ybajee Privacy Policy

Information We Collect

ybajee collects personal data through several means during the course of your relationship with the Platform. The categories of personal data we collect include:

How We Use Your Personal Data

ybajee processes your personal data only where a lawful basis exists for doing so. The primary purposes for which we use your data are:

• Account management: To create, maintain, verify, and administer your ybajee account, including identity verification and age confirmation.
• Service delivery: To process deposits and withdrawals via bKash, Nagad, Rocket, and Upay; to settle bets and game outcomes; and to provide access to all Platform features.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, money laundering, unauthorised access, and other prohibited conduct. This includes automated monitoring of betting patterns and transaction behaviour.
• Responsible gaming: To monitor gameplay data for indicators of problem gambling and to apply any responsible gaming restrictions you have requested, such as deposit limits or self-exclusion.
• Legal compliance: To comply with applicable laws, regulations, court orders, and lawful requests from authorities. This includes retaining transaction records for anti-money laundering purposes.
• Customer support: To respond to your enquiries, resolve disputes, and process complaints effectively.
• Marketing communications: To send you promotional offers, bonus notifications, and platform updates where you have provided explicit consent. You may withdraw this consent at any time.
• Platform improvement: To analyse usage patterns, conduct internal research, and enhance the functionality, security, and user experience of the Platform.

Sharing Your Personal Data

ybajee does not sell your personal data. We may share your data with the following categories of third parties only where necessary and under appropriate data protection safeguards:

• Payment processors: bKash, Nagad, Rocket, and Upay receive transaction data necessary to process your deposits and withdrawals. These providers operate under their own privacy policies and are responsible for their own data handling practices.
• Game providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other game studios may receive session identifiers and gameplay data to deliver game content and resolve technical disputes. Game providers do not receive your full identity or financial data.
• Identity verification services: Third-party KYC providers may process identity document data on our behalf to verify your age and identity. These providers are bound by strict confidentiality and data processing agreements.
• Legal and regulatory authorities: Where required by law, court order, or lawful regulatory request, ybajee may disclose personal data to law enforcement, financial intelligence units, or other competent authorities.
• IT and security service providers: Hosting, cloud infrastructure, and cybersecurity vendors who process data on our behalf under data processing agreements that require equivalent data protection standards.

All third-party data processors engaged by ybajee are contractually required to process personal data only for the purposes specified by ybajee and to maintain appropriate technical and organisational security measures.

Data Retention

ybajee retains personal data for as long as is necessary to fulfil the purposes for which it was collected, to provide the services you have requested, and to meet our legal obligations. Specific retention periods include:

• Account data and transaction records: Retained for a minimum of five years following account closure or last account activity, in compliance with anti-money laundering obligations.
• Identity verification documents: Retained for a minimum of five years from the date of submission, or longer if required by applicable law.
• Gameplay and betting history: Retained for a minimum of three years for fraud detection, dispute resolution, and responsible gaming monitoring purposes.
• Support communications: Retained for two years following resolution of the relevant query or complaint.
• Marketing consent records: Retained until consent is withdrawn and for one year thereafter to demonstrate compliance.
• Technical and cookie data: Session data is deleted at the end of each session; aggregate analytics data is retained for up to 24 months.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked to any identifiable individual.

Data Security

ybajee implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. These measures include:

• SSL/TLS encryption on all data transmitted between your device and the Platform.
• Encrypted storage for all sensitive personal data fields including identity document references and payment identifiers.
• Access controls ensuring that only authorised personnel with a legitimate business need may access personal data, governed by role-based permissions and two-factor authentication.
• Regular security audits and penetration testing conducted by qualified independent security professionals.
• Intrusion detection systems and real-time monitoring to identify and respond to anomalous access patterns.
• Staff training on data protection responsibilities and secure data handling procedures.

While ybajee takes every reasonable precaution to protect your data, no system is completely immune to security risks. In the event of a data breach that is likely to result in risk to your rights and freedoms, ybajee will notify affected players without undue delay and will take immediate remedial action.

