jayabaje Privacy Policy

1. Information We Collect

jayabaje collects personal information through several channels: directly from you when you register an account or contact support, automatically as you use the platform, and occasionally from third-party verification partners. The categories of data we collect are described below.

1.1 Account Registration Data

When you create a jayabaje account, we collect the information you provide in the registration form. This includes your full legal name, date of birth, email address, mobile phone number (for bKash, Nagad, or Rocket wallet linking), and a chosen username. This data is essential to create and maintain your account and to verify that you meet the 18+ age requirement for all jayabaje services.

1.2 Identity Verification (KYC) Data

As part of our Know Your Customer (KYC) obligations and responsible gaming commitments, we may request copies of government-issued identity documents such as your National Identity Card (NID), passport, or birth certificate. We may also request proof of ownership of the payment method used for deposits (e.g., a screenshot confirming your bKash or Nagad wallet registration name). This data is processed solely to verify your identity, confirm your age, and comply with anti-money laundering (AML) requirements.

1.3 Financial Transaction Data

We record all financial transactions on your account, including deposit amounts, withdrawal requests, transaction reference numbers, and the payment method used (bKash, Nagad, Rocket, or Upay). We do not store full payment credentials — wallet PINs and banking passwords are never transmitted to or stored by jayabaje. Transaction data is retained for the period required by our financial record-keeping obligations.

1.4 Gameplay and Betting Data

We record all gameplay activity on your jayabaje account, including games played, wagers placed, bet amounts, game results, session durations, and running account balance. This data is used to operate the games fairly, resolve disputes, detect bonus abuse, and fulfil responsible gaming monitoring obligations.

1.5 Technical and Device Data

When you access jayabaje, our servers automatically collect technical data about your device and connection. This includes your IP address, browser type and version, operating system, device type (desktop or mobile), screen resolution, referring URL, pages visited within the platform, and time-stamp data. This information is used for security monitoring, fraud detection, platform optimisation, and analytics.

1.6 Communications Data

If you contact the jayabaje support team via live chat or by emailing support@jayabaje, we retain a record of the correspondence, including the content of messages exchanged. This data is used to manage your support request, improve service quality, and as an audit trail in the event of a formal complaint or dispute.

2. How We Use Your Data

jayabaje uses the personal data it collects for specific, documented purposes. We do not use your data in ways that are inconsistent with the purposes described in this Policy, and we do not sell personal data to third-party marketers or data brokers under any circumstances.

• Account management: Creating, maintaining, and securing your jayabaje account; processing login requests; enabling password recovery.
• Age and identity verification: Confirming that you meet the 18+ eligibility requirement before granting access to real-money games and the platform cashier.
• Payment processing: Processing deposits and withdrawals via bKash, Nagad, Rocket, and Upay; reconciling transaction records; managing refunds or chargeback investigations.
• Game operations: Operating casino games and sports betting markets fairly; generating and recording game outcomes; maintaining server-side logs that serve as the authoritative record of gameplay.
• Fraud prevention and AML compliance: Detecting and investigating suspicious transaction patterns, bonus abuse, account duplication, and potential money laundering activity.
• Responsible gaming monitoring: Identifying players who may be exhibiting signs of problem gambling based on session frequency, deposit patterns, and wagering behaviour; triggering account review or intervention where appropriate.
• Customer support: Responding to support enquiries, processing formal complaints, and providing account assistance via live chat and email.
• Platform improvement: Analysing aggregate, anonymised usage data to improve platform performance, user experience, and game content selection.
• Marketing communications: Sending promotional emails or on-site notifications about bonuses, new games, or seasonal offers — only where you have opted in to receive such communications. You may opt out at any time by contacting support@jayabaje.
• Legal compliance: Meeting obligations under applicable law, responding to lawful requests from competent authorities, and maintaining financial records for the period required by law.

3. Legal Basis for Processing

jayabaje processes personal data on the basis of one or more of the following legal grounds, consistent with internationally recognised data protection principles:

• Contractual necessity: Processing required to perform our contract with you — i.e., to operate your account, process transactions, and deliver the gaming services you have signed up for. Without this processing, jayabaje cannot provide its services to you.
• Legal obligation: Processing required to comply with applicable legal and regulatory obligations, including anti-money laundering (AML) requirements, age verification obligations, and financial record-keeping mandates.
• Legitimate interests: Processing carried out for our legitimate business interests where those interests are not overridden by your rights — including fraud prevention, platform security, responsible gaming monitoring, and platform analytics. We carry out a balancing test before relying on this basis and document our conclusions.
• Consent: Where we rely on consent as our legal basis (most notably for marketing communications), you have the right to withdraw that consent at any time without detriment to your account. Withdrawal of consent does not affect the lawfulness of any processing carried out prior to withdrawal.

4. Data Sharing & Disclosure

jayabaje does not sell, rent, or trade your personal data to third parties. We may, however, share specific categories of data with carefully selected third parties in the following limited circumstances:

4.1 Game Technology Providers

To deliver casino games and sports betting markets, jayabaje integrates game software from licensed providers including Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Ezugi, Spribe, and Play'n GO. These providers may process certain gameplay and session data on their own servers as part of delivering their game products. All integrated providers are contractually required to handle player data in accordance with applicable data protection standards.

4.2 Payment Processing Partners

To process deposits and withdrawals, jayabaje shares necessary transaction data with payment service providers including bKash, Nagad, Rocket, and Upay. This typically includes the transaction amount, reference number, and the account identifiers needed to route payments. These providers operate under their own privacy policies and are regulated by the Bangladesh Bank and the Bangladesh Telecommunication Regulatory Commission (BTRC).

4.3 Identity Verification Services

Where jayabaje uses third-party KYC or identity verification technology to process document checks, the data submitted for verification (document images, facial match data where applicable) is processed by the relevant verification provider under a strict data processing agreement. Verification data is used exclusively for the purpose of identity confirmation and is not retained by the provider beyond the period required to complete the verification.

4.4 Legal and Regulatory Disclosure

jayabaje may disclose personal data to law enforcement agencies, courts, or regulatory authorities where required to do so by law, court order, or other binding legal process. In such cases, we disclose only the minimum data necessary to comply with the specific legal requirement and, where permissible, will notify the affected player of the disclosure.

4.5 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of jayabaje's business, personal data held about registered players may be transferred to the acquiring entity as part of that transaction. Players will be notified of any such transfer via on-site notice or email prior to their data being transferred, and the acquiring entity will be required to honour the commitments set out in this Privacy Policy.

5. Cookies & Tracking

jayabaje uses cookies and similar tracking technologies to operate the platform, remember your session preferences, and analyse how the site is used. A cookie is a small text file placed on your device by a website you visit. Cookies cannot execute code or deliver viruses — they are used solely to store small amounts of information that helps the platform recognise your browser across visits.

5.1 Types of Cookies We Use

5.2 Managing Cookies

You can control and delete cookies through your browser settings. Most modern browsers allow you to block third-party cookies, clear all cookies on exit, or manage exceptions for specific sites. Please note that disabling strictly necessary cookies will prevent you from logging into your jayabaje account and will impair the core functionality of the platform. Instructions for managing cookies in common browsers are available via the browser's own help documentation.

6. Data Retention

jayabaje retains personal data only for as long as it is necessary for the purpose for which it was collected, or for as long as required by applicable legal, regulatory, or financial record-keeping obligations. The following general retention periods apply:

• Active account data: Retained for the duration of your account's active status and for a period of 5 years following account closure, to meet financial audit and AML record-keeping requirements.
• KYC documents: Retained for a minimum of 5 years from the date of the most recent transaction on the account, consistent with standard AML retention requirements.
• Transaction records: Retained for 5 years from the date of each transaction for financial compliance purposes.
• Gameplay logs: Retained for 2 years from the date of the relevant game session, or longer where a dispute or investigation is pending.
• Support communications: Retained for 2 years from the date of the last message in a support thread, or longer where the thread relates to an unresolved dispute.
• Marketing consent records: Retained for the duration of the consent period plus 3 years to demonstrate compliance in the event of a complaint.
• Anonymised analytics data: May be retained indefinitely in aggregated, non-identifiable form for platform improvement purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised using industry-standard data destruction methods. Players may request early deletion of their personal data under the right to erasure described in Section 7, subject to the overriding requirements of any applicable legal retention obligation.

