PRIVACY
Data Protection Policy

rbaji99 Privacy Policy

Your privacy matters to us. This Privacy Policy explains exactly what personal data rbaji99 collects, how it is used, who it may be shared with, and how you can exercise your rights as a registered player on our Bangladesh online casino platform.

Last Updated: 1 January 2026 256-bit SSL Encrypted 18+ Only Bangladesh
SSL-Encrypted Data Handling

All personal data transmitted to and from the rbaji99 platform is protected by 256-bit SSL encryption. Your information is never transmitted in plain text and is safeguarded at every stage of processing.

No Unsolicited Third-Party Sales

rbaji99 does not sell, rent, or trade your personal data to third-party marketers. Your information is shared only with essential service partners who are contractually bound to protect it under strict confidentiality agreements.

Minimal Data Collection

rbaji99 collects only the personal data necessary for providing safe, compliant, and high-quality gaming services. We do not collect information beyond what is required for account management, KYC verification, and payment processing.

Your Rights Are Respected

As an rbaji99 player, you hold the right to access, correct, and request deletion of your personal data at any time. You may also withdraw consent for marketing communications without affecting your account status.

Transparent Cookie Use

rbaji99 uses cookies strictly for session management, fraud prevention, and platform performance analytics. We do not use third-party advertising cookies to build behavioural profiles for external ad networks.

Clear Retention Periods

rbaji99 retains personal data only for as long as it is necessary to fulfil the purposes for which it was collected, or as required by applicable law. Account data is deleted within 90 days of a verified account closure request.

Information We Collect

Transparency Commitment: rbaji99 collects personal data only when it is strictly necessary for delivering our services, meeting legal obligations, or preventing fraud. This section explains every category of data we collect and why we collect it.

Account Registration Data

When you register an account on rbaji99, we collect the information you provide during the sign-up process. This includes your full legal name, date of birth, email address, mobile phone number, and your preferred currency (Bangladeshi Taka). This data is required to create and manage your player account, to verify your identity, and to communicate with you about your account and our services.

Identity Verification (KYC) Data

As part of our Know Your Customer (KYC) process, rbaji99 may request documentary evidence of your identity and address. This typically includes a scanned copy or photograph of your National Identity Card (NID), passport, or other government-issued identification document. We may also request a recent utility bill, bank statement, or similar document as proof of your residential address. This data is collected solely for the purpose of verifying your identity in compliance with our anti-money laundering obligations.

Payment and Transaction Data

When you make a deposit or request a withdrawal, rbaji99 collects transactional information including your payment method identifier (such as your registered bKash, Nagad, Rocket, or Upay account number, or your bank account details), the amount transacted, the date and time of the transaction, and transaction reference numbers. We do not store full payment credentials such as card numbers or mobile banking PINs — these are handled directly by the relevant payment service provider.

Activity and Gameplay Data

rbaji99 records information about your activity on the platform, including the games you play, bets placed, wagers settled, bonus offers claimed, and session durations. This data is used for account management, customer support, responsible gaming monitoring, bonus administration, and platform improvement purposes.

Technical and Device Data

When you access the rbaji99 platform, our servers automatically collect certain technical information including your IP address, browser type and version, operating system, device type, screen resolution, referring URL, and timestamps of your visits. This data is used for security monitoring, fraud prevention, and to optimise the platform's performance across different devices.

Communications Data

If you contact rbaji99 support by email or through our support channels, we retain a record of that correspondence, including the content of your messages and any attachments you send. This data is used to resolve your query, to improve our customer service quality, and for training purposes.

Summary of Data Categories Collected
Data Category Examples Purpose Basis
Identity Data Name, date of birth, NID number Account creation, KYC verification Legal obligation
Contact Data Email address, mobile number Account communication, support Contractual
Payment Data bKash/Nagad account ref, transaction ID Deposits, withdrawals, fraud prevention Contractual
Activity Data Bets placed, games played, session time Responsible gaming, bonus admin Legitimate interest
Technical Data IP address, device type, browser Security, fraud detection, UX optimisation Legitimate interest
Communications Data Support emails, chat transcripts Query resolution, service improvement Legitimate interest

How We Use Your Data

Providing and Managing Your Account

The primary use of your personal data is to provide you with a fully functioning rbaji99 player account. This includes processing your registration, verifying your identity, managing your wallet balance, processing deposits and withdrawals, awarding bonuses and promotional credits, and communicating with you about account-related matters such as verification status, security alerts, and transaction confirmations.

