Privacy Policy — How jibaji Protects Your Data

1. Introduction

This Privacy Policy ("Policy") describes how jibaji ("jibaji", "we", "us", "our"), the operator of jibaji.app, collects, uses, stores, and protects the personal data of players and visitors to jibaji.app ("you", "your"). It also explains the rights you hold in relation to your personal data and how to exercise them.

This Policy applies to all personal data collected through your use of jibaji.app, including account registration, deposits, withdrawals, betting activity, casino game play, customer support interactions, and general browsing of the platform. This Policy should be read alongside jibaji's Terms & Conditions, which govern your overall use of the platform.

By registering an account on jibaji.app or by continuing to use the platform after this Policy has been updated, you acknowledge that you have read and understood this Policy and consent to the collection and use of your personal data as described herein.

2. Data Controller

jibaji is the data controller responsible for the personal data collected through jibaji.app. As data controller, jibaji determines the purposes and means by which your personal data is processed. If you have any questions about how your data is handled, or if you wish to exercise any of your data rights, you may contact us directly using the details provided in Section 16 of this Policy.

All enquiries relating to data privacy must be submitted in English to ensure they are handled accurately and efficiently by our support team.

3. Data We Collect

jibaji collects the following categories of personal data from players and visitors:

3.1 Identity and Contact Data

• Full legal name
• Date of birth
• Gender (where provided)
• Email address
• Mobile phone number
• Residential address, city, and district (e.g., Dhaka, Chittagong, Sylhet, Khulna)
• National Identity Card (NID) number or passport number (collected during KYC verification)

3.2 Financial Data

• Mobile financial service account details (bKash, Nagad, Rocket, Upay registered numbers)
• Bank account details (where bank transfer is used for deposits or withdrawals)
• Transaction history including deposit amounts, withdrawal amounts, and dates
• Account balance information

3.3 Betting and Gaming Data

• Bet history, including stake amounts, markets selected, odds accepted, and settlement outcomes
• Casino game session data, including games played, session durations, and wager amounts
• Bonus and promotion usage history
• Responsible gaming tool usage (deposit limits, time-out periods, self-exclusion records)

3.4 Technical and Usage Data

• IP address
• Device type, operating system, and browser type
• Geolocation data (country and region, derived from IP address)
• Pages visited on jibaji.app, time spent on each page, and navigation paths
• Login timestamps and session duration
• Cookie identifiers and similar tracking data (see Section 8)

3.5 Communications Data

• Content of messages sent to jibaji's customer support team via email or live chat
• Records of any formal complaints submitted through the platform
• Preferences regarding marketing communications (opt-in or opt-out status)

4. How We Collect Your Data

jibaji collects personal data through the following means:

• Direct collection: Data you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or updating your account profile.
• Automated collection: Data collected automatically when you browse jibaji.app, including technical data gathered via cookies, web beacons, server logs, and similar technologies (see Section 8).
• Third-party sources: Data received from identity verification providers, payment processors (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank), and fraud detection services to supplement and verify the information you provide directly.
• Public sources: In limited circumstances, data from publicly available sources may be used to verify your identity or to investigate suspected fraudulent activity.

5. How We Use Your Data

The table below summarises the primary purposes for which jibaji processes your personal data and the category of data used for each purpose.

Purpose	Data Category Used
Account registration and ongoing account management	Identity & Contact Data
Age and identity verification (KYC)	Identity Data, Financial Data
Processing deposits and withdrawals	Financial Data, Identity Data
Providing betting and casino gaming services	Betting & Gaming Data, Technical Data
Detecting and preventing fraud, money laundering, and cheating	All categories
Responsible gaming monitoring and intervention	Betting & Gaming Data, Communications Data
Customer support and complaint resolution	Communications Data, Identity Data
Marketing communications (where consent is given)	Identity & Contact Data, Communications Data
Platform analytics and product improvement	Technical & Usage Data
Compliance with legal and regulatory obligations	All categories

6. Legal Basis for Processing

jibaji processes your personal data on the following legal bases:

• Contractual necessity: Processing that is necessary to perform the contract between you and jibaji — specifically, to provide you with the betting and casino services you have registered for, to process your transactions, and to manage your account.
• Legal obligation: Processing required to comply with applicable law, including anti-money-laundering obligations, age verification requirements, and any other regulatory requirements applicable to online gaming operators.
• Legitimate interests: Processing carried out in jibaji's legitimate interests, including fraud prevention, platform security, responsible gaming monitoring, and general business analytics, provided those interests are not overridden by your rights and interests.
• Consent: Processing based on your freely given, specific, and informed consent — principally for marketing communications and for the use of non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

7. Sharing Your Data With Third Parties

jibaji does not sell, rent, or trade your personal data. We share data with third parties only in the following limited circumstances:

7.1 Payment Service Providers

To process deposits and withdrawals, jibaji shares necessary financial and identity data with payment service providers including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank. These providers receive only the data required to complete the transaction and are contractually bound to handle it securely.

7.2 Identity Verification Providers

To fulfil our age verification and KYC obligations, jibaji works with third-party identity verification services. These providers process identity documents and biometric or database checks on our behalf and are not permitted to use your data for any other purpose.

7.3 Game Providers

Casino and slot game providers — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — receive technical session data necessary to deliver their games within the jibaji platform. Game providers do not receive your full identity profile.

7.4 Legal and Regulatory Authorities

jibaji will disclose personal data to law enforcement agencies, regulatory bodies, or other authorities where required to do so by law, by court order, or in connection with an investigation into suspected criminal activity, fraud, or money laundering.

7.5 Business Transfers

In the event of a merger, acquisition, asset sale, or restructuring of jibaji's business, your personal data may be transferred to the acquiring or successor entity, subject to the same data protection obligations set out in this Policy. You will be notified of any such transfer via a notice on jibaji.app.

8. Cookies & Tracking Technologies

jibaji uses cookies and similar tracking technologies to operate and improve the platform. Cookies are small text files stored on your device when you visit jibaji.app. We use the following categories of cookies:

• Strictly necessary cookies: Essential for the platform to function. These include session cookies that keep you logged in during a betting or gaming session. These cookies cannot be disabled without affecting core functionality.
• Performance and analytics cookies: Used to collect anonymous information about how visitors use jibaji.app — for example, which pages are visited most frequently and whether error messages are encountered. This data helps us improve the platform over time.
• Functional cookies: Used to remember your preferences, such as your preferred language or display settings, so that we can personalise your experience on return visits.
• Fraud prevention cookies: Used to detect unusual or suspicious activity on the platform and to help protect your account against unauthorised access.

You may manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies may prevent you from using certain features of jibaji.app, including account login and deposit processing.

9. Data Security

jibaji takes the security of your personal data seriously and implements a range of technical and organisational measures designed to protect it against unauthorised access, loss, alteration, or disclosure. These measures include:

• SSL/TLS encryption on all pages of jibaji.app to protect data in transit.
• Encryption at rest for sensitive data fields including passwords (stored as salted hashes), NID numbers, and financial account identifiers.
• Access controls limiting access to personal data to authorised jibaji personnel whose job roles require it, subject to confidentiality obligations.
• Regular security assessments and penetration testing to identify and remediate vulnerabilities.
• Incident response procedures to detect, investigate, and respond to data security breaches in a timely manner.

While jibaji employs robust security practices, no system is entirely immune to risk. In the event of a data breach that is likely to result in a risk to your rights, jibaji will notify affected players without undue delay and will take immediate steps to contain and investigate the incident.

You also play a role in keeping your data secure. You are responsible for maintaining the confidentiality of your jibaji login credentials and for notifying us promptly at [email protected] if you suspect any unauthorised access to your account.

