rbajaa Privacy Policy

1 Data We Collect

rbajaa collects personal data from players in Bangladesh through several channels: the account registration form, the KYC verification process, payment transactions, gameplay activity, and direct communications with our support team. The categories of data we collect and their specific purposes are described below.

1.1 Registration Data

When you create an rbajaa account, we collect the following information:

• Full legal name as it appears on your government-issued identity document
• Date of birth (used to verify you are 18 years of age or older)
• Residential address, including city, district, and postal code
• Email address (used for account communications and security alerts)
• Bangladeshi mobile phone number (used for SMS verification and two-factor authentication)
• Username and hashed password (password is never stored in plain text)

1.2 Identity Verification (KYC) Data

To comply with anti-money-laundering obligations and to verify your age and identity, rbajaa may request copies of the following documents:

• National Identity Card (NID) — front and back
• Passport (biographical data page)
• Birth certificate (where NID or passport is unavailable)
• Proof of address — a utility bill, bank statement, or government correspondence dated within the last three months
• Proof of payment method ownership — for example, a screenshot of your registered bKash, Nagad, or Rocket account showing your name and registered mobile number

1.3 Financial Transaction Data

Every deposit and withdrawal you make through rbajaa generates a transaction record. This record includes the transaction amount in BDT, the payment method used (e.g., bKash, Nagad, Rocket, Upay, bank transfer), the transaction timestamp in Bangladesh Standard Time (UTC+6), the transaction reference number assigned by the payment provider, and the account balance before and after the transaction. We do not store full payment card numbers or full mobile wallet PINs — these are handled exclusively by the relevant payment service providers under their own security standards.

1.4 Gameplay and Behavioural Data

rbajaa records data about your use of the platform, including the games you play, bet amounts and outcomes, session start and end times, features you interact with, and in-play betting activity on cricket, football, and other sports markets. This data is used to detect problem gambling indicators, identify unusual or potentially fraudulent account activity, personalise bonus offers where relevant, and improve the overall platform experience for players in Bangladesh.

1.5 Device and Technical Data

When you access rbajaa from any device, our servers automatically log certain technical information: your IP address, browser type and version, operating system, device type (mobile, tablet, desktop), screen resolution, referring URL (the page you visited before arriving at rbajaa.net), and general geographic location derived from your IP address at the city or district level. This data is used for fraud detection, platform compatibility, and aggregate traffic analysis.

1.6 Communications Data

If you contact rbajaa's support team by email, we retain the content of that correspondence for up to three years from the date of the most recent communication in the same thread. This allows us to provide continuity of support and maintain a record in the event of a dispute. Correspondence relating to account closures, suspected fraud, or formal complaints is retained for up to seven years.

2 How We Use Your Data

rbajaa processes personal data only for legitimate, clearly defined purposes. We do not use your data for any purpose that is incompatible with the reason it was originally collected. The primary purposes for which we use your personal data are set out in the table below.

2.1 Marketing Communications

rbajaa may send you promotional emails or SMS messages about bonuses, seasonal offers (such as Eid promotions, Pohela Boishakh specials, or BPL cricket season offers), and new game launches. You will only receive marketing communications if you opted in during registration or subsequently updated your communication preferences in your account settings. You may withdraw marketing consent at any time by updating your preferences or by emailing [email protected]. Withdrawing marketing consent does not affect your ability to use the platform or receive service-critical account notifications.

2.2 Automated Decision-Making

rbajaa uses automated systems to flag accounts for fraud review, to identify unusual betting patterns that may suggest match-fixing activity, and to identify responsible gaming risk indicators. Where an automated process results in a material decision about your account — such as a temporary payment hold or a request for additional verification — you have the right to request a human review of that decision by contacting [email protected].

3 Data Sharing & Disclosure

rbajaa does not sell, rent, or otherwise transfer your personal data to third parties for their own commercial use. We share data only in the limited circumstances described below, and only to the extent strictly necessary for the stated purpose.

