kbaje Privacy Policy — How We Collect, Use, and Protect Your Personal Data

Introduction

This Privacy Policy ("Policy") describes how kbaje ("kbaje", "we", "us", "our") collects, processes, stores, and protects personal data belonging to users ("you", "your") of the kbaje online betting and casino platform, accessible at kbaje.io. kbaje is committed to safeguarding the privacy of every player who registers and engages with the platform, and this Policy sets out in full how we fulfil that commitment.

By registering a kbaje account, visiting kbaje.io, or using any feature or service offered through the platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. This Policy forms part of the kbaje Terms & Conditions and should be read alongside that document.

kbaje serves players in Bangladesh, and this Policy is written with the Bangladeshi player experience in mind. All visible content on kbaje.io, including this Privacy Policy, is published in English. If you do not understand any part of this Policy, please contact our 24/7 support team before continuing to use the platform.

Data We Collect

kbaje collects personal data that is necessary for the lawful operation of the platform, identity verification, payment processing, and regulatory compliance. The categories of personal data we collect are described below.

2.1 Registration Data

When you create a kbaje account, we collect the following information:

• Full legal name as it appears on your government-issued identification document
• Date of birth (used to verify you are 21 years of age or older)
• Mobile number registered in Bangladesh (used for account verification and communications)
• Email address (used for account notifications, support correspondence, and promotional communications where consent is given)
• Residential address in Bangladesh, including district and division
• Chosen username and password (passwords are stored in encrypted, hashed form — never in plain text)
• Preferred language and currency (English / Bangladeshi Taka ৳)

2.2 Identity Verification (KYC) Data

As part of our Know Your Customer (KYC) obligations, kbaje may request and retain copies of the following documents:

• Government-issued photo identification: National Identity Card (NID), passport, or driving licence
• Proof of address: utility bill, bank statement, or official correspondence issued within 90 days and showing your name and residential address
• Proof of payment method ownership: a screenshot or confirmation showing that your bKash, Nagad, Rocket, or Upay account is registered in the same name as your kbaje account
• Source of funds documentation, where required by enhanced due diligence procedures

2.3 Financial Transaction Data

kbaje records all deposit and withdrawal transactions conducted through your account, including:

• Payment method used (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, Mastercard)
• Transaction amounts in Bangladeshi Taka (৳)
• Transaction timestamps (Bangladesh Standard Time, UTC+6)
• Transaction reference numbers and confirmation statuses
• Partial payment identifiers where applicable (we do not store full card numbers)

2.4 Gaming Activity Data

We collect detailed records of your activity on the kbaje platform, including:

• Bets placed, bet types, stake amounts, selections, and outcomes
• Casino and slot game sessions, wagers, and results
• Bonus and promotion activations, wagering progress, and expiry
• Session durations, login and logout timestamps
• Responsible gaming tool usage, including limit settings and self-exclusion requests

2.5 Technical and Device Data

When you access kbaje.io, our systems automatically collect certain technical information:

• IP address and approximate geolocation derived from IP
• Device type (mobile, tablet, desktop), operating system, and browser type and version
• Referral URL (the web address from which you arrived at kbaje.io, if applicable)
• Pages visited within kbaje.io, time spent on each page, and click-path data
• Cookie identifiers (see Section 7 for full cookie details)

2.6 Communications Data

Any messages, requests, or documents you send to kbaje support — whether via live chat, email, or any other channel — are recorded and retained for quality assurance, dispute resolution, and regulatory compliance purposes.

How We Collect Data

kbaje collects personal data through the following means:

Why We Use Your Data

kbaje uses the personal data it collects only for the purposes listed below. We do not use your data for purposes that are incompatible with those for which it was collected, and we do not sell your personal data to third parties for commercial marketing under any circumstances.

4.1 Account Management

We use your registration data to create and maintain your kbaje account, verify your identity, authenticate your logins, and communicate important account-related information such as withdrawal confirmations, security alerts, and Terms updates.

4.2 Age and Identity Verification

kbaje is strictly a platform for adults aged 21 and above. We use date of birth information and KYC documents to confirm eligibility before permitting access to real-money gaming features. Age and identity verification is a legal and operational obligation, not optional.

4.3 Payment Processing

Financial transaction data is used to process deposits to your kbaje account balance and to execute withdrawals to your verified payment method. We retain transaction records for accounting, audit, and dispute resolution purposes as required under applicable financial compliance standards.

4.4 Fraud Prevention and Platform Security

Technical data, device identifiers, IP addresses, and behavioural patterns are analysed by our security systems to detect and prevent fraud, multi-accounting, money laundering, unauthorised access, and other prohibited activities listed in the kbaje Terms & Conditions.

