rabje Privacy Policy — How We Collect, Use, and Protect Your Personal Data

1Personal Data We Collect

1.1 Identity and Registration Data

When you create a rabje account, we collect personal information that is necessary to establish your identity and comply with Know Your Customer (KYC) requirements. This includes:

• Full legal name (as it appears on your government-issued identity document)
• Date of birth (for age verification — you must be 21 or older)
• Bangladesh National Identity Card (NID) number or passport number
• Mobile phone number registered in Bangladesh
• Residential address
• Username and hashed account password

1.2 Financial and Transaction Data

To process deposits and withdrawals, we collect data associated with your payment transactions, including:

• bKash, Nagad, Rocket, or Upay mobile wallet number used for transactions
• Visa or Mastercard details (card type, last four digits, expiry date — full card numbers are never stored by rabje)
• Transaction amounts in Bangladeshi Taka (BDT / ৳)
• Transaction timestamps and reference numbers
• Deposit and withdrawal history associated with your account

1.3 Technical and Device Data

When you access the rabje Platform, our systems automatically record certain technical data, including your IP address, device type (mobile, tablet, or desktop), operating system, browser type and version, session timestamps, and in-game activity logs. This data is used for security monitoring, fraud prevention, and Platform performance optimisation.

1.4 Communications Data

If you contact the rabje support team via email, we retain records of that correspondence including the content of messages, the date and time of contact, and any attachments provided. This allows us to track the progress of support queries and maintain an accurate record of our interactions with you.

1.5 Identity Verification Documents

During the KYC verification process, you may be asked to upload scanned copies or photographs of government-issued identity documents. These documents are stored securely and accessed only by authorised compliance staff for the purpose of identity verification. They are not used for any other purpose.

2How We Collect Your Data

2.1 Directly From You

The majority of the personal data rabje holds about you is provided directly by you during the account registration process, during the KYC verification flow, when you make a deposit or withdrawal request, and when you contact our support team. You are in control of what you provide at each of these stages.

2.2 Automatically Through Platform Use

Certain technical and behavioural data is collected automatically when you use the rabje Platform. This includes the use of cookies, web beacons, server-side session logs, and analytics tools. Details of the specific tracking technologies used by rabje are described in Section 8 (Cookies & Tracking) of this Policy.

2.3 From Third-Party Service Providers

In some cases, rabje may receive data about you from third-party service providers who assist in operating the Platform. For example, payment processors may share transaction status information, and identity verification service providers may share the outcome of document checks. This data is used only for the specific purpose for which it was obtained.

3Purpose of Processing Your Data

The table below sets out the primary purposes for which rabje processes your personal data and the categories of data used for each purpose.

4Legal Basis for Processing

4.1 Contract Performance

Much of the personal data rabje processes is necessary to fulfil our contractual obligations to you as a registered player. This includes processing your identity data to create and maintain your account, and processing your financial data to handle deposits and withdrawals. Without this processing, we cannot provide the services described in the Terms & Conditions.

4.2 Legal Obligation

Certain processing activities are required by applicable law. In particular, anti-money laundering (AML) regulations require us to verify the identity of players, retain transaction records for defined periods, and report suspicious activity to relevant authorities. rabje cannot waive these obligations even at a player's request.

4.3 Legitimate Interests

rabje processes some data on the basis of legitimate interests — for example, fraud prevention, network security, Platform analytics, and responsible gaming monitoring. In each case, we have assessed that these legitimate interests are not outweighed by your right to data privacy, given the limited scope and nature of the processing involved.

4.4 Consent

Where rabje relies on your consent as the legal basis for processing — for example, for sending you promotional communications about bonuses and new game releases — you may withdraw that consent at any time by contacting the support team. Withdrawal of consent does not affect the lawfulness of processing that occurred prior to withdrawal.

5Data Sharing & Disclosure

5.1 Internal Access

Access to your personal data within rabje is restricted to staff members who require it to perform their job functions — for example, compliance officers conducting KYC reviews, support staff handling your queries, and finance staff processing withdrawal requests. All staff with access to personal data are subject to strict confidentiality obligations.

