rbbaji Privacy Policy

1 Introduction

This Privacy Policy ("Policy") is published by rbbaji ("rbbaji", "we", "us", "our"), the operator of the online casino and sports betting platform accessible at https://rbbaji.net. It sets out how rbbaji collects, uses, stores, shares, and protects the personal data of players and visitors ("you", "your") who access or use any part of the rbbaji platform.

rbbaji recognises that privacy is a fundamental right. We are committed to processing personal data lawfully, fairly, and transparently — collecting only what is necessary, retaining it only for as long as required, and securing it against unauthorised access at every stage of its lifecycle.

This Policy applies to all personal data collected through the rbbaji website, mobile-optimised interface, customer support channels, and any other touchpoints through which rbbaji interacts with players. It should be read alongside the rbbaji Terms & Conditions, which govern the broader relationship between rbbaji and its players.

2 Personal Data We Collect

rbbaji collects personal data in the following categories depending on the nature of your interaction with the platform:

2.1 Registration Data

When you create an rbbaji account, we collect the information you provide during the registration process, which typically includes:

• Full legal name
• Date of birth (for age verification purposes)
• Email address and mobile phone number
• Chosen username
• Residential address (district, city, and country)
• Preferred currency (Bangladeshi Taka, BDT)

2.2 Identity Verification Data

When you submit documents as part of our Know Your Customer (KYC) process — typically triggered at the point of your first withdrawal or when account activity requires review — we may collect copies of:

• Government-issued photo identification (National ID card, passport, or driving licence)
• Proof of address (recent utility bill or bank statement)
• Proof of ownership of the payment method used (e.g., screenshot of bKash or Nagad account confirmation)

2.3 Financial Transaction Data

To process deposits and withdrawals, rbbaji collects data related to your payment transactions, including the payment method used (bKash, Nagad, Rocket, Upay, Visa, Mastercard), transaction reference numbers, amounts, timestamps, and account identifiers associated with the payment method. rbbaji does not store full card numbers or mobile banking PINs.

2.4 Gameplay and Betting Data

We record data about your activity on the platform, including games played, bets placed, bet amounts, outcomes, bonus usage, session durations, and betting history. This data is used to administer your account, detect fraud, and personalise your experience where you have consented to such personalisation.

2.5 Technical and Device Data

When you access rbbaji, our servers automatically collect certain technical information, including your IP address, browser type and version, operating system, device type, screen resolution, referring URLs, and pages visited within the platform. This data is used for security monitoring, fraud prevention, and platform optimisation.

2.6 Communications Data

If you contact our customer support team via live chat, email, or any other channel, we retain records of those communications, including the content of messages, timestamps, and the resolution provided. This allows us to maintain a coherent support history and improve service quality over time.

3 How We Use Your Personal Data

rbbaji processes personal data only for the specific purposes listed below. We do not use personal data for any purpose that is incompatible with the purpose for which it was originally collected without first obtaining your consent or establishing a separate legal basis.

1. Account Administration: Creating, maintaining, and closing your rbbaji account; authenticating your identity at login; communicating account-related notices such as balance updates, security alerts, and policy changes.
2. Payment Processing: Facilitating deposits via bKash, Nagad, Rocket, Upay, and card providers; processing withdrawal requests; maintaining an auditable record of all financial transactions on your account.
3. Age and Identity Verification: Confirming that you meet the minimum age requirement of 18 years; verifying your identity in connection with withdrawal processing and anti-money laundering obligations.
4. Fraud Prevention and Security: Monitoring account activity and platform access patterns for signs of unauthorised access, account takeover, identity fraud, collusion, or money laundering; investigating suspicious transactions.
5. Responsible Gaming: Monitoring gameplay patterns to identify indicators of problem gambling behaviour; administering deposit limits, session reminders, and self-exclusion requests submitted by players.
6. Customer Support: Responding to your enquiries, complaints, and requests; maintaining a support history to provide context for ongoing interactions.
7. Platform Improvement: Analysing aggregated, anonymised usage data to identify technical issues, improve platform performance, and optimise the player experience.
8. Legal Compliance: Fulfilling obligations imposed by applicable law, including record-keeping requirements and responding to lawful requests from regulatory or law enforcement authorities.

4 Legal Basis for Processing

rbbaji processes personal data on the following legal bases depending on the category of data and the purpose of processing:

• Contractual Necessity: Processing required to perform the contract between rbbaji and the player, including account management, payment processing, and game administration.
• Legal Obligation: Processing required to comply with applicable legal requirements, including age verification, anti-money laundering record-keeping, and responses to lawful authority requests.
• Legitimate Interests: Processing carried out in pursuit of rbbaji's legitimate business interests — such as fraud prevention, platform security, and customer support quality — where those interests are not overridden by your rights and freedoms.
• Consent: Where rbbaji processes data for purposes such as personalised promotions or marketing communications, we will obtain your explicit consent before doing so. You may withdraw consent at any time by contacting support or updating your account preferences.

5 Data Sharing and Third Parties

rbbaji does not sell, rent, or trade your personal data. We share personal data with third parties only in the limited circumstances described below, and only with parties who are contractually obligated to protect that data and use it solely for the specified purpose.

5.1 Payment Service Providers

To process deposits and withdrawals, rbbaji shares relevant transaction data with payment service providers including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, and card-processing networks. These providers receive only the data strictly necessary to complete the transaction.

5.2 Identity Verification Providers

rbbaji may engage specialist third-party identity verification services to assist with KYC processing. These providers operate under strict data processing agreements and may not use your identity documents for any purpose other than completing the verification check requested by rbbaji.

