Privacy Policy

rbajee apk collects personal data in three primary ways: information you provide directly when registering or using the platform, information generated automatically by your use of the platform, and information received from trusted third-party partners involved in payment processing and identity verification.

Information you provide directly:

• Registration data: Full legal name, date of birth, residential address (city and division in Bangladesh, e.g., Dhaka, Chittagong, Sylhet, Khulna), mobile phone number, and email address.
• Identity verification (KYC) documents: Scanned or photographed copies of your National Identity Card (NID), passport, birth certificate, or other government-issued identity document requested during our Know Your Customer verification process.
• Payment information: Mobile Financial Service (MFS) account numbers associated with bKash, Nagad, Rocket, or Upay; bank account details where bank transfer is used; partial card numbers and billing information for Visa or Mastercard transactions. We do not store full card numbers on our servers — card payment data is handled exclusively by our PCI-DSS compliant payment partners.
• Communication records: Messages, emails, and live chat transcripts exchanged with rbajee apk customer support, including the content of your queries and our responses.
• Responsible gaming preferences: Deposit limits, session limits, self-exclusion requests, and cooling-off period elections that you set through the responsible gaming tools.

Information collected automatically:

• Device and browser data: IP address, device type (mobile, desktop, tablet), operating system, browser type and version, screen resolution, and time zone (Bangladesh Standard Time, UTC+6).
• Usage data: Pages visited, features accessed, games played, bets placed, session duration, click paths, and search queries entered within the platform.
• Transaction logs: Records of all deposits, withdrawals, bonus credits, wagering activity, and game outcomes associated with your account.
• Cookie and tracking data: Session identifiers, preference cookies, and analytics beacons — see Section 5 (Cookies and Tracking Technologies) for full details.

Information received from third parties:

• Identity and age verification data returned by our KYC verification partners when your documents are processed.
• Transaction confirmation data and payment status updates from bKash, Nagad, Rocket, Upay, and banking partners.
• Fraud risk signals and device fingerprint data from our third-party fraud prevention service providers, used to protect player accounts from unauthorised access.

rbajee apk processes your personal data for clearly defined and necessary purposes only. The table below summarises the primary purposes for which we use your data and the corresponding lawful basis for that processing:

We do not use your personal data for purposes incompatible with those listed above. Where we intend to process your data for a new purpose, we will update this Privacy Policy and, where required by law, seek your fresh consent before doing so.

Promotional email communications (bonus alerts, seasonal offers, BPL cricket promotions, Eid special promotions, etc.) are sent only to players who have opted in at the time of registration or through the communication preferences panel in their account settings. You may withdraw consent for marketing communications at any time by updating your preferences or emailing [email protected] — withdrawal of marketing consent does not affect the lawfulness of processing carried out before withdrawal.

All personal data processing activities carried out by rbajee apk rest on one or more of the following recognised legal bases:

• Contract performance: Processing is necessary to perform our obligations under the account agreement with you — for example, processing your deposits and withdrawals, verifying your identity, and enabling you to access games and betting markets.
• Legal obligation: Processing is required to comply with applicable laws and regulations, including anti-money laundering (AML) requirements, age verification obligations, and financial record-keeping duties.
• Legitimate interests: Processing is necessary for our legitimate business interests, provided those interests are not overridden by your rights. This includes fraud detection, platform security, network administration, anonymised analytics, and product development. We have conducted legitimate interest assessments (LIAs) for each processing activity in this category to confirm that the balance of interests favours processing.
• Consent: For optional processing activities — such as sending you marketing emails, enabling personalised game recommendations, or placing non-essential analytics cookies — we rely on your freely given, informed, and specific consent. You may withdraw consent at any time without penalty to your account standing.
• Vital interests: In exceptional circumstances, such as preventing immediate harm to a player whose welfare we have reason to be concerned about, we may process data to protect vital interests.

