rbajji Privacy Policy

This Privacy Policy ("Policy") is issued by rbajji ("rbajji", "we", "us", "our"), the operator of the online casino and sports betting platform at rbajji.org. We understand that privacy matters deeply, particularly in the context of an online gambling platform where financial and personal information intersects. This Policy sets out in clear, precise terms exactly how rbajji handles the personal data of every registered Player and site visitor.

By accessing rbajji.org, creating an Account, or using any feature of the Platform, you acknowledge that you have read and understood this Policy and consent to the data practices described herein. If you do not agree with this Policy, please do not use the Platform. This Policy should be read alongside our Terms & Conditions and Responsible Gaming policy.

1.Who We Are

1.1 rbajji is an online casino and sports betting platform operated for the Bangladesh market. The Platform is accessible at rbajji.org and provides casino games, live dealer tables, slot games, and sports betting services — all denominated in Bangladeshi Taka (৳) and integrated with local payment methods including bKash, Nagad, Rocket, and Upay.

1.2 For the purposes of this Policy, rbajji is the data controller — meaning we determine the purposes and means of processing the personal data we collect from you. Queries about our data practices may be directed to [email protected].

2.Data We Collect

rbajji collects the following categories of personal data from Players and site visitors:

3.How We Collect Data

3.1 Directly from you — when you register an Account, complete KYC verification, make a deposit or withdrawal, contact our support team, or interact with any feature of the Platform.

3.2 Automatically — through cookies, server logs, and analytics tools as you browse and use the Platform. This includes your IP address, device fingerprint, and behavioural patterns within the site.

3.3 From third parties — including identity verification providers, payment processors (bKash, Nagad, Rocket, Upay), fraud detection services, and game studio platforms (Pragmatic Play, Evolution Gaming, Ezugi, Spribe) where data is shared to facilitate gameplay and transaction processing.

4.Why We Use Your Data

rbajji uses your personal data for the following specific purposes:

• Account management: To create, maintain, and secure your rbajji Account, including OTP-based authentication via your Bangladeshi mobile number.
• Identity verification (KYC): To verify that you meet the 18+ age requirement and to comply with anti-money laundering (AML) obligations.
• Payment processing: To execute deposits and withdrawals via bKash, Nagad, Rocket, Upay, and supported bank channels, and to reconcile your Account balance.
• Service delivery: To provide access to casino games, live dealer tables, slot games, and sports betting markets, and to correctly settle bets and credit winnings.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, money laundering, unauthorised Account access, and other illegal conduct.
• Responsible gaming compliance: To monitor gaming behaviour, enforce deposit limits and self-exclusion settings, and identify Players who may be experiencing gambling-related harm.
• Customer support: To respond to your queries, complaints, and requests via live chat and email.
• Legal and regulatory compliance: To fulfil our legal obligations, respond to lawful requests from authorities, and maintain records as required by applicable law.
• Platform improvement: To analyse usage patterns, improve game performance, and enhance the overall user experience on the Platform.
• Marketing communications: To send you personalised promotional offers, bonus notifications, and platform updates — but only where you have provided your explicit consent to receive such communications. You may withdraw consent at any time by contacting support.

5.Legal Bases for Processing

rbajji processes your personal data on the following legal grounds:

• Contractual necessity: Processing required to perform our obligations under the Terms & Conditions — including Account creation, payment processing, game delivery, and bet settlement.
• Legal obligation: Processing required to comply with applicable law, including KYC verification, AML record-keeping, and responding to lawful regulatory enquiries.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and service improvement — where these interests are not overridden by your data protection rights.
• Consent: Processing for marketing communications and non-essential cookies — where you have given your explicit, informed, and freely given consent. Consent may be withdrawn at any time.

6.Data Sharing

6.1 rbajji does not sell your personal data to any third party. We share your data only in the following controlled circumstances:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, and other payment partners receive the minimum data necessary to process your transactions.
• Identity verification providers: Third-party KYC and AML service providers receive identity document data solely to verify your identity and age.
• Game studios and content providers: Pragmatic Play, Evolution Gaming, Ezugi, Spribe, Microgaming, NetEnt, and other providers receive your Player ID and session data to deliver their game content and settle results within the Platform.
• IT infrastructure and security providers: Cloud hosting, CDN, and cybersecurity partners who process data strictly on our behalf and under binding data processing agreements.
• Regulatory and law enforcement authorities: Where we are legally required to disclose data in response to a valid court order, regulatory demand, or law enforcement request.
• Professional advisors: Lawyers, auditors, and accountants where disclosure is necessary in the course of providing professional services to rbajji, subject to confidentiality obligations.

6.2 All third parties with whom rbajji shares personal data are contractually required to process that data only for the specified purpose and to maintain appropriate technical and organisational security measures.

7.International Transfers

7.1 Some of rbajji's service providers and game studio partners operate from outside Bangladesh. Where your personal data is transferred to servers or processors located in other countries, rbajji takes appropriate steps to ensure that such transfers are subject to adequate data protection safeguards, including standard contractual clauses and binding data processing agreements.

7.2 Your financial transaction data processed via bKash and Nagad remains within Bangladesh's domestic payment infrastructure in accordance with Bangladesh Bank's data localisation guidelines.

