Privacy Policy

1. Introduction

zitbaj operates an online casino and sports betting platform accessible at https://zitbaj.net, serving players across Bangladesh. This Privacy Policy describes how zitbaj ("we", "us", or "our") collects, processes, stores, and protects the personal data of users ("you" or "your") who access or use our platform.

We take our data protection obligations seriously. All personal data collected through the zitbaj platform is handled in accordance with applicable data protection principles, including purpose limitation, data minimisation, accuracy, storage limitation, and integrity and confidentiality.

This policy applies to all personal data we hold about you, regardless of how it was collected — whether through account registration, platform use, payment transactions, customer support interactions, or any other means of engagement with zitbaj.

2. Personal Data We Collect

When you register for and use a zitbaj account, we collect a range of personal data that is necessary to provide you with our services safely and responsibly. The categories of data we collect include:

2.1 Identity and Contact Data

• Full legal name as provided during account registration.
• Date of birth — required to verify that you are at least 21 years of age.
• Mobile phone number linked to your registered account, used for OTP verification and support communications.
• Email address, where provided, used for account notifications and support correspondence.
• Residential address, including district, division, and postal code, for identity verification purposes.
• National ID card, passport, or other government-issued identity document where submitted for verification.

2.2 Financial and Transaction Data

• Payment method details, including bKash wallet numbers, Nagad account numbers, Rocket account numbers, Upay IDs, and bank account references used to process deposits and withdrawals.
• Transaction history, including deposit amounts, withdrawal requests, bonus credits, and betting activity on your account.
• Account balance and wagering records for the purpose of maintaining accurate financial records and detecting irregularities.

2.3 Technical and Usage Data

• IP address and approximate geolocation data derived from it, used to detect suspicious access and verify jurisdictional eligibility.
• Device type, operating system, and browser information collected automatically when you access the platform.
• Session data including login timestamps, session duration, pages visited, games played, and betting patterns.
• Cookies and similar tracking technologies — see Section 9 for our full cookie policy.

2.4 Communications Data

• Records of your communications with the zitbaj support team via email, live chat, or any other support channel.
• Feedback, complaints, and dispute records submitted through our platform.

3. How We Use Your Personal Data

zitbaj processes your personal data only for legitimate, clearly defined purposes. We do not sell your personal data to third parties for marketing purposes. The primary purposes for which we use your data are:

• Account creation and management: To register your account, verify your identity, and manage your player profile throughout your relationship with zitbaj.
• Age and identity verification: To confirm that you meet the 21+ age requirement and to prevent underage gambling on the platform.
• Payment processing: To facilitate deposits and withdrawals via bKash, Nagad, Rocket, Upay, and supported bank channels, and to maintain accurate financial records.
• Platform delivery: To provide access to casino games, sports betting markets, crash games, fish shooting titles, and all other features of the zitbaj platform.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, money laundering, account takeovers, and other security threats.
• Legal and regulatory compliance: To comply with applicable laws, regulations, and requests from competent authorities.
• Responsible gaming: To monitor gaming patterns that may indicate problem gambling behaviour and to apply self-exclusion, deposit limits, or cooling-off measures where requested or required.
• Customer support: To respond to your queries, complaints, and support requests in a timely and effective manner.
• Platform improvement: To analyse usage data in aggregate form to improve platform performance, fix bugs, and enhance the user experience.
• Marketing communications: To send you promotional offers, bonus notifications, and seasonal promotions relevant to your account — only where you have opted in to receive such communications.

5. Data Retention

zitbaj retains your personal data for as long as is necessary to fulfil the purposes set out in this Privacy Policy, unless a longer retention period is required or permitted by law. The general retention principles we apply are:

• Active account data: Retained for the full duration of your account relationship with zitbaj.
• Transaction and financial records: Retained for a minimum of five years from the date of the relevant transaction, in accordance with standard financial record-keeping requirements.
• Identity verification documents: Retained for the period of your account relationship and for up to five years thereafter to support anti-money laundering and fraud prevention obligations.
• Support communications: Retained for up to three years from the date of the interaction, unless a longer period is required for an ongoing dispute or investigation.
• Marketing preferences and opt-in records: Retained for the duration of your account relationship and for up to two years following account closure.

When personal data is no longer required for any of the purposes described above, we securely delete or anonymise it so that it can no longer be linked back to you as an individual.

