Privacy Policy — r baje Online Casino

1. Information We Collect

r baje collects personal information in several ways: directly from you when you register an account or interact with the platform, automatically through your use of our website and services, and from third-party partners where permitted by applicable law. The categories of personal data we process are described below.

Information You Provide Directly

When you create an account, complete identity verification (KYC), or contact our support team, you may provide the following types of information:

Identity documents such as your National Identity Card (NID) or passport are collected solely for the purpose of complying with age verification and anti-money-laundering (AML) obligations. We do not retain scanned document images beyond the period required by applicable compliance regulations.

Information Collected Automatically

When you visit r-baje.ws or use any feature of the platform, we may automatically collect technical and behavioural data including:

• Device and browser information: IP address, browser type and version, operating system, screen resolution, and device identifiers.
• Usage data: Pages visited, features used, game sessions played, bet amounts, session duration, and navigation paths.
• Log data: Server-side logs recording access timestamps, error events, and transaction IDs for security auditing purposes.
• Location data: Approximate geographic location derived from your IP address, used to verify eligibility and comply with regional restrictions.

Information from Third Parties

r baje may receive limited personal data from third-party service providers in the following contexts:

• Payment processors: bKash, Nagad, Rocket, Upay, Visa, and Mastercard may pass transaction references, masked account identifiers, and status codes to r baje to confirm and reconcile deposits and withdrawals.
• Identity verification partners: Third-party KYC providers may supply the results of document authentication checks to confirm that identity documents submitted by a player are genuine.
• Fraud-detection services: Risk-scoring signals from third-party fraud-prevention vendors may be associated with your account to protect the integrity of the platform.

2. How We Use Your Information

r baje processes your personal data only for legitimate, specified purposes. We do not sell your data to third parties for marketing or advertising purposes. The primary purposes for which we use your information are:

Account and Service Delivery

• Creating and managing your player account, including authentication and session management.
• Processing deposits and withdrawals through your nominated payment method.
• Applying bonuses and promotions to your account in accordance with their stated terms.
• Providing access to casino games, sports betting markets, and live dealer content.
• Responding to your customer support enquiries and resolving disputes.

Legal and Regulatory Compliance

• Verifying your identity and age in accordance with our Know Your Customer (KYC) obligations to ensure no player under 18 accesses the platform.
• Conducting anti-money-laundering (AML) screening and transaction monitoring.
• Maintaining records of transactions, communications, and account activity as required by applicable law and compliance obligations.
• Reporting suspicious transactions to relevant authorities where required by law.

Platform Safety and Fraud Prevention

• Detecting and preventing fraudulent activity, bonus abuse, multi-accounting, and other prohibited conduct described in our Terms & Conditions.
• Monitoring for unusual account behaviour that may indicate account compromise or unauthorised access.
• Enforcing self-exclusion and responsible gaming restrictions applied to your account.

Service Improvement and Analytics

• Analysing aggregated, anonymised usage patterns to improve the platform's performance, design, and game offering.
• Conducting internal research and testing to develop new features and ensure platform stability.
• Monitoring page load times, error rates, and infrastructure health to maintain service quality for players across Bangladesh.

Marketing Communications

With your consent, r baje may send you promotional emails and SMS notifications about new games, bonuses, seasonal promotions (such as those tied to BPL, IPL, or Eid), and platform updates. You may withdraw your consent and unsubscribe from marketing communications at any time by contacting [email protected] or adjusting your notification preferences within account settings. Withdrawal of marketing consent does not affect the lawfulness of processing carried out before the withdrawal, and does not prevent us from sending you essential transactional or security-related communications.

3. Sharing and Disclosure of Data

r baje does not sell, rent, or trade your personal data to any third party for commercial purposes. We share personal data only in the specific, limited circumstances described below.

Service Providers and Technology Partners

We work with carefully selected third-party vendors who process data on our behalf in order to operate the platform. These include:

• Game providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive the minimum account data necessary to authenticate your game session. They do not receive your full identity or financial details.
• Payment processors: bKash, Nagad, Rocket, Upay, Visa, and Mastercard receive the transaction data necessary to process deposits and withdrawals. Each provider operates under its own privacy policy and data-protection obligations.
• KYC and identity verification providers: Document images and personal details are shared with our verification partner solely for the purpose of completing mandatory identity checks.
• Cloud infrastructure and hosting providers: Platform data is stored on secure servers operated by our infrastructure partners. All such partners are contractually required to implement appropriate security measures and process data only under our documented instructions.

All third-party service providers are bound by data processing agreements that prohibit them from using your personal data for any purpose other than the specific service they provide to r baje.

Legal Obligations and Law Enforcement

r baje may disclose personal data to regulatory bodies, law enforcement agencies, or courts where we are legally required to do so — for example, in response to a valid court order, a statutory reporting obligation under AML regulations, or a legitimate request from a financial intelligence authority. In all such cases, we disclose only the minimum data necessary to satisfy the legal requirement and, where permitted by law, will notify the affected player.

Business Transfers

In the event that r baje undergoes a merger, acquisition, restructuring, or sale of assets, player data held by the platform may be transferred as part of that transaction. We will provide reasonable notice to affected players and ensure that any successor entity is bound by privacy obligations at least as protective as those set out in this policy.

4. Cookies and Tracking Technologies

r baje uses cookies and similar tracking technologies to operate the platform, remember your preferences, maintain session security, and analyse usage patterns. A cookie is a small text file placed on your device by a web server. It does not contain executable code and cannot access other files on your device.

Types of Cookies We Use

• Strictly necessary cookies: These cookies are essential for the platform to function correctly. They maintain your login session, store your language preference, and ensure that security tokens are correctly applied to your requests. You cannot opt out of strictly necessary cookies without also ceasing to use the platform.
• Functional cookies: These cookies remember your account preferences such as display settings and game history filters. They are not required for the platform to operate, but enhance your experience. You may disable them via your browser settings without losing access to core functionality.
• Analytics cookies: r baje uses privacy-respecting, first-party analytics to understand how players navigate the site. These cookies collect aggregated, anonymised data about page views, session lengths, and feature usage. No personally identifiable information is included in analytics reports.
• Security and fraud-prevention cookies: These cookies assign a pseudonymous session identifier to your browser for the duration of your visit and help our fraud-detection systems identify unusual patterns that may indicate bot activity or account compromise.

Managing Cookies

Most modern browsers allow you to control cookie behaviour through their settings panels. You can choose to block all cookies, accept only first-party cookies, or delete cookies after each browsing session. Please note that blocking strictly necessary cookies will prevent you from logging into your r baje account. For instructions specific to your browser, consult the help documentation provided by your browser vendor.

r baje does not use third-party advertising cookies and does not participate in cross-site behavioural advertising networks. No tracking pixel or retargeting tag from any external advertising platform is deployed on r-baje.ws.

5. Data Security Measures

Protecting your personal data is a core operational priority at r baje. We implement a layered set of technical and organisational security controls designed to prevent unauthorised access, accidental loss, destruction, or disclosure of your information.

Technical Controls

• TLS/SSL encryption: All data transmitted between your browser and r-baje.ws is encrypted using industry-standard TLS 1.2 or higher. The padlock icon visible in your browser's address bar confirms that your connection is encrypted.
• Encryption at rest: Sensitive personal data stored in our databases — including identity document references, payment method identifiers, and KYC records — is encrypted at rest using AES-256.
• Password hashing: Account passwords are never stored in plaintext. They are processed using a strong, salted cryptographic hashing algorithm before storage so that even a full database compromise cannot expose your password.
• Two-factor authentication (2FA): Players are strongly encouraged to enable 2FA via OTP to their registered Bangladeshi mobile number. When 2FA is active, a successful login requires both your password and a one-time code, significantly reducing the risk of unauthorised access.
• Access controls: Internal access to personal data is restricted to authorised r baje personnel on a strict need-to-know basis. All internal access is logged and subject to periodic review.

Organisational Controls

• All staff and contractors who handle personal data are bound by confidentiality obligations and receive training on data handling best practices.
• r baje conducts periodic security reviews of its systems, including vulnerability assessments of the platform's web-facing components.
• A documented incident response procedure is in place to ensure that data breaches are detected, contained, and reported in a timely manner.

6. Data Retention

r baje retains personal data for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal, regulatory, or compliance obligations. The following retention periods apply to key categories of data:

• Active account data: Retained for the duration of your account. If you close your account, your personal profile and contact information are retained for a minimum of five years from the date of closure to comply with AML record-keeping requirements.
• Transaction records: Deposit, withdrawal, and betting transaction logs are retained for a minimum of five years from the date of each transaction.
• KYC and identity documents: Document images and verification records are retained for five years from account closure or the date of the last transaction, whichever is later.
• Customer support communications: Support chat logs and email correspondence are retained for three years from the date of the last message in the conversation thread.
• Marketing consent records: Records of your consent to or withdrawal from marketing communications are retained for five years from the relevant consent event to demonstrate compliance.
• Analytics and log data: Anonymised or pseudonymised usage and server log data is retained for up to 24 months, after which it is either deleted or further anonymised.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to you. r baje does not retain data beyond the periods stated above unless compelled by a specific, documented legal obligation.

7. Your Privacy Rights

As a player on r baje, you have the following rights in relation to your personal data. To exercise any of these rights, please contact [email protected] from your registered email address, clearly describing your request. We will respond within 30 days of receiving a valid request.

Please note that some rights are subject to limitations. For example, we cannot delete transaction records that we are legally required to retain under AML regulations, even if you request erasure. Where a limitation applies, we will explain the reason in our response to your request.

8. Contact and Complaints

If you have any questions, concerns, or requests relating to this Privacy Policy or r baje's data-handling practices, please contact our privacy team directly:

• Email: [email protected]
• Response time: We aim to respond to all privacy-related enquiries within 5 business days, and to formal rights requests within 30 calendar days.
• Language: All privacy communications are handled in English.
• Hours: Our privacy team operates during Bangladesh Standard Time (BST, UTC+6) business hours, Monday to Saturday.

Complaints

If you are not satisfied with r baje's response to a privacy concern, you have the right to escalate your complaint. We take all privacy complaints seriously and will investigate every escalation thoroughly. Please send escalated complaints to [email protected] with the subject line "Privacy Complaint Escalation", including a description of your original concern and the response you received.

Updates to This Policy

r baje reserves the right to update this Privacy Policy at any time to reflect changes in our practices, technology, legal requirements, or regulatory guidance. When material changes are made, we will notify registered players via email to the address on file and display a prominent notice on the platform for a period of at least 14 days. The "Last Updated" date at the top of this page will be revised accordingly. Your continued use of r baje following notification of changes constitutes your acknowledgement of the updated policy.