Privacy Policy — How rbaje Collects, Uses, and Protects Your Personal Data

rbaje is an online casino and sports betting platform primarily serving players in Bangladesh. This Privacy Policy applies to all personal data collected and processed by rbaje in connection with your use of the platform, including the website at rbaje.lat, any mobile-optimised version of the platform, and all associated features, games, and services.

This Policy should be read alongside our Terms & Conditions and Responsible Gaming Policy, which together form the full agreement between you and rbaje. Terms used in this Policy that are not defined herein carry the meaning given to them in the Terms & Conditions.

This Policy covers data collected from registered players, prospective players who browse the platform without registering, and individuals who contact rbaje's customer support team. It does not apply to third-party websites or services that may be linked to or integrated with the platform, such as payment processors or game providers — those parties maintain their own privacy policies.

For the purposes of this Privacy Policy, the data controller responsible for your personal data is rbaje, operating the platform at rbaje.lat. As data controller, rbaje determines the purposes and means by which your personal data is processed.

All data-related enquiries, including requests to exercise your rights under this Policy, should be directed to our support team at [email protected] with the subject line "Privacy / Data Request". We will acknowledge your request within 48 hours and aim to respond in full within 30 calendar days.

rbaje collects the following categories of personal data:

rbaje does not intentionally collect sensitive personal data categories such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data beyond what is incidentally present in a government-issued identity document required for KYC purposes.

rbaje collects personal data through the following channels:

• Direct Submission: Data you actively provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or participating in promotions.
• Automated Collection: Technical data collected automatically as you use the platform, including via cookies, server logs, and similar tracking technologies. See Section 8 for full details on cookies.
• Third-Party Sources: Identity and fraud-screening data received from our KYC and anti-money-laundering service providers to verify information you have submitted.
• Payment Providers: Transaction confirmation data received from bKash, Nagad, Rocket, Upay, and other approved payment channels when you initiate or complete a transaction.
• Game Providers: Gaming session data returned by our game supplier integrations (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and others) relating to your activity in their games.

rbaje processes your personal data on the following legal bases:

• Contractual Necessity: Processing that is required to perform the contract between you and rbaje — including account creation, processing deposits and withdrawals, and settling gaming activity — is conducted on the basis of contractual necessity.
• Legal Obligation: Certain processing activities — particularly KYC identity verification, anti-money-laundering checks, and the maintenance of gaming records — are carried out to comply with legal obligations applicable to the operation of the platform.
• Legitimate Interests: rbaje processes certain technical and gaming data on the basis of its legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and product improvement. Where we rely on legitimate interests, we have assessed that these interests are not overridden by your rights and freedoms.
• Consent: Where rbaje sends you marketing communications or uses non-essential cookies, we do so on the basis of your consent. You may withdraw your consent at any time by contacting [email protected] or adjusting your account notification preferences.

rbaje uses the personal data we collect for the following purposes:

• To create, manage, and maintain your player account on the rbaje platform;
• To process your deposits and withdrawals via bKash, Nagad, Rocket, Upay, and other approved payment methods, in Bangladeshi Taka (BDT);
• To verify your identity and age (21+) as required under our Terms & Conditions and responsible gaming obligations;
• To detect, investigate, and prevent fraud, money laundering, collusion, and other prohibited activity on the platform;
• To monitor your gaming activity for responsible gaming purposes, including identifying patterns that may indicate problem gambling, and to apply responsible gaming tools such as deposit limits and self-exclusion;
• To settle bets and gaming activity, resolve disputes, and maintain accurate records of your account history;
• To provide customer support and respond to your enquiries, complaints, and data rights requests;
• To send you transactional communications such as deposit confirmations, withdrawal notifications, and account security alerts;
• To send you promotional communications, bonus offers, and platform updates — only where you have provided consent or where we have a legitimate interest in doing so;
• To improve the platform, including analysing aggregated usage data to optimise game selection, site performance, and user experience;
• To comply with applicable legal and regulatory obligations.

rbaje will not use your personal data for any purpose that is incompatible with the purposes listed above without first notifying you and, where required, obtaining your consent.

