🔏 Your Data, Your Rights

fbaja Privacy Policy: How We Protect Your Personal Data

This Privacy Policy explains what personal data fbaja collects from players in Bangladesh, how that data is used, and what rights you have over your information. We are committed to handling your data with transparency and care.

Last updated: January 2026

1. Introduction

This Privacy Policy applies to all users of the fbaja platform, including registered players, visitors to the website, and anyone who contacts fbaja support. By registering an account or using the fbaja platform in any way, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein.

fbaja is operated by the fbaja platform team and serves players based in Bangladesh. We take the privacy and security of your personal data seriously. This Policy sets out, in plain language, exactly what data we collect, why we collect it, how long we keep it, and what your rights are with respect to that data. If you have any questions about how fbaja handles your personal data, contact us at [email protected].

ℹ️
Policy scope: This Privacy Policy covers data collected through the fbaja website and any related support or communication channels. It does not apply to third-party game providers, payment processors or external websites that may be linked from or integrate with the fbaja platform — those parties operate under their own privacy policies.

Data We Collect at a Glance

The following categories summarise the types of personal data fbaja collects from players. Full details of each category are provided in Section 1 below.

👤
Identity Data
Name, date of birth, mobile number used at registration.
💳
Financial Data
Payment method details, transaction history, deposit and withdrawal records.
📱
Technical Data
IP address, device type, browser, OS version, session logs.
🎮
Gaming Data
Game history, bet amounts, win/loss records, session duration.
Section 1

Information We Collect

fbaja collects personal data that you provide directly, data that is generated automatically when you use the platform, and data we receive from payment service providers in connection with your transactions.

Identity and Contact Data
When you register an account with fbaja, we collect your full name, date of birth, mobile number, and any additional identity documents submitted during KYC verification. This data is required to create and manage your account and to comply with age verification obligations.
Financial and Transaction Data
fbaja records details of all deposits and withdrawals made on your account, including the payment method used (e.g. bKash, Nagad, Rocket), transaction reference numbers, amounts, dates and times. We do not store full mobile financial account credentials; payment authentication is handled directly by your mobile financial service provider.
Technical and Device Data
When you access the fbaja platform, we automatically collect certain technical data including your IP address, device type (Android or iOS), browser type, operating system version, screen resolution, and session log data. This data is used to maintain platform security, diagnose technical issues, and detect unusual access patterns.
Gaming Activity Data
fbaja records your gaming activity on the platform, including which games you play, bet amounts, outcomes, session start and end times, and responsible gaming tool settings (such as deposit limits you have configured). This data is used for account management, dispute resolution, and to provide responsible gaming features.
Section 2

How We Use Your Personal Data

fbaja uses the personal data we collect exclusively for legitimate operational purposes connected to running the platform and serving our players. We do not use your data for any purpose not described in this Policy. The specific purposes for which we process your personal data are:

  • To create and manage your fbaja account, verify your identity, and process your registrations, deposits and withdrawals.
  • To provide customer support, respond to queries and complaints, and resolve disputes related to your account or gaming activity.
  • To detect, investigate and prevent fraud, money laundering, collusion and other prohibited conduct as described in our Terms and Conditions.
  • To maintain and improve the technical performance, security and reliability of the fbaja platform, including monitoring for unusual access patterns and potential security threats.
  • To comply with applicable legal and regulatory obligations, including age verification, anti-money laundering requirements, and responding to lawful requests from competent authorities.
  • To operate the responsible gaming programme, including administering deposit limits, session reminders and self-exclusion requests that players configure on their accounts.
Section 3

fbaja processes your personal data on the following legal grounds, depending on the specific purpose for which the data is being used:

Contractual Necessity
Processing your identity data, financial data and gaming activity data is necessary for fbaja to perform its obligations under the Terms and Conditions you agreed to when registering — specifically, to operate your account, process transactions and provide gaming services.
Legitimate Interests
fbaja processes technical and device data on the basis of its legitimate interest in maintaining platform security, preventing fraud, and improving the quality of the service provided to players. This processing is proportionate and does not override your rights and freedoms.
Legal Obligation
Certain data processing activities — including age verification, KYC documentation retention, and anti-money laundering transaction monitoring — are carried out because fbaja is legally required to perform them as a condition of operating a gaming platform.
Section 4

Sharing Your Personal Data

fbaja does not sell your personal data to third parties. We share your data only with the limited categories of recipients described below, and only to the extent necessary for the purposes stated in this Policy.

Payment Service Providers
When you make a deposit or request a withdrawal, transaction data is shared with the relevant mobile financial service provider (bKash, Nagad, Rocket or Upay) to the extent necessary to process the payment. These providers process transaction data under their own privacy policies and terms of service.
Game Content Providers
When you play games provided by third-party studios such as Pragmatic Play, Evolution Gaming or Spribe, limited technical session data (such as a session token) is shared with those providers to enable the game to function. These providers do not receive your full identity data or payment details.
Legal and Regulatory Authorities
fbaja will disclose personal data to competent legal and regulatory authorities where required to do so by law, by court order, or where fbaja has a good-faith belief that such disclosure is necessary to prevent fraud, money laundering or other criminal activity.
No sale of data
fbaja does not sell, rent, or trade your personal data to advertisers, data brokers, or any other commercial third party. Your data is used only for the operational and legal purposes described in this Privacy Policy.
Section 5

Payment Data and Financial Information

fbaja takes the security of financial data with particular seriousness. When you make a deposit via bKash, Nagad, Rocket or Upay, the payment authentication process occurs directly within your mobile financial service app — fbaja does not handle or store your mobile banking PIN, password, or full account number. fbaja receives only a transaction confirmation and reference number from the payment provider after the transaction is completed.

