Privacy Policy — jayabazi

Information We Collect

jayabazi collects personal data from players in Bangladesh through several channels: directly from you when you register and use the platform, automatically through your use of our website and mobile interface, and in certain circumstances from third-party sources such as payment processors and identity verification services.

Registration Data: When you create a jayabazi account, we collect the information you provide during the registration process, including your full legal name, date of birth, Bangladesh mobile number, email address, and the username and password you select. This information is mandatory — without it, we cannot create or maintain your account.

Identity Verification Data: As part of our Know Your Customer (KYC) and anti-money laundering obligations, we may collect copies of identity documents such as your National ID card (NID), passport, or driving licence. We may also request a photograph, a utility bill or bank statement showing your registered address in Bangladesh, or a screenshot confirming your ownership of a registered bKash , Nagad, or Rocket mobile wallet account.

Transaction Data: Every deposit, withdrawal, bet placement, and game session conducted through jayabazi generates a transaction record. This record includes the amount in BDT, the payment method used, the date and time (Bangladesh Standard Time, UTC+6), the relevant game or market, and the outcome. Transaction records are essential for account security, dispute resolution, and financial compliance.

Device and Technical Data: When you access jayabazi from any device — whether an Android smartphone in Dhaka, an iOS device in Chittagong, or a desktop browser in Sylhet — we automatically collect certain technical information. This includes your IP address, device type and model, operating system version, browser type, screen resolution, time zone setting, and pages visited within the platform. This data helps us maintain platform security and diagnose technical issues.

Communications Data: If you contact our customer support team by email or live chat, we retain records of that correspondence, including the content of messages, dates, and any attachments. This data is used to resolve your query, train our support team, and maintain a record of decisions made regarding your account.

How We Use Your Data

jayabazi processes your personal data only for specific, legitimate purposes. The following table summarises the primary purposes for which we use your data and the legal basis for each use:

Marketing Communications: jayabazi will only send you promotional emails or SMS messages if you have opted in to receive them during registration or subsequently through your account settings. You may withdraw consent to receive marketing communications at any time by updating your notification preferences in your account settings or by contacting us at support@jayabazi. Withdrawing marketing consent does not affect our ability to send you essential transactional communications such as deposit confirmations, withdrawal notifications, or security alerts.

Automated Decision-Making: jayabazi uses automated systems to detect potentially fraudulent activity, identify problem gambling behaviour, and enforce responsible gaming limits. Where an automated decision has a significant effect on your account — such as a temporary suspension triggered by a fraud alert — you have the right to request human review of that decision by contacting our compliance team.

Data Sharing and Disclosure

jayabazi does not sell your personal data. We share your information only in the limited circumstances described below, and only to the extent necessary for each specific purpose.

Payment Processors: To process BDT deposits and withdrawals, we share relevant transaction data with our payment partners, including bKash, Nagad, Rocket, Upay, and card networks (Visa, Mastercard). Each of these providers operates under its own privacy policy and is bound by contractual obligations to handle your data securely and use it only for payment processing purposes.

Identity Verification Services: Where we use third-party KYC or identity verification providers to verify the documents you submit, we share the relevant document data with those providers for the sole purpose of verification. Providers are contractually prohibited from retaining or reusing your documents beyond the verification process.

Game and Technology Providers: jayabazi's platform incorporates games and technology from licensed third-party providers including Pragmatic Play, Evolution Gaming, Spribe, Ezugi, and others. These providers may receive anonymised or pseudonymised session data necessary to operate their games fairly and securely. Personal identifiers are not shared with game providers beyond what is strictly necessary for session management.

Legal and Regulatory Authorities: We may disclose your personal data to law enforcement agencies, regulatory bodies, or courts in Bangladesh or internationally where we are legally required to do so, where we have a good-faith belief that disclosure is necessary to prevent fraud or criminal activity, or where required to protect the rights and safety of jayabazi, its employees, or other players.

Business Transfers: In the event of a merger, acquisition, restructuring, or sale of all or part of jayabazi's business, your personal data may be transferred to the acquiring entity as part of that transaction. If such a transfer occurs, you will be notified by email at least 30 days in advance and your data will continue to be protected under terms no less protective than this Privacy Policy.

Cookies and Tracking Technologies

jayabazi uses cookies and similar technologies (such as local storage and session tokens) to operate the platform, maintain the security of your session, and gather anonymised analytics data that helps us improve user experience for our Bangladesh player community.

Essential Cookies: These cookies are strictly necessary for the platform to function. They maintain your login session, remember your language and regional preference, and protect against cross-site request forgery (CSRF) attacks. Essential cookies cannot be disabled without rendering the platform non-functional. No consent is required for essential cookies because they are operationally necessary.

Analytics Cookies: With your consent, jayabazi uses analytics tools to collect anonymised information about how players navigate the platform — for example, which game categories are most visited, how long sessions last on average, and where players experience technical difficulties. This data is used in aggregate and does not identify you personally. Analytics cookies can be disabled in your browser settings.

No Advertising Cookies: jayabazi does not deploy advertising cookies, retargeting pixels, or cross-site tracking technologies. We do not allow third-party advertisers to place cookies on our platform.

Managing Cookies: You can control and delete cookies through your browser settings. Disabling essential cookies will affect the functionality of jayabazi, including your ability to log in and maintain an active session. Instructions for managing cookies are available in the help documentation for all major browsers including Chrome, Firefox, Samsung Internet, and Safari on iOS — the browsers most commonly used by our Bangladesh-based players.

