rbaji Privacy Policy

1 Who We Are

rbaji is an online casino and sports betting platform operating at rbaji.lat, designed and built specifically for players in Bangladesh. In the context of this Privacy Policy, "rbaji", "we", "us", and "our" refer to the operators of the rbaji platform and all associated services offered through rbaji.lat.

rbaji acts as the data controller in respect of all personal data collected from players and visitors to the rbaji platform. As data controller, rbaji determines the purposes and means by which your personal data is processed. If you have any questions about how rbaji handles your personal data, you may contact our support team at [email protected].

2 Data We Collect

rbaji collects personal data that falls into the following categories. We collect only the data that is necessary for the stated purpose and do not collect sensitive personal data beyond what is required for identity verification and responsible gaming obligations.

2.1 Registration and Identity Data

When you create a rbaji account, we collect: your full legal name, date of birth, gender, nationality, residential address (including city — for example Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, or Cox's Bazar), email address, and mobile phone number. This data is required to create and maintain your account.

2.2 Verification and KYC Data

To comply with our Know Your Customer (KYC) obligations and to prevent underage gambling, rbaji may collect copies of government-issued identity documents such as your National ID card, passport, or driving licence. We may also request proof of address documents and, in some cases, evidence of the source of funds used for deposits.

2.3 Financial and Transaction Data

rbaji collects records of all deposits and withdrawals made through your account, including the payment method used (bKash, Nagad, Rocket, or Upay), transaction amounts in Bangladeshi Taka (৳), transaction timestamps, and transaction reference numbers. We do not store full payment account credentials — only the minimum identifiers necessary to process and reconcile transactions.

2.4 Gaming Activity Data

We collect data about your use of rbaji services, including game sessions played, bet amounts and outcomes, casino game history, sports betting selections, bonus offers claimed, and wagering activity. This data is used for account management, dispute resolution, fraud prevention, and responsible gaming monitoring.

2.5 Technical and Device Data

When you access the rbaji platform, we automatically collect certain technical information including your IP address, device type, operating system, browser type and version, screen resolution, language settings, and session timestamps. This information is used for security monitoring, fraud detection, and platform optimisation.

2.6 Communications Data

rbaji retains records of all communications between you and our customer support team, including live chat transcripts, email correspondence, and any documentation submitted during a complaint or dispute process. This data is retained to ensure continuity of service and to resolve disputes accurately.

3 How We Collect Data

3.1 Directly From You

The majority of personal data rbaji holds about you is provided directly by you when you register an account, complete KYC verification, make deposits or withdrawals, contact customer support, or participate in promotions. You are not obligated to provide this data, but without it, rbaji cannot open or maintain your account.

3.2 Automatically Through Platform Use

When you visit rbaji.lat or use the rbaji platform, technical data including your IP address, browser characteristics, and session activity is collected automatically through standard web server logs and cookies. This collection occurs regardless of whether you have a registered account.

3.3 From Third-Party Verification Services

rbaji may receive identity verification data from third-party KYC service providers where we engage such services to validate the authenticity of documents submitted during the account verification process. Any third-party provider engaged by rbaji is contractually bound to process data only on rbaji's instructions and in accordance with applicable data protection standards.

3.4 From Payment Processors

When you make a deposit or withdrawal using bKash, Nagad, Rocket, or Upay, the respective payment processor will confirm the transaction status and provide a transaction reference to rbaji. rbaji does not receive your full payment account credentials from these processors; only the minimum data necessary to confirm and reconcile the transaction is shared.

