gebaji Privacy Policy

1 Introduction and Scope

This Privacy Policy ("Policy") describes how gebaji ("gebaji", "we", "us", "our"), the operator of the online betting and casino platform at gebaji.pro, collects, uses, stores, shares, and protects personal data belonging to players and visitors ("you", "your") who access or use our platform, website, or any associated service.

This Policy applies to all personal data collected through the gebaji website, including data submitted at registration, during account verification, when making deposits or withdrawals, when placing bets, when contacting our support team, and when browsing any page of the gebaji platform.

By registering a gebaji account or continuing to use the gebaji platform, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you should discontinue use of the platform immediately.

2 Personal Data We Collect

gebaji collects personal data in several ways — directly from you when you register or use the platform, automatically through technical systems as you browse, and occasionally from trusted third-party service providers. The categories of personal data we collect include:

• Identity Data

  Full legal name, date of birth, gender, and national identity card or passport number provided during registration or KYC verification.
• Contact Data

  Email address, mobile phone number (including the mobile number linked to your bKash, Nagad, or Rocket wallet), and residential address.
• Financial Data

  Mobile wallet account numbers (bKash, Nagad, Rocket, Upay), transaction IDs, deposit and withdrawal amounts, and transaction history in BDT.
• Gaming Activity Data

  Bets placed, games played, bet amounts, winnings, betting history, session durations, and responsible gaming tool usage.
• Technical Data

  IP address, device type and model, operating system, browser type, screen resolution, mobile network provider, and device fingerprint identifiers.
• Usage and Behavioural Data

  Pages viewed, features accessed, click paths, session start and end times, referral source, and search queries within the platform.
• Communications Data

  Records of any communications between you and the gebaji support team, including live chat transcripts, emails, and complaint correspondence.

Data We Do Not Collect

gebaji does not collect, process, or store full payment card numbers (Visa, Mastercard) on our own servers. We do not collect biometric data such as fingerprints or facial recognition data. We do not knowingly collect personal data from individuals under the age of 21.

3 How We Use Your Personal Data

gebaji uses the personal data we collect for the following specific purposes. We process data only when we have a legitimate basis for doing so — which may be your consent, contractual necessity, legal obligation, or our legitimate business interests.

Account Management and Service Delivery

We use your identity and contact data to create and maintain your gebaji account, to verify your eligibility to use the platform (including age verification), to process deposits and withdrawals via bKash, Nagad, Rocket, and Upay, and to deliver the betting and gaming services you have requested.

Identity Verification and Fraud Prevention

We share identity and financial data with trusted third-party KYC (Know Your Customer) verification providers to confirm your identity before processing significant withdrawals or where unusual account activity is detected. This processing is necessary for legal compliance and to protect all players on the platform from fraud and money laundering.

Customer Support

When you contact the gebaji support team, we use your communications data and account data to investigate and resolve your query efficiently. Records of support interactions are retained to improve our service quality and for training purposes.

Responsible Gaming Monitoring

We use your gaming activity data and behavioural data to monitor for signs of problem gambling behaviour. Where such indicators are detected, we may use this information to reach out proactively, apply responsible gaming interventions, or enforce account restrictions in your best interests. Please see the Responsible Gaming page for full details.

Marketing Communications

With your prior consent, we may use your contact data to send you information about gebaji promotions, bonus offers, BPL season specials, Eid offers, and other marketing communications. You may withdraw your consent to receive marketing communications at any time by contacting support at [email protected]. Withdrawal of consent does not affect the lawfulness of any processing carried out before the withdrawal.

Platform Improvement and Analytics

We use aggregated and anonymised usage and behavioural data to analyse how players interact with the gebaji platform, to identify technical issues, and to improve the overall user experience. This analytics data does not identify you personally.

Legal and Regulatory Compliance

We may process and disclose your personal data where required to do so by applicable law, court order, or regulatory authority. This includes disclosures to law enforcement agencies in connection with investigations into fraud, money laundering, or other criminal activity.

4 Cookies and Tracking Technologies

The gebaji platform uses cookies and similar tracking technologies to operate core platform functionality, remember your session and preferences, and understand how visitors use our site. A cookie is a small text file placed on your device by our web server when you visit the gebaji website.

Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the platform to function. These include session authentication cookies, security tokens, and load balancing identifiers. You cannot opt out of strictly necessary cookies.
• Functional Cookies: Remember your language preference, account settings, and responsible gaming tool configurations between sessions.
• Analytics Cookies: Collect anonymised data about how pages are used and which features are accessed most frequently. This helps us improve the platform experience for all players.
• Marketing Cookies: Used, with your consent, to deliver relevant promotional content about gebaji offers and to measure the effectiveness of our marketing campaigns.

5 Sharing Your Personal Data

gebaji does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share personal data only in the limited circumstances described below, and only with parties who are bound by appropriate confidentiality and data protection obligations.

Service Providers and Technology Partners

We share data with carefully selected third-party service providers who process data on our behalf, including: payment processors operating bKash, Nagad, Rocket, and Upay integrations; identity verification and KYC providers; fraud detection and anti-money-laundering screening services; game content providers such as Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, and Spribe; and customer support platform providers. These parties are permitted to process your data only as instructed by gebaji and for no other purpose.

