Your Privacy at rbejee

1 Introduction and Scope

This Privacy Policy ("Policy") describes how rbejee ("we", "us", "our", "the Platform") collects, uses, stores, and protects personal information provided by or collected about users ("you", "your", "the Player") who access or use the rbejee website and services at rbejee.net.

This Policy applies to all personal data processed in connection with your use of the rbejee platform, including account registration, login activity, deposits and withdrawals, gameplay, customer support interactions, and any marketing communications you receive from us. It applies regardless of the device or method through which you access the platform.

By creating an rbejee account or continuing to use the platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. This Policy should be read alongside our Terms and Conditions, which are available at rbejee.net/terms-conditions.

2 Data Controller

rbejee acts as the data controller in respect of all personal data collected through the platform. As data controller, rbejee determines the purposes and means of processing your personal data and is responsible for ensuring that such processing is carried out lawfully, fairly, and transparently.

For all data protection enquiries, requests to exercise your rights, or formal complaints regarding the handling of your personal data, please contact our dedicated data protection team using the contact details set out in Section 15 of this Policy.

3 Data We Collect

rbejee collects only the personal data that is necessary for the purposes described in this Policy. The categories of personal data we may collect include:

Category	Examples of Data Collected	Purpose
Identity Data	Full legal name, date of birth, national ID number, copy of government-issued identification document	Account registration, age verification, identity verification (KYC)
Contact Data	Mobile phone number, email address, residential address	Account communication, support, transaction notifications
Financial Data	bKash / Nagad / Rocket / Upay wallet numbers, transaction IDs, deposit and withdrawal amounts and history	Payment processing, fraud prevention, anti-money-laundering compliance
Technical Data	IP address, device type, browser type and version, operating system, device fingerprint, session timestamps	Security monitoring, fraud detection, platform optimisation
Usage Data	Pages visited, games played, bet amounts, session duration, betting patterns, feature interactions	Platform improvement, responsible gaming monitoring, personalised experience
Communications Data	Records of support conversations (chat, email), feedback submissions, dispute correspondence	Customer service, complaint resolution, staff training, legal defence
Marketing Preferences	Consent records, communication opt-in/opt-out history, promotional preferences	Delivering relevant promotions, managing consent obligations

We do not intentionally collect any special categories of sensitive personal data (such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data) unless required to comply with responsible gaming obligations (for example, where a player self-identifies as a problem gambler and requests self-exclusion).

4 How We Collect Your Data

rbejee collects personal data through the following channels and methods:

• Direct interactions: Data you provide when registering an account, completing identity verification, making deposits or withdrawals, contacting customer support, or responding to surveys or promotions.
• Automated technologies: Technical and usage data collected automatically as you interact with the platform, including through cookies, session logs, server logs, and device fingerprinting tools.
• Payment processors: Transaction data shared with rbejee by payment service providers (bKash, Nagad, Rocket, Upay, and banking partners) when you initiate a deposit or withdrawal.
• Identity verification partners: Where you submit verification documents, data may be processed by our identity verification service provider on our behalf, with results shared with rbejee to fulfil our know-your-customer (KYC) obligations.
• Publicly available sources: In limited circumstances, rbejee may cross-reference data against publicly available sources (such as fraud or sanctions databases) as part of our anti-money-laundering compliance obligations.

5 How We Use Your Data

rbejee uses the personal data we collect for the following purposes:

• Account management: Creating, maintaining, and administering your rbejee account, including processing your registration, verifying your identity, and managing account security.
• Payment processing: Facilitating deposits and withdrawals through supported payment methods including bKash, Nagad, Rocket, and Upay. All transactions are matched to your verified account details.
• Fraud prevention and security: Monitoring account activity, detecting suspicious patterns, preventing unauthorised access, and protecting the platform against fraud, money laundering, and other financial crime.
• Legal and regulatory compliance: Meeting our obligations under applicable anti-money-laundering, counter-terrorism financing, know-your-customer, and data protection requirements.
• Customer support: Responding to your enquiries, complaints, and requests; maintaining records of communications to ensure consistent service quality.
• Responsible gaming: Monitoring gameplay patterns to identify potential signs of problem gambling behaviour and, where appropriate, reaching out to offer support tools or intervention.
• Platform improvement: Analysing aggregated usage data to understand how players interact with rbejee, identify technical issues, and improve the overall platform experience.
• Marketing communications: Sending you information about promotions, bonuses, and platform updates where you have given your explicit consent to receive such communications. You may withdraw consent at any time.

