Contents
- 1. Introduction
- 2. Data We Collect
- 3. How We Use Your Data
- 4. Legal Basis for Processing
- 5. Data Sharing & Disclosure
- 6. Payment Data & BDT Transactions
- 7. Cookies & Tracking
- 8. Data Retention
- 9. Data Security
- 10. Your Rights
- 11. Children's Privacy
- 12. Third-Party Services
- 13. Policy Updates
- 14. Contact Us
1 Introduction
zetbuj ("the Platform", "we", "us", "our") is committed to protecting the personal privacy of all individuals who interact with the zetbuj platform at zetbuj.com. This Privacy Policy ("Policy") describes in plain, formal English how zetbuj collects, processes, stores, and discloses personal data in connection with the provision of its online gaming services to players in Bangladesh.
This Policy applies to all data subjects who access or use the zetbuj platform in any capacity, including registered account holders, prospective players who have initiated but not completed registration, and visitors who browse the platform without logging in. By accessing zetbuj.com and continuing to use the platform, you acknowledge that you have read and understood this Policy and that you consent to the data practices described herein.
This Policy is to be read in conjunction with the zetbuj Terms & Conditions, which govern the overall use of the platform. In any case of conflict between this Policy and the Terms & Conditions on a privacy-related matter, this Policy shall prevail.
2 Data We Collect
zetbuj collects personal data through several channels — directly from you during registration and account use, automatically through technical systems, and from third parties involved in payment processing and identity verification. The categories of data we collect are described below.
| Category | Examples of Data Collected | Collection Method |
|---|---|---|
| Identity Data | Full legal name, date of birth, national ID or passport number | Provided by you at registration or verification |
| Contact Data | Mobile number, email address, city of residence (e.g., Dhaka, Chittagong) | Provided by you at registration |
| Financial Data | bKash / Nagad / Rocket / Upay account reference, Visa/Mastercard last four digits, deposit and withdrawal records in BDT | Provided by you and generated by transactions |
| Account Activity Data | Login timestamps, game history, bet records, bonus usage, session duration | Automatically generated by platform activity |
| Technical Data | IP address, device type, browser type and version, operating system, screen resolution | Automatically collected via server logs and cookies |
| Communications Data | Records of Live Chat and WhatsApp support interactions, complaint correspondence | Generated through support interactions |
| Verification Documents | Copies of national identity card, passport, mobile wallet statement (requested during KYC) | Provided by you on request |
zetbuj does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data, or health information, except where identity verification documents incidentally contain such information. In those cases, the information is used solely for the purpose of confirming identity and is not processed for any other purpose.
3 How We Use Your Data
zetbuj processes personal data only for specific, documented purposes. We do not use your data in ways that are incompatible with the purposes for which it was originally collected. The primary purposes for which zetbuj processes personal data are as follows:
- Account creation and management: To register your account, authenticate your identity at login, maintain your account settings, and communicate account-related updates to you.
- Service delivery: To provide access to sports betting, live casino, and slot games; to process bets and settle outcomes; and to manage your account balance in BDT.
- Payment processing: To facilitate deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard; to verify payment method ownership; and to maintain accurate financial records.
- Identity verification and KYC compliance: To verify that all account holders meet the minimum age requirement of 18 years and that the identity information provided at registration is accurate.
- Fraud prevention and security: To detect and prevent fraudulent activity, money laundering, account takeovers, and other security threats to the platform and its users.
- Responsible gaming: To monitor account activity for signs of problem gambling behaviour and to apply deposit limits, session reminders, or self-exclusion measures where requested or where zetbuj has a duty of care to intervene.
- Customer support: To respond to queries, complaints, and requests submitted through Live Chat, WhatsApp, or email.
- Marketing communications: To send you relevant promotional offers, bonus notifications, and platform news, subject to your communication preferences. You may opt out of marketing communications at any time by contacting our support team.
- Platform improvement: To analyse aggregated usage patterns, diagnose technical issues, and improve the overall performance and user experience of the zetbuj platform.
4 Legal Basis for Processing
zetbuj processes personal data on the following legal grounds, depending on the specific processing activity involved:
- Contractual necessity: Processing your identity data, contact data, and financial data is necessary for zetbuj to perform its contractual obligations to you as an account holder. Without this processing, zetbuj cannot provide its core gaming and payment services.
- Legitimate interests: zetbuj has a legitimate interest in processing technical data and account activity data for the purposes of fraud prevention, platform security, and responsible gaming monitoring. These interests do not override your fundamental privacy rights and are proportionate to the risks addressed.
- Consent: Where zetbuj processes your data for marketing communications or optional analytics beyond what is strictly necessary for service delivery, we rely on your consent. You may withdraw your consent at any time without affecting the lawfulness of processing carried out before withdrawal.
- Legal obligation: Where zetbuj is required by applicable law to retain or disclose certain data — for example, financial transaction records for anti-money laundering compliance purposes — processing is carried out on the basis of a legal obligation.
