🔒 Your data is completely secure — 256-bit SSL Encryption 🛡 PCI DSS Compliant — Payment Information Protected 📋 Privacy Policy — Last Updated: January 2026 🚫 Your data is never sold to third parties — Our Commitment 👤 User Rights Protected — The Right to Delete Your Data at Any Time 🔒 Your data is completely secure — 256-bit SSL Encryption 🛡 PCI DSS Compliant — Payment Information Protected 📋 Privacy Policy — Last Updated: January 2026 🚫 Your data is never sold to third parties — Our Commitment 👤 User Rights Protected — The Right to Delete Your Data at Any Time

Zoyabaji Privacy Policy — How Your Information Is Kept Safe

Your personal data is held in trust by us. What is collected, where it is stored, and who it is shared with — all of it is set out here in plain English.

Last Updated: 1 January 2026  |  Version 2.4
256
bit SSL Encryption
0
Sold to Third Parties
24/7
Security Monitoring
8
Key Policy Sections
Before You Begin

This page contains the complete Privacy Policy for zoyabaji. By using the platform, you are considered to have agreed to this policy. If you have any questions, contact our support team — we're here to help.

When You Zoyabajiregister or use the platform, certain information naturally comes to us. You have the right to know how that information is used — and Zoyabaji respects that right. This privacy policy is written in plain language — not legal jargon — so you never have to guess what it means.

One thing worth saying upfront: Zoyabaji never sells your personal data to third parties. This isn't just a statement — it's a core principle of how we operate. Your data is a trust, not a commodity.

How We Protect Your Information

Zoyabaji's core data protection pillars at a glance

End-to-End Encryption

Every transaction and piece of personal data you share is protected by 256-bit SSL encryption. This bank-grade security ensures no one can intercept your information in transit.

🔐 SSL Secured

Secure Data Servers

Your data is stored in an ISO 27001-certified data centre, secured by both physical and digital layers of protection — making unauthorised access virtually impossible.

🏢 Certified Data Centre

PCI DSS Payment Protection

Payment information is stored in a PCI DSS-compliant system. No staff member can directly view your card or banking details — everything is tokenized.

💳 PCI DSS

Minimal Data Collection Policy

Zoyabaji only collects information that is genuinely necessary to provide its services. Requesting or storing data beyond what is needed goes against our policy.

📋 Minimal Collection

Sale of Data Prohibited

Your name, phone number, email, or any other personal information is never sold to advertisers or third parties — not ever, under any circumstances.

🚫 Not Sold

Right to Data Deletion

You can request deletion of your personal data at any time. All data will be permanently deleted within 30 days, except where retention is required by law.

🗑 Right to Delete
Section 1

What Data We Collect

Zoyabaji Data is collected in three ways: information you provide directly, data generated automatically while you use the platform, and information received from approved third parties such as payment processors. See the table below for exactly what falls under each category.

Data Type Example How We Receive It
Identity Information Full name, date of birth, national ID number During Registration & the KYC Process
Contact Information Mobile number, email address Directly at registration
Payment Information BKash/Nagad number, bank account reference During Deposits & Withdrawals
Device & Session Information IP address, browser type, device model Automatically
Gaming Activity Bet history, win/loss records, active session time While Using the Platform
Support History Complaints, chat logs, and email correspondence Support Interactions

Every piece of information listed above is collected for a specific reason — none of it is optional Zoyabaji's services cannot be provided properly. No unnecessary information is requested.

Section 2

Why This Information Is Needed

Every piece of data we collect has a specific purpose behind it. Zoyabaji Data is never held on the basis that it "might come in handy later" — only what is strictly necessary is retained.

  • Account Creation & Management: An account cannot be created without a name, mobile number, and email address. These are required for login security and password resets.
  • Payment Processing: Payment information is essential for sending withdrawals to the correct account and for preventing money laundering.
  • Fraud Prevention: Unusual logins and multiple accounts are detected using IP address and device information.
  • Age Verification: Date of birth and ID information are verified to ensure compliance with our 18+ policy.
  • Responsible Gaming: Gaming activity data allows us to spot unusual behaviour and offer timely support when it's needed.
  • Legal Obligations: Retaining certain data for a specified period to meet regulatory requirements is a legal obligation.
Section 3

Where and How Your Data Is Stored

Zoyabaji's servers are housed in ISO 27001-certified data centres. This certification means independent auditors regularly verify that international data security standards are being met. The data centres are equipped with physical security measures (biometric access, CCTV), firewall protection, and regular data backups.

Your payment details — bKash number, Nagad number, or bank information — Zoyabaji's servers directly. They are held in a tokenized format — meaning an encrypted reference code is stored in place of the actual data. The original information is accessible only to PCI DSS-compliant payment processors.

Retention periods are clearly defined: data for active accounts is kept for as long as the account remains open; data for closed accounts is retained in line with legal obligations, typically 5 years; transaction records are kept for a specific period as required by regulators. After these periods, data is permanently deleted.

An Extra Layer of Security

Database encryption (AES-256), regular security audits, and strict staff data-access controls — together, these three form Zoyabaji's data protection framework. No single staff member can view any user's complete information on their own.

Section 4

Who Your Data Is Shared With

This is one of the most important questions to ask. The straight answer: Zoyabaji does not sell your data to advertisers, marketers, or any third party. However, in certain specific situations, specific information may be shared.

