gbajrr Privacy Policy
How We Handle Your Data

When you interact with the gbajrr platform — from the moment you register an account through to your ongoing use of our casino and sports betting services — we collect certain categories of personal data. The specific data collected depends on the nature of your interaction with the platform.

Registration & Identity Data: When you create a gbajrr account, we collect your full legal name, date of birth, email address, mobile phone number, and residential address. This information is required to create and manage your account, verify your identity, and comply with our Know Your Customer (KYC) obligations.

Identity Verification (KYC) Documents: To process withdrawals and comply with anti-money laundering requirements, gbajrr may request copies of government-issued photo identification (such as a National ID card, passport, or driving licence) and proof of address (such as a utility bill or bank statement). These documents are handled with the highest level of security and are never shared beyond the verification process.

Financial Data: We collect records of all deposits, withdrawals, and transaction history associated with your gbajrr account. We also collect the type of payment method used (e.g., bKash, Nagad, Rocket, Upay, Visa, Mastercard, or bank transfer). Full payment card numbers or mobile banking PINs are never stored on gbajrr's servers — payment processing is handled by PCI-DSS compliant third-party payment providers.

Gameplay & Betting Data: gbajrr logs details of your gameplay activity, including games played, bets placed, wager amounts, session duration, and game outcomes. This data is used to operate the platform, calculate bonuses, resolve disputes, and identify unusual patterns that may indicate problem gambling or fraudulent activity.

Summary of Data Categories Collected:

gbajrr uses the personal data we collect for the following specific purposes. We do not use your data for any purpose beyond those listed here without first obtaining your explicit consent or being required to do so by applicable law.

• Account management: Creating, maintaining, and securing your gbajrr account, including processing login requests, resetting passwords, and managing account preferences.
• Identity verification (KYC): Verifying your identity and age in compliance with our responsible gaming commitments. Players must be 18 years of age or older. KYC verification is also required to process withdrawal requests.
• Payment processing: Facilitating deposits and withdrawals through your chosen payment method, whether bKash, Nagad, Rocket, Upay, Visa, Mastercard, or bank transfer. Financial records are maintained as required for accounting and regulatory purposes.
• Platform operation & game delivery: Ensuring that games, betting markets, odds, and promotional offers are delivered correctly and function as intended.
• Fraud prevention & security: Detecting and preventing fraudulent activity, multi-accounting, bonus abuse, money laundering, and other prohibited conduct as described in the gbajrr Terms & Conditions.
• Responsible gaming monitoring: Identifying patterns of gameplay that may indicate problem gambling, and proactively reaching out to players who may benefit from responsible gaming support tools.
• Customer support: Responding to your queries, resolving disputes, and processing complaints submitted via live chat or email.
• Marketing communications: Sending promotional offers, bonus notifications, and event-related announcements — but only where you have explicitly opted in to receive such communications. You may withdraw your marketing consent at any time via your account settings.
• Legal compliance: Meeting our obligations under applicable laws and regulations, including responding to lawful requests from relevant authorities.

gbajrr does not sell, rent, or trade your personal data to any third party for commercial gain. However, to operate the platform effectively and comply with legal obligations, we share certain data with the following categories of trusted third parties, each of whom is bound by strict data processing agreements:

• Game providers: Software studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive your player ID and session data to deliver their games. They do not receive your full identity or financial data.
• Payment processors: Licensed payment service providers handling transactions via bKash, Nagad, Rocket, Upay, Visa, Mastercard, and bank transfer receive the minimum financial data necessary to process each transaction securely.
• Identity verification providers: Third-party KYC and anti-money laundering service providers may process your identity documents as part of the verification workflow. These providers operate under strict confidentiality obligations.
• Fraud detection services: Specialised security providers may receive technical data (such as IP addresses and device fingerprints) to assess fraud risk associated with account activity.
• Legal and regulatory authorities: Where required by applicable law, court order, or a request from a competent regulatory or law enforcement authority, gbajrr may disclose personal data without prior notice to the affected player.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of gbajrr's business, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer and its implications for your data.

gbajrr uses cookies and similar tracking technologies to operate the platform, improve user experience, and support security functions. A cookie is a small text file stored on your device by your browser when you visit a website. Cookies themselves do not contain personally identifiable information but may be associated with your account when you are logged in.

