Privacy Policy
How rbajj Protects
Your Personal Data

1. Information We Collect

rbajj collects personal data from players through several channels: directly from you when you register an account or interact with platform features, automatically through your use of the website, and from trusted third-party sources such as payment processors and identity verification providers. The categories of information we collect are set out below.

Information you provide directly:

• Identity data: Full legal name, date of birth, gender, and a copy of a government-issued identification document (National Identity Card, passport, or driving licence) provided during the KYC (Know Your Customer) verification process.
• Contact data: Email address, Bangladesh mobile phone number, and residential address including district (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, or Mymensingh).
• Account credentials: Username and encrypted password. rbajj does not store your password in plain text under any circumstances.
• Financial data: Payment method details sufficient to process deposits and withdrawals, including bKash wallet numbers, Nagad account references, Rocket mobile banking details, and partial card numbers for Visa or Mastercard transactions. Full card numbers are never stored on rbajj servers.
• Communications data: Records of messages exchanged with the rbaj j support team via live chat or email, including the content of those communications and timestamps.
• Responsible gaming preferences: Any deposit limits, session time limits, cool-off periods, or self-exclusion requests you submit through the responsible gaming tools available in your account settings.

Information collected automatically:

• Technical data: IP address, browser type and version, operating system, device type (mobile or desktop), screen resolution, and time zone settings.
• Usage data: Pages visited on rbajj.net, games played, bet amounts, session duration, click paths, referring URLs, and search terms used within the platform.
• Transaction data: Full records of all deposits, withdrawals, wagers placed, bonuses claimed, and game outcomes associated with your account.
• Cookie and tracking data: Information collected via cookies, pixels, and similar technologies as described in Section 4 of this policy.

Information from third parties:

• Identity verification results from KYC and anti-fraud service providers engaged by rbajj to confirm that player-submitted identity documents are authentic.
• Payment confirmation data from bKash, Nagad, Rocket, Upay, and banking partners, confirming the status and amount of financial transactions.
• Fraud risk signals from third-party fraud prevention databases used to protect the platform and its players from unauthorised account access.

2. How We Use Your Data

rbajj uses the personal data we hold about you for specific, documented purposes. We do not use your data for purposes that are incompatible with those disclosed in this policy, and we do not sell your personal information to any third party for their own marketing purposes. The table below summarises the primary purposes for which rbajj processes your data and the legal basis for each processing activity.

Where rbajj processes your data on the basis of legitimate interests, we have assessed that our interests in providing a secure, reliable, and commercially viable platform do not override your fundamental privacy rights, taking into account the reasonable expectations of players who choose to register on an online gambling platform.

Where we rely on your consent — specifically for promotional email and SMS communications — you may withdraw that consent at any time by updating your communication preferences in your rbajj account settings or by contacting [email protected]. Withdrawal of marketing consent does not affect the lawfulness of processing that occurred before the withdrawal.

3. Data Sharing & Disclosure

rbajj does not sell, rent, or trade your personal data to third parties. We share your information only in the limited circumstances described below, and only to the extent necessary for the stated purpose.

• Payment processors: When you make a deposit or request a withdrawal, the necessary transaction details are shared with the relevant payment provider — bKash, Nagad, Rocket, Upay, Visa, Mastercard, or a Bangladeshi banking partner. These providers process your financial data under their own privacy policies and security standards.
• Identity verification providers: To fulfil our KYC obligations, we share identity document details with accredited third-party verification services. These services confirm document authenticity and cross-reference against global fraud and sanctions databases.
• Game providers: When you play a game supplied by a third-party studio (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, or Spribe), a session token and anonymised player identifier are shared with the provider's game server to facilitate gameplay. These providers do not receive your full name or contact details.
• Technology and infrastructure partners: rbajj uses carefully selected cloud hosting, content delivery, and analytics technology providers to operate the platform. These providers act as data processors under contractual obligations that require them to process data only on rbajj's instructions and to maintain appropriate security standards.
• Legal and regulatory authorities: rbajj will disclose personal data to law enforcement agencies, regulatory bodies, or courts where we are required to do so by a valid legal obligation, court order, or regulatory directive. We will notify affected players where we are legally permitted to do so.
• Anti-money laundering compliance: Where our internal monitoring identifies transaction patterns that raise concerns under applicable anti-money laundering frameworks, rbajj is legally required to file reports with the relevant financial intelligence unit. Such reports are filed without notifying the player (known as "tipping off" restrictions).

