gbajaa Privacy Policy

gbajaa operates as an international online casino and sports betting platform serving players across Bangladesh. As part of delivering our services — including cricket betting, live casino games, slots, and crash games — we necessarily collect and process certain personal information about our players and visitors.

This Privacy Policy sets out in clear terms what personal data we collect, the legal basis on which we process it, how long we retain it, who we may share it with, and the rights available to you regarding your personal data. We have written this policy in plain English so that it is genuinely useful and understandable, not just a compliance formality.

gbajaa is committed to handling all personal data responsibly, securely, and in strict accordance with the principles of data minimisation, purpose limitation, and storage limitation. We do not sell personal data to third parties under any circumstances. We do not use personal data for purposes beyond those described in this policy without first obtaining your explicit consent.

If you have any questions about how gbajaa processes your personal data, or if you wish to exercise any of your data rights, please contact our support team at [email protected]. We aim to respond to all data-related enquiries within five business days.

For the purposes of applicable data protection legislation, gbajaa is the data controller responsible for the personal data of players and visitors using the gbajaa Platform. As data controller, gbajaa determines the purposes for which and the means by which personal data is processed.

3.1 Registration Data

When you create a gbajaa account, we collect the information you provide during the registration process. This includes your full name, date of birth (to verify the 21+ age requirement), email address, mobile phone number, and your chosen username. We use this data to set up and manage your account.

3.2 Identity Verification Data

To comply with our age verification obligations and to protect the integrity of our platform, gbajaa may request identity documents from players at any stage. These may include a national identity card (NID), passport, driving licence, or a recent utility bill or bank statement as proof of address. Documents submitted for verification are stored securely and used only for the stated verification purpose.

3.3 Financial Data

When you make a deposit or request a withdrawal, we collect transaction-related data including your chosen payment method (bKash, Nagad, Rocket, Upay, or bank account details), transaction reference numbers, and transaction amounts in Bangladesh Taka (৳). We do not store full payment credentials such as mobile wallet PINs or full bank account numbers on our servers; these are handled directly by your payment provider.

3.4 Usage and Technical Data

We automatically collect certain technical data when you access the gbajaa Platform. This includes your IP address, device type, operating system, browser type and version, pages visited, time and duration of sessions, game history, bet records, and referring URL. This data is collected to ensure platform security, detect fraud, improve user experience, and comply with our responsible gaming obligations.

3.5 Communications Data

If you contact gbajaa Support, submit a complaint, or communicate with us through any channel, we retain records of those communications including the content of messages, timestamps, and any attachments provided. This data is used to resolve your query and to improve our support services.

3.6 Cookies and Tracking Technologies

gbajaa uses cookies and similar tracking technologies on the Platform. Please see Section 9 of this policy for a full explanation of the cookies we use and how you can manage your cookie preferences.

gbajaa processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual Necessity: Processing your registration data, financial transaction data, and account management data is necessary for gbajaa to perform its contractual obligations to you under the Terms & Conditions you accepted when creating your account.
• Legal Obligation: Certain processing activities — particularly identity verification, age verification, and transaction monitoring — are required by applicable anti-money laundering, know-your-customer, and responsible gaming obligations.
• Legitimate Interests: We process usage and technical data on the basis of our legitimate interest in maintaining the security, integrity, and performance of the Platform, and in detecting and preventing fraudulent activity.
• Consent: Where we send you promotional communications (such as bonus offers, seasonal promotions tied to events like Eid, Pohela Boishakh, or BPL cricket), we do so only on the basis of your explicit prior consent. You may withdraw this consent at any time.

gbajaa uses the personal data it collects for the following specific purposes:

• Creating, maintaining, and securing your gbajaa account.
• Processing deposits and withdrawals via bKash, Nagad, Rocket, Upay, and supported bank partners.
• Verifying your age and identity in accordance with our 21+ age policy and applicable obligations.
• Providing customer support and resolving disputes or complaints.
• Enforcing our Terms & Conditions and detecting prohibited or fraudulent behaviour.
• Delivering responsible gaming tools such as deposit limit enforcement, self-exclusion checks, and session time notifications.
• Improving Platform functionality, game offerings, and user experience through usage analysis.
• Sending you transactional communications (e.g., deposit confirmations, withdrawal notifications, account security alerts) — these are not optional and are part of the service.
• Sending promotional communications relating to gbajaa bonuses, new game launches, and seasonal offers — only where you have provided consent.
• Complying with any legal request from a competent authority where gbajaa is legally required to provide information.

gbajaa does not use your personal data to make fully automated decisions that produce significant legal effects concerning you without human oversight. Where automated screening tools are used (for example, in fraud detection), a member of our team reviews flagged cases before any consequential action is taken.

gbajaa does not sell, rent, or trade your personal data to any third party for their own marketing or commercial purposes. We may share your personal data with third parties only in the following limited circumstances:

6.1 Payment Processors

To process your deposits and withdrawals, we share necessary transaction data with your selected payment service provider (such as bKash, Nagad, Rocket, Upay, or your bank). These providers process data under their own privacy policies and are contractually required to protect your data.

