rbajer Privacy Policy

This Privacy Policy ("Policy") describes how rbajer ("we", "us", "our") collects, uses, stores, shares, and protects personal data in connection with the rbajer online casino and sports betting platform accessible at rbajer.biz ("Platform"). This Policy applies to all individuals who access or use the Platform, including registered account holders, visitors who browse the Platform without registering, and any person who communicates with rbajer through any channel including email, WhatsApp, or live chat.

By accessing the rbajer Platform or creating an account, you acknowledge that you have read and understood this Privacy Policy and you consent to the collection and processing of your personal data as described herein. If you do not agree with any provision of this Policy, you should immediately cease use of the Platform and may request that your account be closed by contacting [email protected].

This Policy should be read in conjunction with rbajer's Terms and Conditions and Responsible Gaming Policy, both of which are available on the rbajer website. Personal data processed in connection with your use of the Platform is handled with appropriate care, proportionality, and respect for your privacy interests at all times.

For the purposes of this Privacy Policy, rbajer acts as the data controller in respect of personal data collected through the rbajer.biz Platform. As data controller, rbajer determines the purposes and means by which your personal data is processed and bears responsibility for ensuring that all processing activities comply with applicable data protection principles.

All data protection enquiries, rights requests, and privacy complaints should be directed to the rbajer Data Protection contact:

• Email: [email protected] (plain text — not a clickable link)
• Subject line for data protection matters: "Data Protection Request"
• Response time: Within 72 hours for general enquiries; within 30 days for formal rights requests
• Support hours: 24/7, Bangladesh Standard Time (BST, UTC+6)

rbajer collects personal data across several categories depending on how you interact with the Platform. The following table summarises the categories of personal data we collect and provides examples of the specific data points within each category:

rbajer does not intentionally collect special categories of sensitive personal data (such as health data, religious beliefs, or political opinions) unless specifically required by a responsible gaming obligation — for example, where a player voluntarily discloses a gambling addiction in order to activate self-exclusion. Any such sensitive data is handled with heightened confidentiality and is used solely for the purpose for which it was disclosed.

rbajer collects your personal data through the following channels and mechanisms:

• Direct submission: Data you provide when creating an account, completing KYC verification, making a deposit or withdrawal, submitting a support request, or communicating with rbajer via email, live chat, or WhatsApp.
• Automated technical collection: Data collected automatically when you access or use the Platform, including IP addresses, device identifiers, browser fingerprints, session tokens, and usage event logs generated by the Platform's analytics and security systems.
• Cookies and similar tracking technologies: First-party cookies and similar client-side storage mechanisms used to maintain your session state, remember your preferences, and measure Platform performance. See Section 9 for full cookie details.
• Payment provider data: When you make a deposit or withdrawal via bKash, Nagad, Rocket, Upay, or a bank transfer, the relevant payment provider shares with rbajer the transaction reference and account identifier necessary to reconcile the payment with your rbajer account.
• Identity verification services: Where rbajer uses a third-party identity verification service to assist with KYC processing, that service may return verification results and flags to rbajer. rbajer does not receive raw biometric data from these services.
• Game suppliers: rbajer's third-party game suppliers (Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, Ezugi) log game session data including round IDs, bet amounts, outcomes, and timestamps. This data is shared with rbajer for reconciliation and dispute resolution purposes.

rbajer uses your personal data strictly for the purposes set out below. We do not use your data for any purpose that is incompatible with these stated purposes without first obtaining your consent or establishing a separate legal basis.

• Account creation and management: To register your account, verify your identity and age (18+), maintain your account balance, and provide you access to the Platform's games and betting markets.
• Transaction processing: To process deposits and withdrawals in Bangladeshi Taka via your chosen payment method (bKash, Nagad, Rocket, Upay, bank transfer) and to maintain accurate financial records of all transactions.
• Legal compliance and KYC: To fulfil our obligations under applicable anti-money laundering regulations, age verification requirements, and responsible gaming obligations. This includes verifying the source of funds for large transactions.
• Security and fraud prevention: To detect, investigate, and prevent fraudulent activity, multi-accounting, unauthorised account access, bonus abuse, and any other activity that violates rbajer's Terms and Conditions.
• Customer support: To respond to your enquiries, resolve disputes, process complaints, and provide assistance through live chat, email, and WhatsApp.
• Platform improvement: To analyse usage patterns, measure feature performance, identify technical issues, and improve the rbajer user experience for players across Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, Cox's Bazar, and throughout Bangladesh.
• Responsible gaming: To monitor for signs of problem gambling behaviour, apply responsible gaming tools (deposit limits, cooling-off periods, self-exclusion) at your request, and fulfil our duty of care obligations.
• Promotional communications: To send you information about bonuses, promotions, and platform updates that you have opted into receiving. You may opt out of marketing communications at any time by contacting [email protected].
• Legal proceedings and regulatory obligations: To comply with legal orders, court proceedings, regulatory investigations, or law enforcement requests where rbajer is required by law to disclose your data.

