Privacy Policy — How fbabaje Protects Your Personal Data

1 Information We Collect

When you create and use a fbabaje account, we collect several categories of personal information. The type of data we hold about you depends on how you interact with the platform and how far through the account verification process you have progressed. We explain each category below.

1.1 Registration Data

When you register an account on fbabaje, we collect the following information directly from you:

• Full legal name as it appears on your government-issued identity document.
• Date of birth (used to verify that you are aged 18 or above).
• Email address (used for account communications, security alerts, and support correspondence).
• Username and encrypted password.
• Residential address in Bangladesh (city, district, and division).
• Mobile phone number (used for two-factor authentication and account recovery).

1.2 Identity Verification (KYC) Data

To comply with responsible gaming obligations and to process withdrawals above certain thresholds, fbabaje may request the following identity verification documents:

• A scanned copy or clear photograph of your National Identity Card (NID) issued by the Bangladesh Election Commission, or a valid passport.
• Proof of address in the form of a utility bill, bank statement, or mobile banking statement dated within 90 days.
• Proof of payment method ownership, such as a bKash, Nagad, or Rocket transaction screenshot showing your registered mobile number.

KYC documents are stored securely in encrypted form and are only accessible by authorised compliance personnel. They are never shared with third parties except where required by law or as outlined in Section 3 of this policy.

1.3 Transactional Data

We record all financial transactions associated with your fbabaje account, including:

• Deposit amounts, payment method used (e.g., bKash, Nagad, Rocket, Visa, Mastercard), transaction reference numbers, and timestamps.
• Withdrawal requests, amounts, destination payment details, and processing status.
• Betting history: sports markets wagered on, stake amounts, odds accepted, outcomes, and winnings or losses.
• Casino game history: game titles played, session durations, stakes per round, and results.
• Bonus credits received, wagering progress, and bonus forfeiture events.

1.4 Technical and Device Data

When you access the fbabaje platform through a browser or mobile device, we automatically collect certain technical data, including:

• IP address and approximate geographic location derived from it.
• Browser type and version, operating system, and device type.
• Session start and end times, pages visited, and features used within the platform.
• Referring URL (the web address you visited immediately before arriving at fbabaje, if applicable).
• Device identifiers where applicable (e.g., on the fbabaje mobile application).

1.5 Communications Data

If you contact fbabaje via live chat, email, or any other support channel, we retain a record of that correspondence. This includes the content of your messages, the date and time of each exchange, and the outcome of any support request or complaint. Communication records are kept to ensure quality of service and to resolve any disputes that may arise.

2 How We Use Your Data

fbabaje uses the personal information we collect for the specific purposes listed below. We process your data only where we have a legitimate reason to do so — either because it is necessary to provide the service you have requested, because we are required to do so by our responsible gaming obligations, or because you have given us your explicit consent.

Purpose	Data Used	Legal Basis
Creating and managing your account	Registration data, KYC data	Contract performance
Processing deposits and withdrawals	Transactional data, KYC data	Contract performance
Age verification and fraud prevention	KYC data, device data, IP address	Legal obligation / Legitimate interest
Responsible gaming monitoring	Betting history, session data, transactional data	Legal obligation / Legitimate interest
Customer support and dispute resolution	Communications data, account data	Contract performance / Legitimate interest
Platform security and anti-cheating	Device data, IP address, betting patterns	Legitimate interest
Sending account-related notifications	Email address, phone number	Contract performance
Sending promotional communications (where opted in)	Email address, betting preferences	Consent

fbabaje does not use your personal data for automated decision-making that produces significant legal effects without human review. Where automated systems flag an account for review (e.g., for suspected fraud or underage gambling), a trained compliance team member will manually assess the case before any action is taken.

3 Data Sharing and Third Parties

fbabaje does not sell, rent, or trade your personal data to unaffiliated third parties. However, in order to operate the platform effectively and meet our legal obligations, we do share certain data with a limited set of trusted service providers and partners. Every third party that receives fbabaje player data is contractually required to process it solely for the agreed purpose and to maintain appropriate security standards.

