Privacy Policy — Your Data, Our Responsibility

When you create a zatbaj account, we collect the following information which is necessary to establish and maintain your account, verify your identity, and provide our services:

• Full legal name as it appears on your government-issued identification
• Date of birth (for mandatory age verification — players must be 21 or older)
• Email address and mobile phone number
• Residential address including city, district, and postcode (Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, and other Bangladeshi locations)
• Username and encrypted password credentials
• Preferred currency (Bangladeshi Taka, BDT)

Providing accurate registration data is a condition of using the zatbaj platform. Accounts found to contain false or misleading registration information may be suspended pending verification or permanently closed.

To process deposits and withdrawals, zatbaj collects payment-related information. The specific data collected depends on the payment method you use:

• bKash / Nagad / Rocket / Upay: Mobile wallet number registered in your name, transaction reference numbers, and confirmation of account ownership
• Visa / Mastercard: Card number (last four digits only stored on our systems), expiry date, and billing name — full card numbers are processed exclusively by our PCI-DSS compliant payment processors and are never stored on zatbaj servers
• Transaction histories, deposit amounts, withdrawal requests, and account balance records are retained for regulatory compliance and dispute resolution purposes

zatbaj does not store full card numbers on its own infrastructure. All card payment processing is handled by certified third-party payment processors operating under applicable data security standards.

As part of our Know Your Customer (KYC) obligations and responsible gaming commitments, we may collect the following verification documents:

• Scanned copies or photographs of government-issued photo identification (National ID card, passport, or driving licence)
• Proof of residential address (utility bill or bank statement dated within 90 days)
• Proof of payment method ownership (bKash or Nagad account screenshot, bank statement)
• Source of funds documentation for high-value accounts or transactions
• Selfie photographs for liveness verification where required

KYC documents are stored securely using encryption and are accessible only to authorised zatbaj compliance personnel. These documents are retained for the duration of your account and for a minimum period thereafter as required by applicable compliance obligations.

We automatically collect certain technical and behavioural data when you use the zatbaj platform. This data helps us improve the platform experience, detect fraudulent activity, and ensure fair play:

• IP address and approximate geographic location
• Device type, operating system, and browser version
• Session duration, pages visited, and navigation patterns within the platform
• Game history including games played, bet amounts, win/loss records, and session timestamps
• Login timestamps and authentication event logs
• Customer support interaction records including chat transcripts and email correspondence

zatbaj uses cookies, web beacons, pixel tags, and similar tracking technologies to maintain platform functionality, personalise your experience, and analyse usage patterns. The types of cookies we use include:

• Essential cookies: Required for the platform to function, including session management and security tokens. These cannot be disabled.
• Functional cookies: Remember your preferences such as language settings and game display options.
• Analytics cookies: Help us understand how players navigate the platform so we can improve usability and content.
• Fraud prevention cookies: Used to detect and prevent automated bot activity and suspicious login attempts.

You may manage non-essential cookie preferences through your browser settings. Disabling certain cookies may affect platform functionality, including the ability to maintain your login session.

zatbaj engages carefully selected third-party service providers to support platform operations. These providers process your personal data strictly on our behalf and under our instruction, and are bound by data processing agreements requiring them to maintain confidentiality and implement appropriate security measures. Categories of service providers include:

• Payment processors for bKash, Nagad, Rocket, Upay, Visa, and Mastercard transactions
• Identity verification and KYC technology providers
• Game content providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi
• Fraud detection and cybersecurity technology vendors
• Cloud hosting and data storage infrastructure providers
• Customer support platform operators

We do not authorise our service providers to use your personal data for their own independent purposes. Their use of your data is limited to the specific services they provide to zatbaj.

zatbaj may disclose your personal data to government authorities, law enforcement agencies, or regulatory bodies where we are legally required or compelled to do so. This includes disclosures required in connection with investigations into fraud, money laundering, match fixing, or other criminal activity. We will only make such disclosures to the extent strictly required by applicable law and will notify you of any such disclosure where we are legally permitted to do so.