5.2 Third-Party Service Providers

rabje engages third-party service providers to assist in operating the Platform. These providers may process your personal data on our behalf and are permitted to use it only for the specific purpose for which they were engaged. Categories of service providers include:

• Payment processors (bKash, Nagad, Rocket, Upay, Visa, Mastercard network partners)
• Identity verification and KYC technology providers
• Game software providers (Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, Spribe)
• Cloud hosting and server infrastructure providers
• Fraud detection and cybersecurity service providers
• Customer support platform providers

5.3 Legal Disclosure

rabje may disclose your personal data to law enforcement agencies, regulatory bodies, or other competent authorities where required to do so by applicable law — including in response to a valid court order, subpoena, or formal regulatory request. In such cases, we will disclose only the minimum data necessary to comply with the legal requirement.

5.4 Business Transfers

In the event of a merger, acquisition, or sale of all or a substantial part of rabje's business assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and given the opportunity to exercise your data rights before the transfer is completed.

6Data Retention

6.1 General Retention Principle

rabje retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or for as long as we are required to retain it by law. Once the applicable retention period has expired, data is securely deleted from our systems or, where deletion is not technically feasible, permanently anonymised.

6.2 Retention Periods by Data Category

• Account registration data: Retained for the duration of your account and for a minimum of 5 years following account closure, in accordance with anti-money laundering obligations.
• Transaction records: Retained for a minimum of 5 years from the date of each transaction.
• Identity verification documents: Retained for a minimum of 5 years from the date of verification or from account closure, whichever is later.
• Customer support correspondence: Retained for 3 years from the date of the last communication in each support thread.
• Technical and device data (logs): Retained for up to 12 months from the date of collection, unless required for an ongoing fraud investigation.
• Marketing preference data: Retained until you withdraw consent or close your account, whichever occurs first.

6.3 Legal Override

Where a specific legal obligation requires data to be retained for a period longer than stated above, the legal requirement takes precedence. Conversely, if a legitimate deletion request is received and no legal hold applies, data will be deleted within 30 days of the request being actioned.

7Data Security

7.1 Technical Security Measures

rabje implements a range of technical security controls to protect your personal data from unauthorised access, disclosure, alteration, or destruction. These measures include SSL/TLS encryption for all data in transit, AES-256 encryption for sensitive data stored at rest, firewalls and intrusion detection systems, regular security patching and vulnerability scanning, and strict access controls limiting which staff members can access which data categories.

7.2 Organisational Security Measures

In addition to technical controls, rabje maintains organisational measures to support data security. These include staff training on data privacy obligations, background checks for staff with access to sensitive player data, defined incident response procedures, and regular internal reviews of data handling practices.

7.3 Data Breach Response

In the event of a personal data breach that poses a risk to your rights and freedoms, rabje will take prompt steps to contain the breach, assess its scope, and notify affected players without undue delay. Notifications will be sent to the mobile number or email address registered on your account. We will describe the nature of the breach, the data affected, and the steps we have taken and recommend you take in response.

8Cookies & Tracking Technologies

8.1 What Are Cookies

Cookies are small text files placed on your device when you visit the rabje website. They allow the Platform to remember certain information about your session — such as your login state, language preferences, and game history — so that you do not need to re-enter information on every page load.

8.2 Types of Cookies Used

• Essential cookies: Required for the Platform to function. They enable core features such as account authentication, secure session management, and payment processing. These cannot be disabled without impairing your ability to use rabje.
• Analytics cookies: Used to collect anonymised data about how players navigate and interact with the Platform. This helps us identify usability issues and improve the overall experience. Analytics data is aggregated and does not identify individual players.
• Preference cookies: Store your optional settings and preferences — such as display options — so they persist across sessions.
• Security cookies: Used to detect and prevent fraudulent activity, including bot traffic and credential stuffing attacks.

8.3 Managing Cookies

You can control non-essential cookies through your browser settings. Most modern browsers allow you to view, delete, and block cookies on a site-by-site basis. Please note that disabling essential cookies will prevent you from logging into your rabje account and using key Platform features. Detailed instructions for managing cookies are available in the help documentation for your specific browser.

