kbajee Privacy Policy

Introduction

This Privacy Policy ("Policy") describes how kbajee ("kbajee", "we", "us", "our"), the operator of the online casino and sports betting platform accessible at kbajee.biz, collects, uses, stores, shares, and protects the personal information of registered players, visitors, and users ("you", "your") of the kbajee platform. This Policy applies to all interactions with kbajee, including account registration, kbajee login sessions, deposits and withdrawals via bKash, Nagad, Rocket, Upay, and bank transfer, customer support communications, and participation in any promotional offer.

kbajee is committed to maintaining the highest standards of data privacy and security. We recognise that players across Bangladesh entrust us with sensitive personal and financial information, and we take that responsibility seriously. This Policy sets out your rights in relation to your personal data and explains how to exercise those rights.

This Privacy Policy should be read alongside the kbajee Terms & Conditions and the kbajee Responsible Gaming Policy. Together, these documents form the complete framework governing your use of the kbajee platform. By registering a kbajee account or otherwise using the platform, you confirm that you have read and understood this Privacy Policy.

Data We Collect

kbajee collects personal data through several channels, including the account registration form, identity verification submissions, payment transactions, platform usage, and customer support interactions. The categories of personal data we collect are set out in the table below:

kbajee does not collect sensitive personal data categories such as racial or ethnic origin, political opinions, religious beliefs, or biometric data beyond what is strictly required for identity verification purposes. We do not collect data from minors. The kbajee platform is strictly for adults aged 18 and over.

How We Use Your Data

kbajee uses the personal data we collect for the following specific purposes. We will not use your data for any purpose that is incompatible with those listed here without first obtaining your consent or providing clear prior notice.

• Account Creation and Management: To register your kbajee account, verify your identity, maintain your account profile, and manage your kbajee login credentials and security settings.
• Payment Processing: To process deposits and withdrawals in Bangladeshi Taka (৳) via bKash, Nagad, Rocket, Upay, and supported Bangladesh bank transfer partners, and to maintain accurate financial records associated with your account.
• Identity Verification (KYC): To verify that you meet the kbajee eligibility requirements — including the 18+ age restriction — and to comply with anti-money-laundering (AML) obligations by confirming that payment accounts are registered in your own name.
• Platform Operation: To deliver the kbajee gaming and betting experience, record bet outcomes, calculate and credit winnings, apply bonus terms, and maintain the integrity of all games and markets available on the platform.
• Responsible Gaming: To monitor gaming activity for signs of problem gambling behaviour, enforce deposit limits, session time limits, and self-exclusion instructions set by you or issued by kbajee's responsible gaming team, and to contact you where our data suggests gambling may be becoming a concern.
• Customer Support: To respond to enquiries, investigate complaints and disputes, provide technical assistance, and maintain a record of all support interactions for quality assurance and dispute resolution purposes.
• Fraud Prevention and Security: To detect and prevent fraud, money laundering, account manipulation, multiple-account creation, and any other prohibited activity as defined in the kbajee Terms & Conditions. Technical and usage data are central to kbajee's automated fraud detection systems.
• Platform Improvement: To analyse aggregated, anonymised usage data in order to improve the kbajee platform interface, game selection, payment flow, and overall player experience.
• Marketing Communications: To send you promotional offers, bonus announcements, and kbajee news by email or SMS — but only where you have provided explicit consent for marketing communications. You may withdraw this consent at any time via your account dashboard or by contacting kbajee support.
• Legal Compliance: To fulfil any legal obligations that apply to kbajee as a platform operator, including data retention requirements, responses to lawful requests from authorities, and record-keeping for financial audit purposes.

Legal Basis for Processing

kbajee processes your personal data only where a valid legal basis exists for doing so. The legal bases on which kbajee relies for its data processing activities are as follows:

• Contractual Necessity: Processing that is necessary for kbajee to fulfil its contractual obligations to you under the kbajee Terms & Conditions — including account creation, payment processing, game delivery, and withdrawal processing.
• Legal Obligation: Processing required in order for kbajee to comply with applicable legal obligations, including anti-money-laundering regulations, identity verification requirements, and lawful data requests from competent authorities.
• Legitimate Interests: Processing carried out in pursuit of kbajee's legitimate business interests — including fraud prevention, platform security, responsible gaming monitoring, and anonymous analytics — where those interests are not overridden by your privacy rights.
• Consent: Processing carried out solely on the basis of your explicit, freely given, informed consent — specifically for marketing communications via email or SMS. You may withdraw consent for marketing at any time without affecting the lawfulness of prior processing.

