kbaji Privacy Policy

kbaji collects personal data through several channels: directly from you during registration and account use, automatically through platform technology as you interact with the site, and from third-party partners where necessary to verify your identity or process payments. The categories of data we collect are described below.

1.1 Registration Data

When you create a kbaji account, we collect your full legal name, date of birth, email address, mobile number, and the username and encrypted password you choose. This information is required to create and maintain your account, verify that you meet our minimum age requirement of 18 years, and communicate with you about your account activity.

1.2 Identity Verification (K YC) Data

To comply with anti-money laundering (AML) obligations and to confirm the identity of players requesting withdrawals above certain thresholds, kbaji may request a copy of a government-issued photo ID (National ID card or passport), proof of address (a utility bill or bank statement dated within the last three months), and proof of payment method ownership (a screenshot or statement confirming that the bKash, Nagad, or bank account used for deposits belongs to you). These documents are stored securely and are never shared beyond the verification process.

1.3 Financial Transaction Data

When you make a deposit or withdrawal, kbaji records the transaction amount in BDT, payment method used (e.g., bKash, Nagad, Rocket, Visa), transaction reference numbers, timestamp, and transaction status. We do not store full card numbers or mobile banking PINs. Payment processing is handled by our certified payment gateway partners, who operate under their own security standards.

1.4 Betting & Gaming Activity Data

kbaji maintains a complete log of your betting history, casino game sessions, bet amounts and outcomes, bonus credits claimed and wagered, and account balance movements. This data is used for account management, dispute resolution, responsible gaming monitoring, and regulatory compliance. It is not used for purposes outside the kbaji platform.

1.5 Technical & Device Data

When you visit kbaji, our servers automatically collect certain technical information, including your IP address, browser type and version, operating system, device type, referring URL, pages visited, session duration, and clickstream data. This information helps us maintain platform security, detect fraudulent access attempts, and improve the overall user experience for players connecting from Bangladesh.

1.6 Communications Data

If you contact the kbaji support team via live chat, email, or WhatsApp, we retain a record of that communication history, including the date, subject matter, and resolution outcome. This enables our team to provide consistent support and helps us identify recurring issues that may affect multiple players.

Summary of Data Categories

kbaji uses the personal data described above for the following specific purposes. We do not use your data for any purpose not listed here without first updating this policy and notifying you.

• Account creation and management: Your registration data is used to set up and maintain your kbaji account, authenticate your login sessions, and enforce the one-account-per-player rule.
• Age and identity verification: We use your date of birth and KYC documents to confirm that you are 18 years of age or older and that the account belongs to a real, identifiable individual.
• Payment processing: Your financial transaction data is used to credit deposits to your account balance, process withdrawal requests, and maintain an accurate transaction history for your records and ours.
• Responsible gaming monitoring: kbaji uses your betting and gaming activity data to identify patterns that may indicate problem gambling behaviour. Where such patterns are detected, the responsible gaming team may reach out to you proactively.
• Fraud prevention and security: Technical and device data, combined with transaction and gaming activity logs, is used to detect and prevent account fraud, identity theft, bonus abuse, and money laundering.
• Platform improvement: Aggregated, anonymised analytics data is used to understand how players navigate the kbaji platform, which features are most used, and where the experience can be improved. This data cannot be linked back to any individual player.
• Marketing communications: If you have opted in to receiving promotional emails or platform notifications, kbaji will use your email address and gaming preferences to send relevant offers. You may withdraw marketing consent at any time via your account settings or by emailing the support team.
• Legal and regulatory compliance: kbaji is required to retain certain data categories for specified periods to comply with anti-money laundering regulations, financial record-keeping requirements, and other applicable legal obligations.

kbaji does not sell your personal data. We share your data only with the categories of third-party organisations listed below, and only to the extent necessary for the stated purpose.

3.1 Payment Processing Partners

To process deposits and withdrawals, kbaji shares necessary transaction details with payment gateway partners and local mobile financial service providers, including bKash, Nagad, Rocket (Dutch-Bangla Bank), Upay, and card processing networks (Visa, Mastercard). These partners receive only the transaction data required to process the specific payment and operate under their own privacy and security policies.

3.2 Identity Verification Providers

Where automated KYC document checks are used, kbaji may pass identity documents to a certified third-party verification service. These providers operate under strict confidentiality agreements and are permitted to use the data solely for the purpose of completing the identity check requested by kbaji.

3.3 Game Technology Providers

Casino games and sports betting markets on kbaji are powered by third-party providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may collect session-level technical data (such as game round IDs and RNG seed records) for the purpose of game integrity verification and regulatory audit trails. They do not receive your personally identifiable registration or payment data.

3.4 Analytics Services

kbaji uses privacy-compliant web analytics tools to understand platform usage patterns. Any data shared with analytics providers is aggregated and anonymised before transmission. No personally identifiable player data is included in analytics reports shared externally.

3.5 Legal and Regulatory Disclosure

kbaji may be required to disclose player data to law enforcement agencies, financial regulators, or other competent authorities in response to a lawful request, court order, or legal obligation. In such circumstances, kbaji will disclose only the minimum information required to satisfy the legal demand and will, where legally permitted, notify the affected player of the disclosure.

The kbaji platform uses cookies and similar tracking technologies to deliver a functional, secure, and personalised experience. A cookie is a small text file placed on your device by a website; it allows the site to recognise your browser across sessions and remember certain preferences or states.

