At gbbaji, protecting the privacy of our players is a core responsibility. This Privacy Policy explains precisely what personal data we collect, how we use it, who we share it with, and how you can exercise your rights as a registered player on the gbbaji platform.
Last Updated: January 2026
Language: English | Jurisdiction: Bangladesh
By using the gbbaji platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of the gbbaji platform immediately.
This Privacy Policy applies to all products and services provided by gbbaji, accessible at gbbaji.org. It governs how gbbaji collects, processes, stores, shares, and protects the personal data of individuals who access or use the platform, whether as registered players or anonymous visitors.
gbbaji is committed to handling all personal data responsibly, transparently, and in a manner consistent with applicable data protection principles. We do not sell, rent, or trade personal data to third-party marketers under any circumstances. Data collected by gbbaji is used exclusively for the purposes described in this Privacy Policy.
This policy should be read alongside gbbaji's Terms & Conditions and Responsible Gaming Policy, both of which form part of the overall agreement between gbbaji and the player.
This Privacy Policy applies to players based in Bangladesh and all other jurisdictions from which gbbaji accepts registrations. References to "you" or "your" mean the individual accessing or using gbbaji's platform. References to "we", "us", or "gbbaji" mean the gbbaji platform operator.
gbbaji collects personal data that you provide directly to us, data generated through your use of the platform, and data received from third-party service providers. The categories of personal data we collect include:
| Category | Examples | Source |
|---|---|---|
| Identity Data | Full legal name, date of birth, national ID number, passport number | Provided by you at registration or KYC |
| Contact Data | Mobile number, email address, residential address | Provided by you at registration |
| Financial Data | bKash / Nagad / Rocket / Upay mobile wallet numbers, bank account details, transaction history | Provided by you during deposit/withdrawal |
| Account Data | Username, encrypted password, account balance, bonus balance, transaction log | Generated on account creation and use |
| Usage Data | Pages visited, games played, bets placed, session duration, click paths | Automatically collected via platform analytics |
| Technical Data | IP address, browser type, device type, operating system, screen resolution | Automatically collected via server logs and cookies |
| Verification Data | Copies of NID, passport, utility bills, payment method ownership proof | Submitted by you during KYC verification |
| Communications Data | Support ticket content, live chat transcripts, email correspondence | Generated through support interactions |
gbbaji does not knowingly collect special categories of sensitive personal data (such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data) except where strictly required by applicable law for identity verification purposes.
We collect personal data through the following means:
You provide data directly to gbbaji when you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, participate in a promotion, or submit a form on the platform.
When you access and use the gbbaji platform, technical and usage data is collected automatically via server logs, cookies, pixels, and similar technologies. This includes your IP address, device identifiers, browser fingerprint, session timing, and navigation patterns. See Section 8 (Cookies & Tracking) for full details.
gbbaji may receive personal data about you from third-party sources, including:
gbbaji uses personal data only for legitimate, specified purposes. The table below sets out each purpose for which we use your data and the corresponding legal basis for that processing:
| Purpose | Data Categories Used |
|---|---|
| Account registration and management | Identity, Contact, Account |
| Identity and age verification (KYC) | Identity, Verification |
| Processing deposits and withdrawals | Financial, Account |
| Providing platform features and game access | Account, Usage |
| Fraud detection and prevention | Identity, Financial, Technical, Usage |
| Anti-money laundering (AML) compliance | Identity, Financial, Verification |
| Responsible gaming monitoring | Account, Usage, Communications |
| Customer support and dispute resolution | Identity, Account, Communications |
| Platform improvement and analytics | Usage, Technical |
| Sending account and security notifications | Contact, Account |
| Promotional communications (where opted in) | Contact, Account, Usage |
gbbaji will never use your personal data for automated individual decision-making that produces legal or similarly significant effects without providing you the opportunity to request human review.
gbbaji processes personal data on the following legal bases, depending on the purpose of processing:
gbbaji does not sell, rent, or trade your personal data to third-party marketing companies, data brokers, or advertising networks. Period.
gbbaji shares personal data only in the circumstances described below, and only to the minimum extent necessary for each purpose:
gbbaji engages trusted third-party service providers who process personal data on our behalf under strict contractual data processing agreements. These include identity verification providers, payment processors, cloud hosting providers, customer support platform providers, and cybersecurity vendors. All such providers are contractually prohibited from using your data for any purpose other than the specific service they provide to gbbaji.
