sbaji Privacy Policy

sbaji is an offshore online betting and casino platform accessible at sbaji.bio. This Privacy Policy applies to all personal data collected from individuals who visit the sbaji website, register a player account, use any sbaji product or service, contact sbaji's support team, or interact with sbaji through any digital channel.

This policy is written to be straightforward and readable. If you have questions about any part of it, please contact sbaji support. The most current version of this policy is always available at sbaji.bio/privacy-policy.

sbaji collects personal data that you provide directly and data collected automatically when you use the platform. The categories of personal data we collect include:

• Registration data: your full name, date of birth, Bangladesh mobile number, and the login credentials you create at registration.
• KYC verification documents: government-issued photo ID (National ID, passport, or driving licence), proof of address, and mobile wallet ownership confirmation.
• Transaction data: deposit amounts, withdrawal amounts, payment method used (bKash, Nagad, Rocket, Upay, or bank transfer), transaction timestamps, and transaction reference numbers.
• Gameplay data: betting history, game session logs, wager amounts, winnings, bonus usage, and responsible gaming tool settings.
• Technical data: device type, operating system, browser type, IP address, time-zone setting, and approximate geographic location derived from IP, used for fraud prevention and service quality purposes only.

sbaji uses the personal data described above for the following specific purposes. We do not use your data for any purpose not listed here without first notifying you and, where required, obtaining your consent:

• Account creation and management: to register your sbaji account, verify your identity, enable login, and administer your account settings and preferences.
• Transaction processing: to facilitate deposits via bKash, Nagad, Rocket, and Upay, to process withdrawal requests, and to maintain accurate financial records of all account activity.
• KYC and fraud prevention: to verify player age and identity as required for responsible gaming compliance, and to detect, investigate, and prevent fraudulent activity, collusion, or money laundering.
• Customer support: to respond to your questions, complaints, or requests submitted via live chat or email, and to maintain a record of support interactions for quality and training purposes.
• Service improvement and personalisation: to analyse aggregated, anonymised usage patterns that help sbaji improve platform performance, game selection, and user experience for players across Dhaka, Chittagong, Sylhet, and throughout Bangladesh.

sbaji does not sell your personal data. We may share specific categories of personal data with the following categories of third parties, strictly on a need-to-know basis and only for the purposes listed:

• Payment processors: bKash, Nagad, Rocket, Upay, and partner banks receive only the minimum transaction data required to process your deposit or withdrawal. They do not receive your betting history or KYC documents.
• Identity verification providers: third-party KYC services may process your identity documents for verification purposes under strict data processing agreements with sbaji.
• Game software providers: providers such as Pragmatic Play, Evolution Gaming, and Spribe receive anonymised session identifiers and gameplay data required to deliver their games through the sbaji platform. They do not receive your name, mobile number, or payment details.
• Law enforcement and regulatory authorities: sbaji may disclose personal data to competent authorities where required to do so by law, court order, or in connection with the investigation of fraud or financial crime.

All third-party service providers engaged by sbaji are contractually required to handle your data in accordance with applicable data protection standards and to use it only for the specific purpose for which it was disclosed to them.

sbaji uses cookies and similar lightweight tracking technologies to maintain your session, remember your preferences, and analyse aggregated, anonymised traffic patterns on the platform. sbaji uses the following categories of cookies:

• Essential cookies: strictly necessary for the platform to function. These enable login session persistence, language preference storage, and secure payment flow continuity. They cannot be disabled without breaking core site functionality.
• Analytical cookies: used to measure how players navigate the platform. All data collected by analytical cookies is aggregated and anonymised before analysis — individual player browsing patterns are not stored or profiled.
• Preference cookies: used to remember your platform preferences, such as language selection. You may clear these at any time via your browser settings without affecting your ability to use sbaji.

sbaji does not use third-party advertising cookies or behavioural profiling cookies that track your activity across websites other than sbaji.bio. You may manage or disable non-essential cookies through your device's browser settings.

sbaji retains personal data only for as long as is necessary to fulfil the purpose for which it was collected. The following retention periods apply: registration and account data is retained for the duration of your active account and for a period of five years following account closure; KYC documents are retained for five years following account closure or the date of last transaction, whichever is later; transaction records are retained for a minimum of five years for financial record-keeping purposes; gameplay logs are retained for two years and then permanently deleted from active systems.

When personal data is no longer required, sbaji permanently deletes or anonymises it in a manner that makes re-identification impossible. Upon receiving a deletion request from a verified account holder, sbaji will action the deletion within 30 days to the extent that retention is not required by law.

