gbabjee Privacy Policy
How We Collect, Use, and Protect Your Data

Section 1

Data We Collect

gbabjee collects personal data from you in three primary ways: information you provide directly during registration and account use; information generated automatically by your interaction with the platform; and information obtained from trusted third-party verification services where required by law. The table below describes each category in detail.

Section 2

How We Use Your Data

Every instance of personal data processing at gbabjee is tied to a specific, documented legal basis and a defined operational purpose. We do not use your data for any purpose that is incompatible with the reason it was originally collected. The following outlines how gbabjee uses each category of data and the corresponding justification for processing.

1. Account Creation and Management: Your identity and contact data are used to create and maintain your gbabjee account, verify that you meet the 18+ age requirement, ensure that one account exists per individual, and allow you to recover access to your account if your credentials are lost. The legal basis is the performance of a contract between you and gbabjee.
2. Payment Processing: Your financial data is used to process deposit and withdrawal requests through bKash, Nagad, Rocket, Upay, Visa, Mastercard, and bank transfer channels. Transaction records are maintained as part of our anti-money laundering compliance obligations. The legal basis is contractual necessity and legal obligation.
3. Identity Verification (KYC): Verification data including copies of identity documents and proof of address are used to comply with Know Your Customer requirements and to prevent fraud, underage gambling, and money laundering. The legal basis is legal obligation.
4. Platform Security and Fraud Prevention: Technical data including IP addresses, login timestamps, and device fingerprints are used to detect unusual access patterns, prevent account takeover fraud, identify bonus abuse, and protect the integrity of the gbabjee platform. The legal basis is our legitimate interest in maintaining a secure and fair gaming environment.
5. Customer Support: Contact data and account activity data are used by our support team when you raise a query, dispute, or complaint via live chat or email. This enables us to review your account history and resolve issues accurately. The legal basis is contractual necessity.
6. Responsible Gaming Monitoring: Account activity data and responsible gaming data are used to monitor betting patterns for indicators of problem gambling, to enforce deposit limits and self-exclusion periods, and to proactively reach out to players who may require support. The legal basis is our legal and ethical obligation to promote responsible gambling.
7. Service Improvement and Analytics: Aggregated and anonymised technical and account activity data are used to analyse platform performance, identify bugs, improve game loading times, and understand how players navigate the gbabjee interface. This data is processed in a form that does not identify individual users. The legal basis is our legitimate interest in improving the service.
8. Marketing Communications: With your explicit consent at the time of registration, your email address may be used to send you promotional offers, seasonal bonuses (for example during BPL season, Eid, or Pohela Boishakh), and platform news. You may withdraw this consent at any time by updating your communication preferences in your account dashboard or by contacting support.

Section 3

Data Sharing & Third Parties

gbabjee does not sell your personal data. We share personal data only where it is necessary to deliver the gbabjee service, fulfil a legal obligation, or protect the safety of the platform and its users. The categories of third parties with whom data may be shared are set out below.

• Payment Service Providers: bKash, Nagad, Rocket, Upay, Visa, Mastercard, and partner banks such as BRAC Bank, City Bank, Dutch-Bangla Bank, Islami Bank, and Sonali Bank receive the financial data necessary to process your deposit and withdrawal transactions. These providers operate under their own regulated privacy frameworks and are not permitted to use your data for any other purpose.
• Identity Verification Services: Third-party KYC and document verification providers may receive copies of your identity documents and personal details to cross-check them against national and international databases as part of our legal compliance obligations.
• Game Software Providers: When you play a game powered by a third-party studio — such as Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, or Ezugi — technical session data (including your account identifier and stake values) is transmitted to that provider's platform to render the game and record the result. These providers do not receive your name, contact data, or financial account details.
• Fraud Prevention and AML Databases: Where our compliance team identifies a transaction or account activity pattern that warrants enhanced scrutiny, relevant data may be shared with or cross-checked against shared industry fraud prevention and anti-money laundering databases.
• Legal and Regulatory Authorities: gbabjee will disclose personal data to law enforcement agencies, courts, or regulatory bodies when required to do so by a lawful order, warrant, or legal obligation. We will notify you of any such disclosure unless legally prohibited from doing so.
• Cloud Infrastructure and Hosting Providers: The gbabjee platform is hosted on secure cloud infrastructure. Our hosting providers process data on our behalf under data processing agreements and are not permitted to access or use your data for their own purposes.

Section 4

Cookies & Tracking Technologies

gbabjee uses cookies and similar browser-storage technologies to operate the platform correctly, remember your preferences, and measure how different parts of the site are used. A cookie is a small text file that is stored on your device by your browser when you visit a website. Cookies do not contain executable code and cannot be used to access other data on your device.

The following cookie categories are used on the gbabjee platform:

You may control cookie behaviour through your browser settings. Most modern browsers allow you to block or delete cookies. However, blocking strictly necessary cookies will prevent you from logging into your gbabjee account and using core platform features. Blocking analytics or preference cookies will not affect your ability to play games or process transactions.