5 Data Sharing & Disclosure
zetbuj does not sell, rent, or trade your personal data to any third party. Personal data may be shared with the following categories of recipients, solely to the extent necessary to fulfil the purposes described in this Policy:
- Payment processing partners: bKash, Nagad, Rocket, Upay, and card network processors (Visa, Mastercard) receive the minimum financial data necessary to process your deposits and withdrawals. These partners operate under their own privacy policies and are bound by contractual data protection obligations when processing data on behalf of zetbuj.
- Identity verification services: Third-party KYC and age verification providers may receive copies of identity documents submitted by players to confirm eligibility. These services are contractually prohibited from using your data for any purpose beyond the verification task.
- Game content providers: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive anonymised or pseudonymised session data to facilitate the delivery of their games. Personal identity data is not shared with game providers.
- Fraud prevention and security services: zetbuj may share technical data (such as IP addresses and device fingerprints) with specialist fraud detection providers to identify and block abusive activity on the platform.
- Law enforcement and regulatory authorities: zetbuj will disclose personal data to competent authorities where required to do so by applicable law, valid legal process, or where zetbuj reasonably believes disclosure is necessary to protect the safety of any person or to prevent or report an unlawful act.
- Business successors: In the event of a merger, acquisition, or sale of all or substantially all of zetbuj's assets, personal data held by zetbuj may be transferred to the acquiring entity, subject to commitments that the data will continue to be protected in accordance with this Policy.
6 Payment Data & BDT Transactions
All financial transactions on the zetbuj platform are denominated in Bangladeshi Taka (BDT). zetbuj processes payment data in connection with deposits and withdrawals made via bKash, Nagad, Rocket, Upay, Visa, and Mastercard. The following principles govern how zetbuj handles payment-related personal data:
- zetbuj does not store full card numbers, CVV codes, or complete mobile wallet PINs on its servers. Payment credentials are processed through encrypted channels by certified payment intermediaries.
- Transaction records — including deposit amounts, withdrawal amounts, timestamps, and payment method references — are retained in zetbuj's system for a period of at least five years for anti-money laundering compliance and dispute resolution purposes.
- zetbuj verifies that the payment method used for withdrawals is registered in the same name as the zetbuj account holder. This verification step protects players against fraudulent withdrawal attempts by unauthorised parties.
- Where a payment transaction is flagged for potential fraud or money laundering, zetbuj reserves the right to place a temporary hold on the associated funds pending investigation. During this period, zetbuj may contact the account holder to request additional documentation.
7 Cookies & Tracking Technologies
zetbuj uses cookies and similar tracking technologies to operate the platform effectively, personalise your experience, and analyse usage patterns. Cookies are small text files placed on your device by your browser when you visit zetbuj.com. The types of cookies used by zetbuj are as follows:
- Essential cookies: These cookies are strictly necessary for the platform to function. They manage your login session, maintain your account state across pages, and enable core security features. Essential cookies cannot be disabled without affecting your ability to use the platform.
- Performance and analytics cookies: These cookies collect aggregated, anonymised data about how visitors interact with zetbuj.com — including which pages are visited most frequently and how long users spend on each page. This data helps zetbuj identify technical issues and improve the platform experience.
- Functionality cookies: These cookies remember your preferences — such as your preferred language display settings — so that you do not need to re-enter them on each visit.
- Marketing cookies: Where you have provided consent, zetbuj may use cookies to track whether promotional offers have been viewed or redeemed. No marketing cookie data is shared with external advertising networks.
You may control cookie preferences through your browser settings. Most browsers allow you to block or delete cookies. Please be aware that disabling essential cookies will impair your ability to log in to and use the zetbuj platform. zetbuj does not respond to "Do Not Track" browser signals at this time, as there is no universally accepted standard for interpreting such signals.
8 Data Retention
zetbuj retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable legal obligations. The following retention guidelines apply:
- Account data: Retained for the duration of your account's active status plus a minimum of five years following account closure. This retention period supports dispute resolution, fraud investigation, and compliance with financial record-keeping obligations.
- Transaction records: Retained for a minimum of five years from the date of each transaction, consistent with anti-money laundering best practices.
- Identity verification documents: Retained for the duration of your account plus five years post-closure. Physical copies, if any, are securely destroyed after scanning.
- Support communications: Retained for two years from the date of the most recent interaction in a given support thread, unless the matter is subject to ongoing investigation or legal proceedings.
- Technical and log data: Server logs and IP address records are retained for up to 12 months and then deleted or anonymised.
When personal data is no longer required and no legal obligation exists to retain it, zetbuj will securely delete or anonymise the data so that it can no longer be associated with any individual. Anonymised, aggregated data may be retained indefinitely for statistical analysis and platform improvement purposes.
