Privacy Policy for rbaj

rbaj is an internationally operated online betting and casino platform accessible at rbaj.onl. The platform provides sports betting, live casino, slot games, and crash game services to English-speaking players in Bangladesh. Throughout this Privacy Policy, references to "rbaj", "we", "us", or "our" refer to the operator of the rbaj platform.

rbaj acts as the data controller in respect of the personal data collected from players who register on or otherwise interact with the rbaj platform. As data controller, rbaj determines the purposes and means by which personal data is processed, and is responsible for ensuring that such processing is carried out in accordance with applicable data protection standards.

rbaj collects personal data from you in the following ways: (a) data you provide directly when registering or using the platform; (b) data generated automatically through your use of the platform; and (c) data received from trusted third-party service providers such as payment processors and identity verification services.

rbaj does not knowingly collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health records, or criminal conviction data, except where legally required for anti-money laundering (AML) compliance purposes. Where such data is incidentally received, it is handled with the highest standard of care and not used for any purpose beyond strict legal compliance.

The personal data collected by rbaj is used exclusively for the following documented purposes. We do not use your personal data for any purpose not listed here without first obtaining your explicit consent or being required to do so by law.

• Account creation and management: Processing your registration, maintaining your player account, verifying your identity, and enabling access to platform features including deposits, withdrawals, betting, and casino games.
• Payment processing: Facilitating deposits and withdrawals via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, and other supported payment channels. Financial data is shared with payment processors solely to execute transactions you have initiated.
• Identity verification and KYC: Verifying that you meet the minimum age requirement of 21 years, confirming the accuracy of your registration details, and fulfilling our anti-money laundering (AML) obligations under applicable international standards.
• Fraud prevention and security: Monitoring account activity to detect and prevent fraudulent transactions, multiple account registrations, bonus abuse, money laundering, and other prohibited conduct as defined in our Terms & Conditions.
• Responsible gaming: Using usage and behavioural data to identify players who may be exhibiting signs of problem gambling and to administer responsible gaming tools including deposit limits, cool-off periods, and self-exclusion.
• Customer support: Responding to support queries submitted via live chat or email, resolving disputes, processing complaints, and providing assistance related to your account or transactions.
• Platform improvement: Analysing aggregated, anonymised usage data to improve the platform's performance, user experience, game offering, and payment processes. Individual player data is not used for this purpose in an identifiable form.
• Legal and regulatory compliance: Retaining records as required by applicable AML, KYC, and financial regulations, and cooperating with lawful requests from competent authorities where required by law.
• Promotional communications: Where you have given your explicit consent, sending you information about promotions, bonuses, and platform updates via your registered email address or mobile number. You may withdraw this consent at any time by contacting support.

rbaj processes personal data only where a valid legal basis exists for doing so. The legal bases on which we rely are set out below, matched to the processing activities they support.

• Contractual necessity: Processing your identity, contact, financial, and usage data is necessary to perform the contract between you and rbaj — namely, the provision of betting and casino services under the Terms & Conditions you accepted at registration. Without this processing, we cannot operate your account or process your transactions.
• Legal obligation: Processing your identity and financial data for KYC and AML purposes is required to comply with applicable anti-money laundering laws and international compliance standards. We are legally obligated to conduct these checks and retain the associated records.
• Legitimate interests: Processing technical and usage data for fraud prevention, platform security, and responsible gaming monitoring is carried out on the basis of rbaj's legitimate interest in maintaining a secure, fair, and sustainable platform. This interest has been balanced against your privacy rights and does not override them.
• Consent: Processing your contact data for the purpose of sending you promotional communications is based on your freely given, explicit consent. You may withdraw this consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

rbaj does not sell, rent, or trade your personal data to any third party. We share personal data only in the limited circumstances described below, and only to the extent necessary for each specific purpose.

• Payment service providers: Your financial data (wallet numbers, transaction amounts, account references) is shared with payment processors including bKash, Nagad, Rocket, and Upay solely to execute deposit and withdrawal transactions you have initiated. These providers process your data under their own privacy policies and are bound by contractual data protection obligations.
• Identity verification providers: Where third-party KYC or identity verification services are used to assist with player verification, identity data and document images may be shared with those providers under strict data processing agreements that prohibit any secondary use of your data.
• Game content providers: Third-party game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive a session token and minimal technical data necessary to load and operate their games within the rbaj platform. These providers do not receive your full identity or financial data.
• Legal and regulatory authorities: rbaj may disclose personal data to law enforcement agencies, regulatory bodies, or other competent authorities where required to do so by applicable law, court order, or legitimate legal process. rbaj will notify affected players of any such disclosure where legally permitted to do so.
• Professional advisers: Legal, audit, and compliance advisers may access personal data on a strictly confidential basis where necessary to provide professional services to rbaj.

All third parties with whom rbaj shares personal data are required to handle that data in accordance with applicable data protection standards and are prohibited from using it for any purpose beyond the specific purpose for which it was shared.

The rbaj platform uses cookies and similar tracking technologies to enable core platform functionality, maintain session continuity, support fraud prevention systems, and analyse platform performance. The following categories of cookies are in use on the rbaj platform.

