rjabaji Privacy Policy — Your Data, Your Rights

rjabaji collects personal information from you in three primary ways: information you provide directly when you register or use the platform, information generated automatically as you interact with our services, and information received from trusted third-party partners where permitted by applicable law.

1.1 Information You Provide Directly

When you create an rjabaji account or use our platform, you may provide the following categories of personal data:

• Identity Data: Full legal name, date of birth, gender, and nationality.
• Contact Data: Email address, Bangladeshi mobile phone number, and residential address.
• Verification Documents: National Identity Card (NID), passport, or driving licence number and images; proof-of-address documents such as utility bills or bank statements.
• Financial Data: bKash account number, Nagad number, Rocket number, Upay account, bank account details (for Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank, and others), and Visa/Mastercard details where applicable.
• Communications Data: Records of correspondence with our support team via email or live chat.
• Responsible Gaming Data: Any deposit limits, self-exclusion requests, or cooling-off periods you set on your account.

1.2 Information Collected Automatically

When you access rjabaji, our systems automatically record certain technical and behavioural data, including:

• Device and Access Data: IP address, device type, operating system, browser type and version, screen resolution, and device identifiers.
• Usage Data: Pages visited, time spent on each page, game sessions played, betting history, deposit and withdrawal history, and bonus activity.
• Location Data: Approximate geographic location derived from your IP address. We do not collect precise GPS location data.
• Session Data: Login timestamps, session duration, and platform interaction logs used for security and fraud monitoring purposes.

1.3 Information from Third Parties

rjabaji may receive limited personal data from the following categories of third-party sources, solely for the purposes described in Section 2 of this Policy:

• Identity verification and KYC service providers who assist us in confirming your identity and age.
• Payment processors and mobile financial service operators (bKash, Nagad, Rocket, Upay) who confirm transaction status.
• Fraud detection and anti-money laundering screening services that cross-reference your details against sanctions lists and watchlists.
• Analytics platforms that provide aggregated, anonymised data about user behaviour patterns on our platform.

rjabaji processes your personal data only where we have a lawful basis for doing so. The table below sets out the primary purposes for which we use your data, the categories of data involved, and the lawful basis we rely upon for each processing activity.

rjabaji will never use your personal data for purposes that are incompatible with those listed above without first notifying you and, where required, obtaining your explicit consent. We do not use automated decision-making processes that produce legal or similarly significant effects without human oversight, except where required by law or expressly agreed by you.

Where we rely on legitimate interest as our lawful basis, we have conducted a balancing assessment to confirm that our interests do not override your fundamental rights and freedoms. You may request a copy of that assessment by contacting [email protected].

Where we rely on consent — most commonly for marketing communications — you may withdraw that consent at any time. Withdrawing consent does not affect the lawfulness of any processing carried out before the withdrawal.

rjabaji may share your personal data with the following categories of third parties under the stated conditions:

• Payment Service Providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank, Visa, and Mastercard receive only the transaction data required to process your deposits and withdrawals. These providers operate under their own data protection policies and are contractually prohibited from using your data for any other purpose.
• KYC and Identity Verification Providers: Our identity verification partners receive your name, date of birth, NID or passport details, and verification document images solely to confirm your identity. Data is shared via encrypted channels and retained by these providers only for the period required to complete verification.
• Game Software Providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other game studios receive anonymised session and gameplay data to render game content and calculate outcomes. They do not receive your name, financial data, or contact details.
• Fraud and AML Screening Services: Where required by our compliance obligations, we may submit your name and date of birth to sanctions screening and politically exposed persons (PEP) databases. This is a legal obligation and cannot be waived.
• Analytics Platforms: Aggregated, anonymised behavioural data (never linked to your identity) may be processed by third-party analytics services to help us improve the rjabaji platform experience.
• Law Enforcement and Regulatory Authorities: rjabaji will disclose personal data to law enforcement agencies, financial intelligence units, or courts when required to do so by applicable law, a valid legal order, or to protect the rights and safety of our users and staff. We will notify you of any such disclosure where we are legally permitted to do so.
• Group Companies: rjabaji may share data with entities within the same corporate group for operational, compliance, and customer service purposes, subject to the same data protection standards described in this Policy.

All third parties who process personal data on rjabaji's behalf are required to enter into data processing agreements that bind them to confidentiality obligations and restrict them from using your data for any purpose beyond what we have specified. We conduct periodic reviews of third-party compliance with these obligations.

rjabaji uses cookies and similar tracking technologies (including web beacons and local storage) to ensure the platform functions correctly, to protect your account security, and to understand how players use our services so we can improve them. The following table describes the categories of cookies we use.

Most web browsers allow you to manage cookie preferences through the browser settings menu. You can typically set your browser to refuse all cookies, accept only certain categories, or alert you when a cookie is being set. Please note that disabling strictly necessary or security cookies will impair your ability to log in to and use the rjabaji platform.

