jitabaji Privacy Policy
At jitabaji, your personal data is treated with the highest level of care and confidentiality. This Privacy Policy explains exactly what information we collect, why we collect it, how it is stored and protected, and what rights you hold over your own data as a player on our platform.
Our Commitment to Your Privacy
Summary: jitabaji collects only the personal data necessary to operate a safe, fair, and legally compliant gambling platform. We do not sell your personal data to third parties. We use industry-standard encryption to protect all data in transit and at rest. You have the right to access, correct, and request deletion of your personal data at any time.
This Privacy Policy ("Policy") applies to all players, visitors, and users of the jitabaji platform ("Platform", "we", "us", "our"). It covers all personal data processed by jitabaji in connection with the operation of its online casino, sports betting, live casino, slots, and table games services directed at the Bangladesh market.
By registering an account on jitabaji, accessing any part of the platform, or interacting with our support team, you acknowledge that you have read and understood this Privacy Policy and you consent to the collection and processing of your personal data as described herein. If you do not agree with any aspect of this Policy, you should not use the platform.
jitabaji is committed to handling your personal data responsibly and transparently. We collect only what is necessary, retain it only for as long as required, and protect it using appropriate technical and organisational security measures throughout its lifecycle. This Policy is written in plain English to ensure you can fully understand how your information is used.
Information We Collect
jitabaji collects personal data through several channels: directly from you when you register an account or interact with the platform, automatically through your use of the website, and from third-party verification and payment service providers. The categories of personal data we collect are set out below.
| Category | Data Collected | Collection Method |
|---|---|---|
| Identity Data | Full legal name, date of birth, gender, nationality, National ID (NID) or passport number | Registration form, KYC verification upload |
| Contact Data | Email address, mobile phone number, residential address (city, district, division) | Registration form, account profile updates |
| Financial Data | bKash/Nagad/Rocket/Upay wallet numbers, bank account details, transaction history, deposit and withdrawal records | Payment processing, transaction logs |
| Technical Data | IP address, device type, operating system, browser type and version, time zone, screen resolution | Automatic collection via cookies and server logs |
| Usage Data | Pages visited, games played, betting history, session duration, click patterns, search queries within the platform | Automatic collection via analytics tools |
| Communications Data | Live chat transcripts, support email content, feedback submissions, complaint records | Support interactions, contact form submissions |
| Verification Data | Copies of identity documents (NID, passport, utility bill), selfie photographs submitted for KYC | KYC verification process |
We do not knowingly collect personal data from individuals under the age of 18. If we become aware that a user under the age of 18 has provided personal data to jitabaji, we will immediately suspend the relevant account, delete the data, and report the matter in accordance with applicable law. If you believe a minor has registered on our platform, please contact us at support@jitabaji (plain text — not a clickable link) immediately.
Bangladesh-Specific Note: For players based in Bangladesh, identity verification is conducted using the Bangladesh National Identity Card (NID) system. Wallet numbers for bKash, Nagad, Rocket, and Upay are collected solely for the purpose of processing deposits and withdrawals. jitabaji does not store your full mobile banking PIN or password at any point.
We collect identity documents such as your NID or passport to comply with age verification and anti-fraud obligations. This data is processed securely and never shared with unauthorised parties.
Mobile wallet numbers for bKash, Nagad, Rocket, and Upay are collected purely to process your deposits and withdrawals. We do not store your mobile banking credentials or PIN at any time.
IP addresses, device identifiers, and session behaviour data are collected automatically to ensure platform security, detect fraud, and improve the overall experience for players on jitabaji.
How We Use Your Data
jitabaji processes your personal data only for specific, lawful purposes. We do not use your data for purposes that are incompatible with those disclosed in this Policy. The primary purposes for which we process your personal data are described below.
- Account registration and management: To create and maintain your player account, verify your identity, and communicate essential account-related information to you.
- Age and identity verification (KYC): To confirm that all players are aged 18 or above and to satisfy our Know Your Customer obligations, which are a core component of responsible gambling and fraud prevention.
- Payment processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, bank transfer, Visa, and Mastercard; to maintain accurate financial records; and to reconcile transaction histories.
- Platform operation and game delivery: To provide access to casino games, live dealer tables, sports betting markets, slots, and crash games; to record bet history; and to settle winnings correctly.
- Customer support: To respond to your queries, complaints, and requests through live chat and email; to maintain records of support interactions for quality assurance and dispute resolution purposes.
