Privacy Policy — rbajee42

Information We Collect

The following table summarises the categories of personal data we collect, the source of each category, and the primary purpose for which it is processed on the rbajee42 platform.

We may also collect aggregated and anonymised data — for example, total number of active sessions in a given hour, or average session duration across a game category — which cannot be used to identify any individual player. This anonymised data is used for platform analytics and service improvement and is not subject to this Privacy Policy.

Children's data: rbajee42 is strictly an 18+ platform. We do not knowingly collect any personal data from individuals under the age of 18. If we become aware that a minor has submitted personal data through the registration process, that account will be immediately suspended and all associated data will be deleted from our systems. Parents or guardians who believe a minor has created an account on rbajee42 should contact us immediately at support@rbajee42.

Lawful Basis for Processing

rbajee42 processes your personal data only where a valid lawful basis exists for doing so. The following lawful bases apply to our processing activities:

• Contractual necessity: The majority of data processing on rbajee42 is necessary for the performance of the contract between you and the platform — namely, the Terms & Conditions you accepted at registration. This includes processing your identity and contact data to maintain your account, processing your financial data to handle deposits and withdrawals, and processing your usage data to deliver personalised game and betting experiences.
• Legal obligation: Certain processing activities are required by law. These include retaining financial transaction records for anti-money laundering (AML) compliance, performing Know Your Customer (KYC) identity verification, and reporting suspicious transactions to relevant authorities where legally required.
• Legitimate interests: We process technical and usage data on the basis of legitimate interests in operating a secure, reliable, and fair gaming platform. This includes fraud detection and prevention, platform security monitoring, and service performance analytics. We carefully balance our legitimate interests against your right to privacy before relying on this basis.
• Consent: Where we send you marketing communications by email, SMS, or push notification, we do so only on the basis of your explicit prior consent. You may withdraw this consent at any time through your account settings or by contacting support@rbajee42. Withdrawal of consent does not affect the lawfulness of any processing carried out prior to your withdrawal.

Where we rely on legitimate interests as our lawful basis, you have the right to object to that processing. If you wish to raise an objection, please contact our data protection contact at support@rbajee42 with a detailed description of your concern. We will respond within 30 days and will cease the relevant processing unless we can demonstrate compelling legitimate grounds that override your objection.

How We Use Your Data

Your personal data is used by rbajee42 for the following specific purposes. We do not use your data for any purpose that is incompatible with the original purpose for which it was collected without first obtaining your explicit consent or establishing a separate lawful basis.

• Account management: Creating, maintaining, and administering your rbajee42 player account, including processing password resets, updating contact details, and managing account security settings.
• Payment processing: Verifying and processing deposit and withdrawal transactions via bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, and BRAC Bank. Financial data is handled in strict accordance with the requirements of each payment provider.
• Identity verification (KYC): Confirming your identity and age in compliance with our platform's age verification obligations and anti-money laundering (AML) procedures. Verification may be carried out internally or through a third-party KYC provider.
• Fraud and security: Detecting, investigating, and preventing fraudulent transactions, unauthorised account access, multi-accounting, and other forms of platform abuse. This includes IP monitoring, device fingerprinting, and behavioural analytics.
• Customer support: Responding to your support enquiries, resolving complaints, and communicating with you about your account status, transaction outcomes, and any security alerts relevant to your account.
• Responsible gaming: Monitoring your gaming behaviour to identify signs of problem gambling and, where appropriate, proactively offering self-exclusion, deposit limit adjustments, or referrals to external support organisations available in Bangladesh.
• Marketing communications: Sending you promotional offers, bonus notifications, tournament announcements (such as BPL, IPL, and T20 World Cup specials), and seasonal promotions — but only where you have given your prior consent to receive such communications.
• Platform improvement: Analysing anonymised and aggregated usage data to improve the layout, performance, game selection, and overall user experience of the rbajee42 platform.
• Legal compliance: Meeting our legal obligations under applicable regulations, including responding to valid legal requests from law enforcement or regulatory authorities, and maintaining records required for tax and financial reporting purposes.

Cookies & Tracking Technologies

A cookie is a small text file placed on your device by a website you visit. Cookies allow the website to recognise your device on subsequent visits, remember your preferences, and maintain session continuity. We use the following categories of cookies:

• Strictly necessary cookies: These cookies are essential for the rbajee42 platform to function. They maintain your login session, remember your language preference, and ensure the security of your account. These cookies cannot be disabled as they are required for core platform operation.
• Performance and analytics cookies: These cookies collect anonymised information about how players use rbajee42 — for example, which pages are visited most frequently and whether users encounter error messages. This data is used to improve the platform and does not identify any individual user.
• Functional cookies: These cookies remember your personalisation settings such as preferred game view, display preferences, and notification settings. Disabling these cookies may mean some features of the platform do not work as intended.
• Marketing cookies: These cookies track your browsing activity to enable us to deliver relevant promotional content both on and off rbajee42. They are placed only with your prior consent and can be withdrawn at any time by updating your cookie preferences in your account settings.

In addition to cookies, rbajee42 uses device fingerprinting and session tokens for security and fraud prevention purposes. These technologies allow us to identify unusual patterns of access that may indicate unauthorised use of your account or fraudulent activity on the platform.

You can manage your cookie preferences through your browser settings. Most browsers allow you to refuse new cookies, accept cookies selectively, or delete existing cookies. Please be aware that restricting cookies may affect the functionality of certain features of rbajee42, including session persistence and game loading performance.

