gebaji
Privacy Policy

1. Who We Are

gebaji is an online casino and sports betting platform operating at gebaji.app, designed specifically for adult players in Bangladesh. For the purposes of this Privacy Policy, gebaji acts as the data controller in respect of all personal data collected through the platform. References to "gebaji", "we", "us", or "our" in this document refer to the gebaji platform and its operating entity.

If you have any questions about how gebaji processes your personal data, or if you wish to exercise any of your data rights described in this policy, you may contact us at any time using the details provided in Section 13 of this document.

2. Data We Collect

gebaji collects personal data that you provide directly, data generated by your use of the platform, and limited data received from third-party service providers. The categories of data we collect include:

2.1 Identity and Contact Data

• Full name as provided during registration or identity verification
• Date of birth (used for age verification — players must be 18 or older)
• Mobile phone number registered with the platform
• Email address, where provided
• National ID card number or passport number (collected during verification checks only)
• Residential address in Bangladesh (collected during enhanced verification when required)

2.2 Financial Data

• Mobile wallet identifiers associated with bKash, Nagad, Rocket, or Upay accounts used for deposits and withdrawals
• Bank account details where bank transfer is used as a payment method
• Transaction records including deposit amounts, withdrawal amounts, dates, and reference numbers
• Account balance history and betting transaction records

2.3 Technical and Usage Data

• IP address at the time of login and during active platform sessions
• Device type, operating system, and browser version
• Session timestamps, login history, and session duration
• Pages visited, game titles accessed, and navigation patterns within the platform
• Betting history, game results, and wagering records

2.4 Communications Data

• Content of support messages, live chat transcripts, and email correspondence with the gebaji support team
• Feedback, complaints, and dispute records
• Preferences and settings you configure within your account dashboard

3. How We Collect Data

gebaji collects personal data through the following channels:

• Direct submission: Data you enter during account registration, profile updates, deposit and withdrawal requests, identity verification, and support communications.
• Automated collection: Technical data collected automatically when you access the gebaji platform, including IP address, device identifiers, cookies, and session logs.
• Third-party providers: Limited data received from payment processors (bKash, Nagad, Rocket, Upay) confirming the status of financial transactions. gebaji receives only transaction confirmation data — not full access to your mobile wallet account.
• Game providers: Session data passed between gebaji and certified game studios (Pragmatic Play, Evolution Gaming, Spribe, etc.) for the purposes of delivering and auditing game outcomes. This data does not include your personal identity information.

4. Why We Use Your Data

gebaji uses the personal data it collects for the following purposes:

Purpose	Data Used
Account registration and management	Name, mobile number, email, date of birth
Age and identity verification (18+ compliance)	Date of birth, national ID or passport, full name
Processing deposits and withdrawals	Mobile wallet identifiers, bank details, transaction records
Detecting and preventing fraud and bonus abuse	IP address, login history, transaction records, device data
Responsible gaming monitoring and tools	Betting history, session data, deposit limits, self-exclusion records
Customer support and dispute resolution	Support correspondence, account data, transaction records
Platform improvement and analytics	Usage data, navigation patterns, device and session data (anonymised where possible)
Promotional communications (where opted in)	Mobile number, email address, betting preferences

gebaji does not use personal data for automated decision-making that produces legal effects or similarly significant outcomes without human review. Responsible gaming flags and account restrictions triggered by usage patterns are reviewed by the gebaji support team before action is taken.

5. Legal Basis for Processing

gebaji processes personal data on one or more of the following legal bases depending on the specific purpose:

• Contractual necessity: Processing required to fulfil the Terms & Conditions agreement between gebaji and the player — including account management, payment processing, and game delivery.
• Legal obligation: Processing required to comply with applicable law, including age verification, anti-money laundering checks, and responsible gaming obligations.
• Legitimate interests: Processing carried out for gebaji's legitimate business interests, including fraud prevention, platform security, and platform analytics, where those interests are not overridden by your data protection rights.
• Consent: Processing based on your explicit, freely given consent — primarily for the sending of optional promotional communications. You may withdraw consent at any time by contacting support or adjusting your notification preferences in your account dashboard.

