ibajee Privacy Policy

1. Introduction

ibajee ("ibajee", "we", "us", "our") is committed to protecting the privacy and personal data of all individuals who use the ibajee platform at ibajee.club (the "Platform"). This Privacy Policy ("Policy") describes in detail what personal data ibajee collects, the purposes for which it is processed, how it is stored and protected, with whom it may be shared, how long it is retained, and the rights available to you as a data subject.

By registering an account on ibajee or by continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy and that you consent to the processing of your personal data as described herein. This Policy forms part of ibajee's broader legal framework alongside the Terms and Conditions and the Responsible Gaming Policy.

If you do not agree with this Privacy Policy, you should discontinue your use of the ibajee Platform and contact us to request account closure and data deletion.

2. Data Controller

For the purposes of applicable data protection legislation, the data controller responsible for your personal information is ibajee, operating the Platform at ibajee.club and serving players primarily located in Bangladesh. All enquiries relating to data protection, personal data requests, or this Privacy Policy should be directed to the ibajee Data Protection contact via the details provided in Section 14 of this document.

ibajee takes its responsibilities as a data controller seriously and is committed to handling all personal data in a manner that is lawful, fair, transparent, and consistent with the principles of data minimisation and purpose limitation.

3. Data We Collect

3.1 Registration and Identity Data

When you create an ibajee account, we collect the following personal information:

• Full legal name as it appears on your government-issued identification
• Date of birth (to verify that you are 18 years of age or older)
• Residential address, including city (e.g., Dhaka, Chittagong, Sylhet, Khulna) and postal code
• Email address used for account communications
• Mobile phone number used for account verification and payment processing
• Username and encrypted password credentials

3.2 Identity Verification (KYC) Data

To comply with our Know Your Customer obligations and to protect both ibajee and our players from fraud, we may collect copies of the following identity documents:

• National Identity Card (NID), passport, or birth certificate
• Proof of address such as a recent utility bill or bank statement
• Selfie or live photograph for identity confirmation where required

3.3 Financial and Transaction Data

ibajee collects data related to all financial activity conducted through your account, including:

• Deposit and withdrawal amounts, dates, and payment methods (bKash, Nagad, Rocket, Upay)
• Mobile wallet numbers associated with deposits or withdrawals
• Transaction reference numbers and processing timestamps
• Account balance history and bet settlement records

3.4 Behavioural and Usage Data

As you interact with the ibajee Platform, we automatically record certain technical and behavioural data, including:

• IP address, device type, operating system, and browser version
• Pages visited, games played, betting markets accessed, and session duration
• Clickstream data and navigation patterns within the Platform
• Geolocation data (country and city level) derived from your IP address
• Responsible gaming tool usage, including deposit limits set and self-exclusion requests

3.5 Communications Data

When you contact the ibajee support team or correspond with us by any channel, we retain records of those communications, including the content of messages, the date and time of contact, and the resolution reached. This data is used for quality assurance, dispute resolution, and staff training purposes.

4. How We Collect Your Data

ibajee collects personal data through the following channels:

• Directly from you: When you register an account, complete KYC verification, make a deposit or withdrawal, contact our support team, or voluntarily provide information through any ibajee form or communication channel.
• Automatically: Through cookies, web beacons, server logs, and similar tracking technologies as you navigate the ibajee Platform. See Section 10 for full details on our use of cookies.
• From payment processors: ibajee receives transaction confirmation data from bKash, Nagad, Rocket, Upay, and other integrated payment providers when you initiate a deposit or withdrawal. ibajee does not receive or store your full mobile banking credentials.
• From identity verification services: Where ibajee uses third-party KYC service providers to verify identity documents, those providers may return verification status and risk scores to ibajee.

