rbaje Privacy Policy

1Who We Are

rbaje is an online gaming platform built specifically for players in Bangladesh. The platform operates at rbaje.club and offers casino games, slots, live dealer games, and cricket betting through the Crickex section. All financial transactions on rbaje are conducted in Bangladeshi Taka (BDT) via bKash and Nagad.

For the purposes of this Privacy Policy, rbaje is the data controller — meaning we are responsible for deciding how and why your personal data is collected and used. If you have any questions about how rbaje handles your data, the first point of contact is our support team at [email protected].

2Data We Collect

rbaje collects personal data in two broad categories: data you provide directly, and data we collect automatically when you use the platform.

Data you provide directly:

• Full name as registered on your bKash or Nagad account
• Date of birth (for age verification purposes)
• Mobile phone number
• bKash or Nagad account number used for deposits and withdrawals
• Username and password (password is stored in encrypted form only)
• Identity documents submitted for verification, where requested
• Communications you send to rbaje support, including chat logs and emails

Data collected automatically:

• IP address and approximate geographic location
• Device type, operating system, and browser information
• Pages visited on rbaje and time spent on each page
• Game sessions — games played, bet amounts, and outcomes
• Deposit and withdrawal transaction history
• Login timestamps and session duration
• Referral source — how you arrived at rbaje

The table below summarises the main data types and their purpose:

3How We Collect It

rbaje collects your personal data through the following channels:

• Directly from you when you register an account on rbaje.club or the rbaje mobile app.
• From your activity on the platform — every login, game session, and transaction generates data that is recorded automatically.
• From bKash and Nagad when a deposit or withdrawal transaction is initiated — the payment processor confirms the transaction and passes back a reference and status update.
• From identity verification providers when you submit documents for account verification.
• From cookies and similar tracking technologies when you browse the rbaje website. See Section 7 for full details on cookies.
• From your communications with rbaje support — whether via live chat, email, or any other channel.

rbaje does not purchase personal data from data brokers or any other third-party data sources. All data we hold about you comes from your direct interaction with rbaje or from the service providers we use to operate the platform.

4Why We Use Your Data

rbaje uses your personal data for the following purposes:

• To create and manage your rbaje account, including verifying your identity and age at registration.
• To process deposits and withdrawals via bKash and Nagad, and to maintain accurate financial records of all transactions.
• To operate the games and betting services on the platform, including recording game outcomes and settling bets correctly.
• To detect and prevent fraud, money laundering, and other prohibited activity — including monitoring for unusual betting patterns or multiple account creation.
• To provide customer support — when you contact rbaje, we need your account information to help you effectively.
• To send you important account notifications, such as deposit confirmations, withdrawal updates, and security alerts. These are service communications, not marketing.
• To support responsible gaming — your game session data helps rbaje identify patterns that may indicate problem gambling, so we can offer appropriate support tools.
• To improve the rbaje platform — aggregated, anonymised usage data helps us understand how players use the site and where we can make improvements.
• To comply with any applicable legal or regulatory obligations.

5Legal Basis for Processing

rbaje processes your personal data on the following legal grounds:

• Contract performance: Most of the data processing rbaje carries out is necessary to deliver the services you signed up for — running your account, processing payments, and operating the games. Without this processing, rbaje cannot provide the service.
• Legal obligation: Some data processing is required by law — for example, retaining financial transaction records for a defined period, or cooperating with law enforcement requests.
• Legitimate interests: rbaje processes some data on the basis of legitimate interests — specifically fraud prevention, platform security, and responsible gaming monitoring. In each case, rbaje has assessed that these interests do not override your privacy rights.
• Consent: Where rbaje relies on consent — for example, for optional marketing communications — you have the right to withdraw that consent at any time without affecting the lawfulness of processing that took place before withdrawal.

6Third-Party Sharing

rbaje does not sell your personal data. We share data with third parties only where it is necessary to operate the platform or comply with legal obligations. The third parties we work with are:

• bKash and Nagad: Your phone number and transaction details are shared with these payment processors to complete deposits and withdrawals. Their own privacy policies govern how they handle this data.
• Identity verification providers: When account verification is required, your name, date of birth, and identity documents may be shared with a third-party verification service. This data is used solely for verification and is not retained by the provider beyond the verification process.
• Platform infrastructure providers: rbaje uses cloud hosting and security services to operate the platform. These providers process data on rbaje's behalf and are contractually bound to handle it securely and only as instructed by rbaje.
• Law enforcement and regulators: rbaje will disclose personal data to law enforcement agencies or regulatory authorities if required to do so by law, or if we believe disclosure is necessary to prevent fraud or protect the safety of users.

