zatbaj Privacy Policy

Last updated: January 2026  ·  Version 2.4  ·  Applies to all zatbaj players in Bangladesh

1. Introduction

This Privacy Policy ("Policy") describes how zatbaj ("zatbaj", "we", "us", "our") collects, uses, stores, shares, and protects personal information relating to individuals ("Player", "User", "you") who access or use the zatbaj platform at zatbaj.app and its associated mobile browser interfaces.

By registering an account with zatbaj or continuing to use the platform, you acknowledge that you have read and understood this Policy and agree to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you should discontinue use of the platform and request account closure.

2. Data Controller

zatbaj operates as the data controller for personal information collected through the zatbaj.app platform. As data controller, zatbaj determines the purposes and means of processing your personal data and is responsible for ensuring that processing is carried out in accordance with applicable data protection principles.

If you have any questions regarding this Policy or your personal data, or wish to exercise any of your data rights, you may contact our Data Protection team directly at [email protected]. Please note this is a plain-text email address — it is not a clickable link. Average response time for data-related enquiries is within 48 hours.

3. Personal Data We Collect

The categories of personal data zatbaj collects depend on your interactions with the platform. The table below summarises the main categories and examples:

Category	Examples	Collected When
Identity Data	Full name, date of birth, gender, National ID / passport number	Registration, KYC verification
Contact Data	Mobile number, email address, division / district of residence	Registration, account updates
Financial Data	bKash / Nagad mobile wallet number, bank account reference, transaction history	Deposits, withdrawals, KYC
Technical Data	IP address, device type, browser type and version, operating system, session timestamps	Every platform visit
Usage Data	Pages visited, games played, bets placed, time spent on platform, click paths	Every platform session
Communications Data	Live chat transcripts, support emails, feedback submissions	Customer support interactions
Responsible Gaming Data	Deposit limits set, self-exclusion periods, reality-check preferences	When responsible gaming tools are activated
Verification Documents	Copies of government-issued ID, proof of address, payment method ownership documents	KYC / AML verification process

zatbaj does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health information unless specifically required by law or anti-money-laundering regulations.

4. How We Collect Your Data

4.1 Data You Provide Directly

The majority of personal data zatbaj holds about you is information you provide directly when you register an account, complete identity verification, make a deposit or withdrawal, contact our support team, or respond to a survey or promotional communication.

4.2 Data Collected Automatically

When you access the zatbaj platform, certain technical and usage data is collected automatically through standard web technologies. This includes server logs that record your IP address and device identifiers, session analytics that track your navigation path within the platform, and performance monitoring tools that help us identify and resolve technical issues.

4.3 Data from Third Parties

zatbaj may receive personal data about you from third-party sources in limited circumstances, including:

• Payment providers (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank) who confirm transaction status and account name for fraud prevention purposes.
• Identity verification partners who assist in validating documents submitted during the KYC process.
• Fraud prevention and anti-money-laundering (AML) screening services that cross-reference account details against watchlists and sanctions databases.

5. How We Use Your Personal Data

zatbaj uses your personal data only for legitimate, clearly defined purposes. The primary purposes are as follows:

• Account Management: To create and maintain your zatbaj account, authenticate your identity at login, and process account changes you request.
• Transaction Processing: To facilitate deposits and withdrawals via bKash, Nagad, Rocket, Upay, and supported bank channels, and to maintain accurate financial records.
• Identity and Age Verification: To confirm that you meet the minimum age requirement of 18 years and to comply with anti-money-laundering obligations.
• Customer Support: To respond to your enquiries, resolve disputes, and provide assistance through live chat and email channels.
• Platform Improvement: To analyse usage patterns, identify bugs, and develop new features that improve the player experience.
• Responsible Gaming: To monitor betting patterns for signs of problem gambling, enforce deposit limits and self-exclusion requests, and provide appropriate interventions where necessary.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates by SMS or email, where you have opted in or where we have a legitimate interest. You may opt out at any time.
• Legal and Regulatory Compliance: To meet obligations under applicable financial crime, anti-money-laundering, and data protection laws.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, account takeover attempts, and other security threats.

6. Legal Basis for Processing

zatbaj processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual Necessity: Processing required to fulfil our obligations to you under the Terms and Conditions — including account creation, transaction processing, and support.
• Legal Obligation: Processing required to comply with applicable laws, including anti-money-laundering regulations, tax reporting requirements, and age verification obligations.
• Legitimate Interests: Processing carried out for purposes that are in our legitimate business interests and do not override your rights — including fraud prevention, platform security, and service analytics.
• Consent: Processing based on your freely given, specific, and informed consent — primarily for marketing communications. You may withdraw consent at any time without affecting prior processing.

7. Sharing Your Personal Data

7.1 Service Providers

zatbaj shares personal data with carefully selected third-party service providers who process data on our behalf and under our instruction. These include payment processing partners (bKash, Nagad, Rocket, Upay, and banking partners), identity verification and KYC providers, IT infrastructure and cloud hosting providers, customer support platform providers, and game software providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi). All service providers are bound by contractual data processing agreements that restrict their use of your data to the specific services they provide to zatbaj.

7.2 Legal and Regulatory Authorities

zatbaj may disclose personal data to law enforcement agencies, regulatory bodies, or courts where we are legally required to do so, or where disclosure is necessary to protect the safety, rights, or property of zatbaj, its players, or the public. In such cases, we will disclose only the minimum data necessary to satisfy the legal requirement.