Fraud Prevention and Platform Security

rbaji99 uses personal data — particularly technical and transaction data — to detect, investigate, and prevent fraudulent activity, money laundering, account takeover attempts, and other security threats. This includes automated monitoring systems that flag unusual account activity for manual review by our security team. Where fraud is confirmed, rbaji99 may report the relevant data to law enforcement authorities as required by applicable law.

Responsible Gaming Monitoring

Activity and gameplay data is used by rbaji99 to monitor patterns that may indicate problem gambling behaviour. This enables our responsible gaming team to proactively reach out to players who may benefit from intervention, to apply self-exclusion measures where requested, and to enforce deposit limits and session time reminders. This use of data is fundamental to our commitment to player welfare and is conducted in your genuine interest.

Legal and Regulatory Compliance

rbaji99 is obligated to retain and process certain categories of personal data to comply with applicable anti-money laundering (AML) regulations, financial reporting requirements, and any lawful requests from competent authorities. Data processed for legal compliance purposes is retained for the periods prescribed by the applicable legal framework and is accessed only by authorised staff on a need-to-know basis.

Service Improvement and Analytics

Aggregated and anonymised activity data is used by rbaji99 to analyse platform performance, understand how players interact with different game categories, and prioritise product development decisions. This analytics use does not involve personal identification — individual players cannot be identified from the aggregated datasets used for this purpose.

Marketing Communications

With your explicit consent at the time of registration or opt-in, rbaji99 may send you promotional communications about new games, bonus offers, seasonal promotions (such as BPL season offers or Eid bonuses), and platform updates. You may withdraw your consent to marketing communications at any time by contacting support at [email protected]. Withdrawal of marketing consent does not affect the lawfulness of any processing carried out before the withdrawal and does not affect your ability to continue using the platform.

Sharing & Disclosure of Data

No Data Sales: rbaji99 does not sell, rent, lease, or otherwise transfer your personal data to third parties for their own marketing or commercial purposes. Any sharing of data described in this section is strictly limited to what is necessary for the operation of the platform or for compliance with legal obligations.

Payment Service Providers

To process deposits and withdrawals, rbaji99 shares relevant transaction data with the payment service providers you use, including bKash, Nagad, Rocket, Upay, and Bangladeshi banking partners such as Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, and Sonali Bank. These providers receive only the data necessary to execute the specific transaction and are bound by their own privacy obligations under applicable financial services regulations.

Game Technology Providers

rbaji99 partners with third-party game studios — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — to deliver its casino and slot content. These providers may receive technical session data (such as a session token or player identifier) necessary to load and authenticate game sessions. Game providers do not receive your full personal profile, payment data, or contact information.

Identity Verification Partners

rbaji99 may use third-party identity verification services to assist with KYC processing. Where such a service is used, your identity documents are transmitted to the provider via an encrypted channel and are retained by the provider only for the period required to complete the verification. Verification partners are contractually prohibited from using your data for any purpose other than identity verification on behalf of rbaji99.

Legal and Regulatory Disclosure

rbaji99 may be required by law to disclose your personal data to competent government authorities, law enforcement agencies, or regulatory bodies in response to a lawful request, court order, or legal process. In such cases, rbaji99 will disclose only the minimum data required to satisfy the legal obligation and will, where permitted by law, notify you of such a disclosure.

Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of rbaji99's business, player data may be transferred to the acquiring or successor entity as part of the transaction. In such circumstances, rbaji99 will take reasonable steps to ensure that the successor entity is bound by data protection obligations consistent with this Privacy Policy, and will notify affected players prior to their data being transferred.

Cookies & Tracking Technologies

What Are Cookies

Cookies are small text files stored on your device by your web browser when you visit a website. rbaji99 uses cookies and similar tracking technologies (such as local storage and session tokens) to make the platform function correctly, to keep you securely logged in, and to collect anonymised analytics data about how players use the site.

Types of Cookies We Use

rbaji99 uses three categories of cookies on its platform. Strictly necessary cookies are essential for the platform to function — they manage your login session, maintain your wallet balance display, and enable core security features. These cookies cannot be disabled without preventing the platform from working correctly.

Performance and analytics cookies collect anonymised data about how players navigate the platform — for example, which pages are visited most frequently, how long sessions last, and which games are most popular. This data is used in aggregate form only and does not identify individual players.

