Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how fbbaji ("we", "us", "our") collects, uses, stores, and discloses personal information in connection with your use of the fbbaji online gaming platform, accessible at fbbaji.bio ("the Platform"). We are committed to protecting your privacy and handling your personal data with transparency, integrity, and care.

By registering for an account or using the Platform in any capacity, you acknowledge that you have read and understood this Policy and consent to the collection and use of your personal data as described herein. If you do not agree with this Policy, you must discontinue your use of the Platform.

This Policy should be read alongside our Terms & Conditions, which govern your overall use of fbbaji, and our Responsible Gaming page. Together these documents form the complete framework of your relationship with fbbaji.

2. Personal Data We Collect

fbbaji collects personal data through several channels — directly from you when you register and use the Platform, automatically through your device and browser, and occasionally from third-party sources such as payment providers and identity verification services. The categories of data we collect include:

We do not knowingly collect or process sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or biometric data unless specifically required by applicable law or regulatory obligation.

3. How We Use Your Personal Data

fbbaji processes your personal data only for clearly defined, lawful purposes. We do not use your data in any manner that exceeds those purposes without first obtaining your explicit consent or as otherwise permitted by applicable law. The primary purposes for which we use your data are:

• Account management: Creating and maintaining your fbbaji account, verifying your identity, and enabling you to access the full range of Platform features.
• Payment processing: Facilitating deposits and withdrawals through your chosen payment method, and maintaining accurate financial records of all transactions conducted in BDT.
• Regulatory compliance: Fulfilling our obligations under applicable anti-money laundering (AML) requirements, Know Your Customer (KYC) procedures, and any other legal or regulatory obligations that apply to the operation of an online gaming platform serving users in Bangladesh.
• Fraud prevention and security: Monitoring account activity for signs of fraudulent behaviour, unauthorised access, collusion, or abuse of our Platform, and taking appropriate action where such activity is identified.
• Responsible gaming: Using your gaming data to support responsible gaming tools such as deposit limits, session reminders, and self-exclusion requests, and to identify patterns of play that may indicate harmful behaviour.
• Service improvement: Analysing aggregated usage data to improve the Platform's features, performance, stability, and overall user experience.
• Customer support: Responding to your enquiries, resolving complaints, and providing assistance with account or transaction-related issues.
• Marketing communications: Where you have provided consent, sending you promotional offers, bonus notifications, and updates about new games or features on fbbaji. You may withdraw this consent at any time.

4. Legal Basis for Processing

fbbaji processes your personal data on one or more of the following legal grounds, depending on the nature of the processing activity:

• Contractual necessity: Processing required to perform our contract with you — including account management, payment processing, and game delivery — is carried out because it is necessary to fulfil the services you have requested.
• Legal obligation: Certain processing activities — including KYC verification, AML record-keeping, and fraud reporting — are required by applicable law. We have no discretion to waive these obligations.
• Legitimate interests: We process certain data (such as usage analytics and security monitoring) where we have a legitimate business interest in doing so, provided that interest is not overridden by your rights and freedoms.
• Consent: Where we rely on consent as the legal basis — for example, for marketing communications — you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

5. Sharing Your Personal Data

fbbaji does not sell or rent your personal data to any third party. We may share your data with the following categories of recipient, strictly for the purposes described in this Policy:

• Payment service providers: bKash, Nagad, Rocket, Upay, Visa, and Mastercard receive only the transaction data necessary to process your deposits and withdrawals. These providers operate under their own privacy frameworks and data-protection obligations.
• Game providers and technology partners: Providers such as Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi may receive limited technical data necessary to deliver their games through the fbbaji Platform. No personally identifiable financial data is shared with game providers.
• Identity verification services: Third-party KYC and AML compliance providers may process your identity documents on our behalf to verify your eligibility to use the Platform. These providers are bound by strict contractual and legal data-protection obligations.
• Regulatory and law enforcement authorities: We may disclose your data to relevant authorities where required to do so by applicable law, court order, or regulatory directive. We will not notify you of such disclosures where doing so is prohibited by law.
• Service providers and data processors: We engage trusted technology vendors (hosting providers, analytics platforms, customer support tools) who process data on our behalf and are contractually prohibited from using that data for any purpose other than delivering services to fbbaji.

All third-party recipients of your personal data are required to handle that data in a manner consistent with this Policy and applicable data-protection standards. We conduct due diligence on our key data processors and review their compliance periodically.

