zbaas Privacy Policy

To maintain a proper and secure relationship with you and to provide better services, zbaas may collect the following types of information:

1.1 Registration and Identity Information

• Full name (in Bengali or English)
• Date of birth (for age verification — only those aged 21 or above)
• Email address
• Password (stored in encrypted form)
• National ID card or passport details (for identity verification and to ensure responsible gaming)

1.2 Financial Information

• Mobile banking numbers: bKash, Nagad, Rocket, Upay
• Bank account details (for bank transfer transactions)
• Transaction history and amounts

1.3 Device and Usage Information

• IP address and geographic location (approximate)
• Browser type and operating system
• Date, time, and duration of site sessions
• Page visit patterns and game activity data
• Information collected from cookies and similar tracking technologies

1.4 Communication Information

• Messages and requests sent via live chat
• Details of issues and complaints sent by email
• Information provided in surveys or feedback forms

zbaas keeps your personal information secure. Information is shared with third parties only in the limited circumstances listed below:

3.1 Service Provider Partners

Necessary information may be shared with selected trusted partners for payment processing (bKash, Nagad, Rocket, Upay), identity verification, and technology services. These partners are required to comply with our privacy standards.

3.2 Legal Requirements

Information may be disclosed to relevant authorities in the case of a court order, government directive, or other legal obligation.

3.3 Business Restructuring

In the event of a company merger, acquisition, or asset transfer, your information may be transferred to the new entity, but under the same privacy protections.

3.4 With Your Explicit Consent

For any purpose beyond those described above, we will obtain your separate consent before sharing your information.

To keep your personal information secure, zbaas follows industry-leading security technologies and practices:

• SSL encryption: All data transmissions are protected by 256-bit SSL/TLS encryption.
• Password hashing: Your password is never stored directly — only an encrypted hash is kept.
• Two-factor authentication: Two-step verification is available to enhance account security.
• Regular security audits: Regular security reviews are conducted to identify system vulnerabilities.
• Access controls: Only authorised staff can access your information, and only on a need-to-know basis.
• Data backups: Secure backups of data are stored on a regular basis.
• Firewall and intrusion detection: Advanced protection measures are kept active at the server level.

However, no method on the internet is completely secure. We make every effort, but a guarantee of 100% security is not possible. If you notice any suspicious activity, contact us immediately.

You have specific rights over your personal information. zbaas respects these rights and helps you exercise them:

• Right to access: You can request to see what information we hold about you.
• Right to correction: You can request that incorrect or incomplete information be corrected.
• Right to erasure: In certain circumstances, you can apply to have your information deleted.
• Right to restrict processing: In some cases, you can request that data processing be limited.
• Right to data portability: You can request your information in a structured format.
• Right to object: You can object at any time to stop receiving marketing messages.
• Right to withdraw consent: You can withdraw consent for any processing that is based on your consent.

To exercise these rights, contact us via live chat or email. We will respond to your request as quickly as possible — generally within 30 days.

For operational purposes, your information may in some cases be processed or stored on servers located outside Bangladesh.

For such transfers, we ensure that adequate data protection measures are in place in the recipient country or entity, and that the standards set out in this Privacy Policy are properly applied.

For international transfers, we apply standard data protection clauses with contractual safeguards.