gbaj Privacy Policy

About This Policy

gbaj ("we", "us", "our") is the operator of the online gaming platform accessible at gbaj.vu. This Privacy Policy applies to all users who access or register on the gbaj platform, whether via mobile browser, desktop browser, or any other access method. It governs the collection, storage, processing and use of personal data in connection with the Services.

By registering an account or using the Services, you acknowledge that you have read and understood this Privacy Policy and you consent to the processing of your personal data as described herein. If you do not agree to this Privacy Policy, please do not use the gbaj platform. This Privacy Policy should be read alongside our Terms and Conditions, available at /terms-conditions.

1. Information We Collect

gbaj collects personal data through several channels — directly from you when you register and use the platform, automatically through your device and browsing behaviour, and from trusted third-party partners. The categories of personal data we may collect include:

• Identity data: full name, date of birth, national identification number or passport number (collected during identity verification)
• Contact data: mobile phone number, email address, and the city or division of residence within Bangladesh (e.g. Dhaka, Chittagong, Sylhet, Khulna, Rajshahi)
• Financial data: payment method details (bKash account number, Nagad account number, Rocket account number, Upay number, or masked card number for Visa/Mastercard transactions), transaction history, deposit amounts and withdrawal records
• Technical data: IP address, device type, operating system, browser type and version, screen resolution, session duration, pages visited, referring URLs, and cookie identifiers
• Behavioural and gaming data: game history, bet amounts, win/loss records, session frequency, bonus usage, responsible gaming tool activations, and support communications

2. How We Use Your Information

gbaj uses the personal data we collect only for the purposes described in this policy. We do not use personal data for any purpose that is incompatible with the purpose for which it was originally collected. Our primary uses are:

3. Legal Basis for Processing

gbaj processes personal data only where it has a valid legal basis to do so. The legal bases we rely on are:

• Contractual necessity: processing that is required to perform our contract with you — including account creation, payment processing, game access, and withdrawal handling
• Legal obligation: processing required for us to comply with applicable AML regulations, age verification requirements, and financial record-keeping obligations
• Legitimate interests: processing carried out in pursuit of gbaj's legitimate business interests — including fraud prevention, platform security, responsible gaming monitoring, and product analytics — where such interests are not overridden by your rights
• Consent: processing for direct marketing communications, where you have explicitly opted in — you may withdraw this consent at any time with immediate effect

4. Sharing of Personal Data

gbaj does not sell your personal data. We do not share your personal data with third parties for their own commercial marketing purposes. We may share personal data with the following categories of recipient only to the extent necessary:

• Payment service providers: bKash, Nagad, Rocket, Upay, and card network processors — solely for the purpose of completing financial transactions that you have initiated
• Game content providers: Evolution Gaming, Pragmatic Play, Ezugi, Spribe and other certified studios — who may receive session-level data to enable game delivery, enforce game-level limits, and maintain RNG certification records
• Identity verification and KYC service providers: specialist third-party verification agencies who process identity documents on gbaj's behalf to complete mandatory customer due diligence
• Regulatory and law enforcement authorities: where gbaj is legally required to disclose personal data in response to a court order, regulatory inquiry, or financial intelligence request — gbaj will always seek to notify you of such disclosures where legally permitted to do so

5. Cookies and Tracking Technologies

gbaj uses cookies and similar tracking technologies on its platform to enable core functionality and to improve your experience. The categories of cookies we use are:

• Strictly necessary cookies: essential for the platform to function — these cannot be disabled and include session authentication tokens, CSRF protection cookies, and load-balancing identifiers
• Functional cookies: used to remember your platform preferences, including language settings, display preferences and recent game history, so that you do not need to reconfigure these each session
• Analytics cookies: used to collect aggregated, anonymised data about how players interact with the gbaj platform — including pages visited, session length and navigation paths — to help us understand platform performance and prioritise improvements

You may manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the gbaj platform — for example, disabling functional cookies may require you to re-enter preferences on each visit. Strictly necessary cookies cannot be disabled without preventing the platform from operating.

6. Data Retention

gbaj retains personal data only for as long as is necessary for the purpose for which it was collected, or as required by applicable law. Our standard retention periods are: active account data is retained for the duration of your account plus a minimum of five years following account closure, to meet financial record-keeping and AML compliance requirements; transaction records are retained for a minimum of five years from the date of the transaction; identity verification documents are retained for a minimum of five years from the date of verification; marketing consent records are retained until consent is withdrawn plus three years.

When personal data is no longer required for its original purpose and no legal retention obligation applies, gbaj will securely delete or anonymise the data so that it can no longer be attributed to any individual player.

7. Data Security

gbaj implements industry-standard technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction or disclosure. Our security practices include: TLS/SSL encryption for all data transmitted between your device and the gbaj platform; encrypted storage of sensitive data at rest; access controls that limit personal data access to authorised personnel on a need-to-know basis; regular security assessments of platform infrastructure; and incident response procedures designed to detect and contain data breaches promptly.

While gbaj takes all reasonable steps to protect your personal data, no internet-based system can be guaranteed to be 100% secure. If you believe your account has been compromised — for example, if you notice unauthorised transactions or suspicious login activity — please contact the gbaj support team immediately at [email protected] so that we can take appropriate protective action, including suspending your account pending investigation.

8. Your Data Rights

As a gbaj player, you have the following rights in relation to your personal data. To exercise any of these rights, please contact us at [email protected]:

• Right of access: you may request a copy of the personal data gbaj holds about you, together with information about how it is being processed
• Right to rectification: if any personal data gbaj holds about you is inaccurate or incomplete, you have the right to request that it be corrected
• Right to erasure: in certain circumstances, you may request that gbaj delete personal data it holds about you — note that this right is subject to gbaj's legal retention obligations and may not apply where retention is required by law
• Right to restriction: you may request that gbaj restrict the processing of your personal data in certain circumstances, for example while a rectification request is under review
• Right to data portability: where processing is based on your consent or on a contract, and is carried out by automated means, you may request a copy of your data in a structured, machine-readable format
• Right to withdraw consent: where processing is based on your consent (for example, marketing communications), you may withdraw that consent at any time — withdrawal does not affect the lawfulness of processing carried out before the withdrawal

9. Children and Minors

The gbaj platform is strictly for adults aged 21 and above. gbaj does not knowingly collect personal data from any person under the age of 21. If we discover that personal data belonging to a person under 21 has been collected — whether as a result of a false declaration of age or any other reason — we will immediately close the relevant account, delete the associated personal data to the extent permitted by our legal retention obligations, and withhold any balance pending review. If you are a parent or guardian and believe that a minor has registered on the gbaj platform, please contact us immediately at [email protected].

10. Third-Party Links

The gbaj platform does not contain links to third-party websites for commercial or affiliate purposes. Where any reference to a third-party service (such as a payment provider) appears in platform content, gbaj is not responsible for the privacy practices or content of that third party. Players who independently navigate to third-party websites do so at their own risk and should review the applicable privacy policy of that third party before providing any personal information.

11. Changes to This Privacy Policy

gbaj reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable law, or changes in the structure of the gbaj platform. When we make material changes to this policy, we will update the "Last updated" date at the top of this page and, where the changes significantly affect your rights or our processing activities, we will notify registered players by email or in-platform notification prior to the changes taking effect. The most current version of this Privacy Policy is always accessible at /privacy-policy. Your continued use of the gbaj platform after any update constitutes your acceptance of the revised policy.

12. Contact Us

If you have questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a concern about how gbaj handles your personal data, please contact our support team in writing. We aim to respond to all privacy-related enquiries promptly and will always handle your request with care and in accordance with this policy.