zbaj Privacy Policy

This Privacy Policy ("Policy") applies to the zbaj online gambling platform, accessible at zbaj.club, and to all services, features, and communications provided by zbaj to registered Players and site visitors. It describes the personal data that zbaj collects, the purposes for which that data is processed, the parties with whom it may be shared, the period for which it is retained, and the rights available to you in relation to your personal data.

This Policy should be read alongside the zbaj Terms & Conditions, which govern the overall relationship between zbaj and its Players. Together, these documents form the complete framework under which zbaj operates its platform and manages Player data.

By registering an account with zbaj, depositing funds, placing bets, or otherwise using the zbaj platform, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection, processing, and use of your personal data as described herein. If you do not consent to these data practices, you must not register an account or use the zbaj platform.

zbaj operates as an offshore online gambling platform. The entity responsible for the collection and processing of personal data on this platform — referred to in this Policy as the "Data Controller" — is the zbaj platform operator. For all data-related enquiries, rights requests, or complaints, Players should contact the zbaj Data Protection point of contact via email at [email protected]. All data-related correspondence should be clearly marked "Privacy / Data Request" in the subject line to ensure prioritised handling.

zbaj collects personal data in the following categories. The table below summarises each category, the specific data points collected, and the primary purpose for collection.

zbaj does not intentionally collect special-category personal data (such as health data, biometric data, or religious beliefs) from Players. If any such data is inadvertently included in a Player's KYC documents or support communications, it will not be processed beyond what is strictly necessary for the stated purpose and will be deleted as soon as practicable.

zbaj collects personal data through the following channels:

• Direct submission: Data you provide when registering an account, completing KYC verification, making a deposit or withdrawal request, or contacting zbaj support.
• Automated platform interactions: Data generated automatically when you use the zbaj platform, including session logs, game activity records, bet histories, and technical device data collected via cookies and server logs.
• Payment providers: Confirmation data (transaction reference, registered account holder name) returned by bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank when a deposit or withdrawal is processed.
• Game Providers: Technical session and game-round data returned by Game Provider APIs (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi) in the course of delivering games to your account.
• Identity verification services: Confirmation or flag data returned by third-party KYC or age-verification services used to authenticate Player identity documents.

zbaj uses the personal data it collects for the following purposes:

• Account management: To create, maintain, and administer your zbaj Player account, including processing logins, managing your account balance, and applying responsible gaming tools you activate.
• Transaction processing: To process deposits and withdrawals in BDT via bKash, Nagad, Rocket, Upay, and supported bank channels, and to maintain accurate financial records of all transactions.
• Identity and age verification (KYC): To verify that you are who you claim to be, that you are at least 18 years of age, and that you are the legitimate owner of the payment method used on your account.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, money laundering, bonus abuse, account takeover, and other Prohibited Conduct as defined in the zbaj Terms & Conditions.
• Customer support: To respond to your enquiries, resolve disputes, process complaints, and handle responsible gaming requests including self-exclusion.
• Platform improvement: To analyse aggregated, anonymised usage data to improve platform performance, game selection, and the overall Player experience.
• Legal and compliance obligations: To retain records as required by applicable anti-money-laundering policies and internal compliance frameworks, and to respond to lawful requests from competent authorities.
• Service communications: To send you account-related notifications, including deposit confirmations, withdrawal updates, KYC status updates, and responsible gaming alerts. zbaj does not send unsolicited marketing emails without your express opt-in consent.

zbaj processes your personal data on the following legal bases, depending on the purpose of each processing activity:

• Contractual necessity: Processing required to perform the agreement between zbaj and you as a registered Player — including account creation, deposit processing, game delivery, and withdrawal execution.
• Consent: Processing activities for which you have provided explicit consent, including receipt of promotional communications. You may withdraw consent at any time by contacting [email protected], without affecting the lawfulness of processing carried out prior to withdrawal.
• Legitimate interests: Processing carried out for zbaj's legitimate business interests, including fraud detection, platform security, responsible gaming monitoring, and improving the Player experience, where those interests are not overridden by your privacy rights.
• Legal obligation: Processing necessary to comply with zbaj's anti-money-laundering obligations, record-keeping requirements, and any lawful requests from competent authorities.