• Strictly necessary cookies: These cookies are required for the platform to function. They maintain your login session, remember your account preferences, and protect against cross-site request forgery attacks. These cookies cannot be disabled without impairing your ability to use the platform.
• Functional cookies: These cookies remember your display preferences, language settings, and last-visited game category. They improve your experience by personalising the platform to your prior choices.
• Analytics cookies: Aggregated, anonymised data about how players navigate the rbaj platform is collected to identify technical issues, measure page performance, and prioritise improvements. This data does not identify individual players.
• Security cookies: These cookies support rbaj's fraud detection and account security systems. They help identify unusual login patterns, flag suspicious account activity, and protect players from unauthorised access.

You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will affect core platform functionality including your ability to maintain a logged-in session. rbaj does not use third-party advertising or retargeting cookies.

rbaj retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal, regulatory, and compliance obligations. The following retention periods apply.

Upon expiry of the applicable retention period, personal data is securely deleted from active systems and any backup systems on their next scheduled purge cycle. Where deletion is not technically possible (for example, data held in encrypted offline archives), the data is isolated and protected from any further processing until it can be securely destroyed.

rbaj implements a layered set of technical and organisational security measures designed to protect personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures are reviewed and updated on a regular basis to reflect evolving security standards and threat landscapes.

• Encryption in transit: All data transmitted between your device and the rbaj platform is encrypted using 256-bit TLS/SSL encryption, the same standard used by international banking institutions.
• Encryption at rest: Personal data and financial records stored in rbaj's databases are encrypted at rest using industry-standard encryption algorithms.
• Access controls: Access to personal data is restricted to authorised rbaj personnel on a strict need-to-know basis. All internal access is authenticated, logged, and subject to periodic access rights review.
• Intrusion detection: The rbaj platform operates continuous network monitoring and intrusion detection systems to identify and respond to security anomalies in real time.
• Vulnerability management: The platform undergoes regular security assessments, including vulnerability scanning and code review, to identify and remediate potential security weaknesses before they can be exploited.
• Incident response: rbaj maintains a documented data breach response procedure. In the event of a confirmed personal data breach that is likely to result in risk to affected players, rbaj will notify impacted individuals promptly and without undue delay.

As a player whose personal data is processed by rbaj, you hold the following data rights. You may exercise any of these rights at any time, free of charge, by contacting the rbaj Data Protection team at [email protected] with the subject line "Data Rights Request". We will respond within 30 calendar days of receiving your request.

Please note that certain data rights may be limited where rbaj is required by law to retain or continue processing personal data — for example, to fulfil AML/KYC retention obligations or to defend against a pending legal claim. Where a limitation applies, rbaj will explain the reason clearly in its response to your request.

The rbaj platform is strictly intended for adults aged 21 years and above. rbaj does not knowingly collect or process personal data from individuals under the age of 21. Registration on the platform by any person under 21 is a direct violation of our Terms & Conditions and is strictly prohibited.

Where rbaj becomes aware, through identity verification or any other means, that personal data has been collected from a player who is under 21 years of age, that account will be immediately suspended, the personal data flagged for urgent review, and the data deleted as soon as practicable in accordance with applicable legal requirements. Any funds deposited to an underage account will be handled in accordance with applicable regulatory guidance.

If you have reason to believe that a minor has registered an account on the rbaj platform, please contact us immediately at [email protected] with the subject line "Underage Account Report". We take all such reports seriously and will investigate promptly.

The rbaj platform does not contain links to external third-party websites. All navigation within the platform remains within the rbaj.onl domain. However, game content delivered by third-party studios such as Pragmatic Play, Evolution Gaming, and Spribe is streamed or rendered within the rbaj platform environment and is subject to those studios' own data practices in respect of any data they independently collect during gameplay sessions.

rbaj is not responsible for the data handling practices of third-party game studios operating within the platform, beyond the contractual data protection obligations imposed on them by rbaj's service agreements. If you have concerns about data collected directly by a specific game provider, please refer to that provider's own privacy documentation.

rbaj reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform features. When material changes are made, we will publish the updated Policy on this page with a revised effective date clearly displayed at the top of the document.

For significant changes that materially affect how your personal data is processed, rbaj will provide additional notice via your registered email address or through a prominent notice within the platform prior to the changes taking effect. Continued use of the rbaj platform after updated Privacy Policy terms have been published constitutes your acknowledgement of the changes.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a concern about how rbaj handles your personal data, please contact us using the details below. All privacy correspondence is handled in English and responded to within 30 calendar days.

• Email: [email protected] — please use the subject line "Privacy Request" or "Data Rights Request" as appropriate
• Live chat: Available 24/7 within the rbaj platform after login — use the subject "Privacy Query"
• Response time: Privacy and data rights requests are responded to within 30 calendar days of receipt

If you are not satisfied with rbaj's response to a privacy complaint, you have the right to escalate the matter through applicable dispute resolution channels available in your jurisdiction. rbaj is committed to working constructively with you to resolve any privacy concern before escalation becomes necessary, and we encourage you to contact us directly in the first instance so we have the opportunity to address your concern promptly.