Data Protection

gbaji Privacy Policy

At gbaji, your privacy matters. This Privacy Policy explains exactly what personal data gbaji collects when you use the platform, why it is collected, how it is used, and what rights you have over your own information. gbaji is committed to handling your data responsibly and transparently — no surprises, no hidden practices.

Last updated: 1 January 2025
Your Data at a Glance
  • Data is never sold to third parties
  • SSL encryption on all data transfers
  • You can request access to your data
  • You can request deletion of your data
  • Cookies used only for platform function
How gbaji Protects You

Your Privacy Is a Priority at gbaji

Six ways gbaji keeps your personal data safe, secure, and under your control at all times.

End-to-End Encryption

Every piece of data you send to gbaji — from your login credentials to your payment details — is protected by industry-standard SSL/TLS encryption. Your information is unreadable to anyone intercepting the connection.

Secure Data Storage

gbaji stores your personal data on secure, access-controlled servers. Only authorised personnel with a legitimate business need can access player data, and all access is logged and audited regularly.

You Control Your Data

gbaji gives you full rights over your personal data. You can request to view what gbaji holds about you, ask for corrections, or request deletion of your account and associated data at any time by contacting support.

No Data Selling

gbaji does not sell, rent, or trade your personal data to any third party for marketing or commercial purposes. Your information is used only to operate the platform and comply with legal obligations.

Transparent Cookie Use

gbaji uses cookies only to make the platform work properly — for session management, security, and performance. No tracking cookies are used for advertising purposes without your explicit consent.

Breach Notification

In the unlikely event of a data breach that affects your personal information, gbaji will notify you promptly and take immediate steps to contain the breach and protect affected accounts.

1. Who We Are

gbaji is an online gaming platform operating at gbaji.xyz, offering casino games, fishing games, crash games, and live dealer experiences to players in Bangladesh. When this Privacy Policy refers to "gbaji", "we", "us", or "our", it means the gbaji platform and the team responsible for operating it.

gbaji acts as the data controller for all personal data collected through the platform. This means gbaji determines the purposes and means of processing your personal data and is responsible for ensuring that data is handled in accordance with this Privacy Policy and applicable data protection laws.

If you have any questions about this Privacy Policy or how gbaji handles your personal data, you can reach the gbaji data protection team at [email protected]. The team will respond to all privacy-related enquiries within 5 business days.

Scope: This Privacy Policy applies to all personal data collected through the gbaji website, mobile application, and any other gbaji-operated service. It does not apply to third-party websites or services that may be linked from the gbaji platform.

2. Data We Collect

gbaji collects personal data in several ways — directly from you when you register or use the platform, automatically when you interact with the site, and occasionally from third-party verification services. The table below summarises the main categories of data gbaji collects and why.

Data Category Examples How Collected
Identity Data Full name, date of birth, gender, nationality Registration form, KYC verification
Contact Data Email address, phone number, residential address Registration form, account settings
Financial Data Mobile banking number (bKash, Nagad, Rocket), transaction history Deposit and withdrawal forms
Technical Data IP address, device type, browser, operating system Automatically on platform access
Usage Data Games played, bets placed, session duration, pages visited Automatically during platform use
Verification Data Government ID, proof of address, selfie for liveness check KYC verification process
Communications Data Support chat logs, email correspondence When you contact gbaji support

gbaji does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health data unless specifically required for responsible gaming purposes — for example, if you disclose a gambling-related health concern when requesting self-exclusion.

3. How We Use Your Data

gbaji uses the personal data it collects for specific, legitimate purposes. The platform does not use your data in ways that are incompatible with the purposes for which it was originally collected. The main purposes for which gbaji processes your personal data are:

  • To create and manage your gbaji player account, including verifying your identity and age before you can place wagers.
  • To process deposits and withdrawals through bKash, Nagad, and Rocket, and to maintain accurate financial records of all transactions on your account.
  • To provide customer support and respond to your enquiries, complaints, and requests in a timely and effective manner.
  • To detect and prevent fraud, money laundering, bonus abuse, and other prohibited activities that could harm the platform or other players.
  • To comply with legal and regulatory obligations, including anti-money laundering (AML) requirements and responsible gaming regulations.
  • To send you account-related communications such as deposit confirmations, withdrawal notifications, and security alerts.
  • To send you promotional communications about gbaji bonuses and offers — but only if you have opted in to receive marketing messages. You can opt out at any time.
  • To analyse platform usage patterns and improve the gbaji gaming experience, including game performance, site navigation, and customer support quality.
  • To monitor gaming behaviour for responsible gaming purposes and to identify players who may need support.