In all cases where data is shared with third parties acting as processors, rbajj maintains data processing agreements that impose binding obligations on those parties with respect to confidentiality, data minimisation, and security.

4. Cookies & Tracking Technologies

rbajj uses cookies and similar tracking technologies on the rbajj.net website to ensure it functions correctly, to remember your preferences, and to improve the quality of the experience we deliver to players in Bangladesh and elsewhere. This section explains the types of cookies we use and how you can manage them.

A cookie is a small text file stored on your device by your browser when you visit a website. Cookies allow the website to recognise your device on subsequent visits and to recall certain information about your preferences or session state. They do not contain executable code and cannot access other files on your device.

Categories of cookies used on rbajj.net:

• Strictly necessary cookies: These are essential for the platform to function. They maintain your login session, protect against cross-site request forgery (CSRF), and ensure that your account preferences and cart state are preserved as you navigate between pages. These cookies cannot be disabled without affecting core platform functionality.
• Functional cookies: These remember choices you make — such as your preferred language (English), display settings, and responsible gaming reminders — so that you do not need to re-enter them on each visit.
• Analytics cookies: rbajj uses anonymised, aggregated analytics to understand how players navigate the platform — which pages are visited most, where sessions begin and end, and how game categories perform. This data helps us improve rbajj's design and content. Analytics data is not linked to your individual identity.
• Security cookies: These assist with fraud detection and abuse prevention by identifying unusual patterns of platform access, such as multiple rapid logins from different IP addresses or device fingerprints that do not match your account history.

You can manage cookie preferences through your browser settings. Most modern browsers allow you to block all cookies, accept only first-party cookies, or clear existing cookies. Please note that disabling strictly necessary cookies will prevent you from logging into your rbajj account and using core platform features. Disabling functional cookies will mean your preferences are not retained between sessions.

5. Data Security Measures

rbajj implements a layered approach to information security, combining technical controls, organisational procedures, and regular security assessments to protect your personal data from unauthorised access, disclosure, alteration, or destruction. The key measures in place include the following.

• 256-bit SSL/TLS encryption: All data transmitted between your device and rbajj.net is encrypted using industry-standard Transport Layer Security (TLS 1.2 or higher). This applies to account login, game play sessions, payment transactions, and all other platform interactions.
• Password hashing: Account passwords are never stored in plain text. rbajj uses a strong cryptographic hashing algorithm (bcrypt) with individual salting to ensure that even in the unlikely event of a database breach, passwords cannot be recovered from stored hashes.
• Two-factor authentication (2FA): Players are encouraged to enable 2FA on their accounts. When activated, a one-time code is delivered to your registered Bangladesh mobile number via SMS, providing a second layer of protection beyond your password.
• Access controls: Internal access to player data is restricted to rbajj staff members who require it to perform their specific role. All staff with access to personal data undergo background screening and are subject to contractual confidentiality obligations.
• Regular security audits: rbajj engages independent security professionals to conduct periodic penetration testing and vulnerability assessments of the platform infrastructure.
• Incident response: In the event of a data security incident that is likely to result in a risk to players' rights, rbajj will notify affected players as promptly as possible and will take immediate steps to contain and remediate the breach.

6. Data Retention Policy

rbajj retains your personal data only for as long as it is necessary to fulfil the purposes for which it was collected, to comply with applicable legal and regulatory obligations, and to resolve any disputes that may arise. Specific retention periods are detailed below.