6.2 Game Providers

Third-party game providers — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — may receive your account identifier and session data in order to deliver their games within the gbajaa Platform. These providers are not permitted to use this data for any purpose beyond game delivery and fairness certification.

6.3 Identity Verification Services

Where gbajaa uses a third-party identity verification or age verification service to process documents you submit, that provider will handle your data under a binding data processing agreement and is strictly prohibited from using your data for any other purpose.

6.4 Legal and Regulatory Authorities

gbajaa may be required by law or by a binding order from a competent judicial, governmental, or regulatory authority to disclose personal data. In such cases, gbajaa will disclose only the minimum information required to satisfy the legal obligation and will, where legally permissible, notify the affected player of the disclosure.

6.5 Business Transfers

In the event of a merger, acquisition, or sale of assets, your personal data may be transferred to the acquiring entity as part of that transaction. gbajaa will notify affected players of any such transfer and ensure that the receiving entity is bound by privacy obligations no less protective than those set out in this policy.

gbajaa retains personal data only for as long as necessary to fulfil the purposes for which it was collected or to comply with applicable legal obligations. The following general retention periods apply:

When personal data is no longer required, gbajaa securely deletes or anonymises it so that it can no longer be attributed to any individual. Anonymised aggregated data may be retained indefinitely for statistical and analytical purposes.

As a player whose personal data is processed by gbajaa, you have the following rights. To exercise any of these rights, please contact us at [email protected] with your account details and a clear description of your request.

• Right of Access: You may request a copy of all personal data gbajaa holds about you. We will respond within 30 days of receiving a valid request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it without undue delay.
• Right to Erasure ("Right to be Forgotten"): You may request that gbajaa delete your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to Restriction of Processing: You may request that we restrict how we process your data in certain circumstances, for example while a dispute about the accuracy of your data is being resolved.
• Right to Data Portability: Where processing is carried out by automated means on the basis of consent or contractual necessity, you have the right to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to Object: You may object to processing carried out on the basis of legitimate interests at any time. You may also withdraw consent to marketing communications at any time by contacting [email protected].

gbajaa will not charge a fee for handling data rights requests unless the request is manifestly unfounded or excessive, in which case we reserve the right to charge a reasonable administrative fee or to decline the request with a written explanation.

9.1 What Are Cookies

Cookies are small text files placed on your device when you visit the gbajaa Platform. They allow the Platform to recognise your device on subsequent visits, remember your session preferences, and provide a more personalised and secure experience.

9.2 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication cookies that keep you logged in and security cookies that detect unusual login activity. These cannot be disabled.
• Functional Cookies: Remember your language preference, display settings, and responsible gaming tool configurations across sessions.
• Analytics Cookies: Help us understand how players interact with the Platform — which pages are visited most, where users exit, and how long sessions last. This data is aggregated and anonymised.
• Marketing Cookies: Used only where you have given consent to receive promotional communications. These help us understand which campaigns led you to gbajaa so we can improve our outreach.

9.3 Managing Cookies

You can manage or disable non-essential cookies through your browser settings at any time. Note that disabling certain cookies may affect the functionality of the gbajaa Platform. For strictly necessary cookies, no opt-out is available as they are essential to the service.

gbajaa applies industry-standard technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the gbajaa Platform.
• Encrypted storage of sensitive data fields including identity document images and financial transaction records.
• Role-based access controls ensuring that only authorised personnel can access personal data, and only to the extent required for their specific job function.
• Regular security assessments and penetration testing of the Platform infrastructure.
• Two-factor authentication options available to all registered players for account login.
• Continuous monitoring of server infrastructure for intrusion attempts and anomalous activity.

While gbajaa takes all reasonable precautions, no system is entirely immune to security risks. In the event of a data breach that is likely to result in a risk to your rights and freedoms, gbajaa will notify affected players without undue delay and will take all appropriate steps to mitigate the impact of the breach.

The gbajaa Platform is strictly intended for adults aged 21 and above. We do not knowingly collect, process, or store personal data relating to any individual under the age of 21. If gbajaa becomes aware that personal data has been collected from a person under 21 without verified parental consent, that data will be deleted immediately and the associated account will be permanently closed.

If you are a parent or guardian and you believe that a person under 21 in your care has created a gbajaa account, please contact us immediately at [email protected]. We will investigate and take appropriate action as a matter of priority.

gbajaa reserves the right to update or revise this Privacy Policy at any time. When we make a material change to this policy, we will notify registered players via email or a prominent notice on the Platform at least 14 days before the change takes effect. The updated policy will display a revised "Last updated" date at the top of the document.

Your continued use of the gbajaa Platform after the effective date of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the revised policy, you should close your account and discontinue use of the Platform before the effective date of the change.

We encourage you to review this Privacy Policy periodically so that you remain informed about how gbajaa handles your personal data.