Functional cookies remember your preferences — such as your chosen language, display settings, and whether you have previously acknowledged site notices. These cookies improve your experience but are not essential to platform operation.

Cookies We Do Not Use

rbaji99 does not use third-party advertising cookies, tracking pixels from social media networks, or any technology designed to build a behavioural profile of you for the purpose of serving targeted advertising on external websites.

Managing Cookies

You may control cookie settings through your browser's privacy settings. Disabling strictly necessary cookies will prevent you from logging into your rbaji99 account and using the platform. Disabling performance or functional cookies will not affect access but may reduce the quality of your experience. Most modern browsers allow you to view, block, and delete cookies on a per-site basis.

Cookie Types at a Glance
Type Required Purpose
Strictly Necessary Yes Login sessions, security
Performance Optional Anonymised analytics
Functional Optional Preferences, settings
Advertising Not Used Not applicable
rbaji99 does not use cookies or any other tracking mechanism to serve behavioural advertising on other websites. Your browsing activity on the rbaji99 platform stays on the rbaji99 platform.

Data Retention

Retention Principles

rbaji99 retains personal data only for as long as is necessary to fulfil the specific purpose for which it was collected, or for as long as is required by applicable law or regulation. When data is no longer needed for any of the purposes described in this Privacy Policy, it is securely deleted or anonymised so that it can no longer be associated with any individual player.

Active Account Data

While your rbaji99 account remains active, your personal data is retained for the duration of the account relationship. This includes your registration data, KYC documents, transaction history, gameplay activity records, and communications history. Active accounts are defined as accounts that have been logged into or used for any gaming or financial activity within the preceding 12-month period.

Post-Closure Retention

Following the closure of your rbaji99 account, whether at your own request or at the initiative of rbaji99, your personal data is retained for a minimum period of five years for anti-money laundering compliance purposes. Transaction records specifically may be retained for up to seven years in accordance with standard financial record-keeping requirements. After the applicable retention period has expired, your data is permanently and securely deleted from all rbaji99 systems.

Marketing Data

If you have consented to receive marketing communications from rbaji99, your contact details and marketing preferences are retained until you withdraw your consent. Upon withdrawal of marketing consent, your data is removed from our marketing lists within five business days. Withdrawal of marketing consent does not trigger the deletion of your account data — your account remains active and your other personal data continues to be held in accordance with the retention periods described above.

Backup and Archive Systems

rbaji99 maintains encrypted backup copies of platform data for business continuity and disaster recovery purposes. Deleted data may persist in encrypted backup archives for up to 90 days following deletion from live systems, after which it is permanently purged from all backup media as part of our standard backup rotation schedule.

Your Privacy Rights

Exercising Your Rights: To exercise any of the rights described below, contact the rbaji99 support team at [email protected]. We will respond to all verifiable data rights requests within 30 days of receipt. There is no charge for exercising your rights.
Right of Access

You have the right to request a copy of all personal data rbaji99 holds about you, together with information about how it is being used.

Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated promptly.

Right to Erasure

You may request the deletion of your personal data where it is no longer needed for the purposes it was collected, subject to our legal retention obligations.

Right to Restriction

You may request that we restrict the processing of your data in certain circumstances — for example, while the accuracy of the data is being contested.

Right to Portability

Where processing is based on your consent or a contract, you may request a copy of your data in a structured, machine-readable format.

Right to Object

You have the right to object to processing based on legitimate interest, including profiling for responsible gaming monitoring purposes.

Withdraw Marketing Consent

You may withdraw consent to receive marketing communications at any time, with effect from the point of withdrawal, without any negative consequence to your account.

Automated Decision-Making

You have the right to request human review of any decision made solely by automated processing that significantly affects you, including fraud-flagging decisions.

Identity Verification for Rights Requests

To protect the security and confidentiality of all players, rbaji99 is required to verify your identity before processing any data rights request. You will be asked to confirm your registered email address and may be asked to provide a copy of your identity document. This verification step exists to ensure that personal data is not disclosed to or deleted at the request of an unauthorised third party.

Response Timescales

rbaji99 will acknowledge receipt of your rights request within two business days and will provide a substantive response within 30 calendar days of receipt. In cases of particular complexity or volume, this period may be extended by a further 30 days — in such cases you will be notified of the extension and the reason for it before the initial 30-day period expires.