We do not use cookies to serve targeted advertising from third-party ad networks. Any promotional content you see on rjabaji is served based on your account status and opt-in preferences, not based on cross-site behavioural tracking.

rjabaji retains your personal data only for as long as is necessary to fulfil the purpose for which it was collected, or for as long as we are legally required to retain it, whichever period is longer. The following retention periods apply to the main categories of data we hold:

• Account and Identity Data: Retained for the duration of your active account plus a minimum of 5 years after permanent account closure, in accordance with anti-money laundering record-keeping requirements.
• Transaction and Financial Records: Retained for a minimum of 7 years from the date of each transaction to satisfy financial compliance and tax record obligations.
• KYC Verification Documents: Retained for 5 years from the date of verification or account closure, whichever is later. Documents are stored in encrypted form and access is restricted to authorised compliance personnel only.
• Customer Support Communications: Retained for 3 years from the date of the last interaction, to allow for dispute resolution and service quality review.
• Usage and Session Logs: Retained for 24 months in identifiable form, then anonymised for long-term analytics purposes.
• Marketing Preferences and Consent Records: Retained for the duration of your account plus 3 years to demonstrate compliance with consent-based marketing obligations.

Upon expiry of the applicable retention period, rjabaji will securely delete or anonymise your personal data. Secure deletion means that data is overwritten or destroyed in a manner that makes recovery impossible. Where full deletion is not technically feasible (for example, in the case of backup archives), the data will be isolated from active systems and protected until the backup is overwritten in the normal course of our backup rotation cycle.

All personal data held by rjabaji is stored on servers protected by industry-standard physical and logical security controls. Access to personal data is restricted on a need-to-know basis and is subject to logging and periodic access reviews.

As an rjabaji player, you have the following rights in relation to your personal data:

• Right of Access: You may request a copy of all personal data that rjabaji holds about you, together with information about how it is being used. We will provide this in a structured, commonly used format.
• Right to Rectification: If any of the personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it without undue delay.
• Right to Erasure ("Right to be Forgotten"): You may request that rjabaji delete your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where the data has been unlawfully processed. This right is subject to our legal retention obligations — for example, we cannot delete financial transaction records that we are required to retain under applicable law.
• Right to Restriction of Processing: You may request that rjabaji restrict the processing of your data in certain circumstances, such as while a dispute about accuracy is being resolved, or pending the outcome of an objection you have raised.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity and is carried out by automated means, you have the right to receive your data in a machine-readable format and to request that it be transmitted to another service provider where technically feasible.
• Right to Object: You have the right to object at any time to the processing of your data for direct marketing purposes (including profiling for marketing). You also have the right to object to processing based on legitimate interest, on grounds relating to your particular situation.
• Right to Withdraw Consent: Where rjabaji processes your data on the basis of your consent (primarily for marketing communications), you may withdraw that consent at any time via your account settings or by contacting our support team. Withdrawal does not affect the lawfulness of processing prior to withdrawal.

rjabaji will not charge a fee for handling reasonable privacy rights requests. However, if a request is manifestly unfounded or excessive (for example, repetitive requests submitted in bad faith), we reserve the right to charge a reasonable administrative fee or to refuse the request, in which case we will explain our reasons in writing.

rjabaji takes the security of your personal data seriously and implements a layered set of technical and organisational measures to protect it against unauthorised access, accidental loss, destruction, or disclosure. Key measures include:

• Transport Layer Security (TLS): All data transmitted between your browser or device and the rjabaji platform is encrypted using TLS 1.2 or higher. The padlock icon displayed in your browser confirms that the connection is secure.
• Data Encryption at Rest: Sensitive personal data — including identity documents, financial data, and passwords — is encrypted at rest using AES-256 encryption. Passwords are stored as salted cryptographic hashes and are never stored or transmitted in plain text.
• Access Control: Access to personal data within rjabaji is governed by a role-based access control policy. Staff members may only access the data categories required to perform their specific job function. All data access events are logged and subject to periodic audit.
• Two-Factor Authentication (2FA): rjabaji supports two-factor authentication for player accounts and mandates it for all staff with access to personal data systems. We strongly encourage all rjabaji players to enable 2FA on their accounts.
• Vulnerability Management: Our technical team conducts regular security assessments and applies security patches promptly. We operate an internal vulnerability disclosure programme and investigate all credible security reports.
• Incident Response: rjabaji maintains a documented data breach response procedure. In the event of a confirmed personal data breach that poses a risk to affected individuals, we will notify impacted players without undue delay and take all necessary steps to contain and remediate the breach.

While rjabaji takes all reasonable steps to protect your data, no digital platform can guarantee absolute security against every possible threat. You play an important role in protecting your own account by choosing a strong, unique password, keeping your login credentials confidential, and enabling two-factor authentication. If you suspect that your rjabaji account has been compromised, contact our support team immediately at [email protected].

If you have any questions, concerns, or requests regarding this Privacy Policy or the way rjabaji handles your personal data, please contact our dedicated data protection team using the details below.

Data Protection Contact:
rjabaji Data Protection Team
Email: [email protected]
Subject line: Privacy Policy Enquiry
Response time: Within 4 hours (24/7, Bangladesh Standard Time, UTC+6)

If you are not satisfied with rjabaji's response to a privacy concern, you have the right to lodge a complaint with the relevant data protection authority in your jurisdiction. Players in Bangladesh may seek further guidance from the Bangladesh Telecommunication Regulatory Commission (BTRC) or other applicable regulatory bodies.

rjabaji reviews this Privacy Policy at least once per calendar year and whenever material changes to our data processing activities occur. The "Last updated" date displayed in the hero section of this page indicates when the current version came into effect. Continued use of the rjabaji platform after a revised policy has been published constitutes your acceptance of the updated terms. We recommend that you revisit this page periodically to stay informed about how we protect your information.