rbajee Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how rbajee ("rbajee", "we", "us", or "our") collects, uses, stores, shares, and protects personal data relating to visitors and registered players ("you" or "your") of the website accessible at https://rbajee.games and all associated subdomains, mobile interfaces, and services (collectively, "the Platform"). By accessing or using the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and use of your personal data as described herein. This Policy forms part of and should be read alongside our Terms & Conditions.

rbajee is committed to handling your personal data with transparency, integrity, and care. We collect only the data we genuinely need, we protect it with appropriate technical and organisational measures, and we never sell it to third parties for commercial gain. If you have any questions about this Policy, please contact us at [email protected].

2. Data Controller

rbajee is the data controller responsible for the personal data collected through the Platform. As data controller, we determine the purposes for which personal data is collected and the manner in which it is processed. All queries, requests, and complaints relating to the processing of your personal data should be directed to our support team using the contact details provided in Section 13 of this Policy.

3. What Personal Data We Collect

We collect personal data in several ways: directly from you when you register an account or interact with the Platform, automatically when you browse or use the Platform, and occasionally from third-party sources such as payment processors and fraud prevention services. The categories of personal data we collect include:

We do not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data, except where identity verification procedures require us to process a copy of a document that incidentally contains such information. In those cases the information is used only for verification and is not processed for any other purpose.

4. How We Use Your Personal Data

rbajee processes your personal data only where we have a lawful basis for doing so. The primary purposes for which we use your data, and the corresponding legal basis for each, are as follows:

• Account registration and management: To create and maintain your player account, verify your identity, and manage your relationship with rbajee. Legal basis: performance of a contract.
• Processing transactions: To facilitate deposits and withdrawals through bKash, Nagad, Rocket, Upay, and bank transfer channels. Legal basis: performance of a contract.
• Age and identity verification: To confirm that you are at least 21 years of age and that your identity matches the details you provided at registration. Legal basis: legal obligation and legitimate interests.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, money laundering, collusion, and other forms of prohibited conduct. Legal basis: legitimate interests and legal obligation.
• Responsible gaming: To monitor your gaming activity for signs of problem gambling, apply self-imposed limits and restrictions you have set, and contact you if we have concerns about your wellbeing. Legal basis: legal obligation and legitimate interests.
• Customer support: To respond to your queries, complaints, and requests promptly and accurately. Legal basis: performance of a contract and legitimate interests.
• Marketing communications: To send you promotional offers, bonus notifications, and news about rbajee by email or SMS where you have consented to receive such communications. Legal basis: consent. You may withdraw consent at any time by contacting [email protected].
• Platform improvement: To analyse usage patterns, diagnose technical issues, conduct A/B testing, and improve the performance, security, and user experience of the Platform. Legal basis: legitimate interests.
• Legal compliance: To comply with applicable laws, regulatory requirements, court orders, and requests from competent authorities. Legal basis: legal obligation.

5. Cookies and Tracking Technologies

rbajee uses cookies and similar tracking technologies (including web beacons and local storage) to operate and improve the Platform. Cookies are small text files placed on your device when you visit the Platform. We use the following categories of cookies:

• Strictly necessary cookies: Essential for the Platform to function. These enable core features such as session management, account login state, and security. They cannot be disabled.
• Performance and analytics cookies: Collect anonymised data about how visitors use the Platform, which pages are visited most frequently, and how users navigate through the site. This data helps us improve functionality and layout.
• Functional cookies: Remember your preferences such as language settings, time-zone configuration, and responsible gaming settings so you do not have to re-enter them on each visit.
• Marketing cookies: Used to track the effectiveness of promotional campaigns and to present you with relevant offers. These are only placed where you have provided consent.

You can manage your cookie preferences through your device browser settings. Please note that disabling strictly necessary cookies may affect your ability to use key features of the Platform, including account login and gameplay.

6. Sharing Your Personal Data

rbajee does not sell, rent, or trade your personal data to any third party for their own commercial purposes. We share your personal data only in the following limited circumstances:

• Payment processors: bKash, Nagad, Rocket, Upay, Visa, Mastercard, and our banking partners receive the financial data necessary to process your deposits and withdrawals. Each payment partner is contractually bound to handle your data securely and to use it only for the purpose of processing your transactions.
• Identity verification providers: Third-party KYC (Know Your Customer) service providers who process copies of your identity documents to complete the verification required before your first withdrawal. These providers are bound by strict data processing agreements.
• Fraud and security services: Fraud detection agencies and cybersecurity providers who help rbajee identify and prevent unauthorised account access, money laundering, and other prohibited activities.
• Game software providers: Game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive anonymised or pseudonymised session data necessary to deliver their games through the Platform. These providers do not receive your full identity or contact data.
• Regulatory and law enforcement authorities: Where rbajee is required to disclose personal data by applicable law, court order, or lawful request from a competent government or law enforcement authority, we will comply. Where permitted, we will notify you of such a disclosure.
• Business transfers: In the event of a merger, acquisition, restructuring, or sale of rbajee's business or assets, your personal data may be transferred to the acquiring entity as part of that transaction. We will notify you via email or in-account message prior to your data being transferred and becoming subject to a different privacy policy.