rbajer processes your personal data on one or more of the following legal bases depending on the specific processing activity:

• Contractual necessity: Processing that is necessary to perform the contract between you and rbajer — specifically, operating your account, processing transactions, and providing access to the Platform's services.
• Legal obligation: Processing required to comply with applicable legal obligations, including age verification, anti-money laundering checks, KYC requirements, and responding to lawful requests from competent authorities.
• Legitimate interests: Processing carried out in pursuit of rbajer's legitimate business interests where those interests are not overridden by your data protection rights. This includes fraud prevention, platform security, and internal analytics for service improvement.
• Consent: Processing based on your freely given, specific, and informed consent — primarily for marketing communications and for the processing of sensitive data disclosed voluntarily in a responsible gaming context. You may withdraw consent at any time without affecting the lawfulness of prior processing.

rbajer does not sell, rent, or trade your personal data to any third party for commercial purposes. Your personal data may be shared only in the following strictly defined circumstances:

• Licensed game suppliers: Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi receive the minimum data necessary to operate their games on the rbajer Platform (typically a pseudonymised player identifier, session token, and bet/result data). These suppliers are contractually prohibited from using your data for any purpose other than delivering their services to rbajer.
• Payment service providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, and Sonali Bank receive payment transaction data necessary to process your deposits and withdrawals. Each provider operates under its own privacy and data protection framework.
• Identity verification services: Third-party KYC and identity verification partners receive identification documents and personal details for the sole purpose of completing age and identity verification on behalf of rbajer.
• IT and infrastructure providers: Cloud hosting, database, and platform infrastructure providers may process personal data on rbajer's behalf as data processors under binding data processing agreements that prohibit independent use of your data.
• Legal and regulatory authorities: rbajer may disclose your personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by a valid legal order, warrant, or regulation. rbajer will not disclose data beyond the scope of what is legally required.
• Business transfers: In the event of a merger, acquisition, or sale of all or substantially all of rbajer's assets, your personal data may be transferred to the acquiring entity, subject to equivalent privacy protections.

rbajer takes particular care with financial data given its sensitivity. All payment transactions on the rbajer Platform are processed through encrypted channels using 256-bit SSL/TLS protocols. rbajer does not store full payment card numbers. For mobile financial service transactions (bKash, Nagad, Rocket, Upay), rbajer retains only the last four digits of the registered mobile number and the transaction reference ID for reconciliation and dispute resolution purposes.

Bank account details submitted for direct transfer deposits are stored in encrypted form and are accessible only to rbajer's payment reconciliation team. These details are used exclusively for the purpose of verifying that incoming transfers originate from a payment account registered in the account holder's name, in accordance with rbajer's anti-money laundering obligations.

rbajer uses cookies and similar client-side storage technologies to operate the Platform effectively, maintain your session state, and gather anonymised performance data. The following categories of cookies are used on rbajer.biz:

• Strictly necessary cookies: These cookies are essential for the Platform to function. They maintain your authenticated session, store your account preferences, and enable core features such as the game lobby and account dashboard. These cookies cannot be disabled without significantly impairing Platform functionality.
• Performance and analytics cookies: These cookies collect anonymised data about how visitors use the Platform — such as which pages are visited most frequently, how long sessions last, and which features generate the most engagement. This data is used exclusively for internal Platform improvement and is not shared with advertising networks.
• Functional cookies: These cookies remember your preferences such as your preferred language setting (English), display preferences, and responsible gaming reminder settings so that you do not need to reconfigure them on each visit.

rbajer does not use third-party advertising cookies, behavioural tracking cookies, or cross-site tracking technologies. No cookie data is shared with advertising networks or social media platforms. You may manage or delete cookies through your browser settings; however, disabling strictly necessary cookies will prevent you from maintaining an authenticated session on the Platform.

rbajer retains personal data only for as long as is necessary to fulfil the purposes for which it was collected or as required by applicable legal and regulatory obligations. The following retention periods apply:

• Account data and transaction records: Retained for a minimum of five (5) years following account closure to comply with anti-money laundering record-keeping obligations.
• Identity verification documents (KYC): Retained for a minimum of five (5) years following the completion of the verification process or account closure, whichever is later.
• Customer support communications: Retained for three (3) years following the resolution of the relevant support interaction.
• Technical and usage data (logs): Retained for twelve (12) months from the date of collection, after which they are anonymised or deleted.
• Marketing consent records: Retained for the duration of the marketing relationship plus three (3) years following withdrawal of consent or account closure, as evidence of lawful processing.
• Responsible gaming intervention records: Retained for the duration of any active self-exclusion or cooling-off period plus five (5) years, to support the enforcement of exclusion requests if re-registration is attempted.

At the end of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents reconstruction of the original data. Where data is anonymised rather than deleted, the anonymised dataset is no longer considered personal data and may be retained for longer periods for statistical and analytical purposes.

As a data subject, you have the following rights in relation to the personal data that rbajer holds about you. To exercise any of these rights, please contact rbajer at [email protected] with the subject line "Data Protection Request". rbajer will respond to all rights requests within 30 days of receipt.

• Right of access: You have the right to request a copy of the personal data that rbajer holds about you, together with information about how it is processed.
• Right to rectification: You have the right to request that inaccurate or incomplete personal data held by rbajer be corrected or completed without undue delay.
• Right to erasure: You have the right to request that rbajer delete your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (where consent is the legal basis), or where processing is unlawful. This right is subject to overriding legal retention obligations.
• Right to restrict processing: You have the right to request that rbajer restrict the processing of your personal data in certain circumstances — for example, where you contest the accuracy of the data or where you have objected to processing and a determination is pending.
• Right to data portability: Where processing is based on consent or contractual necessity and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to object: You have the right to object to the processing of your personal data where rbajer relies on legitimate interests as the legal basis. rbajer will cease processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

rbajer implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. These measures include, but are not limited to:

• 256-bit SSL/TLS encryption on all data transmitted between your device and the rbajer Platform.
• Encryption at rest for all sensitive data stored in rbajer's databases, including identity documents, financial data, and authentication credentials.
• Password hashing using industry-standard algorithms. rbajer never stores your password in plain text.
• Two-factor authentication (2FA) via SMS to your registered Bangladesh mobile number, available and strongly recommended for all accounts.
• Role-based access controls that restrict internal access to personal data to only those staff members who require it to perform their job functions.
• Regular security audits and penetration testing of the Platform's infrastructure.
• Automated anomaly detection systems that flag unusual login patterns, IP address changes, and suspicious transaction activity for immediate review.
• Formal data breach response procedures, including notification obligations where a breach is likely to result in a risk to affected individuals.

Despite these measures, no internet-based platform can guarantee absolute security. rbajer encourages all account holders to use strong, unique passwords, to enable two-factor authentication, and to log out of their accounts after each session — particularly when accessing the Platform from a shared or public device.

If rbajer becomes aware that personal data has been collected from a person under the age of 18, that account will be immediately suspended, all funds returned to the payment source, and all personal data associated with the underage account permanently deleted. If you believe that a person under the age of 18 has registered an account on the rbajer Platform, please notify rbajer immediately at [email protected].

Parents and guardians are encouraged to make use of parental control software to prevent minors from accessing online gambling platforms. rbajer is committed to the strictest possible age verification standards and cooperates fully with any investigation into underage gambling.

rbajer reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable law, or improvements to our Platform. When this Policy is updated, the revised version will be published on this page with an updated "Last Updated" date. Where changes are material, rbajer will notify registered account holders by email or via an in-platform notification.

Your continued use of the rbajer Platform following the publication of an updated Privacy Policy constitutes your acknowledgement of the changes. We recommend that you review this Policy periodically to stay informed of how rbajer protects your personal data. If you have any concern about a change to this Policy, please contact rbajer support before continuing to use the Platform.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data that rbajer holds about you, please contact the rbajer Data Protection team using the details below:

• Email: [email protected] (plain text — not a clickable link)
• Subject line: "Data Protection Request" or "Privacy Enquiry"
• WhatsApp: +880 1700-000000
• Live Chat: Available 24/7 via the rbajer Platform
• Response time: Within 72 hours for general privacy queries; within 30 days for formal rights requests
• Support hours: 24/7, Bangladesh Standard Time (BST, UTC+6)