jebaj Privacy Policy

When you register an account with jebaj, we collect the following personal identification information:

• Full name as it appears on your government-issued identification document.
• Date of birth, used to verify that you are 21 years of age or older as required by our Terms & Conditions.
• Mobile phone number, used for account verification, two-factor authentication, and customer communications.
• Email address, used for account notifications, support correspondence, and (where opted in) promotional communications.

To process deposits and withdrawals, and to comply with our anti-money-laundering obligations, jebaj collects the following financial data:

• Mobile wallet identifiers (bKash account number, Nagad account number, Rocket account number, or Upay account number) associated with deposits and withdrawals.
• Transaction history, including deposit amounts, withdrawal amounts, dates, and associated payment methods.
• KYC document images (copy of national ID card, passport, or other government-issued photo identification), collected only when identity verification is required.
• Source-of-funds declarations, where required by our compliance procedures for higher-value accounts.

When you access and use jebaj, we automatically collect certain technical data that helps us operate, secure, and improve the Platform:

• IP address and approximate geolocation data, used to detect suspicious login activity and enforce eligibility rules.
• Device information including device type, operating system version, browser type and version, and screen resolution.
• Session logs including pages visited, time spent on each page, features used, game rounds played, and bet amounts placed, used for fraud prevention, game integrity monitoring, and service improvement.

• Account creation and management: to register your account, verify your identity, process KYC, and maintain your account profile.
• Payment processing: to process your BDT deposits and withdrawals via bKash, Nagad, Rocket, Upay, and other supported channels, and to maintain accurate transaction records.
• Service delivery: to provide access to casino games, sports betting markets, live casino tables, crash games, and all other features of the Platform.
• Fraud prevention and security: to detect, investigate, and prevent fraudulent transactions, account takeovers, money laundering, bonus abuse, and other prohibited activities.
• Customer support: to respond to your queries, complaints, and support requests submitted by email or through the Platform.
• Responsible gaming: to monitor gambling patterns, apply deposit limits and self-exclusion tools, and send responsible gaming reminders where appropriate.

Your personal data may be disclosed to the following categories of third parties, strictly on a need-to-know basis and subject to appropriate confidentiality obligations:

• Payment service providers (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, and other licensed financial institutions) solely for the purpose of processing your deposits and withdrawals.
• Identity verification and KYC service providers engaged by jebaj to verify the authenticity of identification documents submitted by members.
• Game content providers (Pragmatic Play, Evolution Gaming, Spribe, Ezugi, NetEnt, Microgaming, and other studios) to the minimum extent necessary to authenticate your session and ensure fair game delivery.
• Law enforcement or regulatory authorities, where jebaj is legally required to disclose personal data in response to a valid court order, subpoena, or other lawful government request.

jebaj uses cookies and similar tracking technologies to operate the Platform, maintain your login session, and improve your experience. The categories of cookies used are:

• Essential cookies: required for the Platform to function correctly, including maintaining your authenticated session, storing your language preference, and remembering your responsible gaming settings.
• Analytics cookies: used to understand how members navigate and use the Platform, which pages are most visited, and where technical issues occur. Analytics data is aggregated and does not identify individual users.
• Security cookies: used to detect and prevent fraudulent access attempts, bot activity, and other security threats to the Platform and its members.

You may control non-essential cookies through your browser settings. Most modern browsers allow you to block or delete cookies. Please note that disabling essential cookies will impair the functionality of jebaj and may prevent you from logging in or using certain features. Instructions for managing cookies in the most popular mobile browsers (Chrome for Android, Safari for iOS) are available in those browsers' help sections. Continued use of jebaj after being informed of our cookie use constitutes your consent to the use of cookies as described in this Policy.

jebaj implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Our security measures include:

• SSL/TLS encryption on all pages of jebaj.org, ensuring that data transmitted between your device and our servers is encrypted in transit.
• Encrypted storage of sensitive personal data, including KYC documents and financial transaction records, using AES-256 or equivalent encryption at rest.
• Role-based access controls ensuring that only authorised jebaj personnel can access personal data, and only to the extent required for their specific job function.
• Regular security audits and penetration testing to identify and remediate vulnerabilities in our systems before they can be exploited.

jebaj retains your personal data for as long as is necessary to fulfil the purposes described in this Policy, subject to the following minimum retention periods:

• Account data (name, contact details, date of birth): retained for the duration of your account and for a minimum of 5 years following account closure, to comply with financial record-keeping obligations.
• Transaction records (deposit and withdrawal history, KYC documents): retained for a minimum of 7 years following the date of the transaction, in accordance with applicable financial compliance requirements.
• Technical and session logs: retained for a maximum of 12 months from the date of collection, after which they are deleted or anonymised.

• Right of access: you may request a copy of the personal data jebaj holds about you, free of charge.
• Right to rectification: if any personal data we hold about you is inaccurate or incomplete, you may request that we correct or complete it.
• Right to erasure: you may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to restrict processing: you may request that we temporarily stop processing your data while a dispute or accuracy concern is being resolved.
• Right to withdraw consent: where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

jebaj takes the security of your financial data very seriously. All payment transactions on jebaj are processed through encrypted channels. The following additional protections apply to your financial data:

• jebaj never stores your complete mobile wallet PIN, bKash PIN, Nagad PIN, or Rocket PIN. PIN entry occurs directly within your mobile financial service provider's own authenticated interface.
• Withdrawals are processed only to the verified account or wallet used for the most recent deposit. This policy protects you against fraudulent withdrawal attempts by third parties.
• Your BDT balance held in your jebaj account is kept separate from jebaj's own operational funds. This ensures that your deposited funds remain identifiable and accessible for withdrawal at all times, subject to these Terms & Conditions.

jebaj strictly prohibits use of the Platform by anyone under the age of 21. jebaj does not knowingly collect or store personal data from persons under 21 years of age. If jebaj discovers or is notified that personal data has been collected from a person under 21, that data will be deleted promptly and the associated account will be closed. If you are a parent or guardian and believe that your child under 21 has registered an account with jebaj or submitted personal data to jebaj, please contact us immediately at [email protected] so that we may take appropriate action.

jebaj reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or the features and services we offer. When we make material changes to this Policy, we will update the "Last Updated" date at the top of this page. We encourage you to review this Policy periodically. Your continued use of jebaj following the publication of any update constitutes your acknowledgement of the revised Policy. If you have questions about any change to this Policy, contact us at [email protected].