Privacy Policy

1. Data We Collect

rbaeej collects personal data through several channels: directly from you when you register an account or use our services, automatically through your interaction with the platform, and in limited cases from verified third-party sources. The categories of personal data we may collect include the following:

rbaeej does not knowingly collect data from individuals under the age of 18. If we become aware that personal data has been collected from a minor, that data will be deleted immediately and the associated account will be closed. We do not collect sensitive personal data such as racial or ethnic origin, religious beliefs, or health information unless explicitly required for a legally mandated compliance process.

2. How We Use Your Data

rbaeej processes personal data only for specific, legitimate purposes. We do not sell your personal data to any third party for marketing purposes. The primary purposes for which rbaeej uses collected data are as follows:

• Account management: Creating and maintaining your rbaeej player account, verifying your identity, and managing your login credentials and account settings.
• Transaction processing: Handling deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, and City Bank. Financial data is shared with payment providers only to the extent necessary to complete each transaction.
• Legal compliance: Meeting our obligations under applicable laws, including Know Your Customer (KYC) requirements, anti-money laundering (AML) obligations, and age verification mandates. Where required by law, we may disclose player data to relevant authorities.
• Responsible gaming monitoring: Monitoring player behaviour to identify signs of problem gambling and to apply self-exclusion, deposit limit, or account cooling-off measures where appropriate or requested.
• Platform improvement: Analysing usage data in aggregate to improve the rbaeej platform, optimise game offerings, and enhance the overall player experience.
• Fraud prevention and security: Detecting and preventing fraudulent activity, unauthorised account access, bonus abuse, and collusion. Technical and usage data are central to our security monitoring.
• Communications: Sending account-related notifications, transaction confirmations, support responses, and — where you have opted in — promotional communications about rbaeej offers. You may opt out of marketing communications at any time by contacting [email protected].

rbaeej applies the principle of data minimisation: we collect only the data that is necessary for each stated purpose, and we do not retain it beyond the period required for that purpose. Where processing is based on your consent, you have the right to withdraw that consent at any time, though withdrawal will not affect the lawfulness of processing that occurred prior to withdrawal.

3. Data Sharing & Third Parties

rbaeej does not sell, rent, or trade your personal data. We share data with third parties only in the following limited and controlled circumstances:

• Payment processors: To complete your financial transactions, we share the minimum necessary financial data with our payment partners (bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, City Bank). Each payment partner operates under its own privacy policy and is responsible for the data it processes within its own systems.
• Game providers: Games on the rbaeej platform are supplied by third-party providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive technical data (such as session tokens or player IDs) necessary to deliver game functionality. They do not receive your full identity or financial data.
• Identity verification services: Where we use third-party KYC technology providers to verify submitted identity documents, those providers process your verification data solely for that purpose and are contractually prohibited from using it for any other purpose.
• Analytics services: We may use aggregated, anonymised data with analytics tools to understand platform performance. This data does not identify individual players.
• Legal and regulatory authorities: We may be required to disclose personal data to law enforcement agencies, regulatory bodies, or courts in Bangladesh or internationally where we receive a lawful request or are subject to a legal obligation. We will notify affected players of such disclosures where we are legally permitted to do so.
• Business transfers: In the event that rbaeej undergoes a merger, acquisition, or sale of assets, player data may be transferred to the acquiring entity. We will notify affected players in advance of any such transfer and ensure that the receiving entity is bound by privacy obligations at least as protective as those described in this policy.

All third parties with whom rbaeej shares personal data are required to process that data lawfully, securely, and solely for the purposes for which it was shared. rbaeej conducts due diligence on its third-party partners and includes data protection obligations in all relevant contracts.

4. Cookies & Tracking Technologies

rbaeej uses cookies and similar tracking technologies to operate the platform effectively, remember your preferences, and understand how players interact with the site. The following categories of cookies may be active when you use rbaeej:

• Strictly necessary cookies: These are essential for the platform to function. They manage your login session, maintain your account state, and enable secure navigation between pages. These cookies cannot be disabled without breaking core platform functionality.
• Functional cookies: These remember your preferences — such as language settings, preferred currency display (BDT), and game lobby layout — so that your experience is consistent across sessions.
• Analytics cookies: These collect anonymised data about how players navigate the platform, which pages they visit most, and where they encounter difficulties. This information is used exclusively to improve the rbaeej platform and does not identify individual players.
• Security cookies: These help us detect and prevent fraudulent activity by flagging unusual session behaviour, such as rapid IP switching or multiple concurrent login attempts.

Most browsers allow you to control cookie behaviour through their settings — you can choose to block or delete certain categories of cookies. Please note that disabling strictly necessary cookies will prevent you from logging into your rbaeej account and accessing core platform features. Disabling functional or analytics cookies will not affect your ability to use the platform but may reduce the personalisation of your experience.

rbaeej does not use cookies to serve advertising on third-party websites, and we do not share cookie data with advertising networks. Our use of tracking technologies is limited to operational and security purposes as described above.