3.1 Payment Processing Partners

To process your deposits and withdrawals, fbabaje shares the minimum necessary transactional data with our payment partners, which include bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, and BRAC Bank. The data shared with each payment partner is limited to what that partner requires to authenticate and complete the specific transaction.

3.2 Game Technology Providers

The casino games and sports data feeds available on fbabaje are powered by licensed third-party studios, including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers receive anonymised session and wagering data for the purpose of RNG auditing, jackpot management, and game performance monitoring. They do not receive your name, contact details, or financial data.

3.3 Identity Verification Services

Where fbabaje uses an automated identity verification tool to assist with KYC processing, that tool receives a copy of the identity document you submit. Such tools operate under strict data processing agreements and are not permitted to retain your document beyond the verification period.

3.4 Legal and Regulatory Disclosure

fbabaje may disclose your personal data to law enforcement agencies, regulatory bodies, or other competent authorities if required to do so by applicable law, court order, or in connection with a legitimate investigation into fraud, money laundering, match fixing, or other criminal activity. In such cases, fbabaje will disclose only the data specifically requested and will notify you where permitted by law.

3.5 Business Transfers

In the event that fbabaje undergoes a merger, acquisition, or sale of substantially all of its assets, player data may be transferred to the acquiring entity as part of that transaction. If such an event occurs, fbabaje will notify affected players by email to their registered address at least 30 days before any data transfer takes place, and players will be given the opportunity to close their accounts if they do not wish their data to be transferred.

4 Cookies and Tracking Technologies

fbabaje uses cookies and similar tracking technologies to operate the platform, maintain session security, remember your preferences, and understand how players navigate the site. This section explains what types of cookies we use and how you can control them.

4.1 What Are Cookies?

Cookies are small text files placed on your device by a website when you visit it. They allow the site to remember information about your visit — such as your preferred language, login status, and session token — so that you do not have to re-enter this information every time you return. Cookies do not contain executable code and cannot access other files on your device.

4.2 Types of Cookies We Use

• Essential cookies: Required for the platform to function. These include session cookies that keep you logged in securely while you navigate fbabaje, and security cookies that help detect and prevent fraudulent access. Essential cookies cannot be disabled without breaking core platform functionality.
• Preference cookies: Used to remember your account settings and display preferences, such as your chosen odds format and notification settings. Disabling these cookies may result in a less personalised experience.
• Analytics cookies: Used to collect anonymised data about how players use the fbabaje platform — which pages are visited most often, where players click, and how long sessions last. This data helps us improve the platform experience. We use privacy-respecting analytics tools that do not share raw data with advertising networks.
• Responsible gaming cookies: Used to support session tracking features, including session time reminders and deposit limit enforcement. These cookies are part of our responsible gaming commitment and cannot be disabled by the player.

4.3 Managing Cookies

You can control non-essential cookies through your browser settings. Most modern browsers allow you to view, block, or delete cookies stored by specific websites. Please note that blocking essential cookies will prevent you from logging in to your fbabaje account. For instructions on managing cookies in your specific browser, refer to the help documentation provided by your browser developer.

5 Data Security and Storage

Protecting the personal data of fbabaje players is a core operational responsibility. We implement a range of technical and organisational measures designed to prevent unauthorised access, accidental loss, alteration, or disclosure of your data. While no system can guarantee absolute security, fbabaje's security infrastructure meets industry standards for online betting and financial services platforms.

5.1 Technical Safeguards

• 256-bit SSL/TLS encryption on all data transmitted between your device and the fbabaje platform.
• At-rest encryption for sensitive stored data, including KYC documents, payment details, and account credentials.
• Password hashing using a strong, salted hashing algorithm — your plaintext password is never stored on fbabaje servers.
• Two-factor authentication (2FA) available for all accounts, strongly recommended for all players.
• Automated intrusion detection systems that monitor for unusual access patterns and flag suspicious login attempts in real time.
• Regular penetration testing and security audits conducted by independent specialists.

