jatbaj Privacy Policy

01 Introduction

This Privacy Policy ("Policy") describes how jatbaj ("the Platform", "we", "us", "our"), operating at jatbaj.club, collects, uses, stores, and protects the personal information of individuals ("you", "the User", "the Player") who access or use our online casino and sports betting services. Our services are primarily directed at eligible adult players in Bangladesh.

jatbaj is committed to protecting the privacy and security of all personal data it processes. This Policy is designed to be clear and accessible so that you can make informed decisions about the information you share with us. It should be read alongside the jatbaj Terms & Conditions, which govern your use of the platform as a whole.

By registering an account or continuing to use jatbaj, you acknowledge that you have read and understood this Policy and that you consent to the collection and processing of your personal data in the manner described herein. If you do not agree with this Policy, you should not use the platform.

02 Data We Collect

jatbaj collects only the personal data that is necessary to deliver its services, comply with legal obligations, and protect the integrity of the platform. The categories of data we may collect include:

2.1 Identity & Contact Data

• Full legal name as it appears on official identification documents;
• Date of birth (to verify that you meet the 18+ age requirement);
• Bangladesh mobile number used for account registration and two-factor authentication;
• Residential address in Bangladesh;
• Email address, if provided for communication purposes.

2.2 Account Data

• Username and hashed account password;
• Account balance, transaction history, and bet history;
• Bonus and promotion records;
• Player preferences and account settings (including responsible gaming limits set by you).

2.3 Financial Data

• Payment method identifiers (e.g., registered bKash number, Nagad number, Rocket number, Upay number, or bank account reference);
• Deposit and withdrawal transaction records including amounts in Bangladeshi Taka (৳), timestamps, and payment provider references;
• We do not store full card numbers, CVV codes, or complete bank account credentials — payment processing is handled by our payment partners.

2.4 Identity Verification Data

• Copies of government-issued identity documents (National ID card, passport, or birth certificate) submitted during KYC (Know Your Customer) verification;
• Selfie or liveness-check images submitted for identity matching, where required;
• Utility bills or address confirmation documents submitted to verify residential address.

2.5 Technical & Usage Data

• IP address and approximate geolocation derived from IP;
• Device type, operating system, and browser type and version;
• Session timestamps, pages visited, features used, and click-path data within the platform;
• Crash and error logs generated during your use of the platform.

2.6 Communications Data

• Records of support conversations (including live chat transcripts and email correspondence) between you and the jatbaj support team;
• Feedback, complaint, or dispute records submitted through our support channels.

03 How We Collect Data

jatbaj collects your personal data through the following channels:

• Direct submission: Data you provide when registering an account, completing identity verification, making a deposit or withdrawal, contacting support, or updating your account settings.
• Automated technical collection: Data collected automatically when you access and use the platform, including IP addresses, session data, device identifiers, and cookies. See Section 7 for details on cookies.
• Payment providers: Transaction confirmation data received from payment partners such as bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank when you initiate a deposit or withdrawal.
• Identity verification partners: Where you submit identity documents, our KYC partner services may return verification status results and match scores to jatbaj.
• Game providers: Game studios such as Evolution Gaming, Pragmatic Play, and Ezugi may transmit session and result data to jatbaj for the purpose of bet settlement, dispute resolution, and responsible gaming monitoring.

04 Purposes of Processing

jatbaj processes your personal data for the following purposes:

jatbaj does not use your personal data to build profiles for sale to third-party advertisers, nor does it use automated decision-making in a manner that produces significant legal effects on you without human oversight.

05 Legal Basis for Processing

jatbaj processes personal data on the following legal bases:

• Contractual necessity: Processing required to perform the contract between you and jatbaj (e.g., operating your account, settling bets, processing payments).
• Legal obligation: Processing required to comply with applicable legal requirements, including anti-money laundering obligations and age verification mandates.
• Legitimate interests: Processing carried out for the legitimate interests of jatbaj or third parties, including fraud prevention, platform security, and service improvement, where such interests are not overridden by your rights.
• Consent: Processing for purposes such as promotional communications, where you have given explicit prior consent. You may withdraw consent at any time by contacting [email protected] or updating your account communication preferences.

06 Data Sharing & Disclosure

jatbaj does not sell, rent, or trade your personal data to third parties. Data is shared only in the following limited circumstances and only to the extent necessary:

6.1 Service Partners

We share data with trusted third-party service providers who assist in operating the platform, including payment processing partners (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank), identity verification providers, game studios (Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Ezugi, Spribe), and IT infrastructure providers. These partners are contractually required to process your data only for the purposes defined by jatbaj and to maintain appropriate security standards.

6.2 Legal & Regulatory Disclosure

jatbaj may disclose personal data where required to do so by applicable law, court order, or at the direction of a competent authority. This includes disclosure in connection with anti-money laundering investigations or fraud-related proceedings. Where permitted by law, we will endeavour to notify you of any such disclosure.

6.3 Business Transfers

In the event of a merger, acquisition, or sale of all or part of jatbaj's business assets, personal data held by the platform may be transferred to the relevant successor entity. Players will be notified of any such transfer and of any changes to this Privacy Policy that result from it.