5. How We Use Your Data

ibajee processes your personal data for the following purposes:

• Account management: Creating, maintaining, and administering your ibajee account, including login authentication and password recovery.
• Service delivery: Processing bets, settling winnings, crediting deposits, processing withdrawal requests, and generally providing the gaming and betting services you have requested.
• Identity verification: Confirming your identity and age in compliance with our KYC obligations and anti-fraud procedures.
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent transactions, money laundering, account takeovers, bonus abuse, and other prohibited activities on the ibajee Platform.
• Legal compliance: Meeting obligations under applicable Bangladeshi and international law, including record-keeping requirements and responses to lawful regulatory requests.
• Customer support: Responding to your enquiries, resolving disputes, and improving the quality of our support services.
• Responsible gaming: Monitoring player behaviour for signs of problem gambling, enforcing self-exclusion requests, and applying deposit limits and session controls you have set.
• Platform improvement: Analysing usage patterns and player feedback to improve the ibajee Platform, fix technical issues, and develop new features.
• Marketing communications: Sending you information about ibajee promotions, bonuses, and new product features — only where you have given explicit consent to receive such communications and subject to your right to opt out at any time.

ibajee does not use your personal data for automated decision-making that produces legal or similarly significant effects without human review, except where such processing is required for fraud prevention and anti-money laundering checks, in which case you have the right to request human review of any automated decision that affects your account.

6. Legal Basis for Processing

ibajee processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing required to perform the contract between ibajee and you — for example, creating your account, processing deposits, settling bets, and handling withdrawals.
• Legal obligation: Processing required to comply with applicable laws, including anti-money laundering regulations, age verification requirements, and responses to lawful government or regulatory requests.
• Legitimate interests: Processing carried out for ibajee's legitimate business interests, including fraud prevention, platform security, and the improvement of ibajee services, where those interests are not overridden by your rights and freedoms.
• Consent: Processing that is optional and not necessary for the core ibajee service — specifically, sending you promotional and marketing communications. You may withdraw consent for this type of processing at any time without affecting your ability to use the ibajee Platform.

7. Data Sharing and Third Parties

7.1 Service Providers

ibajee works with carefully selected third-party service providers who process personal data on our behalf solely to deliver ibajee services. These include payment processors (bKash, Nagad, Rocket, Upay), KYC and identity verification providers, customer support platform providers, cloud hosting and infrastructure providers, and fraud detection partners. All service providers are bound by data processing agreements and are prohibited from using ibajee player data for any purpose other than the specific service they provide.

7.2 Legal Disclosures

ibajee may disclose your personal data to law enforcement agencies, regulatory bodies, courts, or other public authorities where required to do so by applicable law, court order, or lawful regulatory request. ibajee will, where legally permitted, endeavour to notify you of any such disclosure.

7.3 Business Transfers

In the event that ibajee undergoes a merger, acquisition, restructuring, or sale of all or part of its assets, player personal data may be transferred to the acquiring entity as part of that transaction. Any such transfer will be subject to appropriate confidentiality arrangements, and you will be notified of any material change to how your data is processed as a result.

7.4 What We Do Not Do

ibajee does not sell, rent, licence, or otherwise transfer your personal data to unaffiliated third parties for their own marketing or commercial purposes. ibajee does not share your data with advertisers or data brokers. Your data is not used to build advertising profiles or serve targeted ads on third-party platforms.

8. Data Retention

ibajee retains personal data only for as long as necessary to fulfil the purposes for which it was collected or to comply with applicable legal, regulatory, and contractual obligations. In practice, this means:

• Account data: Retained for the duration of your active ibajee account and for a minimum period of five years following account closure, in line with standard financial record-keeping requirements.
• KYC and identity documents: Retained for a minimum of five years from the date of verification, or longer if required by applicable anti-money laundering regulations.
• Transaction records: Retained for a minimum of five years from the date of the transaction.
• Support communications: Retained for up to three years from the date of the last interaction, unless a longer retention period is required for dispute resolution purposes.
• Marketing consent records: Retained for as long as necessary to demonstrate that consent was given and to manage your marketing preferences.

When personal data is no longer required, ibajee will securely delete or anonymise it in a manner that prevents reconstruction of the original data.

9. Security Measures

ibajee implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• SSL/TLS encryption for all data in transit between your device and the ibajee Platform
• Encryption of sensitive data fields at rest on ibajee servers
• Strict internal access controls, with ibajee staff accessing player data only on a need-to-know basis
• Regular security vulnerability assessments and penetration testing
• Two-factor authentication options available for all ibajee player accounts
• Intrusion detection systems and continuous monitoring of the ibajee infrastructure
• Mandatory data protection training for all ibajee staff with access to personal data

While ibajee takes all reasonable steps to protect your data, no online platform can guarantee absolute security against all threats. In the event of a data breach that is likely to result in a risk to your rights or freedoms, ibajee will notify affected players promptly and take immediate remedial action.

