Privacy Policy – gbbaje Data Practices

1 Introduction

gbbaje ("we", "us", "our", "the Platform") is committed to protecting the personal information of all individuals who visit, register on, or interact with the gbbaje platform at gbbaje.net. This Privacy Policy sets out in clear and unambiguous terms the categories of personal data we collect, the purposes for which that data is processed, the legal grounds on which processing is carried out, how long data is retained, and the rights available to you as a data subject.

By registering an account on gbbaje or by continuing to use the platform after the date on which this policy takes effect, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this policy, you should discontinue your use of the platform and may request account closure by contacting our support team.

This policy applies to all data collected through gbbaje.net, including data collected during account registration, during active gameplay and sports betting sessions, through payment processing flows, and through any correspondence you initiate with the gbbaje support team. It does not govern the data practices of third-party websites that may be linked from the platform, which have their own independent privacy policies.

2 Personal Data We Collect

gbbaje collects personal data in several ways: directly from you when you register an account or complete identity verification, automatically when you interact with the platform, and from third-party payment providers when you make a deposit or withdrawal. The categories of data we collect are set out in the table below.

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data, or health information unless it is specifically required for responsible gaming purposes (for example, where a player discloses a gambling problem and we record this to support self-exclusion processing). Any such sensitive data is handled with additional safeguards.

3 How We Use Your Personal Data

gbbaje processes personal data only for the specific, legitimate purposes listed below. We do not process your data in ways that are incompatible with the purposes for which it was originally collected.

• Account Management: To create, maintain, and administer your gbbaje account, including storing your login credentials in encrypted form and processing account settings changes.
• Identity Verification (KYC): To verify that you are who you say you are, that you meet the minimum age requirement of 18 years, and that your payment methods belong to you. KYC verification is a mandatory step for processing withdrawals.
• Payment Processing: To facilitate deposits and withdrawals via bKash, Nagad, Rocket, Upay, and supported bank transfer partners. Financial data is shared with payment providers strictly on a need-to-know basis to complete the transaction.
• Fraud Prevention and Security: To detect and prevent fraudulent activity, money laundering, account takeover attempts, and other security threats. This includes analysing login patterns, transaction behaviour , device fingerprinting, and IP address checks.
• Responsible Gaming: To monitor gameplay patterns that may indicate problem gambling behaviour, to enforce deposit limits and self-exclusion requests, and to provide appropriate interventions where a player's activity suggests potential harm.
• Customer Support: To respond to queries, resolve disputes, process complaints, and maintain records of communications for quality assurance and compliance purposes.
• Legal and Regulatory Compliance: To comply with applicable international gaming regulations, anti-money laundering obligations, and any other legal requirements to which gbbaje is subject in the jurisdictions where it operates.
• Platform Improvement: To analyse aggregated, anonymised usage data in order to improve the functionality, performance, and user experience of the gbbaje platform.
• Marketing Communications: To send promotional offers, bonus notifications, and platform updates to players who have opted in to receive such communications. See Section 11 for details on how to opt out.

4 Legal Basis for Processing

gbbaje processes personal data only where a valid legal basis exists for doing so. The legal bases we rely on are as follows:

• Contractual Necessity: Processing your identity data, contact data, and financial data is necessary to fulfil the contract between you and gbbaje — specifically, to operate your account, process deposits and withdrawals, and deliver gaming services.
• Legal Obligation: Certain processing activities, including identity verification and transaction monitoring for anti-money laundering purposes, are carried out to comply with legal requirements applicable to internationally operated gaming platforms.
• Legitimate Interests: gbbaje processes technical and usage data on the basis of its legitimate interests in maintaining platform security, preventing fraud, improving its services, and managing business risk. We balance these interests against your privacy rights and will not process data on this basis where your interests override ours.
• Consent: Where we send you direct marketing communications, we rely on your prior consent. You may withdraw this consent at any time by following the unsubscribe instructions in any marketing email or by contacting [email protected].

5 Data Sharing and Third Parties

gbbaje does not sell, rent, or trade your personal data to any third party for commercial purposes. We share personal data only with the categories of recipients described below, and only to the extent strictly necessary for the stated purpose.

• Payment Service Providers: We share the minimum necessary financial data with payment providers including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, and Sonali Bank in order to process your deposit and withdrawal requests. These providers operate under their own privacy policies and are contractually required to handle your data securely.
• Identity Verification Partners: We may use third-party KYC service providers to assist with the verification of identity documents. These partners process document images and extracted data under strict confidentiality agreements and are not permitted to use your data for any purpose other than verification.
• Game Software Providers: Game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive limited technical data (such as a pseudonymous player identifier and session token) necessary to deliver game content through the gbbaje platform. These providers do not receive your full identity or financial data.
• Law Enforcement and Regulatory Bodies: We may disclose personal data to law enforcement agencies, regulatory authorities, or other government bodies where we are legally required to do so, or where disclosure is necessary to prevent fraud, money laundering, or other criminal activity.
• Professional Advisers: We may share data with our legal, financial, and technical advisers on a strictly confidential basis where necessary to protect gbbaje's legal rights or comply with its obligations.

All third parties with whom gbbaje shares personal data are subject to contractual data protection obligations consistent with our own standards. We conduct due diligence on our third-party partners and require them to implement appropriate technical and organisational security measures.

6 Cookies and Tracking Technologies

gbbaje uses cookies and similar tracking technologies on gbbaje.net to ensure the platform functions correctly, to maintain your session state while you are logged in, and to collect aggregated analytics data that helps us understand how players interact with the platform.

