sbajee Privacy Policy

This Privacy Policy ("Policy") describes how sbajee ("sbajee", "we", "us", "our") collects, uses, stores, shares, and protects the personal data of users ("Player", "User", "you") who access and use the online gaming and sports betting platform operated at sbajee.bio and its associated mobile web application (collectively, the "Platform").

sbajee is committed to protecting your privacy and handling your personal data with transparency, integrity, and care. This Policy is intended to give you a clear understanding of our data practices so you can make informed decisions about how you use the Platform.

By registering an account on the Platform or by continuing to use the Platform after this Policy has been made available to you, you acknowledge that you have read and understood this Policy and that you consent to the collection and use of your personal data as described herein. If you do not agree with any part of this Policy, please stop using the Platform and contact us to request account closure.

This Policy should be read alongside our Terms & Conditions, which govern the overall relationship between you and sbajee. Where these two documents conflict, the Terms & Conditions shall take precedence.

sbajee collects personal data from you in three principal ways: data you provide directly, data collected automatically when you use the Platform, and data received from third parties involved in delivering our services.

Data You Provide Directly

• Registration data: Full name, date of birth, email address, mobile phone number (used as your primary identifier in Bangladesh), and a password you create.
• Verification documents: National Identification Card (NID), passport , birth certificate, or utility bill issued in Bangladesh, submitted when you complete identity verification.
• Financial data: bKash account number, Nagad account number, Rocket (Dutch-Bangla Bank) mobile banking number, Upay account number, or bank account details (account number, bank name, branch) used for deposits and withdrawals. We do not store full card numbers if card-based payments are offered.
• Communications: Any messages, complaints, or support requests you send to sbajee via email or our support channels.
• Responsible gaming preferences: Deposit limits, self-exclusion requests, cooling-off periods, and session reminders you configure through your account.

Data Collected Automatically

• Device and technical data: IP address, device type, operating system, browser type and version, screen resolution, and unique device identifiers.
• Usage data: Pages visited, games played, bets placed, session duration, click paths, and feature interactions within the Platform.
• Location data: General geographic location inferred from your IP address. We do not collect precise GPS location data.
• Cookie and tracking data: Information stored by cookies and similar technologies as described in Section 8 of this Policy.

Data Received from Third Parties

• Payment processors: Transaction confirmation data, payment status, and fraud-risk scores received from bKash, Nagad, Rocket, Upay, and banking partners when you make deposits or request withdrawals.
• Game providers: Game session outcomes, bet history, and round-level data shared by third-party game studios (including Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, Spribe) whose games are hosted on the Platform.
• Identity verification services: Confirmation of identity document authenticity from third-party KYC (Know Your Customer) service providers where we use them.

sbajee uses the personal data we collect for the following purposes:

sbajee does not sell your personal data to any third party. We may share your data with third parties only in the following circumstances:

• Payment service providers: bKash, Nagad, Rocket (Dutch-Bangla Bank), Upay, and partner banks receive the transaction-level data necessary to process your deposits and withdrawals. These providers operate under their own privacy policies and data processing agreements.
• Game studio providers: Third-party game studios (Pragmatic Play, Evolution Gaming, Ezugi, Spribe, NetEnt, Microgaming, and others) receive a session token and anonymised player identifier to facilitate game delivery. They do not receive your full name, phone number, or financial details.
• Identity verification providers: Where we use third-party KYC services, your identity documents and personal details are shared solely for the purpose of completing verification. Such providers are contractually bound to process your data only for verification purposes.
• IT and hosting infrastructure providers: The technical companies that host our servers and infrastructure may have incidental access to stored data as part of their service delivery. They are bound by data processing agreements and must not use your data for their own purposes.
• Legal and regulatory authorities: sbajee will disclose personal data when required to do so by a valid court order, lawful regulatory demand, or other legally binding obligation. We may also disclose data to prevent imminent harm or criminal activity where we consider it necessary and proportionate to do so.
• Business transfers: In the event of a merger, acquisition, or sale of all or substantially all of sbajee's assets, your personal data may be transferred to the acquiring entity, subject to the acquiring entity honouring the commitments made in this Policy.