- Responsible gaming compliance: To monitor gameplay patterns for signs of problem gambling; to enforce self-exclusion requests and deposit limit settings; and to fulfil our duty of care obligations to vulnerable players.
- Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, money laundering, bonus abuse, account sharing, and any other prohibited conduct described in our Terms and Conditions.
- Legal and regulatory compliance: To comply with applicable anti-money laundering (AML) requirements, tax reporting obligations, and any lawful request from a competent authority.
- Marketing communications (with consent): To send you promotional offers, bonus notifications, and news about jitabaji via email or SMS, where you have given explicit consent. You may withdraw consent at any time by updating your communication preferences in Account Settings or contacting support.
- Platform improvement and analytics: To analyse usage patterns, improve website performance, personalise your experience, and develop new features that serve the Bangladesh gambling audience.
Legal Basis: jitabaji processes personal data on the following legal bases: (a) contract performance — processing necessary to provide the services you have requested; (b) legal obligation — processing required by applicable law; (c) legitimate interests — processing for fraud prevention, security, and platform improvement where these interests are not overridden by your rights; and (d) consent — where you have given clear, informed consent, particularly for marketing communications.
Data Sharing and Disclosure
jitabaji does not sell, rent, or trade your personal data to any third party for commercial purposes. We share your data only where strictly necessary to operate the platform or where required by law. The categories of third parties with whom your data may be shared are set out below.
- Game providers: Third-party software providers including Evolution Gaming, Pragmatic Play, Ezugi, NetEnt, Microgaming, and Spribe may receive limited technical session data (such as player session tokens) to enable game delivery. These providers operate under their own privacy frameworks and are contractually bound to handle data securely.
- Payment processors: Payment service providers including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard receive the financial data necessary to process your transactions. These entities are subject to their own regulatory and data protection obligations.
- Identity verification services: Third-party KYC providers may process copies of your identity documents and selfie photographs to perform age and identity verification checks. All such providers are contractually required to process data only for the purpose of verification and to maintain appropriate security standards.
- Analytics and security providers: Service providers that assist with fraud detection, platform analytics, and cybersecurity may process technical and usage data on our behalf, under strict data processing agreements that prohibit independent use of the data.
- Legal and regulatory authorities: jitabaji may disclose personal data to law enforcement agencies, financial intelligence units, tax authorities, or other competent bodies where required to do so by a lawful order, legal obligation, or in connection with the investigation of fraud or money laundering.
Where personal data is transferred to or processed by a third party on our behalf, jitabaji ensures that appropriate data processing agreements are in place and that the third party implements security measures consistent with those applied by jitabaji itself.
jitabaji does not sell, rent, or commercially trade your personal data to any third party, under any circumstances. Data sharing occurs only with service partners who are contractually bound to strict confidentiality and security obligations.
Every third-party processor that handles jitabaji player data — from payment processors to KYC providers — operates under a formal data processing agreement that restricts use of the data to the specific purpose for which it was shared.
Data Security and Storage
jitabaji takes data security seriously and implements a range of technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security framework covers data in transit, data at rest, and data processed by our third-party service partners.
- SSL/TLS encryption: All data transmitted between your device and the jitabaji platform is encrypted using industry-standard SSL/TLS protocols. You can confirm this by the padlock icon in your browser's address bar.
- Data encryption at rest: Sensitive personal data, including identity documents and financial records, is stored in encrypted form. Encryption keys are managed separately from the encrypted data stores.
- Access controls: Access to personal data within jitabaji is restricted on a strict need-to-know basis. Staff members who do not require access to player data as part of their role are not granted such access. All access is logged and audited.
- Two-factor authentication: jitabaji supports and recommends two-step OTP verification for all player accounts. Internal staff systems require multi-factor authentication for access to data management tools.
- Penetration testing and security audits: Our platform undergoes regular security assessments to identify and address vulnerabilities before they can be exploited.
- Incident response: In the event of a data breach that affects player personal data, jitabaji will notify affected players and take all necessary remediation steps as promptly as practicable.
While jitabaji employs robust security measures, no online platform can guarantee absolute security. You are also responsible for maintaining the security of your account by using a strong, unique password and enabling OTP verification. If you believe your account security has been compromised, contact support at support@jitabaji (plain text only — not a clickable link) immediately.