5.3 Game Providers

Games on the rbbaji platform are powered by third-party providers including Evolution Gaming, Ezugi, Pragmatic Play, NetEnt, Microgaming, and Spribe. These providers may receive a player session token and game-related identifiers to facilitate gameplay. They do not receive your full personal profile or financial data.

5.4 Legal and Regulatory Disclosure

rbbaji may disclose personal data to law enforcement agencies, courts, or regulatory bodies when required to do so by law, court order, or in response to a lawful formal request. rbbaji will notify you of such a disclosure where permitted by law.

6 Cookies & Tracking Technologies

rbbaji uses cookies and similar tracking technologies to operate the platform, maintain your session, detect fraud, and analyse aggregated usage patterns. The following categories of cookies are used:

• Strictly Necessary Cookies: Required for the platform to function. These include session authentication cookies that keep you logged in during an active session. These cookies cannot be disabled without breaking core platform functionality.
• Security Cookies: Used to detect fraudulent activity, identify unusual login patterns, and support our anti-bot and anti-fraud systems. Disabling these cookies may limit our ability to protect your account.
• Performance and Analytics Cookies: Used to collect anonymised data about how players navigate the platform — pages visited, time spent, errors encountered — to help us improve the overall experience. These cookies do not identify you personally.
• Preference Cookies: Used to remember your platform settings and preferences, such as your preferred language and display options, so that you do not need to reconfigure them on every visit.

You may manage your cookie preferences through your browser settings. Please note that disabling strictly necessary or security cookies will impair your ability to use the platform. rbbaji does not use third-party advertising or retargeting cookies.

7 Data Security

rbbaji implements a range of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and rbbaji's servers.
• Encryption at rest for sensitive data stored on rbbaji's infrastructure.
• Role-based access controls restricting internal access to personal data to staff who require it for their specific duties.
• Regular security assessments and penetration testing of the platform's technical infrastructure.
• Multi-factor authentication requirements for administrative access to player data systems.
• Automated monitoring systems that flag anomalous access patterns for investigation.

Despite these measures, no data transmission over the internet and no data storage system can be guaranteed to be completely secure. In the event of a data breach that is likely to result in a risk to your rights and freedoms, rbbaji will notify affected players without undue delay and will take all reasonable steps to contain and remediate the breach.

8 Data Retention

rbbaji retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal obligations. The specific retention periods applicable to each category of data are set out in the table in Section 2 of this Policy.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be attributed to an identifiable individual. Where anonymised data is retained for analytical purposes beyond the retention period, it no longer constitutes personal data and is not subject to this Policy.

Where you request deletion of your personal data before the expiry of the applicable retention period, rbbaji will assess your request and delete data where there is no overriding legal obligation or legitimate interest requiring its continued retention. rbbaji will inform you of the outcome of any such request within 30 days.

9 Your Data Rights

As a player whose personal data is processed by rbbaji, you have the following rights in relation to that data. To exercise any of these rights, please contact rbbaji's support team at [email protected] with a clear description of your request.

1. Right of Access: You may request a copy of the personal data rbbaji holds about you, together with information about the purposes for which it is processed and the categories of third parties with whom it is shared.
2. Right to Rectification: If personal data held by rbbaji is inaccurate or incomplete, you have the right to request that it be corrected. You may also update certain account details directly through your account settings.
3. Right to Erasure: You may request that rbbaji delete your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (if consent is the legal basis), or where there is no overriding legitimate reason for continued processing.
4. Right to Restriction: You may request that rbbaji restrict processing of your data — for example, while the accuracy of the data is being contested or while an objection to processing is being considered.
5. Right to Object: Where rbbaji processes your data on the basis of legitimate interests, you have the right to object to that processing. rbbaji will cease processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
6. Right to Data Portability: Where processing is based on your consent or on a contract, and is carried out by automated means, you may request that rbbaji provide your personal data in a structured, commonly used, machine-readable format.

10 Children's Privacy

The rbbaji platform is strictly for adults aged 18 years and over. rbbaji does not knowingly collect, process, or retain personal data from individuals under the age of 18. If rbbaji becomes aware that personal data has been collected from a minor — whether through fraudulent registration or any other means — that data will be deleted immediately and the associated account will be closed without notice.

If you are a parent or guardian and believe that a minor in your care has registered an account on rbbaji, please contact us immediately at [email protected]. We will investigate promptly and take appropriate action.

11 Third-Party Links

The rbbaji platform may contain links to third-party websites or services — for example, payment provider portals or game provider interfaces — that are not owned or operated by rbbaji. This Privacy Policy applies solely to data processed by rbbaji. Once you navigate away from the rbbaji platform to a third-party site or service, that third party's own privacy policy governs the processing of your data.

rbbaji has no control over the privacy practices of third-party sites and accepts no responsibility or liability for those practices. We encourage you to review the privacy policies of any third-party service you access in connection with your use of the rbbaji platform.

12 Updates to This Policy

rbbaji reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable law, or improvements to our security measures. The effective date at the top of this document will be updated each time a revision is made.

Where changes are material — meaning they affect how we collect, use, or share your personal data in ways that may affect your rights — rbbaji will notify registered players via their registered email address or through a prominent notice on the platform prior to the revised Policy taking effect. Your continued use of the rbbaji platform following the publication of a revised Policy constitutes your acceptance of the updated terms.

13 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data rbbaji holds about you, please contact our support team using the details below. We aim to acknowledge all privacy-related enquiries within 48 hours and to provide a substantive response within 30 days.

Email: [email protected]

Support hours: 24 hours a day, 7 days a week (Bangladesh Standard Time, UTC+6)

Response time: Typically within 1–2 hours during peak hours; formal data rights requests responded to within 30 days.