5.2 Organisational Safeguards

• Access to player personal data is restricted to authorised personnel who need it to perform their job functions (principle of least privilege).
• All staff with access to personal data are subject to confidentiality agreements and regular privacy training.
• A formal incident response plan is maintained so that, in the unlikely event of a data breach, affected players can be notified promptly and remedial action taken without delay.

5.3 Where Your Data Is Stored

fbabaje stores player data on secure servers. In some cases, data may be processed by service providers located outside Bangladesh — for example, by cloud infrastructure providers or game technology partners. In all such cases, fbabaje ensures that contractual data protection obligations are in place and that the receiving party applies security standards equivalent to those described in this section.

6 Data Retention Policy

fbabaje retains your personal data for as long as your account is active and for a defined period after account closure, in order to meet our legal, regulatory, and contractual obligations. The specific retention periods for the main categories of data we hold are set out below.

• Account and registration data: Retained for the lifetime of the account and for a minimum of 5 years after account closure, in line with anti-money laundering record-keeping best practices.
• KYC and identity documents: Retained for a minimum of 5 years from the date of verification or account closure, whichever is later.
• Transaction records: Retained for a minimum of 5 years from the date of each transaction.
• Betting and gaming history: Retained for 3 years from the date of each wager for the purpose of dispute resolution and responsible gaming review.
• Support communications: Retained for 3 years from the date of the most recent communication in each thread.
• Technical and device data (logs): Retained for 12 months on a rolling basis, after which they are permanently deleted.
• Marketing consent records: Retained until you withdraw consent and for 12 months thereafter as a record of your opt-out request.

Once the applicable retention period has expired and there is no longer a legal or contractual reason to keep your data, fbabaje will securely delete or anonymise it so that it can no longer be linked to you as an individual.

7 Your Privacy Rights

As a player on the fbabaje platform, you have the following rights in relation to your personal data. To exercise any of these rights, please contact us at [email protected] with the subject line "Privacy Request" and a clear description of your request. We will acknowledge your request within 48 hours and aim to complete it within 30 calendar days.

7.1 Right of Access

You have the right to request a copy of the personal data fbabaje holds about you. We will provide this in a structured, commonly used, machine-readable format (JSON or CSV) where technically feasible, or in a summary document where a full data export is not practical.

7.2 Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. Minor corrections (such as a misspelled city name) can be made directly via the account settings page. Changes to core identity data (such as your name or date of birth) require supporting documentation and will be processed by the compliance team.

7.3 Right to Erasure

You may request that fbabaje delete your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent (in cases where consent was the legal basis), or where you object to processing and there are no overriding legitimate grounds. Please note that erasure requests may be declined in part where the data is required for legal compliance, fraud prevention, or ongoing dispute resolution under the retention periods set out in Section 6.

7.4 Right to Restrict Processing

In certain circumstances — for example, while a data accuracy dispute is being resolved — you may request that fbabaje restricts the processing of your data to storage only. During any restriction period, fbabaje will not actively use the restricted data except to store it securely.

7.5 Right to Object

You have the right to object to fbabaje processing your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, in which case we will assess whether our interests are overridden by your rights and interests and notify you of the outcome.

8 Changes to This Policy

fbabaje reviews this Privacy Policy at least annually and may update it at any time to reflect changes in our data practices, service features, or applicable legal requirements. When we make material changes to this policy, we will:

• Update the "Last Updated" date at the top of this document.
• Send a summary of the key changes to all registered players via their registered email address at least 14 days before the changes take effect.
• Display a prominent notice on the fbabaje platform informing players of the update for a period of at least 30 days.

If you continue to use the fbabaje platform after the effective date of any revised Privacy Policy, you will be considered to have accepted the updated terms. If you do not agree with any changes to this policy, you may close your account at any time by contacting [email protected].

For questions about this Privacy Policy, data requests, or any other privacy-related concern, please contact the fbabaje support team at [email protected]. Our team is available 24/7 and responds to all privacy enquiries within 4–6 hours Bangladesh Standard Time (BST, UTC+6).