zidbaj Privacy
Policy
Your privacy matters to us. This Privacy Policy explains in plain, formal English exactly what personal data zidbaj collects from players in Bangladesh, how that data is used, who it may be shared with, and what rights you hold over your own information. We encourage every registered player to read this document in full.
SSL Encryption
All data transmitted between your browser and the zidbaj platform is protected by industry-standard SSL encryption. Your personal details, payment credentials, and account activity are never sent over unencrypted connections.
No Unnecessary Data
zidbaj collects only the personal information strictly necessary to operate your account, process transactions, verify your identity, and comply with applicable legal obligations. We do not sell personal data to data brokers or advertisers.
Your Rights Protected
Registered zidbaj players have the right to access, correct, port, restrict the processing of, and in some circumstances delete their personal data. All such requests can be submitted directly to our support team at [email protected].
Transparent Cookie Use
zidbaj uses cookies and similar tracking technologies solely to maintain session integrity, remember your preferences, and analyse aggregate platform usage. You can manage your cookie preferences at any time via your browser settings.
Secure Payment Data
Payment information processed through bKash, Nagad, Rocket, Upay, and partner banks is handled directly by those providers' certified secure systems. zidbaj does not store raw payment credentials on its own servers.
Opt-Out of Marketing
You can opt out of zidbaj marketing communications at any time — either by clicking the unsubscribe link included in any promotional email or by updating your notification preferences directly within your zidbaj account settings.
Section 1
Information We Collect
When you register for and use your zidbaj account, we collect a range of personal information. This data falls into three broad categories: information you provide directly, information generated automatically through your use of the platform, and information received from third-party verification and payment service providers.
Information you provide directly:
- Full legal name and date of birth (required for account registration and age verification)
- Residential address, city, and postal code (required for identity verification)
- Email address and mobile phone number registered in Bangladesh
- Government-issued identification document details (National ID card, passport, or driving licence number — collected during KYC verification)
- Payment method details, including the mobile banking account (bKash, Nagad, Rocket, or Upay) or bank account number linked to your zidbaj wallet
- Username, encrypted password, and account security preferences
- Communications you send to our support team, including the content of chat logs and emails
Information generated automatically:
- IP address and approximate geolocation derived from it
- Device type, operating system, browser type and version
- Pages visited on the zidbaj platform, time spent on each page, and navigation path through the site
- Betting and gaming activity records, including markets selected, stake amounts, game sessions initiated, and outcomes
- Login timestamps, session durations, and logout events
- Cookie identifiers and similar tracking technology data (see Section 5 for full details)
Information received from third parties:
- Identity verification results from KYC service providers, including document authenticity scores and match confidence ratings
- Transaction confirmation records from bKash, Nagad, Rocket, Upay, and banking partners — these confirm that a payment was made and its amount, but do not include raw account credentials
- Fraud risk signals from third-party fraud detection services where these are used to protect the integrity of the platform
Section 2
How We Use Your Data
zidbaj uses the personal data it collects for the following purposes. We do not use your data for any purpose that is incompatible with the purposes listed here without first obtaining your consent or establishing a separate lawful basis for processing.
| Purpose | Data Used |
|---|---|
| Account creation and management | Name, date of birth, email, phone number, password |
| Identity and age verification (KYC) | Government ID details, address, date of birth, document scans |
| Processing deposits and withdrawals | Payment method details, transaction history, bank/mobile banking account references |
| Providing betting and gaming services | Account balance, betting history, session data, game activity |
| Fraud prevention and security monitoring | IP address, device fingerprint, login history, betting patterns |
| Responsible gaming monitoring | Betting frequency, deposit amounts, session duration, self-exclusion status |
| Customer support | Account details, communication history, support ticket content |
| Marketing communications (where consented) | Email address, phone number, account preferences, game history for personalisation |
| Platform analytics and improvement | Anonymised or aggregated usage data, navigation patterns, device data |
| Legal and regulatory compliance | Full account record, transaction history, identity verification documents |
Where zidbaj sends you marketing communications — such as promotional emails about BPL season offers, Eid bonus campaigns, or new game launches — this is done only where you have opted in to receive such communications or where we have a legitimate interest in informing you about updates to services you already use. You may withdraw consent for marketing communications at any time as described in Section 7 of this document.
Section 3
Legal Basis for Processing
Every instance of personal data processing carried out by zidbaj rests on one or more of the following lawful bases:
- Performance of a contract: The majority of data processing on the zidbaj platform is necessary to perform the contract between zidbaj and the player — that is, to provide the betting and gaming services you have registered to use. This includes account management, payment processing, and delivering game outcomes.