4 How We Use Your Data

rbaji uses the personal data we collect for the following purposes:

• Account creation and management: To open, maintain, and close your rbaji account, and to authenticate your identity when you log in.
• Payment processing: To process deposits and withdrawals in Bangladeshi Taka (৳) via bKash, Nagad, Rocket, and Upay, and to maintain accurate transaction records.
• Identity and age verification: To confirm that you meet the 21+ age requirement and to comply with our KYC obligations, including anti-money laundering checks.
• Gaming services delivery: To provide access to casino games, sports betting markets, live dealer tables, and associated features.
• Responsible gaming: To monitor gaming patterns for signs of problem gambling behaviour, to apply self-imposed limits and exclusions, and to intervene where our responsible gaming obligations require it.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, money laundering, account takeover attempts, and other security threats.
• Customer support: To respond to your enquiries, process complaints, and maintain records of all interactions for quality assurance and dispute resolution.
• Promotions and marketing: To send you relevant promotional offers and bonus notifications where you have consented to receive such communications. You may withdraw this consent at any time by contacting support.
• Legal compliance: To meet our obligations under applicable laws, including record-keeping requirements and responses to lawful requests from competent authorities.
• Platform improvement: To analyse aggregate usage patterns (using anonymised data where possible) to improve the performance, usability, and game selection of the rbaji platform.

5 Legal Basis for Processing

rbaji processes your personal data on the following legal grounds:

• Contractual necessity: Processing required to perform the contract between you and rbaji — including account creation, payment processing, and game delivery — is carried out on the basis that it is necessary to fulfil our contractual obligations to you.
• Legal obligation: Certain processing activities, particularly KYC verification, anti-money laundering record-keeping, and responses to regulatory enquiries, are carried out to comply with legal obligations applicable to rbaji's operations.
• Legitimate interests: rbaji processes technical and gaming activity data for fraud prevention, platform security, and responsible gaming monitoring on the basis of legitimate interests. We have assessed that these interests are not overridden by your data protection rights, given the measures we take to minimise privacy impact.
• Consent: Where rbaji sends you optional promotional communications or uses non-essential cookies, we do so on the basis of your consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

6 Sharing Your Data

6.1 Third-Party Service Providers

rbaji shares personal data with carefully selected third-party service providers who assist in operating the platform. These include payment processors (bKash, Nagad, Rocket, Upay), KYC and identity verification services, game software providers (such as Pragmatic Play, Evolution Gaming, Spribe, and Ezugi), cloud hosting providers, and fraud detection services. All third-party providers are contractually required to process data only on rbaji's instructions, to maintain appropriate security standards, and to refrain from using your data for their own purposes.

6.2 Legal and Regulatory Disclosures

rbaji may disclose personal data to law enforcement agencies, regulatory authorities, or courts where required to do so by applicable law, court order, or other legal process. In such cases, rbaji will disclose only the minimum data necessary to comply with the lawful request and, where permitted by law, will notify you of such disclosure.

6.3 Business Transfers

In the event that rbaji undergoes a merger, acquisition, restructuring, or sale of assets, personal data held by rbaji may be transferred to the successor entity as part of that transaction. In such an event, rbaji will notify affected players prior to any transfer of their personal data and will ensure that the receiving entity is bound by privacy obligations at least equivalent to those set out in this Privacy Policy.

6.4 No Sale of Personal Data

rbaji does not and will not sell, rent, lease, or trade your personal data to third-party advertisers, data brokers, or any other commercial third party for their own marketing or business purposes. This commitment applies without exception.

7 Cookies and Tracking Technologies

7.1 What Cookies We Use

rbaji uses cookies and similar tracking technologies to operate and improve the platform. The cookies used by rbaji fall into the following categories:

• Strictly Necessary Cookies: Required for the platform to function. These include session authentication cookies that keep you logged in and security tokens that protect your account. These cookies cannot be disabled without breaking the platform.
• Functional Cookies: Used to remember your preferences such as language settings and game history. These improve your experience but are not essential to platform operation.
• Analytics Cookies: Used to collect anonymised data about how players use the rbaji platform, which pages are visited most frequently, and where technical errors occur. This data helps us improve the platform over time.
• Security and Fraud Prevention Cookies: Used to detect and prevent fraudulent activity, account sharing, and bot traffic.

