ibaji Privacy Policy â How We Protect Your Data
ibaji is committed to protecting the privacy of all players in Bangladesh. This policy explains what personal data we collect, why we collect it, how we use it, and what rights you have over your information.
1. Introduction
ibaji does not sell your personal data. Your information is used solely to operate your account, process payments, ensure platform security, and comply with legal obligations. All data is protected by SSL encryption.
This Privacy Policy ("Policy") governs the collection, processing, storage, and use of personal data by ibaji in connection with your use of the ibaji website and Platform. ibaji is an online gaming and sports betting platform serving adult players in Bangladesh. By creating an ibaji account or using any part of the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you must not use the Platform.
ibaji takes the privacy of Bangladesh players seriously. The Platform is designed to collect only the personal data that is necessary to provide a safe, reliable, and compliant online gaming service. ibaji does not collect data speculatively or for purposes beyond those described in this Policy. This Policy applies to all personal data collected via the ibaji website, any associated mobile platform, and all communications between ibaji and its players, including support emails and account notifications sent to your registered mobile number.
2. What Personal Data We Collect
ibaji collects personal data across the following categories. We collect only what is necessary for the specific purpose described:
Identity Data
Full name, date of birth, and national ID number (for KYC verification where required).
Contact Data
Mobile phone number and email address used to register and receive account communications.
Transaction Data
Records of deposits and withdrawals via bKash, Nagad, Rocket, and Upay â including amounts, timestamps, and reference numbers.
Gaming Activity Data
Game history, betting records, session durations, and wagering activity on the Platform.
Technical Data
IP address, device type, browser type, operating system, and session log data collected automatically when you use the Platform.
KYC Documents
Copies of government-issued ID documents submitted during identity verification, stored securely and used only for compliance purposes.
3. How ibaji Uses Your Personal Data
ibaji processes your personal data only for specific, legitimate purposes. We do not use your data for any purpose not described in this Policy. The primary purposes for which ibaji uses your personal data are:
- To create and manage your ibaji player account, including processing your registration details and verifying your identity.
- To process deposits and withdrawals via bKash, Nagad, Rocket, and Upay, and to maintain accurate financial records in compliance with anti-money laundering obligations.
- To provide customer support in English and Bangla, and to respond to queries, complaints, and account-related requests submitted to [email protected].
- To detect, investigate, and prevent fraud, collusion, bonus abuse, money laundering, and other prohibited activities on the Platform.
- To personalise your experience on the Platform, including displaying relevant game recommendations and promotional offers based on your gaming activity â where you have not opted out of such personalisation.
- To comply with applicable legal and regulatory requirements, including responding to lawful requests from law enforcement authorities and financial intelligence units.
ibaji does not use your personal data for the purpose of selling it to third-party advertisers, data brokers, or marketing networks. ibaji does not send unsolicited marketing communications. Any promotional communications from ibaji relate exclusively to your ibaji account and the ibaji Platform, and you may opt out of these at any time by contacting [email protected].
Legal Basis and Data Sharing
-
1
Legal Basis for Processing
ibaji processes your personal data on one or more of the following legal bases: (a) contract performance â processing is necessary to provide the gaming and payment services you have requested; (b) legal obligation â processing is required to comply with anti-money laundering, know-your-customer, and other applicable legal requirements; (c) legitimate interests â processing is necessary for ibaji's legitimate interests in operating a safe, fraud-free, and compliant gaming platform; (d) consent â where you have given explicit consent, for example to receive promotional communications. You may withdraw consent-based processing at any time without affecting the lawfulness of processing prior to withdrawal.
-
2
Sharing with Payment Processors
ibaji shares the minimum necessary transaction data with bKash, Nagad, Rocket, and Upay to process your deposit and withdrawal requests. This data sharing is strictly limited to information required to execute the specific transaction. ibaji does not share your gaming activity, account history, or personal profile data with any payment provider.
-
3
Sharing with Technology Partners
ibaji works with technology service providers including game content licensors (such as Evolution Gaming, Pragmatic Play, Ezugi, and others), platform infrastructure providers, and fraud detection services. These partners may receive limited technical and account data necessary to deliver their specific service. All ibaji technology partners are contractually bound to process your data in accordance with ibaji's data protection standards and may not use your data for any independent purpose.