8.Data Retention

8.1 rbajji retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account and identity data: Retained for the duration of your Account plus a minimum of 5 years following Account closure, to satisfy AML record-keeping obligations.
• Transaction and financial data: Retained for a minimum of 5 years from the date of the transaction, in accordance with financial record-keeping requirements.
• Gaming activity logs: Retained for a minimum of 3 years following the relevant session, for dispute resolution and audit purposes.
• Support correspondence: Retained for 2 years following the resolution of the relevant query or complaint.
• Marketing preferences: Retained until you withdraw consent or request deletion, after which they are removed from active marketing lists promptly.
• Technical and device data: Retained for up to 12 months from collection unless required for longer to investigate a specific security incident.

8.2 On expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to you.

9.Cookies & Tracking Technologies

9.1 rbajji uses cookies and similar tracking technologies on the Platform. Cookies are small data files placed on your device that help us operate the Platform efficiently, remember your preferences, and understand how you use the site.

9.2 The following types of cookies are used:

• Strictly necessary cookies: Essential for the Platform to function — including session authentication, security tokens, and load balancing. These cannot be disabled without breaking core site functionality.
• Functional cookies: Remember your preferences such as language settings, last-visited game categories, and responsible gaming tool configurations.
• Analytics cookies: Collect anonymised data about how visitors interact with the Platform — including pages visited, time spent, and navigation paths — to help us improve the user experience.
• Marketing cookies: Used, with your consent, to deliver relevant promotional content based on your game preferences and activity on the Platform.

9.3 You can manage or withdraw your consent for non-essential cookies at any time through your browser settings. Note that disabling certain cookies may affect the functionality of parts of the Platform.

10.Your Rights

You hold the following rights in relation to your personal data held by rbajji. To exercise any of these rights, please contact us at [email protected]. We will respond within a reasonable timeframe and in any event within 30 days of receiving your request.

• Right of access: You may request a copy of the personal data rbajji holds about you, along with information about how it is used.
• Right to rectification: You may request correction of any inaccurate or incomplete personal data we hold about you.
• Right to erasure: In certain circumstances, you may request deletion of your personal data. Note that this right is subject to overriding legal obligations — for example, AML record-keeping requirements may prevent us from deleting transaction data before the applicable retention period has expired.
• Right to restrict processing: You may request that we limit the way we use your data in specific circumstances, such as while a rectification request is being assessed.
• Right to data portability: Where processing is based on consent or contractual necessity, you may request a copy of your data in a structured, machine-readable format.
• Right to withdraw consent: Where processing is based on consent (e.g., marketing communications, non-essential cookies), you may withdraw that consent at any time without affecting the lawfulness of prior processing.
• Right to object: You may object to processing based on rbajji's legitimate interests, including profiling for marketing purposes. We will assess whether our legitimate interests override your rights in the specific context.

11.Children's Privacy

11.1 The rbajji Platform is strictly intended for adults aged 18 and above. We do not knowingly collect personal data from any individual under the age of 18. If we discover or are informed that a minor has registered an Account or provided personal data to the Platform, we will immediately close the Account, delete all associated personal data, and reverse any financial transactions processed in connection with that Account.

11.2 If you believe that a minor has gained access to the Platform or has provided us with their personal information, please notify us immediately at [email protected] so that we can take prompt action.

12.Security Measures

12.1 rbajji implements a layered set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction:

• 256-bit SSL/TLS encryption on all connections between your device and our servers, ensuring that data in transit is protected end-to-end.
• OTP-based two-factor authentication tied to your registered Bangladeshi mobile number, reducing the risk of unauthorised Account access.
• Segregated data storage — Player personal data and financial data are stored in separate systems with distinct access controls.
• Role-based access controls — only rbajji staff with a specific operational need may access personal data, and all access is logged and monitored.
• Regular security audits and penetration testing — the Platform infrastructure is tested periodically to identify and remediate vulnerabilities.
• Incident response procedures — in the event of a data breach that poses a risk to your rights and freedoms, rbajji will notify affected Players and take immediate remediation steps.

12.2 While rbajji takes data security seriously and maintains industry-standard protections, no internet-based platform can guarantee absolute security. You are responsible for keeping your Account credentials — including your password and OTPs — confidential and secure on your own device.

13.Third-Party Links

13.1 The rbajji Platform does not contain links to external third-party websites. All navigation within the Platform remains within the rbajji.org domain. If you independently navigate away from rbajji.org to any external site, this Policy does not apply to the data practices of that external site, and rbajji accepts no responsibility for them.

14.Changes to This Policy

14.1 rbajji may update this Privacy Policy periodically to reflect changes in our data practices, legal obligations, or operational requirements. When material changes are made, we will update the effective date at the top of this page and, where appropriate, notify registered Players via their registered mobile number or email address.

14.2 We encourage you to review this Policy regularly. Your continued use of the Platform after any update constitutes acceptance of the revised Policy. If you do not agree with any changes, you should stop using the Platform and contact support to close your Account.

15.Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way rbajji handles your personal data, please contact our support team using the details below:

• Email: [email protected]
• Live Chat: Available 24/7 from your Account dashboard — average response time under 3 minutes
• Postal / Correspondence Address: rbajji, Bangladesh operations — please use email or live chat for the fastest response

All privacy-related requests will be handled in English. We are committed to responding to every enquiry within 30 days and to resolving data rights requests fairly and transparently.