Data Sharing and Disclosure

kbajee does not sell, rent, or commercially transfer your personal data to third parties. We may share your data with third parties in the following limited circumstances, and only to the extent strictly necessary for the stated purpose:

• Payment Processors: Your financial data is shared with payment service providers — including bKash, Nagad, Rocket, and Upay — solely to process deposit and withdrawal transactions. These providers operate under their own privacy policies and are bound by their respective data protection obligations.
• Identity Verification Providers: Where kbajee engages a third-party identity verification service to assist with KYC processes, identity documents and verification data are shared with that provider under a strict data processing agreement limiting use to the KYC purpose only.
• Game Technology Providers: Aggregated, anonymised session and game-play data may be shared with game content providers — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — solely for the purpose of game performance analytics, RNG certification, and fair play auditing. No personally identifiable information is shared with game providers.
• Fraud Prevention Services: Technical and identity data may be shared with third-party fraud detection and AML screening services to support kbajee's security and compliance obligations.
• Legal and Regulatory Authorities: kbajee may disclose personal data to law enforcement agencies, financial intelligence units, or other competent authorities where required to do so by law, court order, or where disclosure is necessary to protect the rights, property, or safety of kbajee, its players, or third parties.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of kbajee's business operations, player data may be transferred to the acquiring entity. You will be notified of any such transfer via a prominent notice on the kbajee platform prior to your data becoming subject to a different privacy policy.

Cookies and Tracking Technologies

The kbajee platform uses cookies and similar technologies to deliver a functional, personalised, and secure player experience. A cookie is a small text file placed on your device when you visit a website. kbajee uses the following categories of cookies:

• Strictly Necessary Cookies: These cookies are essential for the kbajee platform to function. They maintain your kbajee login session, remember your responsible gaming settings, and ensure security features such as CSRF protection operate correctly. These cookies cannot be disabled without impairing core platform functionality.
• Functional Cookies: These cookies remember your platform preferences — such as your preferred game category, language setting, and notification preferences — so that you do not need to reset them on each visit.
• Analytics Cookies: kbajee uses privacy-respecting analytics tools that generate anonymised, aggregate data about how players navigate and use the platform. This data is used solely to identify areas for platform improvement. No individual player is identifiable from this aggregate data.
• Security Cookies: Cookies used to support kbajee's fraud detection and account security systems, including device fingerprinting tokens that help identify unauthorised access attempts.

kbajee does not use advertising cookies, retargeting cookies, or any cookie that tracks your browsing activity across websites other than kbajee.biz. You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will impair your ability to use the kbajee platform, including the kbajee login process.

Data Retention

kbajee retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply as a general guide:

Upon expiry of the applicable retention period, personal data will be securely deleted or irreversibly anonymised. Where data must be retained beyond the standard period due to an ongoing legal dispute, regulatory investigation, or court order, it will be retained only until that matter is fully resolved.

Data Security

kbajee employs a layered security architecture to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our technical and organisational security measures include:

• SSL/TLS Encryption: All data in transit between your device and the kbajee platform is encrypted using TLS 1.2 or higher. This applies to all platform pages, including the kbajee login page, account settings, and payment flows.
• Encrypted Data Storage: Personal data stored on kbajee servers — including identity documents, financial records, and account credentials — is encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data within kbajee's systems is restricted on a strict need-to-know basis. All internal access events are logged and subject to regular audit.
• Two-Factor Authentication: kbajee offers optional two-factor authentication (2FA) via SMS for all player accounts, providing an additional layer of protection for your kbajee login.
• Penetration Testing: kbajee's platform and infrastructure are subject to periodic independent security assessments to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: kbajee maintains a documented data breach response procedure. In the event of a confirmed data breach that poses a risk to your rights and freedoms, affected players will be notified promptly, along with a description of the data involved and the steps kbajee has taken in response.