7Cookies and Tracking

rbaje uses cookies and similar technologies on the website and mobile app. Cookies are small text files stored on your device that help the platform function correctly and allow us to understand how players use the site.

• Essential cookies: Required for the platform to function. These include session cookies that keep you logged in and security cookies that protect against cross-site request forgery. You cannot opt out of essential cookies without stopping use of the platform.
• Analytics cookies: Used to understand how players navigate rbaje — which pages are visited most, where players drop off, and how long sessions last. This data is aggregated and anonymised. rbaje uses this to improve the platform experience.
• Preference cookies: Store your settings and preferences — for example, your preferred language or notification settings — so you don't have to re-enter them every time you visit.

You can manage cookie preferences through your browser settings. Note that disabling non-essential cookies will not affect your ability to use the core rbaje platform, but may affect some personalisation features.

8Data Security

rbaje takes data security seriously and has implemented a range of technical and organisational measures to protect your personal information:

• All data in transit between your device and rbaje servers is encrypted using TLS (Transport Layer Security).
• Passwords are stored using strong one-way hashing — rbaje staff cannot see your password, only a cryptographic hash of it.
• Access to personal data within rbaje is restricted on a need-to-know basis. Only staff who require access to perform their role can view player data.
• rbaje conducts regular security reviews and vulnerability assessments of the platform.
• Suspicious login attempts trigger automatic security alerts and may result in temporary account locks to protect your account.

While rbaje takes every reasonable precaution, no online platform can guarantee absolute security. If you suspect your account has been compromised, contact rbaje support immediately so we can secure it. You should also use a strong, unique password for your rbaje account and never share your login credentials with anyone.

9Data Retention

rbaje retains your personal data for as long as your account is active and for a defined period after account closure. Retention periods vary by data type, as shown in the table in Section 2. The general principles are:

• Account and identity data is retained for the duration of your account plus five years after closure, to meet legal and compliance obligations.
• Financial transaction records are retained for seven years from the date of the transaction, in line with standard financial record-keeping requirements.
• Game session data is retained for two years after account closure, primarily to support responsible gaming monitoring and dispute resolution.
• Device and IP data used for security purposes is retained on a rolling 12-month basis.
• Support communications are retained for three years from the date of the last contact.

When the applicable retention period expires, rbaje deletes or anonymises the data so it can no longer be linked to you as an individual. If you request account deletion before the end of a retention period, rbaje will delete all data that is not subject to a legal retention obligation and anonymise the rest.

10Your Rights

As a player on rbaje, you have the following rights in relation to your personal data:

• Right of access: You can request a copy of the personal data rbaje holds about you. We will provide this within a reasonable timeframe.
• Right to rectification: If any of the data rbaje holds about you is inaccurate or incomplete, you can ask us to correct it.
• Right to erasure: You can ask rbaje to delete your personal data. We will do so where there is no legal obligation requiring us to retain it.
• Right to restrict processing: In certain circumstances, you can ask rbaje to limit how we use your data while a concern is being investigated.
• Right to data portability: You can request a copy of your data in a structured, machine-readable format.
• Right to withdraw consent: Where rbaje relies on your consent to process data — such as for marketing communications — you can withdraw that consent at any time.

To exercise any of these rights, contact rbaje support at [email protected]. We will respond to all requests within a reasonable period. We may need to verify your identity before processing a data request to ensure we are responding to the correct person.

11Children's Privacy

rbaje is strictly an adult platform. We do not knowingly collect personal data from anyone under the age of 18. If you are under 18, you must not use rbaje or provide any personal information to us.

If rbaje becomes aware that personal data has been collected from a person under 18, we will delete that data immediately and close the associated account. If you believe a minor has registered on rbaje, please contact us at [email protected] so we can investigate and take appropriate action.

12Policy Updates

rbaje may update this Privacy Policy from time to time to reflect changes in how we operate, changes in applicable law, or improvements to our data practices. When we make changes, the updated policy will be published on this page with a revised "Last Updated" date at the top.

For significant changes — particularly those that affect how we use your data in a material way — rbaje will notify active players via email or an in-platform notification before the changes take effect. We encourage you to review this page periodically so you are always aware of how your data is being handled.

Continued use of rbaje after any update to this Privacy Policy constitutes your acceptance of the revised policy. If you do not agree with any changes, you should stop using rbaje and contact support to close your account and request deletion of your data.

13Contact Us

If you have any questions about this Privacy Policy, want to exercise your data rights, or have a concern about how rbaje has handled your personal information, please get in touch:

• Email: [email protected]
• Live chat: available inside your rbaje account after login
• Response time: most queries are handled within 24 hours

For data access requests, correction requests, or deletion requests, please email [email protected] with the subject line "Data Request" and include your registered phone number so we can locate your account. We will verify your identity before processing any data request.