7. International Data Transfers

rbajee primarily operates in Bangladesh and processes the majority of personal data within the region. However, some of our third-party service providers — including certain game studios and technology infrastructure providers — may be located in other countries. Where personal data is transferred outside Bangladesh, rbajee ensures that appropriate safeguards are in place to protect the data to a standard equivalent to that applied within Bangladesh. These safeguards may include data processing agreements incorporating standard contractual clauses, or transfers to jurisdictions that provide an adequate level of data protection.

8. Data Security

rbajee takes the security of your personal data seriously and implements a range of technical and organisational measures to protect it against unauthorised access, accidental loss, alteration, or disclosure. Our security measures include:

• SSL/TLS encryption for all data in transit between your device and our servers.
• Encryption of sensitive data at rest, including financial records and identity documents.
• Access controls that restrict access to personal data to authorised rbajee personnel on a strict need-to-know basis.
• Regular security audits and penetration testing conducted by independent technical specialists.
• Incident response procedures that enable rapid detection and containment of any data security breach.
• Two-factor authentication options available to all registered players to protect account access.

While rbajee takes every reasonable step to protect your personal data, no method of electronic transmission or storage is completely secure. You are also responsible for protecting your own account credentials and for notifying us immediately at [email protected] if you suspect any unauthorised access to your account.

9. Data Retention

rbajee retains personal data only for as long as is necessary for the purposes set out in this Policy, or as required by applicable law. The following general retention periods apply:

• Account and identity data: Retained for the duration of your account and for a minimum of 5 years following permanent account closure, to meet regulatory, anti-money-laundering, and dispute resolution obligations.
• Transaction and financial records: Retained for a minimum of 5 years from the date of each transaction, in line with standard financial record-keeping requirements.
• Customer support communications: Retained for 3 years from the date of the last communication, to support any follow-up queries or disputes.
• Marketing consent records: Retained for as long as your marketing consent remains active, plus a reasonable period after withdrawal of consent to demonstrate compliance.
• Technical and log data: Typically retained for 12 months, unless a longer period is required for ongoing security investigations.

When personal data is no longer required for any legitimate purpose, rbajee will delete or anonymise it in a secure and irreversible manner.

10. Your Rights

As a data subject, you have the following rights in relation to the personal data rbajee holds about you. To exercise any of these rights, please contact us at [email protected] with your full name, account username, and a description of your request. We will respond within 30 days.

• Right of access: You have the right to request a copy of the personal data rbajee holds about you, along with information about how it is being used.
• Right to rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold about you.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where it has been processed unlawfully. Please note that this right is subject to overriding legal obligations that may require us to retain certain data.
• Right to restriction of processing: You may request that we temporarily restrict processing of your personal data while the accuracy of the data or the lawfulness of our processing is under review.
• Right to data portability: Where processing is based on your consent or on a contract, you may request that we provide your personal data in a structured, commonly used, machine-readable format so that you can transfer it to another service provider.
• Right to withdraw consent: Where processing is based solely on your consent (e.g., marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
• Right to object: You have the right to object to processing of your personal data based on legitimate interests, including profiling for direct marketing purposes.

11. Children and Minors

The rbajee Platform is strictly for adults aged 21 and above. We do not knowingly collect personal data from persons under the age of 21. If rbajee becomes aware that a minor has created an account or provided personal data through the Platform, we will immediately close the account, delete all associated personal data, and return any funds to the payment method from which they were received. If you believe a minor has accessed the Platform, please notify us immediately at [email protected].

12. Third-Party Links and Services

The Platform may contain references to third-party payment services (bKash, Nagad, Rocket, Upay, Visa, Mastercard) and game providers. Any interaction you have with those third-party services — including any personal data you submit directly to them outside of the rbajee Platform — is governed by their own privacy policies. rbajee is not responsible for the privacy practices of third-party services and encourages you to review those policies before submitting any personal data.

13. Changes to This Policy

rbajee reserves the right to update or amend this Privacy Policy at any time. When we make material changes, we will notify registered players by email or via a prominent in-account notice at least 7 days before the changes take effect. The "Last updated" date at the top of this Policy will be revised each time changes are made. Continued use of the Platform after the effective date of any amendment constitutes acceptance of the revised Policy.

14. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way rbajee handles your personal data, please contact our Data Privacy team using the details below. We aim to respond to all privacy-related enquiries within 5 business days.

• Email: [email protected] (plain text — not a clickable link)
• Response time: Within 5 business days of receiving your request
• Language: English