gbajee Privacy Policy

1. Introduction

gbajee ("we", "us", "our", or "the Platform") is committed to protecting the privacy and personal data of every individual who interacts with our platform. This Privacy Policy describes the types of personal information gbajee collects, the purposes for which that information is used, the conditions under which it may be shared with third parties, the security measures we employ to protect it, and the rights available to individuals regarding their personal data.

By accessing gbajee.vu, registering an account, making a deposit, placing a bet, or otherwise engaging with any service provided through the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.

If you do not agree with any part of this Privacy Policy, you should discontinue use of the Platform immediately and contact our support team at [email protected] to request account closure and data deletion where applicable.

2. Data We Collect

2.1 Data You Provide Directly

When you register an account on gbajee or interact with Platform features, you provide us with personal data that we collect and store. This includes:

• Full legal name as it appears on official identification documents
• Date of birth (used for age verification purposes)
• Residential address, including city and postal code
• Email address
• Mobile phone number registered in Bangladesh
• Payment method details including bKash number, Nagad number, Rocket number, Upay number, bank account details, or card details
• Username and encrypted password
• Identity verification documents submitted during the KYC process (National Identity Card, passport, driving licence)
• Proof of address documentation
• Communications sent to our support team via email or live chat

2.2 Data Collected Automatically

When you visit and use the gbajee platform, certain technical data is collected automatically by our systems. This data is used to maintain platform security, optimise performance, and detect fraudulent activity:

• IP address and approximate geographic location derived from IP
• Device type, operating system, and browser version
• Session duration and pages visited on the Platform
• Clickstream data and navigation patterns
• Login timestamps and session activity logs
• Betting history, game session data, and transaction records
• Cookies and similar tracking technologies (see Section 6)

2.3 Data Collected from Third Parties

In certain circumstances, gbajee may receive personal data about you from third-party sources, including:

• Payment processors and mobile financial service providers (bKash, Nagad, Rocket, Upay, banks) who confirm transaction status and account ownership
• Identity verification and KYC service providers who assist in document authentication
• Fraud prevention and anti-money laundering screening services
• Publicly available sources where legally permitted

3. How We Use Your Data

gbajee uses the personal data it collects for specific, clearly defined purposes. We do not use your data for purposes beyond those described in this Policy without first obtaining your explicit consent or where permitted by applicable law. Our primary purposes for processing personal data are:

• Account creation and management: Registering your account, verifying your identity, and maintaining your profile on the Platform
• Transaction processing: Facilitating deposits and withdrawals via bKash, Nagad, Rocket, Upay, and other supported payment methods, and maintaining accurate financial records
• KYC and compliance: Verifying player identity and age, conducting anti-money laundering (AML) checks, and fulfilling any other applicable legal or regulatory obligations
• Platform security and fraud prevention: Detecting, investigating, and preventing fraudulent activity, money laundering, bonus abuse, and other prohibited conduct
• Customer support: Responding to queries, resolving disputes, and providing technical assistance
• Responsible gaming: Monitoring player activity patterns to identify signs of problem gambling and administering self-exclusion, cooling-off, and deposit limit features
• Service improvement: Analysing usage data in aggregate to improve Platform performance, game selection, and overall user experience
• Marketing communications: Sending promotional offers, bonus notifications, and platform updates to players who have consented to receive such communications. Players may opt out at any time
• Legal compliance: Retaining records as required by applicable law and responding to lawful requests from regulatory or law enforcement authorities

4. Legal Basis for Processing

gbajee processes personal data on the following legal bases, depending on the nature of the processing activity:

• Contractual necessity: Processing required to perform the contract between gbajee and the player, including account registration, bet processing, and payment facilitation
• Legal obligation: Processing required to comply with applicable legal and regulatory obligations, including KYC, AML, and record-keeping requirements
• Legitimate interests: Processing conducted for the legitimate business interests of gbajee, including fraud prevention, platform security, and service improvement, where those interests are not overridden by the player's privacy rights
• Consent: Processing activities for which gbajee has obtained your explicit prior consent, principally direct marketing communications. Consent may be withdrawn at any time without affecting the lawfulness of prior processing

5. Data Sharing & Disclosure

5.1 Service Providers

gbajee shares personal data with carefully selected third-party service providers who assist in the delivery of the Platform's services. These providers are contractually obligated to process data only as instructed by gbajee and to maintain appropriate security standards. Categories of service providers include:

• Payment processing partners (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, and card networks)
• Identity verification and KYC technology providers
• Fraud detection and AML screening services
• Game content providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and others)
• Cloud infrastructure and data storage providers
• Customer support platform providers

5.2 Legal and Regulatory Disclosure

gbajee may disclose personal data to government agencies, law enforcement bodies, regulatory authorities, or other legally authorised parties where we are required to do so by applicable law, court order, or regulatory directive. gbajee will not disclose player data to authorities beyond what is legally required and will resist unlawful disclosure requests to the extent permitted by law.

