Privacy Policy — How ebajet Protects Your Personal Data

Last Updated: January 2026

1. Introduction and Scope

This Privacy Policy ("Policy") describes how ebajet ("we", "us", "our") collects, uses, stores, shares, and protects the personal data of individuals ("you", "your", "the Player") who access, register with, or otherwise interact with the ebajet platform available at ebajet.net and any associated URLs (collectively, "the Platform").

This Policy applies to all data processing activities carried out in connection with the operation of the ebajet platform, including but not limited to: account registration and management, deposit and withdrawal processing, sports betting and casino game activity, customer support interactions, promotional communications, and fraud and anti-money-laundering screening.

By registering an account on the ebajet platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. This Policy should be read in conjunction with the ebajet Terms & Conditions, which form the overarching agreement governing your use of the Platform.

If you do not agree with any aspect of this Policy, you should not create an account on or continue to use the ebajet platform. You may request account closure at any time by contacting [email protected].

---

2. Data Controller Identity

For the purposes of this Privacy Policy, the data controller responsible for the personal data of ebajet players is the entity operating the ebajet platform. All data protection enquiries, subject access requests, and consent withdrawal notices should be directed to the ebajet Data Protection contact at: [email protected].

ebajet is committed to handling all player data with transparency, integrity, and in accordance with applicable data protection principles. Our platform is designed with a privacy-first philosophy: data collection is minimised, purposes are defined in advance, and security measures are maintained at a standard appropriate for a platform handling financial and identity data.

---

3. What Personal Data We Collect

The categories of personal data that ebajet collects from players are as follows:

3.1 Account Registration Data

• Full legal name (as it appears on your government-issued identity document)
• Date of birth (for age verification — all players must be 18 or older)
• Mobile phone number (used as the primary account identifier)
• Email address (used for account communications and security alerts)
• Residential address (city and district level, e.g., Dhaka, Chittagong, Sylhet)
• Username and encrypted password (your login credentials)

3.2 Identity Verification Data

• National Identity Card (NID) number or copy
• Passport number or copy (where submitted as an alternative to NID)
• Driving licence number or copy (where submitted as an alternative)
• Selfie or photograph (where required for facial verification against identity document)

3.3 Financial and Payment Data

• Mobile financial service wallet numbers (bKash, Nagad, Rocket, Upay) registered in your name
• Bank account details (where bank transfer options are used)
• Transaction reference numbers, deposit amounts, and withdrawal requests
• Transaction history and account balance records

3.4 Platform Activity Data

• Betting history, wager amounts, bet outcomes, and game session data
• Bonus claims, wagering progress, and promotion eligibility records
• Login timestamps, session durations, and platform navigation patterns
• Device type, operating system, browser type, and app version (where applicable)
• IP address and approximate geolocation at time of login

3.5 Communications Data

• Customer support chat logs and email correspondence
• Feedback, complaints, and dispute records
• Responses to promotional communications (where opt-in consent has been given)

---

4. How We Collect Your Data

ebajet collects personal data through the following channels:

• Direct submission: Data you provide voluntarily during account registration, identity verification, deposit and withdrawal requests, and customer support interactions.
• Automated platform collection: Data generated automatically as you use the Platform, including session logs, device information, IP addresses, and betting activity records.
• Payment processors: Transaction confirmation data received from mobile financial service providers (bKash, Nagad, Rocket, Upay) and banking partners when you make a deposit or withdrawal.
• Identity verification partners: Verification outcome data (pass/fail status and document type confirmed) received from third-party identity verification service providers where ebajet uses such services for KYC (Know Your Customer) compliance.
• Cookies and tracking technologies: Behavioural and session data collected via cookies and similar technologies as described in Section 8 of this Policy.

---

5. Legal Basis for Processing

ebajet processes your personal data on the following legal bases, depending on the specific processing activity involved:

Processing Activity	Legal Basis
Account registration and management	Performance of a contract (the ebajet Terms & Conditions)
Processing deposits and withdrawals	Performance of a contract; compliance with financial regulations
Age and identity verification (KYC)	Legal obligation; prevention of underage gambling
Fraud detection and anti-money-laundering screening	Legal obligation; legitimate interests of ebajet and its players
Responsible gaming monitoring	Legitimate interests; player protection obligations
Customer support and dispute resolution	Performance of a contract; legitimate interests
Promotional communications (opt-in only)	Consent (freely given, specific, and withdrawable at any time)
Platform analytics and service improvement	Legitimate interests of ebajet (improving user experience)

Where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing that occurred prior to withdrawal. To withdraw consent for promotional communications, contact [email protected] or use the unsubscribe mechanism included in any marketing message.

