rbaji Privacy Policy

Introduction

This Privacy Policy ("Policy") describes how rbaji ("we", "us", "our") collects, uses, stores, discloses, and protects the personal information of users ("you", "your", "Player") who access or use the rbaji platform at https://rbaji.bar. This Policy forms part of our Terms and Conditions and should be read together with them. By registering an account or using any feature of the rbaji platform, you acknowledge that you have read and understood this Policy.

rbaji is committed to protecting your privacy and handling your personal data with the utmost care, transparency, and in accordance with applicable data protection standards. We collect only the minimum data necessary to provide, maintain, and improve our services, and we do not use your data for purposes beyond those described in this Policy without first obtaining your explicit consent.

Information We Collect

We collect personal information from you in three main ways: information you provide directly when using our services, information we generate automatically when you interact with our platform, and information we receive from third-party service providers with whom we work.

Information You Provide Directly

• Registration data: your full name, date of birth, Bangladeshi mobile number, preferred username, and account password (stored in hashed form — never as plain text).
• Identity verification documents: copies of your National ID card, passport, or birth certificate submitted during KYC verification. These documents are stored securely and deleted once verification is complete, unless regulatory obligations require longer retention.
• Financial data: your mobile wallet number (bKash, Nagad, Rocket, or Upay) used for deposits and withdrawals, and records of all financial transactions conducted on the platform. We do not store mobile wallet PINs or passwords.
• Communications: messages you send to our customer support team via email, live chat, or any other support channel, including records of any complaints or disputes raised.

Information Collected Automatically

• Device and technical data: IP address, device type and model, operating system version, browser type and version, screen resolution, and mobile network operator.
• Usage data: pages visited, time spent on each page, links clicked, games played, bets placed, betting history, deposit and withdrawal records, bonus offers viewed and claimed, and session duration.
• Location data: country and city-level location derived from your IP address. We do not collect precise GPS coordinates or real-time location tracking data.
• Cookie and tracking data: session cookies, persistent cookies, and similar tracking technologies as described in the Cookies section of this Policy.

Information from Third Parties

• Payment verification data from mobile financial service providers (bKash, Nagad, Rocket, Upay) confirming the status of deposit and withdrawal transactions. We receive only confirmation and transaction reference data — not your wallet PIN or password.
• Fraud prevention and anti-money-laundering screening data from compliance services used to verify the identity of players and detect suspicious activity patterns.
• Technical performance data from game providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi) related to game session outcomes required for accurate settlement of bets and resolution of disputes.

How We Use Your Information

rbaji uses personal data only for clearly defined, lawful purposes. We do not engage in speculative data processing, and we do not use automated decision-making processes that produce legal or similarly significant effects without human oversight. The primary purposes for which we use your data are:

• Account creation and management: to register your account, verify your identity, authenticate your login sessions, and maintain your account profile and preferences.
• Service delivery: to process your deposits and withdrawals via bKash, Nagad, Rocket, and Upay; to settle your bets accurately; to credit bonuses; and to provide access to all gaming content available on the rbaji platform.
• Legal and regulatory compliance: to meet our anti-money-laundering (AML) obligations, to conduct Know Your Customer (KYC) checks, to respond to lawful requests from law enforcement or regulatory bodies, and to keep records as required by applicable law.
• Security and fraud prevention: to detect and investigate fraudulent activity, bonus abuse, multi-accounting, and other prohibited conduct; to monitor platform security; and to protect the interests of all rbaji players.
• Customer support: to respond to your enquiries, resolve complaints, handle disputes, and provide technical assistance. Support communications may be recorded and retained for quality assurance and training purposes.
• Marketing communications (with consent): to send you personalised offers, bonus notifications, and promotional content about rbaji products and services, where you have opted in to receive such communications. You may withdraw this consent at any time.

Legal Basis for Processing

rbaji processes your personal data on the following legal bases. We identify the applicable legal basis for each processing activity before commencing it, and we document our assessments internally.

• Contractual necessity: processing required to fulfil our obligations under the Terms and Conditions you accepted at registration — such as operating your account, processing transactions, and settling bets.
• Legal obligation: processing required to comply with applicable laws and regulations, including AML obligations, KYC requirements, and responding to lawful orders from courts or regulatory authorities.
• Legitimate interests: processing carried out to protect the security of our platform, prevent fraud and abuse, improve our services through analytics, and manage the day-to-day operations of the rbaji business — where these interests are not overridden by your rights and freedoms.
• Consent: processing for marketing communications and non-essential cookies, where you have given us your explicit and freely given consent. You may withdraw consent at any time without affecting the lawfulness of processing conducted before withdrawal.

Disclosure of Your Information

rbaji does not share your personal data with third parties except in the circumstances described below. In all cases where sharing is necessary, we apply appropriate contractual safeguards and share only the minimum data required for the specific purpose.

Service Providers and Partners

• Payment processors: bKash, Nagad, Rocket, and Upay receive transaction-level data necessary to process your deposits and withdrawals. These providers operate under their own privacy frameworks and are subject to their own regulatory obligations.
• Game providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive session identifiers and bet data necessary to operate their games and resolve any game-related disputes. No unnecessary personal data is passed to game providers.
• Compliance and security vendors: identity verification services, fraud detection platforms, and AML screening providers receive the minimum personal data necessary to perform identity checks and flag suspicious activity, as required by our legal obligations.

Legal Disclosures

rbaji may disclose your personal data to law enforcement agencies, regulatory bodies, financial intelligence units, or courts where we are legally required to do so by a valid court order, statutory obligation, or regulatory directive. We will notify you of any such disclosure where we are legally permitted to do so, and we will challenge any requests that we consider to be overly broad or unlawful.