6. Data Sharing and Disclosure

gebaji does not sell, rent, or trade your personal data to any third party for marketing or commercial purposes. We may share limited personal data with the following categories of third parties, strictly as necessary for the purposes described in this policy:

6.1 Payment Service Providers

When you make a deposit or withdrawal on gebaji using bKash, Nagad, Rocket, Upay, or a bank transfer service, the relevant payment provider receives only the data necessary to process your transaction. gebaji does not share your full account profile or gaming history with payment providers.

6.2 Game Content Providers

Certified game studios and software providers whose games are accessible on the gebaji platform receive session-level technical data necessary for game delivery and outcome certification. This data does not include your full name, national ID, or financial account details.

6.3 Identity Verification Services

Where enhanced identity verification is required, gebaji may use a trusted third-party verification service to confirm a player's identity against their submitted documentation. Such services are bound by strict confidentiality and data processing agreements and may not use your data for any purpose other than completing the verification request.

6.4 Legal and Regulatory Disclosure

gebaji may disclose personal data to law enforcement agencies, regulatory authorities, or other competent bodies where required to do so by applicable law, court order, or in connection with the investigation of suspected fraud, money laundering, or other criminal activity. gebaji will not notify a player of such disclosure where doing so is prohibited by law or would compromise an ongoing investigation.

6.5 Business Transfers

In the event that gebaji undergoes a merger, acquisition, or transfer of its business assets, personal data held by gebaji may be transferred to the acquiring entity as part of that transaction. Affected players will be notified in advance where required by applicable law, and the acquiring entity will be bound by the terms of this Privacy Policy in respect of existing player data.

7. Cookies and Tracking

gebaji uses cookies and similar tracking technologies to operate the platform, remember your preferences, maintain your login session, and analyse how the platform is used. The following categories of cookies are used on gebaji.app:

• Strictly necessary cookies: Required for the platform to function. These include session authentication cookies that keep you logged in during your visit. They cannot be disabled without affecting core platform functionality.
• Functional cookies: Used to remember your preferences and settings, such as your preferred language and deposit method, so that you do not need to re-enter them on each visit.
• Analytics cookies: Used to collect anonymised data about how visitors navigate the platform, which pages are most visited, and how long sessions last. This information is used exclusively to improve the gebaji platform experience.
• Security cookies: Used to detect and prevent fraudulent sessions, bot activity, and other suspicious behaviour. These cookies help protect your account and the integrity of the platform.

You may configure your browser settings to block or delete cookies at any time. Please note that disabling strictly necessary cookies may prevent you from logging into your gebaji account or accessing certain platform features. gebaji does not use third-party advertising cookies or behavioural tracking cookies for cross-site advertising purposes.

8. Data Retention

gebaji retains personal data for as long as is necessary to fulfil the purposes described in this policy, or as required by applicable law. The following retention periods apply as a general guide:

• Active account data: Retained for the duration of the player's active account relationship with gebaji, plus a minimum of 5 years following account closure to meet anti-money laundering record-keeping requirements.
• Transaction records: Financial transaction data is retained for a minimum of 5 years from the date of the transaction in accordance with standard financial record-keeping obligations.
• Identity verification documents: Copies of identity documents submitted during verification are retained for the period required by applicable law, and deleted securely thereafter.
• Support correspondence: Records of support interactions are retained for 3 years from the date of the last interaction, or longer where the interaction relates to an unresolved dispute or legal matter.
• Analytics data: Anonymised usage data used for platform analytics may be retained indefinitely, as it cannot be linked back to any individual player once anonymised.

When the applicable retention period has elapsed, personal data is securely deleted or irreversibly anonymised. Players may request early deletion of their data subject to the conditions set out in Section 10 of this policy.