6. Your Data Rights

As a user of the zitbaj platform, you have the following rights with respect to your personal data. To exercise any of these rights, please contact us at [email protected] with the subject line "Data Rights Request" and your registered username.

6.1 Right of Access

You have the right to request a copy of the personal data we hold about you, along with information about how it is being used. We will respond to verified access requests within a reasonable timeframe.

6.2 Right of Rectification

If any of the personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it. You can also update certain account details directly through your account settings.

6.3 Right of Erasure

You may request that we delete your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose it was collected, or where you have withdrawn your consent. Please note that this right is subject to legal and regulatory retention obligations; we cannot delete data that we are required by law to retain.

6.4 Right to Restrict Processing

You have the right to request that we restrict the processing of your personal data in certain circumstances, such as while a dispute about accuracy is being resolved or while an objection to processing is being considered.

6.5 Right to Object to Marketing

You have the right to object to us processing your personal data for direct marketing purposes at any time. Upon receipt of a valid objection, we will cease sending you marketing communications without delay.

6.6 Right to Data Portability

Where technically feasible and where processing is based on your consent, you may request that we provide your personal data in a structured, commonly used, and machine-readable format so that it can be transferred to another service provider.

7. Data Security

zitbaj implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. Our security practices include:

• SSL/TLS encryption for all data transmitted between your device and the zitbaj platform.
• Encrypted storage for sensitive account data, including password hashing using industry-standard algorithms.
• Access controls that restrict access to personal data to only those employees and contractors who require it to perform their job functions.
• Regular security assessments and monitoring of platform infrastructure for vulnerabilities and suspicious activity.
• Two-factor authentication options available to users to add an extra layer of security to their zitbaj accounts.
• Secure payment processing — zitbaj does not store full payment credentials; payment data flows directly through the relevant payment gateway (bKash, Nagad, Rocket, etc.).

While we take every reasonable precaution to protect your data, no online platform can guarantee absolute security. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, we will notify affected users without undue delay.

8. Minors and Age Restriction

The zitbaj platform is strictly intended for adults aged 21 years and above. We do not knowingly collect or process personal data from individuals under the age of 21. If we become aware that a user under the age of 21 has registered an account or provided personal data, we will immediately suspend that account, delete the associated data, and void any associated balances or winnings.

If you are a parent or guardian and believe that a minor has registered on zitbaj without your knowledge, please contact us immediately at [email protected] so that we can take prompt action.

9. Cookies and Tracking Technologies

zitbaj uses cookies and similar tracking technologies to operate and improve the platform. Cookies are small text files stored on your device that help us recognise you across sessions, maintain your login state, and understand how users interact with our platform.

9.1 Types of Cookies We Use

• Essential cookies: Required for core platform functions such as session management, login persistence, and security token handling. These cannot be disabled without affecting platform functionality.
• Analytics cookies: Used in aggregate to understand traffic patterns, popular games, and user flows, helping us improve the platform. No personally identifiable information is linked to analytics data.
• Preference cookies: Store your display and language preferences so you do not need to re-enter them on each visit.
• Marketing cookies: Used only where you have given explicit consent, to personalise promotional messages and track the effectiveness of our campaigns. You may withdraw consent at any time.

9.2 Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to block or delete cookies; however, blocking essential cookies may prevent certain features of the zitbaj platform from functioning correctly. Detailed instructions for managing cookies are available in your browser's help documentation.

10. Changes to This Privacy Policy

zitbaj reserves the right to update or modify this Privacy Policy at any time. When we make material changes, we will update the effective date at the top of this page and, where reasonably practicable, notify registered account holders via their registered contact details or a platform notification.

We encourage you to review this Privacy Policy periodically to stay informed of how we protect your data. Your continued use of the zitbaj platform after any changes take effect constitutes your acceptance of the updated policy.

The current version of this Privacy Policy supersedes all prior versions. If you have any questions about a previous version or about any changes that have been made, please contact us at [email protected].

11. Contact Us About Privacy

If you have any questions, concerns, or requests relating to this Privacy Policy or the way zitbaj handles your personal data, please reach out to our support team. We are available 24 hours a day, 7 days a week, including all Bangladeshi public holidays.

Contact email: [email protected] (plain text — not a clickable link). Please include "Privacy Enquiry" in the subject line along with your registered username so that we can locate your account quickly and respond efficiently.

We aim to acknowledge all privacy-related requests within 72 hours and to resolve them fully within 30 days of receipt, depending on complexity.