Privacy Policy — How jidbazz Protects Your Data

Information We Collect

jidbazz collects personal data from you in several ways when you register, verify your account, use our platform, or contact our support team. We only collect information that is necessary for the legitimate purposes described in this Privacy Policy. We do not collect sensitive categories of data (such as racial or ethnic origin, political opinions, or health data) unless you voluntarily provide such information in a support communication.

The categories of personal data we collect from Bangladesh players are outlined in the table below. This includes data you provide directly, data generated automatically through your use of the platform, and data we receive from third-party payment providers such as bKash and Nagad.

• Where you provide us with the personal data of a third party (for example, a nominee's bank account), you confirm that you have obtained that person's consent to share their information with jidbazz and that you have informed them of this Privacy Policy.
• We do not knowingly collect personal data from individuals under the age of 18. If we become aware that personal data has been submitted by a minor, we will delete that data immediately and close the associated account.
• Providing false, inaccurate, or misleading personal data during registration or KYC is a breach of our Terms & Conditions and may result in permanent account closure and forfeiture of balances.

How We Use Your Data

jidbazz uses the personal data we collect for specific, defined purposes. We do not use your data for any purpose that is incompatible with the reason for which it was originally collected. Our lawful bases for processing personal data include the performance of our contract with you, compliance with legal obligations, our legitimate interests in operating a safe and fair platform, and — where required — your explicit consent.

Data Sharing & Third Parties

jidbazz does not sell, rent, or otherwise transfer your personal data to third parties for their own commercial purposes. We share your personal data only in the circumstances described below, and only to the extent strictly necessary for the stated purpose. All third-party service providers who receive your personal data are contractually required to process it in accordance with applicable data protection standards and exclusively for the purposes for which it was shared.

• Payment Processors: When you make a deposit or withdrawal, your financial data is shared with the relevant payment provider — bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, Visa, or Mastercard — to the extent required to execute the transaction. These providers are bound by their own published privacy and security policies.
• Game Studio Providers: To facilitate your gameplay, session data (including bet values and game outcomes) is shared with the relevant certified game studio providers such as Evolution Gaming, Pragmatic Play, Ezugi, NetEnt, Microgaming, and Spribe. These studios receive only the data necessary to deliver the game experience and settle results correctly.
• KYC & Identity Verification Partners: During the KYC process, your identity documents and personal details may be shared with a certified identity verification service provider for the purpose of authenticating your identity and confirming your eligibility to hold a jidbazz account.
• Fraud Prevention & Analytics Tools: Aggregated or pseudonymised technical data may be shared with platform analytics and fraud detection tools operating on our behalf. These tools do not receive data that directly identifies you by name.
• Legal & Regulatory Authorities: jidbazz may be required by law, court order, or regulatory instruction to disclose personal data to competent authorities. In such cases, we will disclose only the minimum data required to comply with the legal obligation, and we will notify affected players where we are legally permitted to do so.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of the jidbazz business, player data may be transferred to the acquiring entity as part of that transaction. Affected players will be notified via email in advance of any such transfer where practicably possible.

Cookies & Tracking Technologies

jidbazz uses cookies and similar tracking technologies (including browser local storage, session tokens, and pixel tags) to operate the platform effectively, remember your preferences, maintain your login session, and understand how players interact with different sections of the site. This section explains the types of cookies we use and how you can control them.

• jidbazz does not use third-party advertising cookies or cross-site tracking cookies that follow you to external websites.
• Session tokens stored in cookies are encrypted and signed. They cannot be decoded or replayed by an attacker who intercepts them in transit, as all connections to jidbazz are made over HTTPS.
• Local storage values used for game state preservation (e.g., auto-cashout settings in crash games like Aviator) are stored only on your device and are not transmitted to our servers in their raw form.

Data Security & Storage

jidbazz takes the security of your personal data seriously. We have implemented a comprehensive set of technical and organisational measures designed to protect your data against unauthorised access, loss, destruction, or alteration. No system can guarantee absolute security, but we continuously review and update our security practices to maintain a high standard of protection for all players.

