Privacy Policy — How rbaaji Protects Your Data

rbaaji is an online casino and sports betting platform operated for players in Bangladesh and other permitted markets. For any privacy-related queries, requests to exercise your data rights, or concerns about how your information is handled, please contact our support team via the live chat feature available 24/7 on the Platform, or by email at the address listed in the footer of this page. We aim to respond to all data-related enquiries within five business days.

rbaaji collects personal data through several channels: directly from you when you register an account or contact support, automatically when you use the Platform, and from third-party service providers where necessary for verification and fraud prevention. The categories of data we may collect include:

• Identity data: Full name, date of birth, gender, and copies of government-issued identification documents (e.g., National Identity Card, passport).
• Contact data: Mobile phone number, email address, and residential address.
• Financial data: bKash account number, Nagad account number, Rocket account number, Upay details, bank account details, card numbers (last four digits only), and transaction history on the Platform.
• Technical data: IP address, device type, browser type and version, operating system, time zone, and session identifiers.
• Usage data: Pages visited, games played, betting history, session duration, and click-path data.
• Communications data: Records of support conversations, emails, and feedback submitted through the Platform.
• Cookie and tracking data: Data collected via cookies, web beacons, and similar technologies as described in Section 7 of this Policy.

We do not knowingly collect sensitive personal data such as biometric data, health records, or information about racial or ethnic origin beyond what is strictly required for identity verification purposes.

rbaaji processes your personal data only for specific, legitimate purposes. The table below summarises the primary purposes for which we use your data and the legal basis on which we rely for each:

We will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or updating this Policy with appropriate notice.

rbaaji does not sell your personal data. We may share your information with the following categories of third parties, strictly as necessary to deliver our services and meet our obligations:

• Payment processors: bKash, Nagad, Rocket, Upay, and card-processing networks receive only the data needed to complete a specific transaction. These providers are contractually bound to handle your data securely and may not use it for their own marketing purposes.
• Identity verification providers: Third-party KYC and age-verification services receive identity documents and personal details solely for the purpose of confirming your eligibility to play.
• Fraud prevention and security services: Data may be shared with specialist fraud-detection platforms to identify suspicious patterns and protect the integrity of the Platform.
• Game software providers: Providers such as Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi may receive anonymised session and game-play data to facilitate the delivery of their games. No directly identifiable personal data (such as your name or address) is passed to game providers.
• Analytics platforms: Aggregated, anonymised usage data may be shared with analytics tools to help us understand platform performance and improve the player experience.
• Legal and regulatory authorities: We may disclose your data if required by applicable law, court order, or a lawful request from a government or regulatory authority.

All third parties with whom we share data are subject to written data-processing agreements requiring them to implement appropriate security measures and to process data only in accordance with our instructions.

rbaaji retains your personal data for as long as your account remains active and for a defined period thereafter, as required by applicable legal, regulatory, and operational obligations. In general:

• Account and identity data is retained for a minimum of five years following account closure, in line with standard anti-money laundering record-keeping requirements.
• Transaction and financial records are retained for a minimum of five years from the date of each transaction.
• Support communications are retained for up to three years from the date of the interaction.
• Technical and usage data collected via cookies and analytics is typically retained for a maximum of 13 months before being anonymised or deleted.

Once the applicable retention period has expired, your personal data is securely deleted or irreversibly anonymised. Where a legal hold or dispute is active, data may be retained beyond the standard period until the matter is resolved.

rbaaji implements a range of technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and the Platform.
• Encryption of sensitive data fields (including payment details) at rest in our databases.
• Role-based access controls limiting data access to authorised personnel only.
• Regular security assessments and vulnerability testing of Platform infrastructure.
• Automated monitoring and alerting for suspicious access patterns or data anomalies.
• Staff training on data protection and security best practices.

Despite these measures, no internet-based platform can guarantee absolute security. In the unlikely event of a data breach that poses a risk to your rights and freedoms, rbaaji will notify affected players without undue delay and take all reasonable steps to mitigate the impact.

rbaaji uses cookies and similar technologies (including web beacons and local storage) to operate and improve the Platform. The types of cookies we use are as follows:

• Strictly necessary cookies: Required for the Platform to function. These include session cookies that keep you logged in and security tokens. They cannot be disabled without breaking core functionality.
• Performance cookies: Used to collect anonymised data about how players interact with the Platform (e.g., pages visited, time spent, errors encountered). This data helps us identify areas for improvement.
• Functional cookies: Used to remember your preferences, such as display settings or language selection, so you do not need to re-enter them on each visit.
• Targeting and analytics cookies: Used with your consent to analyse usage patterns at an aggregate level. rbaaji does not use cookies to track your behaviour on external third-party websites.

You can manage or withdraw your consent to non-essential cookies through your browser settings at any time. Note that disabling certain cookies may affect the functionality of specific Platform features.

As a player on the rbaaji Platform, you have the following rights in relation to your personal data:

• Right of access: You may request a copy of the personal data we hold about you at any time.
• Right to rectification: If any of your personal data is inaccurate or incomplete, you have the right to request that it be corrected.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to restriction of processing: You may ask us to restrict processing of your data in certain circumstances, for example while a dispute is being resolved.
• Right to data portability: Where processing is based on your consent or a contract, you may request that we provide your data in a structured, machine-readable format.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.
• Right to object: You may object to processing of your data where it is based on our legitimate interests, unless we can demonstrate compelling grounds that override your interests.

To exercise any of these rights, please contact our support team via live chat or email. We will respond within 30 days of receiving a verifiable request. We may need to verify your identity before processing your request to protect your data from unauthorised access.

rbaaji is strictly intended for adults aged 21 and above. We do not knowingly collect or process personal data from anyone under the age of 21. If we become aware that personal data has been submitted by a person who is underage, we will immediately close the associated account, delete the data, and take appropriate steps to prevent recurrence. If you believe an underage individual has registered an account on our Platform, please contact our support team immediately.

Some of rbaaji's third-party service providers may process personal data outside of Bangladesh. Where data is transferred internationally, we take steps to ensure that appropriate safeguards are in place to protect your information, including contractual data-protection clauses with all relevant recipients. By using the Platform, you acknowledge that your data may be transferred to and processed in countries outside Bangladesh for the purposes described in this Policy.

rbaaji may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will update the "Last Updated" date at the top of this page and, where reasonably practicable, notify you via the contact details associated with your account. Your continued use of the Platform following any update constitutes your acceptance of the revised Policy. We recommend reviewing this page periodically to stay informed about how we protect your data.