Game providers — including Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, and Spribe — receive limited session data (player ID, stake amounts, game outcome records) necessary for game delivery, real-time bet settlement, and dispute resolution. These providers do not receive your full identity or financial data unless a specific dispute investigation requires it.
gbbaji may disclose personal data to law enforcement agencies, regulatory authorities, or courts where required or permitted by applicable law, including in response to lawful requests related to fraud, money laundering, or other criminal investigations. gbbaji will, where legally permissible, notify affected players of any such disclosure.
Where a player has self-excluded through gbbaji's responsible gaming programme, limited identifying data may be shared with third-party self-exclusion scheme operators solely to enforce the exclusion and prevent re-registration under different credentials.
In the event of a merger, acquisition, or sale of all or part of gbbaji's business, personal data held by gbbaji may be transferred to the acquiring entity. Affected players will be notified in advance of any such transfer and of any material change to data processing arrangements.
All financial transactions on the gbbaji platform — including deposits via bKash, Nagad, Rocket, Upay, Visa, Mastercard, and participating Bangladesh banks — are processed through certified payment gateways that operate under their own security standards and privacy policies.
gbbaji does not store full card numbers, CVV codes, or complete mobile banking PINs on its own servers. Payment method data retained by gbbaji is limited to the information necessary to verify payment method ownership, process withdrawal requests to the correct account, and comply with AML record- keeping requirements — for example, the last four digits of a card number, or a partially masked mobile wallet number.
Players are required to use payment methods registered in their own name. Payment data submitted during KYC that proves payment method ownership is stored securely for the duration of the account relationship and for the mandatory retention period thereafter.
The gbbaji platform uses cookies and similar tracking technologies to ensure the platform functions correctly, to keep you securely logged in, and to collect analytics data that helps us improve the player experience. The categories of cookies we use are as follows:
| Cookie Type | Purpose | Consent Required |
|---|---|---|
| Strictly Necessary | Session management, authentication, security token storage, fraud prevention signals | No — essential for platform operation |
| Functional | Remembering your language preference, display settings, and responsible gaming tool configurations | No — necessary for personalised functionality |
| Analytics | Aggregated, anonymised usage data used to understand player behaviour and improve platform design | Yes — requires opt-in consent |
| Marketing | Tracking promotional campaign performance and personalising bonus offers to your play history | Yes — requires opt-in consent |
You can manage your cookie preferences at any time via the cookie settings panel accessible from the platform footer. Withdrawing consent for analytics or marketing cookies will not affect your ability to use core platform features. Please note that disabling strictly necessary cookies may impair platform functionality and prevent you from logging in securely.
gbbaji retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The general retention periods applied by gbbaji are as follows:
When retention periods expire, personal data is securely deleted or anonymised so that it can no longer be associated with any individual. Anonymised aggregated data may be retained indefinitely for statistical and analytical purposes.
gbbaji implements a range of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:
In the event of a data breach that is likely to result in a risk to the rights and freedoms of affected players, gbbaji will notify affected individuals without undue delay and take all reasonable steps to mitigate the impact of the breach.
While gbbaji takes all reasonable precautions, no internet-based platform can guarantee absolute security. Players are also responsible for maintaining the security of their own account credentials. We strongly recommend enabling 2FA on your gbbaji account and using a strong, unique password.