7.3 Business Transfers

In the event that zatbaj undergoes a merger, acquisition, restructuring, or sale of all or part of its business assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and the privacy terms applicable to your data following the transfer.

7.4 No Sale of Data

8. Data Retention

zatbaj retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. Our standard retention periods are as follows:

• Account and Identity Data: Retained for the duration of your account and for a minimum of 5 years following account closure, in line with anti-money-laundering record-keeping requirements.
• Transaction and Financial Records: Retained for a minimum of 5 years from the date of each transaction, as required by financial regulations.
• Communications and Support Records: Retained for 2 years from the date of the interaction, unless the matter relates to an unresolved dispute or legal claim.
• Technical and Usage Data: Retained in aggregated or anonymised form for analytical purposes. Raw logs containing identifiable technical data (e.g., IP addresses) are retained for up to 12 months.
• Responsible Gaming Records: Self-exclusion and deposit limit records are retained for the duration of the restriction and for 5 years thereafter to prevent circumvention.

When data is no longer required, zatbaj applies secure deletion or anonymisation procedures to ensure that personal data cannot be recovered or reconstructed.

9. Security Measures

Protecting your personal data is a core operational priority at zatbaj. We employ a multi-layered security framework that includes the following measures:

• SSL/TLS Encryption: All data transmitted between your device and the zatbaj platform is encrypted using industry-standard SSL/TLS protocols, preventing interception by unauthorised parties.
• Data Storage Security: Personal data is stored on secured servers with access controls, regular vulnerability assessments, and intrusion detection systems.
• Access Controls: Access to personal data within zatbaj is restricted to staff who have a legitimate operational need. All internal access is logged and audited.
• Two-Factor Authentication: Players are encouraged to enable 2FA on their accounts. Internal staff access to production systems requires multi-factor authentication.
• Incident Response: zatbaj maintains a documented data breach response procedure. In the event of a breach that is likely to affect your rights, you will be notified without undue delay.

10. Cookies and Tracking Technologies

10.1 What Are Cookies

Cookies are small text files placed on your device when you visit the zatbaj platform. They allow the platform to recognise your device, remember your preferences, maintain your login session, and gather analytical data about how you use the platform.

10.2 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the platform to function. These include session authentication cookies that keep you logged in and security tokens that protect against cross-site request forgery. These cannot be disabled.
• Performance and Analytics Cookies: Used to collect anonymised data about how players navigate the platform. This data helps us identify pages that load slowly, features that are rarely used, and areas where the user experience can be improved.
• Functional Cookies: Used to remember your preferences such as your chosen language, notification settings, and responsible gaming configurations.
• Marketing Cookies: Used only where you have provided consent. These track whether you engaged with a promotional offer so that we can measure the effectiveness of campaigns and avoid showing you irrelevant communications.

10.3 Managing Cookies

You can control non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the zatbaj platform. Instructions for managing cookies are available in the help section of all major browsers.

11. Your Data Rights

As a player on the zatbaj platform, you have the following rights with respect to your personal data:

• Right of Access: You may request a copy of the personal data zatbaj holds about you at any time. We will respond to verified access requests within 30 days.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request correction. For minor updates (e.g., phone number), this can be done directly from your account settings.
• Right to Erasure: You may request deletion of your personal data in certain circumstances — for example, if the data is no longer needed for the purpose it was collected. Note that some data must be retained to comply with legal obligations and cannot be erased on request alone.
• Right to Restriction: You may request that we restrict processing of your data while a dispute about its accuracy or the lawfulness of processing is resolved.
• Right to Data Portability: Where processing is based on your consent or on a contract, you may request a copy of your data in a structured, machine-readable format.
• Right to Object: You may object to processing based on legitimate interests, including profiling for direct marketing purposes. Where you object to marketing, we will cease processing immediately.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, contact the zatbaj Data Protection team at [email protected] (plain text — not a clickable link). We may need to verify your identity before processing your request. There is no fee for exercising your rights unless requests are manifestly unfounded or excessive.

12. Minors and Under-18 Protection

If you are a parent or guardian and believe that a minor in your care has registered with zatbaj, please contact us immediately at [email protected] so that we can take prompt corrective action. We take the protection of minors extremely seriously and operate age verification procedures to prevent underage access.

13. Changes to This Privacy Policy

zatbaj reserves the right to update or amend this Privacy Policy at any time to reflect changes in our practices, the services we offer, or applicable legal requirements. When material changes are made, we will notify registered players via the contact details on their account with reasonable advance notice before the changes take effect.

The effective date and version number at the top of this page will be updated with each revision. We encourage you to review this Policy periodically. Your continued use of the platform following the effective date of any changes constitutes your acknowledgement of the updated Policy.

14. Contact and Data Requests

All privacy-related enquiries, data subject requests, and complaints should be directed to the zatbaj Data Protection team through the following channels:

• Email: [email protected] — please include "Privacy Request" in the subject line. This is a plain-text address and is not a clickable link.
• Live Chat: Available 24/7 within the zatbaj platform. Average response time: 2–5 minutes.
• Response Time: Data subject requests are acknowledged within 24 hours and fulfilled within 30 calendar days. Complex requests may take up to an additional 60 days, in which case you will be informed of the extended timeline.
• Languages: Both English and Bengali are supported for all privacy communications.