7.2 Managing Cookies

You may configure your browser to block or delete cookies at any time. Please note that disabling strictly necessary cookies will prevent you from logging into your rbaji account and accessing the full platform. Disabling analytics or functional cookies will not affect your ability to place bets or play games but may reduce the quality of your experience.

8 Data Security

rbaji implements a range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the rbaji platform;
• Encryption of sensitive data fields (including identity document images and payment references) at rest in our database systems;
• Role-based access controls ensuring that only authorised rbaji personnel with a legitimate operational need can access player personal data;
• Regular security assessments and penetration testing of the rbaji platform infrastructure;
• Automated intrusion detection and real-time security monitoring;
• Multi-factor authentication requirements for administrative access to systems holding player data.

While rbaji takes all reasonable steps to protect your personal data, no internet-based platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your rbaji account credentials and for ensuring that your devices are adequately secured. If you suspect that your account has been compromised, contact our support team immediately at [email protected].

9 Data Retention

rbaji retains personal data for the periods set out below, after which data is securely deleted or anonymised unless a longer retention period is required by applicable law:

Where a player's account is closed due to suspected fraud or a breach of rbaji's Terms & Conditions, rbaji may retain relevant data for longer than the standard periods above to support any ongoing investigation, legal proceedings, or regulatory reporting obligations.

10 Your Rights

As a player on the rbaji platform, you have the following rights in respect of your personal data. To exercise any of these rights, contact our support team at [email protected] with your account username and a clear description of your request. rbaji will respond to all verified requests within 30 days.

• Right of Access: You have the right to request a copy of all personal data rbaji holds about you, together with information about how it is being used.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data held in your rbaji account.
• Right to Erasure: You may request that rbaji delete your personal data where it is no longer necessary for the purpose for which it was collected, subject to rbaji's legal obligations to retain certain data as described in Section 9.
• Right to Restriction: You may request that rbaji restrict the processing of your data in certain circumstances, for example while a correction request is being verified.
• Right to Object: You have the right to object to rbaji's processing of your personal data where that processing is based on legitimate interests, including direct marketing communications.
• Right to Withdraw Consent: Where rbaji processes your data on the basis of consent (for example, for optional marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
• Right to Data Portability: You may request that rbaji provide your personal data in a structured, commonly used, machine-readable format so that you can transfer it to another service.

11 Children and Minors

The rbaji platform is strictly restricted to individuals aged 21 years and above. rbaji does not knowingly collect personal data from any person under the age of 21. If rbaji becomes aware that personal data has been collected from an individual under 21, that account will be immediately closed, all associated data will be deleted or returned to the depositing payment source in accordance with our Terms & Conditions, and no winnings will be paid out.

If you are a parent or guardian and believe that a minor has created a rbaji account or provided personal data to rbaji without your knowledge, please contact our support team immediately at [email protected] so that we can investigate and take appropriate action.

12 Changes to This Privacy Policy

rbaji reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform operations. Where any change is material — meaning it significantly affects how we collect, use, or share your personal data — rbaji will provide at least 14 days' advance notice via email to your registered address or via a prominent notice on the rbaji platform.

The "Last Updated" date at the top of this document will be revised whenever any change is made. Where a change requires your fresh consent, rbaji will seek that consent before the revised terms take effect. If you do not agree with any changes to this Privacy Policy, you have the right to close your account in accordance with Section 11 of the rbaji Terms & Conditions.

Your continued use of the rbaji platform following the effective date of any update constitutes your acknowledgement of and agreement to the revised Privacy Policy.

13 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or rbaji's data processing practices, please contact our dedicated support team using the details below. All privacy-related enquiries will be handled with priority and in strict confidence.

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 directly on the rbaji platform
• Response Time: rbaji aims to acknowledge all privacy enquiries within 24 hours and to provide a full response within 30 days of receipt.
• Support Hours: 24/7 — Bangladesh Standard Time (UTC+6)

When contacting us about a privacy matter, please include your rbaji account username (if applicable) and a clear description of your request or concern so that we can respond as efficiently as possible.