Privacy Policy — How rrbaje Protects Your Personal Data

Information We Collect

rrbaje collects personal information from users in order to deliver a safe, secure, and compliant online gaming experience. The categories of personal data we collect depend on how you interact with the rrbaje platform — whether you are browsing as a visitor, registering an account, making a deposit, or engaging with our customer support team.

Information You Provide Directly

When you register an account, complete identity verification, or interact with our support team, we collect the following information:

• Identity Data: Full legal name, date of birth, gender (where provided), and a copy of your government-issued identity document (Bangladesh National Identity Card, passport, or driving licence).
• Contact Data: Email address, mobile phone number, and residential address in Bangladesh (including division, district, and postal code).
• Financial Data: Payment method details (such as bKash account number, Nagad number, Rocket number, Upay number, bank account details, or card details as applicable), transaction records, deposit and withdrawal history, and account balance information.
• Account Credentials: Username and encrypted password (we do not store passwords in plain text under any circumstances).
• Communications Data: Any information you provide when contacting our support team via email or live chat, including the content of those communications and any attachments you submit.
• Responsible Gaming Data: Self-exclusion requests, deposit limit preferences, session time alert settings, and any self-reported information about gambling habits provided through our responsible gaming tools.

Information Collected Automatically

When you access or use the rrbaje platform, certain technical data is collected automatically by our systems:

• Device & Technical Data: IP address, device type, device identifier, operating system, browser type and version, screen resolution, and time zone (UTC+6 / Bangladesh Standard Time where applicable).
• Usage Data: Pages visited, games played, bets placed, wager amounts, session duration, click paths, search queries within the platform, and error logs.
• Geolocation Data: Approximate geographic location derived from your IP address. We do not collect precise GPS-level location data unless you explicitly grant such access on a mobile device.
• Cookie & Tracking Data: Information collected via cookies, web beacons, pixel tags, and similar tracking technologies (see Section 5 — Cookies & Tracking Technologies for full details).

Information from Third Parties

rrbaje may also receive personal data about you from third-party sources in limited circumstances, including:

• Identity verification and KYC service providers, who may confirm or supplement the identity information you have submitted.
• Payment processors and mobile financial service operators (bKash, Nagad, Rocket, Upay), who may share transaction confirmation data necessary to credit deposits or process withdrawals.
• Fraud prevention and risk management partners, who may provide signals about account or transaction risk scores.
• Publicly available sources, such as sanctions lists and politically exposed persons (PEP) databases, where required for compliance purposes.

How We Use Your Information

rrbaje uses the personal data we collect for specific, legitimate purposes. We do not use your data for purposes that are incompatible with those described below, and we do not sell your personal data to third parties for their own marketing purposes under any circumstances.

Where rrbaje relies on your consent as the legal basis for processing (for example, sending you promotional emails about seasonal offers such as those around Eid, Pohela Boishakh, or BPL cricket fixtures), you may withdraw that consent at any time by contacting us at [email protected] or by adjusting your communication preferences in your account settings. Withdrawal of consent does not affect the lawfulness of processing that took place prior to withdrawal.

Legal Basis for Processing

rrbaje processes personal data only where a valid legal basis exists for doing so. The primary legal bases on which rrbaje relies are as follows:

• Contract Performance: Much of the data processing we carry out is necessary to fulfil our contractual obligations to you as a registered rrbaje player. This includes creating and managing your account, processing your deposits via bKash, Nagad, Rocket, or Upay, settling your bets, and processing withdrawal requests to your nominated payment method.
• Legal Obligation: Some processing is required by law or by the conditions of rrbaje's international gaming licence. This includes Know Your Customer (KYC) identity verification, age verification (confirming that all users are 18 years of age or older), anti-money laundering checks, and responsible gaming compliance obligations such as self-exclusion enforcement.
• Legitimate Interests: rrbaje processes certain data on the basis of legitimate business interests where those interests are not overridden by your rights and freedoms. This includes fraud detection and prevention, platform security monitoring, internal analytics to improve user experience, and detecting patterns of problem gambling that may require responsible gaming intervention.
• Consent: Where no other legal basis applies, rrbaje will seek your explicit consent before processing your data. This is primarily used for marketing communications and for personalised content recommendations. You can withdraw consent at any time without affecting prior processing.

If you would like to understand the specific legal basis that applies to any particular processing activity not described above, you may contact our data team at [email protected].

