Privacy Policy

01 Introduction

This Privacy Policy is published by jidbaj (the "Platform", "we", "us", "our") and applies to all users who access or register on the jidbaj website at jidbaj.net (the "Site"). The Policy describes how jidbaj collects, uses, stores, protects, and in certain circumstances discloses the personal information of its users ("you", "your", "Player").

By registering a jidbaj account or otherwise using the Site, you acknowledge that you have read this Privacy Policy in full and consent to the collection and processing of your personal data as described herein. This Privacy Policy should be read alongside the jidbaj Terms & Conditions and the Responsible Gaming Policy, each of which is incorporated into the overall agreement between you and jidbaj by reference.

jidbaj takes the protection of personal data seriously. We apply industry-standard technical and organisational security measures to safeguard the data entrusted to us by players across Bangladesh and beyond. This Policy is written in plain, formal English and is intended to be read and understood by any jidbaj account holder without specialist legal knowledge.

02 Personal Data We Collect

jidbaj collects the following categories of personal data:

Category	Specific Data Points	When Collected
Identity Data	Full legal name, date of birth, gender, nationality, national ID number, passport number	Registration and KYC verification
Contact Data	Email address, mobile phone number, residential address, city, division, postal code	Registration and account updates
Financial Data	bKash / Nagad / Rocket / Upay account numbers, bank account details, transaction history, deposit and withdrawal records	Payment processing and withdrawal requests
Technical Data	IP address, browser type and version, device type, operating system, time zone setting, session duration	Automatically upon Site access
Usage Data	Games played, bets placed, bet amounts, game outcomes, bonus usage, login frequency, page navigation patterns	Automatically during gameplay
Communications Data	Support chat transcripts, email correspondence, complaint submissions	When contacting support
Verification Documents	Copies of national identity card, passport, utility bills, or other documents submitted for KYC	KYC verification process

jidbaj does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data, or health information unless specifically required by applicable law or regulatory obligation and only with your explicit prior consent.

03 How We Collect Your Data

3.1 Information You Provide Directly

The majority of personal data jidbaj holds is provided directly by you when you register an account, complete KYC verification, make a deposit or withdrawal, contact our support team, or respond to a survey or promotion. You are responsible for ensuring that the information you provide is accurate and kept up to date.

3.2 Automatically Collected Data

When you access the jidbaj Site, we automatically collect certain technical and usage data through cookies, server logs, and similar tracking technologies. This data is collected from the moment you load any jidbaj web page and continues throughout your session. The automatic collection of this data is essential to the operation of the platform, including fraud detection, session management, and performance optimisation.

3.3 Data from Third Parties

jidbaj may receive personal data about you from third parties in certain circumstances, including:

• Payment providers (bKash, Nagad, Rocket, Upay, Visa, Mastercard) — transaction confirmation data and account validation responses;
• KYC verification service providers — identity verification results and document authentication reports;
• Fraud detection services — risk scoring data and flagged transaction indicators associated with your payment accounts or IP address.

04 Legal Basis for Processing

jidbaj processes your personal data on the following legal grounds:

• Contractual necessity: Processing required to fulfil the agreement between you and jidbaj — including account creation, payment processing, game delivery, and withdrawal execution.
• Legal obligation: Processing required to comply with applicable laws, including anti-money laundering (AML) obligations, Know Your Customer (KYC) requirements, and fraud prevention duties.
• Legitimate interests: Processing carried out for jidbaj's legitimate business interests, including platform security, fraud detection, service improvement, and responsible gaming monitoring, provided these interests are not overridden by your data protection rights.
• Consent: Where jidbaj relies on your consent as the legal basis for processing — for example, for optional marketing communications — you have the right to withdraw that consent at any time by contacting support at [email protected]. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

05 How We Use Your Personal Data

jidbaj uses the personal data it holds about you for the following purposes:

• Account management: Creating, maintaining, and securing your jidbaj account; processing login authentication; enabling password resets and account recovery.
• Payment processing: Facilitating deposits via bKash, Nagad, Rocket, Upay, Visa, Mastercard, and bank transfer; executing withdrawal requests to your registered payment account; maintaining accurate transaction records.
• Identity verification: Conducting KYC checks to verify your identity, confirm your age, and comply with AML obligations.
• Game and betting services: Delivering real-money gaming, sports betting, live casino, crash games, and slots; recording game outcomes and wager history; calculating and crediting winnings.
• Bonus and VIP programme administration: Tracking wagering activity to determine bonus eligibility, wagering requirement progress, and VIP tier status.
• Responsible gaming: Monitoring betting patterns for indicators of problem gambling; enforcing deposit limits, cooling-off periods, and self-exclusion requests; sending responsible gaming reminders where appropriate.
• Fraud prevention and security: Detecting suspicious account activity, unauthorised access attempts, multi-accounting, and financial crime; sharing data with fraud detection services where necessary.
• Customer support: Responding to enquiries, complaints, and dispute resolution requests submitted via email or live chat.
• Platform improvement: Analysing aggregated usage data to identify technical issues, optimise game performance, and enhance the overall player experience.
• Legal compliance: Retaining records as required by applicable Bangladesh law, responding to lawful requests from law enforcement or regulatory authorities.

06 Data Sharing and Disclosure

jidbaj does not sell, rent, or lease your personal data to third-party advertisers or data brokers. Your personal data may be shared with the following categories of third parties strictly on a need-to-know basis and solely for the purposes described in this Policy:

• Payment service providers: bKash, Nagad, Rocket, Upay, SureCash, Visa, Mastercard, Dutch-Bangla Bank, and other financial institutions — solely to process your deposits and withdrawals.
• KYC and identity verification providers: Authorised third-party services that assist jidbaj in verifying player identity and age in compliance with AML obligations.
• Fraud prevention and risk management services: Providers that help detect, prevent, and investigate fraudulent transactions, money laundering, and other financial crime.
• Game technology providers: Studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — who may process limited technical data (such as session identifiers) to deliver their licensed game content on the jidbaj platform.
• IT and hosting providers: Secure cloud infrastructure and server hosting providers who store jidbaj platform data under strict confidentiality agreements.
• Legal and regulatory authorities: Courts, law enforcement agencies, financial intelligence units, or other government bodies in Bangladesh or internationally where jidbaj is legally required or permitted to disclose data.

All third parties with whom jidbaj shares personal data are required to process that data in accordance with applicable data protection law and are prohibited from using it for any purpose other than the specific purpose for which it was shared.

07 Data Retention

jidbaj retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Active account data: Retained for the lifetime of your jidbaj account and for a minimum of five (5) years following account closure, in accordance with AML record-keeping obligations.
• KYC and identity documents: Retained for a minimum of five (5) years from the date of submission, in line with applicable financial crime prevention regulations.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction.
• Support communications: Retained for two (2) years from the date of the most recent communication in a given case, or longer if the matter relates to a formal dispute or legal proceeding.
• Technical and usage logs: Retained for a maximum of twelve (12) months, after which they are anonymised or deleted.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with any individual player.

08 Security Measures

jidbaj implements a layered approach to data security, combining technical, organisational, and procedural controls to protect player data from unauthorised access, disclosure, alteration, or destruction. Our security measures include:

• 256-bit SSL/TLS encryption applied to all data transmissions between your device and jidbaj servers;
• Encrypted data storage for all sensitive personal and financial data at rest on jidbaj servers;
• Role-based access controls ensuring that only authorised jidbaj personnel with a legitimate business need can access player data;
• Two-factor authentication (2FA) available to all players for additional account login security;
• Continuous monitoring of server infrastructure for intrusion attempts, anomalous access patterns, and potential data breaches;
• Regular security audits conducted by qualified information security professionals;
• Staff training on data protection obligations and secure data handling procedures.