-
4
Sharing with Authorities
ibaji may disclose your personal data to law enforcement agencies, financial intelligence units, or regulatory bodies where required to do so by law, or where ibaji has a good-faith belief that disclosure is necessary to prevent or investigate fraud, money laundering, or other criminal activity. ibaji will only disclose the minimum data necessary to fulfil a lawful obligation and will, where permitted by law, notify affected players of such disclosures.
4. Your Data Rights
As an ibaji player, you have the following rights with respect to your personal data. To exercise any of these rights, contact ibaji support at [email protected]. ibaji will respond to verified rights requests within 30 days.
-
Right of Access
You have the right to request a copy of the personal data ibaji holds about you, including a summary of how that data is being used.
-
Right to Rectification
You may request that ibaji correct any inaccurate or incomplete personal data held about you. ibaji will action rectification requests promptly, subject to identity verification.
-
Right to Erasure
You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to ibaji's legal obligations to retain certain records (such as transaction records required by anti-money laundering law). Erasure requests cannot be actioned where a legal obligation to retain the data exists.
-
Right to Data Portability
You have the right to receive a copy of the personal data you have provided to ibaji in a structured, commonly used, and machine-readable format, where technically feasible.
-
Right to Object
You have the right to object to ibaji processing your personal data for direct marketing purposes or where processing is based on ibaji's legitimate interests. Where you object to marketing, ibaji will cease marketing communications immediately. Where you object to legitimate-interest processing, ibaji will assess whether compelling grounds exist to continue.
Cookies, Retention and Security
-
5
5. Cookies and Tracking Technologies
ibaji uses cookies and similar tracking technologies (such as local storage and session tokens) to operate the Platform, maintain your login session, detect fraud, and analyse Platform usage. Essential cookies are necessary for the Platform to function and cannot be disabled. Functional cookies remember your preferences (such as language settings) to improve your experience. Analytics cookies help ibaji understand how players use the Platform so that it can be improved. You may manage non-essential cookie preferences through your browser settings; however, disabling essential cookies may impair your ability to use the Platform.
-
6
6. Data Retention
ibaji retains your personal data only for as long as is necessary for the purposes described in this Policy, and in any event for the minimum period required by applicable law. Transaction records and KYC documentation are retained for a minimum of five years following account closure in accordance with anti-money laundering regulations. Gaming activity records are retained for a minimum of three years. Technical log data (IP addresses, session logs) is retained for up to twelve months. Account profile data is retained for as long as your account remains active and for up to two years following confirmed account closure, after which it is securely deleted or anonymised.
-
7
7. Data Security
ibaji implements appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include SSL encryption for all data transmitted between your device and the Platform, restricted access controls limiting who within ibaji can access personal data, regular security audits of the Platform infrastructure, and secure storage of KYC documents. Whilst ibaji takes data security seriously and applies industry-standard protections, no online platform can guarantee absolute security. In the event of a data breach that is likely to result in a high risk to your rights, ibaji will notify affected players without undue delay.
Children, Policy Updates and Contact
ibaji strictly prohibits the use of the Platform by persons under the age of 21. ibaji does not knowingly collect personal data from persons under 21 years of age. If ibaji becomes aware that personal data has been collected from a person under 21, that data will be deleted immediately and the relevant account will be closed. If you believe that ibaji may have inadvertently collected data from a person under 21, please contact [email protected] immediately. Parents and guardians in Bangladesh are encouraged to use parental control software to prevent underage access to online gaming platforms.
ibaji reserves the right to update this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or the way in which ibaji operates the Platform. Where changes are material, ibaji will provide notice to registered players via their registered contact details or by posting a prominent notice on the Platform at least 7 days before the changes take effect. The date of the most recent revision appears at the top of this page. Continued use of the Platform after the effective date of a revised Policy constitutes acceptance of the updated terms.
If you have any questions, concerns, or requests relating to this Privacy Policy or the way ibaji handles your personal data, please contact the ibaji data support team by email at [email protected]. ibaji's support team is available 24 hours a day, 7 days a week, in both English and Bangla, with local agents based in Dhaka ready to assist players across Bangladesh, including Chittagong, Sylhet, Khulna, Rajshahi, and Barisal. ibaji aims to acknowledge all privacy-related enquiries within 24 hours and to provide a full response within 30 days.
Ready to Play at ibaji?
Your data is safe with us. Explore ibaji Casino or learn more about who we are. 21+ only â please gamble responsibly.