joabaji Privacy
Policy

joabaji collects personal data from players and prospective players through several channels, including account registration, identity verification (KYC), payment processing, gameplay activity, customer support interactions , and platform usage monitoring. The categories of personal data we collect are set out in the table below.

joabaji does not knowingly collect sensitive personal data beyond what is strictly necessary for identity verification and legal compliance. We do not collect data relating to racial or ethnic origin, political opinions, religious beliefs, trade union membership, biometric data, or health data, except where such information is voluntarily and explicitly provided by a player as part of a responsible gaming self-assessment or support request, in which case it is treated with the highest level of confidentiality.

joabaji uses the personal data it collects for the following defined purposes. Each purpose is linked to a legitimate reason for processing, which is described in detail in Section 3 (Legal Basis for Processing) of this Privacy Policy.

• Account creation and management: To register your joabaji player account, verify your identity, maintain your account profile, process your login sessions, and administer your account settings including deposit limits and responsible gaming preferences.
• Payment processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, Mastercard, and other supported payment methods. Financial data is processed in Bangladeshi Taka (৳ BDT) and is shared with payment processors only to the extent necessary to complete each transaction.
• Identity verification (KYC): To fulfil our obligations under applicable anti-money laundering (AML) and know-your-customer (KYC) requirements, including verifying the age, identity, and source of funds of registered players before processing withdrawals above threshold amounts.
• Fraud prevention and platform security: To monitor account activity for indicators of fraud, unauthorised access, account takeover attempts, bonus abuse, money laundering, and other prohibited conduct as defined in the joabaji Terms & Conditions.
• Personalised platform experience: To present you with game recommendations, relevant promotional offers, and platform content based on your gameplay preferences and account history. This personalisation is based on first-party usage data only and does not involve the sale of your data to advertisers.
• Customer support: To respond to your enquiries, resolve disputes, process complaints, and maintain a record of your interactions with our support team for quality assurance and training purposes.
• Legal and regulatory compliance: To comply with applicable laws and regulatory requirements, including responding to lawful requests from law enforcement authorities, regulators, or courts of competent jurisdiction.
• Responsible gaming: To monitor gameplay patterns for indicators of problem gambling, enforce self-exclusion and deposit limit settings, and provide appropriate support and intervention resources where required.
• Platform analytics and improvement: To analyse aggregate usage data, identify performance issues, test new features, and improve the overall quality, security, and reliability of the joabaji platform.

joabaji processes personal data on the basis of one or more of the following legal grounds. Where processing is based on consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

• Contractual necessity: Processing is necessary for the performance of the contract between joabaji and the registered player — specifically the Terms & Conditions governing use of the joabaji platform. This covers account registration, payment processing, gameplay facilitation, and customer support.
• Legal obligation: Processing is required to comply with applicable legal obligations, including AML/KYC requirements, age verification obligations, and responding to lawful requests from law enforcement or regulatory bodies.
• Legitimate interests: Processing is carried out in pursuit of joabaji's legitimate interests in operating a secure, fair, and commercially viable online gaming platform. This includes fraud detection, security monitoring, analytics, and platform improvement, where those interests are not overridden by the player's rights and interests.
• Consent: Processing is based on the player's freely given, specific, informed, and unambiguous consent. This applies to optional personalisation features, marketing communications, and the use of non-essential cookies. Consent can be withdrawn at any time.

joabaji does not sell, rent, or otherwise transfer personal data to third parties for their own commercial purposes. Personal data is shared with third parties only in the following defined circumstances, and only to the minimum extent necessary for the relevant purpose:

