fbbaji Privacy Policy
— Your Data, Your Rights

1 Introduction

This Privacy Policy ("Policy") describes how fbbaji ("we", "us", "our") collects, uses, stores, and protects the personal data of individuals ("you", "your", "the Player") who access or use the fbbaji platform at https://fbbaji.vip and all associated services.

fbbaji is committed to handling your personal data responsibly, transparently, and in accordance with recognised data protection principles. This Policy should be read alongside the fbbaji Terms & Conditions, which together form the complete agreement governing your relationship with the platform.

By registering an account or continuing to use fbbaji, you acknowledge that you have read and understood this Policy and consent to the collection and use of your data as described herein. If you do not agree with any part of this Policy, you should discontinue use of the platform and contact support to arrange account closure.

2 Data Controller

For the purposes of this Policy, fbbaji acts as the data controller in respect of all personal data collected through the platform. As data controller, fbbaji determines the purposes and means by which your personal data is processed.

If you have any questions, concerns, or requests relating to the handling of your personal data, you may contact our Data Protection team directly using the contact details set out in Section 15 of this Policy. We aim to respond to all data-related enquiries within 10 business days of receipt.

3 Data We Collect

fbbaji collects personal data across several categories. The table below summarises the types of data collected, along with the primary purpose for which each category is used.

fbbaji does not intentionally collect sensitive personal data such as racial or ethnic origin, religious beliefs, health data, or criminal records unless specifically required by applicable law or fraud prevention obligations.

4 How We Collect Your Data

fbbaji collects personal data through the following channels and mechanisms:

• Direct Submission: Information you provide when registering your account, completing KYC verification, making a deposit or withdrawal, contacting support, or completing any form on the platform.
• Automated Technical Collection: Data collected automatically when you interact with the fbbaji platform, including IP addresses, browser fingerprints, device identifiers, and session activity logs. This data is captured via server logs and platform analytics tools.
• Payment Processors: When you initiate a financial transaction via bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, or BRAC Bank, fbbaji receives transaction confirmation data from those payment providers sufficient to record and verify the transaction.
• Identity Verification Partners: fbbaji may use trusted third-party identity verification services to validate documents submitted during KYC. These partners process your identification data under strict confidentiality obligations.
• Cookies and Tracking Technologies: fbbaji uses cookies, web beacons, and similar technologies to collect session and usage data. Full details are provided in Section 10 of this Policy.

5 How We Use Your Data

fbbaji uses the personal data it collects for the following clearly defined purposes:

• Account Management: To create, maintain, and administer your fbbaji account, including verifying your identity, enforcing the one-account-per-person rule, and managing your account preferences.
• Service Delivery: To provide access to casino games, sports betting markets, and all other fbbaji platform features you are entitled to use as a registered player.
• Financial Processing: To process deposits, withdrawals, bonus credits, and any other financial transactions connected to your account, and to maintain accurate financial records.
• Identity Verification and KYC Compliance: To verify your identity, age, and payment method ownership in accordance with Know Your Customer requirements and anti-money laundering obligations.
• Fraud Detection and Security: To monitor account activity for signs of fraudulent behaviour, unauthorised access, multi-accounting, collusion, or bonus abuse, and to take protective action where such activity is detected.
• Responsible Gaming: To monitor your gaming behaviour for indicators of problem gambling and, where appropriate, to proactively reach out with responsible gaming resources or apply protective account restrictions.
• Customer Support: To respond to your enquiries, process complaints, and resolve disputes in a timely and well-informed manner.
• Legal Compliance: To comply with applicable laws, regulatory requirements, court orders, and the lawful requests of competent authorities.
• Platform Improvement: To analyse usage patterns and player behaviour in aggregate to improve the fbbaji platform, optimise game performance, and develop new features.
• Direct Communications: To send you transactional communications (account alerts, deposit confirmations, withdrawal notifications) and, where you have opted in, promotional messages about fbbaji offers and events.

