gbaje2 Privacy Policy

When you create a gbaje2 account, we collect the information you provide during the registration process. This includes your full name, date of birth, email address, mobile phone number, residential address (including city and district — for example, Dhaka, Chittagong, Sylhet, or Khulna), and the username and password you choose. This data is required to create and maintain your account, verify your identity, and comply with our legal obligations under applicable anti-money laundering and know-your-customer regulations.

If you are required to complete identity verification (KYC), we may additionally collect a copy of a government-issued photo ID (such as a Bangladesh National Identity Card or passport), a selfie for facial verification purposes, and documentary proof of your current address.

When you make a deposit or withdrawal on the gbaje2 Platform, we collect the information necessary to process that transaction. For mobile financial service payments (bKash, Nagad, Rocket, Upay), this includes your registered mobile number and transaction reference. For card payments (Visa, Mastercard), this includes your card type, the last four digits of your card number, and the billing name associated with the card. We do not store full card numbers; complete card data is processed and held by our certified payment processing partners only.

We retain records of all deposit and withdrawal transactions, including amounts in BDT (৳), timestamps (Bangladesh Standard Time, UTC+6), and transaction statuses. These records are required for financial reconciliation, fraud prevention, and compliance with our record-keeping obligations.

We automatically collect data about how you interact with the gbaje2 Platform. This includes the games you play, the bets you place (including stake amounts, game titles, betting markets, and outcomes), session duration, login timestamps, and the features you access most frequently. This data is used to personalise your experience, to identify and investigate potential bonus abuse or fraudulent activity, and to improve the overall quality of the Platform.

We also collect standard technical data when you access the Platform, including your IP address, device type and model, operating system version, browser type, referring URL, and approximate geographic location derived from your IP address. This technical data helps us optimise Platform performance for the devices and network conditions most commonly used by players in Bangladesh.

When you contact the gbaje2 customer support team — whether by email, live chat, or any other channel we make available — we retain a record of that communication, including the content of your messages, any attachments you send, and the timestamp of the interaction. This information is used to resolve your query, train our support team, and maintain a complete service history for your account. Support communications are retained for a minimum of two years from the date of the interaction.

gbaje2 uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files stored on your device when you visit our site. We use the following categories of cookies:

• Essential cookies: Required for the Platform to function correctly, including maintaining your login session and remembering your language and currency preferences. These cannot be disabled without affecting Platform functionality.
• Analytics cookies: Used to understand how players navigate the Platform, which pages are visited most frequently, and where technical errors occur. This data is aggregated and anonymised wherever possible.
• Preference cookies: Used to remember your settings and personalise your experience, such as your preferred game categories or responsible gaming limits you have set.

You can manage cookie preferences through your browser settings. Please note that disabling essential cookies will prevent you from logging in or using core Platform features.

gbaje2 works with a carefully selected group of third-party service providers who process personal data on our behalf. These include:

• Payment processors: bKash, Nagad, Rocket, Upay, and card payment gateways process transaction data strictly for the purpose of completing your payment. They operate under their own privacy policies and are subject to financial data protection standards.
• Game providers: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive limited technical data (such as a player session token) necessary to load and run their games on the Platform. They do not receive your full personal profile.
• KYC and identity verification providers: Third-party providers assist us in verifying the identity documents you submit. These providers are contractually bound to process your data only for verification purposes and to delete it once verification is complete.
• Analytics providers: Aggregated and where possible anonymised usage data may be shared with analytics platforms to help us understand Platform performance.
• IT infrastructure providers: Cloud hosting and data storage partners who provide the underlying infrastructure that runs the gbaje2 Platform. These providers are contractually prohibited from accessing or using your data for any purpose beyond providing those infrastructure services.

All third-party processors are required to handle your personal data in accordance with applicable data protection standards. We do not authorise any third party to use your data for their own independent commercial purposes.

gbaje2 may be required to disclose personal data to law enforcement agencies, financial intelligence units, courts, or other competent authorities where we are legally obligated to do so. This includes disclosures required for the investigation and prevention of financial crime, terrorism financing, or other serious unlawful activity. Where permitted by law, we will notify you of any such disclosure.

We may also share data with fraud prevention agencies and credit reference bodies where necessary to prevent fraud or verify identity. Information shared with these bodies may be used by them and other organisations to prevent fraud and money laundering.

In the event that gbaje2 undergoes a merger, acquisition, restructuring, or sale of assets, your personal data may be transferred to the relevant successor entity as part of that transaction. We will take reasonable steps to ensure that any such transfer is subject to appropriate data protection safeguards, and we will notify affected players before their data is transferred to a new entity or subjected to a materially different privacy policy.

We retain your personal data for as long as your gbaje2 account is active, and for a defined period after account closure to meet our legal and regulatory obligations. Our standard retention periods are as follows:

• Account and identity data: Retained for a minimum of five years from the date of account closure, in line with anti-money laundering record-keeping requirements.
• Transaction records: Retained for a minimum of five years from the date of the transaction.
• Customer support communications: Retained for two years from the date of the interaction.
• Gameplay and betting history: Retained for three years from the date of each session, or for the duration of any active dispute relating to that session, whichever is longer.
• Marketing preferences and consent records: Retained for as long as you hold an account, and for one year after account closure.

At the end of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Anonymised data (from which you cannot be identified) may be retained indefinitely for analytical and statistical purposes.

As a player on the gbaje2 Platform, you have the following rights in respect of your personal data:

• Right of access: You may request a copy of the personal data we hold about you at any time. We will provide this within a reasonable period of receiving your verified request.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it.
• Right to erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (and no other legal basis applies), or where you have successfully objected to processing. Please note that we may be unable to delete certain data where retention is required by law.
• Right to restriction: You may request that we temporarily restrict our processing of your data — for example, while you contest the accuracy of information we hold, or pending the outcome of an objection you have raised.
• Right to object: You have the right to object to processing based on legitimate interests or for direct marketing purposes. Marketing opt-outs take effect immediately.
• Right to data portability: Where processing is based on consent or contract, and is carried out by automated means, you may request that we provide your data in a structured, machine-readable format so that it can be transferred to another service provider.
• Right to withdraw consent: Where we rely on your consent to process personal data (such as for marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

To exercise any of these rights, please contact our support team at [email protected] with the subject line "Data Rights Request". We will acknowledge your request within 72 hours and aim to respond substantively within 30 days. We may need to verify your identity before processing certain requests.

gbaje2 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures include SSL/TLS encryption for all data in transit, password hashing and salting for stored credentials, access controls that restrict employee access to personal data on a strict need-to-know basis, regular security assessments of our Platform infrastructure, and secure data storage with encrypted backups.

While we take the security of your data seriously and apply industry-recognised best practices, no method of electronic transmission or storage is completely immune to risk. In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, we will notify you without undue delay in accordance with applicable legal requirements.

You also have a role to play in keeping your account secure. We strongly recommend that you use a strong, unique password for your gbaje2 account, do not share your login credentials with anyone, log out of your account after each session — particularly on shared devices — and contact [email protected] immediately if you suspect any unauthorised access to your account.

The gbaje2 Platform is strictly intended for adults aged 21 and above. We do not knowingly collect personal data from individuals under the age of 21. If we become aware that we have inadvertently collected personal data from a person under 21, we will take immediate steps to delete that data and close the associated account. If you believe that a minor has registered on the Platform, please contact us immediately at [email protected] so that we can investigate and take appropriate action.

We employ age verification procedures during registration and as part of our KYC process to enforce this restriction. Parents and guardians are encouraged to use parental control software to prevent minors from accessing online gambling services.