ebaje Privacy Policy

This Privacy Policy ("Policy") is issued by ebaje ("we", "us", "our") and governs the collection, use, storage, and disclosure of personal data relating to registered users and visitors of the ebaje online gaming platform ("Platform") accessible at https://ebaje.bio. By registering an account or using the Platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.

This Policy should be read alongside our Terms & Conditions, which govern your use of the Platform. In the event of any inconsistency between this Policy and the Terms & Conditions, the Terms & Conditions shall prevail to the extent of the inconsistency, except where this Policy sets out a higher standard of data protection, in which case this Policy prevails.

ebaje collects personal data that is necessary to operate the Platform, provide gaming services, process financial transactions, verify your identity, and comply with applicable anti-money laundering and know-your-customer (KYC) obligations. We collect data through three primary channels: information you provide directly when registering or using the Platform, information generated automatically by your use of the Platform, and information received from trusted third-party partners such as payment processors.

The categories of personal data we collect include, but are not limited to:

• Identity data: full legal name, date of birth, gender, nationality, and copies of government-issued identification documents (such as National Identity Card or passport) submitted for KYC purposes
• Contact data: email address, phone number, and residential address
• Financial data: payment method details (bKash number, Nagad number, Rocket number, bank account details), transaction history, deposit and withdrawal records
• Technical data: IP address, device type, browser type and version, operating system, referring URL, and session timestamps
• Usage data: games played, bets placed, wagering history, bonus usage, login frequency, and platform navigation patterns

You are not required to provide all categories of data listed above in order to browse the Platform as a visitor; however, registration, deposits, gameplay, and withdrawals require the collection of at least identity, contact, and financial data.

ebaje uses the personal data it collects only for clearly defined, legitimate purposes. We do not process your data in any way that is incompatible with the purposes for which it was originally collected. The primary purposes for which your data is processed are:

• Account registration and management: to create, verify, and maintain your ebaje player account
• Transaction processing: to process deposits, withdrawals, and refunds via your chosen payment method (bKash, Nagad, Rocket, Upay, Visa, Mastercard, or bank transfer)
• Identity verification (KYC): to comply with anti-money laundering obligations and verify that players meet the minimum age requirement of 21 years
• Platform improvement and personalisation: to analyse gameplay patterns, improve platform features, and deliver a personalised gaming experience tailored to your preferences
• Customer support: to respond to your queries, complaints, and account-related requests in a timely and effective manner
• Responsible gaming compliance: to monitor gameplay activity for indicators of problem gambling and to administer responsible gaming tools such as deposit limits, loss limits, and self-exclusion where appropriate

Where ebaje uses your data for direct marketing purposes (such as sending promotional emails about bonuses, tournaments, or new game releases), we will only do so where you have provided explicit consent to receive such communications. You may withdraw this consent at any time by updating your communication preferences in your account settings or by contacting [email protected].

ebaje processes your personal data on the following legal bases: (a) Performance of contract — processing is necessary for the fulfilment of the agreement between you and ebaje, including the provision of gaming services and the processing of financial transactions. (b) Legal obligation — processing is required for compliance with anti-money laundering laws and KYC regulations applicable to online gaming platforms. (c) Legitimate interests — processing is necessary for the legitimate business interests of ebaje, including fraud prevention, platform security, and responsible gaming monitoring, provided that these interests are not overridden by your fundamental rights and freedoms. (d) Consent — for direct marketing communications and non-essential cookies, processing is based on your explicit consent, which you may withdraw at any time.

ebaje does not process special categories of sensitive personal data (such as health data, racial or ethnic origin, political opinions, or religious beliefs) in connection with the provision of gaming services.

ebaje does not sell, rent, or trade your personal data. We share personal data only where strictly necessary and only with the following categories of recipients:

• Payment processors: bKash, Nagad, Rocket, Upay, Visa, Mastercard, and partner banks — solely for the purpose of processing deposits and withdrawals on your behalf
• KYC and identity verification providers: third-party services engaged to verify the identity of players and comply with age verification and anti-money laundering requirements
• Game technology providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other certified game studios — limited technical data such as session identifiers may be shared for the purpose of game delivery and technical support
• Law enforcement and regulatory authorities: where ebaje is required to disclose personal data by applicable law, court order, or regulatory requirement, we will comply with such obligation and will notify you of the disclosure where legally permitted to do so

All third-party service providers engaged by ebaje are subject to contractual data protection obligations that require them to process your personal data only as instructed by ebaje and to implement appropriate technical and organisational security measures.

ebaje takes the security of financial data with the utmost seriousness. Full payment card numbers, CVV codes, and online banking passwords are never stored on ebaje's servers. When you make a deposit or withdrawal using bKash, Nagad, Rocket, or Upay, the transaction is initiated directly between your mobile financial service account and ebaje's designated settlement account. ebaje records only the transaction reference number, amount, timestamp, and the last four digits or partial identifier of the payment instrument for reconciliation and dispute resolution purposes.