• Passwords are stored in hashed form using a strong one-way hashing algorithm. jidbazz staff members cannot view your plaintext password. If you forget your password, a reset link will be sent to your registered email address.
• Financial data — including bKash numbers, Nagad account references, and bank account details — is stored in masked or tokenised form after the initial transaction. Full account numbers are not retained in our primary database beyond the point of transaction processing.
• Two-factor authentication (2FA) is available and strongly recommended for all jidbazz accounts. Enabling 2FA significantly reduces the risk of unauthorised account access even in the event of password compromise.
• In the event of a data security incident that poses a risk to your personal data, jidbazz will notify affected players via their registered email address within a reasonable timeframe. We will provide information about what data was involved, what steps we have taken, and what you should do to protect yourself.

Your Privacy Rights

As a player on jidbazz, you hold a number of rights in relation to your personal data. jidbazz is committed to honouring these rights promptly and transparently. To exercise any of the rights described below, please contact our support team at support@jidbazz with the subject line "Privacy Rights Request" and include your registered account username and email address for identity verification purposes.

• Right of Access: You have the right to request a copy of all personal data we hold about you. We will provide this in a structured, readable format within 30 days of a verified request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. Name corrections and address updates may require supporting documentation.
• Right to Erasure: You may request deletion of your personal data where we no longer have a legal or contractual basis to retain it. Note that certain data must be retained for a minimum period under anti-money laundering and financial compliance obligations, and cannot be erased during that retention period.
• Right to Data Portability: You may request an export of the personal data you have provided to us in a machine-readable format (e.g., CSV or JSON) so that you can transfer it to another service.
• Right to Restriction of Processing: In certain circumstances — for example, while you dispute the accuracy of data we hold — you may request that we restrict processing of your personal data to storage only, until the dispute is resolved.
• Right to Object: You have the right to object to processing of your personal data that is based on our legitimate interests, including the use of your data for platform analytics and gameplay pattern analysis.
• Right to Withdraw Consent: Where processing is based on your consent (for example, marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

Data Retention Policy

jidbazz retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and compliance obligations. Once data is no longer required, it is securely deleted or anonymised so that it can no longer be associated with any individual player. The retention periods below represent our standard data lifecycle schedule as of 1 January 2026.

• When an account is voluntarily closed by the player, jidbazz will initiate the deletion of non-mandatory data within 60 days of the closure being finalised. Data subject to the retention periods above will continue to be held for the applicable period.
• Anonymised, aggregated data derived from gameplay and platform usage statistics may be retained indefinitely for internal analytics purposes, as such data cannot be traced back to any individual player.
• In cases where an account has been closed due to suspected fraud, money laundering, or other compliance concerns, the associated personal data may be retained for an extended period beyond the standard schedule to support any ongoing investigation or legal proceedings.

Contact & Policy Updates

This Privacy Policy was last updated on 1 January 2026. jidbazz reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable laws, or operational requirements. When we make material changes to this Policy, we will notify active account holders via their registered email address and update the "Last updated" date at the top of this page. Continued use of jidbazz following notification of an update constitutes acceptance of the revised Privacy Policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way jidbazz handles your personal data, you are encouraged to contact our dedicated privacy support channel. Our team will respond in English within 5 business days. Please do not include your full National ID number, password, or complete payment account numbers in any email communication — our team does not need this information to handle privacy enquiries.

• This Privacy Policy applies exclusively to the jidbazz platform. It does not apply to the privacy practices of any third-party websites, payment providers, or game studios that may be linked from or integrated into the jidbazz platform. We recommend reviewing the privacy policies of those third parties separately.
• jidbazz does not have a dedicated physical Data Protection Officer (DPO) at this time. All privacy-related enquiries are handled directly by the jidbazz compliance team via the email address above.
• In the event that you are dissatisfied with our response to a privacy rights request or a complaint about our data practices, you may escalate your concern in writing to the jidbazz senior compliance team via the same email address, marking your message as an "Escalated Privacy Complaint".
• This Privacy Policy is written in English. In the event of any inconsistency between translated versions and the English original, the English version shall prevail in all respects.