jibazz Privacy Policy

When you use jibazz, we collect personal data across several categories depending on how you interact with the platform. The table below summarises each category, the specific data points it encompasses, and the primary reason for collection.

1.1 How We Collect Your Data

jibazz collects personal data through the following channels:

• Direct submission — data you enter during account registration, KYC document upload, deposit/withdrawal forms, and support interactions
• Automated collection — technical and usage data gathered automatically as you browse and interact with the jibazz platform
• Third-party payment providers — transaction confirmation data received from bKash, Nagad, Rocket, Upay, and partner banks
• Game providers — session and outcome data relayed by third-party game studios such as Pragmatic Play, Evolution Gaming, and Spribe
• Fraud prevention partners — device fingerprinting and behavioural risk scores from our fraud detection service providers

1.2 Data You Are Required to Provide

Certain categories of data are mandatory for jibazz to provide its services. If you do not provide the required identity, contact, or financial data, we will be unable to create your account, verify your age, process payments, or comply with our anti-money laundering obligations. Optional data — such as communication preferences — can be withheld without affecting your access to core services.

jibazz processes your personal data only where there is a lawful basis for doing so. The primary lawful bases we rely on are: performance of a contract (processing necessary to operate your account), legal obligation (AML, KYC, and age-verification requirements), legitimate interests (fraud prevention, platform security, and service improvement), and consent (marketing communications, where applicable).

2.1 Account Operation

We use your identity, contact, and financial data to create and maintain your jibazz account, authenticate your logins, process deposits and withdrawals in Bangladeshi Taka (BDT), and provide you with access to betting and casino products. Without this processing, we cannot fulfil our contractual obligations to you as a registered player.

2.2 Age Verification and KYC Compliance

jibazz is legally and ethically obligated to verify that every registered player is aged 18 or above. 18+ We process your identity documents — including National Identity Cards and passports issued to Bangladeshi residents — solely for the purpose of confirming your age and identity before the first withdrawal is approved. KYC data is not used for any other purpose.

2.3 Fraud Prevention and Security

We use technical data (IP addresses, device fingerprints, login patterns) and financial transaction data to detect and prevent unauthorised account access, payment fraud, duplicate account creation, bonus abuse, and money laundering. This processing is carried out in the legitimate interests of jibazz and the wider player community.

2.4 Responsible Gaming Monitoring

jibazz uses your betting history, session duration logs, and deposit frequency data to identify players who may be exhibiting signs of problem gambling. This processing is carried out in the legitimate interest of player welfare. Where concerning patterns are detected, our responsible gaming team may proactively reach out to offer support tools such as deposit limits, session timers, or self-exclusion options.

2.5 Customer Support

Communications data — including live chat transcripts and email correspondence — is retained to resolve disputes, verify the outcome of support interactions, and continuously improve the quality of jibazz's 24/7 English-language support service. Support communications are accessible to authorised jibazz staff only.

2.6 Marketing Communications

With your explicit consent at registration or subsequently via your account communication preferences, jibazz may send you promotional emails and in-platform notifications about new game releases, seasonal promotions (such as Eid specials, Pohela Boishakh offers, and BPL cricket season bonuses), and personalised offers based on your gaming activity. You may withdraw your marketing consent at any time by contacting our support team.

2.7 Legal and Regulatory Compliance

jibazz may be required to process and disclose personal data to comply with applicable law, respond to lawful requests from competent authorities, or satisfy obligations under anti-money laundering regulations. In such cases, processing is mandatory and cannot be restricted at the player's request.

jibazz uses cookies and similar tracking technologies to ensure the platform functions correctly, to remember your session preferences, to detect fraudulent activity, and to understand how players navigate the site. By continuing to use jibazz after reviewing this policy, you acknowledge the use of cookies as described below.

3.1 Types of Cookies We Use

3.2 Managing Your Cookie Preferences

Strictly necessary and security cookies cannot be disabled, as doing so would prevent the jibazz platform from functioning correctly and would compromise account security. Functional and analytical cookies may be disabled by adjusting your browser settings. Please note that disabling functional cookies may affect the quality of your experience on the platform — for example, your preferred settings may not be remembered between sessions.

3.3 Third-Party Analytics

jibazz may use third-party analytics tools to aggregate anonymised usage data. These tools do not receive personally identifiable information. Anonymised data may include device type distribution, geographic region (at country level), and page performance metrics. No individual player's identity is ever exposed to third-party analytics providers.

IMPORTANT jibazz does not sell, rent, or trade your personal data to any third party for commercial purposes. Data is shared with external parties only in the specific, limited circumstances described in this section, and in every case we require those parties to handle your data securely and in accordance with applicable data protection standards.

4.1 Payment Service Providers

To process deposits and withdrawals in BDT, jibazz shares the minimum necessary financial and identity data with our payment partners — bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, and Sonali Bank. These providers receive only the data required to authenticate and complete the transaction and are contractually prohibited from using your data for any other purpose.

4.2 Game Technology Providers

Third-party game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive session data (such as a pseudonymous player ID, bet amount, and game result) to operate their games within the jibazz platform. These providers do not receive your full name, contact details, or payment information. They are bound by contractual data processing agreements that restrict them from using session data beyond game operation and audit purposes.

