infrastructure and third-party integrations;
• Fraud detection systems that monitor for unusual account activity in real time.

While jbajje employs robust security practices, no online platform can guarantee absolute security. You are responsible for keeping your own account credentials confidential and for notifying us immediately if you suspect any unauthorised access to your Account.

09 Cookies & Tracking

jbajje uses cookies and similar tracking technologies to operate the Platform and improve your experience. A cookie is a small text file placed on your device when you visit the Platform. The following categories of cookies are used:

9.1 Strictly Necessary Cookies

These cookies are essential for the Platform to function. They maintain your logged-in session, store your language preferences, and enable core security features. These cookies cannot be disabled without affecting Platform functionality.

9.2 Analytics Cookies

jbajje uses anonymised analytics data to understand how Players navigate the Platform — which pages are most visited, where users encounter difficulties, and how overall performance can be improved. This data is aggregated and does not identify individual users.

9.3 Functional Cookies

Functional cookies remember your preferences and personalisation choices (such as display settings) to provide a more consistent experience across sessions.

9.4 Managing Cookies

You can control and manage cookies through your browser settings. Note that disabling strictly necessary cookies may prevent certain parts of the Platform from functioning correctly. Third-party cookies set by payment partners (bKash, Nagad, Rocket) during payment flows are governed by those providers' own cookie policies.

10 Your Rights

As a Player using the jbajje Platform, you have the following rights in relation to your personal data:

• Right of access: You may request a copy of the personal data jbajje holds about you at any time;
• Right to rectification: You may request that inaccurate or incomplete personal data be corrected or updated;
• Right to erasure: In certain circumstances, you may request that jbajje delete your personal data — for example, where the data is no longer necessary for the purpose for which it was collected. This right is subject to jbajje's legal retention obligations;
• Right to restrict processing: You may request that jbajje restricts processing of your data in certain circumstances, for example while the accuracy of your data is being disputed;
• Right to data portability: Where processing is based on your consent or on a contract, you may request that jbajje provide your personal data in a structured, commonly used, machine-readable format;
• Right to withdraw consent: Where processing is based on your consent (for example, for receiving promotional communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal;
• Right to object: You may object to processing of your data carried out on the basis of legitimate interests, where you believe your privacy rights override those interests.

To exercise any of these rights, please contact the jbajje support team using the details in Section 13. jbajje will respond to all valid requests within a reasonable timeframe and in any case within thirty (30) days of receipt. Where a request is complex or numerous, this period may be extended by a further thirty (30) days with prior notice.

11 Children's Privacy

The jbajje Platform is strictly intended for adults aged 18 years and older. jbajje does not knowingly collect personal data from any individual under the age of 18. If you are a parent or guardian and believe that a minor has registered an Account or provided personal data to jbajje without your consent, please contact us immediately using the details in Section 13.

Upon receiving a verified report that a minor's data has been collected, jbajje will promptly close the Account, delete the personal data in question, and void any associated balances. Age verification procedures are in place specifically to prevent underage access to the Platform.

12 Changes to This Policy

jbajje may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or operational needs. When material changes are made, we will:

• Update the "Last Updated" date at the top of this document;
• Display a prominent notification in your Account dashboard before the new version takes effect;
• Where required, seek fresh consent for any new processing activities that were not covered by the previous version of this Policy.

Your continued use of the Platform after the effective date of an updated Privacy Policy constitutes your acceptance of the revised Policy. If you do not agree to the changes, you must stop using the Platform and request Account closure by contacting support.

13 Contact Us

If you have any questions about this Privacy Policy, wish to exercise your data rights, or need to report a privacy concern, please reach out to the jbajje team through the following channels:

• Live Chat: Available 24/7 directly on the Platform — the fastest way to reach us
• Email: [email protected]
• Support Hours: 24 hours a day, 7 days a week, including all public holidays in Bangladesh
• Response Language: English
• Time Zone: Bangladesh Standard Time (BST, UTC+6)

For responsible gaming concerns or self-exclusion requests, please visit our Responsible Gaming page or raise the matter directly with the support team. All privacy and data requests are handled with strict confidentiality.