8.4 No Third-Party Advertising Trackers

rabje does not embed third-party advertising trackers or social media pixels on the Platform. The cookies described above are used exclusively for operational, analytics, and security purposes related to rabje's own services.

9Your Data Rights

9.1 Right of Access

You have the right to request a copy of the personal data that rabje holds about you. Upon receiving a verified access request, we will provide a summary of your data in a commonly used format within 30 calendar days. In some cases — where the request is complex or involves a large volume of data — we may extend this period by a further 30 days with prior notice.

9.2 Right to Rectification

If the personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Minor corrections — such as a misspelled name or an outdated address — can typically be made by contacting the support team directly. Corrections to identity verification data may require re-submission of supporting documents.

9.3 Right to Erasure

You may request that rabje delete your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose for which it was collected, or where you withdraw consent and no other legal basis for processing applies. Please note that rabje is legally obligated to retain certain categories of data (such as transaction records and KYC documents) for defined periods even after account closure, and erasure requests for such data cannot be fulfilled while the legal retention obligation subsists.

9.4 Right to Restrict Processing

You may request that rabje restricts the processing of your personal data in certain defined circumstances — for example, while a dispute about the accuracy of your data is being resolved. During a restriction period, rabje will continue to store your data but will not process it for other purposes without your consent.

9.5 Right to Data Portability

Where rabje processes your personal data on the basis of your consent or contract performance, and where the processing is carried out by automated means, you have the right to receive your data in a structured, commonly used, machine-readable format so that you may transfer it to another service provider.

9.6 Right to Object

You have the right to object to the processing of your personal data where that processing is based on rabje's legitimate interests. Upon receipt of a valid objection, we will cease the relevant processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.

9.7 Exercising Your Rights

To exercise any of the rights described above, please contact the rabje support team via the email address displayed in the footer of this website. Include your full name, registered mobile number, and a clear description of the right you wish to exercise. We may ask you to verify your identity before processing your request in order to protect your data from unauthorised disclosure.

10Minors & Age Policy

10.1 Strict Age Restriction

The rabje Platform is strictly for adults aged 21 years and above. We do not knowingly collect or process personal data belonging to persons under the age of 21. If rabje becomes aware that personal data has been submitted by or on behalf of a minor, that data will be deleted and the associated account will be closed immediately.

10.2 Parental Responsibility

If you believe that your child has accessed the rabje Platform or provided personal data through the registration process, please contact the support team at the email address in the footer immediately. We will investigate and take appropriate action without undue delay. We recommend that parents and guardians use device-level parental control tools to prevent minors from accessing gambling platforms.

11Changes to This Privacy Policy

11.1 Policy Updates

rabje reserves the right to update this Privacy Policy at any time. When we make material changes — for example, introducing a new category of data processing or changing how we share data with third parties — we will update the effective date displayed on this page and, where reasonably practicable, notify registered players via the mobile number or email address associated with their account.

11.2 Continued Use as Acceptance

Your continued use of the rabje Platform after the effective date of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the changes, you should cease using the Platform and contact the support team to request account closure and, where applicable, deletion of your personal data.

11.3 Version History

rabje maintains an internal record of all previous versions of this Privacy Policy. If you would like to review a prior version, please submit a request to the support team, clearly specifying the time period for which you require the historical version.

12Contact Us Regarding Privacy

12.1 Privacy Queries and Requests

If you have any questions, concerns, or requests relating to this Privacy Policy or the way rabje handles your personal data, please contact us via the email address displayed in the footer of this website. All privacy-related correspondence should be written in English and should clearly state the nature of your query or request, your registered account username, and the relevant section of this Policy you are referencing.

12.2 Response Timelines

rabje aims to acknowledge all privacy-related communications within 48 hours of receipt. Full responses to data subject rights requests — such as access, rectification, or erasure requests — will be provided within 30 calendar days. We operate on Bangladesh Standard Time (BST, UTC+6) and support is available 24 hours a day, 7 days a week.