Marketing Communications: gbaji will only send you promotional emails or SMS messages if you have explicitly opted in during registration or through your account settings. You can unsubscribe from marketing communications at any time by clicking the unsubscribe link in any marketing email or by contacting support.

4. Legal Basis for Processing

gbaji processes your personal data on one or more of the following legal bases, depending on the specific purpose of the processing:

  • Contract performance: Processing your data is necessary to provide the gbaji gaming service you have signed up for, including account management, payment processing, and game delivery.
  • Legal obligation: gbaji is required by law to collect and retain certain data for anti-money laundering compliance, age verification, and regulatory reporting purposes.
  • Legitimate interests: gbaji processes some data based on its legitimate business interests, such as fraud prevention, platform security, and improving the gaming experience — provided these interests are not overridden by your privacy rights.
  • Consent: For marketing communications and non-essential cookies, gbaji relies on your explicit consent. You can withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

5. Data Sharing and Third Parties

gbaji does not sell your personal data to any third party. However, gbaji does share data with a limited number of trusted third-party service providers where necessary to operate the platform. All third parties who receive gbaji player data are contractually required to handle it securely and use it only for the specific purpose for which it was shared.

The categories of third parties with whom gbaji may share your data include:

  • Payment processors: bKash, Nagad, and Rocket receive the minimum data necessary to process your deposits and withdrawals. gbaji does not store your full mobile banking credentials.
  • Identity verification providers: Third-party KYC services receive your identity documents and verification data to confirm your identity and age as required by law.
  • Game providers: Licensed game developers may receive your player ID and session data to deliver games and calculate outcomes. They do not receive your full personal profile.
  • IT and security providers: Companies that provide hosting, cybersecurity, and platform infrastructure services may have access to data as part of their service delivery.
  • Regulatory and law enforcement authorities: gbaji may be required to disclose player data to government authorities, regulators, or law enforcement agencies where required by law or court order.

No Data Sales: gbaji will never sell, rent, or trade your personal data to advertisers, data brokers, or any other commercial third party. Your data is used only to run the gbaji platform and meet legal obligations.

6. Cookies and Tracking

gbaji uses cookies — small text files stored on your device — to make the platform work properly and to improve your experience. The table below explains the types of cookies gbaji uses and what they do.

Cookie Type Purpose Can Be Disabled?
Essential Cookies Keep you logged in, maintain your session, and ensure platform security No — required for the platform to function
Performance Cookies Collect anonymous data about how players use the platform to help gbaji improve performance Yes — via cookie settings
Functional Cookies Remember your preferences such as language settings and display options Yes — via cookie settings
Analytics Cookies Help gbaji understand which games and features are most popular so the platform can be improved Yes — via cookie settings

gbaji does not use advertising or tracking cookies that follow you across other websites. You can manage your cookie preferences through your browser settings at any time. Note that disabling essential cookies will prevent the gbaji platform from functioning correctly.

7. Data Retention

gbaji retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. The retention periods below apply to the main categories of data gbaji holds:

  • Account data: Retained for the duration of your account and for 5 years after account closure, as required for anti-money laundering compliance.
  • Financial transaction records: Retained for 7 years from the date of the transaction in accordance with financial record-keeping requirements.
  • Identity verification documents: Retained for 5 years after account closure or the completion of the business relationship.
  • Support communications: Retained for 2 years from the date of the last communication, unless the matter relates to an ongoing dispute or legal proceeding.
  • Technical and usage data: Retained for 13 months from collection, after which it is anonymised or deleted.
  • Marketing consent records: Retained for 3 years from the date of consent or until you withdraw consent, whichever comes first.

When data is no longer required, gbaji securely deletes or anonymises it so that it can no longer be linked to you as an individual. If you request deletion of your account, gbaji will process the request within 30 days, subject to any legal retention obligations that require certain data to be kept for longer.