4.5 Responsible Gaming Compliance

Gaming activity data — including session durations, bet frequencies, deposit volumes, and loss patterns — is monitored to identify players who may be showing signs of problematic gambling behaviour. Where such indicators are identified, kbaje support may proactively contact the player to offer responsible gaming assistance. This use of data is in the player's best interest and constitutes a legitimate purpose under our responsible gaming programme.

4.6 Promotions and Bonus Management

We use gaming activity and account data to verify eligibility for bonuses, track wagering progress, apply promotional credits, and detect bonus abuse in accordance with our Terms & Conditions.

4.7 Platform Improvement and Analytics

Aggregated and anonymised usage data is used to understand how Bangladeshi players interact with kbaje, which games and features are most popular, and where the platform experience can be improved. This data does not identify individual players.

4.8 Marketing Communications

Where you have given explicit consent to receive marketing communications, we may send promotional emails or SMS messages about kbaje offers, new game launches, seasonal promotions (such as Eid or BPL-season bonuses), and platform updates. You may withdraw consent to marketing communications at any time by contacting [email protected] or using the opt-out mechanism in any marketing email we send.

Legal Basis for Processing

kbaje processes personal data only where a lawful basis for doing so exists. The primary legal bases applicable to our processing activities are:

Sharing Your Data

kbaje does not sell, rent, or trade your personal data to any third party. We may share your data with the categories of recipients described below, and only to the extent strictly necessary for the stated purpose.

6.1 Payment Partners

To process deposits and withdrawals, kbaje must share relevant transaction data with your chosen payment provider — bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, or Mastercard. The data shared is limited to what is required to complete the specific transaction. Each payment partner operates under its own privacy framework.

6.2 Game Providers

To launch and operate casino and slot games, kbaje passes a session token and anonymous player identifier to the relevant game provider (Pragmatic Play, Evolution Gaming, Spribe, NetEnt, Microgaming, Play'n GO, Hacksaw Gaming, Ezugi). No directly identifiable personal data such as your name, mobile number, or NID number is shared with game providers.

6.3 Identity Verification and Fraud Screening Services

kbaje may engage third-party identity verification services to assist with KYC document checks and fraud screening. These services are contractually bound to process data only for the purposes instructed by kbaje and may not use your data for their own commercial purposes.

6.4 Regulatory and Law Enforcement Authorities

kbaje may disclose personal data to regulatory authorities, law enforcement agencies, or courts where required to do so by applicable law, a valid legal order, or where disclosure is necessary to protect the rights, safety, or property of kbaje, its players, or the public.

6.5 Business Transfers

In the event of a merger, acquisition, corporate restructuring, or sale of all or part of the kbaje business, user data may be transferred to the acquiring entity as part of the transaction. In such an event, kbaje will notify registered users via email and ensure that the acquiring entity is bound to honour the commitments made in this Privacy Policy.

Cookies & Tracking Technologies

kbaje uses cookies and similar tracking technologies on kbaje.io to enable essential platform functionality, remember your preferences, and analyse how players use the site. The following categories of cookies are used:

You may manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will prevent the kbaje platform from functioning correctly. Detailed instructions for managing cookies are available in the Help documentation of your browser.

Data Retention

kbaje retains personal data for as long as is necessary for the purpose for which it was collected, or as required by applicable law. The following retention schedule outlines our standard practices:

Where data is no longer required for any of the purposes described above, kbaje will securely delete or anonymise it. Where deletion is not technically feasible (e.g., data held in encrypted backup archives), kbaje will isolate the data from active processing until secure deletion is possible.

Data Security

kbaje employs a layered, defence-in-depth approach to protecting the personal data entrusted to us by Bangladeshi players. Our security measures include, but are not limited to:

• TLS/SSL encryption in transit: All data transmitted between your device and kbaje.io is encrypted using industry-standard Transport Layer Security (TLS). The padlock icon in your browser confirms this connection is active.
• Encryption at rest: Sensitive data fields — including identity documents, payment identifiers, and password hashes — are stored in encrypted form in our databases. Plain-text storage of passwords is strictly prohibited within kbaje's systems.
• Access controls: Access to personal data is restricted on a strict need-to-know basis. kbaje staff may only access the minimum amount of personal data required to fulfil their specific job function. All access is logged and auditable.
• Two-factor authentication (2FA): kbaje offers optional 2FA for player accounts and mandates 2FA for all internal staff accessing data management systems.
• Regular security reviews: kbaje's technical infrastructure is subject to periodic security assessments to identify and remediate vulnerabilities. Systems are patched promptly in response to identified risks.
• Fraud detection systems: Automated monitoring tools analyse transaction patterns and login behaviour in real time to detect suspicious activity and trigger protective responses such as temporary account locks or additional verification requirements.