Data Security

Technical Security Measures

rbaji99 implements a comprehensive set of technical security controls to protect your personal data against unauthorised access , loss, or disclosure. All data in transit between your device and our servers is encrypted using TLS 1.2 or higher with 256-bit SSL certificates. Data at rest — including player records, transaction logs, and KYC documents stored on rbaji99 servers — is encrypted using AES-256 encryption. Access to production databases is restricted to authorised personnel only and is protected by multi-factor authentication and role-based access controls.

Organisational Security Measures

Beyond technical controls, rbaji99 maintains strict organisational policies governing how staff access and handle player data. All employees and contractors who have access to personal data are required to complete data protection training and are bound by confidentiality obligations. Access to sensitive player data is granted on a strict need-to-know basis and is subject to regular internal audits. Access privileges are reviewed and revoked promptly when an employee's role changes or their employment ends.

Incident Response

In the event of a personal data breach that poses a risk to players' rights and freedoms, rbaji99 has an established incident response procedure. Affected players will be notified without undue delay where the breach is likely to result in a high risk to their personal data. Notifications will be sent to the email address registered on your account and will describe the nature of the breach, the categories of data affected, the likely consequences, and the measures rbaji99 has taken or proposes to take in response.

Third-Party Security Standards

rbaji99 conducts due diligence on all third-party service providers before granting them access to player data. Providers are required to demonstrate adequate security standards and are bound by data processing agreements that set out their obligations with respect to the security and confidentiality of player information. rbaji99 does not engage service providers whose security standards do not meet our minimum requirements.

Player-Side Security Responsibilities

While rbaji99 takes extensive measures to protect your data on our side, the security of your account also depends on the measures you take on your end. You are responsible for keeping your account password confidential, for not sharing your login credentials with any third party, and for ensuring that you log out of your account when using a shared or public device. If you suspect that your account has been accessed without your authorisation, please contact rbaji99 support immediately at [email protected].

256-bit SSL

End-to-end encryption on all data in transit between your device and rbaji99 servers.

MFA Access Controls

Multi-factor authentication required for all staff with access to production player data.

AES-256 at Rest

All stored player records, KYC documents, and transaction logs encrypted at rest.

Breach Notification

Affected players notified without undue delay in the event of a material data security incident.

Updates to This Policy

Right to Update

rbaji99 reserves the right to update, amend, or replace this Privacy Policy at any time. Changes may be made in response to updates in applicable data protection law, changes in the services we offer, feedback from players, or improvements in the clarity and accuracy of our disclosures. The most current version of this Privacy Policy will always be accessible at rbaji99.net/privacy-policy.

How You Will Be Notified

When material changes are made to this Privacy Policy — that is, changes that meaningfully affect how your personal data is collected, used, or shared — rbaji99 will notify registered players by email to the address on file with their account at least 14 days before the updated policy takes effect. For minor or administrative updates that do not materially affect your privacy rights, rbaji99 may update the policy without individual notification. In all cases, the updated policy will carry a revised "Last Updated" date at the top of this page.

Your Continued Use as Acknowledgement

Your continued use of the rbaji99 platform following the effective date of any updated Privacy Policy constitutes your acknowledgement of the updated terms. If you do not agree with any changes to this Privacy Policy, you are entitled to close your account and request deletion of your data by contacting us at [email protected] prior to the updated policy taking effect.

Contacting Us About This Policy

If you have any questions, concerns, or complaints about this Privacy Policy, about how rbaji99 handles your personal data, or about the exercise of your data rights, please contact our support team. We are committed to resolving all privacy-related enquiries promptly, professionally, and in a manner consistent with our obligations to you as a registered player on the rbaji99 platform.

  • Email: [email protected]
  • Response time: Within 2 business days for acknowledgement; 30 days for substantive response
  • Support hours: 24/7 — Bangladesh Standard Time (UTC+6)
Current Version: This Privacy Policy was last reviewed and updated on 1 January 2026. This version supersedes all prior versions of the rbaji99 Privacy Policy. Players who registered before this date are advised to review the policy in full, as it may contain changes relevant to how your existing data is handled.
Your Data Is Safe With Us

Ready to Play at rbaji99?

Now that you understand how rbaji99 protects your personal data, explore our full platform — cricket betting, live casino tables, and hundreds of slot titles, all in Bangladeshi Taka with instant bKash and Nagad deposits.