10. Cookies & Tracking Technologies

10.1 What Are Cookies

Cookies are small text files placed on your device when you visit the ibajee Platform. They allow ibajee to recognise your browser, remember your preferences, maintain your session, and gather analytical data about how the Platform is used.

10.2 Types of Cookies Used by ibajee

• Essential cookies: Required for the ibajee Platform to function correctly. These include session cookies that keep you logged in and security cookies that help protect against fraud. These cannot be disabled without impairing your ability to use ibajee.
• Functional cookies: Used to remember your preferences such as language settings and responsible gaming limits you have applied to your account.
• Analytical cookies: Used by ibajee to understand how players navigate the Platform, which pages are visited most frequently, and where technical issues occur. This data is used in aggregated, anonymised form to improve ibajee services.
• Marketing cookies: Used only where you have given explicit consent to receive ibajee promotional communications. These cookies help ibajee measure the effectiveness of marketing campaigns and avoid showing you irrelevant promotional content.

10.3 Managing Cookies

You can control and manage cookies through your browser settings. Most modern browsers allow you to block or delete cookies, though disabling essential cookies will affect your ability to log in and use the ibajee Platform. Details on managing cookies in your specific browser can be found in your browser's help documentation.

11. Your Privacy Rights

As an ibajee player whose personal data is processed under this Privacy Policy, you hold the following rights in relation to your personal information:

• Right of access: You may request a copy of the personal data ibajee holds about you at any time.
• Right to rectification: If any personal data ibajee holds about you is inaccurate or incomplete, you have the right to request that it be corrected without undue delay.
• Right to erasure: You may request that ibajee delete your personal data where it is no longer necessary for the purposes for which it was collected, subject to ibajee's legal retention obligations.
• Right to restriction: You may request that ibajee restrict the processing of your personal data in certain circumstances, for example while the accuracy of data is being contested.
• Right to data portability: Where processing is based on your consent or on contractual necessity, you may request that ibajee provide your personal data in a structured, commonly used, and machine-readable format.
• Right to object: You may object to ibajee processing your personal data for direct marketing purposes at any time. You may also object to processing based on ibajee's legitimate interests where you believe your rights and freedoms override those interests.
• Right to withdraw consent: Where ibajee processes your data based on your consent (for example, for marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of the above rights, please contact the ibajee support team at [email protected]. ibajee will respond to all verifiable data subject requests within 30 days of receipt. Requests may be subject to identity verification before ibajee can action them.

12. Minors and Age Restriction

The ibajee Platform is strictly intended for individuals who are 18 years of age or older. ibajee does not knowingly collect personal data from anyone under the age of 18. If ibajee becomes aware that personal data has been collected from a minor, that data will be deleted immediately and the associated account will be closed. If you believe that a minor has registered on the ibajee Platform or provided personal data to ibajee, please contact us immediately at [email protected] so that appropriate action can be taken without delay.

13. Changes to This Privacy Policy

ibajee reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. The date of the most recent revision is displayed at the top of this document. Where changes are material, ibajee will notify registered players by email or via an in-platform notification before the changes take effect. Your continued use of the ibajee Platform following the publication of a revised Privacy Policy constitutes your acknowledgment of and agreement to the updated terms.

ibajee encourages you to review this Privacy Policy periodically to stay informed about how your personal data is being protected and used.

14. Contact and Data Enquiries

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data ibajee holds about you, please reach out to the ibajee data protection contact using the details below. Our team is available around the clock to assist you.

• Email: [email protected]
• Subject line for data requests: "Privacy / Data Request — [Your Registered Username]"
• Response time: Within 30 days of receipt of a verifiable request
• Support hours: 24/7, Bangladesh Standard Time (UTC+6)

ibajee is committed to resolving all privacy concerns promptly and fairly. If you remain dissatisfied with the outcome of a data request or privacy complaint, you may have the right to escalate your concern to the relevant data protection authority in your jurisdiction.