Privacy Policy — jebaz

1. Our Privacy Commitments at a Glance

Before diving into the detail, here is a plain-language summary of the six core commitments that underpin jebaz's approach to data privacy. These are not marketing claims — they are binding obligations reflected throughout this policy.

2. Introduction

jebaz ("we", "us", "our") operates Bangladesh's trusted online gaming platform and is committed to protecting the privacy of every player who uses our website, mobile site, games, promotions and related services (collectively, "Services"). This Privacy Policy describes how we collect, use, store, share and safeguard personal data in connection with your use of the Services. It also sets out the rights you have in relation to your personal data and explains how to exercise them.

By registering an account with jebaz or using any part of the Services, you confirm that you have read and understood this Privacy Policy and that you consent to the collection and processing of your personal data as described herein. This Privacy Policy forms part of the jebaz Terms and Conditions. If you do not accept this Privacy Policy, you must not use the jebaz platform.

3. Personal Data We Collect

We collect personal data that you provide directly and data generated automatically when you interact with the jebaz platform. The categories below describe what we collect and why each category is necessary.

• 👤
  Identity Data Full legal name, date of birth, gender, nationality and a copy of your government-issued identification document (National Identity Card or passport) collected during account registration and KYC verification.
• 💳
  Financial Data Mobile financial service account references (bKash, Nagad, Rocket, Upay), bank account identifiers, and a full transaction history including deposits, withdrawals and bet records on the jebaz platform.
• 📱
  Technical Data IP address, browser type and version, operating system, device type and identifier, screen resolution, time zone set to Bangladesh Standard Time (BST, UTC+6), and connection type. Captured automatically by our servers when you access the platform.
• 🎮
  Gaming Activity Data Bet history, game session logs, win and loss records, bonus usage, wagering patterns, session durations, and responsible gaming tool settings such as deposit limits, self-exclusion status and session reminders.
• 📍
  Location Data Country and city-level location inferred from your IP address. Used to verify eligibility and comply with geographic restrictions. We do not collect precise GPS coordinates from your device.
• 🍪
  Cookie and Usage Data Pages visited, links clicked, time spent per page, referring URL, and interactions with games and promotional content. Collected via cookies and similar tracking technologies as described in Section 7 below.

4. How We Use Your Personal Data

We use personal data only for specific, clearly defined purposes. We do not use your data for any purpose that is incompatible with the purposes listed below. If we need to process your data for a new purpose, we will update this policy and, where required by law, seek your consent.

• ✅
  Account Management Creating and maintaining your jebaz account, verifying your identity and age eligibility (21+), processing KYC documentation, and managing your preferences and responsible gaming settings.
• 🔐
  Security and Fraud Prevention Detecting and preventing fraudulent transactions, unauthorised account access, money laundering, bonus abuse and other prohibited conduct as defined in the jebaz Terms and Conditions.
• 💰
  Payment Processing Processing deposits and withdrawals via bKash, Nagad, Rocket, Upay and other supported payment methods; verifying that payment method ownership matches account registration details; and maintaining accurate financial records.
• 🎯
  Responsible Gaming Monitoring gaming activity for signs of problem gambling; applying deposit limits, session time-outs and self-exclusion settings you have activated; and contacting you if our systems detect patterns that may indicate harm.
• 📊
  Platform Improvement Analysing aggregated usage patterns, diagnosing technical issues, improving game performance and user experience, and developing new features. Where possible, anonymised or pseudonymised data is used for this purpose.
• 📣
  Marketing Communications Sending promotional emails, SMS notifications or in-platform messages about bonuses, new games and offers — but only where you have given explicit consent. You may withdraw consent at any time by contacting support or using the unsubscribe link in any marketing message.

5. Legal Basis for Processing

We process your personal data only where we have a valid legal basis to do so. The four primary legal bases on which jebaz relies are set out below.

6. How We Share Your Data

jebaz does not sell, rent or trade your personal data to any third party for their own independent commercial use. We share personal data only in the limited circumstances described below and only to the extent necessary for the stated purpose.

All third parties with whom we share personal data are contractually required to handle that data securely, use it only for the specified purpose, and comply with applicable data protection laws. We do not permit service providers to use your data for their own marketing purposes.

