Privacy Policy — How jik baj Collects, Uses, and Protects Your Personal Data
Your privacy matters to us. This Privacy Policy explains exactly what personal information jik baj collects from players in Bangladesh, why we collect it, how it is stored and protected, and the rights you have over your own data. We are committed to handling your information with transparency and care.
End-to-End Encryption
All data transmitted between your device and the jik baj platform is protected by 256-bit SSL encryption — the same standard used by major banks and financial institutions operating in Bangladesh.
No Data Selling
jik baj does not sell, rent, or trade your personal information to third-party marketers under any circumstances. Your data is used solely to operate your account and deliver a safe, personalised gaming experience.
Minimal Data Collection
We collect only the personal data that is strictly necessary to register your account, verify your identity, process transactions, and comply with our legal obligations. We do not collect data speculatively or in excess of these purposes.
Your Right to Erasure
Subject to our legal retention obligations, you have the right to request that jik baj deletes your personal data. Verified erasure requests submitted by email are processed within 30 days of confirmation of your identity.
Transparent Cookie Use
jik baj uses only essential, functional, and analytics cookies. We do not use third-party advertising cookies that track your browsing activity across other websites. You can review full cookie details in Section 4 of this policy.
Direct Privacy Contact
If you have any concern about how jik baj handles your personal data, you can contact our privacy support team directly at [email protected]. We aim to respond to all data-related queries within 2–6 hours during BST business hours.
Information We Collect
jik baj collects personal information from players at various stages of the account lifecycle — from initial registration through to ongoing account use and eventual account closure. The categories of personal data we collect, along with the specific data points in each category, are described below.
Registration Data
When you create a jik baj account, you are required to provide the following information:
- Full legal name as it appears on your government-issued identification document.
- Date of birth — used to verify that you meet the 18+ age requirement for gambling services.
- Mobile phone number registered in Bangladesh — used for account security notifications and two-factor authentication where enabled.
- Email address — used for account communications, password recovery, and transactional notifications.
- Mobile wallet number (bKash, Nagad, Rocket, or Upay) or bank account details, where provided at registration as your preferred payment method.
- A username or display name chosen by you at the time of registration.
Identity Verification (KYC) Data
Before your first withdrawal is processed, or if your account is flagged by our risk management systems, jik baj will request documents to verify your identity. This KYC data includes:
- A copy or photograph of a government-issued photo ID — National ID Card (NID), valid passport, or Bangladesh driving licence.
- Proof of ownership of the payment method used for deposits — such as a screenshot of your bKash or Nagad wallet registration screen, or a bank statement showing your name and account number.
- A selfie or live photograph taken at the time of identity confirmation, where requested by our verification team.
Transaction Data
jik baj records details of every financial transaction associated with your account, including:
- Deposit amounts, timestamps, payment method used, and transaction reference numbers.
- Withdrawal amounts, timestamps, destination payment method, and approval status.
- Bonus credits, wagering activity linked to bonus completion, and bonus expiry events.
- Account balance history and wallet adjustments made by the platform in accordance with these terms.
Gameplay and Betting Data
As you use the jik baj platform, we automatically record data about your gameplay activity, including:
- Games played, bet amounts per round or event, game outcomes, and session durations.
- Sports markets browsed, bets placed, odds accepted, and settlement outcomes for cricket and other sports betting markets.
- Responsible gaming limit settings you apply to your account, including deposit caps, session time limits, and self-exclusion periods.
Technical and Device Data
When you access jik baj via a web browser or mobile device, our platform automatically collects certain technical information:
- IP address — used for geolocation purposes to verify that you are not accessing the platform from a Restricted Territory, and for fraud and security monitoring.
- Device type, operating system version, and browser type and version.
- Referring URL (the web address from which you navigated to jik baj, if applicable).
- Session timestamps including login time, logout time, and total active session duration.
- Crash logs and error reports generated by the platform during your session, used solely for technical debugging and platform improvement.