International Data Transfers

ybajee operates as an internationally managed platform, and as a result your personal data may be transferred to and processed in countries outside Bangladesh. Where such transfers occur, ybajee ensures that appropriate safeguards are in place to protect your data, including contractual protections with data recipients that require equivalent standards of data protection to those applied within the Platform. By using the Platform, you acknowledge and consent to such international transfers where they are necessary to deliver the services you have requested.

Your Data Rights

ybajee respects your rights in relation to your personal data. As a player, you are entitled to exercise the following rights by contacting [email protected]:

ybajee will respond to all verified data rights requests within 30 days of receipt. Where a request is complex or numerous, the response period may be extended by a further 60 days with prior notice to you. There is no charge for exercising any of the above rights, except where requests are manifestly unfounded or excessive, in which case a reasonable administrative fee may apply.

Marketing Communications

With your explicit consent, ybajee may send you promotional emails, SMS notifications, or in-platform messages about bonuses, new games, seasonal offers (such as Eid promotions, BPL season offers, or Pohela Boishakh specials), and other Platform news. You may withdraw your consent to receive marketing communications at any time by:

• Clicking the unsubscribe link included in any marketing email from ybajee.
• Updating your communication preferences within your account settings.
• Contacting [email protected] with a written request to opt out of all marketing.

Withdrawal of marketing consent does not affect the lawfulness of processing based on consent before its withdrawal. Transactional communications — such as deposit confirmations, withdrawal notifications, and security alerts — are not marketing communications and will continue to be sent regardless of your marketing preferences, as they are necessary for the operation of your account.

Cookies & Tracking Technologies

ybajee uses cookies and similar technologies (including local storage and session storage) to operate the Platform, remember your preferences, maintain your login session, and collect analytics data. The types of cookies used are:

• Strictly necessary cookies: Required for the Platform to function. These cannot be disabled. They include session authentication tokens and security cookies.
• Functional cookies: Remember your preferences such as language settings and game display options to personalise your experience.
• Analytics cookies: Collect anonymous usage data to help us understand how players interact with the Platform and identify areas for improvement. This data is aggregated and does not identify individual users.
• Fraud prevention cookies: Used to identify unusual or suspicious access patterns that may indicate bot activity or account takeover attempts.

You may control non-essential cookies through your browser settings. Note that disabling certain cookies may affect the functionality of the Platform. ybajee does not use third-party advertising cookies or behavioural tracking cookies that build profiles for external advertising purposes.

Children & Age Verification

The ybajee Platform is strictly for adults aged 21 years and above. We do not knowingly collect or process personal data from individuals under the age of 21. During registration, all players are required to confirm their age and may be asked to provide documentary proof of age as part of our verification process. If ybajee discovers that an account has been registered by or on behalf of a person under 21, the account will be immediately closed, any funds deposited will be returned to the source payment method after verification, and all associated data will be deleted promptly. Parents and guardians who believe a minor has accessed the Platform should contact [email protected] immediately.

Changes to This Policy

ybajee reserves the right to update or amend this Privacy Policy at any time. When material changes are made, we will notify registered players by posting a prominent notice on the Platform or by email where a valid address is held on file. The updated Policy will take effect 7 days after notification for existing players. Continued use of the Platform following the effective date of any revision constitutes your acceptance of the updated Policy. We encourage you to review this page periodically to stay informed about how ybajee handles your personal data.

Contact & Data Enquiries

If you have any questions, concerns, or requests relating to this Privacy Policy or the way ybajee processes your personal data, please contact our support team. All privacy-related correspondence should be directed to:

• Email: [email protected] (plain text — not a clickable link)
• Subject line: "Privacy Request — [Your Account Username]" for faster processing.
• Response time: Within 30 days for data rights requests; within 5 business days for general privacy enquiries.
• Operating hours: 24 hours a day, 7 days a week, Bangladesh Standard Time (BST, UTC+6).

ybajee is committed to resolving all privacy concerns promptly and transparently. For a broader overview of your account rights and our platform rules, please also review our Terms & Conditions.