zbaje Privacy Policy — How We Handle Your Data

1 Introduction

zbaje ("we", "us", "the Platform") is committed to protecting the privacy and personal data of every person who uses the zbaje platform at zbaje.vip. This Privacy Policy sets out in plain language what personal information we collect from you, how we use it, with whom we share it, how long we keep it, and what rights you have in relation to it.

By registering an account or using zbaje, you acknowledge that you have read and understood this Privacy Policy. We recommend reviewing this policy periodically as it may be updated from time to time. We will notify registered players of any material changes before they take effect.

2 Information We Collect

We collect personal information in two ways: information you provide directly to us and information we collect automatically as you use the platform. Specifically, we may collect:

• Identity information: full legal name, date of birth and government-issued identification document details provided during KYC verification.
• Contact information: mobile phone number and email address provided at registration or through account updates.
• Financial information: transaction history including deposit amounts, withdrawal amounts, payment method references (such as bKash or Nagad account numbers), and account balances. We do not store full card numbers or complete mobile banking PINs.
• Gaming activity data: game history, betting records, session durations, wagering patterns and responsible gaming tool settings associated with your account.
• Technical data: IP address, device type, operating system, browser type, and approximate geographic location derived from your IP address. This data is used for fraud prevention and platform security.
• Communications data: records of messages sent to our support team, including email correspondence and any live chat transcripts, to help us resolve queries and maintain service quality.

Where we collect information from third parties — for example identity verification providers used for KYC purposes — we handle that information under the same standards described in this policy.

3 How We Use Your Information

zbaje uses the personal data we collect strictly for the purposes described below. We do not use your data for any purpose that is incompatible with these stated purposes without first seeking your consent:

• Account management: to create, maintain and administer your zbaje account, including processing your registration, verifying your identity and managing your account settings.
• Payment processing: to process deposits and withdrawals via bKash, Nagad, Rocket, Upay and supported BD bank transfers, and to maintain accurate financial records associated with your account.
• Legal and regulatory compliance: to comply with applicable anti-money laundering (AML) obligations, KYC requirements and any other legal obligations that apply to the operation of zbaje.
• Responsible gaming: to monitor gaming patterns and activity in order to detect signs of problem gambling, apply limits or restrictions where required, and fulfil our responsible gaming obligations.
• Customer support: to respond to your queries, complaints and support requests, and to maintain a record of our communications to ensure consistent service quality.
• Platform improvement and fraud prevention: to analyse aggregated usage data in order to improve the zbaje platform experience, identify technical issues, and detect and prevent fraudulent or prohibited activity.

4 Legal Basis for Processing

We process your personal data only where we have a valid legal basis for doing so. The legal bases we rely on are:

• Contractual necessity: processing required to fulfil our agreement with you — including operating your account, processing transactions and providing gaming services.
• Legal obligation: processing required to comply with AML laws, KYC requirements, tax reporting obligations and any other applicable legal requirements.
• Legitimate interests: processing carried out for fraud prevention, platform security, responsible gaming monitoring and service improvement — where those interests are not overridden by your data protection rights.
• Consent: where we process your data for purposes beyond those listed above (such as direct marketing), we will ask for your explicit consent first and you may withdraw that consent at any time by contacting [email protected].

5 How We Share Your Information

zbaje does not sell your personal data to any third party. We share your information only in the following limited circumstances:

• Payment processors: we share necessary transaction data with bKash, Nagad, Rocket, Upay and supported bank partners solely to process your financial transactions. These providers are bound by their own data protection obligations.
• Identity verification services: we share identity documents and verification data with KYC service providers to comply with our legal obligations. These providers act as our data processors and may not use your data for their own purposes.
• Game providers: where game activity data is required by third-party game providers (such as Pragmatic Play or Evolution Gaming) to run the game and verify outcomes, we share the minimum necessary data. Game providers are independently certified and operate under their own privacy and security standards.
• Law enforcement and regulatory authorities: we will disclose personal data to law enforcement agencies, financial intelligence units or other authorities when we are legally required to do so, or when we reasonably believe disclosure is necessary to prevent illegal activity.