7. Your Privacy Rights

As a user of jayabaje, you hold a number of rights in relation to the personal data we hold about you. These rights are outlined below. To exercise any of these rights, contact the jayabaje Data Protection point of contact at support@jayabaje with the subject line "Privacy Rights Request". We will respond within 30 days of receiving a valid request.

• Right of access: You may request a copy of the personal data jayabaje holds about you, along with information about how it is being processed and the legal basis for that processing. We will provide this in a structured, readable format.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you may request that we correct or update it. We will action valid rectification requests within 5 business days.
• Right to erasure: You may request deletion of your personal data where: the data is no longer needed for the purpose for which it was collected; you withdraw consent and no other legal basis applies; or the processing was unlawful. This right is subject to any overriding legal retention obligations — for example, we cannot delete financial transaction records we are required by law to retain.
• Right to restriction: You may request that we temporarily pause processing of your data while a rectification request or objection is under review.
• Right to data portability: Where we process your data on the basis of consent or contractual necessity, you may request that we provide it to you in a machine-readable format (e.g., JSON or CSV) for transfer to another service.
• Right to object: You may object to processing carried out on the basis of legitimate interests. We will cease that processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing emails), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that took place before withdrawal.

8. Data Security

jayabaje implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security framework includes the following safeguards:

• TLS 1.3 encryption in transit: All data transmitted between your browser or device and the jayabaje servers is encrypted using Transport Layer Security (TLS) 1.3 — the current industry benchmark for data security in transit.
• AES-256 encryption at rest: Sensitive data stored on jayabaje infrastructure — including KYC document data and account credentials — is encrypted using AES-256 symmetric encryption at rest.
• Credential hashing: Account passwords are never stored in plaintext. They are hashed using a strong, salted one-way algorithm so that even internal staff cannot retrieve your original password.
• Access controls: Access to systems holding personal data is restricted to authorised personnel on a strict need-to-know basis. All staff with data access receive regular security training and are bound by confidentiality obligations.
• Intrusion detection: jayabaje systems are monitored continuously for suspicious activity, unusual access patterns, and potential intrusions. Automated alerts trigger immediate investigation by the security team.
• Penetration testing: The platform undergoes regular third-party security assessments and penetration tests to identify and remediate vulnerabilities before they can be exploited.
• Incident response: In the event of a data breach that poses a risk to affected individuals, jayabaje will notify affected players as promptly as possible and take immediate remediation steps.

9. Contact & Data Protection

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data jayabaje holds about you, please get in touch using the contact details below. All privacy-related enquiries are handled by a dedicated team member with responsibility for data protection matters.

9.1 How to Contact Us

• Live Chat: Available 24/7 on-site — the fastest way to reach the jayabaje team for account-specific or urgent privacy queries.
• Email: support@jayabaje — use the subject lines "Privacy Rights Request", "Privacy Query", or "Data Breach Report" as appropriate to ensure your message is routed to the correct team member.
• Response time: Privacy-related email enquiries are acknowledged within 48 hours and receive a substantive response within 30 calendar days of receipt of a complete request.

9.2 Children and Minors

jayabaje does not knowingly collect personal data from individuals under the age of 18. If you are a parent or guardian and believe that a minor has created an account or submitted personal data to jayabaje, contact support@jayabaje immediately. We will investigate and, where confirmed, close the account and securely delete all associated personal data within 5 business days.

9.3 Changes to This Policy

When we make material changes to this Privacy Policy, we will update the effective date shown at the top of this document and, where the change significantly affects your rights or the way we use your data, we will notify registered players via on-site notice or email prior to the change taking effect. We encourage you to review this page periodically to stay informed about how jayabaje protects your personal information.

Our Privacy Commitments

Six core principles guide how jayabaje handles every piece of personal data entrusted to us by players in Bangladesh and beyond.