5. Data Retention & Storage

rbaeej retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Active account data: Retained for the full duration of your account's active status plus a minimum post-closure period required for legal and compliance purposes.
• Financial transaction records: Retained for a minimum of five (5) years following the date of each transaction, in accordance with standard financial record-keeping obligations applicable in Bangladesh.
• KYC and identity verification documents: Retained for a minimum of five (5) years following account closure or the completion of the last transaction, whichever is later. This period aligns with anti-money laundering record-keeping requirements.
• Support communications: Retained for a period of two (2) years from the date of the most recent interaction, or longer if the communication relates to an unresolved dispute or legal matter.
• Technical and usage data: Typically retained in identifiable form for up to twelve (12) months, after which it may be anonymised and retained indefinitely for statistical and platform improvement purposes.

All personal data stored by rbaeej is held on secured servers. Where data is processed or stored by third-party service providers, those providers are contractually required to maintain security standards consistent with rbaeej's own data protection obligations. rbaeej does not transfer personal data outside of secure, controlled environments except as described in Section 3 of this policy.

Upon the expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Players who wish to request early deletion of their data (subject to legal retention obligations) may do so by contacting [email protected].

6. Your Privacy Rights

As a registered player on the rbaeej platform, you hold the following rights in relation to your personal data. To exercise any of these rights, contact us at [email protected] with your account details and a description of your request. rbaeej will respond within a reasonable timeframe, and in most cases within 30 days of receiving a complete and verified request.

• Right of access: You may request a copy of all personal data that rbaeej holds about you, together with an explanation of how and why it is being processed.
• Right to rectification: If any of the personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. You may also update basic account information directly through your account settings.
• Right to erasure: You may request that rbaeej delete your personal data. This right is subject to legal retention obligations — for example, we cannot delete financial transaction records that we are legally required to retain. Where erasure is not fully possible, we will inform you of the specific data that must be retained and why.
• Right to restrict processing: You may ask rbaeej to suspend the active processing of your personal data while a complaint or dispute is being resolved, or while you await the outcome of a rectification request.
• Right to data portability: Where technically feasible, you may request that your personal data be provided to you in a structured, commonly used, and machine-readable format so that you can transfer it to another service provider.
• Right to object: You may object to the processing of your personal data for marketing purposes at any time. You may also object to processing based on legitimate interests, though rbaeej may continue processing where we have compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where rbaeej processes your data on the basis of your consent (for example, for receiving promotional emails), you may withdraw that consent at any time by contacting [email protected] or using the unsubscribe link in any marketing email.

rbaeej will not charge a fee for responding to privacy rights requests unless the request is manifestly unfounded, repetitive, or excessive. In such cases, we may charge a reasonable administrative fee or decline the request, and will explain our reasoning in writing.

7. Data Security Measures

rbaeej implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include but are not limited to:

• SSL/TLS encryption: All data transmitted between your device and the rbaeej platform is encrypted using industry-standard SSL/TLS protocols. This applies to login sessions, payment transactions, and any form submission on the platform.
• Access controls: Personal data is accessible only to rbaeej staff who require it to perform their specific job functions. Access is governed by a role-based permissions system and is logged and reviewed regularly.
• Secure password storage: Account passwords are never stored in plain text. rbaeej uses cryptographic hashing to store password data in a form that cannot be reversed to reveal the original password.
• Fraud monitoring: Our security systems continuously monitor for unusual account activity — including login attempts from unrecognised devices, rapid location changes, and irregular transaction patterns — and flag potential security incidents for immediate review.
• Third-party security audits: rbaeej engages independent technical assessors to review platform security on a regular basis. Identified vulnerabilities are addressed according to a prioritised remediation schedule.
• Incident response: In the event of a confirmed data security incident that may affect your personal data, rbaeej will notify affected players promptly, describe the nature of the incident, and outline the steps being taken to address it.

While rbaeej takes all reasonable steps to protect your data, no online platform can guarantee absolute security against all possible threats. You also play a role in keeping your account secure: use a strong and unique password for your rbaeej account, do not share your login credentials with anyone, and contact us immediately at [email protected] if you suspect your account has been compromised.

8. Policy Updates & Contact

rbaeej reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform functionality. When material changes are made, we will update the effective date shown at the top of this page and, where appropriate, notify registered players via email or an in-platform notification. We encourage you to review this page periodically to stay informed about how rbaeej protects your personal data.

This Privacy Policy should be read in conjunction with the rbaeej Terms & Conditions, which govern the overall relationship between you and rbaeej, and the Responsible Gaming page, which describes the tools available to help you manage your gambling activity safely.

If you have questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data, please contact the rbaeej support team:

• Email: [email protected] (plain text — not a clickable link)
• Response time: Within 2 business days during Bangladesh Standard Time (BST, UTC+6) working hours
• Language: English

All privacy-related enquiries are handled by rbaeej's data management team and treated with strict confidentiality. We are committed to resolving any concern you raise in a transparent and timely manner.