gbajji Privacy Policy

This Privacy Policy explains how gbajji ("we", "us", "the Platform") collects, uses, stores, and protects the personal data of users ("you", "Player") who access or use the gbajji platform at gbajji.app. This policy applies to all users regardless of whether they access gbajji via desktop, mobile browser, or the gbajji app.

gbajji is committed to handling your personal data responsibly and transparently. We understand that players in Bangladesh trust us with sensitive information, and we take that responsibility seriously. This policy is written in plain language so you know exactly what is happening with your data — no hidden clauses, no vague language.

By registering an account on gbajji, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with how we handle personal data, you should not create an account or use the platform.

gbajji collects personal data in two ways: information you provide directly, and information collected automatically when you use the platform. Here is a breakdown of both categories:

Information you provide directly:

• Full name, date of birth, and gender (collected at registration).
• Email address and mobile phone number.
• Residential address and country of residence.
• Payment method details including bKash number, Nagad number, or bank account details.
• Identity documents submitted for KYC verification (national ID, passport, or driving licence).
• Communications you send to gbajji support, including chat logs and emails.

Information collected automatically:

• IP address and approximate geographic location.
• Device type, operating system, and browser version.
• Pages visited, time spent on each page, and navigation patterns.
• Game activity including bets placed, games played, and session duration.
• Login timestamps and account activity logs.
• Cookie and tracking data (see Section 6 for full details).

gbajji uses your personal data for specific, legitimate purposes. We do not use your data in ways that go beyond what is described here. The primary purposes for which we process your data are:

gbajji will never use your personal data for purposes that are incompatible with those listed above. If we wish to use your data for a new purpose, we will seek your consent or update this policy with appropriate notice.

gbajji processes your personal data on the following legal grounds, depending on the specific purpose:

• Contractual necessity: Processing required to fulfil our obligations to you under the Terms and Conditions — including account management, payment processing, and customer support.
• Legal obligation: Processing required to comply with applicable laws, including anti-money laundering (AML) regulations, identity verification requirements, and tax reporting obligations.
• Legitimate interests: Processing carried out for fraud prevention, platform security, responsible gaming monitoring, and internal analytics — where these interests do not override your rights.
• Consent: Processing for marketing communications and non-essential cookies, where you have given explicit consent. You may withdraw consent at any time.

gbajji does not sell your personal data. We do not share your data with third parties for their own marketing purposes. However, to operate the platform effectively and comply with legal requirements, we do share data with the following categories of trusted partners:

• Payment processors: bKash, Nagad, Rocket, and banking partners receive the minimum data necessary to process your transactions securely.
• Identity verification providers: Third-party KYC services that verify your identity documents. These providers are contractually bound to handle your data securely.
• IT and hosting providers: Cloud infrastructure and server providers that host the gbajji platform. All providers are required to maintain appropriate security standards.
• Fraud prevention services: Specialist providers that help gbajji detect and prevent fraudulent activity on the platform.
• Regulatory and law enforcement authorities: Where required by law, gbajji will share data with relevant authorities. We will notify you where legally permitted to do so.

All third-party data processors used by gbajji are subject to data processing agreements that require them to handle your data securely, use it only for the specified purpose, and not retain it beyond what is necessary.

gbajji uses cookies and similar tracking technologies to make the platform work correctly, improve your experience, and understand how players use the site. Here is what we use and why:

• Essential cookies: Required for the platform to function. These include session cookies that keep you logged in and security cookies that protect against cross-site request forgery. These cannot be disabled.
• Functional cookies: Remember your preferences such as language settings, display options, and game history. These improve your experience but are not strictly necessary.
• Analytics cookies: Help us understand how players navigate the platform, which pages are most visited, and where users encounter problems. This data is aggregated and anonymised.
• Marketing cookies: Used only with your explicit consent to track the effectiveness of our promotional campaigns. You can opt out at any time.

You can manage your cookie preferences through your browser settings. Note that disabling essential cookies will affect the functionality of the gbajji platform. For non-essential cookies, you can update your preferences at any time through your account settings.

gbajji retains your personal data only for as long as it is necessary for the purposes described in this policy, or as required by applicable law. The following retention periods apply:

• Active account data: Retained for the duration of your account and for 5 years after account closure, in line with anti-money laundering regulations.
• Transaction records: Retained for a minimum of 5 years from the date of the transaction for regulatory compliance purposes.
• KYC documents: Retained for 5 years after account closure or the end of the business relationship.
• Customer support communications: Retained for 2 years from the date of the last interaction.
• Marketing consent records: Retained for as long as you remain opted in, plus 1 year after opt-out for audit purposes.
• Analytics data: Anonymised and retained indefinitely for platform improvement purposes.

When data is no longer required, gbajji securely deletes or anonymises it in accordance with our internal data disposal procedures.

As a gbajji player, you have the following rights over your personal data. These rights can be exercised at any time by contacting our support team at [email protected]:

gbajji implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, or alteration. Our security framework includes:

• 256-bit SSL/TLS encryption on all data transmitted between your device and our servers.
• Encrypted storage for sensitive data including payment details and identity documents.
• Multi-factor authentication options for player accounts to prevent unauthorised access.
• Role-based access controls ensuring only authorised staff can access personal data.
• Regular penetration testing and vulnerability assessments conducted by independent security specialists.
• Incident response procedures to detect, contain, and report data breaches promptly.

In the event of a data breach that is likely to result in a risk to your rights and freedoms, gbajji will notify affected players without undue delay and take immediate steps to contain the breach and prevent further harm.

While gbajji takes every reasonable precaution to protect your data, no system is completely immune to risk. You also play a role in keeping your account secure — use a strong, unique password and never share your login credentials with anyone.

gbajji is strictly an adult platform. We do not knowingly collect personal data from anyone under the age of 18. Our registration process includes age verification steps, and we conduct additional checks where there is reason to believe a user may be underage.

If gbajji discovers that personal data has been collected from a person under 18, we will immediately close the associated account, delete the data, and return any deposits made minus amounts already wagered. If you believe a minor has registered on gbajji, please contact us immediately at [email protected].

gbajji reviews and updates this Privacy Policy periodically to reflect changes in our data practices, legal requirements, or platform features. When we make significant changes, we will notify registered players via email and display a prominent notice on the platform.

The "Last Updated" date at the top of this page indicates when the most recent revision was made. We encourage you to review this policy periodically so you remain informed about how gbajji protects your privacy.

Your continued use of the gbajji platform after a policy update constitutes your acceptance of the revised Privacy Policy. If you disagree with any changes, you may close your account by contacting our support team.

For any questions, concerns, or requests related to this Privacy Policy or your personal data, please contact the gbajji data team at [email protected]. We are available 24 hours a day, 7 days a week.