Privacy Policy — rbajjee

rbajjee processes personal data only where a valid legal basis exists for doing so. The legal bases on which we rely are as follows:

3.1 Contractual Necessity

Processing is necessary to perform the contract between rbajjee and you as a registered player. This covers the core functions of the Platform: creating and managing your account, accepting deposits, executing bets and game rounds, and paying out winnings. Without this processing, rbajjee cannot deliver its services to you.

3.2 Legal Obligation

Certain processing activities are required by applicable law. These include age verification and KYC checks, anti-money laundering (AML) transaction monitoring, record-keeping obligations, and cooperation with lawful requests from regulatory or law enforcement authorities. rbajjee cannot waive these obligations at a player's request.

3.3 Legitimate Interest

rbajjee processes some data on the basis of its legitimate interests as a business, provided those interests are not overridden by your fundamental rights. This includes fraud detection, platform security monitoring, internal analytics to improve game performance, and responsible gaming behavioural analysis. Before relying on legitimate interest, rbajjee conducts a balancing assessment to ensure player rights are adequately protected.

3.4 Consent

Where no other legal basis applies — most notably for direct marketing communications — rbajjee will seek your explicit, freely given, specific, and informed consent before processing. You may opt in or out of marketing communications at any time via your account profile or by emailing support@rbajjee. Consent is never a condition of account registration or platform access.

rbajjee does not sell or rent your personal data to any third party. We share data only in the limited circumstances described below, and only with parties who are contractually required to handle it in accordance with standards that meet or exceed those set out in this Privacy Policy.

4.1 Payment Processing Partners

To facilitate deposits and withdrawals, rbajjee shares relevant financial and identity data with payment service providers including bKash, Nagad, Rocket, Upay, and partner banking institutions (Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, and others). These providers receive only the minimum data necessary to authenticate and execute the requested transaction. They are contractually prohibited from using your data for any other purpose.

4.2 Identity Verification Services

rbajjee uses third-party KYC and identity verification providers to validate documents such as National Identity Cards and passports. These providers operate secure, encrypted platforms and are bound by strict data processing agreements. Verification data is not retained by the provider beyond the period required to complete the verification check.

4.3 Game Software Providers

Game studios and software providers (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and others) may receive limited anonymised or pseudonymised session data necessary to deliver and audit game rounds. These providers do not receive your full identity or financial profile.

4.4 Legal and Regulatory Disclosure

rbajjee may disclose personal data to government authorities, law enforcement agencies, financial intelligence units, or courts where required to do so by applicable law, pursuant to a lawful order, or where disclosure is necessary to protect the rights, property, or safety of rbajjee, its players, or third parties. We will notify you of any such disclosure where permitted by law.

4.5 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or substantially all of rbajjee's assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and of any material changes to this Privacy Policy that may arise from it.

rbajjee uses cookies and similar technologies (such as pixel tags and local storage) to operate the Platform effectively, remember your preferences, maintain session security, and understand how players use the site so we can improve it.

5.1 Types of Cookies Used

• Strictly Necessary Cookies: Required for the Platform to function. These enable core features such as session authentication, account login persistence, and fraud prevention. They cannot be disabled without breaking core platform functionality.
• Performance and Analytics Cookies: Collect anonymised information about how players navigate the site — pages visited, time spent, error messages encountered — to help rbajjee improve usability and performance.
• Functional Cookies: Remember your preferences such as language settings, preferred game category, and whether you have dismissed notices, so you do not need to re-enter this information on each visit.
• Targeting and Marketing Cookies: Used only where you have consented to receive personalised promotions. These help rbajjee deliver relevant bonus offers — for example, cricket betting promotions around BPL season or IPL — rather than generic messaging.

5.2 Managing Cookies

You can control cookies through your browser settings at any time. Most modern browsers allow you to block, delete, or receive notifications about cookies. Please be aware that disabling strictly necessary cookies will impair the Platform's ability to function correctly, and you may be unable to log in or complete transactions. Disabling performance or functional cookies will not affect core service delivery but may reduce the quality of your experience on rbajjee.

5.3 Session Security

rbajjee uses secure, HttpOnly, and SameSite-flagged session cookies to protect your authenticated session from cross-site scripting (XSS) and cross-site request forgery (CSRF) attacks. Session tokens are rotated on each login and expire automatically after a configurable period of inactivity.

rbajjee retains personal data only for as long as is necessary to fulfil the purposes described in this Privacy Policy, or as required by applicable law. When data is no longer needed, it is securely deleted or anonymised so that it can no longer be linked to an individual.