zbaj shares your personal data only with the following categories of third parties, and only to the extent necessary for the stated purpose:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank receive the minimum data necessary (account holder name, transaction amount, reference number) to process deposits and withdrawals on your behalf.
• Game Providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other licensed studios receive a session token and anonymised Player identifier to deliver game content to your account. Game Providers do not receive your full identity or financial data.
• Identity verification services: Third-party KYC providers receive your identity documents solely for the purpose of verifying your identity and age on behalf of zbaj. These providers are contractually prohibited from using your data for any other purpose.
• IT and hosting infrastructure providers: Cloud infrastructure and hosting service providers may process data as data processors on zbaj's behalf, subject to strict data processing agreements requiring them to implement appropriate security measures.
• Fraud and security services: Specialised fraud detection providers may receive technical data (IP address, device fingerprint, session behaviour patterns) to assist zbaj in identifying and preventing fraudulent activity.
• Law enforcement and regulatory bodies: zbaj may disclose personal data to competent authorities where required by law, court order, or as part of cooperation with a legitimate investigation, subject to verification of the legal basis for the request.

All third-party processors engaged by zbaj are required to handle your personal data in a manner consistent with this Privacy Policy and are prohibited from using it for any purpose beyond the specific service they provide to zbaj.

zbaj retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal and compliance obligations. The following retention guidelines apply:

• Active account data: Retained for the full duration of your account's active status, plus a minimum of five years following account closure, to satisfy anti-money-laundering record-keeping obligations.
• KYC documents: Retained for a minimum of five years from the date of verification or from the date of account closure, whichever is later.
• Transaction records: All deposit and withdrawal records, including BDT amounts and payment method references, are retained for a minimum of five years from the date of each transaction.
• Support communications: Retained for a minimum of two years from the date of the most recent communication in each support thread, or for the duration of any open dispute, whichever is longer.
• Technical / session logs: Retained for up to 12 months for fraud detection and platform security purposes, after which they are deleted or anonymised.
• Marketing consent records: Retained for as long as you hold a zbaj account, and for two years following account closure as evidence of consent status.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be associated with an individual Player.

zbaj implements a layered set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• SSL/TLS encryption: All data transmitted between your browser or device and the zbaj platform is protected by industry-standard SSL/TLS encryption. Look for the padlock icon in your browser's address bar when accessing zbaj.club.
• Encrypted data storage: Sensitive data fields, including KYC document references and payment account identifiers, are stored in encrypted form within zbaj's database infrastructure.
• Access controls: Access to personal data within zbaj's systems is restricted on a strict need-to-know basis. Staff members with access to Player data are subject to confidentiality obligations and receive appropriate data handling training.
• Intrusion detection: zbaj's platform infrastructure is monitored continuously for anomalous access patterns and potential security incidents. Suspected security breaches trigger an immediate internal response procedure.
• Secure KYC document handling: Identity documents submitted for KYC verification are transmitted over encrypted channels, stored securely, and accessed only by authorised verification staff.

zbaj uses cookies and similar tracking technologies on the zbaj.club website to ensure platform functionality, maintain secure sessions, and gather anonymised analytics data. The following types of cookies are used:

• Essential cookies: Required for core platform functions such as maintaining your login session, remembering your account preferences, and securing your connection. These cookies cannot be disabled without impairing your use of the platform.
• Analytics cookies: Used to collect anonymised, aggregated data about how Players navigate the zbaj platform, which pages are visited most frequently, and where technical errors occur. This data is used solely to improve the platform and cannot be used to identify individual Players.
• Fraud prevention cookies: Technical identifiers used to detect suspicious access patterns, multiple account registration attempts from the same device, and other indicators of Prohibited Conduct.

zbaj does not use third-party advertising cookies or allow advertising networks to place tracking cookies on zbaj.club. You may manage cookie preferences through your browser settings. Disabling essential cookies may prevent you from logging in or using core platform features. Disabling analytics or fraud-prevention cookies may limit zbaj's ability to protect your account from unauthorised access.