6 Legal Basis for Processing

rbejee processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing required to fulfil our obligations to you under the rbejee Terms and Conditions, including operating your account, processing payments, and providing gaming services.
• Legal obligation: Processing necessary to comply with applicable laws, including anti-money-laundering regulations, know-your-customer requirements, and data retention obligations imposed by financial regulations.
• Legitimate interests: Processing carried out for rbejee's legitimate business interests, including fraud prevention, platform security, network integrity, and internal analytics — provided such interests are not overridden by your rights and interests.
• Consent: Where you have given explicit consent to a specific processing activity, such as receiving marketing communications. You have the right to withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

7 Sharing Your Data

rbejee does not sell, rent, or trade your personal data to any third party for their own marketing or commercial purposes. We may share your data with the following categories of recipients, strictly for the purposes described in this Policy:

• Payment service providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, and Mastercard — to process your deposits and withdrawals. Each provider processes your data under their own privacy policy and data protection obligations.
• Identity verification providers: Third-party KYC and document verification services engaged by rbejee to verify your identity as required by our compliance obligations.
• IT and platform service providers: Companies that provide hosting, server infrastructure, cybersecurity, and software services to rbejee under data processing agreements that require them to handle your data only on our instructions.
• Game providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other game studios whose titles are hosted on rbejee. Technical data necessary for game operation may be processed by these providers. They do not receive your full personal profile.
• Regulatory authorities and law enforcement: Government bodies, financial intelligence units, or law enforcement agencies where rbejee is legally required to disclose data, for example in connection with a criminal investigation, court order, or regulatory inquiry.
• Professional advisers: Lawyers, auditors, and accountants engaged by rbejee, subject to professional confidentiality obligations, where disclosure is necessary to obtain professional advice or defend legal claims.

8 Data Retention

rbejee retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, including satisfying legal, regulatory, accounting, and reporting obligations. The retention periods applied to different categories of data are outlined below:

• Account and identity data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in accordance with anti-money-laundering record-keeping requirements.
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction, as required by financial regulations applicable to payment service operations.
• Customer support communications: Retained for three (3) years from the date of the last communication, to support dispute resolution and quality assurance.
• Technical and usage data: Typically retained for thirteen (13) months from collection, after which it is anonymised or deleted.
• Marketing consent records: Retained for the duration of your consent and for two (2) years following withdrawal of consent, to demonstrate compliance with consent obligations.

At the end of the applicable retention period, your personal data will be securely deleted or anonymised so that it can no longer be associated with you as an individual.

9 Data Security

rbejee takes the security of your personal data seriously and implements a range of technical and organisational measures designed to protect it against unauthorised access, accidental loss, destruction, or alteration. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers.
• Encrypted storage of sensitive account data, including payment method identifiers and identity documents, on secured servers.
• Role-based access controls ensuring that only authorised rbejee personnel with a legitimate need can access personal data.
• Regular security assessments, vulnerability testing, and penetration testing of platform infrastructure.
• Multi-factor authentication requirements for internal staff accessing data systems.
• Incident response procedures enabling rapid identification, containment, and notification in the event of a data breach.

While rbejee implements industry-standard security practices, no method of electronic data transmission or storage is entirely risk-free. In the unlikely event of a data breach that is likely to result in a high risk to your rights and freedoms, rbejee will notify affected account holders without undue delay and in accordance with applicable legal obligations.

10 Cookies and Tracking Technologies

rbejee uses cookies and similar tracking technologies on the platform. Cookies are small text files placed on your device when you visit the platform. They serve several functions essential to the operation and improvement of the platform.

