jabaje Privacy Policy — How We Protect Your Personal Data

1. Data We Collect

jabaje collects personal data through several channels: directly from you during registration and account management, automatically through your use of the jabaje platform, and in some cases from trusted third-party sources such as payment processors and identity verification providers. The categories of personal data we collect are set out below.

1.1 Registration and Identity Data

When you create a jabaje account, we collect the following data that you provide directly:

• Full legal name (as it appears on your government-issued identity document)
• Date of birth (used to verify that you are aged 18 or above)
• Residential address, including district, division, and postal code within Bangladesh
• Email address
• Mobile phone number (used for account security and payment processing via bKash, Nagad, or Rocket)
• Username and encrypted password

1.2 Identity Verification (KYC) Documents

As part of our Know Your Customer (KYC) process, jabaje may request copies of identity documents, which may include:

• National Identity Card (NID) issued by the Bangladesh Election Commission
• Passport (for players who hold one)
• Driving licence
• Utility bill or bank statement as proof of residential address (issued within the last 3 months)

KYC documents are processed through jabaje's secure verification system and, where applicable, through our third-party identity verification partner. These documents are stored in encrypted form and are not accessible to unauthorised personnel.

1.3 Financial and Payment Data

When you make deposits or withdrawals via bKash, Nagad, Rocket, Upay, Visa, Mastercard, or bank transfer, jabaje records transaction data including:

• Transaction amount in Bangladeshi Taka (BDT / ৳)
• Transaction date and time (Bangladesh Standard Time, UTC+6)
• Payment method used
• Mobile wallet number or bank account reference (partial, as provided by the payment processor)
• Transaction status (pending, completed, failed, reversed)

jabaje does not store full card numbers, CVV/CVC codes, or mobile banking PINs. This sensitive payment authentication data is handled exclusively by the respective payment provider and is never transmitted to or stored on jabaje's servers.

1.4 Betting and Gaming Activity Data

jabaje maintains records of your betting and gaming activity on the platform, including:

• Sports bets placed (event, market, stake amount, odds, outcome)
• Casino and slot game sessions (game title, provider, session duration, wager amounts, win/loss outcomes)
• Bonus and promotional credits claimed and wagering progress
• Account balance history

This data is retained for operational, regulatory, and responsible gaming purposes, including the detection of problem gambling patterns and the administration of self-exclusion programmes.

1.5 Technical and Usage Data

When you access jabaje.net, our servers and analytics systems automatically collect certain technical data, including:

• IP address and approximate geographic location (district/division level within Bangladesh)
• Device type, operating system, and browser version
• Pages visited, links clicked, and session duration
• Referring URL (the page from which you arrived at jabaje.net)
• Error logs and performance data

1.6 Communications Data

If you contact jabaje's customer support team via live chat or email, we retain records of those communications, including the content of your messages and any attachments you submit. This data is used to resolve your query, improve our support quality, and maintain a record of the interaction for dispute resolution purposes.

2. How We Use Your Data

jabaje uses the personal data it collects for the following purposes. Each purpose is supported by a lawful basis as described below.

2.1 Account Management and Service Delivery

The primary purpose for which jabaje processes your personal data is to provide and manage the services you have requested — including maintaining your account, processing deposits and withdrawals in BDT, settling bets, awarding bonus credits, and providing customer support. This processing is necessary to perform the contract between you and jabaje.

2.2 Identity Verification and Age Checks

jabaje processes KYC documents and registration data to verify your identity and confirm that you are aged 18 or above. This processing is a legal obligation and a core responsible gaming requirement. Without it, jabaje cannot lawfully provide gambling services to you.

2.3 Fraud Prevention and Security

jabaje processes technical, financial, and behavioural data to detect and prevent fraud, money laundering, bonus abuse, account takeover, and other forms of malicious or prohibited activity. This includes automated screening of transactions and account activity patterns. This processing is in jabaje's and its players' legitimate interests and in some cases constitutes a legal obligation.