4.1 Types of Cookies Used

4.2 Managing Cookies

Strictly necessary cookies are required for the kbaji platform to function correctly and cannot be disabled without preventing login and core account features. All other cookie categories can be managed through your browser settings. Most modern browsers — including Chrome, Firefox, Safari, and Edge — allow you to view, block, or delete cookies via the privacy or security section of the browser's settings menu.

Please note that disabling functional or analytics cookies will not affect your ability to place bets or play casino games, but may result in a less personalised experience — for example, previously saved preferences may not be remembered between sessions.

kbaji applies a layered security approach to protect your personal data against unauthorised access, accidental loss, disclosure, or destruction. The following technical and organisational measures are in place across the platform.

• Transport-layer encryption: All data transferred between your browser or app and the kbaji platform is encrypted using TLS 1.2 or higher (256-bit SSL). The padlock icon in your browser address bar confirms that your connection is secure.
• Password hashing: Account passwords are processed through a strong one-way cryptographic hash function before storage. kbaji staff cannot view your password in plain text, and passwords are never stored in a reversible format.
• Access controls: Internal access to player data is restricted on a strict need-to-know basis. Support agents, compliance officers, and technical staff access only the data categories required for their specific role. All internal data access is logged and auditable.
• Intrusion detection: kbaji's infrastructure is monitored continuously for unusual access patterns, brute-force login attempts, and other indicators of malicious activity. Automated systems block suspicious IP addresses and notify the security team in real time.
• Regular security reviews: The kbaji platform undergoes regular security assessments to identify and address potential vulnerabilities before they can be exploited.

Despite these measures, no online platform can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, kbaji will notify affected players promptly and take immediate steps to contain and remediate the incident.

kbaji retains personal data only for as long as it is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The table below sets out the standard retention periods applied to each major data category.

Once a retention period has expired, kbaji deletes or anonymises the relevant data in a secure manner. Anonymised data (from which no individual can be identified) may be retained beyond these periods for statistical and analytical purposes.

As a kbaji player, you hold the following rights in relation to your personal data. These rights apply regardless of how long you have held an account or how recently you last used the platform.

7.1 Right of Access

You have the right to request a copy of all personal data that kbaji holds about you. Upon receiving a verified access request, kbaji will provide a structured summary of your data within 30 calendar days. There is no charge for a standard access request.

7.2 Right to Rectification

If any personal data kbaji holds about you is inaccurate or incomplete, you have the right to request that it be corrected. Minor corrections (such as a misspelled name) can typically be made through the account settings page or by contacting support. Corrections to identity-linked fields (such as legal name or date of birth) require supporting documentation.

7.3 Right to Erasure

You may request that kbaji delete your personal data. However, this right is subject to important limitations: kbaji is legally required to retain certain data categories (particularly financial and identity records) for the periods specified in Section 6. Where a deletion request cannot be fulfilled in full due to legal retention obligations, kbaji will delete all data that is not subject to those obligations and explain precisely what has been retained and why.

7.4 Right to Restrict Processing

You may request that kbaji temporarily restrict the processing of your data — for example, while a dispute regarding the accuracy of your data is being investigated. During a restriction period, kbaji will continue to store the data but will not process it for any purpose beyond storage.

7.5 Right to Data Portability

Where kbaji processes your data on the basis of your consent or contract performance, and the processing is carried out by automated means, you have the right to receive a copy of that data in a structured, commonly used, machine-readable format (such as CSV or JSON), suitable for transfer to another service provider of your choice.

7.6 Right to Withdraw Marketing Consent

Where kbaji processes your data for marketing purposes based on your consent, you may withdraw that consent at any time without affecting the lawfulness of any processing carried out before the withdrawal. Withdrawal of marketing consent does not affect your ability to continue using the kbaji platform or receiving transactional account communications.

If you have any questions about this Privacy Policy, wish to exercise a data right, or have a concern about how kbaji handles your personal data, the first step is to contact the kbaji support team directly.

The support team is available via live chat on the kbaji platform 24 hours a day, 7 days a week, and via WhatsApp between 08:00 and 24:00 Bangladesh Standard Time (UTC+6). For formal data privacy enquiries, the preferred contact method is email:

Privacy enquiries email: [email protected] (plain text — not a clickable link)

Please include "Privacy Policy Enquiry" in the subject line of any email related to this policy, and include your registered username so that the team can locate your account promptly.

8.1 Response Timeframes

kbaji aims to acknowledge all privacy-related enquiries within 2 business days and to provide a substantive response within 14 calendar days for general questions, and within 30 calendar days for formal data rights requests. If a request is particularly complex, kbaji may extend the response period by up to an additional 30 days, in which case you will be notified of the extension and the reason for it before the original 30-day deadline expires.

8.2 Complaints

If you are not satisfied with kbaji's response to a privacy concern or data rights request, you have the right to escalate your complaint to the relevant data protection authority in your jurisdiction. kbaji takes all privacy complaints seriously and will cooperate fully with any regulatory enquiry. Before escalating to a regulatory authority, we encourage you to allow kbaji the opportunity to resolve the matter directly, as this is typically the fastest route to a resolution.

This Privacy Policy was last reviewed and updated on 1 January 2026. kbaji reserves the right to update this policy at any time. Material changes will be communicated to all registered players via email or platform notification before the revised policy takes effect.