rbaaji Privacy Policy

rbaaji ("we", "us", "our", or "the Company") is committed to protecting the privacy and personal data of all individuals who access or use the rbaaji online casino and sports betting platform available at https://rbaaji.net (the "Platform"). This Privacy Policy (the "Policy") sets out in clear, accessible English how rbaaji collects, uses, stores, shares, and safeguards your personal data when you interact with the Platform.

rbaaji operates exclusively in English and serves players based in Bangladesh. All personal data processing described in this Policy is carried out in connection with the provision of online gambling services, including cricket betting, live casino games, video slots, and related entertainment products. All financial transactions on the Platform are denominated in Bangladeshi Taka (BDT).

This Policy is designed to inform you — as a registered player, prospective player, or general visitor to rbaaji.net — of your rights regarding your personal data and of the obligations rbaaji undertakes in respect of that data. We strongly encourage you to read this Policy in full. If you have questions about any aspect of it, our support team is available 24 hours a day, 7 days a week at [email protected].

This Policy must be read alongside rbaaji's Terms & Conditions and Responsible Gaming Policy, both of which are incorporated herein by reference. In the event of any conflict between this Policy and any other document published on the Platform, this Policy shall govern with respect to all matters of personal data and privacy.

rbaaji collects personal data in several categories depending on how you interact with the Platform. The categories of personal data we may hold about you are set out in the table below:

rbaaji does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, health data (beyond that disclosed voluntarily in a responsible gaming context), biometric data, or criminal record data unless we are legally required to do so or you have provided explicit consent.

rbaaji collects personal data through the following channels and mechanisms:

• Direct Interactions: Data you provide when you register an account, complete KYC verification, make a deposit or withdrawal, contact our support team, or respond to a survey or promotion.
• Automated Technologies: Technical and usage data collected automatically when you visit or use the Platform, including through cookies, web beacons, pixel tags, server logs, and similar tracking technologies (see Section 7 for details).
• Third-Party Sources: Data received from payment service providers (bKash, Nagad, Rocket, Upay, Tap, SureCash, Visa, Mastercard) in connection with your transactions; identity verification data from KYC providers; fraud-prevention data from security partners; and, where applicable, publicly available data used to verify your identity.
• Responsible Gaming Interactions: Data you provide or that we generate when you set deposit limits, request a cooling-off period, or activate self-exclusion through the Platform's responsible gaming tools.

Where rbaaji receives data about you from a third-party source, we will inform you of that source at the earliest practicable opportunity and will provide you with the same rights over that data as you would have over data you provided directly.

rbaaji processes your personal data on the basis of one or more of the following legal grounds: (a) the performance of a contract with you (i.e., providing the Platform services); (b) compliance with a legal obligation; (c) our legitimate interests, where those interests are not overridden by your rights and freedoms; and (d) your explicit consent, where required.

The specific purposes for which rbaaji uses your personal data include the following:

• Account Management: Creating and maintaining your rbaaji account, verifying your identity and age (18+ only), and managing your profile settings and preferences.
• Service Delivery: Processing your deposits and withdrawals via bKash, Nagad, Rocket, and other accepted payment methods; settling your bets; delivering bonus credits and promotional rewards; and providing live casino, slots, and sports betting services.
• Legal Compliance: Meeting our obligations under anti-money laundering (AML) regulations, counter-terrorism financing (CTF) rules, responsible gaming requirements, and other applicable laws. This includes retaining transaction records and KYC documentation for legally mandated periods.
• Fraud Prevention and Security: Detecting, investigating, and preventing fraudulent transactions, unauthorised account access, bonus abuse, collusion, money laundering, and other prohibited conduct as defined in our Terms & Conditions.
• Responsible Gaming: Monitoring your betting and usage patterns to identify potential signs of problem gambling; implementing deposit limits, cooling-off periods, and self-exclusion measures; and contacting you if we have genuine concern for your wellbeing.
• Customer Support: Responding to your queries, complaints, and support requests; maintaining records of our communications with you; and improving the quality of our support services.
• Platform Improvement: Analysing aggregated usage data to improve our game selection, website performance, mobile experience, and overall service quality. This analysis is conducted on anonymised or pseudonymised data wherever possible.
• Marketing Communications: Sending you information about rbaaji promotions, bonuses, new game releases, and seasonal offers — but only where you have opted in to receive such communications. You may withdraw your consent to marketing communications at any time by contacting [email protected].

rbaaji will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or establishing a separate lawful basis for the new processing activity.

