gbaje2 Privacy Policy

Section 1

Data We Collect

When you register for a gbaje2 account, use the Platform, or interact with our customer support team, we collect certain categories of personal data. We collect only the information that is necessary for the purposes described in this Privacy Policy. The categories of data we may collect include:

We do not knowingly collect sensitive personal data beyond what is required for identity verification and fraud prevention. We do not collect data relating to racial or ethnic origin, political opinions, religious beliefs, health conditions, or biometric identifiers, except where a government-issued ID document incidentally contains such information and submission of that document is required for KYC compliance.

Section 2

How We Use Your Data

gbaje2 uses the personal data we collect for specific, legitimate purposes. We do not use your data in ways that are incompatible with the reason it was originally collected. The primary purposes for which we process your data are as follows:

• Account Registration and Management: To create and maintain your gbaje2 account, verify your identity, process deposits and withdrawals, and deliver the gaming services you have requested.
• Identity Verification (KYC): To comply with our anti-money laundering and know-your-customer obligations, we verify your identity before processing withdrawal requests or where unusual account activity is detected.
• Payment Processing: To facilitate deposits and withdrawals via bKash, Nagad, Rocket, Upay, and approved local banks, and to maintain an accurate record of all financial transactions on your account.
• Customer Support: To respond to queries, resolve disputes, investigate complaints, and provide assistance through live chat and email support channels.
• Platform Security and Fraud Prevention: To detect, investigate, and prevent fraudulent transactions, bonus abuse, money laundering, duplicate accounts, and other prohibited activities.
• Responsible Gaming Compliance: To enforce self-exclusion requests, apply deposit limits, monitor for signs of problem gambling behaviour, and intervene proactively where required.
• Service Improvement and Analytics: To analyse how players use the Platform, identify areas for improvement, test new features, and ensure the Platform performs reliably across different devices and network conditions common in Bangladesh.
• Legal and Regulatory Compliance: To fulfil obligations imposed by applicable laws, respond to lawful requests from competent authorities, and maintain records required for audit purposes.
• Promotional Communications: Where you have provided consent, to send you information about new games, promotions, bonuses, or seasonal offers relevant to your interests. You may withdraw consent at any time by contacting [email protected].

All processing of your personal data by gbaje2 rests on at least one lawful basis, which may include: performance of a contract with you, compliance with a legal obligation, protection of our legitimate interests (such as fraud prevention), or your freely given consent where applicable.

Section 3

Data Sharing & Disclosure

gbaje2 does not sell, rent, or trade your personal data to third parties for their own commercial or marketing purposes. We may, however, share your data with trusted third parties in specific, controlled circumstances as described below:

• Payment Service Providers: We share financial data with payment processors including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank strictly to the extent required to authorise and complete your deposit or withdrawal transactions. These providers are bound by their own data protection obligations.
• Identity Verification Partners: To fulfil KYC requirements, we may share identity documents with third-party verification service providers who assist us in confirming the authenticity of submitted documents. These partners process data solely on our behalf and under our instruction.
• Game Technology Providers: The game content available on gbaje2 is supplied by third-party providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. When you play a game, certain technical data (such as session tokens and game outcome data) may be exchanged with the relevant provider to enable gameplay. These providers do not receive your full identity or payment data.
• IT and Hosting Infrastructure: We use third-party hosting, cloud storage, and cybersecurity services to maintain the Platform. Providers in this category access personal data only to the extent required to deliver their technical services and are contractually bound to maintain confidentiality.
• Legal and Regulatory Authorities: Where required by applicable law, court order, or request from a competent public authority, gbaje2 may disclose personal data without prior notice to you. We will, where legally permissible, notify you of such a disclosure request.
• Anti-Fraud and AML Networks: Where we reasonably suspect fraudulent activity or money laundering, we may share relevant data with industry fraud prevention bodies or financial intelligence units as required by applicable regulations.

Section 4

Cookies & Tracking

gbaje2 uses cookies and similar technologies — including local storage objects and session identifiers — to operate the Platform effectively, remember your preferences, and improve the overall user experience. A cookie is a small text file placed on your device when you visit a website. Cookies do not carry viruses and cannot access other information stored on your device.

The types of cookies used on gbaje2.net are as follows:

You may control or disable cookies through your browser settings. Please note that disabling strictly necessary cookies will impair or prevent your ability to log in to and use your gbaje2 account. Disabling analytics cookies has no effect on your ability to play games or make transactions.