Your Privacy Rights

As a kbajee player, you have a set of rights in relation to the personal data we hold about you. kbajee is committed to honouring these rights promptly and transparently. Your rights include:

• Right of Access: You have the right to request a copy of all personal data kbajee holds about you. We will respond to verified access requests within 30 days of receipt.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update most account information directly via the kbajee account dashboard; for other corrections, contact kbajee support.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent (and there is no other lawful basis for processing), or where the data has been processed unlawfully. Please note that this right is subject to kbajee's legal obligations to retain certain data categories for specified periods.
• Right to Restriction: You have the right to request that kbajee restrict processing of your personal data in certain circumstances — for example, while an accuracy dispute is being resolved, or where you have objected to processing based on legitimate interests and the objection is being assessed.
• Right to Data Portability: Where processing is based on your consent or contractual necessity, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object at any time to processing of your personal data for direct marketing purposes. You may also object to processing based on legitimate interests, though kbajee may be entitled to continue processing where it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where kbajee processes your data based on your consent (specifically for marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

To exercise any of these rights, contact the kbajee support team by email at [email protected] (plain text — not a clickable link) or via live chat on the kbajee platform. We will verify your identity before processing any data rights request. kbajee will respond to all rights requests within 30 calendar days of receipt.

Children and Minors

The kbajee platform is strictly restricted to individuals aged 18 years or older. kbajee does not knowingly collect, store, or process personal data belonging to any person under the age of 18. If kbajee becomes aware that a minor has provided personal data during a registration attempt or has gained access to the platform, the relevant account will be immediately suspended, all data associated with that account will be deleted, and any deposits will be returned at kbajee's sole discretion.

Parents and guardians who believe a minor in their care may have attempted to register a kbajee account are encouraged to contact kbajee support immediately via live chat or at [email protected] so that the matter can be addressed promptly. kbajee strongly recommends the use of parental control software for households where minors may have access to internet-connected devices.

International Data Transfers

The kbajee platform serves players across Bangladesh. Some of the third-party service partners with whom kbajee shares limited data — such as identity verification providers and game technology partners — may process data on servers located outside Bangladesh. Where such international data transfers occur, kbajee ensures that appropriate contractual safeguards are in place to protect your personal data to a standard equivalent to that applied within Bangladesh. These safeguards include standard contractual clauses, data processing agreements, and where applicable, adequacy assessments of the destination country's data protection framework.

kbajee does not transfer your financial data — including bKash, Nagad, or Rocket account details — outside of Bangladesh except where strictly required to process a specific cross-border payment instruction initiated by you. All core player account data is stored on servers that meet kbajee's security standards regardless of physical location.

Changes to This Privacy Policy

kbajee reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, platform features, or our data processing practices. When material changes are made, kbajee will notify registered players via a prominent notice on the kbajee platform and, where appropriate, by email to the address associated with your account.

The "Effective Date" displayed at the top of this Privacy Policy indicates when the current version came into force. We encourage you to review this Privacy Policy periodically to remain informed about how kbajee protects your data. Continued use of the kbajee platform following notification of a policy update constitutes your acceptance of the revised Privacy Policy.

Previous versions of the kbajee Privacy Policy are available on request by contacting kbajee support at [email protected]. We maintain an archive of prior policy versions for a minimum of three years.

Contact and Data Requests

If you have any questions about this Privacy Policy, wish to exercise any of your privacy rights, or have a concern about how kbajee handles your personal data, please contact the kbajee support team using the details below. All communications regarding data privacy matters are handled with the highest priority by kbajee's dedicated support personnel.

• Email: [email protected] (plain text — not a clickable link). Expected response time: within 24 hours during standard operating hours (Bangladesh Standard Time, UTC+6).
• Live Chat: Available directly on the kbajee platform, 24 hours a day, 7 days a week. Live chat response time is typically under 2 hours.
• Subject Line for Data Requests: Please use the subject line "Privacy Data Request – [Your Username]" when emailing kbajee regarding a data access, rectification, erasure, or portability request to ensure your message is routed to the correct team without delay.
• Identity Verification: For the protection of all players, kbajee will verify your identity before processing any data rights request. You may be asked to provide your registered email address, username, and a copy of a government-issued ID.
• Response Timeframe: kbajee will acknowledge all data rights requests within 5 business days and will provide a full response within 30 calendar days of receiving a verified request. Where a request is complex or involves a large volume of data, kbajee may extend this period by a further 30 days with prior notice to you.