Privacy Policy — gbajhe Gaming Platform

gbajhe collects personal data from players and website visitors in several ways — directly when you provide it, automatically as you interact with the platform, and occasionally from third-party sources as part of our verification and fraud-prevention processes. We only collect data that is genuinely necessary to deliver, secure, and improve our services.

1.1 Data You Provide Directly

When you register a player account, use our services, or communicate with us, you voluntarily provide us with personal information including:

• Identity data: Full legal name, date of birth, gender, and a copy of a government-issued identification document (National Identity Card, passport, or driving licence) as part of the KYC verification process.
• Contact data: Email address, mobile phone number, and residential address (including city — e.g., Dhaka, Chittagong, Sylhet, Khulna, or Rajshahi — and postal code).
• Account credentials: Username and hashed password (we never store your password in plain text).
• Financial data: Mobile financial service account details (bKash, Nagad, Rocket, Upay) or card information (Visa, Mastercard) used for deposits and withdrawals. Card data is processed by our PCI-DSS compliant payment partners and is never stored in full on gbajhe servers.
• Communications data: Any messages, emails, or live-chat transcripts you exchange with our customer support team, including the content of any complaint or dispute you raise.
• Responsible gaming data: Self-exclusion preferences, deposit limits, session time limits, and any responsible gaming declarations you make within your account settings.

1.2 Data Collected Automatically

When you visit gbajhe.net or use the platform, we automatically collect certain technical and behavioural data:

• Device and technical data: IP address, device type (mobile, tablet, desktop), operating system, browser type and version, screen resolution, and language settings.
• Usage data: Pages visited, time and date of visits, session duration, games played, bet amounts, wager outcomes, and navigation paths through the platform.
• Log data: Server-side access logs, error logs, and security event logs generated during your interaction with the platform.
• Cookie and tracking data: Information collected via cookies, web beacons, and similar tracking technologies. Please see the Cookies & Tracking section below for full details.

1.3 Data From Third Parties

gbajhe may receive personal data about you from the following third-party sources:

• Identity verification providers: Third-party KYC and anti-fraud service providers who assist us in verifying the accuracy of the identity documents you submit.
• Payment service providers: bKash, Nagad, Rocket, Upay, Visa, and Mastercard may share transaction reference data with us to facilitate deposit and withdrawal processing and to investigate disputed transactions.
• Analytics providers: Aggregated, anonymised traffic and behavioural analytics from tools that help us understand how players use the platform — used solely for internal improvement purposes.

gbajhe processes your personal data for the following specific purposes. For each purpose, we identify the legal basis on which we rely to make that processing lawful.

Marketing Communications: gbajhe will only send you promotional emails, SMS messages, or in-platform notifications about bonuses, new games, BPL cricket season offers, Eid promotions, or other marketing materials where you have explicitly consented to receive such communications at the time of registration or have subsequently opted in through your account settings. You may withdraw your marketing consent at any time by updating your notification preferences in your account settings or by contacting [email protected]. Withdrawal of marketing consent does not affect the lawfulness of processing carried out before your withdrawal.

Automated Decision-Making: gbajhe uses automated processes to detect fraudulent account activity, identify potential problem gambling behaviour, and flag unusual transaction patterns. Where an automated process produces a decision that significantly affects you — such as account restriction or withdrawal hold — you have the right to request human review of that decision by contacting our support team at [email protected].

gbajhe does not sell your personal data to third parties. We do not share your personal information with advertisers, data brokers, or marketing networks for their own commercial use. Personal data is shared only in the following limited and controlled circumstances:

3.1 Service Providers (Data Processors)

We share personal data with carefully selected third-party service providers who process data on our behalf and under our written instructions. These include:

• Payment processors: bKash, Nagad, Rocket, Upay, and card payment gateways that handle transaction processing. These providers receive only the data necessary to execute the specific transaction.
• KYC and identity verification providers: Third-party services that assist in verifying player identity documents and checking against fraud and politically-exposed-persons (PEP) databases.
• Cloud infrastructure and hosting providers: Secure cloud service providers who host gbajhe's platform infrastructure. These providers are contractually bound to data protection standards consistent with this Privacy Policy.
• Customer support platforms: Tools used to manage and respond to customer support tickets and live chat interactions.
• Analytics service providers: Providers of anonymised or aggregated platform usage analytics — no individually identifiable data is shared for these purposes.

All service providers with whom gbajhe shares personal data are bound by data processing agreements that restrict their use of your data to the specific service being provided and require them to implement appropriate security measures.

3.2 Game Software Providers

When you play games supplied by third-party software providers — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — limited technical data (such as a player session token and game preferences) may be passed to the relevant provider's systems to enable gameplay. These providers operate under their own privacy practices and are responsible for the data processed within their game systems. gbajhe does not pass your full identity data or payment details to game providers.

3.3 Legal and Regulatory Disclosure

gbajhe may disclose personal data where required to do so by applicable law, court order, or at the request of a competent regulatory or law enforcement authority. We will, where legally permissible, endeavour to notify you of such a disclosure request before complying. Disclosures made under legal compulsion are not a breach of this Privacy Policy.

3.4 Business Transfers

In the event that gbajhe undergoes a merger, acquisition, asset sale, or corporate restructuring, player data may be transferred as part of that transaction. In such an event, gbajhe will use reasonable efforts to ensure that the acquiring entity is bound by privacy obligations consistent with this Privacy Policy, and will notify affected players where required by applicable law.

gbajhe uses cookies and similar tracking technologies to operate the platform, recognise returning players, remember session preferences, monitor platform security, and gather anonymous usage analytics. This section explains what types of cookies we use, why we use them, and how you can manage your cookie preferences.

4.1 What Are Cookies?

Cookies are small text files placed on your device by a website when you visit it. They allow the website to remember information about your visit — such as whether you are logged in, your language preferences, and your session state. Cookies do not contain executable code and cannot install software on your device without your separate action.

4.2 Types of Cookies We Use

4.3 Managing Cookies

You can control and manage cookies through your browser settings. Most modern browsers allow you to view, block, or delete cookies at any time. Please note that disabling strictly necessary cookies will prevent you from logging into your gbajhe account and using the platform's core features. Disabling functional or analytics cookies will not prevent you from using the platform but may affect your experience (e.g., saved preferences will not be remembered between sessions).

Instructions for managing cookies in common browsers:

• Google Chrome: Settings → Privacy and Security → Cookies and other site data
• Mozilla Firefox: Settings → Privacy & Security → Cookies and Site Data
• Microsoft Edge: Settings → Cookies and site permissions → Manage and delete cookies
• Safari (iOS/macOS): Settings → Safari → Privacy & Security

gbajhe does not use third-party advertising cookies or cross-site behavioural tracking cookies. We do not participate in ad networks, retargeting programmes, or interest-based advertising.

gbajhe takes the security of your personal data seriously. We implement a range of technical and organisational measures designed to protect your data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• SSL/TLS Encryption: All data transmitted between your browser or device and the gbajhe platform is encrypted using industry-standard TLS (Transport Layer Security) protocols. Our website is served exclusively over HTTPS.
• Password Hashing: Your account password is never stored in plain text. gbajhe uses strong, salted cryptographic hashing algorithms to store password credentials.
• Access Controls: Access to personal data within gbajhe's internal systems is restricted on a strict need-to-know basis. Only authorised personnel whose job roles require access to specific categories of player data are granted that access, and all internal access is logged.
• Two-Factor Authentication (2FA): gbajhe strongly recommends — and in some cases requires — that players enable two-factor authentication on their accounts to provide an additional layer of protection against unauthorised login attempts.
• Payment Data Security: gbajhe does not store full payment card numbers on its own servers. Card transactions are processed by PCI-DSS Level 1 compliant payment partners. Mobile financial service (bKash, Nagad, Rocket, Upay) transactions are processed through each provider's own secured API infrastructure.
• Vulnerability Management: gbajhe conducts regular security assessments and works with our infrastructure providers to apply security patches promptly. Suspicious activity on player accounts is monitored automatically and flagged for human review where necessary.

While gbajhe employs robust security measures, no online platform can guarantee absolute security. You also play an important role in keeping your account secure — do not share your login credentials, use a strong unique password, enable 2FA, and contact us immediately if you notice any suspicious activity on your account.

gbajhe retains personal data for only as long as is necessary to fulfil the purposes for which it was collected, including satisfying legal, accounting, and reporting obligations. The following retention periods apply:

After the applicable retention period expires, personal data is securely deleted or anonymised so that it can no longer be associated with any individual player. Where data must be retained beyond the standard period due to an active legal dispute, regulatory investigation, or court order, gbajhe will retain only the data relevant to that specific matter until the matter is resolved.

If you close your gbajhe account, we will cease using your personal data for marketing and active service delivery purposes immediately. However, we are required by law to retain certain records (identity, transaction history) for the periods set out in the table above, even after account closure. You may request confirmation of what data we continue to hold after account closure by contacting [email protected].

As a player using the gbajhe platform, you hold a number of rights in relation to the personal data we hold about you. gbajhe is committed to facilitating the exercise of these rights in a timely and transparent manner. The following rights are available to you:

• Right of Access: You have the right to request a copy of the personal data gbajhe holds about you, together with information about how that data is being used. This is sometimes called a "Subject Access Request" (SAR). gbajhe will respond to valid access requests within 30 days.
• Right to Rectification: If any personal data gbajhe holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update certain account details (such as contact information) directly through your account settings. For corrections to identity documents or date of birth on file, please contact [email protected] with supporting documentation.
• Right to Erasure: In certain circumstances, you have the right to request that gbajhe delete the personal data we hold about you. This right is not absolute — gbajhe is required by law to retain certain data (particularly KYC and transaction records) for defined periods even after account closure. Where erasure is not possible due to a legal obligation, gbajhe will inform you of the specific reason and the applicable retention period.
• Right to Restrict Processing: You may request that gbajhe restrict the processing of your personal data in certain circumstances — for example, while a dispute about the accuracy of the data is being resolved, or where you have objected to processing and a decision on that objection is pending.
• Right to Data Portability: Where processing is based on your consent or the performance of a contract, and is carried out by automated means, you have the right to receive a structured, commonly used, machine-readable copy of the personal data you have provided to gbajhe. gbajhe can provide account registration data and transaction history in CSV format upon request.
• Right to Object: You have the right to object at any time to processing of your personal data for direct marketing purposes. You may also object to processing based on gbajhe's legitimate interests, in which case gbajhe will assess whether its interests are overridden by your rights in the specific circumstances.
• Right to Withdraw Consent: Where gbajhe processes your data based on your consent (e.g., for marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that occurred before the withdrawal.

gbajhe is responsible for the personal data described in this Privacy Policy. If you have any questions, concerns, or requests relating to the way we handle your data, please contact us at:

• Email: [email protected] (plain text — not a clickable link)
• Subject line for privacy matters: "Privacy Policy Enquiry" or "Privacy Rights Request"
• Response time: gbajhe aims to acknowledge all privacy-related enquiries within 48 hours (Bangladesh Standard Time, UTC+6) and to provide a substantive response within 14 business days.

Policy Updates: gbajhe reviews and updates this Privacy Policy periodically to reflect changes in our data practices, applicable law, or the services we offer. When material changes are made to this Policy, we will update the "Last Updated" date at the top of this page and, where the changes are significant, notify registered players by email at their registered address. The version of this Policy published at gbajhe.net/privacy-policy at any given time is the current operative version. We encourage players to review this page periodically to stay informed about how gbajhe protects their personal data.

Children's Privacy: The gbajhe platform is strictly for adults aged 18 and above. gbajhe does not knowingly collect personal data from individuals under the age of 18. If we become aware that personal data has been collected from a person under 18, we will promptly delete that data and close the associated account. If you believe a minor has registered on the gbajhe platform, please notify us at [email protected] immediately.

Links to Third-Party Services: The gbajhe platform integrates with third-party game providers (such as Pragmatic Play, Evolution Gaming, Spribe, and Microgaming) and payment services (such as bKash, Nagad, and Rocket). Each of these providers operates under its own privacy policy. gbajhe is not responsible for the data practices of these third parties within their own systems. We encourage you to review the privacy policies of any third-party service you use in connection with the gbajhe platform.