rabaji Privacy Policy — How We Handle Your Data

When you interact with the rabaji platform — whether by registering an account, making a deposit, placing a wager, contacting support, or simply browsing — we collect certain information about you. This section explains each category of data we collect and the specific circumstances in which it arises.

Registration Data: When you create a rabaji account, you provide your full legal name, date of birth, residential address in Bangladesh, a valid mobile phone number, and a self-chosen password. This information is mandatory — without it, we cannot create a verified player account or process any transactions on your behalf.

Identity Verification (KYC) Data: To comply with anti-money laundering (AML) obligations and to confirm that all players are at least 18 years of age, rabaji may request documentary proof of identity and address at any point. Documents typically requested include a government-issued national ID card (NID), passport, or driving licence, together with a utility bill or bank statement for address verification. These documents are processed and stored securely by our compliance team.

Financial Transaction Data: Every deposit, withdrawal, bonus credit, and wagering transaction conducted on your rabaji account is logged. This includes the transaction amount in Bangladeshi Taka (৳ BDT), the payment method used (e.g., bKash, Nagad, Rocket, Upay, BRAC Bank, City Bank, Islami Bank, Sonali Bank, Visa, Mastercard), the date and time of the transaction, and the transaction status. This data is retained for financial audit, dispute resolution, and regulatory compliance purposes.

Device and Technical Data: When you access the rabaji platform, our servers automatically record certain technical information: your IP address, browser type and version, operating system, device type (desktop, smartphone, tablet), screen resolution, language settings, referring URL, pages visited, time spent on each page, and session duration. This data is used to ensure platform stability, detect fraud and suspicious access patterns, and improve the user experience.

Gameplay Data: All game activity conducted through your rabaji account is recorded, including the games played, bet amounts, outcomes, bonus rounds triggered, and session timestamps. This information is necessary for account management, dispute resolution, responsible gaming monitoring, and platform improvement.

Communications Data: When you contact rabaji's support team via live chat or email, the content of those communications — including your messages, the support agent's responses, and any attachments submitted — is retained for quality assurance, dispute resolution, and training purposes.

Voluntarily Provided Information: If you participate in surveys, promotions, or competitions run by rabaji, you may provide additional information voluntarily. That information will be used only for the stated purpose of the survey or promotion in question.

rabaji uses the personal data we collect strictly for the purposes described in this Policy. We process your data on one or more of the following lawful bases: contractual necessity (to perform our obligations to you as a registered player), legitimate business interest (to detect fraud and improve the platform), legal obligation (to meet AML and KYC requirements), and in some cases your explicit consent (for optional marketing communications).

Account Management and Service Delivery: Your registration data and ongoing account activity data are used to create and maintain your player account, process deposits and withdrawals, credit bonuses, settle wagers, and provide you with an accurate and up-to-date account balance. Without this processing, the core rabaji service cannot function.

Identity and Age Verification: We use KYC data to confirm that every registered player is who they claim to be, that they are at least 18 years of age, and that their payment methods are registered in their own name. This is both a contractual requirement under our Terms & Conditions and a legal obligation designed to protect minors and prevent financial crime.

Fraud Prevention and Security: Technical data — including IP addresses, device fingerprints, login timestamps, and transaction patterns — is analysed by our security and compliance systems to detect and prevent unauthorised account access, bonus abuse, money laundering, collusion, and other forms of fraud. Where suspicious activity is identified, accounts may be suspended pending investigation.

Responsible Gaming Monitoring: Gameplay data and account activity are monitored to identify patterns that may indicate problem gambling behaviour, such as rapidly escalating bet sizes, extended uninterrupted play sessions, or repeated failed withdrawal requests. Where such patterns are detected, our responsible gaming team may reach out proactively. Please visit the Responsible Gaming page for full details of the tools available to you.

Customer Support: Communications data is used to respond to your support enquiries, resolve disputes, and improve the quality of our support service. Support transcripts may be reviewed by team supervisors for quality assurance purposes.

Platform Improvement and Analytics: Aggregated and anonymised technical and gameplay data is used to understand how players use the rabaji platform, identify areas for improvement, optimise page performance, and prioritise new features. This analysis is conducted on anonymised datasets and does not involve identifying individual players.