---

6. How We Use Your Personal Data

The personal data ebajet collects is used for the following clearly defined purposes:

• Account operation: To create, maintain, and manage your ebajet player account, including authentication, account settings management, and balance tracking.
• Payment processing: To facilitate deposits to and withdrawals from your account via your registered bKash, Nagad, Rocket, Upay, or bank account details.
• Identity and age verification: To confirm that you are who you say you are, that you are at least 18 years of age, and that you are operating your own account using your own payment methods — as required for responsible platform operation.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, unauthorised account access, multi-accounting, bonus abuse, money laundering, and other prohibited conduct as defined in the ebajet Terms & Conditions.
• Responsible gaming: To monitor betting patterns that may indicate problem gambling behaviour, enforce self-imposed deposit limits and time-out periods, and support self-exclusion requests.
• Customer support: To respond to your queries, complaints, and requests for assistance, and to maintain records of support interactions for quality assurance purposes.
• Legal compliance: To fulfil ebajet's obligations under applicable anti-money-laundering, counter-terrorism financing, and data protection regulations.
• Service improvement: To analyse aggregated, anonymised platform usage data in order to improve game offerings, payment processes, user interface design, and overall platform performance.
• Promotional communications (opt-in only): To send you information about bonuses, promotions, and platform updates via SMS or email, where you have given explicit consent to receive such communications.

ebajet does not use your personal data for any purpose not listed above without first obtaining your consent or establishing a separate legitimate legal basis for the new processing activity.

---

7. Data Sharing and Third-Party Disclosure

ebajet does not sell, rent, or otherwise commercially disclose your personal data to third parties. Data sharing occurs only in the following tightly controlled circumstances:

7.1 Payment Processing Partners

To process your deposits and withdrawals, ebajet shares the minimum necessary financial data with your chosen payment service provider (bKash, Nagad, Rocket, Upay, or your bank). This typically includes the transaction amount, your wallet or account number, and a transaction reference. ebajet does not share your full identity document data with payment processors. Each payment partner operates under its own privacy policy and applicable financial services regulation.

7.2 Identity Verification Services

Where ebajet uses a third-party identity verification provider to assist with KYC screening, your identity document images and personal details may be transmitted to that provider's secure systems for the purpose of verification. The provider returns a verification result (confirmed / not confirmed) and is contractually prohibited from using your data for any other purpose.

7.3 Game Studio Providers

Game content on the ebajet platform is delivered by certified third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may collect anonymised session data directly through their game engines for the purpose of RNG auditing, game performance monitoring, and responsible gaming compliance. They do not receive your personal identity data from ebajet.

7.4 Legal and Regulatory Authorities

ebajet may disclose personal data to competent legal or regulatory authorities where required to do so by applicable law, court order, or valid regulatory request. In such cases, ebajet will disclose only the specific data requested and will, where legally permissible, notify you of such a disclosure.

7.5 Business Transfers

In the event that ebajet undergoes a merger, acquisition, restructuring, or sale of assets, player data may be transferred to the successor entity as part of that transaction. You will be notified of any such transfer and of any material change to the way your data is processed as a result, and you will be given the opportunity to close your account if you do not wish your data to be transferred.

---

8. Cookies and Tracking Technologies

The ebajet platform uses cookies and similar tracking technologies to operate the platform effectively and to improve your experience. The following categories of cookies are used:

• Strictly necessary cookies: Required for the platform to function. These include session cookies that maintain your login state and security cookies that protect against cross-site request forgery. These cookies cannot be disabled without disrupting platform functionality.
• Functional cookies: Remember your preferences such as language settings, preferred payment method, and device type to provide a more personalised experience on return visits.
• Analytics cookies: Collect anonymised, aggregated data about how players navigate and interact with the platform. This data helps ebajet identify areas for improvement in user experience and technical performance. No personally identifiable information is included in analytics cookie data.
• Security and fraud prevention cookies: Used to identify unusual or suspicious access patterns, such as login attempts from unrecognised devices or IP addresses, and to support the platform's fraud detection systems.

You may control cookie preferences through your browser settings. Please note that disabling certain categories of cookies may affect the functionality of the ebajet platform. ebajet does not use third-party advertising or retargeting cookies.