As a sbaji player, you have the following rights with respect to the personal data we hold about you. To exercise any of these rights, contact sbaji support via live chat or email at [email protected]:

• Right of access: you may request a full copy of the personal data sbaji holds about you, presented in a clear and readable format. sbaji will respond within 20 business days.
• Right to rectification: if any personal data sbaji holds about you is inaccurate or incomplete, you may request that it be corrected or completed. Corrections to KYC data may require submission of updated documentation.
• Right to erasure: you may request deletion of your personal data. sbaji will action erasure requests within 30 days, subject to legal retention obligations. Data required by law to be retained cannot be deleted until the applicable retention period expires.
• Right to restrict processing: you may request that sbaji restrict the processing of your personal data while a correction or erasure request is under review, or if you believe processing is unlawful.
• Right to withdraw consent: where sbaji processes your data on the basis of your consent (for example, for optional marketing communications), you may withdraw that consent at any time. Withdrawal does not affect processing carried out before withdrawal.

sbaji will not discriminate against any player for exercising their data rights. Exercising a data rights request will not result in account suspension or withdrawal of services, except where deletion of data that is technically required for account operation makes continued operation of the account impossible.

sbaji implements technical and organisational security measures appropriate to the nature and sensitivity of the personal data we process. These measures include but are not limited to:

• TLS 1.2 or higher SSL encryption on all data in transit between player devices and sbaji servers, ensuring that login credentials, payment data, and personal information cannot be intercepted in plain text.
• Access controls and role-based permissions on internal systems, ensuring that only authorised sbaji personnel can access player personal data, and only within the scope of their assigned role.
• Regular security assessments and monitoring of platform infrastructure to identify and address vulnerabilities before they can be exploited. In the event of a data breach that affects player personal data, sbaji will notify affected players within 72 hours of becoming aware of the breach.

sbaji is strictly prohibited for use by persons under the age of 21. sbaji does not knowingly collect, store, or process personal data of any person under 21 years of age. If sbaji identifies that personal data of a person under 21 has been collected — whether through age verification failure at registration or by any other means — that data will be immediately deleted, the associated account will be permanently closed, and any funds or winnings associated with the account will be forfeited.

If you are a parent or guardian and believe a person under 21 in your care has registered a sbaji account, please contact sbaji support immediately via live chat or at [email protected]. sbaji will verify the matter and take immediate action to close the account and delete all associated data.

sbaji reserves the right to update or replace this Privacy Policy at any time. When material changes are made, sbaji will notify registered players by displaying a prominent notice on the sbaji platform at next login, or by sending a notification to the mobile number registered on the player's account. The updated policy will take effect on the date stated in the notice.

• The revised policy will always be dated at the top so you can see when it was last updated. Continued use of the sbaji platform after the effective date of any update constitutes acceptance of the revised policy.
• If you do not accept a revised policy, you must stop using sbaji and may request account closure and withdrawal of any eligible balance by contacting sbaji support before the effective date.
• The current and all prior versions of this Privacy Policy are archived and available on request by contacting sbaji support. The version published at sbaji.bio/privacy-policy on any given date is the version in force on that date.

If you have any questions, concerns, or requests relating to this Privacy Policy or the personal data sbaji holds about you, you may contact sbaji's support team at any time. sbaji's support team is available 24 hours a day, 7 days a week via live chat on the sbaji platform. You may also submit privacy requests in writing by email to [email protected]. Please note that the email address must be used as a plain-text contact only — do not send sensitive documents such as identity papers or payment details via unencrypted email.

When submitting a data rights request, please include your registered mobile number, the nature of your request, and any relevant account details so that sbaji's team can verify your identity and respond efficiently. sbaji does not charge any fee for handling data rights requests.

This Privacy Policy is governed by the laws applicable to offshore online gambling operations. sbaji is an offshore platform and players are individually responsible for ensuring their use of sbaji complies with the laws of their own jurisdiction. Nothing in this Privacy Policy constitutes legal advice or a representation that use of sbaji is lawful in any particular jurisdiction.

If any provision of this Privacy Policy is found to be invalid or unenforceable by a court of competent jurisdiction, the remaining provisions shall continue in full force and effect.

This Privacy Policy, together with sbaji's Terms & Conditions and Responsible Gaming Policy, forms the complete statement of sbaji's data handling practices. In the event of any conflict between this Privacy Policy and any other sbaji document on the subject of personal data, this Privacy Policy shall prevail.