5.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of gbajee's business assets, personal data held by gbajee may be transferred to the acquiring entity as part of that transaction. Players will be notified of any such transfer that materially affects the processing of their personal data, and the acquiring entity will be required to honour the commitments made in this Privacy Policy.

5.4 No Sale of Personal Data

gbajee does not sell, rent, lease, or otherwise transfer personal data to third-party advertisers, data brokers, or marketing agencies. Your personal data is not a commercial product at gbajee.

6. Cookies & Tracking

gbajee uses cookies and similar technologies (such as local storage and session tokens) to operate and improve the Platform. Cookies are small text files placed on your device when you visit gbajee.vu. The types of cookies used by gbajee are:

• Essential cookies: Required for the Platform to function correctly. These include session authentication tokens and security cookies. The Platform cannot operate without them.
• Functional cookies: Used to remember your preferences such as language settings, last visited games, and display preferences to improve your experience on return visits.
• Analytics cookies: Used to collect aggregated, anonymised data about how players navigate and use the Platform. This helps gbajee identify areas for improvement. No personally identifiable data is shared with third-party analytics services.
• Security cookies: Used to detect and prevent fraudulent login attempts, session hijacking, and other security threats.

You may manage or disable non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the Platform and your ability to access some features.

7. Data Retention

gbajee retains personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention periods apply:

• Account and identity data: Retained for the lifetime of the account plus a minimum of five (5) years following account closure, in accordance with standard AML record-keeping obligations.
• Transaction records: Retained for a minimum of five (5) years from the date of the transaction.
• KYC documentation: Retained for the lifetime of the account plus five (5) years following closure.
• Support communications: Retained for three (3) years from the date of the last interaction unless the subject matter requires longer retention.
• Technical and usage data: Retained for up to twenty-four (24) months, after which it is anonymised or deleted.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with any individual.

8. Data Security

gbajee implements a comprehensive set of technical and organisational security measures designed to protect personal data against unauthorised access, disclosure, alteration, loss, or destruction. Key security measures in place include:

• SSL/TLS encryption for all data transmitted between your device and gbajee servers
• AES-256 encryption for data stored at rest on gbajee infrastructure
• Multi-factor authentication options for player accounts
• Regular security audits and penetration testing of Platform infrastructure
• Strict access controls ensuring that only authorised personnel can access personal data, on a need-to-know basis
• Continuous monitoring for suspicious activity, intrusion attempts, and anomalous access patterns
• Secure, encrypted backup systems with geographically distributed storage

While gbajee makes every effort to protect your personal data, no security system is entirely impenetrable. Players are also responsible for maintaining the security of their own account credentials and should notify gbajee immediately at [email protected] if they suspect any unauthorised access to their account.

9. Your Privacy Rights

As a player on the gbajee platform, you have the following rights with respect to your personal data. To exercise any of these rights, please contact us at [email protected] with the subject line "Privacy Rights Request" and include your registered username and a description of your request.

gbajee will respond to all valid privacy rights requests within thirty (30) calendar days of receipt. In complex cases, this period may be extended by a further thirty (30) days, in which case we will notify you of the extension and the reason for it. gbajee will not charge a fee for handling privacy rights requests unless they are manifestly unfounded or excessive.

10. Children's Privacy

The gbajee platform is strictly for adults aged 18 years and older. gbajee does not knowingly collect personal data from individuals under the age of 18. If we become aware that a minor has registered an account or provided personal data to us, we will immediately close the account, delete the associated personal data, and return any deposited funds in accordance with our terms.

If you are a parent or guardian and believe that a minor in your care has accessed or registered on gbajee, please contact us immediately at [email protected]. We take the protection of minors extremely seriously and will act on all such reports promptly and confidentially.

11. Third-Party Services

The gbajee platform integrates with a number of third-party service providers to deliver its full range of features, including game content providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi, as well as payment partners including bKash, Nagad, Rocket, and Upay. When you interact with games or services provided by these third parties, those interactions may be governed by the respective third party's own privacy policy in addition to this Policy.

gbajee is not responsible for the privacy practices of third-party game studios or payment processors beyond the data-sharing agreements and contractual safeguards we have in place with those providers. We recommend reviewing the privacy documentation of any third-party service you interact with directly outside of the gbajee platform.

gbajee does not embed social media widgets, advertising pixels, or third-party tracking scripts on the Platform that would allow external parties to collect data about your browsing behaviour without your knowledge.

12. Policy Amendments

gbajee reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data processing practices, legal obligations, or Platform services. Material changes to this Policy will be communicated to registered players via email at least seven (7) days before the revised Policy takes effect. The updated Policy will also be published on this page with a revised "Last Updated" date at the top.

Your continued use of the gbajee platform after the effective date of any amended Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with the changes, you should contact us to request account closure before the new Policy takes effect.

13. Contact Us

If you have any questions, concerns, or complaints relating to this Privacy Policy, the way gbajee processes your personal data, or if you wish to exercise any of your privacy rights, please contact our dedicated privacy team using the details below.