2.4 Responsible Gaming Monitoring

jabaje analyses betting and gaming activity data to identify patterns that may indicate problem gambling behaviour. Where such patterns are detected, jabaje may contact the player to discuss responsible gaming tools, apply cooling-off periods, or — in serious cases — initiate a mandatory self-exclusion. This processing is carried out in the player's vital interests and as part of jabaje's responsible gaming obligations.

2.5 Promotional Communications

With your consent (given at registration or subsequently via your account communication preferences), jabaje may send you promotional communications by email or SMS regarding new games, cricket betting offers (including BPL and IPL specials), deposit bonuses, seasonal promotions (Eid, Pohela Boishakh, T20 World Cup), and other relevant content. You may withdraw your consent at any time by updating your communication preferences in your account settings or by contacting [email protected].

2.6 Legal Compliance

jabaje may process and retain your personal data where required to comply with applicable laws, to respond to requests from law enforcement authorities, or to establish, exercise, or defend legal claims. This processing is a legal obligation.

2.7 Platform Improvement and Analytics

jabaje uses aggregated and anonymised usage data to analyse platform performance, understand how players navigate jabaje.net, and improve the quality of our services. Where analytics data is genuinely anonymised and cannot be used to re-identify any individual, it falls outside the scope of this Privacy Policy.

3. Data Sharing & Disclosure

jabaje does not sell, rent, or trade your personal data to third parties for their own commercial purposes. jabaje shares personal data with third parties only in the circumstances described below.

3.1 Payment Processors

To process deposits and withdrawals, jabaje shares transaction data with the relevant payment processors — including bKash, Nagad, Rocket, Upay, and the card networks (Visa, Mastercard) — to the extent necessary to complete those transactions. Each payment processor acts as an independent data controller in respect of the data it receives and is subject to its own privacy policy.

3.2 Identity Verification Providers

jabaje may share identity documents and registration data with a third-party KYC verification provider to conduct automated or manual identity and age verification checks. These providers process data under a data processing agreement with jabaje and are contractually obligated to handle the data securely and only for the purpose of completing the verification.

3.3 Game Studios and Platform Providers

Where you play games supplied by third-party studios — such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, PG Soft, or Spribe — a session token and minimal session data is shared with the relevant studio to facilitate the game session. jabaje does not share your full personal profile with game studios; only the technical data necessary to run the game session is transmitted.

3.4 Legal and Regulatory Authorities

jabaje may disclose your personal data to law enforcement authorities, regulatory bodies, or courts in Bangladesh or other relevant jurisdictions where required by law, court order, or other legally binding obligation. jabaje will notify you of such a disclosure where legally permitted to do so.

3.5 Business Transfers

In the event that jabaje's business or a material part of it is sold, merged, or transferred to a third party, your personal data may be transferred as part of that transaction. In such circumstances, jabaje will take reasonable steps to ensure that the recipient of the data provides equivalent privacy protections and will notify registered players of the transfer in advance where practicable.

4. Cookies & Tracking

jabaje uses cookies and similar tracking technologies on jabaje.net to ensure the platform functions correctly, to keep you logged in during a session, and to understand how the platform is being used. This section explains what cookies we use and how you can manage them.

4.1 What Are Cookies?

Cookies are small text files placed on your device by a website when you visit it. They are widely used to make websites work efficiently and to provide reporting information to site operators. Cookies set by jabaje.net are first-party cookies (set directly by jabaje). In limited cases, third-party cookies may be set by our analytics or game delivery partners.

4.2 Categories of Cookies Used by jabaje

4.3 Managing Cookies

Strictly necessary cookies cannot be disabled as they are essential to the operation of jabaje.net — disabling them would prevent you from logging in or placing bets. All other cookie categories can be managed through your browser settings. Most modern browsers allow you to block or delete cookies, restrict cookies to specific sites, or be notified when a cookie is being set. Please note that disabling functional or analytics cookies may affect the quality of your experience on jabaje.net.

