jaya baji Privacy Policy
At jaya baji, the privacy and security of our players' personal data is a core responsibility. This Privacy Policy explains precisely what information we collect, how we use it, who we share it with, and what rights you have over your own data as a jaya baji player in Bangladesh.
All data transmitted between your device and jaya baji is protected by industry-standard TLS/SSL encryption, ensuring that your personal and financial information cannot be intercepted in transit.
jaya baji does not sell, rent, or trade your personal data to third-party marketers. Your information is used solely to operate your account, process transactions, and improve your experience on the platform.
jaya baji uses cookies to maintain your session, remember preferences, and analyse platform performance. This policy details every category of cookie we use and explains how you can control them.
Identity verification documents submitted for KYC purposes are stored securely, accessed only by authorised verification staff, and retained only for as long as required by our data retention obligations.
Players may request a copy of the personal data jaya baji holds about them at any time. Data access requests are processed within 30 days and are subject to identity verification to protect your account.
Subject to legal and regulatory retention obligations, jaya baji will honour requests to delete your personal data once your account is closed and all financial obligations have been settled.
1. Information We Collect
jaya baji collects personal data that you provide directly, data generated automatically through your use of the platform, and in limited circumstances, data received from third parties. The categories of data we collect are set out below.
- Registration data: Your full legal name, date of birth, gender, nationality, and Bangladesh mobile number provided when you open a jaya baji account.
- Identity verification (KYC) documents: National Identity Card (NID), passport scan, or other government-issued photo identification submitted to verify your age and identity before your first withdrawal.
- Contact preferences: Your preferred language and communication preferences as set in your account profile.
- Support communications: Messages, chat logs, emails, and any attachments you submit to the jaya baji support team in the course of raising a query or complaint.
- Responsible gaming data: Self-exclusion preferences, deposit limits, session time limits, and cooling-off periods set by you through the Responsible Gaming tools.
- Device and browser data: IP address, device type, operating system, browser type and version, screen resolution, and device identifiers collected automatically when you access jaya baji.
- Usage and session data: Pages visited, time spent on each section, game sessions played, bets placed, navigation paths, and clicks recorded during your sessions on the jaya baji platform.
- Transaction data: Deposit amounts, withdrawal requests, payment method references (bKash number, Nagad number, Rocket number), transaction timestamps, and wallet balance history.
- Betting and gaming history: Full records of all bets placed, games played, outcomes, stakes, and winnings associated with your account — retained for audit, dispute resolution, and responsible gaming monitoring purposes.
- Cookie and tracking data: Session cookies, preference cookies, and analytics identifiers as detailed in Section 4 of this policy.
2. How We Use Your Data
jaya baji processes your personal data on the basis of contractual necessity, legal obligation, legitimate interest, and — where required — your explicit consent. The table below sets out each processing purpose and its legal basis.
| Processing Purpose | Categories of Data Used | Legal Basis |
|---|---|---|
| Account creation and management | Registration data, contact data | Contractual necessity |
| Age and identity verification (KYC) | KYC documents, registration data | Legal obligation |
| Processing deposits and withdrawals | Transaction data, payment method references | Contractual necessity |
| Providing casino games and sportsbook | Betting history, session data, wallet data | Contractual necessity |
| Fraud prevention and security monitoring | Device data, IP address, transaction data | Legitimate interest |
| Anti-money laundering compliance | Transaction data, KYC documents | Legal obligation |
| Responsible gaming monitoring | Betting history, session data, responsible gaming preferences | Legal obligation / legitimate interest |
| Customer support and dispute resolution | Support communications, account data, transaction data | Contractual necessity / legitimate interest |
| Platform performance analytics | Usage data, cookie data | Legitimate interest |
| Sending promotional communications | Contact data, preference data | Consent (opt-in) |
jaya baji does not use your personal data for automated decision-making that produces significant legal effects, except in the context of fraud detection and responsible gaming intervention — both of which are subject to human review upon request. If you believe an automated decision has been applied to your account in error, you may contact the support team to request a manual review.