10. Data Retention

jibaji retains personal data for as long as is necessary to fulfil the purposes for which it was collected, and for such additional periods as are required to comply with legal, regulatory, or contractual obligations. The general retention framework applied by jibaji is as follows:

• Active account data: Retained for the full duration of your account's active status.
• Transaction and betting records: Retained for a minimum of five years following the date of each transaction, in accordance with standard anti-money-laundering record-keeping requirements.
• KYC and identity documents: Retained for a minimum of five years following account closure or the completion of the relevant KYC review.
• Customer support records: Retained for three years following the closure of the relevant support case.
• Marketing opt-in records: Retained for as long as you remain opted in to marketing communications and for one year after opt-out, to demonstrate your prior consent.
• Closed account data: Following account closure, aggregate anonymised data may be retained indefinitely for platform analytics purposes. All personally identifiable data will be deleted at the end of the applicable retention period.

11. Your Rights Over Your Personal Data

Subject to applicable law, you hold the following rights in relation to the personal data jibaji holds about you:

• Right of access: You may request a copy of the personal data jibaji holds about you. We will respond to verified access requests within 30 days.
• Right to rectification: You may request that inaccurate or incomplete personal data be corrected. Minor corrections (such as updating your phone number) can be made directly within your account settings.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (for consent-based processing), or where processing is otherwise unlawful. This right is subject to overriding legal retention obligations — for example, we may be required to retain transaction records for anti-money-laundering purposes even after account closure.
• Right to restrict processing: You may request that jibaji limits the processing of your data in certain circumstances, such as while a rectification request is being investigated.
• Right to data portability: Where processing is based on your consent or on a contract, you may request that we provide your personal data in a structured, machine-readable format.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing emails), you may withdraw that consent at any time by contacting [email protected] or by using the unsubscribe mechanism in any marketing communication.
• Right to object: You may object to processing carried out on the basis of jibaji's legitimate interests. We will assess your objection and cease processing unless we can demonstrate compelling legitimate grounds that override your interests.

To exercise any of these rights, please contact jibaji's support team at [email protected] with the subject line "Data Rights Request". We will respond within 30 days and may need to verify your identity before fulfilling the request.

12. Children and Minors

jibaji is strictly an adults-only platform. We do not knowingly collect personal data from individuals under the age of 18. If you are under 18, you must not register for an account or attempt to use jibaji in any capacity.

If jibaji discovers that an account has been registered by a person under the age of 18, we will immediately close the account, return any remaining balance (less any amounts wagered) to the payment method used for deposit, and permanently delete all personal data associated with that account in accordance with our data retention policy.

If you are a parent or guardian and have reason to believe that your child has registered on jibaji.app, please contact us immediately at [email protected] so that we can take appropriate action.

13. International Data Transfers

jibaji's primary operations and data storage are focused on serving players in Bangladesh. However, some of the third-party service providers we use — including game providers such as Pragmatic Play and Evolution Gaming, and cloud infrastructure providers — may process data on servers located outside Bangladesh.

Where data is transferred internationally, jibaji takes steps to ensure that appropriate safeguards are in place to protect your personal data to a standard consistent with this Policy. This may include contractual clauses with data processors that require them to handle your data with equivalent care and security to that applied by jibaji itself.

14. Third-Party Links

jibaji.app may contain references or links to third-party websites or services in certain content contexts. jibaji is not responsible for the privacy practices or content of any third-party site. We encourage you to review the privacy policy of any external site you visit. This Policy applies solely to data collected through jibaji.app and jibaji's own services.

15. Updates to This Privacy Policy

jibaji reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we provide. When material changes are made, we will notify registered players via a prominent notice on jibaji.app or by direct communication to your registered email address.

The effective date at the top of this page indicates when this Policy was last reviewed. Your continued use of jibaji.app following the posting of an updated Policy constitutes your acceptance of the revised terms. If you do not agree to the revised Policy, please discontinue use of jibaji.app and contact us to request account closure.

16. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way jibaji handles your personal data, please contact our support team using the details below. All privacy-related enquiries must be submitted in English.

• Email: [email protected] (plain text — not a clickable link)
• Subject line for data rights requests: "Data Rights Request"
• Subject line for general privacy enquiries: "Privacy Policy Enquiry"
• Support Hours: 24 hours a day, 7 days a week (Bangladesh Standard Time, UTC+6)
• Response Time: We aim to respond to all privacy-related enquiries within 5 business days and to formal data rights requests within 30 calendar days.