zbaji Privacy Policy — Your Data, Protected

This Privacy Policy ("Policy") describes how zbaji ("zbaji", "we", "us", "our") collects, uses, stores, shares and protects personal information relating to individuals ("you", "Player", "User") who access or use the zbaji online betting and casino platform at zbaji.today and any associated applications or services (collectively, the "Platform"). This Policy applies to all registered players, visitors to the Platform who have not yet registered, and any other person whose personal data zbaji processes in connection with operating the Platform.

zbaji takes its obligations regarding the privacy and security of player data seriously. We collect only the personal information that is genuinely necessary for us to provide you with a safe, fair and fully functional betting and casino service. We do not sell personal data to third parties, and we do not share personal data with anyone except in the circumstances described in this Policy. By accessing or using the Platform, you acknowledge that you have read this Policy and agree to the collection and use of your personal information as described herein.

This Policy should be read alongside the zbaji Terms and Conditions and Responsible Gaming Policy, both of which are available on the Platform. If you have questions about this Policy or about how zbaji handles your personal data, please contact us at [email protected]. Our support team is available 24 hours a day, 7 days a week.

zbaji uses the personal data it collects solely for the following purposes, all of which are necessary to operate the Platform lawfully and to provide you with a safe and complete service:

• Account creation and management: to register your account, verify your identity, process your login, manage your account settings and maintain your account throughout your relationship with zbaji.
• Payment processing: to process deposits via bKash, Nagad, Rocket, Upay and bank transfer; to process withdrawal requests to your registered payment method; and to maintain transaction records as required.
• Service delivery: to provide access to cricket betting markets, live casino games, slots, crash games and all other Platform features; to settle bets and credit winnings to your account; and to process bonus claims subject to applicable bonus terms.
• Regulatory compliance: to fulfil our anti-money laundering (AML) obligations, verify player age and identity, monitor for suspicious transactions, and respond to requests from regulatory or law enforcement authorities where legally required.
• Customer support: to respond to your queries, complaints and support requests submitted via live chat or email, and to maintain records of our communications with you for quality and compliance purposes.
• Responsible gaming: to monitor gameplay patterns for indicators of problem gambling behaviour; to enforce player-requested deposit limits, session limits and self-exclusions; and to provide you with responsible gaming resources and communications where appropriate.

zbaji does not use your personal data for automated decision-making that produces legal or similarly significant effects without human oversight, except where required by law or where expressly disclosed to you. We do not use your gameplay data to target you with personalised advertising outside the Platform.

zbaji processes your personal data on one or more of the following lawful grounds, depending on the specific processing activity:

• Contractual necessity: processing that is necessary to perform the contract between you and zbaji — most core Platform operations fall within this basis, including account registration, payment processing and bet settlement.
• Legal obligation: processing that is required to comply with applicable laws and regulations, including anti-money laundering obligations, age verification requirements and responses to lawful requests from authorities.
• Legitimate interests: processing that serves zbaji's legitimate business interests where those interests are not overridden by your rights — this includes fraud detection, platform security, abuse prevention and responsible gaming monitoring.
• Consent: where zbaji relies on your consent as the legal basis for processing — for example, for optional marketing communications — you may withdraw that consent at any time by contacting [email protected]. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

zbaji does not sell, rent or trade your personal data to third parties for their own marketing purposes. We share personal data only in the following limited circumstances:

• Service providers: zbaji engages trusted third-party service providers who process personal data on our behalf to deliver specific services — including payment processors (bKash, Nagad, Rocket, Upay, banking partners), identity verification providers, game software suppliers (Evolution Gaming, Pragmatic Play, Spribe, Ezugi and others), and cloud hosting and infrastructure providers. All service providers are bound by data processing agreements that require them to handle your data securely and only for the purposes we specify.
• Regulatory and law enforcement authorities: zbaji may share personal data with relevant regulatory bodies, financial intelligence units, or law enforcement agencies where we are legally required to do so — for example, in response to a court order, AML reporting obligation, or lawful investigation request.
• Business transfers: in the event of a merger, acquisition, restructuring, or sale of all or part of zbaji's business, player personal data may be transferred to the successor entity as part of that transaction. We will notify registered players of any such transfer in advance where required.
• With your consent: zbaji may share your personal data with third parties where you have given explicit prior consent for a specific sharing activity. You may withdraw such consent at any time.

All third parties with whom zbaji shares personal data are required to maintain appropriate technical and organisational security measures to protect your data. zbaji remains responsible for the overall handling of your personal data in all circumstances and will take all reasonable steps to ensure that your data is protected when shared with third parties.

