Privacy Policy & Data
Protection at gbajr

gbajr ("we", "us", "our", "the Platform") operates the online betting and casino website accessible at gbajr.io. gbajr is a safe and reliable platform serving the Bangladesh market, offering sports betting (including cricket, football, and kabaddi), live casino games, video slots, and crash game products.

For the purposes of this Privacy Policy, gbajr acts as the data controller in respect of all personal data collected from players ("you", "the Player") who register accounts or otherwise interact with the gbajr platform. As data controller, gbajr determines the purposes and means by which your personal data is processed.

If you have any questions about how your data is handled, or wish to exercise any of your data rights described in Section 9 of this policy, please contact us at: [email protected]

gbajr collects personal data from you in three ways: data you provide directly, data generated automatically through your use of the platform, and data received from third-party service providers. The specific categories of data collected are described below.

2.1 Data You Provide Directly

• Registration Data: Full name, date of birth, email address, mobile phone number, and preferred username collected at account creation.
• Address Data: Residential address including city (Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, or other), district, and postal code, collected for KYC and fraud prevention purposes.
• Identity Verification Documents: Copies of government-issued photo identification (National ID card, passport, or driver's licence) and proof of address documents submitted during the KYC process.
• Payment Method Details: Mobile wallet numbers (bKash, Nagad, Rocket, Upay) or bank account references (Dutch-Bangla Bank, BRAC Bank, City Bank) used for deposit and withdrawal processing. Full payment credentials are handled by the payment provider's secure API and are not stored in plain text by gbajr.
• Support Communications: The content of any messages, emails, or chat transcripts sent to gbajr's customer support team, including any personal data disclosed within those communications.

2.2 Data Generated Automatically

• Device & Browser Data: IP address, device type, operating system, browser type and version, and screen resolution.
• Usage Data: Pages visited, features accessed, time spent on the platform, game session data (game title, stake, outcome, session duration), and navigation path through the site.
• Transaction Logs: Complete records of all deposits, withdrawals, bets placed, bonuses claimed, and account balance changes. These records are retained as required by our operational and regulatory obligations.
• Cookie & Tracking Data: Session identifiers, preference cookies, and anonymised analytics data. See Section 7 (Cookies & Tracking) for full details.

2.3 Data Received from Third Parties

• Identity Verification Partners: Confirmation signals from third-party KYC verification services used to validate the authenticity of identity documents submitted by players.
• Payment Processors: Transaction status signals (success, failure, pending) and payment reference identifiers received from bKash, Nagad, Rocket, Upay, and banking partners.
• Fraud Detection Services: Risk scoring data from fraud-prevention tools used to identify patterns consistent with money laundering, account takeover, or bonus abuse activity.

gbajr uses the personal data it collects for clearly defined, legitimate purposes. The table below maps each category of data to its specific processing purpose.

gbajr processes personal data on one or more of the following legal bases, depending on the specific purpose of the processing activity:

• Contractual Necessity: Processing is required to fulfil our contractual obligations to you as a registered player — including operating your account, processing transactions, and delivering the betting and casino services you have requested.
• Legal Obligation: Processing is required to comply with applicable legal and regulatory requirements, including age verification (21+ mandate), anti-money-laundering record-keeping, and responding to lawful requests from authorities.
• Legitimate Interest: Processing is carried out in gbajr's legitimate interest of operating a secure, fair, and commercially sustainable platform — including fraud prevention, security monitoring, product improvement, and responsible gaming compliance — provided these interests are not overridden by your fundamental privacy rights.
• Consent: For processing activities that are not strictly necessary for service delivery (such as optional personalisation cookies or marketing communications), gbajr will seek your explicit consent prior to processing. You may withdraw consent at any time by contacting [email protected].

gbajr does not sell, rent, or trade your personal data. We share data only where strictly necessary and only with the categories of recipients listed below:

• Payment Processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, and City Bank receive only the transaction data necessary to process your deposits and withdrawals. Each provider operates under its own privacy obligations.
• KYC & Identity Verification Partners: Third-party identity verification services receive copies of identity documents submitted by players for the sole purpose of confirming authenticity. These partners are contractually prohibited from using the data for any other purpose.
• Game Studio Providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive anonymised session identifiers necessary to deliver game functionality. These providers do not receive your full identity data.
• Fraud Prevention & Security Services: Anonymised or pseudonymised risk data may be shared with fraud detection partners to identify patterns consistent with money laundering, identity fraud, or account compromise.
• Law Enforcement & Regulatory Authorities: gbajr will disclose personal data to competent authorities where legally required to do so — for example, in response to a valid court order, law enforcement request, or regulatory investigation. In such cases, gbajr will notify you of the disclosure to the extent permitted by law.
• Business Successors: In the event of a merger, acquisition, or sale of assets, player data may be transferred to the successor entity, subject to equivalent privacy protections. Players will be notified of any such transfer in advance.

Given the financial nature of the gbajr platform, the handling of payment data warrants specific explanation. gbajr applies heightened security standards to all financial information:

• Mobile wallet transactions (bKash, Nagad, Rocket, Upay) are processed through each provider's official API using tokenised references. gbajr does not store your mobile wallet PIN, OTP, or full account credentials on its servers.
• Bank transfer details (Dutch-Bangla Bank, BRAC Bank, City Bank) used for withdrawals are stored in encrypted form with access restricted to authorised payment processing personnel only.
• All deposit and withdrawal transactions are logged with timestamps, transaction IDs, and amounts in BDT for account reconciliation, dispute resolution, and regulatory record-keeping purposes.
• Transaction records are retained for a minimum period as required by applicable financial record-keeping obligations. Following expiry of the mandatory retention period, transaction records are securely deleted.
• In the event of a suspected fraudulent transaction, gbajr may place a temporary hold on withdrawal processing while the transaction is investigated. You will be notified of any such hold and the estimated resolution timeframe.

gbajr uses cookies and similar tracking technologies to operate the platform, maintain your session, and analyse usage patterns. The following cookie categories are used:

You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will prevent you from logging into your gbajr account and using core platform features. Disabling functional or analytics cookies will not affect your ability to place bets or access games.

gbajr retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. Retention periods by data category are as follows:

• Active Account Data: Retained for the full duration of your account's active status plus a minimum post-closure period as required by financial and anti-money-laundering record-keeping obligations.
• KYC Identity Documents: Retained for a minimum period following account closure as required by applicable compliance rules. Documents are stored in encrypted, access-controlled environments throughout the retention period.
• Transaction Records: Retained for a minimum period from the date of each transaction to satisfy financial record-keeping requirements. After this period, records are securely deleted or anonymised.
• Support Communications: Retained for a period of up to 3 years from the date of the last communication, to enable reference in the event of follow-up enquiries or formal complaints.
• Analytics & Usage Data: Anonymised analytics data is retained for up to 24 months. Identifiable session logs are retained for up to 12 months and then anonymised or deleted.
• Closed or Suspended Accounts: Where an account is closed voluntarily or suspended due to a breach of Terms, core identity and transaction data is retained for the applicable mandatory minimum period before secure deletion. Bonus abuse or fraud investigation records may be retained for longer where legally necessary.

As a gbajr player, you hold the following rights in relation to the personal data we hold about you. To exercise any of these rights, contact us at [email protected] with your full name and registered account email address. We will respond within 30 days of receiving a valid request.

• Right of Access: You may request a copy of all personal data gbajr holds about you, including the categories of data held, the purposes for which it is processed, and the length of time it is retained.
• Right to Rectification: You may request correction of any personal data that is inaccurate or incomplete. For account-critical data (name, date of birth), corrections will require supporting documentary evidence.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (and no other legal basis applies), or where data has been unlawfully processed. Mandatory regulatory retention periods take precedence over erasure requests.
• Right to Restriction: You may request that gbajr temporarily suspends processing of your data while a rectification or objection request is being assessed.
• Right to Objection: You may object to processing carried out on the basis of legitimate interest. gbajr will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Data Portability: You may request that gbajr provides your personal data in a structured, commonly used, machine-readable format (CSV or JSON) where technically feasible.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time by contacting [email protected]. Withdrawal of consent does not affect the lawfulness of any processing carried out prior to the withdrawal.

