rbaazi Privacy Policy

rbaazi ("we", "us", "our") operates the online cricket betting and casino platform accessible at rbaazi.net ("the Platform"). We are committed to safeguarding the privacy and personal data of every user ("you", "your") who registers and plays on rbaazi. This Privacy Policy sets out the legal basis on which we process personal data, the categories of data we hold, and the rights available to you under applicable data protection principles.

This Privacy Policy applies to all services offered on the rbaazi Platform, including sports betting, live casino games, slots, and all account management functions. It applies regardless of whether you access the Platform via a desktop browser, mobile browser, or the rbaazi mobile application.

By registering an account on rbaazi, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this policy, you should not create or continue to use a rbaazi account.

rbaazi collects personal data across several categories depending on how you interact with the Platform. The table below summarises what we collect and why:

rbaazi does not collect sensitive categories of personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data, except where a government-issued identity document incidentally contains such information and is required for KYC verification purposes.

rbaazi collects your personal data through the following channels:

• Direct submission: Data you provide when registering an account, completing the KYC verification process, making a deposit or withdrawal, contacting customer support, or responding to a promotional survey.
• Automated collection: Technical data collected automatically when you visit the Platform, including IP address, device identifiers, browser fingerprint, session logs, and clickstream data gathered via server logs and cookies.
• Payment providers: Confirmation and reference data received from bKash, Nagad, Rocket, Upay, SureCash, and partner banks when a financial transaction is initiated or completed.
• Identity verification providers: Where rbaazi uses a third-party KYC service to verify documents you have submitted, that provider may return a verification result and associated risk score to rbaazi.
• Fraud prevention partners: Risk signals and device reputation data shared by our anti-fraud partners to help identify suspicious account activity before it causes harm.

rbaazi processes personal data strictly for the purposes listed below. We do not use your data for any purpose that is incompatible with the reason it was originally collected:

• Account management: Creating and maintaining your rbaazi account, verifying your identity and age, processing login requests, and managing account security settings including two-factor authentication.
• Transaction processing: Receiving BDT deposits via supported payment methods, processing withdrawal requests to your verified payment account, and maintaining an accurate ledger of your account balance and transaction history.
• Legal and regulatory compliance: Fulfilling age verification obligations, conducting anti-money laundering (AML) checks, responding to lawful requests from regulatory authorities, and retaining records for the legally required retention periods.
• Fraud and security: Detecting and preventing unauthorised account access, identifying suspicious betting patterns, investigating potential match-fixing activity, and protecting the integrity of the Platform for all users.
• Responsible gaming: Monitoring account activity for signs of problem gambling, applying deposit and loss limits set by the user, enforcing self-exclusion periods, and delivering reality-check notifications.
• Customer support: Responding to your enquiries, resolving disputes, processing complaints, and maintaining a record of your support history for quality and compliance purposes.
• Platform improvement: Analysing aggregated, anonymised behavioural data to improve the user experience, optimise game selection, and refine the performance of the Platform.
• Marketing communications: Sending you promotional offers, bonus notifications, and seasonal campaign messages where you have provided explicit consent to receive such communications. You may withdraw consent at any time via your account settings or by emailing [email protected].

rbaazi processes your personal data under the following legal bases:

• Contractual necessity: Processing required to perform the contract between you and rbaazi — including account creation, transaction processing, and customer support — is carried out because it is necessary to deliver the services you have requested.
• Legal obligation: Certain processing activities — including AML checks, identity verification, and record retention — are required by applicable law and cannot be avoided regardless of your preferences.
• Legitimate interests: Processing for fraud prevention, security monitoring, and Platform improvement is carried out on the basis of rbaazi's legitimate interest in operating a safe, fair, and commercially sustainable platform, provided those interests are not overridden by your rights and freedoms.
• Consent: Processing for direct marketing communications and non-essential cookies is carried out only where you have given explicit, informed consent. You retain the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

rbaazi does not sell, rent, or trade your personal data to third parties for their own commercial purposes. Data is shared only in the following limited circumstances:

• Payment processors: bKash, Nagad, Rocket, Upay, SureCash, and our banking partners receive the minimum data necessary to process your deposit or withdrawal transaction. These providers are bound by their own data protection obligations and are not authorised to use your data for any other purpose.
• Identity verification providers: Our KYC partner receives copies of verification documents you submit in order to return a verification result to rbaazi. Documents are handled in accordance with the KYC provider's own certified data security standards.
• Fraud prevention and risk services: Anonymised or pseudonymised risk signals may be exchanged with our anti-fraud partners to identify and block fraudulent account activity. No personally identifiable betting history is shared with these partners.
• Game software providers: Providers such as Evolution Gaming, Pragmatic Play, Ezugi, NetEnt, Microgaming, and Spribe receive a session token and account identifier to deliver their games within the Platform. They do not receive your full name, contact details, or financial data.
• Regulatory and law enforcement authorities: rbaazi will disclose personal data to competent authorities where required to do so by law, court order, or regulatory direction. rbaazi will notify affected users of such disclosure where legally permitted to do so.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of rbaazi's business, personal data held on rbaazi accounts may be transferred to the acquiring entity, subject to equivalent data protection obligations and prior notice to users.

rbaazi uses cookies and similar tracking technologies to operate the Platform, maintain your session, detect fraud, and — where you have consented — to personalise your experience and measure the effectiveness of our promotional campaigns.

The categories of cookies we use are as follows:

• Strictly necessary cookies: These cookies are required for the Platform to function. They maintain your login session, store your language and currency preferences, and enable the bet placement workflow. These cookies cannot be disabled without breaking core Platform functionality.
• Security cookies: Used to detect suspicious login attempts, enforce two-factor authentication sessions, and flag anomalous device behaviour. These cookies are not optional as they are integral to protecting your account.
• Analytics cookies: Aggregated, anonymised data about how users navigate the Platform helps us improve page load times, game discovery, and the deposit flow. Analytics cookies are only set where you have provided consent.
• Marketing / preference cookies: These cookies allow rbaazi to remember your game preferences and, where consent has been given, to serve relevant bonus offers based on your activity. You may withdraw consent for these cookies at any time via your account settings.

You may manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will prevent you from logging in to your rbaazi account. Disabling security cookies may affect our ability to protect your account from unauthorised access.

rbaazi retains personal data for as long as is necessary to fulfil the purposes set out in this Privacy Policy, to comply with applicable legal obligations, and to resolve any disputes or enforce our agreements.

The following indicative retention periods apply:

• Active account data: Retained for the duration of your account relationship with rbaazi plus a minimum period of five years following account closure, to meet anti-money laundering record-keeping requirements.
• Transaction records: Deposit and withdrawal records are retained for a minimum of seven years in accordance with applicable financial record-keeping obligations.
• KYC documentation: Identity documents and verification records are retained for five years following account closure or the date of the last transaction, whichever is later.
• Support communications: Customer support transcripts and complaint records are retained for three years from the date of the interaction.
• Marketing consent records: Records of consent given or withdrawn for marketing communications are retained for three years following the last consent event, to demonstrate compliance.
• Technical / server logs: IP address logs and session data are retained for 12 months unless retained longer in connection with an active security investigation.

Where data is no longer required, rbaazi deletes or anonymises it in a secure manner. Anonymised, aggregated data — which cannot be used to identify any individual — may be retained indefinitely for statistical and analytical purposes.

rbaazi takes the security of your personal data seriously and applies a layered set of technical and organisational measures designed to protect your data against unauthorised access, accidental loss, destruction, or disclosure.

• Encryption in transit: All data transmitted between your device and the rbaazi Platform is encrypted using 256-bit SSL/TLS protocols. Any connection attempt over unencrypted HTTP is automatically redirected to HTTPS.
• Encryption at rest: Sensitive data fields — including financial account references, identity document data, and authentication credentials — are encrypted at rest within rbaazi's database infrastructure.
• Access controls: Access to personal data within rbaazi's internal systems is restricted on a strict need-to-know basis. Staff with access to user data are subject to confidentiality obligations and undergo regular data security training.
• Two-factor authentication: rbaazi offers two-factor authentication (2FA) for all user accounts. We strongly encourage all users to enable 2FA from their account security settings to provide an additional layer of protection beyond their password.
• Penetration testing: rbaazi's Platform infrastructure is subject to regular security assessments and penetration testing by qualified independent security professionals.
• Incident response: In the event of a confirmed personal data breach that poses a risk to affected users, rbaazi will notify affected users without undue delay and will take immediate steps to contain and remediate the breach.