09 Cookies and Tracking Technologies

9.1 What Are Cookies?

Cookies are small text files placed on your device by the jidbaj website when you access the Site. They allow the platform to recognise your device on subsequent visits, maintain your session state, and collect usage analytics.

9.2 Types of Cookies Used by jidbaj

• Essential cookies: Required for the basic operation of the jidbaj platform, including session management, login authentication, and security token validation. These cookies cannot be disabled without impacting core platform functionality.
• Analytics cookies: Used to collect anonymised data about how players navigate and use the jidbaj Site — including pages visited, session duration, and game interaction patterns. This data is used solely to improve platform performance.
• Preference cookies: Used to remember your stated preferences such as language settings and notification preferences across sessions.
• Security cookies: Used by jidbaj's fraud detection systems to identify suspicious browsing patterns, detect bot activity, and protect against cross-site request forgery (CSRF) attacks.

9.3 Managing Cookies

You may control or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the jidbaj platform, including login persistence and personalised game recommendations. jidbaj does not use third-party advertising cookies or track your activity across external websites.

10 Your Data Protection Rights

As a jidbaj player, you have the following rights with respect to your personal data. To exercise any of these rights, please contact jidbaj at [email protected]. jidbaj will respond to all verified data rights requests within 30 calendar days.

• Right of Access: You have the right to request a copy of the personal data jidbaj holds about you, together with information about how it is being processed.
• Right to Rectification: You have the right to request correction of inaccurate or incomplete personal data. You may update certain details (such as your email address or phone number) directly from within your jidbaj account dashboard.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to jidbaj's legal obligations to retain certain records (such as AML and KYC data) for a minimum statutory period.
• Right to Restrict Processing: You have the right to request that jidbaj restricts the processing of your personal data in certain circumstances — for example, while a dispute regarding data accuracy is being resolved.
• Right to Data Portability: You have the right to receive a structured, commonly used, machine-readable copy of personal data that you have provided to jidbaj, where the processing is based on your consent or a contract.
• Right to Object: You have the right to object to the processing of your personal data where jidbaj relies on legitimate interests as the legal basis, including processing for direct marketing purposes. jidbaj will cease such processing upon receipt of a valid objection unless it can demonstrate compelling legitimate grounds.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

11 Children's Privacy

Parents or guardians who believe that a minor may have registered a jidbaj account or submitted personal data to the platform are requested to contact jidbaj immediately at [email protected] so that appropriate action can be taken.

12 Third-Party Services and External Links

The jidbaj platform integrates licensed game content from third-party providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. When you play a game delivered by one of these studios, limited technical session data may be processed by the studio's servers in order to deliver the game. Each studio operates under its own privacy and data protection framework as a licensed game provider.

jidbaj does not control, and accepts no responsibility for, the privacy practices of third-party service providers beyond the contractual obligations imposed on them as processors of jidbaj player data. Players are encouraged to review the privacy policies of any third-party services they interact with independently of the jidbaj platform.

13 Amendments to This Privacy Policy

jidbaj reserves the right to update or amend this Privacy Policy at any time. The effective date at the top of this document will be updated to reflect the date of the most recent revision. Where an amendment materially affects the way in which jidbaj processes your personal data, we will endeavour to notify registered players via the email address associated with their account at least 7 days before the amendment takes effect.

Your continued use of the jidbaj platform following the publication of any amendment to this Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with any amendment, you may close your account and request deletion of your data in accordance with Section 10 of this Policy.

14 Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way in which jidbaj processes your personal data, please contact our support team using the details below. jidbaj takes all data protection enquiries seriously and will respond promptly.

• Email: [email protected]
• Support Hours: 24 hours a day, 7 days a week, Bangladesh Standard Time (UTC+6)
• Response Time: Data protection enquiries are acknowledged within 24 hours and addressed within 30 calendar days of receipt of a verified request.