In all cases where data is shared with third parties, we require adequate contractual protections to ensure your data is handled securely and in accordance with applicable standards.

sbajee retains your personal data for as long as is necessary to fulfil the purposes for which it was collected and to comply with applicable legal obligations. The following general retention periods apply:

• Account data: Retained for the duration of your account's active status and for a period of at least five years after account closure, to satisfy anti-money laundering record-keeping requirements.
• Transaction records: Retained for a minimum of five years following the date of each transaction.
• Identity verification documents: Retained for the period required by applicable KYC and AML obligations, typically five years after the end of the customer relationship.
• Customer support communications: Retained for three years from the date of the last communication, unless a dispute, legal claim, or regulatory investigation requires longer retention.
• Marketing preferences and consent records: Retained for the duration of the relationship and for one year following opt-out, as evidence of your preferences.

When data is no longer required, sbajee will delete or anonymise it securely. Anonymised aggregate data that cannot be used to identify you may be retained indefinitely for analytical and statistical purposes.

sbajee implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, loss, disclosure, alteration, and destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and sbajee's servers.
• Encryption of sensitive data fields (including financial account numbers and identity document data) at rest in our database systems.
• Access controls that restrict internal access to personal data on a strict need-to-know basis, with role-based permissions and audit logging.
• Regular internal security reviews and vulnerability assessments of our Platform infrastructure.
• Two-factor authentication (2FA) available for player accounts to add an additional layer of access security.

While sbajee takes reasonable and appropriate steps to protect your personal data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your own account credentials. If you believe your account has been compromised, please contact us immediately at [email protected].

As a player on the sbajee Platform, you have the following rights with respect to your personal data. To exercise any of these rights, please contact us at [email protected] with a clear description of your request. We will respond within a reasonable timeframe.

• Right of access: You have the right to request a copy of the personal data sbajee holds about you and to receive an explanation of how it is being used.
• Right to rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold about you. For certain data fields, you can update your information directly through your account dashboard.
• Right to erasure ("right to be forgotten"): You may request deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose for which it was collected. This right is subject to legal retention obligations, which may require sbajee to retain certain data even after account closure.
• Right to restriction of processing: You may request that sbajee limit the use of your personal data in certain circumstances, such as while a dispute is being investigated.
• Right to data portability: Where processing is based on your consent or contractual necessity, you may request that we provide your personal data in a structured, commonly used, and machine-readable format.
• Right to withdraw consent: Where sbajee processes your data on the basis of consent (such as for marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal.
• Right to object to marketing: You may opt out of receiving promotional communications from sbajee at any time by contacting support or updating your preferences in your account settings.

sbajee uses cookies and similar tracking technologies (collectively "cookies") to operate the Platform, remember your preferences, analyse usage patterns, and — where you have consented — deliver relevant promotional content. The types of cookies we use are described below.

You can manage or disable cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the Platform. For full details on the specific cookies in use, please contact us at [email protected].

The sbajee Platform is strictly intended for adults aged 21 and above. We do not knowingly collect personal data from individuals under the age of 21. If sbajee becomes aware that personal data has been collected from a minor, we will take immediate steps to delete that data and close the associated account.

If you are a parent or guardian and you believe that a minor in your care has registered an account on the Platform or submitted personal data without your knowledge, please contact us immediately at [email protected] and we will act promptly to address the situation.

The sbajee Platform integrates third-party game content delivered by studios including Pragmatic Play, Evolution Gaming, Ezugi, Spribe, NetEnt, and Microgaming. When you play games provided by these studios, your game session data is transmitted to their systems. Each studio operates its own data privacy practices. sbajee is not responsible for the privacy practices of third-party game providers, and we encourage you to review their respective privacy policies where relevant.

Similarly, payment service providers such as bKash, Nagad, and Rocket operate independently and process your financial data under their own terms and privacy policies once a transaction is initiated through their platforms. sbajee's responsibility is limited to the data we hold on our own systems.

sbajee reserves the right to update or amend this Privacy Policy at any time. When material changes are made, the "Last Updated" date at the top of this page will be revised. We may also notify you of significant changes via email or through a notice displayed on the Platform when you next log in.

Your continued use of the Platform after any revision to this Policy constitutes your acknowledgement of the updated terms. We encourage you to review this page periodically to stay informed about how sbajee protects your personal data.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way sbajee handles your personal data, please contact our support team. We aim to respond to all privacy-related enquiries within 48 hours Bangladesh Standard Time (BST, UTC+6).

Email: [email protected] (plain text — not a clickable link)

Please include "Privacy Request" in your message subject line, along with your registered username or phone number, so we can locate your account and respond efficiently. For responsible gaming or self-exclusion matters, please visit our Responsible Gaming page.