4.3 Identity Verification Partners

To fulfil our KYC obligations, jibazz may use third-party identity verification service providers to cross-check the documents you submit against government databases. These partners process your identity data on our behalf and are contractually required to store and delete that data in line with our retention policy. Verified identity data is not shared further.

4.4 Fraud Prevention and Security Partners

We share technical data (IP addresses, device identifiers, and behavioural risk signals) with fraud detection service providers. This data is used exclusively to generate risk scores that help jibazz identify suspicious activity. Fraud partners do not receive your name, payment details, or betting history.

4.5 Legal Disclosure

jibazz may disclose personal data to competent authorities, law enforcement agencies, or financial intelligence units where required by applicable law, court order, or lawful regulatory request. We will notify the affected account holder of any such disclosure where we are legally permitted to do so. We do not make voluntary disclosures of player data beyond what is strictly required by law.

4.6 Business Transfers

In the event that jibazz undergoes a merger, acquisition, or sale of all or part of its assets, player data may be transferred to the successor entity as part of that transaction. Affected players will be notified via their registered email address prior to the transfer, and the successor entity will be required to honour the terms of this Privacy Policy.

jibazz retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The retention periods below represent the standard durations applied to each data category. At the end of a retention period, data is securely deleted or irreversibly anonymised.

5.1 Early Deletion Requests

Players may request early deletion of personal data that is not subject to a mandatory retention period (see Section 7 — Your Privacy Rights). Where a mandatory retention period applies — for example, to KYC documents or financial transaction records — jibazz is legally prohibited from deleting that data before the retention period expires, regardless of a player's deletion request. We will always inform you clearly which data can and cannot be deleted early, and why.

5.2 Anonymisation

Where deletion of raw personal data is not operationally possible (for example, in aggregated analytics datasets), jibazz will instead apply irreversible anonymisation so that the data can no longer be linked to any individual player. Anonymised data is not considered personal data and may be retained for longer periods for statistical and product development purposes.

jibazz implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. While no system can guarantee absolute security, jibazz applies industry best practices to minimise risk at every layer of the platform.

6.1 Technical Safeguards

• SSL / TLS encryption — all data in transit between your device and jibazz servers is encrypted using TLS 1.2 or higher
• Encryption at rest — sensitive data stored on jibazz servers, including KYC documents and payment references, is encrypted using AES-256
• Access controls — internal access to player data is restricted on a strict need-to-know basis; privileged access requires multi-factor authentication
• Intrusion detection — automated systems monitor for anomalous access patterns, brute-force login attempts, and suspicious data export activity around the clock
• Regular security audits — jibazz conducts periodic internal security reviews and vulnerability assessments of its platform infrastructure
• Data pseudonymisation — where technically feasible, personal identifiers are replaced with pseudonymous tokens in operational datasets to limit exposure risk

6.2 Organisational Safeguards

• All staff with access to player data are subject to confidentiality obligations
• Data handling training is mandatory for all relevant team members
• Third-party data processors are vetted and bound by data processing agreements
• A defined incident response procedure is in place for potential data breaches

6.3 Data Breach Notification

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, jibazz will notify affected players via their registered email address as soon as reasonably practicable after becoming aware of the breach. The notification will describe the nature of the breach, the categories of data affected, the likely consequences, and the steps jibazz has taken or proposes to take to address the breach.

6.4 Your Responsibilities

The security of your account also depends on the steps you take to protect your own credentials. jibazz recommends that you use a strong, unique password for your account, never share your login details with any third party, and contact jibazz support immediately if you suspect unauthorised access to your account. jibazz will never ask you to share your password via email, live chat, or any other channel.

8.1 How We Update This Policy

jibazz reviews this Privacy Policy periodically and may update it to reflect changes in our data practices, the services we offer, applicable law, or the recommendations of data protection authorities. When we make material changes to this policy, we will notify registered players via their registered email address at least 14 days before the changes take effect, and we will update the "Last Updated" date at the top of the page.

Continued use of the jibazz platform after the effective date of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with the changes, you may close your account by contacting jibazz support prior to the effective date.

8.2 Minor Updates

Minor clarifications, typographical corrections, or non-material rewording that does not change the substance of how your data is collected or used will be made without advance notification, though the "Last Updated" date will always be revised. We encourage you to review this page periodically to stay informed of any changes.

8.3 Contacting jibazz About Privacy

For any questions, concerns, or requests relating to this Privacy Policy or the way jibazz handles your personal data, please contact our support team. All privacy-related enquiries are handled by trained support staff with access to our data protection procedures.

• Live chat — available 24/7 via the jibazz platform, response under 3 minutes
• Email — [email protected] (plain text; not a clickable link)
• Response time — privacy requests acknowledged within 24 hours; fully resolved within 30 days

8.4 Governing Policy

This Privacy Policy, together with the jibazz Terms & Conditions and Responsible Gaming policy, constitutes the complete framework governing your relationship with jibazz. In the event of any conflict between this Privacy Policy and any other document on the jibazz platform, this Privacy Policy shall prevail with respect to matters of personal data handling.