rbaaji does not sell your personal data to third parties. We may, however, share your data with the categories of recipients listed below, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment Service Providers: bKash, Nagad, Rocket, Upay, Tap, SureCash, Visa, Mastercard, and any other payment partners through whom your transactions are processed. These providers receive only the data required to execute and verify your transactions.
• Identity Verification and KYC Partners: Third-party providers engaged to verify your identity, age, and address in accordance with our responsible gaming and AML obligations. These partners are contractually bound to process your data solely for verification purposes.
• Fraud Prevention and Security Services: Specialised providers who assist rbaaji in detecting and preventing fraudulent activity, money laundering, and other forms of abuse on the Platform.
• IT Infrastructure and Cloud Service Providers: Hosting, database, content delivery, and cloud computing providers who process data on our behalf as data processors. These providers operate under strict data processing agreements and may not use your data for their own purposes.
• Legal and Regulatory Authorities: Where rbaaji is required by applicable law, court order, or regulatory directive to disclose personal data to a government authority, law enforcement agency, or financial intelligence unit, we will comply with such requirements and will notify you of the disclosure where we are legally permitted to do so.
• Professional Advisors: Lawyers, auditors, accountants, and other professional advisors engaged by rbaaji in the course of our legitimate business operations, subject to professional confidentiality obligations.

Where rbaaji engages a third-party processor to handle your personal data, we enter into a formal data processing agreement with that party specifying the purposes for which the data may be processed, the security standards that must be maintained, and the obligation to delete or return data upon termination of the engagement.

rbaaji retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, to comply with applicable legal retention obligations, and to protect our legitimate interests in the event of disputes or legal proceedings.

The following general retention periods apply:

• Account Data and KYC Documents: Retained for the duration of your account and for a period of at least 5 years following account closure, in accordance with anti-money laundering record-keeping requirements.
• Transaction Records: Retained for a minimum of 5 years from the date of each transaction, in line with standard financial record-keeping obligations.
• Support Communications: Retained for up to 3 years following the resolution of a support interaction, or longer where the interaction is relevant to a pending or ongoing dispute.
• Technical and Usage Data: Typically retained in identifiable form for up to 24 months, after which it is anonymised for aggregate analytics purposes or deleted.
• Marketing Consent Records: Retained for as long as you maintain an active account and for 2 years following account closure, as evidence of your consent or opt-out preference.

When personal data is no longer required for any of the purposes listed above and no legal retention obligation applies, rbaaji will securely delete or anonymise that data. You may request early deletion of your personal data subject to the limitations described in Section 9 of this Policy.

rbaaji uses cookies and similar tracking technologies (including web beacons, pixel tags, and local storage objects) to enhance your experience on the Platform, to maintain session integrity, and to gather analytical data that helps us improve our services. This section explains how these technologies are used.

What are cookies? Cookies are small text files placed on your device by a website when you visit it. They allow the website to recognise your device on subsequent visits and to remember information about your session and preferences.

rbaaji uses the following categories of cookies:

• Strictly Necessary Cookies: Essential for the operation of the Platform. These include session cookies that maintain your logged-in state, security tokens that protect against cross-site request forgery, and cookies that remember your language and currency preferences. You cannot opt out of strictly necessary cookies without impairing the functionality of the Platform.
• Performance and Analytics Cookies: Used to collect information about how visitors interact with the Platform — for example, which pages are visited most frequently, how long sessions last, and where users encounter errors. This data is aggregated and anonymised and is used solely to improve Platform performance.
• Functionality Cookies: Allow the Platform to remember your preferences and personalisation choices, such as your preferred game view, notification settings, and responsible gaming tool configurations.
• Targeting and Marketing Cookies: Used to deliver relevant promotional content to you within the Platform, based on your game preferences and betting history. rbaaji does not use third-party advertising networks or allow external advertisers to place tracking cookies on rbaaji.net.

You can manage your cookie preferences through your browser settings. Most modern browsers allow you to block or delete cookies. Please note that disabling certain categories of cookies may affect the functionality of the Platform and your ability to log in and access your account. For detailed guidance on managing cookies in your specific browser, please refer to that browser's help documentation.

rbaaji takes the security of your personal data seriously and implements a range of technical and organisational measures designed to protect your data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include, but are not limited to:

• Encryption in Transit: All data transmitted between your device and rbaaji's servers is encrypted using 256-bit SSL/TLS protocols. This applies to login credentials, payment data, personal profile information, and all other data exchanged with the Platform.
• Encryption at Rest: Sensitive data stored in rbaaji's databases — including passwords (stored as cryptographic hashes), payment method details, and identity documents — is encrypted using industry-standard algorithms.
• Access Controls: Access to personal data within rbaaji's systems is restricted on a strict need-to-know basis. Staff with access to personal data are subject to confidentiality obligations and receive regular data protection training.
• Intrusion Detection and Monitoring: rbaaji's infrastructure is monitored continuously for suspicious activity, attempted intrusions, and anomalous access patterns. Security incidents are investigated promptly and documented.
• Penetration Testing: rbaaji engages independent security specialists to conduct regular penetration testing of the Platform's infrastructure and application layer to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: rbaaji maintains a documented data breach response procedure. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, rbaaji will notify affected users without undue delay.

While rbaaji employs robust security practices, no online system can provide an absolute guarantee of security. You are responsible for maintaining the confidentiality of your own account credentials and for ensuring that your device is adequately protected with up-to-date security software. If you suspect that your account has been compromised, please contact [email protected] immediately.

