rbaja Privacy Policy
Your privacy matters to us. This policy explains what data rbaja collects, why we collect it, how it is used, and how we keep it safe for every player in Bangladesh.
Introduction
This Privacy Policy ("Policy") describes how rbaja collects, uses, stores and discloses personal information relating to individuals who visit the rbaja website or use any rbaja service ("you" or "the Player"). rbaja is committed to handling your personal information responsibly, in accordance with applicable data protection principles. Please read this Policy carefully before using the platform. By registering an account or using any rbaja service, you confirm that you have read and understood this Policy.
This Policy applies to all players accessing rbaja from Bangladesh, including from Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh and Cox's Bazar. The terms "personal data" and "personal information" used in this Policy refer to any information that identifies or could reasonably be used to identify a specific individual, including your name, mobile number, email address, financial details and device identifiers.
Our Privacy Commitments
Information We Collect
rbaja collects personal information from you in the following categories. We collect only the minimum data necessary for each stated purpose, and we do not collect sensitive personal information (such as government-issued identification numbers or biometric data) except where strictly required for identity verification purposes.
When you create an rbaja account, we collect your full name, date of birth, mobile phone number and a password of your choosing. This information is used to create and manage your account, verify your identity and communicate with you about your account. Your date of birth is collected to enforce the 21+ minimum age requirement. You are required to provide accurate registration data; providing false information is a breach of the rbaja Terms and Conditions.
When you make a deposit or withdrawal, rbaja records the transaction amount, the payment method used (such as bKash, Nagad, Rocket or Upay), the transaction reference number and the date and time of the transaction. This data is used to process your payment, maintain accurate account records and comply with applicable financial record-keeping requirements. rbaja does not store your full bKash or Nagad PIN; payment authentication is handled directly by those providers.
When you use the rbaja website, we automatically collect certain technical information, including your IP address, device type, operating system, browser type and the pages you visit within the platform. We also collect session duration data and in-play betting activity (such as which markets you viewed and which bets you placed). This data is used to improve platform performance, detect and prevent fraud, and personalise your experience within the platform.
If rbaja requests identity verification (KYC), you may be asked to provide a scanned copy or photograph of a government-issued photo ID (such as a Bangladesh National ID card or passport) and a document confirming your address. KYC documents are stored securely and accessed only by authorised rbaja personnel for verification purposes. KYC data is not shared with third parties except where required by applicable law or by the payment processor involved in processing your transaction.
How We Use Your Information
rbaja uses the personal information it collects for the following purposes. We do not use your personal information for any purpose that is incompatible with the purposes stated in this Policy without first obtaining your consent.
- Account creation and management: to register your rbaja account, verify your identity, enforce the 21+ age requirement, maintain your account balance and process your deposits and withdrawals via bKash, Nagad, Rocket and other supported payment methods.
- Platform security and fraud prevention: to monitor accounts and transactions for suspicious activity, investigate potential fraud or financial crime, and take action where a breach of the rbaja Terms and Conditions is detected.
- Responsible gaming compliance: to monitor player activity for signs of problem gambling behaviour (such as rapid loss-chasing patterns or abnormal deposit frequency), enforce self-exclusion requests and respond to responsible gaming support requests.
- Customer support: to respond to your questions, complaints and account support requests, and to maintain a record of communication between you and rbaja support for quality and dispute resolution purposes.
- Service improvements and analytics: to analyse aggregated usage patterns across the platform in order to identify areas for improvement, optimise game performance, and improve the overall player experience. Analytics data used for this purpose is anonymised or pseudonymised where possible.
- Promotional communications: if you have opted in to receive promotional messages, we may use your mobile number to send you information about new games, deposit offers and cricket betting promotions relevant to BPL, IPL and T20 matches. You may opt out of promotional communications at any time by contacting rbaja support.
Legal Basis for Processing
rbaja processes your personal data on the following legal bases, depending on the specific purpose of the processing activity:
Processing that is necessary to perform the contract between you and rbaja — including account registration, payment processing and customer support — is carried out on the basis of contractual necessity. Without this processing, rbaja would be unable to provide you with the services you have requested.
Certain processing activities are required to comply with applicable legal obligations, including identity verification (KYC), anti-money laundering checks, responsible gaming record-keeping and cooperating with law enforcement or regulatory authorities where required by law.
Some processing is carried out on the basis of rbaja's legitimate interests in operating a safe, fair and sustainable gaming platform. This includes fraud detection and prevention, platform security monitoring, analytics for service improvement and responsible gaming monitoring. Where we rely on legitimate interests as our legal basis, we have assessed that our interests are not overridden by your privacy rights.
Sharing Your Information
rbaja does not sell your personal data. We share personal information only in the limited circumstances described below, and only to the extent necessary for each stated purpose:
- Payment processors: rbaja shares your transaction data (including transaction amounts and your registered mobile number) with the payment processor involved in your deposit or withdrawal — for example, the bKash, Nagad or Rocket gateway used to settle your transaction. This sharing is necessary to complete the payment and is governed by the payment processor's own privacy policy.
- Game providers: where a game is provided by a third-party studio such as Pragmatic Play, Evolution Gaming or Spribe, aggregate game-play data (including bet amounts and round outcomes) is shared with that provider for the purpose of game settlement and integrity monitoring. This data does not include your full name or contact details.
- Legal and regulatory authorities: rbaja may disclose personal data to law enforcement agencies, regulatory bodies or courts where required to do so by applicable law, valid legal process or a binding order from a competent authority. rbaja will notify affected players of such disclosure where legally permissible.