---

9. Data Security Measures

ebajet implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:

• End-to-end SSL/TLS encryption for all data transmitted between your device and ebajet servers.
• Encrypted storage of passwords using industry-standard hashing algorithms — no ebajet employee can read your password in plain text.
• OTP (one-time password) multi-factor authentication for login events from new or unrecognised devices.
• Restricted internal access to personal data on a need-to-know basis — only authorised personnel with a specific operational requirement are permitted to access identifiable player data.
• Regular security audits, vulnerability assessments, and penetration testing of the ebajet platform and its underlying infrastructure.
• Encrypted storage of identity documents submitted during KYC verification, with access logging for audit trail purposes.
• Incident response procedures, including a defined process for notifying affected players and relevant authorities in the event of a data breach that poses a risk to player rights or freedoms.

While ebajet takes every reasonable precaution to protect your data, no internet-based platform can guarantee absolute security. You are encouraged to use a strong, unique password for your ebajet account and to enable all available account security features.

---

10. Data Retention Periods

ebajet retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or to comply with applicable legal and regulatory retention obligations. The following retention periods apply:

• Active account data: Retained for the full duration of your account being active on the platform.
• Transaction and financial records: Retained for a minimum of five years following the transaction date, in accordance with standard anti-money-laundering record-keeping requirements.
• Identity verification documents: Retained for a minimum of five years following account closure or the last verification event, whichever is later.
• Customer support records: Retained for two years following the resolution of the relevant support interaction.
• Marketing consent records: Retained for the duration of your consent, plus one year following withdrawal or account closure to evidence compliance.
• Anonymised analytics data: Retained indefinitely in anonymised, aggregated form — this data cannot be used to identify any individual player.

Following the expiry of the applicable retention period, personal data is securely deleted or anonymised. Where deletion is not immediately technically feasible (e.g., data held in secure backup systems), the data is isolated from active use and scheduled for deletion at the next available opportunity.

---

11. Your Rights as a Data Subject

As a player whose personal data is processed by ebajet, you hold the following rights. To exercise any of these rights, contact ebajet at [email protected] with your registered username and a clear description of your request.

• Right of access: You may request a copy of all personal data ebajet holds about you. Requests will be fulfilled within 30 days.
• Right to rectification: You may request the correction of any inaccurate or incomplete personal data held on your account. ebajet will update the data within 14 days of a verified request.
• Right to erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to ebajet's legal retention obligations. Erasure requests are assessed on a case-by-case basis.
• Right to restriction of processing: You may request that ebajet restrict the processing of your data in certain circumstances, such as where you contest the accuracy of the data or object to its processing while that objection is being assessed.
• Right to data portability: You may request a copy of the personal data you have provided to ebajet in a structured, commonly used, and machine-readable format for the purposes of transferring it to another service provider.
• Right to withdraw consent: Where processing is based on your consent (e.g., for promotional communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.
• Right to object: You may object to processing carried out on the basis of ebajet's legitimate interests, including profiling for fraud detection purposes, by contacting [email protected] with a detailed statement of your objection.

ebajet will respond to all data rights requests within 30 days. Where a request is complex or involves a high volume of data, ebajet may extend this period by a further 30 days, notifying you of the extension within the initial 30-day window.

---

12. Children and Minors

The ebajet platform is strictly intended for adults aged 18 years and above. ebajet does not knowingly collect, process, or retain personal data belonging to any individual under the age of 18. If ebajet discovers or is notified that a registered account belongs to a person under 18 years of age, the account will be immediately suspended, all associated personal data will be deleted within 30 days (subject to any mandatory retention obligations), and any deposits made will be returned to the original payment source after investigation.

If you are a parent or guardian and believe that a minor in your care has registered an account on the ebajet platform without your knowledge, please contact us immediately at [email protected] so that we can take prompt action.

---

13. Changes to This Privacy Policy

ebajet may update this Privacy Policy from time to time to reflect changes in our data processing practices, legal obligations, or platform features. When material changes are made to this Policy, ebajet will notify registered players via the email address or mobile number associated with their account, or by displaying a prominent notice on the platform, prior to the changes taking effect.

The effective date at the top of this Policy will be updated to reflect the date of the most recent revision. Your continued use of the ebajet platform following notification of changes constitutes your acknowledgement of the updated Policy. We encourage you to review this Policy periodically to stay informed about how we are protecting your data.

---

14. Contact and Data Requests

All privacy-related enquiries, subject access requests, data correction or deletion requests, consent withdrawal notices, and data protection complaints should be directed to the ebajet data protection contact using the details below:

• Email: [email protected] (plain text — not a clickable link)
• Platform: ebajet.net
• Response commitment: Initial acknowledgement within 48 hours; full response within 30 days
• Support availability: 24 hours a day, 7 days a week

When submitting a data rights request, please include your registered username, the mobile number associated with your account, and a clear description of your request to help us locate your records promptly and process your request without unnecessary delay.