Section 5

Data Security Measures

gbabjee applies a layered security approach to protect the personal data of every registered member. Security is not limited to the transmission layer — it extends to how data is stored, who can access it internally, and how incidents are detected and responded to.

• 256-bit SSL/TLS Encryption: All data in transit between your device and the gbabjee servers is encrypted using industry-standard TLS protocols. The padlock indicator in your browser confirms that a valid SSL certificate is active at all times on gbabjee.net.
• Encryption at Rest: Sensitive personal data fields — including National ID numbers, document scans, and financial account identifiers — are encrypted in the gbabjee database using strong encryption algorithms. Raw values are never stored in plaintext.
• Password Hashing: Account passwords are never stored in readable form. gbabjee stores only a salted cryptographic hash of your password. Even gbabjee staff cannot read your password — only you know it.
• Role-Based Access Control: Internal access to personal data is restricted on a need-to-know basis. Customer support agents can view only the account details necessary to resolve your query. Financial and compliance data requires elevated access permissions held by a restricted group of staff.
• Two-Factor Authentication (2FA): Members are strongly encouraged to enable 2FA on their accounts. All internal gbabjee staff accounts that have access to personal data are required to use 2FA without exception.
• Security Monitoring: The gbabjee platform is monitored continuously for unusual access patterns, login anomalies, and potential data breach indicators. Our security team operates on a 24/7 basis aligned with Bangladesh Standard Time (UTC+6).
• Data Breach Response: In the event of a confirmed personal data breach that poses a risk to affected individuals, gbabjee will notify impacted members without undue delay and will take immediate remedial action. Notification will be sent to the email address registered on the affected account.

Section 6

Data Retention Policy

gbabjee retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or for as long as required by applicable law. The following retention periods apply to the main data categories held by gbabjee:

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be associated with an identifiable individual. Where data is anonymised rather than deleted, the anonymised dataset may be retained indefinitely for aggregate statistical analysis.

Section 7

Your Privacy Rights

As a gbabjee account holder, you hold a number of rights with respect to the personal data we process about you. gbabjee is committed to honouring these rights promptly and without creating unnecessary barriers. To exercise any of the rights below, contact our support team at [email protected] with the subject line "Privacy Rights Request" and a clear description of the right you wish to exercise.

• Right of Access: You have the right to request a copy of all personal data gbabjee holds about you. We will provide a structured, machine-readable response within 30 days of a verified request. Identity verification will be required before any data is disclosed.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Minor corrections — such as updating your email address or phone number — can be made directly from your account dashboard without contacting support.
• Right to Erasure: You may request that gbabjee delete your personal data where it is no longer necessary for the purpose it was collected, where you have withdrawn consent, or where you object to processing and no overriding legitimate interest applies. Note that certain data cannot be deleted while legal retention obligations (such as AML record-keeping requirements) remain active.
• Right to Restrict Processing: You may ask gbabjee to pause the processing of your personal data while a dispute about its accuracy or the lawfulness of processing is being resolved, rather than requesting full deletion.
• Right to Data Portability: Where processing is based on your consent or a contract, and is carried out by automated means, you have the right to receive a structured, commonly used, machine-readable copy of your data and to have it transmitted to another controller where technically feasible.
• Right to Object to Marketing: You have an unconditional right to opt out of direct marketing communications at any time, without providing a reason. Update your marketing preferences in your account dashboard or reply "unsubscribe" to any marketing email from gbabjee.
• Right to Lodge a Complaint: If you believe that gbabjee has processed your personal data in a manner that violates applicable privacy law, you have the right to lodge a complaint with the relevant regulatory authority in your jurisdiction. We would, however, always welcome the opportunity to address your concern directly before a formal complaint is filed — please contact us first.

Section 8

Policy Updates & Contact

gbabjee reviews this Privacy Policy at least once per calendar year and updates it whenever there are material changes to the way we collect or process personal data, when new services are introduced, or when applicable law changes. The effective date at the top of this page reflects when the current version came into force.

When material changes are made to this Privacy Policy, gbabjee will notify registered members via the email address associated with their account at least 14 days before the changes take effect, where the changes may affect the member's rights or the use of their data. Continued use of the gbabjee platform after the updated policy's effective date constitutes acceptance of the revised terms.

Previous versions of this Privacy Policy are available on request by contacting the support team. gbabjee maintains an internal archive of all previous policy versions together with their effective dates and a summary of the changes made in each revision.

For any privacy-related questions, requests, or concerns, please contact the gbabjee data team using the details below. We aim to respond to all privacy enquiries within 5 business days:

• Email: [email protected] — use the subject line "Privacy Policy Enquiry" for fastest routing to our data team.
• Live Chat: Available 24 hours a day, 7 days a week from within your logged-in gbabjee account dashboard. Bangladesh Standard Time (UTC+6).
• Service Region: gbabjee primarily serves players residing across Bangladesh, including Dhaka, Chittagong, Sylhet, Rajshahi, Khulna, Barisal, Rangpur, Mymensingh, and Cox's Bazar.