6 Payment Data and Financial Information

When you make a deposit or withdrawal on zbaje using bKash, Nagad, Rocket, Upay or a supported bank transfer, we collect the minimum financial data required to process your transaction. This includes your payment method reference number (for example your bKash or Nagad registered mobile number), the transaction amount, and the transaction timestamp. We do not store complete mobile banking PINs, full card numbers, or security codes at any time.

All financial data stored by zbaje is encrypted using industry-standard SSL encryption. Transaction records are retained for the period required by applicable financial record-keeping regulations and then securely deleted. You may request a transaction history statement at any time by contacting [email protected].

7 Cookies and Tracking Technologies

zbaje uses cookies and similar tracking technologies to operate the platform efficiently and to improve your experience. The types of cookies we use are:

• Essential cookies: strictly necessary for the platform to function — for example session authentication cookies that keep you logged in during your visit. These cannot be disabled without breaking core platform functionality.
• Performance cookies: used to collect aggregated, anonymised data about how players interact with zbaje — for example which pages are visited most frequently and where technical errors occur. This helps us improve the platform.
• Functional cookies: used to remember your preferences such as language selection or display settings, so you do not need to reconfigure them on each visit.

You can control cookie settings through your browser. Please note that disabling essential cookies will affect the functionality of zbaje. We do not use cookies to serve third-party advertising or to track your activity on websites outside of zbaje.

8 Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. As a general guide: account data is retained for the duration of your active account and for a minimum of five years after account closure to satisfy AML and financial record-keeping requirements. Gaming activity data is retained for a minimum of three years. Communications with our support team are retained for two years.

When data is no longer required for any legitimate purpose, it is securely deleted or anonymised so that it can no longer be linked to you as an individual. You may request early deletion of non-legally-required data by contacting [email protected], subject to our legal obligations to retain certain records.

9 Your Rights Over Your Personal Data

You have the following rights in relation to the personal data zbaje holds about you. To exercise any of these rights, please contact us at [email protected]. We will respond to all valid requests within a reasonable timeframe:

• Right of access: you may request a copy of the personal data zbaje holds about you, along with information about how it is used and shared.
• Right to rectification: if any personal data we hold about you is inaccurate or incomplete, you may ask us to correct or complete it.
• Right to erasure: in certain circumstances you may ask us to delete your personal data. This right is subject to our legal obligations to retain certain records for regulatory or compliance purposes.
• Right to restrict processing: you may ask us to limit how we use your data in certain circumstances, for example while a complaint is being investigated.
• Right to object: you may object to our processing of your data where we rely on legitimate interests as the legal basis, and we will assess whether our interests override your rights in each case.

10 Security of Your Data

zbaje takes the security of your personal data seriously. We implement appropriate technical and organisational measures to protect your data against unauthorised access, disclosure, alteration or destruction. These measures include SSL encryption for all data transmitted between your device and the zbaje platform, encrypted storage for sensitive account and financial data, access controls that restrict which zbaje team members can access personal data, and regular security reviews.

While we take all reasonable steps to protect your personal data, no online platform can guarantee complete security against all possible threats. You are responsible for keeping your account password confidential and for logging out after each session, particularly when using shared or public devices. If you suspect unauthorised access to your account, contact [email protected] immediately.

11 Children's Privacy

zbaje is strictly intended for adults aged 21 and above. We do not knowingly collect personal data from anyone under the age of 21. If we become aware that personal data has been collected from a person under 21, we will take immediate steps to delete that data and close the associated account.

12 Changes to This Privacy Policy

zbaje may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations or platform features. When we make material changes, we will notify registered players by email or via an in-platform notification before the changes take effect. The updated policy will always be accessible at zbaje.vip/privacy-policy with its effective date clearly shown at the top of the page. Continued use of zbaje after any update constitutes your acceptance of the revised policy.

13 Contact Us

If you have any questions about this Privacy Policy, wish to exercise a data right, or have a concern about how zbaje handles your personal information, please contact our support team. We aim to respond to all privacy-related enquiries within 3 working days: