Privacy

gbaj Privacy Policy

Your privacy matters to gbaj. This Privacy Policy explains exactly what personal data gbaj collects when you use the platform, why gbaj collects it, how it is stored and protected, and what rights you have over your own information. gbaj is committed to handling your data with transparency and care.

Last updated: 1 January 2025
Your Privacy at a Glance

How gbaj Protects Your Data

These cards cover the most important points. The full policy below is the binding version — please read it carefully.

Your Data Is Never Sold

gbaj does not sell, rent, or trade your personal data to any third party for marketing or commercial purposes. Your information is used only to operate your account, process payments, and improve the gbaj platform experience for players in Bangladesh.

Encryption on Every Transaction

All data transmitted between your device and gbaj is encrypted using TLS. Payment data processed through bKash, Nagad, and Rocket is handled via secure, tokenised connections. gbaj does not store full payment credentials on its own servers.

You Control Your Data

gbaj players have the right to access, correct, and request deletion of their personal data at any time. You can also request a copy of all data gbaj holds about you. Submit any data request to [email protected] and gbaj will respond within 30 days.

Minimal Data Collection

gbaj only collects the data that is genuinely necessary to operate your account and comply with legal obligations. gbaj does not collect data it does not need. The categories of data collected are clearly listed in this Privacy Policy so you always know what gbaj holds.

Marketing You Can Opt Out Of

gbaj sends promotional emails and notifications only to players who have opted in. You can withdraw your marketing consent at any time from your account settings or by contacting gbaj support. Opting out of marketing does not affect your ability to use the platform.

Secure Data Storage

gbaj stores all player data on secure servers with access controls, regular security audits, and intrusion detection systems in place. Access to personal data within the gbaj organisation is restricted to staff who need it to perform their role. All staff with data access are bound by confidentiality obligations.

Contents
  1. Who We Are
  2. Data We Collect
  3. How We Use Your Data
  4. Legal Basis
  5. Sharing Your Data
  6. Cookies and Tracking
  7. Data Retention
  8. Your Rights
  9. Data Security
  10. Children's Privacy
  11. Marketing
  12. Policy Changes
  13. Contact Us

1. Who We Are

This Privacy Policy is issued by gbaj ("gbaj", "we", "us", "our"), the operator of the online gaming platform at gbaj.io. gbaj is the data controller responsible for the personal data of players who register and use the gbaj platform. This policy applies to all personal data collected through the gbaj website, mobile application, and any related services.

gbaj operates its platform primarily for players based in Bangladesh. If you have any questions about how gbaj handles your personal data, you can contact the gbaj data team at any time using the details in Section 13 of this policy.

By registering a gbaj account or using the gbaj platform, you confirm that you have read and understood this Privacy Policy and consent to the collection and use of your data as described here.

2. Data We Collect

gbaj collects personal data in the following categories. gbaj only collects data that is necessary for the purposes described in this policy.

Category Examples When Collected
Identity Data Full name, date of birth, national ID number Registration and verification
Contact Data Mobile number, email address Registration
Financial Data bKash/Nagad/Rocket account reference, transaction history Deposits and withdrawals
Technical Data IP address, device type, browser, operating system Every platform visit
Usage Data Games played, session duration, bet history, login times During platform use
Communications Data Support chat transcripts, email correspondence When you contact gbaj support
Verification Documents Copies of ID, proof of address, payment method proof KYC verification process

gbaj does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health data unless specifically required by law or responsible gaming obligations.

3. How We Use Your Data

gbaj uses your personal data for the following purposes:

  • To create and manage your gbaj account, including verifying your identity and age.
  • To process deposits and withdrawals through bKash, Nagad, and Rocket.
  • To deliver the games, bonuses, and promotions available on the gbaj platform.
  • To detect and prevent fraud, money laundering, and other prohibited activity.
  • To comply with legal and regulatory obligations applicable to gbaj's operations.
  • To provide customer support and respond to your queries and complaints.
  • To send you account-related notifications such as transaction confirmations and security alerts.
  • To send marketing communications where you have given consent to receive them.
  • To analyse platform usage and improve the gbaj experience for all players.
  • To enforce the gbaj Terms and Conditions and protect the rights of gbaj and its players.

gbaj uses automated systems to monitor account activity for fraud and responsible gaming purposes. If an automated decision significantly affects your account, you have the right to request a human review. Contact [email protected] to exercise this right.

4. Legal Basis for Processing

gbaj processes your personal data on the following legal bases:

  • Contract performance: Processing necessary to operate your gbaj account, process transactions, and deliver the services you have signed up for.
  • Legal obligation: Processing required to comply with anti-money laundering laws, age verification requirements, and other applicable regulations.
  • Legitimate interests: Processing for fraud prevention, platform security, and improving gbaj services, where these interests are not overridden by your rights.
  • Consent: Processing for marketing communications, where you have explicitly opted in. You may withdraw this consent at any time.

5. Sharing Your Data

gbaj does not sell your personal data. gbaj shares your data only in the following limited circumstances and only to the extent necessary for the stated purpose:

  • Payment providers: bKash, Nagad, and Rocket receive the minimum data necessary to process your transactions. These providers operate under their own privacy policies and security standards.
  • Game software providers: Third-party game providers may receive anonymised technical data to support game delivery and fairness auditing. They do not receive your identity or financial data.
  • Identity verification services: gbaj uses third-party KYC providers to verify identity documents. These providers process your data under strict confidentiality agreements with gbaj.
  • Law enforcement and regulators: gbaj will disclose personal data to law enforcement agencies, regulators, or courts where required by law or where gbaj has a good-faith belief that disclosure is necessary to prevent crime or protect rights.
  • Business transfers: In the event of a merger, acquisition, or sale of gbaj's business, your data may be transferred to the acquiring entity. gbaj will notify you before your data is transferred and becomes subject to a different privacy policy.

All third parties who receive gbaj player data are required to handle it securely and in accordance with applicable data protection law. gbaj does not permit third parties to use your data for their own marketing purposes.

6. Cookies and Tracking Technologies

gbaj uses cookies and similar tracking technologies on the gbaj platform to ensure the site functions correctly, remember your preferences, and analyse how players use the platform. The types of cookies gbaj uses are:

  • Essential cookies: Required for the gbaj platform to function. These cannot be disabled. They include session cookies that keep you logged in and security cookies that protect against cross-site request forgery.
  • Functional cookies: Remember your preferences such as language settings and display options. These improve your experience on gbaj but are not strictly necessary.
  • Analytics cookies: Help gbaj understand how players navigate the platform, which games are most popular, and where technical issues occur. gbaj uses this data to improve the platform. Analytics data is aggregated and does not identify individual players.
  • Security cookies: Used to detect and prevent fraudulent activity, including bot traffic and account takeover attempts.

You can manage cookie preferences through your browser settings. Disabling essential cookies will affect your ability to use the gbaj platform. Disabling functional or analytics cookies will not prevent you from playing but may reduce the quality of your experience.

7. Data Retention

gbaj retains your personal data for as long as your account is active and for a period after account closure as required by law and legitimate business needs. The general retention periods gbaj applies are:

  • Account and identity data: Retained for the duration of your account plus five years after closure, in line with anti-money laundering record-keeping requirements.
  • Transaction records: Retained for seven years from the date of the transaction to comply with financial record-keeping obligations.
  • Support communications: Retained for three years from the date of the last communication.
  • Technical and usage data: Retained for 13 months on a rolling basis for analytics and fraud detection purposes.
  • Marketing consent records: Retained for the duration of your consent plus three years to demonstrate compliance.

When data is no longer required, gbaj securely deletes or anonymises it. Anonymised data may be retained indefinitely for statistical and research purposes as it can no longer be linked to an individual.

8. Your Rights

As a gbaj player, you have the following rights over your personal data. gbaj will respond to all valid requests within 30 days.

Right to Access Right to Rectification Right to Erasure Right to Restriction Right to Portability Right to Object
  • Access: Request a copy of all personal data gbaj holds about you.
  • Rectification: Ask gbaj to correct any inaccurate or incomplete data.
  • Erasure: Request deletion of your personal data where gbaj no longer has a legal basis to retain it. Note that gbaj may be required to retain certain data by law even after an erasure request.
  • Restriction: Ask gbaj to pause processing of your data while a dispute is resolved.
  • Portability: Receive your data in a structured, machine-readable format to transfer to another service.
  • Object: Object to processing based on legitimate interests, including profiling for marketing purposes.

To exercise any of these rights, email gbaj at [email protected] with the subject line "Data Rights Request" and a description of your request. gbaj may need to verify your identity before processing the request.

9. Data Security

gbaj takes the security of your personal data seriously. The technical and organisational measures gbaj has in place include:

  • TLS encryption for all data in transit between your device and gbaj servers.
  • Encryption at rest for sensitive data stored on gbaj servers.
  • Role-based access controls limiting staff access to personal data on a need-to-know basis.
  • Regular penetration testing and security audits of the gbaj platform.
  • Intrusion detection and monitoring systems operating around the clock.
  • Staff training on data protection and security best practices.
  • Incident response procedures to detect, contain, and report data breaches promptly.

Despite these measures, no online platform can guarantee absolute security. If you suspect that your gbaj account has been compromised, contact gbaj support immediately at [email protected] or via live chat. gbaj will investigate and take appropriate action without delay.

In the event of a data breach that is likely to result in a risk to your rights, gbaj will notify affected players without undue delay and will take all reasonable steps to mitigate the impact.

10. Children's Privacy

The gbaj platform is strictly for adults aged 18 and above. gbaj does not knowingly collect personal data from anyone under the age of 18. If gbaj discovers that a player under 18 has registered an account, the account will be closed immediately, all data will be deleted, and any funds will be returned to the payment source used.

If you believe a minor has registered a gbaj account, please contact gbaj support at [email protected] immediately so the matter can be investigated and resolved promptly.

11. Marketing Communications

gbaj sends promotional emails, SMS messages, and in-platform notifications about bonuses, new games, and special offers. gbaj will only send you marketing communications if you have opted in to receive them during registration or through your account settings.

You can withdraw your marketing consent at any time by:

  • Updating your notification preferences in your gbaj account settings.
  • Clicking the unsubscribe link in any gbaj marketing email.
  • Contacting gbaj support at [email protected] and requesting removal from marketing lists.

Withdrawing marketing consent does not affect your ability to use the gbaj platform or receive essential account communications such as transaction confirmations and security alerts. gbaj will process opt-out requests within five business days.

12. Changes to This Privacy Policy

gbaj may update this Privacy Policy from time to time to reflect changes in the law, gbaj's data practices, or the services gbaj offers. When material changes are made, gbaj will notify registered players by email and display a notice on the platform at least 14 days before the changes take effect.

The date at the top of this policy shows when it was last updated. gbaj encourages you to review this policy periodically to stay informed about how gbaj protects your data. Your continued use of the gbaj platform after the effective date of any update constitutes acceptance of the revised policy.

13. Contact gbaj About Privacy

If you have any questions, concerns, or requests relating to this Privacy Policy or how gbaj handles your personal data, please get in touch:

  • Email: [email protected]
  • Subject line: Privacy Policy Enquiry
  • Live Chat: Available 24/7 from any page on gbaj when logged in.
  • FAQ: Visit the gbaj FAQ for answers to common privacy questions.

gbaj aims to respond to all privacy-related enquiries within 48 hours. Data rights requests are handled within 30 days as required by applicable law.

Your Data Is Safe. Now Let's Get You Playing on gbaj.

gbaj is built on trust — fast bKash and Nagad payouts, certified fair games, and a platform that respects your privacy every step of the way. Join hundreds of thousands of players across Bangladesh today.

Create Your gbaj Account Sign In

18+ only. Please play responsibly. Responsible Gaming