All data exchanged between your browser and jitabaji is protected by SSL/TLS encryption. Look for the padlock icon in your browser to confirm your connection is secure at all times.
Player data is accessed only by authorised jitabaji personnel who require it to perform their specific role. All internal access to personal data is logged, monitored, and audited regularly.
Protect your jitabaji account with OTP-based two-step verification. This adds a critical second layer of security, ensuring that even if your password is compromised, your account remains protected.
Your Data Rights
As a player on jitabaji, you hold a number of rights in relation to the personal data we hold about you. jitabaji is committed to honouring these rights promptly and without unnecessary delay. To exercise any of the rights listed below, contact our support team at support@jitabaji (plain text — not a clickable link).
- Right of access: You have the right to request a copy of the personal data jitabaji holds about you, including the categories of data, the purposes for which it is processed, and the third parties with whom it has been shared.
- Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update most account details directly via your account profile page.
- Right to erasure: You may request that jitabaji delete your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent, or where the processing is unlawful. Note that certain data may be retained where we are required to do so by law (for example, financial transaction records for AML compliance).
- Right to restriction of processing: You may request that jitabaji restrict the processing of your personal data in certain circumstances — for example, while a complaint or accuracy dispute is being investigated.
- Right to data portability: Where processing is based on your consent or on a contract, you have the right to receive your personal data in a structured, machine-readable format and to transmit it to another service provider where technically feasible.
- Right to object: You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, though jitabaji may demonstrate that its legitimate grounds override your interests in certain cases.
- Right to withdraw consent: Where processing is based on your consent (for example, marketing emails), you may withdraw that consent at any time by updating your communication preferences or contacting support. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
jitabaji will respond to all data rights requests within a reasonable timeframe. We may ask you to verify your identity before processing a request to ensure that personal data is not disclosed to an unauthorised person. There is no fee for exercising your data rights in standard circumstances.
Data Retention
jitabaji retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, including to satisfy any legal, regulatory, accounting, or reporting requirements. When personal data is no longer required, it is securely deleted or anonymised.
| Data Category | Retention Period | Reason |
|---|---|---|
| Account and Identity Data | Duration of account + 5 years after closure | AML compliance, dispute resolution, legal obligations |
| Financial Transaction Records | 7 years from transaction date | Financial record-keeping and AML regulatory requirements |
| KYC Verification Documents | Duration of account + 5 years after closure | Age verification audit trail, regulatory compliance |
| Support Communications | 3 years from last interaction | Dispute resolution, quality assurance, complaint history |
| Technical and Usage Data | 12 months from collection | Security monitoring, fraud detection, platform analytics |
| Marketing Consent Records | Duration of consent + 2 years | Evidence of lawful basis for marketing communications |
Where jitabaji is required to retain data beyond the periods stated above due to an active legal proceeding, regulatory investigation, or dispute, the data will be retained until that matter is fully resolved. Players who have closed their accounts but whose data is retained for legal or regulatory reasons will be informed of this where practicable.
Anonymisation: Where possible, jitabaji will anonymise personal data rather than delete it when the retention period expires, allowing us to continue using the anonymised data for statistical and analytical purposes without it being attributable to any identifiable individual.
Policy Updates and Contact
jitabaji reserves the right to update or amend this Privacy Policy at any time. When material changes are made, we will notify registered players via email or via a prominent notice on the platform at least 7 days before the changes take effect. The "Last updated" date at the top of this page reflects the date of the most recent revision.
Your continued use of the jitabaji platform following the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with the updated Policy, you should discontinue use of the platform and contact support to request account closure.
If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact the jitabaji privacy team. Our support team is available 24 hours a day, 7 days a week, and will respond to privacy-related enquiries within 4–8 hours during Bangladesh Standard Time (UTC+6) business hours.
Email contact (plain text only — not a clickable link): support@jitabaji
Responsible Gaming and Data: If your data rights request is connected to a self-exclusion or responsible gaming concern, please refer to our Responsible Gaming page for full details of the tools and support available to you. Self-exclusion data is handled with particular care and is retained for the full duration of the exclusion period to prevent circumvention. For adults aged 18 and above only. 18+
Your Data Is Protected — Now Enjoy the Platform
With your privacy fully safeguarded under this Policy, explore everything jitabaji has to offer — live casino tables, cricket betting, slots, and instant bKash and Nagad payments. For adults aged 18 and above only.