Everything about how your personal data is collected, why it's collected, and how it's kept safe at Zoyabaji — all explained here in plain English. No legal jargon, just clear information.
Key Commitments at a Glance
Knowing these six things before reading the full policy will make it much easier to understand.
Every transaction and piece of personal data on Zoyabaji is encrypted with 256-bit SSL — the same technology used by major banks.
Your name, number, or any personal information is never sold to advertisers or third parties — not ever. This is an absolute and unwavering policy at Zoyabaji.
You have the right to view, correct, and delete your personal data. Submit a request to support at any time and Zoyabaji is obligated to fulfil it.
Zoyabaji only collects information that is strictly necessary to provide our services. We do not request or store data beyond what is needed.
A defined retention period applies to each category of data. Once that period ends, the data is automatically deleted or anonymised.
You can unsubscribe from promotional emails or SMS at any time. No hassle — just one click to opt out.
This Privacy Policy applies to the Zoyabaji website (zoyabaji.best), mobile app, and all related services. By using the Zoyabaji platform, you are considered to have agreed to this policy.
We know many people have concerns about sharing personal information online — that's completely understandable. Zoyabaji wants to answer those questions honestly. That's why this policy is written in plain language, not legal terms, so every member can understand it.
Zoyabaji's privacy policy comes down to three things: we only collect what we need, we keep it secure, and you can have it deleted at any time.
This policy is available in both Bengali and English. In the event of any ambiguity, the English version shall prevail.
Zoyabaji collects two types of data — information you provide directly, and information generated automatically as you use the platform.
What you provide directly:
| Data Type | When Collected | Why it's needed |
|---|---|---|
| Full name | At the Time of Registration | Account Identity Verification |
| Mobile Number | At the Time of Registration | OTP verification & payments |
| Email address | At the Time of Registration | Account Verification & Communication |
| Date of Birth | At the Time of Registration | Age verification (18+) |
| National ID Card | During KYC Verification | Identity Verification |
| Payment information | At the time of transaction | Deposit & Withdrawal Process |
What is collected automatically:
Zoyabaji never collects your bKash or Nagad PIN. Payment verification is done exclusively through transaction IDs.
Every piece of data Zoyabaji collects has a specific purpose behind it. Nothing is collected unnecessarily.
Service Delivery & Operations:
Security & fraud prevention:
Legal Obligations: Regulatory requirements mean certain data must be retained for a set period — that's a legal obligation. This data is used for legal purposes only.
Service improvement: Zoyabaji continuously improves its platform by analysing which games are most popular and where users experience difficulties. This analysis is always carried out using anonymised data.
Marketing Communications: You may receive emails or SMS about new bonuses, tournaments, or special offers. You can opt out of these communications at any time.
Zoyabaji never sells your data. However, limited information is shared with a select group of trusted partners solely to facilitate service delivery.
Payment Processors: Payment providers such as bKash, Nagad, and Rocket receive only the information necessary to verify transactions. They are bound by their own privacy policies.
Game providers: Providers such as Pragmatic Play and Evolution Gaming may access your account ID and betting data to run games. Personal contact details are never shared with them.
Law Enforcement: Zoyabaji is legally required to share information in response to a valid court order or authorised government request. Only the specific data requested will be disclosed.
Who never receives your data:
All of Zoyabaji's partners are contractually obligated to keep your information confidential. Any breach of this agreement results in immediate termination of the partnership.
Zoyabaji uses cookies — small files stored in your browser. Without them, many features on the platform would not function properly.
Essential Cookies: These cookies are essential for the site to function. They keep you logged in and ensure payments are processed securely. They cannot be disabled.
Performance Cookies: Which parts of the site are slow, where errors occur — this data is collected anonymously and used solely to improve the site.
Functionality Cookies: Remembers your preferences — such as language settings, dark mode, and the last game you played — to keep your experience seamless.
Cookie Controls:
Zoyabaji uses multiple layers of security to protect your data. If one layer fails, the others still hold.
Technical safeguards:
Data Retention Period:
| Data Type | Retention Period | Reason |
|---|---|---|
| Account information | 5 years after account closure | Legal Obligations |
| Transaction records | 7 years | Financial Controls |
| Gaming history | 3 Years | Dispute Resolution |
| Support chat | 1 Year | Service Quality Improvement |
| Analytics Data | 13 months | Platform Analytics |
Once the retention period expires, your data is securely deleted or anonymised in a way that makes identification impossible.
In the event of a data breach, Zoyabaji is required to notify all affected members within 72 hours.
Every registered member on Zoyabaji holds certain important rights over their personal data, and exercising these rights is completely free of charge.
To exercise any of these rights, email support@zoyabaji.best or reach out via live chat. Zoyabaji is required to fulfil your request within 30 days.
Zoyabaji strictly prohibits anyone under 18 from using the platform. Data belonging to minors is never collected, and if collected inadvertently, it is deleted immediately.
If a minor attempts to open an account, our age verification process will flag it. If a parent or guardian discovers that their child has been using Zoyabaji, please contact support@zoyabaji.best immediately. The account and all associated data will be deleted without delay.
Learn More About Responsible Gaming Tools Responsible Gaming Visit the page.
Zoyabaji's platform may reference third-party services from time to time. These services have their own privacy policies, which are outside of Zoyabaji's control.
Game provider software: When you play games from Pragmatic Play or Evolution Gaming, their software runs directly. They can access the data needed to operate the game, but your personal contact information is never shared with them.
Payment gateway: When you make a payment via bKash, Nagad, or Rocket, you are redirected through that payment service. At that point, their privacy policy applies.
Zoyabaji is not responsible for the privacy practices of third parties. However, all partners are carefully selected after verifying their privacy standards.
Zoyabaji may update this privacy policy from time to time. How you are notified will depend on the nature of the changes made.
If you'd like to review a previous version of this policy, please contact support — all prior versions are kept on record.
If you have any questions about this privacy policy or wish to make a request regarding your personal data, Zoyabaji's support team is always ready to help.
When submitting a data request, contacting us from the mobile number or email address registered to your account will help us verify your identity faster.
Zoyabaji is required to respond to all privacy-related requests within 30 days. For complex cases, this may extend by up to 60 days — but you will always be informed in advance.
Every Zoyabaji member has these rights over their own data, and exercising them is completely free of charge.
If you'd like to know what information Zoyabaji holds about you, submit a request and we'll provide the full list.
If any of your information is incorrect, you can request a correction. Name, date of birth, contact details — all of it can be updated.
You can request that your account be closed and your data deleted. Everything will be removed except information we are legally required to retain.
You can request a copy of your data in a machine-readable format — useful if you wish to transfer it to another service.