Data Sharing & Third Parties

rrbaje does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We share your data with carefully selected third parties only where necessary to deliver the rrbaje service, fulfil legal obligations, or protect the integrity of the platform.

Categories of Third-Party Recipients

• Identity Verification & KYC Providers: We share identity documents and personal details with licensed KYC and age verification service providers to fulfil our regulatory obligation to verify that all players are aged 18 or above and are who they claim to be.
• Payment Processors: Financial data is shared with payment partners — including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard — to the extent necessary to process your deposits and withdrawals. Each of these partners operates under their own privacy and data protection frameworks.
• Game Technology Providers: Certain gameplay data (such as bet identifiers, session tokens, and wager outcomes) is shared with our licensed third-party game providers — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — to enable fair game delivery and resolve technical disputes.
• Fraud Prevention & Risk Partners: Device data, IP addresses, and behavioural signals may be shared with fraud detection and cybersecurity partners to protect the platform from unauthorised access, account takeover, and financial crime.
• Analytics Providers: Anonymised and aggregated usage data may be shared with platform analytics providers to help us understand user behaviour and improve the rrbaje experience. We do not share individually identifiable data with analytics providers where anonymisation is achievable.
• Legal & Regulatory Authorities: rrbaje may be required to disclose personal data to law enforcement agencies, regulatory bodies, or courts of competent jurisdiction in response to lawful requests, legal process, or where we are required to do so by our gaming licence obligations.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of rrbaje's business, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such change via the platform website.

Cookies & Tracking Technologies

rrbaje uses cookies and similar tracking technologies on its platform to ensure core functionality, improve user experience, and — where you have consented — to deliver personalised content and measure marketing effectiveness.

What Are Cookies?

Cookies are small text files stored on your device (computer, tablet, or smartphone) when you visit a website. They allow the website to remember information about your visit — such as your login session, preferred settings, and browsing behaviour — so that the site can function correctly and provide a more relevant experience on subsequent visits.

Categories of Cookies We Use

Managing Your Cookie Preferences

You can manage or withdraw your consent to non-essential cookies at any time through your account settings on the rrbaje platform. Additionally, most modern web browsers allow you to block or delete cookies through their built-in privacy settings. Please note that disabling strictly necessary cookies will impair core platform functionality and may prevent you from logging in or placing bets.

For mobile app users on Android or iOS devices, you can manage app permissions and advertising identifiers through your device's operating system settings.

Data Retention

rrbaje retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law or our gaming licence obligations. The following retention schedule provides guidance on how long different categories of data are typically held:

When the applicable retention period expires and no other legal obligation requires continued storage, rrbaje will securely delete or anonymise your personal data so that it can no longer be linked to you as an individual. Anonymised aggregate data may be retained indefinitely for statistical and research purposes.

Your Data Rights

As a user of the rrbaje platform, you hold a number of rights with respect to your personal data. rrbaje is committed to honouring these rights promptly and transparently. To exercise any of the rights described below, please contact our data team at [email protected] with the subject line "Data Rights Request", along with a brief description of your request and sufficient information to verify your identity.

• Right of Access: You have the right to request a copy of the personal data that rrbaje holds about you. We will provide this within 30 days of a verified request, free of charge for the first request in any 12-month period.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it. You can update basic profile information directly through your account settings at any time.
• Right to Erasure ("Right to Be Forgotten"): You may request the deletion of your personal data where it is no longer necessary for the purpose it was collected, where you withdraw consent (and no other legal basis applies), or where the data has been unlawfully processed. Please note that rrbaje cannot fulfil erasure requests where retention is required by law (for example, financial records and KYC data that must be held for 5 years).
• Right to Restrict Processing: You may request that we restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data is being contested, or while an objection to processing is being assessed.
• Right to Data Portability: Where processing is based on consent or contract performance and is carried out by automated means, you have the right to receive a structured, machine-readable copy of the personal data you have provided to rrbaje, and to request that it be transmitted directly to another service provider where technically feasible.
• Right to Object: You have the right to object to the processing of your personal data where rrbaje relies on legitimate interests as its legal basis. If you object, rrbaje will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to Withdraw Consent: Where processing is based solely on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing that occurred prior to withdrawal.

Data Security

rrbaje takes the security of your personal data seriously and has implemented a range of technical and organisational measures designed to protect your information against unauthorised access, accidental loss, alteration, or disclosure.

