rbajy Privacy Policy

rbajy collects personal data in order to provide and continuously improve its services to players in Bangladesh. The categories of personal data we collect include:

• Identity information: your full name, date of birth, and username as provided during account registration. This information is used to verify your identity and to confirm that you meet rbajy's minimum age requirement of 21 years.
• Contact information: your email address and, where provided, your mobile phone number. Contact information is used to communicate with you about your account, transactions, promotions, and support requests.
• Financial information: transaction records including deposit amounts, withdrawal requests, payment method references (such as bKash account numbers or Nagad references), and account balance history. Note that full payment credentials are never stored directly by rbajy.
• Device and technical information: your IP address, device type, operating system, browser type, and session identifiers. This technical data is collected automatically when you access the rbajy platform and is used to maintain platform security, detect fraud, and optimise the player experience.
• Gaming activity data: records of games played, bets placed, outcomes, bonus usage, and wagering history. This data is used to calculate your account balance, resolve disputes, detect irregular gaming patterns, and improve our game offerings.
• KYC verification documents: where required, copies of government-issued identity documents, proof of address, and payment method ownership documentation. These documents are collected solely for the purpose of verifying your identity and complying with applicable anti-money laundering obligations.

rbajy collects only the personal data that is necessary for the purposes described in this Policy. We do not collect sensitive personal data (such as racial or ethnic origin, political opinions, or health information) unless specifically required for responsible gaming assessments and only with your explicit consent.

rbajy uses the personal data it collects for the following purposes:

• Account management: to create, maintain, and administer your rbajy account, including processing your registration, verifying your identity, managing your account settings, and communicating with you about your account status.
• Transaction processing: to process your deposits and withdrawals through bKash, Nagad, Rocket, Upay, Visa, and Mastercard, and to maintain accurate records of all financial activity on your account for accounting and dispute resolution purposes.
• Platform security and fraud prevention: to monitor for suspicious activity, detect and prevent fraud, identify and block unauthorised access attempts, and ensure the integrity of the rbajy gaming environment for all players.
• Regulatory compliance: to comply with applicable anti-money laundering (AML) regulations, Know Your Customer (KYC) obligations, and any other legal or regulatory requirements applicable to online gaming platforms operating in Bangladesh.
• Responsible gaming: to monitor gaming behaviour and identify patterns that may indicate problem gambling, and to administer responsible gaming tools such as deposit limits, time-outs, and self-exclusion at your request or where required by our responsible gaming policy.
• Service improvement and personalisation: to analyse aggregated and anonymised gaming data to improve rbajy's product features, game selection, platform performance, and user experience. Where permitted by your marketing preferences, we may also use your data to send you relevant promotional offers.

rbajy will not use your personal data for any purpose that is incompatible with the purposes listed in this section without first obtaining your explicit consent. If you wish to opt out of marketing communications from rbajy, you may do so at any time by contacting our support team.

rbajy processes your personal data on the following legal bases:

• Contractual necessity: the majority of personal data processing by rbajy is necessary to perform the contract between rbajy and you as a player — including registering your account, processing transactions, and providing access to games and betting markets.
• Legal obligation: certain processing activities are required in order for rbajy to comply with applicable legal obligations, including anti-money laundering regulations, KYC requirements, and obligations to report suspicious activity to competent authorities.
• Legitimate interests: rbajy processes certain data on the basis of its legitimate interests in operating a secure, fair, and commercially viable gaming platform. This includes fraud detection, platform security monitoring, and aggregated analytics for product improvement.
• Consent: where rbajy processes your personal data for marketing purposes or for any purpose that is not covered by the above bases, we will first obtain your explicit consent. You may withdraw your consent at any time by contacting [email protected].

rbajy does not sell, rent, or trade your personal data to third parties. We may share your personal data with carefully selected third parties only in the following circumstances:

• Payment processors and financial service providers: to enable your deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, or Mastercard, we must share transaction data with these payment service providers. Each provider operates under its own privacy policy and data protection standards.
• Identity verification and KYC service providers: to comply with our legal obligations and verify the identity of players, rbajy works with licensed identity verification service providers who process your documents securely under strict data protection agreements.
• Technology and platform providers: rbajy uses licensed third-party game providers (including Pragmatic Play, Evolution Gaming, Spribe, and others) and platform technology providers whose systems necessarily process certain player session and game data in order to deliver the games and services available on rbajy.
• Regulatory and law enforcement authorities: rbajy may be required by law to disclose your personal data to regulatory bodies, law enforcement agencies, anti-money laundering authorities, or courts of competent jurisdiction. rbajy will only make such disclosures where legally required to do so.

All third parties with whom rbajy shares personal data are required to maintain the confidentiality and security of that data and to use it only for the specific purpose for which it was shared. rbajy does not permit its data processors to use player data for their own commercial purposes.

rbajy takes the security of financial data extremely seriously. All financial transactions on the rbajy platform are processed using SSL-encrypted connections. rbajy retains records of all deposits and withdrawal transactions on your account for a minimum of five years from the date of the transaction , in order to comply with applicable financial record-keeping obligations and to support the resolution of any transaction disputes that may arise.

rbajy does not store full card numbers, CVV codes, bKash PINs, Nagad PINs, or any equivalent payment credential directly on its servers. Payment method details used for deposits are tokenised or referenced by masked identifiers only. If you believe your payment details have been compromised, you should contact your payment provider directly and notify rbajy support immediately at [email protected].

rbajy uses cookies and similar tracking technologies to operate the platform, improve the player experience, and collect analytics data. The types of cookies we use include:

• Essential cookies: these are strictly necessary for the rbajy platform to function. They enable core features such as session management, login state, account security tokens, and shopping cart equivalents for in-progress bets. These cookies cannot be disabled without impairing platform functionality.
• Analytics cookies: rbajy uses anonymised analytics cookies to understand how players navigate the platform, which pages are most visited, where players drop off, and how platform features perform. This data is used in aggregate form only and cannot be used to identify individual players.
• Functional cookies: these cookies remember your preferences and settings — such as your chosen language, display preferences, and previously entered account details — to provide a more personalised experience each time you visit rbajy.
• Security cookies: rbajy uses security cookies to detect and prevent fraudulent activity, bot traffic, and unauthorised access attempts. These cookies are an integral part of rbajy's platform security infrastructure and cannot be disabled.

