rbajy Privacy Policy

Data Controller & Scope

rbajy operates as the data controller for all personal information collected through the rbajy.net platform. As data controller, rbajy determines the purposes and means by which your personal data is processed and bears full responsibility for ensuring that such processing is carried out lawfully, fairly, and transparently.

This Privacy Policy applies to all individuals who interact with the rbajy platform, including:

• Registered Players who hold an active rbajy Account.
• Visitors who browse rbajy.net without completing registration.
• Former Players whose Accounts have been closed but whose data is retained as required by applicable law or these policies.
• Individuals who contact the rbajy support team via email or other available channels.

This Policy governs data collected through the rbajy website at rbajy.net, any mobile-optimised versions of the site, and any communications sent by rbajy to Players or prospective Players. It does not govern data practices of third-party Game Providers, payment processors, or any external website that may be referenced on the Platform.

rbajy is committed to processing personal data in a manner consistent with the principles of data minimisation, purpose limitation, accuracy, storage limitation, integrity, and confidentiality. These principles guide every aspect of our data handling practices as described throughout this Policy.

Information We Collect

rbajy collects personal data through several channels: directly from you when you register or interact with the Platform, automatically through your use of the website, and in limited circumstances from trusted third-party sources such as payment processors and identity verification providers. The following table summarises the categories of personal data we collect and the primary source of each.

Data We Do Not Collect

rbajy does not collect special categories of sensitive personal data (such as racial or ethnic origin, political opinions, religious beliefs, health records, or biometric data) unless such data is voluntarily submitted by a Player as part of a responsible gaming self-exclusion request or medical documentation. In such cases, the data is handled with the highest level of confidentiality and used solely for the stated responsible gaming purpose.

rbajy does not knowingly collect personal data from individuals under 18 years of age. If we become aware that a minor has registered an Account or provided personal information, we will immediately close the Account, delete the associated data, and return any funds deposited via the original payment method.

How We Use Your Data

rbajy processes your personal data only for specific, clearly defined purposes. We do not use your data in ways that are incompatible with the purposes for which it was originally collected. The table below sets out each processing purpose alongside its legal basis.

Marketing Communications

rbajy will only send you promotional emails, bonus alerts, and seasonal offers (such as Eid specials, BPL cricket promotions, and Pohela Boishakh campaigns) if you have explicitly opted in to receive marketing communications during registration or via your Account dashboard. You may withdraw your marketing consent at any time by adjusting your communication preferences in your Account settings or by emailing [email protected]. Withdrawal of marketing consent does not affect the processing of data for other lawful purposes (such as account management or legal compliance).

Data Sharing & Third Parties

rbajy does not sell, rent, or trade your personal data to any third party for their own commercial purposes. We share your data only to the extent necessary to deliver the rbajy service, comply with legal obligations, or protect the security and integrity of the Platform. The following categories of third parties may receive your personal data:

• Payment Processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, and Mastercard receive the financial data necessary to process your deposit and withdrawal transactions in BDT. Each payment partner operates under their own privacy policy and data security standards.
• Identity Verification Providers: rbajy uses third-party KYC and AML screening services to verify your identity, age, and the source of your funds. These providers receive identity documents and personal data strictly for verification purposes and are contractually prohibited from using that data for any other purpose.
• Game Providers: Third-party game studios — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — receive the minimum data necessary to facilitate your gameplay sessions, such as a session token and account reference. These providers do not receive your financial data or full identity details.
• Technology & Hosting Partners: rbajy uses cloud hosting, content delivery, and platform infrastructure providers to operate the website. These partners process technical and usage data as data processors acting under rbajy's instructions and may not use your data independently.
• Analytics Providers: Aggregated, anonymised usage data may be shared with analytics platforms to help rbajy understand player behaviour and improve the platform experience. No personally identifiable information is shared for pure analytics purposes.
• Law Enforcement & Regulatory Authorities: rbajy may disclose personal data to competent authorities, law enforcement agencies, or courts when required to do so by applicable law, legal process, or to protect the rights and safety of rbajy, its Players, or the public. Such disclosures are logged and reviewed internally.

All third-party service providers engaged by rbajy are subject to contractual data processing agreements that require them to maintain appropriate security standards, process data only as instructed, and refrain from using Player data for their own independent purposes.

Cookies & Tracking Technologies

rbajy uses cookies and similar tracking technologies on the rbajy.net website to provide a functional, personalised, and secure platform experience. A cookie is a small text file placed on your device by your browser when you visit a website. Cookies do not contain executable code and cannot access other data stored on your device.