9. Data Security

gebaji implements a range of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, or alteration. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the gebaji platform.
• Encryption of sensitive data fields — including identity document data and financial account identifiers — at rest in the gebaji database.
• Role-based access controls limiting internal access to personal data to staff with a legitimate operational need.
• Regular security assessments and vulnerability testing of the gebaji platform and infrastructure.
• Audit logging of all access to sensitive player records, with automated alerts for anomalous access patterns.
• Secure data destruction procedures for physical and digital records at the end of their retention period.

While gebaji takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security against all possible threats. You are responsible for maintaining the security of your gebaji account credentials. If you believe your account has been compromised, contact gebaji support immediately at [email protected].

10. Your Rights

As a player on the gebaji platform, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact gebaji support at [email protected] with a clear description of your request and sufficient information to verify your identity.

• Right of access: You may request a copy of the personal data gebaji holds about you. We will respond to verified access requests within 30 days.
• Right to rectification: If any personal data held about you is inaccurate or incomplete, you have the right to request that it be corrected. Minor account details (such as contact number or email address) can be updated directly within your account dashboard.
• Right to erasure: You may request that gebaji delete your personal data. This right is subject to certain limitations — gebaji may be required to retain certain data to comply with legal obligations, resolve disputes, or enforce its Terms & Conditions. Where deletion is not possible in full, gebaji will explain the reasons and delete what it is permitted to delete.
• Right to restrict processing: You may request that gebaji restrict the processing of your data in certain circumstances — for example, while the accuracy of data is being contested, or while an objection to processing is being considered.
• Right to data portability: Where processing is based on your consent or on a contract, you may request that gebaji provide your personal data in a structured, commonly used, machine-readable format.
• Right to object: You may object at any time to the processing of your personal data for direct marketing purposes. You may also object to processing carried out on the basis of legitimate interests, though gebaji may continue processing where it can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent (for example, receiving promotional communications), you may withdraw that consent at any time without affecting the lawfulness of processing that took place before the withdrawal.

gebaji will acknowledge all data rights requests within 5 business days of receipt and will aim to fulfil verified requests within 30 calendar days. Complex requests may require additional time; in such cases, gebaji will notify you of the extended timeline and the reason for it.

11. Children's Privacy

The gebaji platform is strictly for adults aged 18 and above. gebaji does not knowingly collect personal data from individuals under the age of 18. Age verification is a mandatory step during the gebaji account registration process, and enhanced verification may be required at any time during a player's account lifetime.

If gebaji becomes aware that personal data has been collected from a person under the age of 18, that data will be deleted immediately, the associated account will be closed, and any funds held in that account will be handled in accordance with gebaji's underage gambling policy as set out in the Terms & Conditions. If you believe that a minor has registered an account on gebaji, please contact [email protected] immediately.

12. Changes to This Policy

gebaji reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the features of the platform. When material changes are made — particularly changes that affect how your personal data is used or shared — gebaji will notify registered players via their registered mobile number or email address at least 7 days before the revised policy takes effect.

For minor or administrative changes that do not materially affect your rights, the updated policy will be published on this page with a revised effective date. The effective date displayed at the top of this document always reflects the most current version of the policy. We encourage you to review this page periodically to stay informed about how gebaji protects your data.

Continued use of the gebaji platform after the effective date of any revised Privacy Policy constitutes your acknowledgement of the updated terms. If you do not agree with the revised policy, you must stop using the platform and may close your account by contacting support.

13. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way gebaji handles your personal data, please contact our support team. We are available 24 hours a day, 7 days a week, and aim to respond to all privacy-related enquiries within 24 hours Bangladesh Standard Time (UTC+6).

For requests relating to data deletion, data access, or the exercise of any other data rights listed in Section 10, please clearly state the nature of your request in the subject line of your message to help our team process it as efficiently as possible.