7.1 Service Providers. rbaje shares personal data with carefully selected third-party service providers who assist in operating the platform. These include KYC and identity verification providers, payment processors (bKash, Nagad, Rocket, Upay), game content suppliers, cloud hosting providers, fraud detection services, and customer support software providers. All service providers are bound by contractual data processing agreements that prohibit them from using your data for any purpose other than providing the specified service to rbaje.

7.2 Game Providers. When you play a game on the rbaje platform, your session data is shared with the relevant game supplier (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Ezugi) to the extent necessary to facilitate gameplay, maintain game integrity, and enable dispute resolution. These providers operate under their own data processing frameworks.

7.3 Legal and Regulatory Disclosure. rbaje may disclose personal data to law enforcement authorities, regulatory bodies, or other third parties where required to do so by applicable law, court order, or regulatory directive. In such cases, rbaje will disclose only the minimum data required to fulfil the legal obligation.

7.4 Business Transfers. In the event of a merger, acquisition, or sale of all or part of rbaje's business, personal data may be transferred to the acquiring entity as part of the transaction. Players will be notified of any such transfer and of any material changes to the applicable privacy policy.

7.5 No Sale of Data. rbaje does not sell, rent, or trade your personal data to any third party for their own independent marketing, advertising, or commercial purposes. Full stop.

rbaje uses cookies and similar tracking technologies on the platform to support essential functionality, improve performance, and where consent is given, to personalise your experience.

Essential Cookies: These cookies are strictly necessary to operate the platform. They include session authentication cookies, security tokens, and load-balancing cookies. The platform cannot function correctly without these cookies and they cannot be disabled.

Analytics Cookies: rbaje uses analytics tools to collect aggregated, anonymised data about how players use the platform — including pages visited, time on page, and navigation paths. This data is used solely to improve the platform. Analytics cookies are deployed on the basis of legitimate interests.

Preference Cookies: These cookies remember your platform settings and preferences (such as language and display options) so that you do not need to reconfigure them on each visit.

Marketing Cookies: Where you have consented, rbaje may use cookies to personalise promotional content shown to you on the platform. You may withdraw this consent at any time by contacting [email protected].

Most web browsers allow you to control cookies through their settings. Disabling essential cookies will impair the functionality of the platform. Disabling non-essential cookies will not prevent you from using the platform but may reduce the quality of your experience.

rbaje retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following considerations:

• Active Account Data: Data associated with an active player account is retained for the lifetime of the account and for a period of five years following account closure, to comply with anti-money-laundering record-keeping obligations.
• KYC and Verification Documents: Identity verification documents are retained for a minimum of five years following the end of the player relationship, as required by applicable financial crime prevention standards.
• Gaming Records: Bet history, game logs, and win/loss records are retained for five years to support dispute resolution and regulatory compliance.
• Support Communications: Customer support transcripts and email correspondence are retained for three years following the resolution of the relevant enquiry.
• Marketing Data: Where consent for marketing communications has been given but subsequently withdrawn, we retain a suppression record to ensure we do not contact you again — this record is retained indefinitely.
• Technical Logs: Server and access logs are retained for 12 months for security monitoring purposes and then securely deleted.

Upon expiry of the applicable retention period, personal data is securely deleted from rbaje's systems or rendered permanently anonymous so that it can no longer be associated with you as an individual.

rbaje takes the security of your personal data seriously and implements a range of technical and organisational measures to protect it against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the rbaje platform;
• Encryption of sensitive data at rest, including financial data and identity documents;
• Role-based access controls ensuring that only authorised personnel can access personal data, and only to the extent required by their role;
• Regular security vulnerability assessments and penetration testing of the platform;
• Multi-factor authentication requirements for staff accessing systems that contain personal data;
• Incident response procedures designed to detect, contain, and report data breaches in a timely manner.