Types of Cookies Used

• Strictly Necessary Cookies: These cookies are essential for the rbajy platform to function. They maintain your session while you are logged in, retain your language and responsible gaming settings, and enable secure payment flows. These cookies cannot be disabled without impairing core platform functionality.
• Functional Cookies: These cookies remember your preferences — such as your preferred game categories, display settings, and last-visited pages — to deliver a more personalised experience on return visits.
• Analytics Cookies: rbajy uses anonymised analytics cookies to understand aggregate patterns of platform use — for example, which game categories are most popular among Bangladesh players, average session lengths, and common navigation paths. This data is used solely to improve the platform and is not linked to your individual identity.
• Security Cookies: These cookies help rbajy detect and prevent fraudulent activity, bot behaviour, and unauthorised access attempts. They store session identifiers and device fingerprint signals used by our security systems.

Managing Your Cookie Preferences

You can control and delete cookies through your browser settings. Most modern browsers allow you to refuse all cookies, accept only certain types, or delete existing cookies. Please note that disabling strictly necessary cookies will prevent you from logging into your rbajy Account and using core platform features. Disabling functional or analytics cookies will not prevent access but may result in a less personalised experience.

rbajy does not use third-party advertising cookies or cross-site tracking technologies that build profiles of your browsing behaviour across the wider internet. Our cookie use is limited to what is necessary and useful for operating the rbajy platform itself.

Data Retention & Deletion

rbajy retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, accounting, or reporting requirements. The following retention periods apply to the main categories of data held by rbajy:

When personal data is no longer required for any of the purposes set out above, rbajy will securely delete or anonymise the data in accordance with our internal data disposal procedures. Anonymised data — from which your identity cannot be recovered — may be retained indefinitely for statistical and platform improvement purposes.

Players who request deletion of their Account should note that rbajy is legally required to retain certain categories of data (particularly financial transaction records and KYC documentation) for the periods specified above, even after Account closure. A deletion request will result in the removal of all non-legally-required data and the deactivation of your Account, but does not override our statutory retention obligations.

Your Privacy Rights

As a Player on the rbajy platform, you hold a number of rights with respect to the personal data we hold about you. rbajy is committed to facilitating the exercise of these rights in a timely and straightforward manner. All rights requests should be directed to [email protected] and will be responded to in English within a reasonable timeframe.

• Right of Access: You have the right to request a copy of the personal data rbajy holds about you, together with information about how it is being used. We will provide this in a clear, readable format upon verified request.
• Right to Rectification: If any personal data rbajy holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update most of your Account information directly via the Account dashboard. For data that cannot be self-corrected, contact [email protected].
• Right to Erasure: You may request that rbajy delete your personal data where it is no longer necessary for the purpose it was collected, where you have withdrawn consent (and no other legal basis applies), or where the data has been processed unlawfully. Note that this right is subject to our legal retention obligations described in Section 6.
• Right to Restriction of Processing: You may request that rbajy restrict the processing of your personal data in certain circumstances — for example, while a dispute about data accuracy is being resolved, or while an objection to processing is being assessed.
• Right to Data Portability: Where processing is based on your consent or a contract, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format, and to request that it be transferred to another controller where technically feasible.
• Right to Object: You have the right to object to processing of your personal data where that processing is based on legitimate interests, including profiling. rbajy will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (for example, marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.
• Right Not to Be Subject to Automated Decisions: You have the right to request human review of any decision made solely by automated means that produces a legal or similarly significant effect on you, such as Account suspension triggered by automated fraud detection.

Data Security Measures

rbajy implements a multi-layered approach to data security, combining technical, organisational, and procedural safeguards designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security programme is reviewed and updated on a regular basis to account for emerging threats and evolving best practices.

Technical Safeguards

• SSL/TLS Encryption: All data transmitted between your browser and rbajy.net is encrypted using industry-standard SSL/TLS protocols. The padlock symbol in your browser's address bar confirms this protection is active.
• Password Hashing: Account passwords are never stored in plain text. rbajy uses strong one-way cryptographic hashing algorithms to store passwords so that even internal staff cannot access the original password value.
• Access Controls: Access to Player personal data within rbajy's internal systems is strictly limited on a role-based need-to-know basis. Staff who have no legitimate reason to access your data cannot do so.
• Intrusion Detection: rbajy's platform is monitored around the clock for unusual access patterns, brute-force attempts, and other indicators of malicious activity. Alerts are triaged by our security team in real time.
• Secure Data Storage: Personal data and financial records are stored on encrypted servers with regular automated backups. Storage environments are segmented to limit the impact of any potential breach.

Data Breach Response

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, rbajy will notify affected Players promptly via the email address associated with their Account. The notification will describe the nature of the breach, the categories of data affected, the likely consequences, and the measures taken or proposed to address the breach and mitigate its effects.

rbajy maintains a documented internal incident response procedure that ensures data breaches are identified, contained, assessed, and reported in a structured and timely manner. All staff with access to personal data receive training on recognising and responding to data security incidents.