Data Sharing & Third Parties

rbajee42 does not sell, rent, or trade your personal data with any third party for commercial or marketing purposes. We share your data with carefully selected third parties only where necessary to deliver platform services, meet legal obligations, or protect the security of the platform and its users.

• Payment providers: When you make a deposit or withdrawal, your financial data is shared with the relevant payment service provider (such as bKash, Nagad, Rocket, or Upay) solely to process the transaction. Each payment provider operates under its own privacy policy and data security standards.
• KYC and identity verification partners: To meet our age verification and AML obligations, we may share your identity documents and personal details with a third-party KYC verification service. These partners are contractually bound to process your data only for verification purposes and to maintain equivalent data protection standards.
• Game software providers: Some game providers (such as Pragmatic Play, Evolution Gaming, Ezugi, and Spribe) may receive anonymised session data necessary to deliver their games on the rbajee42 platform. No personally identifiable information is shared with game providers beyond what is technically required for game delivery.
• Fraud prevention services: We may share technical data (IP addresses, device identifiers, and transaction patterns) with specialist fraud prevention services to detect and block fraudulent activity on the platform.
• Legal and regulatory authorities: We are required by law to disclose personal data to relevant authorities (such as financial intelligence units or law enforcement agencies) when presented with a valid legal order, warrant, or regulatory directive. We will always seek to limit such disclosures to the minimum data required.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of the rbajee42 business, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and of any material changes to this Privacy Policy that result from it.

All third parties with whom rbajee42 shares personal data are required to implement appropriate technical and organisational security measures to protect that data and are prohibited from using it for any purpose beyond the specific purpose for which it was shared. We conduct due diligence on all third-party data processors before engaging their services.

Data Retention Policy

rbajee42 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, tax, or accounting obligations. The following retention periods apply to each category of personal data we hold.

Once the applicable retention period has expired, your personal data is securely deleted or anonymised so that it can no longer be associated with your identity. Where anonymisation is used in place of deletion (for example, for long-term analytics data), the resulting anonymised dataset is no longer considered personal data and is not subject to the terms of this Privacy Policy.

If you request the deletion of your account before the expiry of the applicable retention period, we will close your account and restrict its active use immediately. However, we may retain the minimum data required to meet our legal obligations until those periods expire, after which deletion will be completed automatically.

Your Privacy Rights

• Right of access: You have the right to request a copy of all personal data we hold about you. We will provide this in a structured, commonly used, and machine-readable format where technically feasible.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it without undue delay.
• Right to erasure: You have the right to request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where you have objected to processing based on legitimate interests. This right is subject to our legal retention obligations.
• Right to restriction of processing: You may request that we restrict the processing of your personal data in certain circumstances — for example, while a dispute about the accuracy of your data is being resolved, or while an objection to processing is being considered.
• Right to data portability: Where processing is based on your consent or on contractual necessity, you have the right to receive your personal data in a portable format and to transmit it to another data controller.
• Right to object: You have the right to object at any time to processing based on legitimate interests, including profiling for marketing purposes. Upon receiving a valid objection, we will cease the relevant processing unless we can demonstrate compelling legitimate grounds.
• Right to withdraw consent: Where processing is based on your consent (such as for marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.
• Right not to be subject to automated decisions: You have the right not to be subject to decisions based solely on automated processing, including profiling, where such decisions produce significant legal or similarly significant effects on you.

To exercise any of the above rights, please submit a written request to support@rbajee42, clearly stating the right you wish to exercise and providing sufficient information for us to verify your identity. We may ask for additional identity verification before processing your request to protect against unauthorised access to your data.

Data Security Measures

rbajee42 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our security programme is reviewed regularly and updated in line with evolving best practices and threat landscapes.

• SSL/TLS encryption: All data in transit between your device and the rbajee42 platform is encrypted using Transport Layer Security (TLS) with a minimum key strength of 256 bits. The padlock icon in your browser confirms this encryption is active during every session.
• Encrypted data storage: Sensitive data at rest — including identity documents, financial records, and password hashes — is stored in encrypted form on secure servers. Plain-text storage of sensitive data is strictly prohibited under our internal data handling policy.
• Access controls: Access to personal data within rbajee42's internal systems is restricted on a strict need-to-know basis. Staff members are granted access only to the data categories required to perform their specific role, and all access is logged and regularly audited.
• Two-factor authentication: All internal administrative systems that process player data require multi-factor authentication. We also strongly recommend that players enable two-factor authentication on their own accounts to provide an additional layer of protection.
• Penetration testing: rbajee42 conducts regular security assessments, including vulnerability scans and penetration testing, to identify and address potential weaknesses in our platform infrastructure before they can be exploited.
• Incident response: In the event of a personal data breach that poses a risk to players, we will notify affected individuals and, where required by law, the relevant authorities, within 72 hours of becoming aware of the breach. Our incident response team operates around the clock.
• Staff training: All rbajee42 staff who handle personal data undergo mandatory data protection training at onboarding and on a regular refresher basis. Our internal data protection policies are reviewed and updated at least annually.

While rbajee42 implements robust technical safeguards, no online platform can guarantee absolute security against all possible threats. You play an important role in keeping your account safe by using a strong, unique password, enabling two-factor authentication, and never sharing your login credentials with any third party. rbajee42 will never ask you for your password via email, live chat, or any other channel.

This Privacy Policy was last reviewed and updated in January 2026. We reserve the right to amend this policy at any time. Material changes will be communicated to registered players via email or via a prominent notice on the rbajee42 homepage prior to the changes taking effect. Your continued use of the platform after the effective date of any amendment constitutes your acceptance of the updated Privacy Policy.