How We Use Your Data
Every piece of personal data that jik baj collects is used for a specific, documented purpose. We do not process your data in ways that are incompatible with the purposes for which it was originally collected. The following table summarises our primary data processing activities and the lawful basis for each.
| Processing Purpose | Data Used | Lawful Basis |
|---|---|---|
| Account creation and management | Registration data, email, mobile number | Contract performance |
| Identity verification (KYC) | ID documents, payment proof, selfie | Legal obligation / contract |
| Processing deposits and withdrawals | Transaction data, payment method details | Contract performance |
| Fraud prevention and security monitoring | IP address, device data, transaction patterns | Legitimate interest |
| Responsible gaming enforcement | Gameplay data, deposit history, limit settings | Legal obligation / legitimate interest |
| Customer support communications | Email, chat logs, account history | Contract performance |
| Platform improvement and analytics | Technical data, anonymised gameplay data | Legitimate interest |
| Promotional communications (opt-in only) | Email address, player preferences | Consent |
Marketing Communications
jik baj will only send you promotional emails, SMS messages, or in-platform notifications about bonuses, seasonal offers, and new features if you have explicitly opted in to receive such communications during registration or via your account settings. You may withdraw your consent to marketing communications at any time by updating your notification preferences within your account settings or by emailing [email protected] with a written opt-out request. Transactional and security-related communications — such as deposit confirmations, withdrawal notifications, and login alerts — are not subject to opt-out as they are necessary for the operation of your account.
Automated Decision-Making
jik baj uses automated systems for certain operational decisions, including fraud scoring, responsible gaming risk flagging, and bonus eligibility checks. Where an automated decision has a significant effect on your account — such as an account suspension triggered by a fraud risk score — you have the right to request that a member of our compliance team manually reviews the decision. To request a manual review, contact [email protected] with the subject line "Manual Review Request" and a description of the affected account action.
Data Sharing & Third Parties
jik baj does not sell your personal data to any third party. We share your data only with a limited set of trusted partners and service providers where it is strictly necessary to operate the platform, process transactions, and comply with legal obligations. All third parties with whom we share data are bound by contractual data processing agreements that restrict them from using your information for any purpose other than the one for which it was shared.
Categories of Third Parties
- Payment Processing Partners: Mobile wallet operators including bKash, Nagad, Rocket, and Upay, and Bangladeshi banking partners such as BRAC Bank, City Bank, Islami Bank, and Sonali Bank, receive transaction-level data necessary to process deposits and withdrawals. These partners process your payment data under their own published privacy policies and applicable Bangladesh Bank regulations.
- Game Software Providers: Third-party game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi operate their game engines on the jik baj platform. When you play a game powered by one of these studios, your player session data (including anonymised player ID, bet amounts, and game outcomes) is transmitted to the relevant game server. These providers are contractually prohibited from using this data for any purpose outside of game operation and technical audit.
- Identity Verification Services: jik baj may use a third-party KYC verification platform to assist with the review of identity documents submitted by players. Any identity document data shared with a KYC partner is subject to strict data handling obligations and is not retained by the verification partner beyond the period required to complete the check.
- Analytics Providers: jik baj uses server-side analytics tools to understand platform usage patterns. Where third-party analytics tools are used, data is anonymised or pseudonymised before transmission, so that individual players cannot be identified from analytics data.
- Legal and Regulatory Authorities: jik baj will disclose personal data to law enforcement, regulatory bodies, or other government authorities where required to do so by applicable law, valid legal process, or in response to a court order. We will notify affected players of such disclosures where legally permitted to do so.
Data Security & Storage
jik baj takes the security of your personal data seriously. We implement a layered set of technical and organisational security measures designed to protect your information against unauthorised access, accidental loss, disclosure, or destruction.
Technical Security Measures
- All data transmitted between your device and jik baj servers is encrypted using TLS 1.3 with 256-bit AES encryption — the current industry standard for secure web communications.
- Account passwords are stored as salted cryptographic hashes. jik baj staff members cannot read your password and will never ask you to share it.
- Access to production systems and player data is restricted to authorised personnel only, using role-based access controls and multi-factor authentication for all administrative logins.
- Our platform infrastructure is hosted on servers protected by enterprise-grade firewalls, intrusion detection systems, and regular independent penetration testing.
- Sensitive documents submitted during KYC verification are stored in an encrypted document vault with access logs maintained for audit purposes.
Organisational Security Measures
- All staff members with access to player data are required to complete data protection training and are bound by confidentiality obligations as a condition of their employment or contract.
- jik baj maintains an internal data breach response procedure. In the event of a confirmed data breach that poses a risk to player rights and freedoms, affected players will be notified without undue delay and no later than 72 hours after the breach is confirmed.
