r bajje Privacy Policy

Information We Collect

r bajje collects personal data from players in Bangladesh through several distinct channels: information provided directly by the player at registration and during account use, information generated automatically as the player interacts with the platform, and in limited circumstances, information obtained from verified third-party sources to support identity verification.

Information you provide directly to r bajje includes:

• Registration data: Full legal name, date of birth, residential address in Bangladesh (including division, district, and postal area), email address, and mobile telephone number.
• Identity verification (KYC) documents: Copies of government-issued photo identification such as the National Identity Card (NID), passport, or driver's licence; proof-of-address documents such as recent utility bills or bank statements; and evidence of ownership of payment methods used on the platform.
• Financial information: Details of payment methods including bKash account numbers, Nagad numbers, Rocket numbers, Upay account details, bank account information for bank transfer requests, and masked card details for Visa or Mastercard transactions. r bajje does not store full card numbers — card data is processed exclusively by PCI-DSS compl iant payment processors.
• Support communications: Any messages, complaints, dispute submissions, or other correspondence you send to r bajje through live chat, email, or any other support channel.
• Responsible gaming preferences: Deposit limits, session time limits, self-exclusion requests, and cooling-off period selections made through your account settings.

Information collected automatically when you use the r bajje platform includes:

• Device and technical data: IP address, browser type and version, operating system, device model, screen resolution, and device identifiers.
• Usage and behavioural data: Pages visited, games played, bet amounts and outcomes, session duration, navigation paths, and feature interactions within the platform.
• Transaction data: A complete record of all deposits, withdrawals, bonus credits, wager settlements, and balance adjustments associated with your account.
• Geolocation data: Approximate location derived from your IP address, used to apply region-specific access controls and to detect access from restricted jurisdictions.
• Cookie and tracking data: Session tokens, preference cookies, and analytics identifiers as further described in the Cookies section of this Policy.

Information from third parties may be received by r bajje in limited circumstances, including identity verification results from KYC service providers, fraud risk scores from payment processing partners, and age-verification confirmation from document-checking services. r bajje uses this third-party data solely for the purposes described in this Policy and does not sell or rent it to unrelated parties.

How We Use Your Information

r bajje processes personal data only for specific, legitimate purposes. We do not use personal data for purposes incompatible with those stated at the time of collection without seeking fresh consent from the affected player. The principal purposes for which r bajje processes player data are set out in the table below.

Where r bajje relies on consent as the legal basis for processing — most notably for direct marketing communications — you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal. Consent may be withdrawn by updating your marketing preferences in your account settings or by contacting support at [email protected].

r bajje will never use your personal data to make fully automated decisions that produce significant legal or similarly significant effects on you without providing a means by which you can request human review of that decision.

Sharing & Disclosure of Data

r bajje does not sell, rent, or trade personal data to third parties for their own marketing or commercial purposes. Personal data is shared with external parties only in the limited circumstances described below, and always subject to appropriate contractual safeguards that require the recipient to protect the data to a standard consistent with this Policy.

Service providers and data processors who assist r bajje in operating the platform may access player data strictly within the scope of the services they provide. These include:

• Payment processors: bKash, Nagad, Rocket, Upay, and international card networks (Visa, Mastercard) — receive transaction data necessary to execute deposits and withdrawals.
• Identity verification providers: Third-party KYC and document-checking services that confirm the authenticity of identity documents submitted during account verification.
• Fraud prevention and risk management services: Providers that analyse device, behavioural, and transaction data to flag suspicious activity and protect the platform from abuse.
• Game technology providers: Software studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive a session token and anonymised player identifier to deliver their games; they do not receive your full personal profile.
• Analytics and platform performance tools: Services that help r bajje understand how players use the platform and identify areas for improvement; these tools receive anonymised or pseudonymised data wherever technically feasible.
• Customer support infrastructure: Live-chat and ticketing platform providers that facilitate support interactions between players and the r bajje support team.

Legal and regulatory disclosure: r bajje may disclose personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by applicable law, or where disclosure is necessary to protect the rights, property, or safety of r bajje, its players, or the public. In such cases, r bajje will share only the minimum data necessary to comply with the specific legal requirement.

Cookies & Tracking Technologies

r bajje uses cookies and similar tracking technologies on the platform to ensure the site functions correctly, to remember your preferences, to keep your session secure, and to gather anonymised analytics that help us improve the platform experience for all players in Bangladesh.

The categories of cookies used by r bajje are as follows:

• Strictly necessary cookies: These are essential for the platform to function. They include session authentication tokens, security cookies that protect against cross-site request forgery, and cookies that maintain your login state while you navigate between pages. These cookies cannot be disabled without breaking core platform functionality.
• Functional cookies: These remember your preferences such as language settings, preferred payment method, and display configuration. Disabling them may result in a less personalised experience but will not prevent access to the platform.
• Analytics cookies: These collect anonymised information about how players interact with the platform — which pages are visited most frequently, how long players spend on each section, and which features generate the most engagement. This information is used exclusively to improve the platform and is not linked to your individual identity.
• Marketing cookies: Where you have consented to receive promotional communications, marketing cookies may be used to measure the effectiveness of promotional content and to ensure that offers shown to you are relevant to your interests on the r bajje platform. These are only active if you have opted in to marketing communications.