When you make a deposit or withdrawal using bKash, Nagad, Rocket or Upay, zbaji receives confirmation of the transaction from the relevant mobile financial service provider along with your registered mobile number and the transaction reference. zbaji does not store your full bKash or Nagad PIN or password. The mobile financial service providers operate under their own privacy policies, which govern how they process your personal data on their end. zbaji encourages you to review the privacy policy of your preferred payment provider directly.

All financial data transmitted between your device and the zbaji Platform is encrypted using SSL (Secure Sockets Layer) technology. Transaction records are stored securely and retained for the period required by applicable financial regulations and AML obligations. zbaji uses your transaction history solely to process payments, detect fraud, comply with AML obligations and provide customer support — we do not use it for any commercial profiling or advertising purpose.

zbaji uses cookies and similar tracking technologies (including local storage, session tokens and device fingerprinting where permitted by law) to operate, maintain and improve the Platform. Cookies are small data files placed on your device when you access the Platform. Some cookies are essential for the Platform to function — without them, services such as login session management, bet placement and payment processing would not work correctly.

zbaji uses the following categories of cookies on the Platform:

• Essential cookies: required for core Platform functions including authentication, session management, fraud prevention and load balancing. These cannot be disabled without breaking the Platform.
• Functional cookies: used to remember your preferences such as language settings and to personalise your experience on the Platform without collecting data for external use.
• Analytics cookies: used to collect aggregated, anonymised data about how players use the Platform — including pages visited, session duration and navigation paths — to help zbaji understand usage patterns and improve the service. This data is not linked to your identity.

You may control or delete cookies through your browser or device settings. Please note that disabling essential cookies may prevent certain features of the Platform from working correctly. zbaji does not use third-party advertising cookies and does not permit third-party advertisers to place cookies on the Platform.

zbaji retains personal data for as long as is necessary to fulfil the purposes for which it was collected and to comply with our legal and regulatory obligations. The specific retention period for each category of data is determined by the nature of the data, the purpose for which it was collected, and applicable legal requirements. As a general guide: account and identity data is retained for the duration of the account relationship plus a minimum period of five years after account closure to satisfy AML record-keeping requirements; transaction records are retained for a minimum of five years; gameplay data is retained for the duration of the account relationship and for up to two years after account closure; and marketing preference data is retained until you withdraw your consent or request deletion.

When the applicable retention period expires, zbaji will securely delete or anonymise the relevant personal data. Where deletion is not immediately practicable — for example, because data is stored in backup systems — zbaji will isolate the data from active processing until deletion is possible. If you wish to request early deletion of your personal data, please review your rights in the section below and contact [email protected].

zbaji implements appropriate technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration or disclosure. These measures include SSL encryption for all data transmitted between your device and the Platform; access controls that restrict internal access to personal data on a need-to-know basis; secure cloud infrastructure with regular security assessments; and monitoring systems designed to detect and respond to security incidents in real time. All zbaji employees and contractors who handle personal data are subject to confidentiality obligations.

While zbaji takes its security obligations seriously and applies industry-standard protections, no online platform can guarantee absolute security. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, zbaji will notify affected players without undue delay. You can help protect your account by keeping your login credentials confidential, using a strong and unique password, and logging out of your account at the end of each session — particularly when using a shared or public device.

The zbaji Platform is strictly intended for adults aged 21 and above. zbaji does not knowingly collect, process or store personal data relating to any person under the age of 21. If we discover or are notified that we have received personal data from a person under 21, we will immediately suspend the relevant account, delete the data as far as is permitted by our legal obligations, and refund any verifiable deposits made. If you are a parent or guardian and believe that your child may have provided personal data to zbaji, please contact us immediately at [email protected] and we will take prompt action.

zbaji reserves the right to update or amend this Privacy Policy at any time. Where changes are material — meaning they affect the way we collect, use or share your personal data in a way that could affect your rights — zbaji will notify you in advance by placing a prominent notice on the Platform or by sending an SMS to your registered mobile number. The date at the top of this Policy reflects the date of the most recent update.

Your continued use of the Platform after the effective date of any updated Privacy Policy constitutes your acceptance of the changes. If you do not agree with the updated Policy, you should stop using the Platform and may request account closure by contacting [email protected]. We encourage you to review this Policy periodically to stay informed about how zbaji protects your personal data.

If you wish to exercise any of your privacy rights, have questions or concerns about how zbaji handles your personal data, or wish to make a complaint about our data practices, please contact the zbaji support team. We aim to respond to all privacy-related requests within 14 days. Our team is available 24 hours a day, 7 days a week via live chat on the Platform or by email.

Email: [email protected]