  • Payment Processors (bKash, Nagad, Rocket): Only the minimum data needed to process transactions — and they operate under confidentiality agreements.
  • Game Providers: When you play a game, your device connects to the provider's server — only a session ID is transmitted, never your personal identity information.
  • Legal Obligations: Disclosure of data is legally required when ordered by a court or requested by a regulatory authority through lawful means.
  • Anti-Fraud Organisations: In cases of suspected active fraud or money laundering, your information may be cross-checked against international fraud databases.
  • Advertisers or Marketing Companies: Never. That is our clear and firm policy.
  • Data Brokers or Data Resellers: Never.
Section 5

Cookies & Tracking

Zoyabajiwebsite and app use cookies and similar technologies. Cookies are small files stored on your device that help recognise you on future visits.

We use three types of cookies: first, Essential Cookies — these are essential for maintaining login sessions and ensuring security. Second, Functional Cookies — used to remember your language preference and game settings. Third, Analytics Cookies — Anonymous usage data is collected to help identify which parts of the site are experiencing the most issues.

You can disable non-essential cookies through your browser settings. However, disabling essential cookies may affect login and security features.

Section 6

Your Rights

You have several rights when it comes to your personal data. Zoyabaji These rights are respected and can be exercised with ease.

👁️
Right to Access

Contact support to request a full copy of the data we hold on you. It will be sent within 30 days.

✏️
Right to Rectification

If any of your information is incorrect, you can request a correction — this can be done through Account Settings or by contacting Support.

🗑️
Right to Deletion

When an account is closed, all data beyond what is legally required will be deleted within 30 days.

⛔
Right to Object to Processing

If you object to your data being used for any specific purpose, you can let us know. You can opt out of marketing emails at any time.

To exercise any of these rights, write to us at support@zoyabaji.click. Please note that due to legal obligations, it may not always be possible to delete all data — if that's the case, we'll explain why.

Section 7

Protection of Minors' Data

Zoyabaji Strictly closed to anyone under 18. We do not knowingly collect data from minors. Should any minor's information enter our system and come to our attention, that account will be closed immediately and all associated data will be deleted.

If parents believe their child has in any way Zoyabajihas already been registered, contact support immediately. We will close the account and arrange for all data to be deleted within 24 hours.

A Note for Parents

Keep your device password-locked and never hand it to children while logged into Zoyabaji. If you have any concerns, contact support right away.

Section 8

Privacy Policy Updates

Zoyabaji This Privacy Policy may be updated from time to time — due to legal changes, new services, or improved security practices. For significant changes, you will be notified at least 14 days in advance via your registered email or SMS.

The date of the latest update is always shown at the top of this page. To view older versions, please contact support. Continued use of the platform after changes take effect will be considered your acceptance of the updated policy.

Zoyabaji's Position on Privacy — In Detail

It's entirely reasonable to have concerns about data security on online platforms — especially on gaming or financial platforms where you're required to provide personal and payment details. Asking "where does this information go?" is not just fair, it's the right question to ask.

ZoyabajiWhen someone registers on, we believe it's important to be upfront about why certain details — name, mobile number, email — are needed. Your mobile number is required to send OTPs and issue urgent security alerts. Your email is needed to verify your account and send transaction records. Your name is needed to match against the ownership of your payment account.

Many people assume platforms sell their data to marketing companies — and it's true that some do. But Zoyabaji's business model does not depend on it. Our revenue comes from gaming services — not from selling user data. That fundamental difference is what sets our Privacy Policy apart.

A lot of people feel uneasy about the KYC process. "Why do I have to submit a photo?" — we understand the question. The honest answer is that it's a requirement under our international gaming licence. It also protects you: if someone tries to create an account using your name and phone number, KYC stops them.

Questions also arise about the collection of IP addresses and device information. This data is not used to identify individuals — it helps detect whether the same person is attempting to run multiple accounts across different devices, and it flags unusual login attempts to keep accounts secure. In practice, this works in the user's favor.

One final note: this Privacy Policy is more than a legal document. It is Zoyabaji's relationship with you. We want you to play with peace of mind — knowing your data is in safe hands.

Security Layers

The layers protecting your data

🔐
SSL 256-bit
Transmission Security
🏢
ISO 27001
Data Center
💳
PCI DSS
Payment Information
🔑
AES-256
Database Encryption
🤖
AI Fraud Detection
Real-Time
🔍
Regular Audits
Independent Auditors
Privacy Complaints & Inquiries

If you have any questions about this policy or wish to make a request regarding your data, please contact our support team. support@zoyabaji.click — We aim to respond within 48 hours.

FAQs

Everything You Need to Know About the App & Passwords

Yes, zoyabaji has an official mobile app — available for both Android and iOS. The safest way to download it is through our Download Page— where you'll find direct download links and step-by-step instructions. For Android: download the APK file from the download page; before installing, go to your phone's settings and enable "Unknown sources" or "Install unknown apps", then open the APK. For iOS: the app is available on the App Store, or use the link on the download page. One important reminder — only download from zoyabaji's official page or the App Store; files downloaded from other sources may not be safe and could put your information at risk.

Forgetting your password is completely normal — no need to worry, it takes just a few minutes to fix. Go to the login page and click the "Forgot Password?" link. From there, you can verify your identity in two ways: via mobile number — an OTP will be sent to your registered number; enter it to set a new password — or via email — a reset link will be sent to your registered email address; click the link and enter your new password. The OTP or link usually arrives within 1 to 2 minutes. If it doesn't, check your spam folder. If it still hasn't come through on mobile, wait a moment and try again, or contact support. When choosing a new password, we recommend making it at least 8 characters long and mixing in numbers and special characters for added security.

Start Playing in a Safe Environment

Your data is protected, your privacy is respected — register with Zoyabaji today.

18+ · SSL Secured · Your data is never sold

বাংলা