Section 5

Data Security

gbaje2 takes the security of your personal data seriously and has implemented a range of technical and organisational measures designed to protect your information against accidental loss, unauthorised access, misuse, alteration, or disclosure. Key security measures in place include:

• SSL/TLS Encryption: All data transmitted between your browser or mobile device and gbaje2.net is encrypted using SSL/TLS protocols. You can verify this by the padlock icon in your browser's address bar when visiting the Platform.
• Encrypted Data Storage: Sensitive personal data — including identity documents, payment details, and account passwords — is stored in encrypted form in our databases. Passwords are hashed using a one-way algorithm and cannot be recovered in plain text by gbaje2 staff.
• Access Controls: Access to systems and databases containing personal data is restricted to authorised personnel who require that access to perform their job functions. All staff with data access undergo mandatory data protection training.
• Two-Factor Authentication (2FA): Where available, gbaje2 encourages players to enable 2FA on their accounts. Internal administrative systems that access player data require 2FA by default for all staff.
• Security Monitoring: gbaje2 employs continuous monitoring tools to detect and respond to potential security incidents, including intrusion attempts, unusual login patterns, and data exfiltration signals.
• Vulnerability Management: Our technical team conducts regular security assessments and promptly addresses identified vulnerabilities in Platform software and infrastructure.

Despite our best efforts, no method of electronic transmission or storage is 100% secure. In the unlikely event of a data breach that affects your personal data, gbaje2 will notify affected users without undue delay and take all reasonable steps to mitigate harm and prevent recurrence. If you suspect that your gbaje2 account has been compromised, contact support immediately at [email protected].

Section 6

Data Retention

gbaje2 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or for as long as required by applicable legal or regulatory obligations. The following general retention periods apply:

• Active Account Data: Personal and financial data associated with an active gbaje2 account is retained for the lifetime of the account plus a minimum of five years following account closure, to satisfy anti-money laundering record-keeping requirements.
• Transaction Records: Records of all deposits, withdrawals, and wagering activity are retained for a minimum of five years from the date of each transaction, regardless of account status.
• Identity Verification Documents: Copies of NID cards, passports, and other KYC documents are retained for the duration of the account relationship plus five years, unless a longer period is required by applicable law.
• Customer Support Communications: Correspondence with the gbaje2 support team is retained for three years from the date of the last communication in a given thread, or longer where a dispute or regulatory matter is ongoing.
• Analytics and Usage Data: Aggregated, anonymised usage data may be retained indefinitely for platform improvement purposes. Data that has been fully anonymised and cannot be re-identified does not constitute personal data and falls outside the scope of this Policy.
• Self-Exclusion Records: Records of voluntary self-exclusion requests are retained for a minimum of seven years to ensure that a returning player cannot inadvertently circumvent a previously set exclusion period.

Upon expiry of the applicable retention period, personal data is securely deleted from our active systems or rendered permanently anonymous through a process that prevents re-identification. Where data must be retained to comply with a legal obligation, it is placed in restricted access storage for the duration of the required retention period and is not used for any other purpose during that time.

Section 7

Your Privacy Rights

As a gbaje2 account holder, you have the following rights with respect to your personal data. To exercise any of these rights, submit a written request to [email protected] with the subject line "Privacy Rights Request". We will acknowledge your request within 48 hours and aim to respond in full within 14 business days.

• Right of Access: You have the right to request a copy of the personal data gbaje2 holds about you. This includes your account information, transaction history, and any identity documents submitted during KYC verification.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. For security reasons, certain changes (such as updating your registered mobile number) may require additional identity verification before being applied.
• Right to Erasure: You may request the deletion of your personal data. This right is subject to limitations where data must be retained to comply with legal obligations, resolve disputes, or prevent fraud. We will inform you of any applicable limitations when responding to your request.
• Right to Restrict Processing: In certain circumstances — such as where you contest the accuracy of data we hold or object to its use — you may request that we restrict processing of your personal data while the matter is resolved.
• Right to Data Portability: Where technically feasible and legally required, you may request a copy of your personal data in a structured, machine-readable format so that it can be transferred to another service provider of your choice.
• Right to Object: You have the right to object to the processing of your personal data where it is based on our legitimate interests. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (such as for promotional communications), you may withdraw that consent at any time by contacting [email protected]. Withdrawal of consent does not affect the lawfulness of processing that occurred before the withdrawal.

Section 8

Policy Updates & Contact

gbaje2 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the structure of our Platform. When we make material changes to this Policy, we will publish the updated version on this page with a new effective date and, where the changes are significant, notify registered account holders via the email address or mobile number associated with their account.

We encourage you to review this Privacy Policy periodically to remain informed of how gbaje2 handles your personal data. Your continued use of the Platform following the publication of any update constitutes your acknowledgement of the revised Policy. If you do not agree with any change, you must stop using the Platform and may request account closure by contacting our support team.

If you have any questions, concerns, or complaints about this Privacy Policy or about the way in which gbaje2 handles your personal data, please contact us using the details below. Our support team is available 24 hours a day, 7 days a week, including during public holidays such as Eid and Victory Day, and will respond to privacy-related queries within 2–6 hours during standard operating hours (Bangladesh Standard Time, UTC+6).

This Privacy Policy was last reviewed and updated on 1 January 2026. It supersedes all previous versions of the gbaje2 Privacy Policy. For archived versions of this document, contact us at [email protected].