For card payments processed via Visa or Mastercard, card tokenisation is employed so that full card details are processed only by the certified payment gateway and are never transmitted to or stored by ebaje. All payment sessions are secured by SSL/TLS encryption. ebaje regularly reviews its payment data handling procedures to ensure they remain consistent with industry best practices.

ebaje uses cookies and similar tracking technologies to operate the Platform, remember your preferences, maintain your login session, and improve your overall experience. Cookies are small text files placed on your device when you visit the Platform. They do not contain executable code and cannot be used to access other data stored on your device.

ebaje uses the following categories of cookies: (a) Strictly necessary cookies — required for the Platform to function correctly; these cannot be disabled. Examples include session authentication cookies and security cookies. (b) Functional cookies — used to remember your preferences such as language selection and display settings. (c) Analytics cookies — used to collect aggregated, anonymised data about how users interact with the Platform, enabling us to identify performance issues and improve the user experience. ebaje does not use third-party advertising or retargeting cookies.

You may manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies may prevent certain features of the Platform from functioning correctly. For further information about the cookies we use, please contact us at [email protected].

ebaje retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. Specifically: account data and transaction records are retained for a minimum of five (5) years from the date of the last transaction on your account, in compliance with applicable anti-money laundering regulations. KYC documentation is retained for a minimum of five (5) years from the date of account closure. Gameplay and usage data is retained for three (3) years from the date of collection for platform improvement and responsible gaming monitoring purposes.

Upon the expiry of the applicable retention period, your personal data will be securely deleted or anonymised so that it can no longer be associated with your identity. Where ebaje is required by law to retain your data beyond the standard retention period, we will do so and will notify you where legally required.

ebaje implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include: SSL/TLS encryption for all data transmissions between your device and our servers; encrypted storage of sensitive personal data including identity documents and financial records; two-factor authentication (2FA) available on all player accounts; role-based access controls limiting staff access to personal data on a strict need-to-know basis; regular security audits and penetration testing by qualified third-party security professionals; and real-time fraud detection and suspicious activity monitoring systems.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, ebaje will notify affected users without undue delay once the breach has been identified and assessed. Notification will be provided via your registered email address and will include a description of the breach, the likely consequences, and the measures ebaje has taken or proposes to take to address the breach.

You have the following rights in relation to the personal data that ebaje holds about you. To exercise any of these rights, please contact us at [email protected]. We will respond to all valid requests within five (5) business days.

ebaje will not discriminate against you for exercising any of your data rights. If you are not satisfied with ebaje's response to a data rights request, you have the right to escalate your complaint to the relevant data protection authority in your jurisdiction.

The ebaje platform is strictly intended for adults aged 21 years and above. ebaje does not knowingly collect, process, or retain personal data from individuals under the age of 21. If ebaje becomes aware that personal data has been collected from a person under the age of 21, we will take immediate steps to delete that data and close the associated account. If you believe that ebaje may have inadvertently collected data from an underage individual, please contact us immediately at [email protected].

ebaje is an internationally operated platform and your personal data may be transferred to, stored in, and processed in countries outside Bangladesh. Where such transfers occur, ebaje takes steps to ensure that your personal data is afforded an equivalent level of protection to that which it would receive if processed within Bangladesh, including through the use of contractual data protection clauses with all receiving parties.

By using the ebaje platform and providing your personal data, you acknowledge and consent to the transfer of your personal data to countries outside Bangladesh as described in this Policy. Where you withdraw such consent, ebaje may be unable to continue providing certain services to you, and you may need to close your account.

ebaje reserves the right to update or amend this Privacy Policy at any time. Where changes are material, we will notify registered users via email or a prominent notice on the Platform prior to the changes taking effect. The date at the top of this Policy indicates when it was last updated. Your continued use of the Platform following any update to this Policy constitutes your acceptance of the revised terms. If you do not agree to the revised Policy, you should cease using the Platform and may request account closure by contacting [email protected].

If you have any questions about this Privacy Policy, wish to exercise your data rights, or want to raise a concern about how ebaje handles your personal data, please contact our support team. We aim to respond to all data-related queries within five (5) business days. For urgent matters relating to a suspected data breach, please mark your message as urgent.

Data Protection Contact: [email protected]