zatbaj does not sell, rent, or trade your personal data to third-party advertisers, data brokers, or marketing companies. Your personal information is used exclusively for the purposes described in this Policy. We will never monetise your data by sharing it with parties whose purpose is to advertise to you outside of the zatbaj platform without your explicit consent.

zatbaj implements a layered security architecture to protect your personal data from unauthorised access, loss, alteration, or disclosure. Our security measures include:

• SSL/TLS encryption: All data transmitted between your device and zatbaj servers is encrypted using industry-standard TLS protocols
• Data encryption at rest: Sensitive personal data stored in our databases is encrypted using AES-256 or equivalent standards
• Access controls: Personal data is accessible only to zatbaj personnel with a demonstrated need-to-know, enforced through role-based access controls and multi-factor authentication
• Security monitoring: Our infrastructure is continuously monitored for suspicious activity, intrusion attempts, and anomalous data access patterns
• Regular security assessments: We conduct periodic security reviews and vulnerability assessments of our platform and data handling practices

While no security system can guarantee absolute protection against all possible threats, zatbaj is committed to maintaining industry-appropriate security standards and responding promptly to any identified vulnerabilities or security incidents.

In the event of a personal data breach that poses a risk to your rights and freedoms, zatbaj will take immediate steps to contain the breach, assess its impact, and notify affected players via their registered email address as soon as reasonably practicable. We will provide clear information about the nature of the breach, the categories of data affected, and the steps we are taking to address it.

If you believe your zatbaj account has been compromised, you should contact our support team immediately at [email protected] and change your account password without delay. We recommend using a strong, unique password for your zatbaj account and enabling any available two-factor authentication features.

zatbaj retains your personal data for as long as your account remains active and for a reasonable period thereafter to fulfil our legal, regulatory, and operational obligations. Specific retention principles include:

• Active account data: Retained for the full duration of your account's active status
• KYC and identity documents: Retained for the duration of your account and for a minimum period after account closure as required by applicable anti-money-laundering obligations
• Transaction and game history records: Retained for a minimum of five years following each transaction to support financial auditing and dispute resolution
• Customer support correspondence: Retained for three years following the resolution of the relevant support case
• Marketing preferences: Retained until you withdraw consent or close your account, whichever comes first

Upon expiry of the relevant retention period, personal data is securely deleted or anonymised in a manner that prevents reconstruction of the original data. Where data is anonymised rather than deleted, the resulting anonymised dataset no longer constitutes personal data and may be retained for statistical and analytical purposes.

To exercise any of the rights listed above, please contact our data protection team at [email protected] with the subject line "Data Rights Request" and a clear description of your request. We may need to verify your identity before processing your request. We will respond to all valid requests within 30 calendar days, or notify you if additional time is required for complex requests.

The zatbaj platform serves players primarily located in Bangladesh. Some of our third-party service providers — including cloud infrastructure providers and game content partners — may process your personal data on servers located outside Bangladesh. Where such transfers occur, zatbaj takes steps to ensure that appropriate safeguards are in place to protect your personal data to a standard equivalent to that provided under this Policy.

By using the zatbaj platform, you acknowledge and consent to the transfer of your personal data to countries outside Bangladesh for the purposes described in this Policy, subject to the protections described above.

zatbaj reserves the right to update this Privacy Policy from time to time to reflect changes in our data practices, platform features, or applicable legal requirements. When material changes are made, we will notify registered players by email to their registered address and by posting a prominent notice on the platform. The updated Policy will take effect on the date stated in the notice.

Your continued use of the zatbaj platform after the effective date of a revised Privacy Policy constitutes your acceptance of the updated terms. We encourage you to review this Policy periodically to stay informed about how we protect your data.

For any questions, concerns, or requests relating to this Privacy Policy or your personal data, please contact the zatbaj data protection team. We are committed to addressing all privacy-related enquiries promptly and transparently.

Email: [email protected] (plain text — subject line: "Privacy Enquiry")

Our support team operates on Bangladesh Standard Time (BST, UTC+6) and will acknowledge your enquiry within 48 hours of receipt.