• Payment processing partners: bKash, Nagad, Rocket, Upay, Visa, Mastercard, and other payment service providers receive the financial and identity data necessary to process your deposit and withdrawal transactions. These providers operate under their own privacy policies and are subject to applicable financial regulation.
• Game technology providers: Game studios and technology providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and others may receive anonymised or pseudonymised technical session data necessary for game delivery, RNG certification, and live casino streaming. These providers do not receive identifiable personal data beyond what is technically required for game session management.
• Identity verification providers: Third-party KYC and identity verification service providers process identity documents and biometric comparison data submitted during account verification. All such providers are bound by contractual data processing obligations consistent with this Privacy Policy.
• Analytics and fraud prevention services: joabaji uses industry-standard analytics and fraud detection tools. Data shared with these services is processed on a pseudonymised basis where technically possible, and is used solely for the purposes of platform analytics, fraud detection, and security monitoring.
• Legal and regulatory authorities: joabaji will disclose personal data to law enforcement agencies, regulatory bodies, or courts of competent jurisdiction where required to do so by applicable law, or where there is a reasonable suspicion of serious criminal activity involving a player account.
• Business transfers: In the event of a merger, acquisition, restructuring, or sale of joabaji or its assets, personal data held by joabaji may be transferred to the acquiring entity as part of the transaction. Players will be notified in advance of any such transfer where practicable.

joabaji uses cookies and similar tracking technologies (including local storage, session tokens, and pixel tags) to operate and improve the platform. The following categories of cookies are used on joabaji.net:

You may manage your cookie preferences at any time through your browser settings. Please note that disabling strictly necessary or functional cookies may impair the functionality of the joabaji platform, including preventing you from logging in or maintaining an active game session. For guidance on managing cookies in the most common browsers (Chrome, Firefox, Safari, Edge), please refer to the relevant browser's help documentation.

joabaji retains personal data for the periods set out below, after which data is securely deleted or anonymised. Retention periods are determined by the purpose of collection, contractual requirements, and applicable legal obligations. In some cases, legal retention obligations (such as financial record-keeping requirements) override shorter operational retention periods.

Upon expiry of the applicable retention period, joabaji will securely delete or irreversibly anonymise the relevant personal data so that it can no longer be linked to an identifiable individual. Where data is anonymised rather than deleted, it may be retained indefinitely for aggregate statistical and analytical purposes.

As a registered joabaji player, you hold the following rights in respect of your personal data. To exercise any of these rights, please contact our data team at [email protected] with the subject line "Privacy Rights Request". joabaji aims to acknowledge all rights requests within 5 business days and to respond substantively within 30 calendar days.

joabaji implements a comprehensive set of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security programme includes, but is not limited to, the following measures:

• Encryption in transit: All data transmitted between your device and joabaji.net is encrypted using TLS 1.2 or higher. We enforce HTTPS across the entire joabaji.net domain and all associated subdomains.
• Encryption at rest: Sensitive personal data stored on joabaji servers, including identity documents, financial records, and authentication credentials, is encrypted at rest using AES-256 encryption.
• Access controls: Access to personal data held by joabaji is restricted to authorised personnel on a need-to-know basis. All access is logged, reviewed regularly, and subject to revocation procedures upon staff role changes or departures.
• Password security: Player passwords are stored as salted cryptographic hashes and are never stored or transmitted in plain text. joabaji support staff cannot view your password; they can only initiate a password reset on request.
• Two-factor authentication: joabaji offers two-factor authentication (2FA) via registered Bangladesh mobile number for all player accounts. Players are strongly encouraged to enable 2FA as an additional layer of account security.
• Fraud monitoring: joabaji operates continuous automated fraud and anomaly detection systems that monitor account activity for indicators of unauthorised access, credential stuffing, and other account security threats. Suspicious activity triggers an automatic account security review and player notification.
• Third-party security audits: joabaji engages independent security specialists to conduct periodic penetration testing and security audits of the joabaji platform infrastructure. Findings are remediated in accordance with a risk-prioritised schedule.
• Incident response: joabaji maintains a documented data breach incident response procedure. In the event of a security incident affecting personal data, affected players will be notified promptly in accordance with applicable requirements, and the incident will be investigated and remediated without undue delay.

This Privacy Policy is governed by and construed in accordance with applicable law. joabaji reserves the right to amend this Privacy Policy at any time. Where amendments are material, registered players will be notified via their registered email address or via an in-platform notification prior to the amended policy taking effect. The current version of this Privacy Policy is always accessible at joabaji.net/privacy-policy.

For all privacy-related enquiries, data subject rights requests, or concerns regarding joabaji's data practices, please contact our team at [email protected]. Our English-language support team is available 24/7.