As a zbaj Player, you hold the following rights in relation to your personal data. To exercise any of these rights, submit a written request to [email protected] with the subject line "Data Rights Request — [Your Username]". zbaj will acknowledge your request within 5 business days and will aim to fulfil it within 30 calendar days.

• Right of access: You may request a copy of the personal data zbaj holds about you, including the categories of data held, the purposes for which it is processed, and the third parties with whom it has been shared.
• Right to rectification: If any personal data zbaj holds about you is inaccurate or incomplete, you have the right to request that it be corrected. For account name or date-of-birth corrections, supporting documentation may be required.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected and where no overriding legal obligation to retain it applies. Note that zbaj is required by its anti-money-laundering obligations to retain certain financial and identity records for a minimum of five years, which may mean that a full erasure request cannot be fulfilled immediately upon account closure.
• Right to restriction of processing: You may request that zbaj restrict processing of your personal data in specific circumstances, such as while a dispute about the accuracy of your data is being resolved.
• Right to data portability: You may request a copy of your personal data in a structured, machine-readable format where the processing is based on your consent or on contractual necessity.
• Right to withdraw consent: Where zbaj processes your data on the basis of your consent (e.g., for promotional communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
• Right to lodge a complaint: If you believe zbaj has handled your personal data in a manner that breaches this Privacy Policy, you have the right to raise a formal complaint with zbaj's support team in the first instance, and thereafter to any competent data protection authority.

If zbaj becomes aware that a Player is under 18 years of age, the account will be immediately suspended and closed, all Bonus Funds forfeited, and any real-money balance returned to the registered payment method. KYC documents relating to the underage account will be securely deleted following closure.

If you believe that a person under 18 has registered a zbaj account using your payment details or personal information, contact [email protected] immediately. zbaj takes underage gambling extremely seriously and will investigate all such reports as a matter of priority. Parents and guardians are encouraged to use parental-control software to prevent minors from accessing online gambling platforms.

zbaj operates as an offshore platform. As a result, your personal data may be processed on servers located outside Bangladesh. Where personal data is transferred to or processed in a jurisdiction outside Bangladesh, zbaj takes appropriate steps to ensure that the data receives an equivalent level of protection as it would within Bangladesh.

Such steps include entering into contractual arrangements with third-party processors that impose data protection obligations consistent with this Privacy Policy, and conducting due diligence on the security practices of all third-party processors before engaging their services.

Game Providers including Pragmatic Play, Evolution Gaming, and Microgaming operate global infrastructure and may process game-session data on servers located in their respective operational jurisdictions. zbaj maintains data processing agreements with all Game Providers governing the handling of any Player-related data passed via API during game delivery.

zbaj reserves the right to update or amend this Privacy Policy at any time. Where a material change is made — such as introducing a new category of data collection, a new processing purpose, or a new category of third-party data recipient — zbaj will provide at least 7 days' advance notice by posting a prominent notice on the zbaj platform prior to the change taking effect.

The "Effective" date displayed in the hero section at the top of this page reflects the date of the most recent revision. Players are encouraged to review this Policy periodically. Continued use of the zbaj platform following the effective date of any revision constitutes acceptance of the updated Policy.

If you object to any material change to this Privacy Policy, you must cease using the zbaj platform and may request account closure and deletion of your personal data (subject to applicable retention obligations) by contacting [email protected].

For any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by zbaj, please contact the zbaj support team. All data-related enquiries are handled in English and will receive a prioritised response.

• Email: [email protected] (plain text — not a clickable link)
• Subject line for data requests: "Privacy / Data Request — [Your Username]"
• Response time: Acknowledgement within 5 business days; resolution within 30 calendar days
• Support hours: 24 hours a day, 7 days a week, Bangladesh Standard Time (UTC+6)

zbaj is committed to resolving all privacy-related concerns fairly and promptly. If you are not satisfied with zbaj's response to your complaint, you retain the right to escalate your concern to any competent data protection authority in your jurisdiction.