Essential and security cookies are strictly necessary for the platform to operate and cannot be disabled without impairing platform functionality. Analytics and preference cookies may be managed through your browser settings. Most modern browsers allow you to block or delete cookies; however, disabling certain cookies may affect your ability to log in or use specific platform features.

gbbaje does not use third-party advertising cookies and does not participate in cross-site behavioural advertising networks. We do not place retargeting pixels from social media platforms on gbbaje.net.

7 Data Retention

gbbaje retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or regulatory reporting requirements that apply to gbbaje as an internationally operated gaming platform.

The retention periods we apply to the main categories of personal data are as follows:

• Account and Identity Data: Retained for the duration of your active account plus a minimum of five (5) years following account closure, in compliance with standard record-keeping obligations applicable to gaming platforms.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of the transaction in accordance with anti-money laundering record-keeping requirements.
• KYC Verification Documents: Retained for the duration of account activity plus five (5) years after the account is closed. Copies of identity documents are stored in encrypted form and access is restricted to authorised compliance personnel.
• Support Communications: Retained for three (3) years from the date of the most recent communication in the relevant ticket or thread, unless the communication relates to an ongoing dispute or legal matter, in which case it is retained until the matter is fully resolved.
• Technical and Usage Logs: Retained for up to twelve (12) months in identifiable form, after which logs are anonymised or deleted. Anonymised aggregated data may be retained indefinitely for analytical purposes.

8 Data Security

gbbaje implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Our security infrastructure includes the following controls:

• Encryption in Transit: All data transmitted between your browser or device and the gbbaje servers is encrypted using 256-bit Transport Layer Security (TLS). This applies to all pages of gbbaje.net, including account login, payment flows, and support interactions.
• Encryption at Rest: Sensitive data fields including passwords (stored as salted hashes), identity document copies, and financial account details are encrypted at rest in our database infrastructure.
• Access Controls: Access to personal data within gbbaje's internal systems is governed by role-based access controls. Only personnel with a specific operational need to access a given category of data are permitted to do so. Access logs are maintained and reviewed regularly.
• Security Monitoring: gbbaje operates continuous monitoring of its network infrastructure to detect intrusion attempts, unusual traffic patterns, and other indicators of potential compromise. Security incidents are escalated and managed in accordance with a documented incident response procedure.
• Vendor Security: All third-party service providers who process personal data on behalf of gbbaje are assessed for their security posture prior to engagement and are required to maintain security standards consistent with our own under the terms of their data processing agreements.

9 Your Privacy Rights

As a registered player on the gbbaje platform, you have the following rights with respect to the personal data we hold about you. To exercise any of these rights, please contact us at [email protected] with the subject line "Data Rights Request" and include your registered username and the specific right you wish to exercise.

• Right of Access: You have the right to request a copy of the personal data we hold about you, together with information about how and why it is being processed. We will respond to access requests within thirty (30) days.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update certain details directly through your account settings without contacting support.
• Right to Erasure: You have the right to request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where no other legal basis for retention applies. This right is subject to any overriding legal obligations to retain the data.
• Right to Restrict Processing: You may request that we restrict the processing of your personal data in certain circumstances, for example while a dispute about the accuracy of the data is being resolved.
• Right to Data Portability: Where processing is based on your consent or on a contractual basis, you have the right to receive a copy of the personal data you provided to us in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object at any time to the processing of your personal data where that processing is based on legitimate interests. You also have an unconditional right to object to the processing of your data for direct marketing purposes.

We will respond to all data rights requests within thirty (30) days of receipt. In complex cases, we may extend this period by a further two months, in which case we will inform you of the extension within the initial thirty-day period. We will not charge a fee for handling data rights requests unless a request is manifestly unfounded or excessive, in which case we may charge a reasonable administrative fee.

10 Children's Privacy

The gbbaje platform is strictly intended for adults aged 18 years and above. We do not knowingly collect, store, or process personal data relating to individuals under the age of 18. Age verification is a mandatory step in the gbbaje account registration and KYC process, and the platform employs technical controls to identify and reject registration attempts by persons who appear to be under the minimum age.

If gbbaje becomes aware that personal data relating to a person under the age of 18 has been collected — whether through an incomplete age verification process or any other means — we will take immediate steps to delete that data, close the associated account, and return any deposited funds to the payment source where technically feasible. If you believe that a minor has registered an account on gbbaje, please notify us immediately at [email protected] so that the matter can be investigated and resolved promptly.

11 Marketing Communications

gbbaje may send you promotional emails, bonus offer notifications, and other marketing communications if you opted in to receive them during the registration process or subsequently through your account notification settings. We send marketing communications only to players who have given their prior, informed consent. We do not send unsolicited marketing messages.

Each marketing email sent by gbbaje includes a clearly visible unsubscribe link that allows you to opt out of future marketing communications with a single click. Alternatively, you may withdraw your consent to receive marketing communications at any time by updating your notification preferences in your account settings or by contacting [email protected]. Once your opt-out request has been processed, you will no longer receive promotional emails from gbbaje. Note that transactional and account-related communications — such as deposit confirmation, withdrawal notification, and security alerts — are not marketing communications and will continue to be sent regardless of your marketing opt-out status.

12 Updates to This Privacy Policy

gbbaje reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable law, or changes to the structure of the gbbaje platform. When material changes are made to this policy, the "Last updated" date displayed at the top of this page will be revised accordingly. Where the nature of a change is significant and directly affects the way in which we process your personal data, we will also notify registered players by email, with a summary of the key changes, prior to the revised policy taking effect.

We encourage you to review this Privacy Policy periodically to remain informed about how gbbaje handles your personal data. Your continued use of the platform following the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you disagree with any changes to this policy, you should discontinue use of the platform and may request account closure by contacting [email protected].

This Privacy Policy was last reviewed and approved on 1 January 2026. All previous versions of the gbbaje Privacy Policy are superseded by this document.