As a player whose personal data is processed by gbbaji, you have the following rights in relation to your data:
| Right | Description |
|---|---|
| Right of Access | You may request a copy of all personal data gbbaji holds about you, together with information about how it is used and shared. |
| Right to Rectification | You may request correction of any inaccurate or incomplete personal data held on your account. |
| Right to Erasure | You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to overriding legal retention obligations. |
| Right to Restrict Processing | You may request that gbbaji restrict the processing of your data in certain circumstances, for example while a rectification request is being assessed. |
| Right to Data Portability | You may request that gbbaji provide your personal data in a structured, machine-readable format so that you can transfer it to another service. |
| Right to Object | You may object to processing carried out on the basis of legitimate interests, including direct marketing, at any time. |
| Right to Withdraw Consent | Where processing is based on your consent (e.g., marketing emails), you may withdraw that consent at any time without affecting the lawfulness of prior processing. |
To exercise any of the above rights, please contact gbbaji's support team at [email protected]. gbbaji will respond to all verified data rights requests within thirty (30) days. In some cases — for example where a request is complex or we receive a high volume of requests — the response period may be extended by a further sixty (60) days, in which case you will be notified.
gbbaji may need to verify your identity before processing a data rights request to ensure that personal data is not disclosed to or amended by an unauthorised individual.
The gbbaji platform is strictly for adults aged 18 and above. We do not knowingly collect personal data from persons under the age of 18.
gbbaji does not knowingly register, solicit data from, or market to individuals under 18 years of age. Age verification checks are performed at registration and at first withdrawal as part of the KYC process. If gbbaji becomes aware that personal data has been collected from a person under 18, that data will be deleted immediately and the associated account will be permanently closed.
If you are a parent or guardian and believe that a minor has registered on the gbbaji platform or provided personal data to gbbaji, please contact us immediately at [email protected] so that appropriate action can be taken without delay.
The gbbaji platform may contain references to third-party services including payment providers (bKash, Nagad, Rocket, Upay), game studios, and other partners. Where interaction with a third-party service involves navigating to that party's own platform or website, gbbaji's Privacy Policy does not apply to data collected by that third party.
gbbaji is not responsible for the privacy practices of third-party platforms. We encourage players to review the privacy policies of any third-party service they interact with in connection with their gbbaji account.
gbbaji reserves the right to update or revise this Privacy Policy at any time. Where changes are material — for example, where we introduce a new category of data processing or a new third-party sharing arrangement — gbbaji will notify registered players via the platform or by email prior to the changes taking effect.
The "Last Updated" date at the top of this page reflects the date of the most recent revision. Continued use of the gbbaji platform following the publication of an updated Privacy Policy constitutes acceptance of that updated policy. It is your responsibility to review this page periodically.
If you have any questions, concerns, or requests relating to this Privacy Policy or to gbbaji's handling of your personal data, please contact the gbbaji data and privacy support team:
All privacy-related correspondence should be directed to the above email address with the subject line "Privacy Request" to ensure it is routed to the appropriate team promptly.
Six core commitments that define how gbbaji approaches player data privacy across every part of the platform.
Every connection between your device and the gbbaji platform is protected by SSL/TLS encryption. Your login credentials, payment details, and personal data travel encrypted at all times — making interception by third parties effectively impossible.
gbbaji does not sell, rent, or trade your personal data to marketing companies, data brokers, or advertising networks. Your data is used solely for the purposes described in this Privacy Policy — nothing more. This commitment is absolute and applies to all player data regardless of account status.
Identity verification at gbbaji collects only the data genuinely necessary to confirm your age and identity. KYC documents are stored in encrypted form, accessed only by authorised personnel, and deleted when retention periods expire.
You have the right to access, correct, restrict, export, or request deletion of the personal data gbbaji holds about you. Submit a request any time to [email protected] and our privacy team will respond within 30 days.
Only strictly necessary and functional cookies run without your consent. Analytics and marketing cookies require explicit opt-in. You can adjust your cookie preferences at any time from the platform settings without losing access to core features.
gbbaji does not hold your data indefinitely. Clear retention schedules govern every data category — from transaction records retained five years for AML compliance to support logs deleted after three years. When time is up, data is securely deleted or anonymised.
Now that you understand how gbbaji protects your personal data, explore everything the platform has to offer — from live cricket betting and BPL markets to premium slots, fishing games, and a full live casino experience.