Instructions for managing cookies in the most commonly used browsers (Chrome, Firefox, Edge, Safari) are available in the respective browser's help documentation. jabaje is not responsible for the accuracy or availability of third-party browser documentation.

4.4 Local Storage and Similar Technologies

In addition to cookies, jabaje may use browser local storage to retain certain session preferences on your device. Local storage data is not transmitted to jabaje's servers with every request in the same way that cookies are; it is read client-side by jabaje.net's scripts. You can clear local storage data through your browser's developer tools or by clearing your browser data.

5. Data Retention

jabaje retains personal data only for as long as is necessary for the purpose for which it was collected, or as required by applicable legal obligations. The retention periods applied to the main categories of personal data are described below.

5.1 Active Account Data

While your jabaje account remains active, jabaje retains all registration data, KYC documents, payment history, betting and gaming records, and communications data associated with that account. This data is necessary to provide our services, maintain account integrity, and meet our responsible gaming obligations.

5.2 Post-Closure Retention

Following the closure of a jabaje account — whether at your request or initiated by jabaje — your personal data is retained for a minimum period of 5 years from the date of account closure. This retention is required to comply with anti-money laundering (AML) obligations, to respond to any regulatory enquiries, and to resolve any outstanding disputes or claims. After this period, personal data that is no longer required for any legal purpose is securely deleted or irreversibly anonymised.

5.3 KYC Document Retention

Identity documents submitted for KYC verification purposes are retained for a minimum of 5 years from the date of submission or from the date of account closure, whichever is later. This retention period reflects standard AML compliance requirements applicable to online gambling and financial services platforms.

5.4 Communications Data

Customer support communications (live chat transcripts and email correspondence) are retained for a period of 3 years from the date of the interaction. After this period they are deleted unless they relate to an ongoing dispute or legal matter, in which case they are retained until that matter is fully resolved.

5.5 Anonymised Data

jabaje may retain anonymised, aggregated data (from which no individual can be identified) indefinitely for the purposes of platform analytics, fraud pattern research, and service improvement. Anonymised data falls outside the scope of this Privacy Policy as it does not constitute personal data.

6. Data Security

jabaje takes the security of your personal data seriously. We implement a layered set of technical and organisational measures designed to protect your data against unauthorised access, accidental loss, destruction, or disclosure.

6.1 Encryption

All data transmitted between your device and jabaje.net is protected by Transport Layer Security (TLS 1.2 or higher), ensuring that data in transit cannot be intercepted or read by unauthorised parties. Personal data stored on jabaje's servers — including KYC documents and payment records — is encrypted at rest using AES-256 encryption.

6.2 Access Controls

Access to personal data within jabaje's internal systems is restricted on a strict need-to-know basis. jabaje staff are granted access only to the data categories required to perform their specific job functions. All internal access to personal data is logged and subject to periodic audit. Staff with access to sensitive personal data are required to complete data protection and security training.

6.3 Account Security

Your jabaje account is protected by the password you set at registration, combined with optional two-factor authentication (2FA). jabaje strongly recommends enabling 2FA on your account. You are responsible for keeping your login credentials confidential. jabaje will never ask you for your password via email, live chat, or any other channel. If you receive such a request, treat it as a phishing attempt and report it to [email protected] immediately.

6.4 Third-Party Security

jabaje works only with third-party service providers — including payment processors and identity verification providers — that maintain security standards equivalent to or exceeding those applied by jabaje. Data sharing agreements with these providers include contractual security obligations. However, jabaje cannot guarantee the security of data once it has been transmitted to and is solely within the control of a third-party provider.