• 🔧
  Service Providers Trusted third-party companies that help us operate the platform — including payment processors (bKash and Nagad gateway partners), KYC verification providers, game software providers such as Pragmatic Play, Evolution Gaming and Ezugi, fraud detection services, cloud hosting providers, and customer support technology platforms. These providers access only the data strictly necessary to perform their specific function.
• 🏛️
  Legal and Regulatory Authorities Where required by law, court order, or a lawful request from a regulatory or law enforcement authority, we will disclose personal data. Where legally permitted and practically feasible, we will notify you of such a disclosure request before responding to it.
• 🤝
  Business Transfers In the event that jebaz undergoes a merger, acquisition, reorganisation, or sale of substantially all of its assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and any material change to how your data is handled, and you will have the opportunity to close your account before the transfer takes effect if you do not consent.

7. Cookies and Tracking Technologies

jebaz uses cookies and similar tracking technologies — including web beacons, pixel tags and local storage — to operate the platform, remember your preferences, maintain your logged-in session, detect fraud and analyse platform usage. A cookie is a small text file stored on your device when you visit a website. Cookies do not contain executable code and cannot access other files on your device.

We use four categories of cookies: (a) Strictly Necessary — required for the platform to function, cannot be disabled; (b) Performance and Analytics — help us understand how players use the platform so we can improve it; (c) Functional — remember your settings and language preferences; (d) Marketing — used only where you have given consent, to show relevant promotional content. You can manage cookie preferences through your browser settings, though disabling certain cookies may affect platform functionality.

8. Data Retention

We retain personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. Account data (identity, contact, financial) is retained for a minimum of 5 years following account closure, in accordance with anti-money laundering record-keeping obligations. Gaming activity logs are retained for 3 years. Marketing consent records are retained for the duration of the consent plus 2 years. Technical log data such as IP addresses and session logs is retained for 12 months.

Where you request deletion of your personal data and we are not under a legal obligation to retain it, we will delete or irreversibly anonymise your data within 30 days of receiving your verified request. Anonymised or aggregated data that cannot identify you is not subject to deletion requests and may be retained indefinitely for analytical purposes.

9. Data Security

jebaz implements appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration or disclosure. Our security measures include 256-bit SSL/TLS encryption for all data in transit, AES-256 encryption for sensitive data at rest, strict access controls and multi-factor authentication for staff accessing production systems, regular security audits and penetration testing, and a documented incident response procedure.

Despite these measures, no internet-based system can guarantee absolute security. If you become aware of any security vulnerability or suspect that your jebaz account has been compromised, please notify us immediately at [email protected]. In the event of a data breach likely to result in a risk to your rights and freedoms, we will notify you without undue delay and take all reasonable steps to contain and remediate the breach.

10. Your Data Protection Rights

Subject to applicable law, you have the following rights in relation to your personal data held by jebaz. To exercise any right, contact us at [email protected] with the subject line "Data Rights Request" and include your registered mobile number for identity verification. We will respond within 30 days of receipt of a verified request.

Please note that exercising certain rights may affect your ability to use the jebaz platform. For example, requesting erasure of identity or financial data that we are legally required to retain may result in your account being closed. We will always explain the implications before processing any rights request.

11. Minors and Age Restriction

The jebaz platform is strictly intended for adults aged 21 and above. We do not knowingly collect or process personal data from persons under 21. If we become aware that we have collected personal data from a person under 21 without appropriate age verification having been completed, we will immediately delete that data and close the associated account. If you believe that a minor has registered a jebaz account, please contact us immediately at [email protected] so we can investigate and act without delay.

12. Changes to This Privacy Policy

jebaz reserves the right to update this Privacy Policy at any time. When we make material changes, we will provide reasonable advance notice to registered players via the contact details on file (email or SMS) or by displaying a prominent notice on the platform, and will specify the effective date of the revised policy. Minor changes such as clarifications or formatting corrections may be made without prior notice.

Your continued use of the jebaz platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated policy. We recommend reviewing this Privacy Policy periodically to stay informed about how we protect your personal data.

13. Contact and Data Queries

If you have any questions about this Privacy Policy, wish to exercise any of your data protection rights, want to make a complaint about how we have handled your personal data, or wish to withdraw consent to marketing communications, please contact the jebaz data team using the details below. We aim to acknowledge all data-related queries within 24 hours and resolve them fully within 30 days.