3.1 Payment Service Providers

To process your deposits and withdrawals, rbajaa must share relevant transaction data with your chosen payment service provider — for example, bKash, Nagad, Rocket, Upay, or your bank (such as Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, or Sonali Bank). The data shared is limited to what is necessary to complete the transaction and is governed by each provider's own privacy policy. rbajaa is not responsible for the data handling practices of third-party payment providers.

3.2 Game Software Providers

The casino games and sports betting markets on the rbajaa platform are powered by third-party software providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive anonymised session tokens or game identifiers to facilitate gameplay. They do not receive your full name, NID details, or financial account data. Their access is restricted to the minimum technical data required to render their games correctly on your device.

3.3 Identity Verification Partners

rbajaa may use third-party identity verification services to assist with KYC document review. These partners are contractually obligated to process your identity documents solely for verification purposes, to store them securely, and to delete them once verification is complete. They are not permitted to use your data for any other purpose.

3.4 Legal and Regulatory Authorities

rbajaa will disclose personal data to government bodies, law enforcement agencies, financial intelligence units, or courts of competent jurisdiction where we are required to do so by applicable law, a valid court order, or a lawful regulatory demand. This includes potential disclosure to the Bangladesh Financial Intelligence Unit (BFIU) in cases involving suspected money laundering or terrorist financing. We will notify you of any such disclosure unless we are legally prohibited from doing so.

3.5 Business Transfers

In the event that rbajaa undergoes a merger, acquisition, restructuring, or sale of all or part of its assets, your personal data may form part of the transferred assets. In such an event, rbajaa will ensure that the recipient entity is bound by data protection obligations at least as protective as those described in this Privacy Policy, and that you are notified of any material change in data controllership.

4 Cookies & Tracking Technologies

rbajaa uses cookies and similar browser-based storage technologies to enable core platform functionality, maintain your login session, detect fraudulent activity, and gather anonymised usage statistics that help us improve the platform. We do not use advertising cookies, retargeting pixels, or any cross-site tracking technology.

4.1 Types of Cookies We Use

4.2 Managing Cookies

Most web browsers allow you to control cookies through their settings — you can view, delete, or block cookies at any time. Please be aware that disabling strictly necessary cookies will prevent you from logging into your rbajaa account and using core platform features. Disabling functional cookies may result in the loss of saved preferences. Disabling analytics cookies will not affect your ability to use the platform in any way.

5 Data Retention

rbajaa retains your personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. Our standard retention periods are as follows:

• Account and registration data: Retained for the duration of your active account plus five years after account closure, to comply with anti-money-laundering record-keeping obligations.
• KYC identity documents: Retained for five years from the date of submission or from the date of account closure, whichever is later.
• Financial transaction records: Retained for seven years from the transaction date, in line with financial record-keeping best practices.
• Gameplay session data: Retained for two years from the date of each session. Aggregated, anonymised gameplay statistics may be retained indefinitely for platform improvement purposes.
• Customer support correspondence: Retained for three years from the most recent communication, or seven years where the correspondence relates to a dispute, fraud investigation, or formal complaint.
• Marketing consent records: Retained until you withdraw consent plus one year, to demonstrate compliance with your preferences.
• Cookie and analytics data: Anonymised analytics data is retained for up to 26 months. Session cookies are deleted when you close your browser.

At the end of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to any individual. Where deletion is not technically feasible in the short term (for example, in offline backup archives), the data is quarantined and excluded from active processing until deletion can be completed.

6 Data Security

rbajaa takes the security of your personal data seriously and has implemented a range of technical and organisational measures to protect it against unauthorised access, disclosure, alteration, or destruction. Key security measures in place include:

• Transport encryption: All data in transit between your device and rbajaa servers is encrypted using TLS 1.2 or higher (256-bit SSL). The rbajaa.net domain enforces HTTPS at all times.
• Password hashing: Account passwords are stored as salted cryptographic hashes using a modern algorithm. Plain-text passwords are never stored or logged.
• Access controls: Access to personal data within rbajaa's internal systems is restricted to employees whose roles genuinely require it. All staff with data access undergo background screening and are bound by confidentiality obligations.
• Two-factor authentication: rbajaa supports two-factor authentication (2FA) for player accounts via SMS OTP. Players are strongly encouraged to enable 2FA in their account security settings.
• Intrusion detection: Our infrastructure is monitored around the clock for anomalous access attempts, unusual data queries, and other indicators of a potential security breach.
• Regular security reviews: rbajaa conducts periodic internal security reviews and vulnerability assessments of its platform infrastructure.