6 Legal Basis for Processing

fbbaji processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual Necessity: Processing that is necessary to perform the contract between you and fbbaji — for example, processing your account registration data or your financial transaction data to deliver the service you have requested.
• Legal Obligation: Processing that fbbaji is required to carry out to comply with applicable laws — for example, retaining financial transaction records for anti-money laundering purposes or disclosing data to law enforcement authorities when lawfully required.
• Legitimate Interests: Processing that is necessary for fbbaji's legitimate business interests, provided those interests are not overridden by your fundamental rights and freedoms. This includes fraud detection, platform security monitoring, and service analytics.
• Consent: Processing carried out on the basis of your freely given, specific, informed consent — primarily in the context of optional marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

7 Data Sharing & Disclosure

fbbaji does not sell, rent, or trade your personal data to any third party for commercial or marketing purposes. fbbaji may share your data only in the limited circumstances described below:

• Payment Processors: Transaction data is shared with approved payment partners (including bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, and BRAC Bank) to the extent necessary to process your financial transactions.
• Identity Verification Providers: Document and identity data is shared with trusted KYC and identity verification service providers under strict data processing agreements.
• Game Software Providers: Certain technical identifiers (such as anonymised player IDs) may be shared with game platform providers including Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, and Microgaming solely to facilitate fair game delivery and RNG certification.
• IT and Infrastructure Partners: fbbaji uses reputable hosting, cloud storage, and cybersecurity service providers. These partners access data only as necessary to provide their contracted services and are bound by confidentiality obligations.
• Legal and Regulatory Authorities: fbbaji will disclose personal data to law enforcement agencies, courts, or regulatory bodies where required to do so by applicable law, valid legal process, or to protect the rights, safety, or property of fbbaji or its players.
• Business Transfers: In the event of a merger, acquisition, restructuring, or sale of all or part of fbbaji's business, player data may be transferred to the acquiring or successor entity, subject to equivalent data protection obligations.

8 Data Retention

fbbaji retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, including satisfying legal, accounting, and reporting obligations. The general retention periods applied by fbbaji are as follows:

• Active Account Data: Retained for the full duration of your active account relationship with fbbaji.
• Financial Transaction Records: Retained for a minimum of 7 years from the date of the transaction to comply with financial recordkeeping and anti-money laundering requirements.
• KYC and Identity Documents: Retained for a minimum of 5 years from the date of account closure or the last verification event, whichever is later.
• Support and Communication Records: Retained for up to 3 years from the date of the relevant interaction to support dispute resolution and quality assurance.
• Technical and Usage Logs: Retained for up to 12 months from the date of collection for security and fraud detection purposes, after which they are aggregated or deleted.

When your personal data is no longer required for any of the above purposes and no legal obligation to retain it persists, fbbaji will securely delete or anonymise it in accordance with its data disposal procedures.

9 Security Measures

fbbaji implements a layered set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include, but are not limited to:

• 256-bit SSL/TLS Encryption: All data transmitted between your browser or app and fbbaji servers is encrypted using industry-standard TLS protocols.
• Access Controls: Access to personal data within fbbaji's systems is restricted on a strict need-to-know basis. Staff access is governed by role-based access control policies and is subject to regular audit.
• Data Minimisation: fbbaji collects only the minimum data required for each specific operational purpose and does not retain data beyond the periods specified in Section 8.
• Intrusion Detection: fbbaji's infrastructure is monitored continuously for signs of unauthorised access, anomalous activity, and potential data breaches.
• Secure Data Storage: Stored data is protected by encryption at rest on servers maintained within secure, access-controlled data centre facilities.
• Staff Training: All fbbaji personnel with access to player data undergo regular data protection and information security training.

Despite these measures, no internet-based service can guarantee absolute security. In the unlikely event of a data breach that poses a material risk to your rights and freedoms, fbbaji will notify affected players and relevant authorities in accordance with applicable data breach notification requirements.