Most web browsers allow you to control cookies through their settings. You can typically instruct your browser to refuse all cookies or to alert you when a cookie is being placed. Please note that disabling strictly necessary cookies will affect the functionality of the r bajje platform and may prevent you from logging in or completing transactions.

Data Security Measures

r bajje implements a multi-layered approach to information security designed to protect player data against unauthorised access, disclosure, alteration, and destruction. Our technical and organisational security measures include, but are not limited to, the following:

• 256-bit SSL/TLS encryption: All data transmitted between your device and the r bajje platform is encrypted using industry-standard Transport Layer Security. This prevents interception of sensitive information such as login credentials and financial data in transit.
• Encrypted data storage: Sensitive personal data held in our databases — including identity documents, payment method details, and authentication credentials — is encrypted at rest using strong encryption standards.
• Access controls: Access to systems holding personal data is restricted to authorised r bajje staff who require that access to perform their specific job functions. Access privileges are reviewed regularly, and all access events are logged for audit purposes.
• Two-factor authentication: r bajje supports and encourages the use of two-factor authentication for player accounts to provide an additional layer of protection beyond the password alone.
• Intrusion detection and monitoring: Our infrastructure is continuously monitored for suspicious activity, attempted breaches, and anomalous access patterns. Automated alerts escalate potential incidents to our security team for immediate investigation.
• Vulnerability management: r bajje conducts regular security assessments of the platform, including penetration testing and code reviews, to identify and remediate potential vulnerabilities before they can be exploited.

While r bajje takes every reasonable technical precaution to protect your personal data, no system connected to the internet can be guaranteed to be completely immune from security threats. In the event of a data breach that is likely to result in a risk to your rights and freedoms, r bajje will notify affected players and relevant authorities within the timeframe required by applicable data protection principles, and will take immediate steps to contain and remediate the incident.

Players are reminded that they also have a role in keeping their accounts secure. You should use a strong, unique password for your r bajje account, not share your credentials with anyone, and contact support immediately at [email protected] if you suspect your account has been compromised.

Data Retention & Deletion

r bajje retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. The retention periods applied to different categories of player data are guided by the following principles:

• Active account data: Personal data associated with an active r bajje account is retained for the full duration of the account relationship. This includes registration data, KYC documents, transaction records, and account activity logs.
• Closed account data: Following the closure of an account — whether voluntarily by the player or by r bajje — personal data is generally retained for a minimum period of five (5) years to meet anti-money laundering record-keeping requirements, dispute resolution needs, and audit obligations. After this period, data is securely deleted or anonymised unless a specific legal hold requires further retention.
• Marketing data: Data processed on the basis of consent for marketing purposes is deleted promptly upon the withdrawal of that consent, unless it is also required to be retained for another legitimate purpose such as transaction records.
• Support and communication records: Records of customer support interactions are retained for a period of three (3) years following the resolution of the relevant query or dispute.
• Analytics data: Anonymised and aggregated analytics data that cannot be linked back to an individual player may be retained indefinitely as it no longer constitutes personal data under applicable data protection principles.

When the applicable retention period expires, r bajje securely disposes of the relevant data through deletion from active databases, overwriting of storage media, and destruction of physical documents where applicable. Secure deletion processes are documented and subject to internal audit.

Your Privacy Rights

r bajje respects your rights over your own personal data. As a player on the r bajje platform, you hold the following rights in relation to the personal data we hold about you. To exercise any of these rights, please contact our support team by email at [email protected] with the subject line "Privacy Rights Request" and a description of the right you wish to exercise. r bajje aims to respond to all valid privacy rights requests within thirty (30) calendar days.

• Right of access: You have the right to request a copy of the personal data that r bajje holds about you, along with information about how it is being used. This is sometimes referred to as a Subject Access Request.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it without undue delay.
• Right to erasure: In certain circumstances, you have the right to request the deletion of your personal data. This right applies where the data is no longer necessary for the purpose for which it was collected, where you withdraw consent and no other legal basis applies, or where the data has been unlawfully processed. This right is subject to override by legal retention obligations.
• Right to restriction of processing: You may request that r bajje restrict the processing of your personal data in certain circumstances — for example, while a dispute about the accuracy of the data is being resolved.
• Right to data portability: Where processing is based on your consent or on a contract, you have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format, and to request that it be transmitted directly to another service provider where technically feasible.
• Right to object: You have the right to object to the processing of your personal data where r bajje relies on legitimate interests as the legal basis, unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that occurred before the withdrawal.

Changes to This Policy

r bajje reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, new legal or regulatory requirements, or improvements to the platform. When material changes are made to this Policy, we will notify registered players by email to their registered address and by placing a prominent notice on the r bajje platform for a reasonable period following the change.

The "Last updated" date displayed at the top of this Policy will always reflect the date on which the most recent revision was made. Players are encouraged to review this Policy periodically to remain informed about how r bajje handles their personal data. Continued use of the platform following notification of a change constitutes acceptance of the revised Policy.

If you have questions about this Privacy Policy, about how r bajje handles your personal data, or wish to exercise any of your privacy rights, please contact our support team. Our data-related queries are handled in English, and we aim to provide a substantive response to all privacy enquiries within twelve (12) hours via live chat and within thirty (30) calendar days for formal rights requests submitted by email.