fbajaa Privacy Policy

This Privacy Policy ("Policy") describes how fbajaa ("fbajaa", "we", "us", "our") collects, uses, stores, discloses, and otherwise processes personal data relating to individuals who visit the fbajaa website or register and use the fbajaa platform ("you", "Player", "User"). This Policy forms part of the fbajaa Terms and Conditions and should be read alongside them.

fbajaa is committed to protecting the privacy and security of every player's personal information. We operate in accordance with internationally recognised data protection principles and take all reasonable technical and organisational steps to safeguard your data. By creating a fbajaa account, you confirm that you have read and understood this Policy and consent to the processing of your personal data as described herein.

Full Privacy Policy

1.2 Registration data: When you create a fbajaa account, we collect your full name, date of birth, residential address, email address, and mobile phone number. This information is required to verify your identity, communicate with you, and maintain your account.

1.3 Identity verification (KYC) data: To comply with our Know Your Customer obligations, we may collect copies of government-issued identity documents such as your National Identity Card (NID), passport, or driving licence, together with a selfie or proof-of-address document. This data is used solely for the purpose of verifying your identity and age.

1.4 Financial data: When you make a deposit or withdrawal, we collect the mobile number or account identifier associated with your payment method (bKash, Nagad, Rocket, Upay, or bank account). We do not collect or store full mobile banking PINs or complete bank account passwords.

1.5 Usage and technical data: We automatically collect certain technical data when you access fbajaa, including your IP address, device type, operating system, browser type, session timestamps, pages visited, and in-platform activity such as game sessions and betting history. This data is used for platform security, fraud prevention, and service improvement.

1.6 Communications data: If you contact fbajaa's customer support team via email or live chat, we retain a record of that correspondence, including the content of your messages and any attachments, for quality assurance and dispute resolution purposes.

2.2 Where we rely on consent as the legal basis for processing, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal. Please note that certain processing activities are based on legal obligation and cannot be opted out of without closing your account.

1. Service delivery: To create and manage your fbajaa account, process your deposits and withdrawals in BDT, and provide access to the games and betting markets you have requested.
2. Identity and age verification: To confirm that you are 21 years of age or older and that you are who you claim to be, in accordance with our responsible gaming and KYC obligations.
3. Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, collusion, money laundering, and other unlawful activities on the platform. This includes automated screening of account activity and IP-level analysis.
4. Responsible gaming: To monitor your gaming patterns for signs of problem gambling, to enforce deposit limits or self-exclusion periods that you have set, and to flag accounts that may require intervention under our responsible gaming policy.
5. Communications: To send you account notifications, transaction confirmations, security alerts, and, where you have opted in, promotional communications about fbajaa offers and bonuses.
6. Legal and regulatory compliance: To fulfil our obligations under applicable laws, including responding to lawful requests from competent authorities.
7. Platform improvement: To analyse aggregated usage data (in anonymised form where possible) to improve the fbajaa platform, optimise the user experience, and develop new features.

4.2 Strictly necessary cookies are required for the platform to function. They enable core features such as maintaining your login session, remembering items in your game lobby, and ensuring secure transactions. These cookies cannot be disabled without significantly impairing your ability to use fbajaa.

4.3 Analytical cookies help fbajaa understand how players interact with the platform by collecting aggregated, anonymised data about page visits, session durations, and feature usage. This data is used solely to improve the fbajaa experience and is not shared with advertising networks.

4.4 Preference cookies remember choices you have made on the platform — such as your preferred language (English) and notification settings — so you do not need to re-enter them on every visit.

4.5 You may manage or disable non-essential cookies through your browser settings. Please note that disabling analytical or preference cookies may affect the quality of your experience on the platform. fbajaa does not use third-party advertising or behavioural targeting cookies.

5.2 Payment processors: To process your deposits and withdrawals, we share the minimum necessary payment data with our authorised payment partners, including bKash, Nagad, Rocket, Upay, and approved bank partners. These processors are contractually bound to use your data solely for the purpose of completing the relevant transaction and to maintain appropriate security standards.

5.3 Identity verification providers: Where required for KYC compliance, we may share your identity documents with certified third-party verification services. Such providers process your data under strict confidentiality obligations and are not permitted to use it for any other purpose.

5.4 Game technology providers: Third-party game studios such as Pragmatic Play, Evolution Gaming, Spribe, NetEnt, Ezugi, and Microgaming may receive your player identifier (not your full personal details) for the purpose of running game sessions and recording outcomes. These providers operate under their own privacy frameworks and are contractually restricted from using your identifier for any purpose beyond game provision.

5.5 Legal authorities: fbajaa may disclose personal data to law enforcement agencies, regulatory bodies, or other competent authorities when required to do so by applicable law, court order, or in connection with an investigation of suspected fraud, money laundering, or other criminal activity.

5.6 Business transfers: In the event that fbajaa undergoes a merger, acquisition, or sale of all or a substantial portion of its assets, your personal data may be transferred to the successor entity as part of that transaction. We will notify registered players of any such transfer and of any changes to this Policy that result from it.

1. Account and transaction records are retained for a minimum of seven years from the date your account is closed, in accordance with standard financial record-keeping requirements.
2. KYC and identity documents are retained for the duration of your account and for five years after account closure.
3. Support communications are retained for three years from the date of the last communication in a thread, unless the matter is subject to an ongoing dispute, in which case records are retained until the dispute is fully resolved.
4. Analytical and technical data (such as anonymised usage logs) may be retained indefinitely in aggregated, anonymised form for platform improvement purposes.

6.2 When retention periods expire, personal data is securely deleted or irreversibly anonymised. fbajaa maintains documented data disposal procedures and conducts periodic audits to ensure compliance with its retention schedule.

7.2 These measures include, but are not limited to: 256-bit SSL encryption for all data in transit; encryption of sensitive data at rest; access controls limiting data access to authorised personnel on a need-to-know basis; regular security assessments and penetration testing; and multi-factor authentication for internal administrative systems.

7.3 While fbajaa takes all reasonable steps to secure your data, no internet-based system can guarantee absolute security. You are responsible for keeping your fbajaa login credentials confidential and for notifying us immediately if you suspect your account has been compromised.

1. Right of access: You may request a copy of the personal data fbajaa holds about you. We will provide this information within a reasonable period, typically within 30 days of a verified request.
2. Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may also update certain account details directly through your fbajaa profile settings.
3. Right to erasure ("right to be forgotten"): You may request deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose for which it was collected. Note that this right is subject to overriding legal obligations; we may be required to retain certain data even after a deletion request.
4. Right to restrict processing: You may request that fbajaa restricts the processing of your personal data in certain circumstances, such as while a dispute about the accuracy of the data is being resolved.
5. Right to object: Where fbajaa processes your data on the basis of legitimate interests, you have the right to object to that processing. We will cease the processing unless we can demonstrate compelling legitimate grounds that override your interests.
6. Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time by contacting [email protected]. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

8.2 To exercise any of the rights listed above, please contact fbajaa's data team at [email protected], quoting your registered account email address and specifying the right you wish to exercise. fbajaa will respond within 30 days. We may ask for additional verification to confirm your identity before processing the request.