Legal and Regulatory Compliance: Where required by applicable law, court order, or regulatory direction, rabaji may use or disclose your personal data to meet its legal obligations. This includes responding to lawful requests from Bangladeshi law enforcement or financial intelligence authorities in connection with the investigation of financial crime.

Promotional Communications (Optional): If you have opted in to receive marketing communications from rabaji, we may use your email address or mobile number to send you information about promotions, bonuses, and seasonal events relevant to the Bangladesh market — such as BPL cricket season offers, Eid specials, or Pohela Boishakh promotions. You may opt out of marketing communications at any time by contacting [email protected] or using the unsubscribe mechanism included in each communication.

rabaji does not sell your personal data to any third party. We share data with external parties only where necessary to operate the platform, comply with legal obligations, or protect the security and integrity of the service. All third parties with whom we share data are required to handle it in accordance with applicable data protection standards and are permitted to use it only for the specific purpose for which it was shared.

Payment Service Providers: To process your deposits and withdrawals, we share the minimum necessary financial information with our payment partners — including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank, Visa, and Mastercard. These providers operate under their own privacy policies and comply with applicable financial data protection standards. rabaji does not store full card numbers or mobile banking PINs; payment credentials are tokenised and handled directly by the payment processor.

Game Technology Providers: The casino games and live dealer experiences available on rabaji are powered by third-party game studios including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive anonymised session identifiers and bet data necessary to deliver the game experience. They do not receive your full personal profile, and their data handling is governed by their own privacy frameworks, which we vet as part of our due diligence before onboarding any provider.

Identity Verification Partners: Where we use a third-party KYC service provider to assist with identity document verification, your submitted documents may be processed by that provider's systems. Any such provider is bound by strict confidentiality and data security obligations under our service agreement.

Analytics and Platform Providers: We may use third-party platform infrastructure and analytics services to support the operation of the rabaji website. These providers process technical and aggregated data — such as page load statistics and error logs — under data processing agreements that restrict how they may use that data.

Legal and Regulatory Authorities: rabaji will disclose personal data to governmental, regulatory, or law enforcement authorities where required by a valid legal obligation, court order, or formal investigative request. We will, to the extent permitted by law, notify affected players of any such disclosure unless we are prohibited from doing so.

Business Transfers: In the event of a merger, acquisition, or transfer of all or part of the rabaji business, player data may be transferred to the acquiring entity as part of the transaction. In such circumstances, we will notify affected players in advance and the acquiring entity will be required to honour the terms of this Privacy Policy or obtain fresh consent where required.

The rabaji platform uses cookies and similar local storage mechanisms to deliver a functional, secure, and personalised experience. A cookie is a small text file placed on your device by a website when you visit it. Cookies allow the site to remember information about your visit, such as your preferred settings or active session, so you do not have to re-enter information every time you return.

Strictly Necessary Cookies: These cookies are essential for the rabaji platform to function correctly. They maintain your active login session, preserve your account security state, and enable core features such as the deposit flow, game loading, and live chat. You cannot opt out of strictly necessary cookies — disabling them would cause the platform to malfunction.

Functional Cookies: Functional cookies remember your preferences — such as language settings (English), display preferences, and last-visited sections — to make your return visits more convenient. These cookies do not track your activity on other websites and contain no personally identifiable information.

Analytical Cookies: rabaji uses first-party analytical cookies to understand how players navigate the platform: which pages are visited most, where players spend time, and where they encounter difficulties. This analysis is conducted on aggregated data and is used to improve the platform. We do not use Google Analytics or any third-party analytics service that profiles individual users across the web.

Security and Fraud Prevention Cookies: Certain cookies assist our fraud detection systems in identifying unusual patterns — such as a single account being accessed from multiple IP addresses simultaneously, or rapid account registration from a shared device. These cookies form part of our commitment to keeping your account and funds secure.

What We Do NOT Use: rabaji does not use third-party advertising cookies, retargeting pixels, social media tracking scripts, or any cross-site tracking technologies that would follow your browsing activity beyond the rabaji platform. Your browsing behaviour on other websites is never collected or used by rabaji.