Cookies and Tracking Technologies

rbaji uses cookies and similar tracking technologies to operate the platform efficiently, remember your preferences, analyse how players use our services, and deliver relevant promotional content to players who have opted in. A cookie is a small text file placed on your device by your browser when you visit the rbaji website. Cookies do not contain viruses and cannot access any other data on your device.

Types of Cookies We Use

• Essential cookies: strictly necessary for the platform to function. These include session authentication cookies, security tokens, and load-balancing cookies. They cannot be disabled without breaking core platform functionality.
• Functional cookies: remember your preferences such as language settings, display options, and previously entered data to improve your experience across sessions.
• Analytics cookies: collect anonymised data about how players navigate the platform — such as which pages are visited most, which games are most popular, and where players encounter difficulties — to help us improve the platform. These require your consent.
• Marketing cookies: used to deliver personalised promotional content and track the effectiveness of our marketing campaigns. These are only activated when you have provided explicit consent and can be disabled at any time through your account settings.

You can manage your cookie preferences through your device browser settings. Please note that disabling essential cookies will prevent you from logging in and using core platform features. Disabling functional or analytics cookies will not affect your ability to place bets or make transactions on rbaji.

Data Retention

rbaji retains your personal data for as long as your account remains active and for a defined period after account closure, as required by our legal and regulatory obligations. Specific retention periods are as follows: account registration data and transaction records are retained for a minimum of five years following account closure to satisfy AML and financial record-keeping requirements. KYC identity documents are retained for the duration of the account and for five years after closure. Customer support communications are retained for two years. Analytics and usage data in anonymised form may be retained indefinitely for platform improvement purposes.

When the applicable retention period expires, personal data is securely deleted or irreversibly anonymised. We conduct periodic reviews of the data we hold to ensure that data no longer required for any lawful purpose is deleted promptly. You may request early deletion of your data subject to our legal retention obligations by contacting support.

Your Data Rights

As a user of the rbaji platform, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact our support team with your request. We will acknowledge your request within 72 hours and aim to fulfil it within 30 days. Where we are unable to fulfil a request due to a legal retention obligation or other lawful ground, we will explain why.

• Right to access: you may request a copy of all personal data rbaji holds about you, along with information about how it is used and with whom it has been shared.
• Right to rectification: if any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it.
• Right to erasure: you may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent, or where we have processed it unlawfully — subject to legal retention obligations.
• Right to restriction: you may request that we temporarily suspend our processing of your personal data — for example, while we are investigating a dispute about its accuracy or lawfulness.
• Right to portability: you may request that we provide your personal data in a structured, commonly used, machine-readable format so that you can transfer it to another service provider.
• Right to object: you may object to our processing of your personal data where we rely on legitimate interests as the legal basis, including for direct marketing purposes. Where you object to direct marketing, we will stop processing your data for that purpose immediately.

To exercise any of the above rights, please contact our support team at [email protected] with the subject line "Data Rights Request" and a description of your request. We may ask you to verify your identity before processing your request. There is no charge for exercising your data rights.

Data Security

rbaji employs a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include SSL/TLS encryption for all data transmitted between your device and our servers; encryption of sensitive data fields at rest in our database; strict access controls limiting which staff members can view personal data, with access granted only on a need-to-know basis; regular security audits and penetration testing of our platform infrastructure; and two-factor authentication requirements for platform administrative access.

Despite these measures, no internet-based platform can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, rbaji will notify affected players without undue delay and will take all reasonable steps to contain the breach, assess its impact, and prevent recurrence.

Minors and Age Restriction

The rbaji platform is strictly intended for adults aged 21 and above. We do not knowingly collect personal data from individuals under the age of 21, and we do not permit anyone under 21 years of age to register an account or engage in any gaming activity on the platform. If we become aware that we have collected personal data from a person under the age of 21, we will delete that data immediately and close the associated account without notice.

If you are a parent or guardian and you believe that a person under your care may have created an rbaji account or provided personal data to us without your knowledge, please contact [email protected] immediately. We will investigate and take all appropriate action, including deleting any data held and closing the account.

Third-Party Links and Services

The rbaji platform integrates with third-party game providers and payment processors to deliver a complete gaming experience. These third parties operate their own platforms, which are governed by their own privacy policies. rbaji is not responsible for the privacy practices of third-party providers. When you interact directly with a third-party service embedded within the rbaji platform — such as a live casino game stream operated by Evolution Gaming or a payment confirmation page operated by bKash — that provider's own privacy policy governs the data collected during that interaction. We encourage you to review the privacy policies of all third-party services you use.

Changes to This Privacy Policy

rbaji reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform features. The date of the most recent revision is indicated at the top of this document. Where a material change is made to this Policy, we will make reasonable efforts to notify registered players via SMS to their registered mobile number or by posting a prominent notice on the rbaji platform prior to the change taking effect.

Your continued use of the rbaji platform following any update to this Policy constitutes your acceptance of the revised Policy. If you do not agree with any change to this Policy, you should stop using the platform and contact support to arrange account closure and the deletion or return of your personal data to the extent permitted by our legal retention obligations.

Contact Us About Privacy

If you have any questions, concerns, or complaints about this Privacy Policy or about how rbaji handles your personal data, please contact our support team. We take all privacy enquiries seriously and aim to respond to every request within 72 hours on business days. For formal data rights requests, please include "Data Rights Request" in the subject line of your message.

Our support team is available 24 hours a day, 7 days a week, in both English and Bengali. Whether you have a question about your data, wish to exercise a data right, or want to report a privacy concern, we are here to help.