6.5 Security Incidents

In the event of a personal data breach that poses a risk to the rights and freedoms of affected players, jabaje will notify affected players as soon as reasonably practicable after becoming aware of the breach, providing details of the nature of the incident, the data affected, and the steps jabaje is taking to address it. Where a breach is severe, jabaje will also notify relevant authorities in accordance with applicable data protection obligations.

7. Your Privacy Rights

As a jabaje player, you hold rights over the personal data jabaje holds about you. jabaje is committed to facilitating the exercise of these rights in a timely and transparent manner. To submit a privacy rights request, please email [email protected] with the subject line "Privacy Rights Request" and provide sufficient information to allow jabaje to verify your identity before processing the request.

7.1 Right of Access

You have the right to request a copy of the personal data jabaje holds about you, along with information about how it is being used, who it has been shared with, and how long it will be retained. jabaje will respond to verified access requests within 30 days.

7.2 Right to Rectification

If you believe that any personal data jabaje holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update many of your account details directly through your jabaje account settings. For details that require document verification to change (such as your legal name or date of birth), please contact customer support.

7.3 Right to Erasure

You may request that jabaje delete your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose for which it was collected, or where you withdraw your consent for processing based on consent. Please note that this right is not absolute: jabaje may be required to retain certain data to comply with legal obligations (such as AML retention requirements) even after an erasure request is received. jabaje will inform you of any such retention obligation when responding to your request.

7.4 Right to Restriction

You have the right to request that jabaje restricts the processing of your personal data in certain circumstances, including where you contest the accuracy of the data or where you object to jabaje's processing but jabaje has legitimate grounds to continue. During a period of restriction, jabaje will store the data but will not actively process it beyond what is necessary for storage purposes.

7.5 Right to Object

Where jabaje processes your personal data on the basis of legitimate interests, you have the right to object to that processing on grounds relating to your particular situation. jabaje will consider your objection and will cease the processing unless jabaje can demonstrate compelling legitimate grounds that override your interests. You have an unconditional right to object to the processing of your data for direct marketing purposes — jabaje will cease all marketing communications immediately upon receipt of such an objection.

7.6 Right to Withdraw Consent

Where jabaje processes your personal data on the basis of your consent (for example, for promotional communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing that took place before the withdrawal. You may withdraw marketing consent via your account settings or by emailing [email protected].

7.7 Exercising Your Rights

To exercise any of the rights described above, contact jabaje's privacy team at [email protected] with the subject line "Privacy Rights Request". jabaje will acknowledge your request within 5 business days and will respond in full within 30 days of verifying your identity. In complex cases, jabaje may extend this period by a further 30 days, in which case jabaje will inform you of the extension and the reason for it before the initial 30-day period expires.

8. Policy Updates & Contact

jabaje reviews this Privacy Policy periodically and updates it where necessary to reflect changes to our data practices, our services, or applicable legal requirements. The current version of this Privacy Policy is always accessible at jabaje.net/privacy-policy. The "Last Updated" date at the top of this page reflects when the most recent revision was made.

8.1 Notification of Material Changes

Where jabaje makes a material change to this Privacy Policy — for example, a change that significantly affects how your personal data is used or who it is shared with — jabaje will notify registered players via the email address held on their account before the change takes effect. For non-material clarifications or corrections, jabaje will update the policy without separate notification, and the revised version will take effect upon publication.

8.2 Continued Use as Acceptance

Your continued use of jabaje following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with any material change to this Privacy Policy, you should cease using jabaje and may request account closure by contacting customer support.

8.3 Contact jabaje's Privacy Team

If you have any questions, concerns, or complaints about this Privacy Policy, about how jabaje handles your personal data, or about exercising your privacy rights, please contact jabaje's privacy team using the details below. jabaje is committed to resolving all privacy-related enquiries promptly and fairly.

• Email: [email protected] (subject: "Privacy Policy Enquiry")
• Live Chat: Available 24/7 via jabaje.net
• Response Time: Acknowledgement within 5 business days; full response within 30 days