Where consent is the legal basis for processing, we maintain records of when and how consent was obtained. These records are available to you on request by contacting [email protected].

rbajee apk does not sell your personal data to third parties. We share your data only in the limited circumstances described below, and only to the minimum extent necessary for the stated purpose:

• Payment processors: We share necessary payment and identity data with bKash, Nagad, Rocket, Upay, BRAC Bank, City Bank, Dutch-Bangla Bank, and card processing partners (Visa/Mastercard acquirers) to facilitate deposits and withdrawals. These parties are contractually bound to process your data solely for the purpose of completing the relevant financial transaction.
• KYC and identity verification providers: When you submit identity documents, they are processed by our contracted KYC verification partner. This partner operates under a strict data processing agreement and is prohibited from using your documents for any purpose other than identity verification for rbajee apk.
• Fraud prevention and security vendors: We work with specialist third-party fraud detection services that analyse device fingerprints, IP addresses, and behavioural patterns to flag suspicious activity. These vendors receive only the data signals required to perform risk scoring and do not receive full identity records.
• Game studios and platform providers: When you play a game supplied by a third-party game studio (Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Ezugi, Spribe, etc.), your game session data is transmitted to that studio's gaming servers. These studios are certified by independent testing laboratories and operate under their own privacy and data handling frameworks. rbajee apk does not share your full identity or financial records with game studios.
• Analytics providers: Aggregated, anonymised usage data may be processed by analytics tools to help us understand platform performance. No personally identifiable information is included in these analytics reports.
• Legal and regulatory disclosure: We may disclose your personal data to law enforcement agencies, regulatory authorities, or courts where we are legally compelled to do so by a valid order, subpoena, or statutory obligation. We will, where permitted by law, notify you of any such disclosure request.
• Business transfers: In the event of a merger, acquisition, or asset sale involving rbajee apk, your personal data may be transferred to the acquiring entity as part of the transaction. You will be notified of any such transfer and your data will remain subject to protections consistent with this Privacy Policy.

rbajee apk uses cookies and similar lightweight tracking technologies to operate the platform, remember your session, and understand how players use our features. The table below describes the categories of cookies we deploy:

We do not deploy third-party advertising cookies, retargeting pixels, social media tracking beacons, or any cross-site behavioural profiling technology on the rbajee apk platform. The analytics cookies we use are first-party and the resulting data is stored on our own infrastructure — it is not shared with advertising networks.

Strictly necessary and functional cookies are placed automatically as they are required for the platform to operate correctly. Analytics cookies are placed only where you have given consent via the cookie preferences panel accessible in your account settings. You may withdraw analytics cookie consent at any time by updating your preferences; strictly necessary cookies cannot be disabled as doing so would prevent the platform from functioning.

Most browsers allow you to view, manage, and delete cookies through the browser's settings menu. Deleting session cookies will log you out of your rbajee apk account. For guidance on managing cookies in your specific browser or device, please consult your browser's help documentation.

rbajee apk retains personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. Our standard retention periods are as follows:

• Active account data (registration information, transaction records, KYC documents): Retained for the full duration of your active account relationship with rbajee apk.
• Post-closure account data: Following account closure, your core identity and transaction records are retained for a minimum of 5 years from the date of closure to satisfy anti-money laundering record-keeping requirements. After this period, data is securely deleted or anonymised.
• Customer support communications: Chat transcripts, email exchanges, and support tickets are retained for 3 years after the matter is resolved, to allow us to reference prior interactions if a related query arises.
• Marketing consent records: Records of when and how you gave or withdrew consent for marketing communications are retained for the duration of the account relationship and for 2 years after account closure.
• Game session logs: Detailed game round records (bet amounts, outcomes, RNG seeds) are retained for 5 years to support dispute resolution, regulatory audit, and game integrity verification.
• Anonymised analytics data: Aggregated, anonymised platform usage data that cannot be linked back to an individual is retained indefinitely for historical performance analysis and product development purposes.
• Dormant account data: If your account has been inactive for 12 consecutive months, we will send you a notification. If no activity follows within a further 6 months, your account data will be reviewed for archival or deletion subject to our legal retention obligations.

When the applicable retention period expires, personal data is either securely deleted from our systems or irreversibly anonymised so that it can no longer be linked to an identifiable individual. Secure deletion procedures follow industry standards including NIST 800-88 media sanitisation guidelines where applicable.

