jeybaji Privacy
Policy

jeybaji collects personal data from you in three principal ways: information you provide directly when registering or using the platform, information generated automatically through your interaction with our services, and information received from trusted third-party partners such as payment processors and identity verification providers.

Information You Provide Directly

When you create a jeybaji account, make a deposit, or contact our support team, you may provide the following categories of personal data:

• Identity Data: Full legal name, date of birth, nationality, and gender as required for KYC verification.
• Contact Data: Email address, mobile phone number (used for bKash, Nagad, and Rocket payment linking), and residential address in Bangladesh.
• Identity Document Data: Scanned copies or photographs of your National Identity Card (NID), passport, or driving licence submitted during the KYC process.
• Financial Data: Payment method details (bKash mobile number, Nagad account reference, bank account number) sufficient to process deposits and withdrawals. jeybaji does not store full card numbers or banking PIN codes.
• Account Credentials: Your chosen username and encrypted password. jeybaji stores passwords using one-way hashing and never has access to your plain-text password.
• Communications Data: Records of any correspondence you send to jeybaji via email or live chat, including support requests and dispute submissions.

Information Generated Automatically

When you access jeybaji.net, certain technical data is collected automatically by our systems:

• Device & Technical Data: IP address, browser type and version, operating system, device type (mobile or desktop), screen resolution, and time zone.
• Usage Data: Pages visited, games played, bet amounts placed, session duration, login timestamps, and navigation paths within the platform.
• Transaction Data: A complete record of all deposits, withdrawals, bonuses claimed, wagers placed, and game outcomes associated with your account.
• Cookie & Tracker Data: Information collected via cookies and similar technologies as described in the Cookies section of this policy.

Information From Third Parties

jeybaji may receive supplementary personal data from third-party service providers where this is necessary to complete a service you have requested. For example, payment processors such as bKash and Nagad may confirm your registered mobile number and transaction status to facilitate deposits and withdrawals. Identity verification providers may return a verification outcome (pass or fail) and flag any matches against sanctions or politically exposed persons (PEP) databases.

jeybaji does not sell or rent your personal data to third parties. We share data only where strictly necessary to operate the platform, comply with legal obligations, or protect the security and integrity of our services. The categories of third parties with whom we may share your data are described below.

Payment Processors

To facilitate deposits and withdrawals, jeybaji shares the minimum necessary financial and identity data with payment service providers including bKash, Nagad, Rocket (Dutch-Bangla Bank), Upay, and partnered Bangladeshi banks. These providers are contractually bound to process your data only for the purpose of completing the payment transaction and are prohibited from using it for their own marketing or profiling purposes.

Identity Verification Providers

jeybaji engages third-party KYC and identity verification providers to assist with document checks, sanctions screening, and politically exposed persons (PEP) database lookups. These providers receive only the data necessary to perform the verification and are subject to strict data processing agreements.

Game Technology Providers

The casino games offered on jeybaji are supplied by independent software providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. To deliver their games, these providers may receive limited technical data such as your session token, stake amount, and game outcome. They do not receive your full identity or financial data.

Legal and Regulatory Disclosures

jeybaji may be required to disclose your personal data to law enforcement agencies, regulatory bodies, or courts of competent jurisdiction where required by applicable law. In such cases, jeybaji will disclose only the minimum data required to satisfy the legal obligation and will notify you of any such disclosure where permitted to do so.

Business Transfers

In the event that jeybaji undergoes a merger, acquisition, or sale of all or a portion of its assets, your personal data may be transferred as part of that transaction. In such circumstances, jeybaji will take reasonable steps to ensure that the acquiring entity honours the commitments made in this Privacy Policy, and will notify registered players of any material change to data controller identity.

jeybaji takes the security of your personal data seriously and implements a layered set of technical and organisational measures to protect it against unauthorised access, loss, alteration, or disclosure. While no online platform can guarantee absolute security, the following safeguards are in place across all jeybaji systems.

• SSL/TLS Encryption: All data in transit between your browser and jeybaji.net is encrypted using current industry-standard SSL/TLS protocols. You can verify the secure connection via the padlock icon in your browser's address bar.
• Password Hashing: Account passwords are stored using a one-way cryptographic hash function. jeybaji staff cannot retrieve or view your password in plain text under any circumstances.
• Access Controls: Access to player personal data within jeybaji's internal systems is restricted to authorised staff on a strict need-to-know basis. All internal access events are logged and audited.
• Secure Payment Tokenisation: Financial transaction data passing through jeybaji's payment pipeline is tokenised. Full payment credentials are processed by the respective payment provider (bKash, Nagad, etc.) and are not stored on jeybaji's servers.
• Fraud Monitoring: jeybaji operates continuous automated monitoring for unusual account activity, suspicious login attempts, and abnormal transaction patterns. Anomalies trigger an internal review process.
• Data Breach Response: In the event of a confirmed personal data breach, jeybaji will notify affected players via their registered email address within a reasonable timeframe, describing the nature of the breach and the steps taken to mitigate it.

As a jeybaji player, you have a number of rights with respect to the personal data we hold about you. These rights are set out below. To exercise any of these rights, please contact our support team at [email protected] with the subject line "Data Rights Request", clearly identifying yourself and the specific right you wish to exercise. jeybaji will acknowledge your request promptly and aim to fulfil it within 30 calendar days.

• Right of Access: You have the right to request a copy of the personal data jeybaji holds about you, along with information about how it is processed. This is sometimes called a Subject Access Request (SAR).
• Right to Rectification: If any personal data jeybaji holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You may also update certain account details directly via your account settings.
• Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, or where you withdraw the consent on which processing is based. This right is subject to override by jeybaji's legal retention obligations — for example, we cannot delete transaction records that are required for AML compliance purposes.
• Right to Restriction: In certain circumstances, you may request that jeybaji restrict the processing of your data — for example, while the accuracy of the data is being contested.
• Right to Data Portability: Where processing is based on your consent or on a contract, and is carried out by automated means, you have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to the processing of your personal data where jeybaji relies on legitimate interest as the legal basis, including automated profiling for fraud prevention or responsible gaming purposes.
• Right to Withdraw Consent: Where processing is based on your consent (such as marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.