- Legal obligation: Certain processing activities are required by applicable law or regulatory obligation. This includes identity verification under anti-money laundering (AML) requirements, retention of financial transaction records, and reporting obligations to relevant authorities where required.
- Legitimate interests: Some processing is carried out on the basis of zidbaj's legitimate interests, provided those interests are not overridden by your rights and interests. This includes fraud detection, platform security monitoring, responsible gaming analytics, and sending service-related communications to existing players.
- Consent: Where processing is not covered by the above bases — for example, sending you personalised marketing emails about new promotions, or using non-essential cookies — zidbaj will ask for your explicit consent. You may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.
Section 4
Data Sharing & Third Parties
zidbaj does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We share personal data only in the specific circumstances described below, and only to the extent necessary to fulfil the relevant purpose.
Service providers and data processors: We engage trusted third-party companies to perform specific functions on our behalf. These include KYC identity verification providers, payment processing partners (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, and other partner institutions), fraud detection service providers, IT infrastructure and cloud hosting providers, and customer support software platforms. All such third parties are contractually bound to process your data only on zidbaj's documented instructions and to maintain appropriate technical and organisational security measures.
Game software providers: The casino games and sports data feeds available on the zidbaj platform are powered by internationally recognised software studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and others. These providers may receive session-level data necessary to deliver game functionality — such as a session token — but they do not receive your full personal profile or payment account details.
Legal and regulatory authorities: zidbaj may be required to disclose personal data to government bodies, law enforcement agencies, or other regulatory authorities in response to a lawful request, court order, or where disclosure is necessary to comply with applicable law. In such circumstances, zidbaj will disclose only the minimum amount of data required to satisfy the legal obligation.
Business transfers: In the event that zidbaj undergoes a merger, acquisition, or sale of all or substantially all of its assets, personal data held about registered players may form part of the transferred assets. Any successor entity would be required to honour the commitments made in this Privacy Policy or provide advance notice of material changes.
Section 5
Cookies & Tracking Technologies
zidbaj uses cookies and similar technologies — including local storage objects and session tokens — to operate the platform effectively and deliver a consistent, personalised experience to players across devices. The following categories of cookies are in use on the zidbaj platform:
| Cookie Type | Purpose | Consent Required |
|---|---|---|
| Strictly necessary | Maintain login session, prevent CSRF attacks, load balance server requests, remember language preference | No — essential for platform operation |
| Functional | Remember your preferred sports markets, game display settings, and notification preferences | No — tied to service delivery |
| Analytics | Measure aggregate page traffic, identify popular features, detect broken navigation paths — using anonymised data only | Yes — opt-in required |
| Marketing / personalisation | Deliver relevant promotional content based on your betting and gaming history on zidbaj | Yes — opt-in required |
You can control which non-essential cookies are active on your device by adjusting your browser's cookie settings. Most modern browsers allow you to block all third-party cookies, delete existing cookies, or receive a notification before a cookie is stored. Please note that disabling strictly necessary cookies will impair your ability to use the zidbaj platform, as session management depends on them.
zidbaj does not use cross-site tracking technologies to follow your activity on websites other than zidbaj.com. Analytics data collected on our platform is used solely to improve the zidbaj experience and is not shared with advertising networks.
Section 6
Data Retention
zidbaj retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or for as long as required by applicable law or legitimate business need. The following general retention periods apply:
- Active account data: Retained for the full duration of your account's active status, plus a minimum period of 5 years following permanent account closure. This period is determined primarily by anti-money laundering record-keeping requirements.
- Transaction records: All deposit, withdrawal, and wagering transaction records are retained for a minimum of 5 years from the date of each transaction, in accordance with applicable financial record-keeping standards.
- KYC verification documents: Copies of identity documents submitted for KYC verification are retained for a minimum of 5 years from the date of account closure.
- Customer support communications: Email correspondence and live chat transcripts are retained for 3 years from the date of the last communication in a given support thread.
- Marketing preferences and consent records: Records of your marketing opt-in or opt-out status are retained for as long as your account is active and for 3 years thereafter, to demonstrate compliance with consent obligations.
- Website analytics data: Anonymised aggregate analytics data is retained indefinitely, as it no longer constitutes personal data once fully anonymised. Individual-level session data is retained for 12 months.
When personal data is no longer required and no legal basis exists for continued retention, zidbaj securely deletes or anonymises that data using industry-standard data destruction procedures. You may request earlier deletion of your data in accordance with the rights described in Section 7 below, subject to any overriding legal retention obligations.