Most web browsers allow you to control cookie settings through the browser's privacy or settings menu. You may choose to block non-essential cookies at any time; however, doing so may impair certain features of the rbajy platform. rbajy's use of cookies does not include any cross-site tracking for advertising purposes on third-party platforms.

rbajy retains your personal data for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, regulatory, accounting, and reporting obligations. As a general guide: account data and gaming history is retained for a minimum of five years from the date your account is closed; KYC verification documents are retained for a minimum of five years from the date of verification; transaction records are retained for a minimum of five years from the date of the transaction; and communications with customer support are retained for a minimum of two years from the date of the communication.

When your personal data is no longer required for any legitimate purpose, rbajy will securely delete or anonymise it in accordance with its data disposal procedures. If you request the deletion of your personal data before the expiry of the applicable retention period, rbajy will consider your request but may not be able to comply in full where retention is required by law or where deletion would prejudice rbajy's ability to defend against a legal claim.

rbajy implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, loss, destruction, or alteration. These measures include SSL encryption for all data transmitted between your device and rbajy's servers, secure server infrastructure with restricted access controls, regular security audits and vulnerability assessments, staff training on data protection obligations, and incident response procedures to address any potential data breach promptly.

Despite rbajy's commitment to data security, no method of electronic transmission or storage is completely secure. rbajy cannot guarantee the absolute security of your personal data. In the event of a data security incident that is likely to result in a high risk to your rights and freedoms, rbajy will notify affected players as soon as reasonably practicable and will take all necessary steps to contain and remediate the incident.

You have the following rights in respect of the personal data that rbajy holds about you:

• Right of access: you have the right to request a copy of the personal data that rbajy holds about you. rbajy will respond to a verified access request within 30 days of receipt.
• Right to rectification: if you believe that any personal data rbajy holds about you is inaccurate or incomplete, you have the right to request that it be corrected or completed. You may update certain account details directly through your rbajy account settings.
• Right to erasure: in certain circumstances, you have the right to request that rbajy delete the personal data it holds about you. This right is subject to rbajy's legal obligations to retain certain data and to rbajy's legitimate interests in retaining data for fraud prevention and dispute resolution purposes.
• Right to restriction: you may request that rbajy restrict the processing of your personal data in certain circumstances — for example, while the accuracy of that data is being verified following a rectification request.
• Right to data portability: where processing is carried out by automated means and is based on your consent or on contractual necessity, you have the right to receive a copy of your personal data in a structured, commonly used, and machine-readable format.
• Right to object: you have the right to object to the processing of your personal data where that processing is based on rbajy's legitimate interests. rbajy will consider your objection and will cease processing unless it has compelling legitimate grounds that override your interests.

To exercise any of the above rights, please contact rbajy's support team at [email protected]. We may need to verify your identity before processing your request. rbajy will respond to all valid data rights requests within 30 days of receipt. If your request is complex or you have made multiple requests, rbajy may extend this period by a further 60 days, and will notify you accordingly.

The rbajy platform is strictly intended for adults aged 21 and above. rbajy does not knowingly collect personal data from anyone under the age of 21. If rbajy discovers that it has inadvertently collected personal data from a person under the minimum age, it will delete that data immediately and close the associated account. If you believe that rbajy may have collected personal data from a minor, please contact [email protected] immediately so that we can investigate and take appropriate action.

rbajy uses automated age verification checks during the registration process and may require documentary proof of age before activating a new account or processing a first withdrawal. Players in Bangladesh are reminded that the minimum age to use rbajy is 21 years — this applies without exception to all players regardless of the minimum legal age for other activities in their jurisdiction.

The rbajy platform may contain references to third-party service providers such as bKash, Nagad, and licensed game providers. These third-party services operate under their own privacy policies, which rbajy does not control and is not responsible for. rbajy encourages all players to review the privacy policies of any third-party services they use in connection with their rbajy account, including their chosen payment method providers. rbajy's Privacy Policy applies only to the rbajy platform and the personal data collected directly by rbajy.

rbajy reserves the right to update or amend this Privacy Policy at any time. When we make changes, we will update the "Last Updated" date at the top of this page. For material changes that significantly affect how we collect or use your personal data, rbajy will make reasonable efforts to notify you — either by displaying a notice on the rbajy platform or by sending an email to the address registered on your account — before the changes take effect.

Your continued use of the rbajy platform after any updated Privacy Policy has been posted constitutes your acceptance of the revised Policy. If you do not agree to the revised Policy, you must stop using the rbajy platform and may request account closure. It is your responsibility to review this Policy periodically to stay informed about how rbajy protects your personal data.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data rbajy holds about you, please contact our support team. We aim to respond to all privacy-related inquiries within 5 business days. Our support team is available 24/7 for Bangladesh players.