Data Security Measures

jayabazi implements a range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures are reviewed and updated regularly to keep pace with evolving security best practices.

Encryption in Transit: All communications between your device and jayabazi are secured using TLS 1.2 or higher. This ensures that data transmitted during login, deposits, withdrawals, and game sessions cannot be intercepted by third parties. Our SSL certificate is maintained and renewed continuously to prevent any lapse in encryption coverage.

Encryption at Rest: Sensitive data fields — including passwords (stored as salted hashes), payment method tokens, and identity document images — are encrypted at rest within our secure data infrastructure. Clear-text passwords are never stored at any point.

Access Controls: Access to your personal data within jayabazi's internal systems is restricted on a strict need-to-know basis. Only employees and contractors with a documented operational requirement can access player data, and all such access is logged and subject to regular audit.

Two-Factor Authentication: jayabazi supports and encourages the use of two-factor authentication (2FA) on all player accounts. Enabling 2FA significantly reduces the risk of unauthorised account access, even in the event that your password is compromised.

Penetration Testing: Our platform undergoes regular independent security assessments, including penetration testing and vulnerability scanning, to identify and remediate potential weaknesses before they can be exploited.

Despite these measures, no internet-based platform can guarantee absolute security. You play an important role in account security by choosing a strong, unique password, enabling 2FA, and contacting us immediately at support@jayabazi if you notice any suspicious activity on your account.

Data Retention

jayabazi retains your personal data only for as long as is necessary for the purposes described in this Privacy Policy, or as required by applicable legal, regulatory, or contractual obligations. The following retention periods apply as general guidelines:

• Account and Registration Data: Retained for the lifetime of your account and for a minimum of 5 years following permanent account closure, to satisfy our anti-money laundering record-keeping obligations.
• Transaction Records: Retained for a minimum of 5 years from the date of each transaction, in line with financial record-keeping requirements applicable to our international licensing arrangement.
• Identity Verification Documents: Retained for a minimum of 5 years from account closure. Documents are securely deleted once the retention period expires and the deletion is logged in our compliance records.
• Customer Support Communications: Retained for 3 years from the date of the most recent communication in each support thread, to allow us to maintain continuity in resolving ongoing or recurring issues.
• Analytics and Device Data: Anonymised analytics data is retained indefinitely in aggregate form. Pseudonymised device-level data is retained for up to 24 months, after which it is either deleted or further anonymised.
• Marketing Preferences: Records of your consent to or withdrawal from marketing communications are retained for the lifetime of your account and for 3 years following account closure, to evidence compliance with consent requirements.

Where you request deletion of your personal data under the rights described in the next section, we will fulfil that request to the extent permitted by law. Where a legal retention obligation prevents immediate deletion, we will restrict processing of your data to the minimum necessary to meet that obligation and will delete it as soon as the retention period expires.

Your Rights Over Your Data

As a jayabazi player, you have meaningful rights over the personal data we hold about you. We are committed to facilitating the exercise of these rights in a straightforward and timely manner. All data rights requests should be submitted to support@jayabazi with the subject line "Data Rights Request" and must include sufficient information to allow us to identify your account.

Right of Access: You have the right to request a copy of the personal data jayabazi holds about you. We will respond to verified access requests within 30 days. The copy will be provided in a readable electronic format (PDF or CSV as appropriate).

Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it. Minor corrections (such as updating an email address or mobile number) can be made directly through your account settings. Corrections to identity document records require you to submit updated verified documentation.

Right to Erasure: In certain circumstances, you have the right to request that jayabazi delete your personal data. This right applies where the data is no longer necessary for the purpose for which it was collected, where you have withdrawn consent and no other legal basis applies, or where the data has been unlawfully processed. The right to erasure does not apply where retention is required by law — for example, the AML record-keeping obligations described in the Data Retention section above.

Right to Restrict Processing: You may request that we restrict the processing of your data in specific circumstances — for example, while a rectification request is being assessed, or where you contest the lawfulness of our processing.

Right to Data Portability: Where our processing of your data is based on your consent or on the performance of a contract, you have the right to receive your personal data in a structured, commonly used, machine-readable format, and to transmit that data to another service provider of your choice.

Right to Object: You have the right to object to our processing of your personal data where that processing is based on legitimate interest — including profiling for fraud detection or responsible gaming monitoring. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.

Contact and Complaints

If you have any questions about this Privacy Policy, about how jayabazi handles your personal data, or if you wish to exercise any of the data rights described above, please contact us using the details below. All enquiries should be submitted in English.

Data Protection Contact:
Email (plain text — not a link): support@jayabazi
Subject line for data rights requests: "Data Rights Request — [your registered username]"

Complaints: If you are dissatisfied with our handling of your personal data or with our response to a data rights request, you have the right to lodge a complaint. We ask that you contact us directly in the first instance so that we have the opportunity to address your concern. We take all data complaints seriously and will investigate thoroughly, providing a written response within 15 business days.

Changes to This Privacy Policy: jayabazi reserves the right to update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or platform features. When we make material changes, we will notify registered players by email and will post the updated policy on this page with a revised effective date. We encourage you to review this page periodically so that you remain informed about how we protect your data. Continued use of the jayabazi platform after the effective date of a revised policy constitutes your acceptance of the updated terms.

This Privacy Policy was last reviewed and updated in January 2026. It applies to all players registered on the jayabazi platform, including all players based in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, Cox's Bazar, and all other locations across Bangladesh.