10 Cookies & Tracking Technologies

fbbaji uses cookies and similar tracking technologies on its platform. A cookie is a small text file placed on your device by a website to enable certain functions and record certain information about your visit. fbbaji uses the following categories of cookies:

• Strictly Necessary Cookies: These are essential for the fbbaji platform to function. They manage your login session, maintain your account state, and enable core platform features. These cookies cannot be disabled without rendering the platform non-functional.
• Functional Cookies: These cookies remember your preferences (such as language settings and display options) to provide a more personalised experience on subsequent visits.
• Analytical Cookies: fbbaji uses anonymised analytical cookies to understand how players interact with the platform — including which pages are visited most frequently and where players encounter difficulties. This data is used in aggregate only and is not linked to individual player identities.

fbbaji does not use third-party advertising cookies, retargeting cookies, or social media tracking pixels on its platform. You can control and delete cookies through your browser settings at any time. Please note that disabling strictly necessary cookies may impair your ability to use core fbbaji features including account login.

11 Your Data Rights

As a player whose personal data is processed by fbbaji, you hold the following rights in respect of that data. To exercise any of these rights, please contact fbbaji support as described in Section 15.

• Right of Access: You have the right to request a copy of all personal data fbbaji holds about you, along with information about how it is used. fbbaji will respond to access requests within 10 business days.
• Right to Rectification: If any personal data fbbaji holds about you is inaccurate or incomplete, you have the right to request that it be corrected or completed without undue delay.
• Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you withdraw your consent (where consent was the legal basis for processing). This right is subject to fbbaji's legal retention obligations — data that must be retained by law cannot be erased on request.
• Right to Restriction: You may request that fbbaji restrict the processing of your personal data in certain circumstances — for example, while the accuracy of the data is being contested.
• Right to Portability: Where processing is based on consent or contractual necessity, you have the right to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to Object: You have the right to object to the processing of your personal data where that processing is based on fbbaji's legitimate interests. fbbaji will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal date.

fbbaji will not charge a fee for handling data rights requests submitted in good faith. Where requests are manifestly unfounded or excessive, fbbaji reserves the right to charge a reasonable administrative fee or decline to act on the request.

12 Children's Privacy

fbbaji is strictly an adult platform. The service is available only to persons aged 18 and above. fbbaji does not knowingly collect or process personal data from individuals under the age of 18.

If fbbaji becomes aware that personal data has been collected from a person under 18 — whether through inaccurate registration information or any other means — that account will be immediately closed, all funds will be handled in accordance with the Terms & Conditions relating to underage accounts, and the associated personal data will be deleted from fbbaji's systems within a reasonable timeframe.

Parents or guardians who believe that a minor has created a fbbaji account or submitted personal data to the platform are encouraged to contact fbbaji support immediately at [email protected] so that appropriate action can be taken without delay.

13 International Data Transfers

fbbaji's primary operations and data storage infrastructure are based in server facilities that prioritise data security and availability. In the course of delivering its services, fbbaji may transfer certain categories of personal data to trusted service providers or technology partners located outside Bangladesh — for example, game software providers, cloud infrastructure partners, or KYC verification services.

Where personal data is transferred internationally, fbbaji ensures that appropriate safeguards are in place to protect the data to a standard equivalent to that applied within fbbaji's own systems. These safeguards include contractual data processing agreements, data transfer clauses, and vendor security assessments conducted before any data sharing relationship is established.

14 Changes to This Policy

fbbaji reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, platform functionality, or data processing practices. The date of the most recent revision is displayed at the top of this Policy and in the version badge on this page.

Where material changes are made to this Policy — particularly changes that affect how your data is used or your rights as a data subject — fbbaji will notify registered players via the email address on file or through a prominent in-platform notice prior to the changes taking effect.

Your continued use of the fbbaji platform following the effective date of an updated Privacy Policy constitutes your acknowledgement of the revised terms. We encourage you to review this Policy periodically to stay informed about how fbbaji protects your data.

15 Contact Us

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, want to submit a privacy-related complaint, or simply want to understand more about how fbbaji handles your personal data, please contact the fbbaji Data Protection team using the details below.

fbbaji takes all privacy enquiries and complaints seriously. If you are not satisfied with the response received from the fbbaji Data Protection team, you have the right to escalate your complaint to a competent data protection supervisory authority in your jurisdiction.

This Privacy Policy was last reviewed and updated on 2 July 2026 and applies to all personal data collected by fbbaji from that date forward. All previous versions of this Policy are superseded by this document.