Section 7
Your Privacy Rights
As a registered zidbaj player, you hold a number of rights in relation to the personal data we hold about you. These rights can be exercised free of charge by submitting a written request to [email protected]. We will respond to all valid requests within 30 calendar days. In complex cases, this period may be extended by a further 30 days, and we will notify you if such an extension is necessary.
- Right of access: You have the right to request a copy of all personal data held about you by zidbaj, together with information about how that data is used. This is commonly referred to as a Subject Access Request (SAR).
- Right to rectification: If any personal data held about you is inaccurate or incomplete, you have the right to request that it be corrected. Some data — such as your registered name or date of birth — can only be amended following submission of a supporting identity document to confirm the correct information.
- Right to erasure: In certain circumstances, you have the right to request that zidbaj delete the personal data held about you. This right is not absolute — it does not apply where retention is required by law (for example, AML record-keeping obligations) or where the data is necessary for the establishment, exercise, or defence of legal claims.
- Right to restrict processing: You may request that zidbaj restrict the processing of your personal data in specific circumstances — for example, while the accuracy of data you have disputed is being verified.
- Right to data portability: Where processing is based on your consent or the performance of a contract, and where processing is carried out by automated means, you have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format.
- Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal. To opt out of marketing emails, use the unsubscribe link in any email we send or contact [email protected].
- Right to object: You have the right to object to processing carried out on the basis of legitimate interests. On receipt of such an objection, zidbaj will cease processing unless it can demonstrate compelling legitimate grounds that override your interests.
Section 8
Data Security Measures
zidbaj takes the security of your personal data seriously and has implemented a comprehensive set of technical and organisational measures designed to protect your information against unauthorised access, accidental loss, alteration, or disclosure. These measures include, but are not limited to:
- TLS/SSL encryption: All data transmitted between your browser or app and the zidbaj servers is encrypted using Transport Layer Security (TLS). This ensures that your login credentials, personal details, and payment information cannot be intercepted in transit.
- Encrypted data storage: Sensitive data fields — including identity document references and payment account details — are stored in encrypted form within zidbaj's database infrastructure. Encryption keys are managed separately from the data they protect.
- Password hashing: Account passwords are never stored in plain text. zidbaj uses a modern, salted cryptographic hashing algorithm to store passwords in a form that cannot be reversed to reveal the original value.
- Access controls: Access to personal data within zidbaj's internal systems is restricted on a strict need-to-know basis. Staff members are granted the minimum level of access required to perform their role, and all access events are logged for audit purposes.
- Fraud and anomaly monitoring: zidbaj operates continuous automated monitoring for unusual login patterns, device changes, and transaction anomalies that may indicate unauthorised account access. Suspicious events trigger automatic alerts and may result in temporary account security holds.
- Third-party security assessments: zidbaj engages independent security professionals to conduct periodic assessments of its platform's technical security posture, including penetration testing of key account and payment flows.
Despite these measures, no online platform can guarantee absolute security. In the unlikely event of a personal data breach that poses a risk to your rights and freedoms, zidbaj will notify affected players without undue delay, and will take immediate steps to contain the breach and prevent its recurrence.
Players also have a role in keeping their accounts secure. zidbaj strongly recommends using a unique password not reused from other websites, enabling two-factor authentication where available, and never sharing login credentials with any third party — including friends, family members, or individuals claiming to represent zidbaj support.
Section 9
Contact & Data Protection Officer
If you have any questions about this Privacy Policy, wish to exercise any of your privacy rights, or have a concern about how zidbaj handles your personal data, please contact our support team in the first instance using the details below. All privacy-related correspondence is triaged by our data protection function and handled with priority.
Email: [email protected]
Subject line (recommended): Privacy Policy Query / Privacy Rights Request / Data Breach Report
Support hours: 24 hours a day, 7 days a week, Bangladesh Standard Time (BST, UTC+6)
zidbaj is committed to resolving privacy concerns directly and promptly. We will acknowledge all privacy-related emails within 48 hours and aim to provide a substantive response within 30 calendar days. For complex requests — such as Subject Access Requests involving large volumes of data — we will communicate a realistic resolution timeline within the initial acknowledgement.
We appreciate the trust you place in zidbaj when you share your personal information with us. Protecting that information is not just a legal obligation — it is a core part of how we build and maintain a platform that players across Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, and Mymensingh can rely on with confidence.
Continue Exploring zidbaj
Now that you are familiar with how zidbaj protects your data, explore our full range of cricket betting, live casino, and slot games — all available securely in BDT via bKash and Nagad. Players must be 18 years or older.