- Service providers: rbaja may share personal data with carefully selected third-party service providers who support the operation of the platform — for example, cloud hosting providers, IT security vendors and customer support tools. These providers are engaged under contractual terms that require them to handle personal data only as instructed by rbaja and to implement appropriate security measures.
Payment Data and Financial Privacy
rbaja takes the privacy and security of your financial data seriously. When you deposit or withdraw using bKash, Nagad, Rocket, Upay or a linked bank account such as Dutch-Bangla Bank, BRAC Bank or City Bank, the payment is processed by the relevant payment gateway. rbaja does not store your full mobile banking PIN, card number or bank account number. rbaja records only the transaction reference, the amount, the payment method type and the date of the transaction for account record-keeping purposes.
All financial transaction records are retained for a minimum period as required to fulfil our record-keeping obligations. During this period, transaction records are stored in encrypted form and are accessible only to authorised rbaja personnel for the purposes of account management, dispute resolution and compliance. After the mandatory retention period has elapsed, financial records are securely deleted or anonymised.
Cookies and Tracking Technologies
rbaja uses cookies and similar tracking technologies to operate the platform, remember your preferences, maintain your session and gather analytics data. The following types of cookies are used on the rbaja platform:
These cookies are strictly necessary for the platform to function. They are used to maintain your login session, remember your account state between page loads and enable core platform features such as the bet slip and account balance display. Essential cookies cannot be disabled without breaking platform functionality.
rbaja uses analytics cookies to collect aggregated data about how players use the platform — for example, which game categories are most popular, how long sessions typically last and which pages are visited most frequently. This data helps us improve the platform. Analytics data is processed in anonymised or pseudonymised form where possible and is not used to identify individual players.
Preference cookies remember your settings and choices within the platform, such as your language preference and notification settings. These cookies make your experience more convenient by restoring your preferences each time you return to the platform. You may clear preference cookies via your browser or device settings, though doing so will reset your saved preferences.
Data Retention
rbaja retains personal data for as long as is necessary to fulfil the purposes for which it was collected, as described in this Policy. The specific retention period applicable to each category of data is determined by the nature of the data, the purpose for which it was collected and any applicable legal or regulatory retention requirements. As a general rule: account registration data is retained for the duration of your account plus a minimum period following account closure; transaction records are retained for the period required by applicable financial record-keeping standards; KYC documents are retained for the period required under applicable anti-money laundering regulations; and support communications are retained for a period sufficient to resolve any related disputes.
When personal data is no longer required and no legal retention obligation applies, rbaja will securely delete or anonymise the data so that it can no longer be associated with you as an individual. Where anonymisation is used rather than deletion, the resulting anonymised data may be retained indefinitely for analytical purposes, as it no longer constitutes personal data.
Your Privacy Rights
As an rbaja player, you have the following rights in relation to your personal data. To exercise any of these rights, please contact rbaja support via the email address listed in the site footer. rbaja will respond to your request within a reasonable timeframe and in any event within 30 days of receiving it.
- Right of access: you may request a copy of the personal data rbaja holds about you, along with information about how that data is used and with whom it is shared.
- Right to rectification: if any personal data rbaja holds about you is inaccurate or incomplete, you have the right to request that it be corrected or completed. For account details such as your registered mobile number, you may be able to update these directly in your account settings.
- Right to erasure: you may request that rbaja delete the personal data it holds about you. This right is subject to applicable legal retention obligations — for example, rbaja may be required to retain transaction records for a prescribed period regardless of an erasure request.
- Right to restriction: you may request that rbaja restrict processing of your personal data in certain circumstances — for example, while the accuracy of data is being verified following a rectification request, or while an objection to processing is being assessed.
- Right to object: you have the right to object to processing of your personal data where that processing is based on rbaja's legitimate interests. If you object, rbaja will cease the relevant processing unless it can demonstrate compelling legitimate grounds that override your interests or the processing is necessary for the establishment, exercise or defence of legal claims.
Security Measures
rbaja implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction or disclosure. These measures include SSL encryption for all data in transit between your device and the rbaja platform, encrypted storage for sensitive account and payment data, access controls limiting data access to authorised personnel on a need-to-know basis, regular security assessments of the platform and its supporting infrastructure, and fraud detection systems that monitor accounts and transactions in real time.
While rbaja takes data security seriously and implements industry-standard protections, no online platform can guarantee absolute security. In the event of a data breach that affects your personal data and creates a significant risk to your rights, rbaja will notify you as soon as reasonably practicable, describing the nature of the breach, the data affected and the steps rbaja is taking in response.
Children and Minors
rbaja is strictly for adults aged 21 and above. rbaja does not knowingly collect personal data from any person under the age of 21. If rbaja becomes aware that personal data has been collected from a person under 21, that data will be promptly deleted and the associated account will be permanently closed. If you are a parent or guardian and believe that a person under 21 in your care has registered with rbaja, please contact [email protected] immediately so that the account can be reviewed and closed.
Changes to This Privacy Policy
rbaja reserves the right to update this Privacy Policy at any time to reflect changes in how we handle personal data, changes in applicable law or improvements to our platform. When this Policy is updated, the "Last Updated" date at the top of the page will be revised. Where required, we will notify players of significant changes via the contact details registered to their account.
Your continued use of rbaja following publication of a revised Privacy Policy constitutes your acknowledgement of and agreement to the updated Policy. If you do not agree with any update to this Policy, you should stop using the platform and may request account closure by contacting our support team.
Contact Us
If you have any questions, concerns or requests relating to this Privacy Policy or the way rbaja handles your personal data, please contact our support team. All privacy-related requests will be handled confidentially and responded to within 30 days.
Ready to Play Securely?
Your data is protected by SSL encryption on every page of rbaja. Explore the casino or check our FAQ for more about how we keep your account safe.