While rbaazi employs industry-standard security measures, no online platform can guarantee absolute security. You also have a responsibility to protect your account by using a strong, unique password and enabling 2FA. rbaazi cannot be held liable for security breaches attributable to your failure to maintain adequate credential security.

rbaazi respects your rights over your personal data. Depending on your circumstances, you may exercise the following rights by contacting us at [email protected]:

• Right of access: You have the right to request a copy of the personal data rbaazi holds about you. We will provide this in a structured, commonly used format within a reasonable timeframe of receiving a valid request.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update most contact information directly from your account settings.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where processing is unlawful. This right is subject to overriding legal obligations that require rbaazi to retain certain data — particularly AML and transaction records — for defined minimum periods.
• Right to restrict processing: You may request that rbaazi restricts the processing of your data in certain circumstances, for example while a rectification request is under review.
• Right to data portability: Where processing is based on your consent or on contractual necessity, you may request a machine-readable copy of your personal data to transfer to another service provider.
• Right to object: You have the right to object to processing carried out on the basis of legitimate interests, including profiling for marketing purposes. Where you object to direct marketing, rbaazi will cease processing your data for that purpose immediately.
• Right to withdraw consent: Where processing is based on your consent — including for marketing communications and non-essential cookies — you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of the above rights, please send a written request to [email protected] with the subject line "Data Rights Request", including your full name, registered email address, and a description of the right you wish to exercise. rbaazi will acknowledge your request within 48 hours and aim to fulfil it within 30 days.

The rbaazi Platform is strictly for persons aged 18 years and above. rbaazi does not knowingly collect personal data from individuals under the age of 18. Age verification checks are performed at the registration stage and again during the KYC process to ensure compliance with this requirement.

If rbaazi discovers that personal data has been collected from a person under the age of 18, the relevant account will be suspended immediately, all funds will be returned via the original payment method, and all personal data associated with that account will be deleted from our systems within a reasonable timeframe, subject to any legal obligations that require temporary retention.

If you are a parent or guardian and believe that a minor in your care has registered an account on rbaazi, please contact us immediately at [email protected] with the subject line "Minor Account Report". We will investigate and act promptly upon receipt of your notification.

The rbaazi Platform integrates with a number of third-party service providers whose services are necessary to deliver the full betting and casino experience. These integrations are subject to their own privacy practices, which rbaazi does not control. However, all third-party providers engaged by rbaazi are required to process your data only as instructed by rbaazi and in accordance with applicable data protection standards.

Third-party services integrated into the rbaazi Platform include:

• Game software providers: Evolution Gaming, Pragmatic Play, Ezugi, NetEnt, Microgaming, and Spribe deliver game content through the Platform. These providers may collect technical session data necessary to deliver and audit their game rounds.
• Payment gateways: bKash, Nagad, Rocket, Upay, SureCash, and integrated banking partners handle the financial transaction layer. Your full payment credentials are managed by these providers directly and are not stored on rbaazi's servers.
• Analytics providers: Where you have consented to analytics cookies, aggregated usage data may be processed by our analytics platform. No personally identifiable data is included in these reports.
• Customer support platform: Our live chat and support ticketing system is operated on infrastructure that may process your name, email address, and the content of your support messages in order to manage your enquiry.

rbaazi is not responsible for the privacy practices of third-party websites or services that may be linked to or referenced from the Platform. We encourage you to review the privacy policies of any third-party service before sharing personal data with them.

rbaazi reserves the right to update this Privacy Policy at any time in response to changes in applicable law, changes in our data processing practices, or improvements to the way we communicate our privacy commitments to users.

Where a material change is made to this Privacy Policy — one that significantly affects how we collect, use, or share your personal data — rbaazi will notify registered account holders via email and display a prominent notice on the Platform at least 14 days before the revised policy takes effect. Non-material updates, such as corrections of typographical errors or clarifications that do not alter the substance of any provision, may take effect immediately.

The "Last updated" date at the top of this page reflects the date of the most recent revision. Your continued use of the rbaazi Platform after a revised Privacy Policy takes effect constitutes your acceptance of the updated terms. If you do not agree with any revision, you should close your account before the revision's effective date.

All previous versions of this Privacy Policy are archived and available upon request by contacting [email protected].

If you have any questions, concerns, or requests relating to this Privacy Policy or the way rbaazi processes your personal data, please reach out to us through the following channel:

• Email: [email protected] — use the subject line "Privacy Enquiry" for the fastest routing to our data team.
• Live Chat: Available 24/7 on the rbaazi Platform and mobile application. Bangladesh Standard Time (UTC+6) support is available at all hours.
• WhatsApp: +880 1700-000000 — for urgent account-related data concerns.

rbaazi aims to acknowledge all privacy-related enquiries within 24 hours and to provide a substantive response within 10 business days. For formal data rights requests, please refer to Section 10 of this policy for the correct procedure.