3. Data Sharing & Disclosure
jaya baji does not sell your personal data. We share data only with trusted third parties where it is strictly necessary to deliver our services, comply with legal obligations, or protect the platform from fraud and abuse.
The following categories of third parties may receive limited personal data from jaya baji in the course of operating the platform:
- Payment service providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, and other payment partners receive your mobile number or bank account details solely to process the deposit or withdrawal transaction you have initiated. These providers operate under their own privacy policies and are required to protect your data.
- Identity verification partners: Third-party KYC and identity verification services may receive copies of your identity documents to assist in age and identity checks. These partners are contractually bound to process your data only for verification purposes and to destroy or return documents upon completion.
- Game content providers: Casino game studios such as Evolution Gaming, Ezugi, Pragmatic Play, and Spribe may receive pseudonymised session identifiers to enable game-play. These providers do not receive your full name, mobile number, or KYC documents.
- Fraud prevention and security services: We may share IP addresses, device fingerprints, and transaction patterns with fraud prevention agencies where suspicious activity is detected on the platform.
- Legal and regulatory authorities: jaya baji will disclose personal data to law enforcement agencies, courts, or regulatory bodies where required to do so by applicable law, or where we believe in good faith that disclosure is necessary to prevent serious harm.
- Platform infrastructure providers: Cloud hosting and database services that process data on our behalf under data processing agreements that require them to maintain the same level of data protection as jaya baji.
4. Cookies & Tracking Technologies
jaya baji uses cookies and similar tracking technologies to maintain your session, remember your preferences, protect your account from session hijacking, and analyse how the platform is used so that we can improve it over time.
A cookie is a small text file placed on your device by a website. Cookies are widely used across the internet and are not inherently harmful. They cannot execute programs or deliver viruses to your device. The cookies used on jaya baji fall into the following categories:
| Cookie Category | Purpose | Can Be Disabled? |
|---|---|---|
| Strictly Necessary | Maintain your login session, prevent CSRF attacks, and enable core platform functions such as the wallet, bet placement, and account settings. | No — essential for platform operation |
| Functional / Preference | Remember your language preference, display settings, and responsible gaming configurations so you do not need to re-enter them on each visit. | Yes — disabling may affect your experience |
| Analytics / Performance | Collect anonymised data about page views, session durations, and navigation paths to help jaya baji identify performance issues and improve the platform. | Yes — opt out via browser settings |
| Security / Fraud Detection | Identify unusual device behaviour, detect bot activity, and flag potentially fraudulent sessions to protect your account and the integrity of the platform. | No — required for account security |
You can control and manage cookies through your browser settings. Most modern browsers allow you to refuse all or some cookies, delete existing cookies, and receive warnings before a cookie is stored. Please note that disabling strictly necessary or security cookies may prevent you from logging in or using core platform features. Detailed instructions for managing cookies are available in the help documentation of your browser.
5. Data Security Measures
jaya baji implements a layered approach to data security, combining technical controls, access restrictions, and operational procedures to protect your personal data against unauthorised access, disclosure, alteration, or destruction.
- TLS/SSL encryption in transit: All communications between your browser or app and jaya baji servers are encrypted using TLS 1.2 or higher, preventing interception of data during transmission.
- Encryption at rest: Sensitive data fields — including KYC document files, payment reference numbers, and account passwords — are stored in encrypted form using strong cryptographic standards.
- Password hashing: Account passwords are never stored in plain text. jaya baji uses a one-way cryptographic hashing function with salting so that even in the event of a data breach, passwords cannot be recovered.
- Access control: Access to player personal data within jaya baji's systems is restricted on a strict need-to-know basis. Staff who do not require access to personal data for their role are denied access by system-enforced controls.
- Two-factor authentication for staff: All jaya baji internal staff accounts that can access player data require two-factor authentication to log in, reducing the risk of account compromise through stolen credentials.
- Penetration testing: jaya baji commissions periodic security assessments and penetration tests to identify and remediate vulnerabilities in the platform before they can be exploited.
- Data breach response: In the event of a confirmed data breach that affects player personal data, jaya baji will notify affected players and relevant authorities in accordance with applicable legal requirements and without undue delay.