Technical Security Measures

• SSL/TLS Encryption: All data transmitted between your device and the rrbaje platform is encrypted using industry-standard SSL/TLS protocols. This applies to all pages of the platform, including login, deposit, and withdrawal flows.
• Password Security: Passwords are stored using one-way cryptographic hashing with salt. Plain-text passwords are never stored or transmitted.
• Two-Factor Authentication (2FA): rrbaje supports optional 2FA for account login, adding an additional layer of protection against unauthorised account access.
• Firewall & Intrusion Detection: The rrbaje platform infrastructure is protected by enterprise-grade firewalls and real-time intrusion detection systems that monitor for and respond to suspicious activity.
• Data Access Controls: Access to personal data within rrbaje's systems is restricted on a need-to-know basis. Only authorised personnel whose role requires access to specific data categories are permitted to view or process that data.
• Regular Security Audits: rrbaje conducts regular internal and third-party security reviews, vulnerability assessments, and penetration tests to identify and address potential weaknesses in our infrastructure.

What You Can Do

While rrbaje takes every reasonable precaution to secure your data on our end, the security of your account also depends on actions you take. We strongly recommend:

• Using a unique, strong password for your rrbaje account that is not shared with any other service.
• Enabling two-factor authentication in your account security settings.
• Never sharing your account credentials, one-time passwords (OTPs), or bKash/Nagad PINs with anyone — including anyone claiming to be rrbaje support staff.
• Logging out of your rrbaje account when using a shared or public device.
• Contacting [email protected] immediately if you notice any suspicious activity on your account.

International Data Transfers

rrbaje is an internationally operated online gaming platform. As a result, certain personal data may be transferred to, stored in, or processed in countries outside of Bangladesh. This may occur when we use the services of third-party technology providers, KYC vendors, game studios, or payment processors whose infrastructure is located in other jurisdictions.

Wherever personal data is transferred outside Bangladesh, rrbaje takes steps to ensure that appropriate safeguards are in place to protect your data to a standard equivalent to that described in this Privacy Policy. These safeguards may include:

• Contractual data transfer agreements that impose obligations on the receiving party equivalent to those rrbaje applies internally.
• Transfers to jurisdictions that maintain internationally recognised data protection frameworks.
• Use of standard contractual clauses or other approved transfer mechanisms where applicable.

If you would like information about the specific safeguards in place for any particular international transfer, please contact us at [email protected].

Minors & Privacy

rrbaje implements age verification as a mandatory step in the account registration process, and we conduct additional KYC checks that confirm a user's date of birth before any withdrawal is processed. Our systems are designed to detect and reject registrations from individuals who are, or appear to be, under 18 years of age.

If you are a parent or guardian and you believe that a minor in your care has created an account on rrbaje or has provided personal information to our platform, please contact us immediately at support@r rbaje.net. We will investigate the matter promptly, close the account if confirmed, and securely delete all associated personal data.

We also encourage parents and guardians to make use of parental control software and internet filtering tools to prevent minors from accessing online gambling platforms. rrbaje supports the responsible use of such tools and recommends visiting our Responsible Gaming page for further guidance on player protection measures.

Changes to This Policy

rrbaje reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, regulatory requirements, or platform features. When we make material changes to this policy, we will take reasonable steps to notify you in advance, which may include:

• Displaying a prominent notice on the rrbaje platform homepage or within your account dashboard.
• Sending a notification to the email address associated with your rrbaje account.
• Updating the "Last Updated" date at the top of this Privacy Policy page.

We encourage you to review this Privacy Policy periodically to stay informed about how rrbaje is protecting your personal data. The most current version of this policy will always be accessible at rrbaje.net/privacy-policy. Your continued use of the rrbaje platform following the publication of a revised Privacy Policy constitutes your acknowledgement of the updated terms.

If any change to this Privacy Policy materially affects how we process data on the basis of your consent, we will request fresh consent from you before the new processing begins.

Contact & Data Enquiries

If you have any questions, concerns, or requests relating to this Privacy Policy or the way rrbaje handles your personal data, please do not hesitate to reach out to our dedicated data support team. We aim to respond to all privacy-related enquiries within 5 business days.

You can contact us using any of the following details:

• Email: [email protected] (plain text — not a clickable link)
• Subject Line: "Privacy Enquiry" or "Data Rights Request"
• Support Hours: 24/7 — Bangladesh Standard Time (BST, UTC+6)
• Platform: rrbaje.net — serving players across Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar

When submitting a data rights request, please include your registered username or email address and a clear description of your request so that we can verify your identity and process your enquiry efficiently. rrbaje will never charge a fee for handling routine data rights requests.