Types of Cookies Used by gbajrr:

Essential and security cookies are required for the platform to function and cannot be disabled without significantly impairing your ability to use gbajrr. Functional and analytics cookies may be managed via your browser settings. Most modern browsers allow you to block or delete cookies; please refer to your browser's help documentation for instructions.

gbajrr retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply as general guidelines:

• Account data (identity, contact details): Retained for the duration of your active account plus a minimum of five years following account closure, to comply with anti-money laundering record-keeping obligations.
• KYC documentation: Retained for a minimum of five years from the date of verification, as required by applicable financial crime prevention regulations.
• Transaction and financial records: Retained for a minimum of five years from the date of each transaction, in line with standard accounting and regulatory requirements.
• Gameplay logs: Retained for a minimum of three years from the date of each session, for dispute resolution and responsible gaming monitoring purposes.
• Support communications: Retained for a minimum of two years from the date of the last communication, for quality assurance and dispute resolution purposes.
• Marketing consent records: Retained for the duration of your account and for one year after consent withdrawal, as evidence of the consent history.

When the applicable retention period expires and there is no legal basis for continued storage, gbajrr securely deletes or anonymises the relevant data so that it can no longer be associated with you as an identifiable individual.

As a gbajrr player, you have the following rights with respect to your personal data. These rights can be exercised by contacting our support team via live chat from your account dashboard or via the email address published in the Contact & Support section of this website.

• Right of access: You have the right to request a copy of the personal data that gbajrr holds about you. We will provide this in a structured, readable format within a reasonable timeframe following verification of your identity.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. For certain data (such as your registered name or date of birth), identity verification may be required before the correction is applied.
• Right to erasure: In certain circumstances, you have the right to request that gbajrr delete your personal data — for example, where the data is no longer necessary for the purpose it was collected, or where you withdraw consent and there is no other lawful basis for retention. Please note that this right is subject to overriding legal obligations, such as our anti-money laundering record-keeping requirements, which may prevent full erasure.
• Right to restrict processing: You may request that gbajrr restrict the processing of your personal data in certain circumstances — for example, while a dispute about the accuracy of your data is under review.
• Right to data portability: Where technically feasible and legally applicable, you have the right to receive your personal data in a structured, machine-readable format and to transfer it to another service provider.
• Right to withdraw marketing consent: Where you have consented to receive marketing communications from gbajrr, you may withdraw that consent at any time via your account notification settings. Withdrawal of marketing consent does not affect the lawfulness of any processing carried out prior to withdrawal.
• Right to lodge a complaint: If you believe that gbajrr has not handled your personal data in accordance with applicable data protection principles, you have the right to lodge a complaint with a competent supervisory authority.

gbajrr implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security infrastructure includes the following safeguards:

• TLS 1.3 encryption in transit: All data transmitted between your device and gbajrr's servers is protected by Transport Layer Security (TLS) version 1.3, the current industry standard for secure web communications.
• Encryption at rest: Sensitive data stored on gbajrr's servers — including identity documents, financial records, and account credentials — is encrypted at rest using AES-256 encryption.
• Access controls: Access to personal data held by gbajrr is restricted to authorised staff on a strict need-to-know basis. All staff with access to personal data are required to complete data protection training and are bound by confidentiality obligations.
• Two-factor authentication (2FA): Players are strongly encouraged to enable 2FA on their gbajrr account via account settings. 2FA adds a critical additional layer of protection against unauthorised login attempts.
• Intrusion detection and monitoring: gbajrr operates 24/7 network monitoring and intrusion detection systems to identify and respond to potential security threats in real time.
• Regular security reviews: Our security infrastructure is subject to periodic internal and third-party reviews to identify and remediate vulnerabilities.

In the event of a data security incident that poses a risk to your rights and interests, gbajrr will notify affected players as promptly as circumstances allow and will take all necessary steps to contain and remediate the incident.

gbajrr reviews this Privacy Policy on a regular basis and updates it whenever our data practices change, new services are introduced, or applicable legal requirements evolve. The version number and "Last Updated" date at the top of this document reflect the most recent revision.

How We Notify You of Changes: When material changes are made to this Privacy Policy — changes that meaningfully affect how your data is collected, used, or shared — gbajrr will notify registered players via a notice displayed prominently upon next login, and where appropriate, via your registered email address. Minor clarifications that do not affect the substance of our data practices may be made without individual notification.

We encourage you to review this Privacy Policy periodically. Your continued use of the gbajrr platform following the publication of any updated version constitutes your acknowledgement of the revised policy.

• Live Chat: Available 24/7 directly from your gbajrr account dashboard — the fastest way to reach our team.
• Email: support at gbajrr.net (plain text — not a clickable link). Please use the subject line "Privacy Request" for data rights enquiries.
• Response Time: We aim to acknowledge all privacy-related enquiries within five business days and to provide a substantive response within 30 calendar days of receipt.

This Privacy Policy is governed by the same principles and language as the gbajrr Terms & Conditions. In the event of any conflict between this Privacy Policy and the Terms & Conditions on a data-related matter, this Privacy Policy shall take precedence.