The types of cookies used by rbejee include:

• Strictly necessary cookies: Required for the platform to function correctly. These include session authentication cookies that keep you logged in during your visit. These cookies cannot be disabled without breaking core platform functionality.
• Functional cookies: Used to remember your preferences and settings (such as language and display preferences) to provide a more personalised experience on return visits.
• Analytics cookies: Used to collect aggregated, anonymised data about how players use the platform — for example, which pages are visited most frequently, how long sessions last, and where users encounter errors. This information helps rbejee improve the platform experience.
• Security cookies: Used to detect and prevent fraudulent activity, identify suspicious login patterns, and support account security monitoring.

You can manage or disable non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the rbejee platform. rbejee does not use third-party advertising or retargeting cookies.

11 Your Data Protection Rights

As an rbejee account holder, you have the following rights in relation to your personal data. To exercise any of these rights, please contact our data protection team at [email protected] with the subject line "Data Rights Request":

• Right of access: You may request a copy of all personal data rbejee holds about you, together with information about how that data is being used and shared.
• Right to rectification: You may request that we correct any inaccurate or incomplete personal data held on your account without undue delay.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to legal retention obligations that may require us to retain certain data.
• Right to restriction of processing: You may request that we temporarily restrict the processing of your data while a dispute about accuracy or the legal basis for processing is being resolved.
• Right to data portability: Where processing is based on your consent or on contractual necessity and is carried out by automated means, you may request a copy of your data in a structured, commonly used, machine-readable format.
• Right to object: You may object to processing carried out on the basis of legitimate interests, including for direct marketing purposes. Where you object to marketing, we will stop processing your data for that purpose immediately.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

rbejee will respond to all valid data rights requests within 30 days of receipt. In complex cases, this period may be extended by up to a further 60 days, in which case we will notify you of the extension and the reasons for it within the initial 30-day period.

12 Children and Minors

rbejee is strictly an 18+ platform. We do not knowingly collect, process, or store personal data from any person under the age of 18. If rbejee becomes aware that personal data has been collected from a minor, we will take immediate steps to delete that data and close the associated account.

If you are a parent or guardian and believe that a person under 18 in your care has created an rbejee account or provided personal data to the platform, please contact us immediately at [email protected] so that we can investigate and take appropriate action.

13 International Data Transfers

rbejee's primary operations and data storage are focused on serving the Bangladesh market. In some circumstances, personal data may be processed by our service providers or game technology partners who operate in other countries. Where such international transfers occur, rbejee ensures that appropriate safeguards are in place to protect your personal data to a standard equivalent to that applied within the platform's primary operating jurisdiction.

Such safeguards may include contractual clauses requiring third-party recipients to comply with equivalent data protection standards, and technical security measures including encryption of data in transit and at rest. rbejee does not transfer personal data to third parties in jurisdictions known to have inadequate data protection frameworks without first implementing appropriate contractual protections.

14 Changes to This Policy

rbejee may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable laws, platform features, or the structure of our business. When we make material changes, we will revise the effective date displayed at the top of this page and, where practicable, send a notification to active account holders using the contact details associated with their account.

We encourage you to review this Privacy Policy periodically to remain informed about how rbejee is protecting your data. Your continued use of the platform after any update to this Policy constitutes your acknowledgement of the changes and your agreement to be bound by the revised terms.

15 Contact and Complaints

If you have any questions about this Privacy Policy, wish to exercise any of your data protection rights, or wish to raise a complaint about how rbejee has handled your personal data, please contact our data protection team using the details below:

• Email: [email protected]
• Subject line for data requests: Data Rights Request
• Subject line for privacy complaints: Privacy Complaint
• Support hours: 24 hours a day, 7 days a week
• Response time: Within 2 hours for general queries; within 30 days for formal data rights requests (BST, UTC+6)

rbejee takes all privacy complaints seriously and will acknowledge receipt of your complaint promptly. We will investigate all complaints thoroughly and provide a substantive written response within 30 days. If you are not satisfied with our response to your complaint, you may have the right to escalate the matter to an appropriate data protection supervisory authority.