Despite the measures described above, no data transmission over the internet or electronic storage system is entirely immune to security risks. Players are responsible for maintaining the confidentiality of their own rbajaa login credentials and for ensuring that devices used to access the platform are protected by up-to-date security software.

7 Your Privacy Rights

As an rbajaa player, you hold a number of rights in relation to the personal data we hold about you. These rights are described below. To exercise any of these rights, please contact [email protected] with "Privacy Request" in the subject line. rbajaa will acknowledge your request within five business days and will provide a substantive response within 30 calendar days.

7.1 Right of Access

You have the right to request a copy of the personal data rbajaa holds about you, along with information about how that data is processed, the categories it falls into, who it has been shared with, and how long it will be retained. We will provide this information in a clear, structured format at no charge.

7.2 Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. Minor corrections (such as updating a mobile phone number or email address) can be made directly within your rbajaa account settings. Corrections to identity data (such as your legal name or date of birth) require submission of supporting documentation and will be reviewed by our KYC team.

7.3 Right to Erasure

You may request that rbajaa delete the personal data we hold about you. This right applies where the data is no longer necessary for the purpose it was collected, where you have withdrawn consent and no other legal basis exists for processing, or where you object to processing and there are no overriding legitimate grounds. Please note that rbajaa is legally required to retain certain categories of data (such as transaction records and KYC documents) for defined minimum periods regardless of a deletion request. In such cases, we will delete all data that is not subject to a mandatory retention obligation.

7.4 Right to Restrict Processing

You have the right to request that rbajaa restrict the processing of your personal data in certain circumstances — for example, while a rectification request is being reviewed, or while you contest the legitimate basis for processing. During a restriction, we will continue to store your data but will not carry out any active processing beyond what is strictly necessary.

7.5 Right to Object to Marketing

You have an unconditional right to object to the use of your personal data for direct marketing purposes. Upon receipt of an objection, rbajaa will cease sending marketing communications within five business days. You may also manage your marketing preferences directly in your account settings at any time without needing to contact support.

7.6 Right to Data Portability

Where rbajaa processes your data on the basis of your consent or for the performance of a contract with you, and where the processing is carried out by automated means, you have the right to receive a copy of your data in a commonly used, machine-readable format (such as CSV or JSON). This allows you to transfer your data to another service provider if you choose to do so.

8 Policy Updates & Contact

rbajaa reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable laws, or the services we offer to players in Bangladesh. When we make a material change to this policy, we will notify registered players via the email address associated with their account at least 14 days before the change takes effect. The updated policy will also be published on this page with a revised "Effective Date" at the top.

We encourage players to review this Privacy Policy periodically. Continued use of the rbajaa platform following notification of a policy update constitutes acceptance of the revised terms. If you do not accept a material change to this policy, you may close your account by contacting our support team before the change takes effect.

8.1 Contact Details

For all privacy-related enquiries — including data access requests, rectification requests, deletion requests, objections to processing, or questions about how rbajaa handles your personal data — please contact us using the details below. All correspondence must be in English.

• Email: [email protected] (display only — not a clickable link)
• Subject line for privacy requests: "Privacy Request — [Your Full Name]"
• Response time: Acknowledgement within 5 business days; full response within 30 calendar days
• Operating hours: 24 hours a day, 7 days a week (Bangladesh Standard Time, UTC+6)

This Privacy Policy was last reviewed and updated on 1 January 2026. For questions about these terms, contact [email protected]. rbajaa is committed to protecting the privacy of every player on our platform and to maintaining the highest standards of data security across all services offered in Bangladesh.