All transaction records stored by fbaja — including deposit amounts, withdrawal amounts, and payment method references — are retained in encrypted form. Access to financial records is restricted to authorised fbaja personnel who require it for specific operational or compliance purposes. Financial data is never transmitted in unencrypted form.

Section 6

Data Security

fbaja implements a range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration or destruction. The key security measures currently in place include:

  • SSL (Secure Sockets Layer) encryption applied to all data transmitted between your device and the fbaja platform, ensuring that your session data and account information cannot be intercepted in transit.
  • Password hashing — player passwords are stored in a securely hashed format. fbaja does not store plaintext passwords and support staff do not have access to your password.
  • Access controls — internal access to player personal data is restricted on a need-to-know basis. Only authorised personnel with a specific operational reason may access personal data, and all access is logged.
  • Security monitoring — the fbaja platform is monitored continuously for suspicious activity, unusual login patterns and potential security vulnerabilities. Security incidents are investigated and addressed promptly.
🔒
Your responsibility: While fbaja maintains robust server-side security, the security of your account also depends on you keeping your login credentials confidential. Never share your fbaja password with anyone. fbaja support will never ask you for your password. If you believe your account has been accessed without authorisation, contact support immediately.
Section 7

Data Retention

fbaja retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. For active accounts, personal data is retained for the duration of your account registration with fbaja. For accounts that have been closed, personal data is retained for a minimum period following closure as required to comply with anti-money laundering regulations, resolve any outstanding disputes, or respond to regulatory inquiries.

Anonymised or aggregated data (data from which all personal identifiers have been removed) may be retained indefinitely for statistical and analytical purposes. Such data cannot be used to identify any individual player.

Section 8

Your Privacy Rights

As a player on the fbaja platform, you have the following rights in relation to your personal data. To exercise any of these rights, contact fbaja support at [email protected] with the subject line "Privacy Rights Request". fbaja will respond to all verified rights requests within a reasonable timeframe.

Right of Access
You have the right to request a copy of the personal data fbaja holds about you. Upon a verified request, fbaja will provide you with a summary of the data held, the purposes for which it is processed, and the categories of recipients with whom it has been shared.
Right to Rectification
If any personal data fbaja holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update certain account information directly through your account settings; for changes to identity data you must contact support and provide supporting documentation.
Right to Erasure
You may request that fbaja delete your personal data. Note that this right is subject to limitations — fbaja may be legally obliged to retain certain data (such as transaction records and KYC documents) for a minimum period after account closure regardless of an erasure request. Where fbaja is unable to fulfil an erasure request in full, it will explain which data must be retained and why.
Right to Object
Where fbaja processes your data on the basis of its legitimate interests, you have the right to object to that processing. fbaja will review your objection and cease processing unless it can demonstrate compelling legitimate grounds that override your interests, or unless the processing is necessary for the establishment, exercise or defence of legal claims.
Right to Withdraw Consent
Where fbaja processes data on the basis of your consent, you may withdraw that consent at any time by contacting support. Withdrawal of consent does not affect the lawfulness of any processing that occurred prior to the withdrawal.
Section 9

Cookies and Tracking Technologies

fbaja uses cookies and similar lightweight tracking technologies on its website to maintain session state, remember your preferences and ensure the platform functions correctly. A "cookie" is a small text file placed on your device by the website. fbaja uses only functional and security cookies — we do not place advertising cookies or third-party tracking cookies on your device. Session cookies are deleted when you close your browser. Persistent cookies (such as those that remember your language preference) are retained for a defined period.

You may configure your mobile browser settings to refuse cookies or to alert you when a cookie is being placed. However, disabling cookies may affect the functionality of certain parts of the fbaja platform, including the ability to maintain a logged-in session. If you have questions about the specific cookies fbaja uses, contact [email protected].

Section 10

Children's Privacy

The fbaja platform is strictly restricted to adults aged 21 and above. fbaja does not knowingly collect personal data from any person under the age of 21. If you are a parent or guardian and believe that a person under 21 has registered on fbaja or provided personal data to fbaja, please contact [email protected] immediately. Upon receiving such a notification, fbaja will promptly investigate and, if confirmed, will delete the relevant account and all associated personal data without delay.

Section 11

Changes to This Privacy Policy

fbaja reserves the right to update this Privacy Policy at any time. When changes are made, the "Last updated" date at the top of this page will be revised. Where a change is material — for example, a change to the categories of data we collect or to the parties with whom we share data — fbaja will take reasonable steps to notify active players through the platform prior to the change taking effect.

Your continued use of the fbaja platform after a revised Privacy Policy has been published constitutes your acceptance of the revised Policy. If you do not accept a revised Policy, you should cease using the platform and may request account closure by contacting fbaja support.

Section 12

Contact Us About Privacy

If you have any questions, concerns or requests relating to this Privacy Policy or to the personal data fbaja holds about you, please contact the fbaja support team. All privacy-related enquiries are handled with appropriate confidentiality and will be acknowledged promptly.

Privacy Contact
Email: [email protected] — for privacy-related requests, include "Privacy Rights Request" in the subject. Responses are typically provided within a few business days. For urgent matters such as suspected unauthorised access to your account, please mark your message as urgent and fbaja support will prioritise your case.

Learn More About Your Rights on fbaja

Read our Terms and Conditions for a full overview of how the platform operates, or visit our FAQ for quick answers to common questions about your account, payments and security.

Terms & Conditions View FAQ