As a user of the rbaaji Platform, you have the following rights in relation to your personal data. To exercise any of these rights, please contact our support team at [email protected] with your registered account username and a clear description of your request. We will acknowledge your request within 24 hours and aim to provide a substantive response within 5 business days.

• Right of Access: You have the right to request a copy of the personal data rbaaji holds about you, together with information about how that data is used, where it came from, and with whom it has been shared.
• Right to Rectification: You have the right to request correction of any personal data that is inaccurate or incomplete. You can update many of your account details directly through your account settings; for data you cannot update yourself, contact our support team.
• Right to Erasure: You have the right to request deletion of your personal data where: (a) the data is no longer necessary for the purpose for which it was collected; (b) you withdraw consent and there is no other lawful basis for processing; (c) you object to processing and there are no overriding legitimate grounds; or (d) the data has been unlawfully processed. Please note that rbaaji may be legally required to retain certain data (e.g., transaction records under AML regulations) and will inform you if this is the case.
• Right to Restriction of Processing: You have the right to request that rbaaji restricts the processing of your personal data in certain circumstances — for example, while the accuracy of data you have contested is being verified.
• Right to Data Portability: Where rbaaji processes your data by automated means on the basis of your consent or a contract with you, you have the right to receive that data in a structured, commonly used, machine-readable format and to request that it be transmitted to another data controller.
• Right to Object: You have the right to object to rbaaji processing your personal data on the basis of our legitimate interests, including profiling for responsible gaming purposes. You also have the absolute right to object to processing for direct marketing purposes at any time.
• Right to Withdraw Consent: Where rbaaji relies on your consent as the legal basis for processing (e.g., for marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

rbaaji will not discriminate against you for exercising any of these rights. Exercising your rights will not affect your ability to continue using the Platform, subject only to any restrictions that are legally required or that result from the deletion of data necessary to provide the service.

The rbaaji Platform is strictly intended for adults aged 18 years and above. rbaaji does not knowingly collect, store, or process personal data belonging to individuals under the age of 18. Our registration process includes mandatory age verification steps designed to prevent minors from accessing the Platform.

If rbaaji discovers or is notified that personal data belonging to a person under 18 has been collected — whether through a false declaration of age during registration or by any other means — we will immediately suspend the relevant account, delete the personal data in question (subject to any legal obligation to retain evidence of the violation), and apply any applicable sanctions in accordance with our Terms & Conditions.

If you are a parent or guardian and believe that your child may have registered on the rbaaji Platform or provided us with personal data, please contact our support team immediately at [email protected]. We will investigate and take appropriate action without delay.

rbaaji operates as a platform serving the Bangladesh market and processes the majority of personal data within the geographic region it serves. However, certain service providers and technical partners engaged by rbaaji — including cloud infrastructure providers and KYC verification services — may process data in jurisdictions outside Bangladesh.

Where personal data is transferred to a third country or international organisation, rbaaji ensures that appropriate safeguards are in place to protect that data to a standard equivalent to the protections described in this Policy. Such safeguards may include contractual provisions (such as standard data protection clauses) that require the recipient to maintain equivalent data protection standards, or the adoption of binding corporate rules where applicable.

By using the rbaaji Platform and providing your personal data to us, you acknowledge that your data may be transferred to and processed in countries other than Bangladesh. rbaaji will always take reasonable steps to ensure that such transfers are conducted lawfully and securely and that your rights are preserved throughout.

rbaaji reserves the right to amend, update, or replace this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable law, or improvements to the way we describe our practices. The "Last Updated" date at the top of this document will be revised to reflect the date of the most recent amendment.

When material changes are made to this Policy — for example, changes that affect the purposes for which your data is used, the categories of third parties with whom we share data, or your rights as a data subject — rbaaji will notify registered players by posting a prominent notice on the Platform and, where reasonably practicable, by sending a notification to the email address registered on your account.

Your continued use of the rbaaji Platform following the effective date of any revised Privacy Policy constitutes your acknowledgement of and agreement to the updated terms. If you do not accept the revised Policy, you must cease using the Platform and may request account closure by contacting [email protected]. We recommend reviewing this Policy periodically to stay informed of how rbaaji protects your personal data.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way rbaaji handles your personal data, please contact our dedicated support team using the details below. We operate in English, 24 hours a day, 7 days a week, on Bangladesh Standard Time (BST, UTC+6).

• Email: [email protected]
• Support Hours: 24 hours a day, 7 days a week
• Time Zone: Bangladesh Standard Time (BST, UTC+6)
• Platform: https://rbaaji.net

When contacting rbaaji regarding a data privacy matter, please include your registered account username, a clear description of your request or concern, and any relevant supporting information. This will allow us to locate your data and respond as efficiently as possible. We aim to acknowledge all privacy-related requests within 24 hours and to provide a full substantive response within 5 business days.

If you are not satisfied with rbaaji's response to a privacy concern after exhausting our internal process, you may seek further recourse through any applicable data protection authority or dispute resolution mechanism available under the laws of your jurisdiction.