Your Privacy at rabaje

rabaje is committed to protecting the privacy and personal data of every player who registers with or visits our platform. We recognise that trust is foundational to any relationship between a player and an online gaming service, and we take our data protection responsibilities with the utmost seriousness.

This Privacy Policy applies to all personal data collected through the rabaje website at rabaje.com, through any mobile-optimised version of the site, through our customer support channels (email, live chat, and WhatsApp), and through any other interface operated under the rabaje brand name. It applies to registered account holders and to unregistered visitors who browse the platform without creating an account.

The terms "personal data" and "personal information" as used in this policy refer to any information that can identify you directly or indirectly as an individual — including but not limited to your name, date of birth, email address, phone number, physical address, payment account details, device identifiers, and usage history on the platform.

rabaje processes personal data for specific, legitimate purposes as described in this policy. We do not process data in ways that are incompatible with those purposes, and we do not retain data for longer than is necessary to fulfil the purpose for which it was collected or to meet applicable legal obligations.

This policy should be read in conjunction with our Terms & Conditions and our Responsible Gaming policy, both of which form part of the overall contractual and regulatory framework governing your use of the rabaje platform.

rabaje collects personal data through several distinct channels and for different purposes. The categories of data we may collect are described below.

Registration data. When you create a rabaje account, we collect your full legal name, date of birth, email address, mobile phone number, and residential address. This information is required to establish your identity, confirm that you meet the minimum age requirement of 18 years, and set up your account correctly.

Identity verification (KYC) data. To comply with anti-money laundering obligations and to protect our platform from fraud, we may request copies of government-issued identity documents such as a National Identity Card (NID), passport, or driving licence. We may also request proof of address in the form of a recent utility bill or bank statement. These documents are handled with the highest level of confidentiality.

Financial data. When you make a deposit or request a withdrawal, we collect data relating to the payment method used, including mobile financial service account references (for bKash, Nagad, Rocket, or Upay), card numbers (stored in truncated form only — we never store full card numbers on our systems), and transaction reference numbers. Full card data is processed exclusively by our certified payment partners and is never stored on rabaje servers.

Usage and activity data. We collect data about how you interact with the rabaje platform. This includes game history, bet amounts and outcomes, session timestamps, pages visited, features accessed, and navigation paths through the site. This data is used to improve the platform experience and, where relevant, to support responsible gaming monitoring.

Technical data. We automatically collect certain technical information when you access the platform, including your IP address, device type, operating system, browser type and version, screen resolution, and referring URL. This data helps us ensure platform compatibility, detect suspicious access patterns, and maintain security.

Communications data. If you contact our support team via live chat, email, or WhatsApp, we retain records of those communications. This allows us to maintain continuity of support and to review interactions if a complaint or dispute arises.

The table below summarises the primary data categories, the purpose of collection, and the legal basis on which rabaje processes that data:

rabaje uses the personal data we collect exclusively for the purposes described in this policy. We do not use your data in ways that you would not reasonably expect given the nature of the services we provide. The principal uses of your personal data are as follows:

• Account management: Creating and maintaining your account, verifying your identity and age, processing your deposits and withdrawals, and administering your bonus entitlements.
• Platform operation: Providing access to casino games, live dealer tables, sports betting markets, and all other services available through the rabaje platform.
• Compliance: Meeting our obligations under applicable anti-money laundering, counter-terrorism financing, and data protection laws. This may involve retaining certain records for mandated minimum periods even after your account has been closed.
• Fraud prevention and security: Monitoring account activity to detect and prevent fraudulent transactions, unauthorised access, and misuse of the platform. Automated systems and manual review processes both play a role in this.
• Responsible gaming: Monitoring gameplay patterns to identify potential indicators of problem gambling, applying any self-imposed limits or exclusions you have set, and where appropriate proactively contacting you with information about responsible gaming resources.
• Customer support: Responding to your queries, resolving complaints, and maintaining records of our communications with you.
• Platform improvement: Analysing aggregate usage data (in anonymised or pseudonymised form where possible) to identify areas where the platform experience can be enhanced, new features developed, or existing features optimised.
• Marketing communications: Sending you promotional offers, bonus notifications, and news about new games or features — but only if you have opted in to receive such communications. You may withdraw this consent at any time by contacting support or using the preference settings in your account dashboard.

rabaje does not use automated decision-making or profiling in ways that produce legal effects or similarly significant outcomes for individual users, except where required by our responsible gaming or anti-fraud systems. Where such automated processing occurs, you have the right to request human review of the decision.

rabaje does not sell your personal data to any third party. We share personal data only in the limited circumstances described below, and in every case we require that recipients handle your data with the same level of care and confidentiality that we apply ourselves.

Payment processors and financial partners. To process your deposits and withdrawals, we share relevant transaction data with our payment partners including the operators of bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, and City Bank. These partners process financial data under their own regulatory obligations and data protection frameworks.

Game providers and software partners. The casino games available on the rabaje platform are supplied by third-party game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi, among others. When you play a game, certain session data (such as player ID, bet amount, and session duration) is transmitted to the relevant game provider's systems. This data is used exclusively for the purpose of delivering the game and calculating outcomes fairly.

Identity verification and KYC providers. To fulfil our age verification and anti-money laundering obligations, we may use third-party identity verification services. These providers receive only the minimum data necessary to complete the verification check and are contractually prohibited from using that data for any other purpose.

Legal and regulatory authorities. rabaje may be required to disclose personal data to law enforcement agencies, regulatory bodies, or courts of competent jurisdiction in response to a valid legal request, court order, or regulatory requirement. We will notify you of any such disclosure where we are legally permitted to do so.