07 Cookies & Tracking Technologies

jatbaj uses cookies and similar tracking technologies on jatbaj.club to support the operation and improvement of the platform. Cookies are small data files stored on your device when you visit the site. The types of cookies we use include:

• Essential cookies: Necessary for the platform to function correctly, including maintaining your logged-in session, storing your account preferences, and enabling secure payment flows. These cannot be disabled without affecting core functionality.
• Analytics cookies: Used to collect aggregated, anonymised data about how users navigate the platform, which pages are visited most frequently, and where errors occur. This data helps jatbaj improve platform performance and user experience.
• Security cookies: Used to detect and prevent fraudulent access attempts, including identifying suspicious login patterns or multiple accounts from the same device.

You may control cookie settings through your browser's built-in privacy controls. However, disabling essential cookies may prevent you from logging in or using key platform features. jatbaj does not use third-party advertising cookies or behavioural retargeting cookies.

08 Data Retention

jatbaj retains personal data for as long as is necessary to fulfil the purposes for which it was collected, to maintain your active account, or to comply with applicable legal obligations. Specific retention periods are guided by the following principles:

• Active account data (identity, contact, account history) is retained for the full duration of your account and for a minimum period after account closure as required by anti-money laundering and record-keeping obligations.
• Financial transaction records are retained for the period mandated by applicable financial regulations.
• Identity verification documents are retained for the period necessary to comply with KYC obligations and are securely destroyed thereafter.
• Support communications are retained for a period sufficient to resolve any related disputes and for quality assurance purposes.
• Technical and usage data is retained in aggregated or anonymised form for analytics purposes and does not identify individual players after the anonymisation process.

Once data is no longer required for any of the above purposes, it will be securely deleted or permanently anonymised in accordance with jatbaj's internal data management procedures.

09 Data Security

jatbaj takes the security of your personal data seriously and implements a range of technical and organisational measures to protect it against unauthorised access, loss, destruction, or alteration. These measures include:

• SSL (Secure Sockets Layer) encryption for all data transmitted between your device and jatbaj.club;
• Encryption of sensitive stored data, including identity documents and financial records;
• Access controls that restrict internal access to personal data on a strict need-to-know basis;
• Regular security assessments and monitoring of platform infrastructure;
• Secure password hashing so that account passwords are never stored in plain text.

While jatbaj employs industry-standard security practices, no digital platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your own login credentials. If you believe your account has been compromised, contact [email protected] immediately.

10 Your Rights

As a player on jatbaj, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact us at [email protected] with a clear description of your request and sufficient information to identify your account.

• Right of access: You may request a copy of the personal data jatbaj holds about you, along with information about how it is used.
• Right of rectification: You may request correction of any personal data that is inaccurate or incomplete. For basic profile data, you may update this directly in your account settings.
• Right to erasure: You may request deletion of your personal data where it is no longer required for the purposes for which it was collected, subject to our legal obligations to retain certain records.
• Right to restriction: You may request that jatbaj restrict processing of your data in certain circumstances, for example while a dispute about accuracy is being resolved.
• Right to data portability: Where processing is carried out on the basis of your consent or a contract with you, you may request a copy of your data in a structured, commonly used, machine-readable format.
• Right to withdraw consent: Where processing is based on your consent (e.g., for marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing that took place before withdrawal.
• Right to object: You may object to processing carried out on the basis of jatbaj's legitimate interests, including direct marketing profiling.

jatbaj will respond to all rights requests within a reasonable timeframe. Requests may be subject to identity verification before processing to protect against unauthorised data access.

11 Children's Privacy

jatbaj does not knowingly collect or process personal data belonging to individuals under the age of 18. The platform is strictly intended for adults. If jatbaj discovers that personal data has been collected from an individual under 18 without appropriate verification, the relevant account will be closed and the data deleted in accordance with our retention policies. If you believe a minor has registered on jatbaj, please contact [email protected] immediately so that the matter can be investigated and resolved promptly.

12 Third-Party Links

The jatbaj platform may contain references or links to game content hosted by third-party game studios. jatbaj is not responsible for the privacy practices of those third-party providers. When you interact with embedded game content from providers such as Evolution Gaming, Pragmatic Play, or Ezugi, those providers may collect session data in accordance with their own privacy policies. We encourage you to review the privacy policies of any third-party providers whose services you access through jatbaj.

13 Policy Updates

jatbaj reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. When material changes are made, we will notify registered players via email or a prominent notice on the platform prior to the changes taking effect. The "Last updated" date at the top of the table of contents will always reflect the current version. Your continued use of jatbaj following the effective date of any update constitutes your acceptance of the revised Policy. If you do not agree with the updated Policy, you must cease using the platform and contact us to close your account.

14 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or jatbaj's handling of your personal data, please contact the jatbaj support team using the details below. All privacy-related enquiries will be handled with confidentiality and prioritised accordingly.

Please include "Privacy Request" in the subject line of your correspondence so that your enquiry is directed to the appropriate team member. jatbaj aims to acknowledge all privacy requests within 48 hours and to resolve them within 30 calendar days, subject to the complexity of the request.