As a player of rbajee apk, you are entitled to exercise the following rights with respect to your personal data. To exercise any of these rights, contact us at [email protected] with the subject line "Privacy Rights Request" and your registered account email address. We will acknowledge your request within 2 Bangladesh Standard Time (BST) business days and provide a substantive response within 30 calendar days.

rbajee apk employs a layered security architecture to protect the personal data of all players. Our security measures include, but are not limited to, the following:

• Transport layer security: All data in transit between your browser or mobile device and our servers is encrypted using TLS 1.2 or TLS 1.3. We enforce HTTPS across all pages and reject unencrypted connections.
• Data at rest encryption: Sensitive personal data fields — including identity document data, payment account references, and password hashes — are encrypted at rest using AES-256 encryption. Passwords are never stored in plaintext; they are processed using a bcrypt hashing algorithm with a per-user salt.
• Access controls: Access to personal data within our internal systems is restricted on a strict need-to-know basis. Staff access is governed by role-based access control (RBAC) policies. All internal access to player records is logged and audited.
• Two-factor authentication (2FA): Players are encouraged to enable 2FA via SMS OTP on their accounts. All internal staff accounts with access to player data systems are required to use 2FA.
• Regular security assessments: We conduct periodic vulnerability assessments and penetration tests of our platform infrastructure. Critical vulnerabilities are remediated on a priority basis in accordance with our internal patch management policy.
• Incident response plan: rbajee apk maintains a documented data breach response plan. In the event of a personal data breach that poses a risk to players, affected players will be notified without undue delay (and within 72 hours where practicable) with details of the nature of the breach, the data affected, and the steps we are taking to mitigate harm.

While rbajee apk takes all reasonable and proportionate steps to secure your personal data, no internet-based platform can guarantee absolute security against all possible threats. Players are encouraged to use a strong, unique password for their rbajee apk account, enable 2FA, and report any suspicious account activity to [email protected] immediately.

The rbajee apk platform may reference or display content from third-party game studios (Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Ezugi, Spribe, and others). When you launch a game supplied by one of these studios, your game session is served from that studio's own infrastructure. While rbajee apk selects game partners with established reputations and certified fair-play standards, rbajee apk is not responsible for the data handling practices of third-party game studios once your session is active on their servers.

Similarly, when you complete a payment via bKash, Nagad, Rocket, Upay, or a banking partner, your transaction data passes through that payment provider's own systems. Each payment provider operates under its own privacy policy, which governs how they handle your data as their customer. rbajee apk has no control over and accepts no responsibility for the data practices of external payment providers.

We do not include links to unaffiliated external websites on our platform. In the event that any reference to an external resource appears (for example, within game information panels maintained by third-party studios), clicking through to that external site will take you outside the rbajee apk platform and this Privacy Policy will no longer apply. We recommend reviewing the privacy policy of any external site you visit before providing any personal information.

If you have any questions about this Privacy Policy, wish to exercise your data rights, or want to raise a concern about how rbajee apk handles your personal information, please contact our support team using the details below. All privacy-related correspondence is treated as confidential and is handled by staff with appropriate data protection training.

• Email: [email protected] (subject line: "Privacy Rights Request" or "Privacy Enquiry")
• Response time: We aim to acknowledge all privacy-related enquiries within 2 BST business days and to resolve them fully within 30 calendar days of receipt.
• Postal address: Privacy enquiries may also be submitted in writing to our registered correspondence address. Please contact us by email first to obtain the current mailing address, as operational addresses are subject to change.

Internal complaints process: If you believe rbajee apk has not handled your personal data in accordance with this Privacy Policy or applicable law, we encourage you to raise the matter directly with us in the first instance. Submit a formal complaint by email to [email protected] with the subject line "Formal Privacy Complaint". We will acknowledge receipt within 2 BST business days and provide a substantive written response within 30 calendar days. If you remain unsatisfied with our response, you have the right to escalate your complaint to the relevant data protection authority in your jurisdiction.

Policy updates: rbajee apk reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or platform features. Where changes are material, we will notify registered players by email and display a prominent notice on the platform for a minimum of 14 days before the changes take effect. The "Last Updated" date at the top of this document will always reflect the date of the most recent revision. Continued use of the rbajee apk platform after the effective date of any revision constitutes your acknowledgement of the updated Privacy Policy.