gbajr is strictly an adults-only platform. Players must be 21 years of age or older to register an account, deposit funds, or participate in any betting or casino activity on the Platform. This age restriction applies to all players accessing gbajr from Bangladesh or any other jurisdiction.

gbajr does not knowingly collect or process personal data from individuals under the age of 21. During the registration process, all players are required to confirm their date of birth. Where gbajr has reason to believe that a player is under the age of 21, the account will be immediately suspended and any funds held will be frozen pending identity verification. If verification confirms that the player is a minor, the account will be permanently closed, deposits refunded where possible, and all associated personal data securely deleted.

gbajr implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include but are not limited to:

• Transport Security: All data transmitted between your device and gbajr's servers is encrypted using 256-bit SSL/TLS protocols. The padlock icon visible in your browser's address bar confirms an active secure connection.
• Access Controls: Personal data is accessible only to gbajr staff members who have a legitimate operational need to process it. Access is role-based, logged, and reviewed regularly. All staff with data access are subject to confidentiality obligations.
• Password Security: Player account passwords are stored using industry-standard one-way cryptographic hashing. gbajr staff cannot view your password in plain text. Players are encouraged to use strong, unique passwords and to enable any available two-factor authentication features.
• Intrusion Detection: gbajr's infrastructure is monitored 24/7 by automated intrusion detection systems. Suspicious access patterns trigger immediate alerts and investigation by our security team.
• Data Breach Response: In the event of a personal data breach that poses a risk to your rights and freedoms, gbajr will notify affected players without undue delay, and in any case within 72 hours of becoming aware of the breach, describing the nature of the breach, the data affected, and the steps being taken to address it.
• Third-Party Audits: gbajr's fair-play certified games are provided by audited studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi, each of which maintains its own security and data-handling certifications.

Whilst gbajr takes all reasonable steps to protect your data, no online platform can guarantee absolute security. Players are encouraged to protect their own account security by keeping login credentials confidential, logging out after each session, and reporting any suspected unauthorised account access to [email protected] immediately.

The gbajr platform may contain references to third-party service providers (such as payment processors bKash, Nagad, Rocket, and Upay) whose own websites or applications you may visit during the deposit or withdrawal process. gbajr is not responsible for the privacy practices or content of any third-party website or application.

When you navigate away from gbajr.io to a third-party provider's platform (for example, to complete a bKash payment via the bKash app or website), your activity on that third-party platform is governed by that provider's own privacy policy, not by this document. We encourage you to review the privacy policies of any third-party services you use in connection with your gbajr account.

Game content delivered by third-party studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and others) is integrated directly within the gbajr platform via secure API. These studios receive only the anonymised session and game data necessary to deliver game functionality. No full player identity data is passed to game studios.

gbajr reserves the right to update, amend, or replace this Privacy Policy at any time. When material changes are made to this Policy, gbajr will notify registered players by posting a prominent notice on the Platform and updating the "Last Updated" date at the top of this document. For significant changes affecting your rights, we may also send a direct notification to your registered email address.

The most current version of this Privacy Policy will always be accessible at gbajr.io/privacy-policy. It is your responsibility to review this Policy periodically. Continued use of the gbajr Platform following publication of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with the changes, you must cease use of the Platform and contact [email protected] to request account closure.

If you have any questions, concerns, or requests relating to this Privacy Policy or gbajr's data handling practices, please contact our support team using the details below. All privacy-related enquiries will be handled by personnel with appropriate data protection responsibilities.

• Email: [email protected] (plain text — not a clickable link)
• Support Language: English
• Support Hours: 24 hours a day, 7 days a week, 365 days a year
• Time Zone: Bangladesh Standard Time (BST, UTC+6)
• Response Time — General Enquiries: Within 24 hours
• Response Time — Data Rights Requests: Within 30 calendar days of receiving a valid, verified request
• Response Time — Data Breach Notifications: Within 72 hours of gbajr becoming aware of a qualifying breach

When submitting a data rights request, please include your full registered name, the email address associated with your gbajr account, and a clear description of your request. We may need to verify your identity before processing the request to ensure we do not disclose personal data to an unauthorised third party.