8. Your Privacy Rights

As a gbaji player, you have a number of rights over your personal data. gbaji is committed to making it easy for you to exercise these rights. To submit any of the requests below, contact the gbaji support team at [email protected] with the subject line "Privacy Request".

Right of Access

Request a copy of all personal data gbaji holds about you. gbaji will provide this within 30 days of receiving your request.

Right to Rectification

Request correction of any inaccurate or incomplete personal data gbaji holds about you. Most account details can be updated directly in your account settings.

Right to Erasure

Request deletion of your personal data where gbaji no longer has a legal basis to retain it. Note that some data must be kept for legal compliance reasons.

Right to Restrict Processing

Request that gbaji limits how it uses your data in certain circumstances, for example while a dispute about data accuracy is being resolved.

Right to Data Portability

Request a copy of your data in a structured, machine-readable format so you can transfer it to another service provider if you choose.

Right to Object

Object to gbaji processing your data for direct marketing purposes or where processing is based on legitimate interests. gbaji will stop processing unless it has compelling grounds to continue.

Response Time: gbaji aims to respond to all privacy rights requests within 30 days. For complex requests, this may be extended by a further 60 days, in which case gbaji will notify you of the extension and the reason for it.

9. Security Measures

gbaji takes the security of your personal data seriously and has implemented a range of technical and organisational measures to protect it against unauthorised access, loss, destruction, or alteration. These measures include:

  • SSL/TLS encryption for all data transmitted between your device and the gbaji platform.
  • Encrypted storage of sensitive data including passwords and payment information.
  • Two-factor authentication (2FA) available for all player accounts to add an extra layer of login security.
  • Regular security audits and penetration testing of the gbaji platform infrastructure.
  • Strict access controls ensuring that only authorised gbaji staff can access player data, with all access logged.
  • Automatic session timeouts to protect your account if you leave the platform without logging out.
  • Real-time fraud detection systems that monitor for suspicious account activity and flag it for review.

While gbaji takes every reasonable precaution to protect your data, no online platform can guarantee absolute security. You also play a role in keeping your account secure — use a strong, unique password for your gbaji account and never share your login credentials with anyone.

10. Children and Minors

gbaji is strictly an adults-only platform. The gbaji service is not directed at, and must not be used by, anyone under the age of 18. gbaji does not knowingly collect personal data from anyone under 18 years of age.

During registration, gbaji requires all players to confirm that they are 18 or older. gbaji also carries out age verification checks as part of the KYC process. If gbaji discovers that an account has been registered by a person under 18, the account will be closed immediately, all funds will be returned to the payment method used for deposit (minus any winnings), and the personal data associated with the account will be deleted.

If you believe that a minor has registered an account on gbaji, please contact [email protected] immediately so the matter can be investigated and resolved promptly.

11. Changes to This Privacy Policy

gbaji may update this Privacy Policy from time to time to reflect changes in the platform, legal requirements, or data processing practices. When changes are made, the updated policy will be published on this page with a revised "Last Updated" date at the top.

For significant changes that materially affect how gbaji processes your personal data, gbaji will notify registered players by email or via an in-platform notification before the changes take effect. For minor updates — such as clarifications or corrections — gbaji may update the policy without direct notification, so it is worth reviewing this page periodically.

Your continued use of the gbaji platform after any changes to this Privacy Policy constitutes your acknowledgement of the updated policy. If you do not agree with the changes, you should stop using the platform and may request account closure by contacting gbaji support.

12. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or how gbaji handles your personal data, please get in touch with the gbaji privacy team. The team is available 24/7 and will do its best to resolve your query as quickly as possible.

  • Email: [email protected] — use the subject line "Privacy Request" for data-related enquiries.
  • Live Chat: Available directly through the gbaji platform after logging in to your account.
  • Response time: gbaji aims to respond to all privacy enquiries within 5 business days.

We're here to help. Privacy can feel complicated, but the gbaji team is happy to explain anything in plain language. Whether you want to know what data gbaji holds about you, how to update your marketing preferences, or how to request account deletion — just reach out and the team will walk you through it.

Play with Confidence

Your Data Is Safe — Now Start Playing

gbaji takes your privacy seriously so you can focus on what matters — enjoying great games. Create your free account today and experience fast local payments, fair games, and 24/7 support.