6. Cookies and Tracking Technologies

fbbaji uses cookies and similar tracking technologies to operate the Platform, remember your preferences, maintain your session state, and analyse how the Platform is used. The types of cookies we use are:

• Strictly necessary cookies: These are essential for the Platform to function. They enable core features such as user authentication, session management, and security. You cannot opt out of these cookies while using the Platform.
• Performance and analytics cookies: These collect anonymised or aggregated data about how users navigate the Platform — such as which pages are visited most frequently and where errors occur. This data helps us improve the Platform over time.
• Functional cookies: These remember your preferences (such as language and display settings) to personalise your experience on subsequent visits.
• Marketing cookies: Where you have consented, these cookies allow us to deliver relevant promotional offers and to measure the effectiveness of our campaigns. You may withdraw consent for marketing cookies at any time through your browser settings.

You can manage or delete cookies at any time through your browser or device settings. Please note that disabling certain cookies may affect the functionality of the Platform and prevent some features from working correctly.

7. Data Retention

fbbaji retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, including satisfying any applicable legal, regulatory, accounting, or reporting requirements.

As a general rule:

• Account and identity data is retained for the duration of your account and for a minimum of five years following account closure, in accordance with AML and KYC regulatory requirements.
• Financial and transaction records are retained for a minimum of five years from the date of each transaction.
• Gaming and session data is retained for a period of three years from the date of each session, or longer if required for regulatory compliance or dispute resolution purposes.
• Customer support correspondence is retained for two years from the date of the last interaction, unless the subject matter relates to a formal dispute or regulatory matter, in which case it is retained until final resolution.
• Marketing consent records are retained for as long as your consent remains active, and for a reasonable period thereafter as evidence of prior consent.

When personal data is no longer required, we securely delete or anonymise it in accordance with our internal data retention and disposal procedures.

8. Your Privacy Rights

As a user of the fbbaji Platform, you have the following rights with respect to your personal data. To exercise any of these rights, please contact us in writing at [email protected] with a clear description of your request. We will verify your identity before processing any data request and will respond within 30 days.

• Right of access: You may request a copy of the personal data fbbaji holds about you, along with information about how it is used and with whom it is shared.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it without undue delay.
• Right to erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where the data has been unlawfully processed. This right is subject to our legal obligation to retain certain data for regulatory compliance purposes.
• Right to restriction of processing: You may request that we restrict the processing of your personal data in certain circumstances — for example, while a dispute about the accuracy of the data is being resolved.
• Right to data portability: Where processing is based on consent or contractual necessity and is carried out by automated means, you may request that we provide your personal data in a structured, commonly used, and machine-readable format.
• Right to object: You may object to processing based on our legitimate interests or for direct marketing purposes. Where you object to direct marketing, we will cease that processing immediately.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

9. Data Security

fbbaji takes the security of your personal data seriously and has implemented appropriate technical and organisational measures to protect it against unauthorised access, accidental loss, destruction, or disclosure. Our security measures include:

• SSL/TLS encryption for all data transmitted between your device and our servers.
• Encryption of stored sensitive data, including passwords (stored as cryptographic hashes) and financial identifiers.
• Role-based access controls that restrict employee access to personal data on a strict need-to-know basis.
• Regular security assessments and vulnerability testing of our platform and infrastructure.
• Incident response procedures that enable us to detect, investigate, and report data breaches in a timely manner.

While we take all reasonable precautions to protect your data, no system connected to the internet is completely immune to security risks. You are responsible for maintaining the security of your account credentials and for notifying us promptly if you suspect that your account has been compromised.

10. Children and Minors

The fbbaji Platform is strictly intended for adults aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. If we become aware that we have inadvertently collected personal data from a minor, we will take immediate steps to delete that data and close the associated account.

If you believe that a minor has created an account or provided personal data to fbbaji, please contact us immediately at [email protected] so that we can investigate and take appropriate action.

11. Changes to This Privacy Policy

fbbaji reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, applicable law, or Platform features. When we make material changes, we will update the "Last Updated" date at the top of this page and, where appropriate, notify you directly via the email address associated with your account.

Your continued use of the Platform after any update to this Policy constitutes your acceptance of the revised terms. We encourage you to review this page periodically to stay informed about how we are protecting your data.

12. Contact Us About Privacy

If you have any questions, concerns, or requests relating to this Privacy Policy or the way fbbaji handles your personal data, please contact our dedicated privacy support team. We are available around the clock and aim to respond to all privacy-related enquiries within 48 hours.

Email: [email protected]

Please include your registered username, a description of your query, and — for data access or deletion requests — a copy of a valid identity document so that we can verify your identity before processing your request. All communications are handled confidentially by our support team operating on Bangladesh Standard Time (BST, UTC+6).