Managing Your Cookie Preferences: Most modern browsers allow you to view, manage, and delete cookies stored on your device through the browser's settings menu. Please note that disabling strictly necessary cookies will prevent you from logging into your rabaji account and using core platform features. Disabling functional or analytical cookies will not affect your ability to use the platform but may reduce the quality of your experience.

rabaji implements a layered set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. While no online system can guarantee absolute security, we apply security practices that are consistent with recognised industry standards for online gaming platforms.

Encryption: All data in transit between your device and the rabaji platform is encrypted using 256-bit SSL/TLS protocols. Data stored on our servers — including account credentials, KYC documents, and financial records — is encrypted at rest using AES-256 encryption. Passwords are hashed using a one-way cryptographic function and are never stored in plaintext form.

Access Controls: Access to personal data held by rabaji is strictly limited to employees and contractors who require it to perform their specific job function. Access is controlled by role-based permissions, multi-factor authentication for administrative accounts, and regular access audits. All staff with access to personal data are bound by confidentiality obligations.

Infrastructure Security: The rabaji platform is hosted on secure servers with firewall protection, intrusion detection systems, regular vulnerability scanning, and automated anomaly alerts. We conduct periodic security assessments to identify and remediate potential weaknesses before they can be exploited.

Incident Response: In the event of a data security incident that may affect your personal information, rabaji will assess the severity of the breach promptly. Where the incident poses a significant risk to affected individuals, we will notify affected players without undue delay and take all reasonable steps to contain, investigate, and remediate the breach.

Data Retention: rabaji retains your personal data for as long as your account is active and for a defined period thereafter to meet our legal, regulatory, and contractual obligations. The general retention periods applied are as follows:

• Active account data (registration details, transaction history, gameplay logs): retained for the lifetime of the account plus five (5) years following account closure, in accordance with standard financial record-keeping obligations.
• KYC documents: retained for five (5) years following account closure or the completion of the relevant KYC process, whichever is later, to comply with anti-money laundering record-keeping requirements.
• Support communications: retained for two (2) years from the date of the communication, unless the communication relates to an ongoing dispute, in which case it is retained until the dispute is fully resolved.
• Cookie and analytical data: session cookies expire at the end of each browsing session; persistent analytical cookies are retained for a maximum of thirteen (13) months.
• Marketing preference records: retained for the lifetime of your account or until you withdraw consent, whichever is earlier.

When the applicable retention period expires, personal data is securely deleted or anonymised in a manner that prevents re-identification. Anonymised datasets may be retained indefinitely for statistical and platform improvement purposes.

As a player on the rabaji platform, you have a number of rights in relation to the personal data we hold about you. These rights are set out below. To exercise any of these rights, please contact our data support team at [email protected] with the subject line "Privacy Rights Request" and a description of your request. We will verify your identity before processing any request and will respond within a reasonable timeframe.

Right of Access: You have the right to request a copy of the personal data that rabaji holds about you, including your registration information, transaction history, KYC records (subject to legal restrictions on disclosure of investigation records), and gameplay data. We will provide this information in a clear, structured format.

Right to Rectification: If any of the personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update your name, address, and contact details directly from your account profile. Where changes require identity re-verification, we will guide you through the process.

Right to Erasure: In certain circumstances, you have the right to request that rabaji delete your personal data. This right applies where the data is no longer necessary for the purpose for which it was collected, where you withdraw consent (and no other legal basis for processing exists), or where the data has been unlawfully processed. Note that this right is not absolute — we may be required to retain certain data to comply with legal obligations (for example, financial transaction records required under AML regulations), and in those cases erasure requests will be partially fulfilled to the extent legally permissible.

Right to Data Portability: Where processing is based on your consent or on contractual necessity, you may request a copy of your personal data in a commonly used, machine-readable format (such as CSV or JSON) so that it can be transferred to another service. This right applies to data you have actively provided to rabaji.

Right to Restrict Processing: You may request that rabaji restrict the processing of your personal data in certain circumstances — for example, while a dispute about data accuracy is being resolved, or where you have objected to processing and we are assessing whether our legitimate interests override your rights.