9 Data Security
zetbuj implements a range of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, or alteration. Key security measures include the following:
- SSL/TLS encryption: All data transmitted between your device and zetbuj.com is encrypted using industry-standard SSL/TLS protocols. The presence of HTTPS in the browser address bar confirms that your connection is encrypted.
- Access controls: Access to personal data within zetbuj's systems is restricted on a strict need-to-know basis. Staff members are granted only the minimum level of access required to perform their designated role.
- Password security: Account passwords are stored using one-way cryptographic hashing. zetbuj staff cannot view or retrieve your password in plain text.
- Intrusion detection: zetbuj employs automated monitoring systems to detect unusual access patterns, potential data breaches, and other security anomalies in real time.
- Vendor security standards: All third-party service providers who process personal data on zetbuj's behalf are required to demonstrate adequate data security practices as a condition of their engagement.
Despite these measures, no data transmission over the internet or electronic storage system can be guaranteed as absolutely secure. In the event of a data breach that is likely to result in a risk to your rights and freedoms, zetbuj will notify affected users promptly and take all reasonable steps to mitigate harm.
10 Your Rights
As a data subject, you have the following rights in relation to your personal data held by zetbuj. To exercise any of these rights, please contact our support team using the contact details in Section 14.
- Right of access: You have the right to request a copy of the personal data zetbuj holds about you. zetbuj will respond to access requests within 30 days of receipt.
- Right to rectification: If any personal data zetbuj holds about you is inaccurate or incomplete, you have the right to request that it be corrected. Corrections to identity-critical fields (such as name or date of birth) may require supporting documentation.
- Right to erasure: You may request that zetbuj delete your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where the data has been processed unlawfully. This right is subject to zetbuj's legal obligations to retain certain data as described in Section 8.
- Right to restrict processing: You may request that zetbuj restrict the processing of your personal data in certain circumstances — for example, while a dispute regarding accuracy is being resolved.
- Right to data portability: Where processing is based on your consent or on contractual necessity and is carried out by automated means, you have the right to receive your personal data in a structured, machine-readable format.
- Right to object: You have the right to object to processing carried out on the basis of zetbuj's legitimate interests, including profiling for responsible gaming monitoring. zetbuj will cease that processing unless it can demonstrate compelling legitimate grounds that override your interests.
- Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.
11 Children's Privacy
The zetbuj platform is strictly intended for adults aged 18 years and above. zetbuj does not knowingly collect or process personal data from individuals under the age of 18. Age verification procedures are applied during registration to prevent minors from creating accounts.
If zetbuj becomes aware that personal data has been collected from a person under the age of 18 — whether through a false declaration of age during registration or any other means — zetbuj will immediately suspend the associated account and delete all personal data relating to that individual without undue delay. Any funds deposited by a minor will be returned to the payment method from which they originated, subject to verification.
Parents or guardians who believe a minor may have created a zetbuj account are encouraged to contact our support team immediately via Live Chat or WhatsApp so that appropriate action can be taken without delay.
12 Third-Party Services
The zetbuj platform integrates services and content from third-party providers including game studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi), payment processors (bKash, Nagad, Rocket, Upay, Visa, Mastercard), and identity verification services. Each of these providers operates under its own privacy policy and data processing terms.
zetbuj is not responsible for the privacy practices of third-party providers beyond the contractual data protection obligations imposed on them by zetbuj. When you interact with a third-party live casino stream, for example, the data generated by your interaction with that stream is processed by the game provider under its own terms. zetbuj recommends that players review the privacy policies of any third-party service they interact with through the platform.
zetbuj.com does not contain links to external websites beyond those necessary for payment processing. This Privacy Policy applies solely to the zetbuj platform and its directly operated services.
13 Policy Updates
zetbuj reserves the right to update or revise this Privacy Policy at any time. Material changes — meaning changes that significantly affect how your personal data is processed or your rights in relation to it — will be communicated to registered players via the contact details associated with their account and through a prominent notice on the platform, at least 14 days before the change takes effect.
Non-material updates, such as corrections of typographical errors, clarifications that do not alter the substance of the Policy, or changes in contact details, may be made without prior notice. The effective date displayed at the top of this page will be updated to reflect the date of any revision.
Your continued use of the zetbuj platform after the effective date of any revised Policy constitutes your acceptance of the updated terms. If you do not agree to a revised Policy, you must cease using the platform and may request account closure in accordance with the zetbuj Terms & Conditions.
14 Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by zetbuj, please contact our dedicated support team. All privacy-related requests are handled by agents trained in data protection procedures.
zetbuj's support team is available 24 hours a day, 7 days a week via Live Chat and WhatsApp. Written enquiries submitted by email will be acknowledged within 48 hours and resolved within 30 days.
Support Email: [email protected]
When contacting zetbuj regarding a data subject rights request, please include your registered account username and the specific right you wish to exercise so that your request can be processed efficiently. zetbuj may need to verify your identity before actioning certain requests to protect against fraudulent data access attempts.