While rbaje takes all reasonable precautions to protect your data, no system connected to the internet can be guaranteed to be completely secure. In the event of a data breach that is likely to result in a risk to your rights and freedoms, rbaje will notify affected players without undue delay.

You also have a responsibility to protect your own account. Do not share your login credentials with anyone, use a strong and unique password, and contact [email protected] immediately if you believe your account has been compromised.

As a player on the rbaje platform, you have the following rights in relation to your personal data. To exercise any of these rights, contact [email protected] with the subject line "Data Rights Request". We will respond within 30 calendar days.

• Right of Access: You have the right to request a copy of all personal data rbaje holds about you, along with information about how it is processed.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it.
• Right to Erasure: You may request that rbaje delete your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where processing is unlawful. Note that this right is subject to overriding legal obligations that may require us to retain certain data.
• Right to Restriction: You may ask rbaje to restrict its processing of your data in certain circumstances, for example where you contest the accuracy of the data or where you have objected to processing pending verification of our legitimate grounds.
• Right to Data Portability: Where processing is based on your consent or on a contract, you have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another controller.
• Right to Object: You may object at any time to processing of your personal data that is based on rbaje's legitimate interests, including profiling for responsible gaming purposes, unless rbaje can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

rbaje will not charge a fee for exercising your rights unless a request is manifestly unfounded or excessive, in which case a reasonable administrative fee may apply. We may ask you to verify your identity before processing a rights request to ensure your data is not disclosed to an unauthorised party.

The rbaje platform is strictly intended for adults aged 21 and above. rbaje does not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from a person under 21, we will take immediate steps to delete that data and close the associated account.

If you are a parent or guardian and believe that a person under 21 in your care has registered an account on the rbaje platform, please contact us immediately at [email protected]. We will investigate and take appropriate action promptly.

rbaje uses identity verification procedures during the registration process specifically to prevent under-age individuals from accessing the platform. These checks include document-based age verification as part of our KYC process.

The rbaje platform may reference or integrate with third-party services including payment processors such as bKash and Nagad, game providers such as Pragmatic Play and Evolution Gaming, and analytics tools. These third parties operate under their own privacy policies and rbaje is not responsible for their data practices.

rbaje's contractual arrangements with all third-party data processors include data processing agreements that require those processors to handle your data securely, to use it only for the purposes specified by rbaje, and to comply with applicable data protection requirements.

When you leave the rbaje platform and visit a third-party website or service — for example, the bKash payment portal during a deposit transaction — your data is governed by that third party's privacy policy from the point of transfer. rbaje has no control over and accepts no responsibility for the privacy practices of third-party services.

rbaje reserves the right to update this Privacy Policy from time to time to reflect changes in our data practices, applicable legal requirements, or platform features. When we make material changes, we will update the "Last Updated" date at the top of this document and notify registered players via email to their registered address and/or via a prominent notice on the platform.

We encourage you to review this Privacy Policy periodically to stay informed about how rbaje protects your personal data. Your continued use of the platform after the effective date of any updated Policy constitutes your acceptance of the changes. If you do not agree to the updated Policy, you must stop using the platform and may request account closure in accordance with the Terms & Conditions.

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way rbaje handles your personal data, please contact our dedicated privacy support team using the details below:

• Email: [email protected]
• Subject Line: "Privacy / Data Request" for data rights requests; "Privacy Complaint" for complaints
• Support Hours: 24 hours a day, 7 days a week
• Language: English
• Response Time: Acknowledgement within 48 hours; full response within 30 calendar days
• Time Zone: Bangladesh Standard Time (UTC+6)

rbaje is committed to resolving all privacy-related concerns fairly and promptly. We take every complaint seriously and will investigate fully before providing a written response.