Business transfers. In the event that the rabaje business or any substantial part of it is acquired by, merged with, or transferred to another entity, personal data held by rabaje may form part of the transferred assets. In such circumstances, the acquiring entity would be bound by the privacy commitments set out in this policy, and we would notify registered users of any material change to how their data is processed.

Cookies are small text files placed on your device by a website when you visit it. rabaje uses cookies and similar technologies (such as local storage and session tokens) to make the platform function correctly, to remember your preferences, and to gather anonymised usage analytics.

Strictly necessary cookies are required for the platform to operate. They manage your login session, maintain your account authentication state, and ensure that security tokens function correctly. These cookies cannot be disabled without breaking core functionality.

Functional cookies remember your preferences such as your preferred language, display settings, and last-visited section of the platform. They improve the overall usability of your experience but are not essential to core function.

Analytics cookies help us understand how users navigate the platform in aggregate — which pages are visited most frequently, where users tend to exit, and how long typical sessions last. This data is used in anonymised form to guide platform development decisions. We do not use third-party advertising networks or cross-site tracking pixels.

You can manage cookie preferences through your browser settings. Most modern browsers allow you to block or delete cookies entirely; however, doing so may prevent certain features of the rabaje platform from functioning as intended. Session cookies are automatically deleted when you close your browser. Persistent cookies remain on your device for a defined period (typically 30 to 365 days depending on the cookie's purpose) unless you delete them manually.

The table below lists the primary cookie categories used on the rabaje platform:

rabaje implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures are reviewed and updated on a regular basis in line with evolving security standards and best practices.

Encryption in transit. All communication between your browser or device and the rabaje platform is encrypted using SSL/TLS protocols. This means that any data you submit — including login credentials, payment details, and personal information — is protected from interception during transmission.

Encryption at rest. Sensitive personal data stored on rabaje servers, including KYC document copies and financial records, is stored in encrypted form. Encryption keys are managed under strict access-control procedures.

Access controls. Access to personal data within rabaje's systems is restricted on a need-to-know basis. Staff members who do not require access to personal data as part of their role are not granted it. All access to personal data is logged and subject to regular audit review.

Fraud detection systems. Automated monitoring systems scan for unusual account activity patterns that may indicate account compromise, identity fraud, or payment fraud. Where suspicious activity is detected, the affected account may be temporarily suspended pending investigation, and you will be notified via your registered contact details.

Despite these measures, no online system can guarantee absolute security. If you suspect that your rabaje account has been accessed without your authorisation, please contact our support team immediately at [email protected]. You should also change your password immediately via the account settings panel.

Data retention. rabaje retains personal data only for as long as is necessary for the purpose it was collected, or as required by applicable law. As a general guide: active account data is retained for the duration of the account's existence plus a minimum of five years following closure, in compliance with standard financial record-keeping requirements. KYC documents are retained for the period specified by applicable anti-money laundering regulations. Communications and support records are typically retained for three years. Analytics data is anonymised or deleted after 12 months.

As a user of the rabaje platform, you hold a number of rights with respect to your personal data. rabaje is committed to honouring these rights promptly and transparently. To exercise any of the rights listed below, please contact our support team via live chat or at [email protected].

• Right of access. You have the right to request a copy of the personal data that rabaje holds about you. We will provide this information in a clear, structured format within a reasonable timeframe following receipt of a verified request.
• Right to rectification. If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update basic account information (such as your email address or phone number) directly through your account settings; for corrections to identity documents or KYC records, please contact support.
• Right to erasure. In certain circumstances, you have the right to request that we delete your personal data — for example, if the data is no longer necessary for the purpose for which it was collected, or if you withdraw your consent and there is no other legal basis for processing. Note that this right is subject to our legal obligations; certain records must be retained for compliance purposes even after a deletion request is received.
• Right to restrict processing. You may request that we restrict our processing of your personal data in certain circumstances — for example, while the accuracy of data is being contested, or while you await the outcome of an objection to processing.
• Right to data portability. Where data is processed on the basis of your consent or a contractual relationship and by automated means, you may request that we provide that data to you in a structured, machine-readable format.
• Right to object. You have the right to object to the processing of your personal data where that processing is based on rabaje's legitimate interests. You also have the absolute right to object to the processing of your data for direct marketing purposes, including any profiling related to marketing. We will stop processing your data for marketing purposes immediately upon receipt of such an objection.
• Right to withdraw consent. Where processing is based solely on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

We will endeavour to respond to all valid data subject requests within 30 calendar days of receipt. Where a request is complex or we receive a high volume of requests simultaneously, we may extend this period by a further 30 days, in which case we will notify you and explain the reason for the extension.

You will not be charged a fee for exercising your data rights in the normal course. However, if requests are manifestly unfounded or excessive — particularly where they are repetitive — rabaje reserves the right to charge a reasonable administrative fee or refuse to comply with the request, providing written reasons for the refusal.

rabaje reviews this Privacy Policy on a regular basis and may update it from time to time to reflect changes in our data processing practices, changes in applicable law, or improvements to the way we communicate our privacy commitments to users.

When we make material changes to this policy — that is, changes that meaningfully affect how your personal data is collected, used, or shared — we will notify registered users via a prominent notice displayed on the platform following login, and in some cases via email to your registered address. Non-material changes such as minor wording clarifications or formatting updates will be reflected in the "Last Updated" date at the top of this document without individual user notification.

Your continued use of the rabaje platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with an update to this policy, you should discontinue use of the platform and may request account closure by contacting our support team at [email protected].

We encourage you to review this Privacy Policy periodically so that you remain informed about how rabaje protects your personal information. The most current version of this policy is always available on this page at rabaje.com/privacy-policy.