Gabaji Privacy Policy

01 Introduction

This Privacy Policy describes how gabaji ("we", "us", "the platform") collects, uses, stores, and protects the personal data of players who register and use the gabaji platform at gabaji.vip. It applies to all players based in Bangladesh and to anyone else who accesses the gabaji website or services.

Gabaji is committed to handling your personal data responsibly. We understand that trust is the foundation of everything we do — players put real money on this platform, and they deserve to know exactly how their information is being used. This policy is written to be clear and readable, not to hide anything in complicated language.

By registering an account on gabaji, you confirm that you have read this Privacy Policy and that you consent to the collection and use of your personal data as described here. If you do not agree with this policy, you should not register or use the gabaji platform.

02 Data We Collect

Gabaji collects personal data in two ways: information you provide directly when registering and using the platform, and information collected automatically when you use the gabaji website or app.

Information you provide directly:

• Full legal name and date of birth (required for account registration and age verification)
• Mobile phone number and email address (used for account access and communications)
• Payment account details such as your bKash, Nagad, or Rocket number (used to process deposits and withdrawals)
• Identity documents submitted during KYC verification (such as National ID or passport)
• Any information you provide when contacting gabaji support

Information collected automatically:

• Device information including device type, operating system, and browser version
• IP address and approximate geographic location
• Session data including login times, pages visited, and time spent on the platform
• Betting and gaming activity including game history, bet amounts, and transaction records
• Cookie and tracking data as described in the Cookies section below

03 How We Use Your Data

Gabaji uses the personal data we collect for specific, legitimate purposes. We do not use your data for anything beyond what is described in this policy without first obtaining your explicit consent. The main purposes for which gabaji uses your data are:

Gabaji may also use aggregated, anonymised data — data that cannot be linked back to any individual player — for internal analytics and platform improvement. This type of data carries no privacy risk and is not subject to the same restrictions as personal data.

04 Legal Basis for Processing

Gabaji processes your personal data on the following legal grounds:

• Contract performance: Processing your data is necessary to provide the gabaji service you have signed up for, including managing your account and processing transactions.
• Legal obligation: Gabaji is required by applicable regulations to collect and retain certain data, including identity verification records and transaction histories, for anti-money laundering and fraud prevention purposes.
• Legitimate interests: Gabaji has a legitimate interest in keeping the platform secure, preventing fraud, and improving the service for all players.
• Consent: Where gabaji relies on your consent to process data — for example, for marketing communications — you can withdraw that consent at any time by contacting support or updating your account preferences.

05 Data Sharing

Gabaji does not sell your personal data to any third party. We share your data only in the following limited circumstances:

• Payment processors: Your payment account details are shared with bKash, Nagad, or Rocket solely to process your deposits and withdrawals. These providers have their own privacy policies and security standards.
• Identity verification providers: Where gabaji uses a third-party KYC service to verify your identity, your identity documents may be shared with that provider for verification purposes only.
• Legal and regulatory authorities: Gabaji may be required by law to share certain data with government authorities, law enforcement agencies, or regulatory bodies. Gabaji will comply with any lawful request for data disclosure.
• Fraud prevention services: Gabaji may share data with fraud detection and prevention services to protect the platform and its players from financial crime.

All third parties with whom gabaji shares data are required to handle that data securely and to use it only for the specific purpose for which it was shared. Gabaji does not permit third parties to use your data for their own marketing or commercial purposes.

06 Payment Data

Gabaji takes payment data security extremely seriously. When you make a deposit or withdrawal using bKash, Nagad, or Rocket, your payment credentials are transmitted directly to the relevant payment provider using encrypted connections. Gabaji does not store your full mobile banking PIN or password on its servers.

Gabaji retains records of transaction amounts, dates, and payment method references (such as the last few digits of your bKash number) for account management, fraud prevention, and regulatory compliance purposes. These records are kept for the period required by applicable regulations and then securely deleted.

All withdrawals on gabaji are sent only to the payment method associated with your registered account. This policy exists to protect players from unauthorised withdrawals and is a core part of gabaji's financial security framework.

07 Cookies and Tracking

Gabaji uses cookies and similar tracking technologies to make the platform work properly and to improve your experience. Cookies are small text files stored on your device when you visit the gabaji website. They help gabaji remember your preferences, keep you logged in, and understand how players use the platform.

Gabaji uses the following types of cookies:

• Essential cookies: Required for the platform to function. These include session cookies that keep you logged in and security cookies that protect against fraud. You cannot opt out of essential cookies without stopping use of the platform.
• Functional cookies: Remember your preferences such as language settings and display options to personalise your gabaji experience.
• Analytics cookies: Help gabaji understand how players navigate the platform so we can identify and fix problems and improve the overall experience. Analytics data is aggregated and anonymised.

You can manage cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of the gabaji platform.

08 Data Retention

Gabaji retains your personal data for as long as your account is active and for a defined period after account closure. The specific retention periods depend on the type of data and the reason it was collected:

• Account data (name, contact details): Retained for the duration of your account and for up to 5 years after closure, as required for regulatory compliance.
• Transaction records: Retained for up to 7 years after the transaction date, in line with standard financial record-keeping requirements.
• KYC documents: Retained for up to 5 years after account closure or the date of the last transaction, whichever is later.
• Support correspondence: Retained for up to 3 years after the conversation is closed.
• Session and analytics data: Anonymised and aggregated after 12 months; raw session data is deleted after 90 days.

After the applicable retention period, gabaji securely deletes or anonymises your personal data so that it can no longer be linked back to you.

09 Security Measures

Gabaji implements a range of technical and organisational security measures to protect your personal data against unauthorised access, loss, or misuse. These include:

• TLS encryption for all data transmitted between your device and gabaji's servers
• One-way password hashing — your password is never stored in readable form
• Two-factor authentication options for account login
• Regular security audits and penetration testing of gabaji's systems
• Strict access controls limiting which gabaji staff can access player data
• Automated monitoring for suspicious login attempts and unusual account activity

While gabaji takes every reasonable precaution to protect your data, no online platform can guarantee absolute security. You also play a role in keeping your account safe — use a strong, unique password for your gabaji account and never share your login credentials with anyone.

10 Your Privacy Rights

As a gabaji player, you have the following rights over your personal data. To exercise any of these rights, contact gabaji support at [email protected]. Gabaji will respond to all valid requests within 30 days.

11 Minors and Under-18 Players

Gabaji is strictly an 18+ platform. We do not knowingly collect personal data from anyone under the age of 18. If gabaji discovers that a player under 18 has registered an account, that account will be closed immediately, all data will be deleted (except where retention is required by law), and any deposits will be returned to the payment method used.

If you are a parent or guardian and believe that a minor has registered on gabaji using your payment details or personal information, please contact support at [email protected] immediately. Gabaji will investigate and take appropriate action as quickly as possible.

12 Changes to This Policy

Gabaji may update this Privacy Policy from time to time to reflect changes in the platform, applicable regulations, or industry best practices. When we make changes, the updated policy will be published on this page with a revised "Last Updated" date at the top.

For significant changes that affect how gabaji uses your personal data, we will notify you via email or an in-platform notification before the changes take effect. Your continued use of gabaji after the effective date of any update constitutes your acceptance of the revised Privacy Policy.

Gabaji recommends reviewing this page periodically, even when you have not received a notification, to stay informed about how your data is being handled.

13 Contact Us

If you have any questions about this Privacy Policy, want to exercise any of your data rights, or have a concern about how gabaji has handled your personal data, please get in touch. Gabaji's support team is available 24 hours a day, seven days a week.