rbaj Privacy Policy

This Privacy Policy explains how rbaj ("we", "us", "our", "the Platform") collects, uses, stores, and protects the personal data of players and visitors who use the rbaj website and mobile application at rbaj.club.

rbaj is committed to handling your personal data respons ibly and transparently. We understand that players in Bangladesh trust us with sensitive information, and we take that responsibility seriously. This policy is written in plain English so that every rbaj player can understand exactly what happens to their data.

By registering an account on rbaj or continuing to use the platform, you acknowledge that you have read and understood this Privacy Policy. This policy should be read alongside the rbaj Terms and Conditions, which together form the complete agreement between you and rbaj.

rbaj collects only the personal data that is necessary to provide a safe, fair, and functional gaming service. The categories of data we collect are set out in the table below:

rbaj does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health information unless specifically required by law and with your explicit consent.

rbaj collects your personal data through the following channels:

• Direct interactions: Data you provide when registering your rbaj account, completing identity verification, making deposits or withdrawals, contacting support, or participating in promotions.
• Automated technologies: Technical and usage data collected automatically when you visit the rbaj website or use the mobile app, including cookies, server logs, and analytics tools.
• Payment providers: Transaction confirmation data received from bKash, Nagad, and Rocket when you make a deposit or withdrawal on rbaj.
• Identity verification services: Where required, rbaj may use third-party identity verification providers to confirm the accuracy of the documents you submit during the KYC process.

rbaj uses your personal data for the following purposes. For each purpose, we have identified the legal basis that justifies the processing:

• Account management: To create and maintain your rbaj account, verify your identity, and manage your account settings. Legal basis: contract performance.
• Payment processing: To process deposits, withdrawals, and bonus payments through your chosen mobile banking provider. Legal basis: contract performance.
• Fraud and security: To detect, investigate, and prevent fraudulent activity, money laundering, and other illegal use of the rbaj platform. Legal basis: legitimate interests and legal obligation.
• Responsible gaming: To monitor your gaming activity for signs of problem gambling and to apply responsible gaming tools where appropriate. Legal basis: legal obligation and legitimate interests.
• Customer support: To respond to your enquiries, resolve disputes, and improve the quality of our support service. Legal basis: contract performance and legitimate interests.
• Platform improvement: To analyse usage patterns and improve the rbaj platform, games, and user experience. Legal basis: legitimate interests.
• Marketing communications: To send you promotional offers, bonus notifications, and news about new games on rbaj, where you have opted in to receive such communications. Legal basis: consent.
• Legal compliance: To comply with applicable laws, regulations, and requests from competent authorities. Legal basis: legal obligation.

rbaj will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent.

rbaj does not sell your personal data to any third party. We share your data only in the following limited circumstances:

• Payment providers: bKash, Nagad, and Rocket receive the minimum data necessary to process your transactions. These providers operate under their own privacy policies and are not permitted to use your data for any purpose other than processing rbaj transactions.
• Identity verification providers: Where KYC verification is required, your identity documents may be shared with a certified third-party verification service. This data is used solely for verification purposes and is not retained by the provider beyond the verification process.
• Technology and hosting providers: rbaj uses third-party cloud hosting and technology infrastructure providers to operate the platform. These providers process data on rbaj's behalf under strict data processing agreements and are not permitted to use your data independently.
• Legal and regulatory authorities: rbaj may disclose your personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by applicable law or in response to a valid legal request.
• Business transfers: In the event of a merger, acquisition, or sale of rbaj's business assets, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer and given the opportunity to delete your account if you do not wish your data to be transferred.

rbaj uses cookies and similar technologies on the platform website and mobile app. Cookies are small text files stored on your device that help rbaj recognise you, remember your preferences, and understand how you use the platform.

rbaj uses the following types of cookies:

• Essential cookies: Required for the platform to function. These include session cookies that keep you logged in and security cookies that protect your account. These cannot be disabled.
• Functional cookies: Remember your preferences such as language settings and display options. Disabling these may affect your experience on rbaj.
• Analytics cookies: Help rbaj understand how players use the platform so we can improve it. Data collected is aggregated and anonymised where possible.
• Marketing cookies: Used to deliver relevant promotional content to you on the rbaj platform. These are only activated if you have opted in to marketing communications.

You can manage your cookie preferences at any time through your browser settings. Note that disabling essential cookies will prevent you from logging in to your rbaj account. For mobile app users, cookie-equivalent tracking can be managed through your device's app permissions settings.

rbaj retains your personal data for as long as your account is active and for a period after account closure as required by applicable law and legitimate business needs. The general retention periods applied by rbaj are as follows:

• Account and identity data: Retained for the duration of your account and for 5 years after account closure, in line with standard anti-money laundering record-keeping requirements.
• Financial transaction data: Retained for 7 years after the date of each transaction for accounting and legal compliance purposes.
• Customer support communications: Retained for 3 years after the date of the last interaction, to support dispute resolution and service improvement.
• Technical and usage data: Retained for 12 months on a rolling basis, after which it is aggregated and anonymised.
• Marketing consent records: Retained for the duration of your account and for 2 years after account closure as evidence of consent.

rbaj implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, or alteration. These measures include:

• TLS encryption for all data in transit between your device and rbaj servers.
• AES-256 encryption for sensitive data stored in rbaj databases.
• Multi-factor authentication options for player accounts.
• Regular penetration testing and security audits by independent third-party security firms.
• Role-based access controls limiting internal access to personal data on a need-to-know basis.
• Automated monitoring systems that detect and alert on suspicious access patterns in real time.
• Secure data centres with physical access controls and 24/7 monitoring.

While rbaj takes every reasonable precaution to protect your data, no online platform can guarantee absolute security. You also play an important role in keeping your account secure by using a strong, unique password and enabling two-factor authentication in your rbaj account settings.

As an rbaj player, you have the following rights in relation to your personal data. You can exercise any of these rights by contacting rbaj support at [email protected]. rbaj will respond to all valid requests within 30 days.

rbaj will not charge a fee for exercising any of these rights in normal circumstances. If a request is manifestly unfounded or excessive, rbaj reserves the right to charge a reasonable administrative fee or decline the request, with a written explanation provided to you.

The rbaj platform is strictly for adults aged 18 and over. rbaj does not knowingly collect personal data from anyone under the age of 18. If you are a parent or guardian and believe that a minor has registered an account on rbaj or provided personal data to the platform, please contact us immediately at [email protected].

Upon receiving a verified report that a minor has registered on rbaj, we will immediately suspend the account, delete all associated personal data, and refund any deposits made to the payment method used during registration.

rbaj may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or platform features. When we make changes, the updated policy will be published on this page with a revised "Last Updated" date at the top.

For significant changes that materially affect how we use your personal data, rbaj will notify all registered players by email at least 14 days before the changes take effect. Your continued use of the rbaj platform after the effective date of any changes constitutes your acceptance of the updated Privacy Policy.

We recommend that all rbaj players review this Privacy Policy periodically. The current version is always available at rbaj.club/privacy-policy.

If you have any questions about this Privacy Policy, want to exercise any of your data rights, or have a concern about how rbaj handles your personal data, please get in touch with the rbaj privacy team. We respond in both English and Bengali and aim to reply to all privacy-related enquiries within 5 business days.

• Email: [email protected]
• Live Chat: Available from within the rbaj platform after login, 24 hours a day, 7 days a week
• FAQ: rbaj.club/faq — common privacy and account questions answered

For questions specifically about responsible gaming tools and self-exclusion, please visit the Responsible Gaming page.