Legal and Regulatory Disclosures

We may disclose personal data to government bodies, law enforcement agencies, or other regulatory authorities where we are required to do so by law, or where disclosure is necessary to protect the rights, property, or safety of gebaji, our players, or the public.

Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of the gebaji business, personal data held by gebaji may be transferred to the acquiring entity as part of the transaction. Players will be notified of any such transfer and of any changes to this Privacy Policy that result from it.

6 Data Retention

gebaji retains personal data for as long as is necessary to fulfil the purposes for which it was collected, including for the purpose of satisfying any legal, accounting, or regulatory reporting requirements.

Account data — including identity, contact, and financial data — is retained for a minimum period of five (5) years after the closure of a player account. This retention period reflects our obligations under applicable anti-money-laundering regulations and financial record-keeping requirements.

Gaming activity and transaction data is retained for a minimum of three (3) years for audit and dispute resolution purposes. Communications data (support interactions) is retained for two (2) years from the date of the interaction.

Marketing preference data is retained until you withdraw your consent or request erasure. Technical and analytics data in anonymised form may be retained indefinitely as it cannot be used to identify individuals.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our internal data disposal procedures.

7 Your Data Rights

As a gebaji player, you have the following rights in relation to your personal data. To exercise any of these rights, please contact our support team at [email protected] with your full name, registered email address, and a description of the right you wish to exercise.

• Right of Access: You have the right to request a copy of the personal data that gebaji holds about you, together with information about how and why it is processed.
• Right to Rectification: You have the right to request correction of any personal data we hold that is inaccurate or incomplete.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to any overriding legal retention obligations.
• Right to Restriction: You have the right to request that we restrict the processing of your personal data in certain circumstances, for example while the accuracy of data is being contested.
• Right to Object: You have the right to object to processing of your personal data where that processing is based on our legitimate interests, including profiling for marketing purposes.
• Right to Data Portability: Where processing is based on your consent or on a contract, you have the right to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of prior processing.

gebaji will respond to all verified data rights requests within thirty (30) days. In cases of complex or high-volume requests, this period may be extended by a further thirty (30) days, with notification provided to you within the initial thirty-day period.

8 Data Security Measures

gebaji takes the security of your personal data seriously and applies a range of technical and organisational measures designed to protect it against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• 128-bit SSL (Secure Socket Layer) encryption for all data transmitted between your device and the gebaji platform.
• Encryption of sensitive data fields (including payment details) stored in our databases.
• Access controls ensuring that only authorised gebaji personnel with a legitimate need can access personal data, governed by role-based access permissions.
• Regular internal security reviews and vulnerability assessments of our platform infrastructure.
• Secure data centres with physical access controls, fire suppression systems, and redundant power supplies.
• Staff training on data protection and information security obligations.

While we apply all reasonable technical safeguards, no system connected to the internet can be guaranteed to be completely secure. You also play an important role in protecting your own data — you should use a strong, unique password for your gebaji account, never share your login credentials, and log out of your account on shared devices.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, gebaji will notify affected players promptly and take all reasonable steps to contain and remediate the breach.

9 Third-Party Links and Services

The gebaji platform integrates game content and services provided by third-party game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, and Spribe. While these providers are carefully selected and bound by contractual data protection obligations, each operates under its own privacy practices in relation to the technical data processed within its gaming environments.

The gebaji platform does not contain links to external third-party websites for general browsing purposes. Where integration with a payment provider such as bKash or Nagad is required to complete a transaction, that provider's own privacy policy governs the processing of data within their system. gebaji is not responsible for the privacy practices of third-party payment providers operating their own platforms.

10 Children's Privacy and the 21+ Rule

The gebaji platform is strictly for adults aged 21 years and above. We do not knowingly collect or process personal data from individuals under the age of 21. If you are under 21, you must not register an account or use the gebaji platform in any way.

If gebaji becomes aware that personal data has been collected from an individual under the age of 21, we will take immediate steps to delete that data and to close the associated account. Any winnings accrued by an underage player will be forfeited in accordance with our Terms & Conditions.

If you believe that a person under 21 may have registered on the gebaji platform, please notify us immediately at [email protected] so that we can investigate and act accordingly.

11 Updates to This Privacy Policy

gebaji reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, applicable legal requirements, or platform functionality. When material changes are made, we will notify registered players via the email address associated with their account and will update the "Last Updated" date at the top of this Policy.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal data. Continued use of the gebaji platform following notification of a policy update constitutes your acceptance of the revised Privacy Policy.

The version of this Privacy Policy published on the gebaji website at any given time is the version currently in effect.

12 Contact Us About Privacy

If you have any questions, concerns, or requests relating to this Privacy Policy or to how gebaji processes your personal data, please contact our dedicated support team. We are available 24 hours a day, 7 days a week, 365 days a year.

Email: [email protected] (plain text — not a clickable link). Please include "Privacy Query" in the subject line of your message, along with your full name and registered account email address, so that we can identify your account and respond efficiently.

We take all privacy-related communications seriously and aim to acknowledge your message within 48 hours and to provide a full response within 30 days.