- Third-party vendors with access to any player data are subject to security assessments before engagement and are contractually required to maintain security standards equivalent to those applied by jik baj internally.
Your Rights Over Your Data
As a player on the jik baj platform, you have a set of rights over the personal data we hold about you. We are committed to honouring these rights promptly and without unnecessary barriers. All rights requests should be submitted by emailing [email protected] with the subject line "Data Rights Request" and a clear description of the right you wish to exercise.
Right of Access
You have the right to request a copy of all personal data that jik baj holds about you. Upon receipt of a verified access request, we will provide a structured, machine-readable export of your account data — including registration details, transaction history, gameplay records, and any KYC documents on file — within 30 days.
Right to Rectification
If any of the personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Please note that corrections to identity-verified fields (such as your legal name or date of birth) may require re-submission of KYC documentation to ensure that account records remain consistent with your verified identity.
Right to Erasure
You have the right to request that jik baj erases your personal data. This right applies where the data is no longer necessary for the purpose for which it was collected, where you withdraw consent for consent-based processing, or where you object to processing based on legitimate interest and jik baj has no overriding grounds to continue processing. Please note that this right is subject to our legal data retention obligations — see Section 7 for details on the specific data categories and retention periods that apply.
Right to Restriction of Processing
You have the right to request that jik baj restricts the processing of your personal data in certain circumstances — for example, while you contest the accuracy of data we hold, or while an erasure request is under review. During a processing restriction, jik baj will retain your data but will cease active processing beyond what is required to maintain the restriction itself.
Right to Object to Marketing
You have the unconditional right to object to your personal data being used for direct marketing purposes at any time. Objections to marketing processing take effect immediately upon receipt and do not require any justification. Update your preferences in your account settings or notify us at [email protected].
Data Retention Policy
jik baj retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or for as long as required by applicable legal, regulatory, or operational obligations. The following retention periods apply to the primary categories of player data:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account registration data | Duration of account + 5 years after closure | Legal and compliance obligations |
| KYC identity documents | Duration of account + 5 years after closure | Anti-money laundering regulatory requirements |
| Transaction and payment records | 7 years from the date of each transaction | Financial record-keeping obligations |
| Gameplay and betting history | 3 years from each session date | Responsible gaming monitoring and dispute resolution |
| Customer support communications | 3 years from the date of the last interaction | Quality assurance and dispute evidence |
| Marketing consent records | Until consent is withdrawn + 1 year | Evidence of lawful marketing basis |
| Technical / device logs | 90 days from session date | Security monitoring and fraud detection |
When a retention period expires, personal data is either securely deleted from our systems or irreversibly anonymised so that it can no longer be associated with any individual player. Anonymised aggregated data may be retained indefinitely for statistical and platform improvement purposes without restriction, as it no longer constitutes personal data.
If you request account closure, your account is deactivated immediately. The personal data associated with your account enters the applicable retention period at the point of account closure and will be deleted or anonymised upon expiry of that period. You will not receive any marketing communications after account closure regardless of the retention period.
Updates to This Privacy Policy
jik baj reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, new legal obligations, or improvements to our platform. The effective date at the top of this document will be updated whenever a new version is published.
When material changes are made to this Privacy Policy — meaning changes that affect how we collect, use, or share your personal data in a way that is meaningfully different from what was previously described — jik baj will notify registered players by email to the address on file and via an in-platform notification at the next login. We encourage all players to review this Privacy Policy periodically, even between material change notifications, to stay informed about how their data is being handled.
Continued use of the jik baj platform following the publication of an updated Privacy Policy constitutes acceptance of the revised terms. If you do not agree with any update to this Privacy Policy, you should stop using the platform and request account closure before the updated policy takes effect.
Governing Language
This Privacy Policy is written and published in English. English is the governing language of this document. In the event of any dispute regarding the interpretation of this Privacy Policy, the English-language version shall prevail.
Contact for Privacy Queries
If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data jik baj holds about you, please contact our support team. Our privacy contact email is [email protected] (plain text — not a clickable link). Response time is within 2–6 hours during Bangladesh Standard Time (BST, UTC+6) business hours. Live chat and WhatsApp support are also available 24/7 for urgent data security concerns.
Ready to Play? Your Data Is Safe With Us
jik baj protects your personal data with industry-standard encryption and a strict no-data-selling policy. Explore our full range of games and betting markets — all in BDT with instant bKash and Nagad payments. 18+ only.