• Active account data: Identity, contact, and financial data associated with an active rbajj account is retained for the full duration of your account's active status plus a minimum of five (5) years after account closure. This retention period supports our obligations under anti-money laundering regulations and allows us to respond to historical account queries.
• Transaction records: Full records of all deposits, withdrawals, wagers, and game outcomes are retained for a minimum of seven (7) years from the date of each transaction, in accordance with financial record-keeping standards applicable to the online gambling industry.
• KYC verification documents: Copies of identity documents submitted for KYC purposes are retained for five (5) years from the date of account closure or from the date of the last regulated transaction, whichever is later.
• Support communications: Records of live chat and email exchanges with the rbajj support team are retained for three (3) years from the date of the communication.
• Analytics and usage data: Anonymised, aggregated analytics data that cannot be linked back to an individual player may be retained indefinitely for platform improvement purposes.
• Marketing data: Where you have consented to receive promotional communications, your contact details are retained for marketing purposes until you withdraw that consent. Upon withdrawal, your details are removed from marketing lists within 30 days.

When data is no longer required under any of the above retention periods, rbajj securely deletes or anonymises it in a manner that ensures it cannot be recovered or reconstructed. Secure deletion applies to both digital records and any physical documentation that may have been created during the verification process.

7. Your Privacy Rights

As a player on rbajj, you hold a number of rights with respect to the personal data we process about you. rbajj respects these rights and will respond to any valid request within a reasonable timeframe, and in any event no later than 30 days from receipt of a verified request. The rights available to you are as follows.

• Right to access: You may request a copy of all personal data rbajj holds about you, including the purposes for which it is processed, the categories of data held, and any third parties to whom it has been disclosed. This is commonly referred to as a Subject Access Request (SAR).
• Right to rectification: If any personal data rbajj holds about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. Minor corrections (such as updating your contact number or email address) can be made directly through your account settings.
• Right to erasure: In certain circumstances, you may request that rbajj delete your personal data. This right is not absolute — it does not apply where retention is required by law (for example, under anti-money laundering record-keeping obligations) or where the data is necessary to defend a legal claim. Where erasure is possible and appropriate, rbajj will action it within 30 days.
• Right to restrict processing: You may request that rbajj suspend its processing of your data in specific circumstances — for example, while the accuracy of data you have disputed is being verified, or where processing is unlawful but you prefer restriction over deletion.
• Right to withdraw consent: Where rbajj processes your data on the basis of consent (specifically for marketing communications), you may withdraw that consent at any time without penalty. Withdrawal does not affect the lawfulness of any processing that took place prior to withdrawal.
• Right to lodge a complaint: If you believe rbajj has processed your personal data in a manner that breaches applicable privacy law, you have the right to raise a complaint with the relevant data protection authority in your jurisdiction.

To exercise any of the above rights, or to ask a question about how rbajj handles your personal data, please contact the rbajj privacy team using the details provided in Section 8 below. All requests will be handled confidentially, and rbajj will not penalise you for exercising your privacy rights.

8. Contact Our Privacy Team

If you have any questions, concerns, or requests relating to this Privacy Policy or the way rbajj handles your personal data, please get in touch using the contact details below. We are committed to responding to all privacy-related enquiries promptly, professionally, and in plain English.

• Email: [email protected]
• Live Chat: Available 24/7 via the live chat widget on rbajj.net
• Response Time: Privacy enquiries are typically acknowledged within 2 business days and fully resolved within 30 days of receipt of a verified request.
• Language: All privacy communications are handled in English.
• Bangladesh Support Hours: Live chat agents are available around the clock, including during Bangladesh Standard Time (BST, UTC+6) business hours.

This Privacy Policy was last reviewed and updated in January 2026. rbajj reserves the right to amend this policy at any time. When material changes are made, the updated policy will be published on this page with a revised "Last Updated" date. Continued use of rbajj after a policy update constitutes your acceptance of the revised terms.

We encourage you to review this Privacy Policy periodically — particularly before submitting new personal data, enabling new account features, or opting into promotional communications. Staying informed about how your data is used is an important part of safe, responsible use of the rbajj platform.