Right to Object: You have the right to object to rabaji processing your personal data on the basis of legitimate interests where your individual situation warrants it, and to processing for direct marketing purposes (including profiling for marketing). Where you object to direct marketing, we will stop processing your data for that purpose immediately.

Right to Withdraw Consent: Where processing is based on your consent (for example, receipt of promotional communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

Because rabaji handles real-money transactions in Bangladeshi Taka (৳ BDT), financial data privacy is a particularly important aspect of this Policy. This section explains in detail how your payment information is handled when you deposit or withdraw funds using any of the supported payment methods.

Deposit Transactions: When you make a deposit via bKash, Nagad, Rocket, Upay, or a bank transfer from Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, or Sonali Bank, the payment instruction is routed through the payment provider's own secure infrastructure. rabaji receives confirmation of the transaction — including the amount, timestamp, and a transaction reference — but does not receive or store your mobile banking PIN, OTP, or full bank account number.

Card Transactions: Deposits and withdrawals made via Visa or Mastercard are processed through a PCI-DSS compliant payment gateway. Full card numbers (PAN), card verification values (CVV), and expiry dates are entered directly into the payment gateway's encrypted form and are never transmitted to or stored on rabaji's servers. rabaji retains only a tokenised card reference sufficient for transaction matching and dispute resolution.

Withdrawal Processing: To process a withdrawal, rabaji must verify that the destination payment method is registered in your own name and matches the details on your rabaji account. This verification may involve cross-referencing the mobile number registered with your bKash or Nagad account against your rabaji registration details. This check protects against money laundering and ensures that funds cannot be redirected to third-party accounts.

Transaction Records: Complete records of all financial transactions on your rabaji account — including deposits, withdrawals, wagers, wins, losses, bonus credits, and adjustments — are maintained for a minimum of five (5) years following account closure. These records may be reviewed by our internal audit team, shared with payment providers in connection with dispute resolution, or disclosed to regulatory or law enforcement authorities where legally required.

Suspicious Transaction Monitoring: rabaji operates an automated transaction monitoring system designed to identify patterns consistent with money laundering or other financial crime. Where a transaction or series of transactions triggers a monitoring alert, the relevant account will be reviewed by our compliance team. Transactions identified as suspicious may be delayed, blocked, or reported to the appropriate financial intelligence authority in Bangladesh, as required by applicable law.

rabaji reserves the right to update, amend, or replace this Privacy Policy at any time to reflect changes in our data practices, changes to applicable law, or improvements to our platform. When material changes are made, we will notify registered players by email to their registered address or via a prominent notice on the rabaji platform. The effective date at the top of this document will be updated to reflect the date on which the revised Policy came into force.

We encourage you to review this Privacy Policy periodically. Your continued use of the rabaji platform following the posting of an updated Privacy Policy constitutes your acceptance of the changes. If you do not agree with the updated Policy, you should discontinue use of the platform and contact support to arrange account closure and withdrawal of any remaining balance.

Children's Privacy: rabaji is strictly an 18+ platform. We do not knowingly collect personal data from individuals under 18 years of age. If we become aware that personal data has been submitted by a person under 18, that data will be deleted immediately and the associated account will be closed. If you believe a minor has registered on the rabaji platform, please contact us immediately at [email protected].

Links to Third-Party Content: The rabaji platform does not contain links to third-party external websites. All navigation links on rabaji lead to pages within the rabaji.club domain. This Privacy Policy applies solely to data collected through the rabaji platform and does not govern the privacy practices of any third-party service providers (such as bKash, Nagad, or game studios), who operate under their own privacy frameworks.

Contact Us About Privacy: For all privacy-related enquiries, data subject rights requests, or concerns about how rabaji handles your personal information, please contact our support team using the details below. We are committed to resolving privacy concerns promptly and in good faith.

• Email: [email protected] — use the subject line "Privacy Policy Enquiry" or "Privacy Rights Request".
• Live Chat: Available 24/7 from your rabaji account dashboard.
• Response Time: Live chat responses within 3 minutes; email responses within 12 hours (Bangladesh Standard Time, UTC+6).