6.1 Retention Periods

• Active account data: Retained for the full duration of your account's active status plus a minimum of five (5) years following account closure, to satisfy financial record-keeping and AML compliance requirements.
• Transaction records: Retained for a minimum of seven (7) years from the date of each transaction, in line with standard financial compliance obligations.
• KYC verification documents: Retained for five (5) years after the end of the business relationship, unless a longer period is required by applicable regulation.
• Support communications: Retained for two (2) years from the date of the last interaction, or longer where the communication is related to an unresolved dispute or legal matter.
• Marketing consent records: Retained for the duration of the consent plus three (3) years following withdrawal, as evidence of compliance.
• Server and access logs: Retained for twelve (12) months for security and fraud investigation purposes, then purged.

6.2 Deletion Requests

You may request deletion of your personal data at any time by contacting support@rbajjee. rbajjee will process verified deletion requests within 30 days. Please note that deletion requests cannot override legal retention obligations — for example, transaction records required to be held under financial law cannot be erased on request during the mandatory retention period. In such cases, rbajjee will explain which data must be retained and for how long, and will delete or anonymise all remaining data that is not subject to a legal hold.

As a player on rbajjee, you hold the following rights with respect to your personal data. To exercise any of these rights, submit a written request to support@rbajjee with sufficient detail to allow rbajjee to identify your account and verify your identity before processing the request.

7.1 Right of Access

You have the right to request a copy of the personal data rbajjee holds about you, along with information about why it is held, how it is used, and with whom it has been shared. rbajjee will provide this information in a clear, structured format within 30 days of receiving a verified request.

7.2 Right to Rectification

If any personal data held by rbajjee is inaccurate or incomplete, you have the right to request correction. Minor updates — such as correcting a misspelled name or updating a phone number — can be made directly via your Account profile. For corrections to identity or financial data, you may be asked to provide supporting documentation.

7.3 Right to Erasure

You have the right to request that rbajjee delete your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where the processing was unlawful. This right is subject to the retention obligations described in Section 6.

7.4 Right to Restrict Processing

In certain circumstances — for example, where you contest the accuracy of data being held, or where you object to processing based on legitimate interest — you have the right to request that rbajjee restrict how your data is used while the matter is under review. Restricted data may be stored but not actively processed.

7.5 Right to Data Portability

Where processing is based on consent or contractual necessity, you have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another service provider of your choice. rbajjee will provide exportable data in JSON or CSV format upon a verified portability request.

7.6 Right to Object

You have the right to object to processing of your personal data that is based on rbajjee's legitimate interests, including profiling for responsible gaming purposes. You also have an unconditional right to object to the use of your data for direct marketing at any time. Marketing opt-outs take effect within 48 hours of receipt of your request.

rbajjee takes data protection seriously. If you have any questions about this Privacy Policy, about how your personal data is handled, or if you wish to exercise any of your rights as described in Section 7, please use the contact details below.

8.1 General Privacy Enquiries

For general questions about privacy practices at rbajjee, reach out to our support team:

• Email: support@rbajjee (plain text — not a clickable link)
• Live Chat: Available 24/7 via the rbajjee platform
• Response time: Email enquiries answered within 4 hours during business hours (Bangladesh Standard Time, UTC+6)

8.2 Data Rights Requests

To submit a formal request regarding access, rectification, erasure, portability, restriction, or objection — as described in Section 7 — please email support@rbajjee with the subject line "Data Rights Request". Include your full name as registered on your account and a clear description of the right you wish to exercise.

8.3 Policy Updates and Notifications

When this Privacy Policy is materially updated, rbajjee will publish a notice on the homepage and, where the change significantly affects your rights, send a notification to your registered email address. The updated policy will display a revised effective date at the top of this page. Continued use of the Platform after the effective date of any revision constitutes acceptance of the updated Privacy Policy.

8.4 Complaints

If you believe that rbajjee has not handled your personal data in accordance with this Privacy Policy, you are encouraged to contact us directly in the first instance so that we may investigate and resolve the matter. If you remain dissatisfied following our response, you have the right to escalate the matter to the relevant data protection authority in your jurisdiction.