- Secure disposal: When personal data is no longer required and the retention period has expired, it is securely deleted or anonymised using methods that prevent recovery.
6. Data Retention Policy
jaya baji retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The table below summarises our standard retention periods by data category.
| Data Category | Retention Period | Reason for Retention |
|---|---|---|
| Account registration data | Duration of account + 5 years after closure | Legal obligation, dispute resolution |
| KYC identity documents | Duration of account + 5 years after closure | Anti-money laundering compliance |
| Transaction and financial records | 7 years after the transaction date | Financial record-keeping obligations |
| Betting and gaming history | Duration of account + 5 years after closure | Dispute resolution, responsible gaming audit |
| Customer support communications | 3 years from date of last interaction | Dispute resolution, quality assurance |
| Analytics and session data | 13 months on a rolling basis | Platform performance analysis |
| Marketing consent records | Until consent is withdrawn + 3 years | Proof of consent compliance |
| Self-exclusion records | Minimum 7 years from self-exclusion date | Responsible gaming legal obligation |
After the applicable retention period has expired, personal data is either securely deleted or anonymised so that it can no longer be linked to an individual player. Anonymised, aggregated data may be retained indefinitely for statistical analysis and platform improvement purposes. If you request deletion of your personal data before the applicable retention period has expired, jaya baji will delete all data that is not subject to a legal obligation to retain it and will explain clearly what data must be kept and for how long.
7. Your Privacy Rights
As a jaya baji player, you have the following rights in respect of your personal data. To exercise any of these rights, contact the support team at [email protected] with your registered mobile number and a description of your request.
You may request a copy of all personal data jaya baji holds about you. We will provide this within 30 days of receiving a valid, verified request. The first copy is provided at no charge.
If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it without undue delay. Contact support with the corrected information and supporting evidence.
You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations set out in Section 6.
In certain circumstances — for example, while a dispute about the accuracy of your data is being resolved — you may request that we restrict processing of your data without deleting it.
Where processing is based on your consent or contractual necessity, you may request your data in a structured, commonly used, machine-readable format suitable for transfer to another service provider.
You may object at any time to processing of your personal data based on legitimate interest, including profiling for responsible gaming monitoring. We will cease that processing unless we can demonstrate compelling grounds to continue.
All privacy rights requests will be acknowledged within 5 business days and resolved within 30 calendar days. Where a request is complex or relates to a large volume of data, jaya baji may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it. jaya baji reserves the right to verify your identity before fulfilling any data rights request to prevent unauthorised access to another player's data.
8. Policy Updates & Contact
jaya baji reviews and updates this Privacy Policy periodically to reflect changes in our data practices, platform features, or applicable legal requirements. We will notify you of material changes through the platform.
When this Privacy Policy is updated, the revised version will be published on this page with an updated effective date. For changes that are material — meaning they significantly affect how we collect, use, or share your personal data — jaya baji will provide prominent notice through the platform, such as a notification on your next login. Your continued use of jaya baji after such notice constitutes your acknowledgment of the updated policy.
We encourage you to review this Privacy Policy periodically so that you are always informed about how your data is being handled. If you disagree with any update to this policy, you should stop using jaya baji and request account closure in accordance with the Terms & Conditions.
If you have any questions, concerns, or requests relating to this Privacy Policy or to jaya baji's data practices more generally, please contact the support team. Our team is available 24 hours a day, 7 days a week, and aims to respond to all privacy-related inquiries within two business days.
This Privacy Policy was last updated in January 2026 and supersedes all previous versions. The English-language version of this policy is the controlling version for all purposes. If you are reading a translated version for convenience, refer to the English original hosted at jaya-baji.im/privacy-policy in the event of any inconsistency.
Ready to Play Safely at jaya baji?
Now that you understand how jaya baji protects your data, explore our games, check the FAQ for quick answers, or visit the Responsible Gaming page to set up your safe-play preferences.
🔞 18+ only. Please gamble responsibly. jaya baji is committed to fair play and player protection.