Despite kbaje's comprehensive security measures, no system can guarantee absolute security against all threats. In the event of a data breach that poses a material risk to your rights, kbaje will notify affected users without undue delay, describe the nature of the breach, the data affected, and the steps being taken to mitigate the impact.

Your Rights as a Data Subject

As a registered kbaje player, you hold the following rights in relation to the personal data we hold about you. To exercise any of these rights, please contact kbaje support at [email protected] with your registered account details and a clear description of your request. We will respond within a reasonable timeframe.

10.1 Right of Access

You have the right to request a copy of the personal data kbaje holds about you, along with information about how it is being used, the legal basis for processing, and who it has been shared with. We will provide this information in a clear, readable format.

10.2 Right to Rectification

If any personal data we hold about you is inaccurate, outdated, or incomplete, you have the right to request that it be corrected. You may update certain account information directly from your kbaje account settings dashboard; for data that cannot be self-updated, contact support.

10.3 Right to Erasure

You may request deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose it was collected, or where you withdraw consent and no other legal basis for processing applies. Please note that kbaje is required by law to retain certain categories of data (such as KYC documents and financial transaction records) for specified minimum periods, which may limit the scope of erasure in practice.

10.4 Right to Restrict Processing

You may request that kbaje restricts the processing of your personal data in certain circumstances, such as while the accuracy of data is being contested, or where you have objected to processing based on legitimate interests and that objection is being considered.

10.5 Right to Data Portability

Where processing is based on your consent or on contractual necessity, and is carried out by automated means, you have the right to receive a structured, commonly used, machine-readable copy of the personal data you provided to us, or to request that we transmit it directly to another service provider where technically feasible.

10.6 Right to Object

You have the right to object to the processing of your personal data where that processing is based on kbaje's legitimate interests. You also have an absolute right to object to the use of your personal data for direct marketing purposes at any time, which kbaje will action immediately upon receipt.

10.7 Right to Withdraw Consent

Where processing is based on your consent (e.g., marketing communications, non-essential cookies), you may withdraw that consent at any time by contacting [email protected] or using the opt-out mechanism provided in any marketing communication. Withdrawal of consent does not affect the lawfulness of processing that occurred before the withdrawal.

Children & Minors

kbaje is strictly an adult platform for players aged 21 years and above. kbaje does not knowingly collect personal data from individuals under the age of 21. If you are under 21, you must not register for a kbaje account, use any feature of the kbaje platform, or provide any personal data to kbaje.

If kbaje becomes aware that personal data has been collected from a person under the age of 21, we will immediately close the associated account, void any balances or winnings accumulated during the period of underage access, and securely delete the personal data of the underage individual as swiftly as is technically possible, subject to any minimum retention requirements imposed by applicable law.

If you are a parent or guardian and believe that a minor in your care has registered on kbaje, please contact us immediately at [email protected]. We will investigate and take appropriate action without delay. We encourage parents and guardians to use parental control tools and internet filtering software to prevent minors from accessing online gambling platforms.

Third-Party Links

kbaje.io may contain references to third-party platforms — including payment service providers and game studios — whose services are integrated into the kbaje platform. When you interact with these third-party services (for example, when completing a bKash payment or launching a game by Pragmatic Play), you may be subject to that third party's own privacy policy and data practices.

kbaje is not responsible for the privacy practices of third-party service providers. We encourage you to review the privacy policies of any third-party service you interact with through the kbaje platform. Our decision to integrate a third-party service does not constitute an endorsement of its privacy practices.

Policy Updates

kbaje reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable legal requirements, or the services we offer. Where a material change is made to this Policy, kbaje will notify registered users via email to their registered address and will post an updated version of the Policy on kbaje.io with a revised effective date.

The most recent version of the Privacy Policy is always accessible at kbaje.io/privacy-policy. Continued use of the kbaje platform after the effective date of an updated Policy constitutes your acceptance of the revised terms. If you do not agree to the updated Policy, you must cease using kbaje and may request account closure in accordance with the Terms & Conditions.

Minor changes that do not materially affect your rights or how your data is used (such as corrections of typographical errors or clarifications of existing practices) may be made without prior notice.

Contact & Complaints

If you have any questions, concerns, or requests relating to this Privacy Policy or how kbaje handles your personal data, please contact our support team using the details below. All privacy-related enquiries are handled in English.

• Email: [email protected] (plain text only — not a clickable link)
• Live Chat: Available 24 hours a day, 7 days a week via the kbaje website
• Support Language: English
• Response Time: Live chat — immediate; email — within 24 hours (Bangladesh Standard Time, UTC+6)

kbaje takes all privacy complaints seriously and will acknowledge receipt of your complaint within one business day. We aim to resolve all privacy-related complaints within 14 days. Where a complaint cannot be resolved through direct communication with our support team, we will provide guidance on available escalation options.