pbaje Privacy Policy

1. Data We Collect

pbaje collects personal data through several channels: directly from you when you register an account or interact with platform features, automatically through your device and browser as you navigate the site, and from third-party partners involved in payment processing, fraud prevention, and identity verification. We apply a data minimisation principle — we only collect what is genuinely necessary to deliver the platform's services safely and compliantly.

The categories of personal data we collect are as follows:

2. How We Use Your Data

pbaje uses collected personal data for specific, documented purposes. We do not use your data for any purpose beyond what is described in this Privacy Policy without first obtaining your explicit consent. The primary purposes for which we process your personal data are:

• Account creation and management: To register your pbaje account, verify your identity, maintain your account settings, and provide access to the platform's features.
• Service delivery: To process deposits and withdrawals in Bangladeshi Taka (৳), settle bets, credit bonus balances, and deliver the full range of casino and sports betting services available on pbaje.
• KYC and fraud prevention: To verify that you meet the 18+ age requirement, to confirm your identity and residential address, and to detect and prevent fraudulent activity, money laundering, and multi-accounting on the pbaje platform.
• Responsible gaming compliance: To monitor your gaming behaviour for indicators of problem gambling, to enforce self-exclusion orders and deposit limits you have set, and to contact you with responsible gaming resources if our systems flag a concern.
• Customer support: To respond to your support queries, process complaints, investigate disputed transactions, and maintain a record of communications for quality assurance purposes.
• Marketing and promotions: To send you information about pbaje promotions, daily bonuses, BPL season offers, Eid promotions, and other relevant offers — but only where you have given your consent to receive such communications and have not subsequently opted out.
• Platform improvement: To analyse aggregate usage patterns, identify technical issues, optimise the pbaje interface for Bangladesh players, and develop new features and game categories.
• Legal and regulatory obligations: To comply with applicable laws, respond to lawful requests from competent authorities, and maintain records required for financial compliance purposes.

3. Data Sharing & Third Parties

pbaje does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with carefully selected third-party partners and service providers, but only to the extent necessary to deliver our services and fulfil our legal obligations. All third-party partners who receive your data are contractually required to process it solely for the purposes specified by pbaje and to maintain appropriate security standards.

The categories of third parties with whom we may share your data include:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard — to process deposit and withdrawal transactions on your behalf. These providers receive only the minimum financial and identity data needed to authenticate and complete the transaction.
• KYC and identity verification providers: Third-party services that assist pbaje in verifying identity documents, screening against sanctions lists, and detecting fraudulent documentation. These providers process your identity and document data under strict confidentiality obligations.
• Game content providers: Studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive technical session data (such as player session tokens) necessary to deliver their games within the pbaje platform. These providers do not receive your full identity or financial data.
• Analytics and platform technology providers: Third-party services that help pbaje monitor platform performance, detect technical errors, and analyse usage patterns. These providers process pseudonymised or aggregated data wherever possible.
• Legal and regulatory authorities: pbaje may be required to disclose personal data to competent government bodies, law enforcement agencies, or courts in Bangladesh or other relevant jurisdictions in response to a lawful order or legal obligation. We will notify you of such a disclosure where we are legally permitted to do so.
• Professional advisers: Lawyers, auditors, and compliance consultants who require access to certain account or transaction data to provide legal, financial, or regulatory advice to pbaje. These parties are bound by professional confidentiality obligations.

4. Cookies & Tracking Technologies

pbaje uses cookies and similar tracking technologies (such as web beacons and local storage) to operate the platform, remember your session, and improve your experience. A cookie is a small text file placed on your device by your browser when you visit the pbaje website. Cookies do not contain executable code and cannot be used to access other data on your device.

The types of cookies pbaje uses are:

Strictly necessary cookies cannot be disabled as they are essential for the platform to function. You may manage functional, analytics, and marketing cookies through your browser settings. Please be aware that disabling certain cookies may affect the functionality of the pbaje platform — for example, disabling functional cookies may mean your session preferences are not saved between visits.

5. Data Retention & Storage

pbaje retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. We do not retain personal data indefinitely — data that is no longer required is securely deleted or anonymised in accordance with our internal data lifecycle procedures.

The following general retention periods apply to the main categories of personal data held by pbaje:

• Account and identity data: Retained for the duration of your active account relationship with pbaje, plus a minimum of five years following account closure. This retention period reflects financial record-keeping and anti-money-laundering compliance obligations.
• KYC documents (identity and address proofs): Retained for a minimum of five years from the date of verification, or from the date of account closure, whichever is later.
• Transaction and financial records: Retained for a minimum of five years from the date of each transaction, in line with financial record-keeping requirements.
• Customer support communications: Retained for three years from the date of the last interaction, to enable us to reference prior contact history in the event of a follow-up query or dispute.
• Marketing consent records: Retained for the duration of your marketing consent plus three years after you withdraw consent, to demonstrate compliance with our consent obligations.
• Technical and usage data (server logs, analytics): Typically retained in identifiable form for up to 13 months, after which data is either deleted or fully anonymised for aggregate reporting purposes.
• Responsible gaming records (self-exclusion, deposit limit history): Retained for a minimum of five years from the date of each record, to ensure we can enforce self-exclusion orders and respond to any future regulatory enquiries.

All personal data held by pbaje is stored on secured servers. Where data is held in cloud environments, those environments are subject to contractual security and confidentiality obligations equivalent to those applied to on-premises storage. Physical access to servers hosting pbaje player data is restricted to authorised personnel only.

6. Your Privacy Rights

As a pbaje player, you hold meaningful rights over your personal data. pbaje is committed to honouring these rights promptly and transparently. To exercise any of the rights described below, please contact our support team via the live chat function in your account dashboard or use the plain-text email address listed in the footer of this page. We will acknowledge your request within three business days and aim to respond fully within 30 calendar days.

Please note that certain rights are subject to limitations. For example, the right to erasure does not apply where pbaje is required to retain data to comply with a legal obligation (such as anti-money-laundering record-keeping requirements). Where we are unable to fulfil a request in full, we will explain the reason clearly and advise on any alternative steps available to you.

7. Data Security Measures

pbaje takes the security of your personal data seriously. We implement a layered set of technical and organisational measures designed to protect your data against unauthorised access, accidental loss, alteration, disclosure, and destruction. These measures are reviewed and updated on a regular basis in line with evolving industry standards.

Key security measures in place at pbaje include:

• 256-bit SSL/TLS encryption: All data transmitted between your device and pbaje's servers is protected by industry-standard TLS encryption. This ensures that your login credentials, personal details, and financial data cannot be intercepted during transit.
• Encryption at rest: Sensitive data fields — including identity documents, payment method references, and password hashes — are encrypted within our databases using AES-256 encryption. Passwords are never stored in plain text.
• Access controls: Access to systems containing player personal data is restricted to pbaje employees and contractors who have a legitimate operational need. Access is governed by role-based permissions, and all access events are logged for audit purposes.
• Two-factor authentication (2FA): pbaje encourages all players to enable two-factor authentication on their accounts. When enabled, a one-time verification code is required in addition to your password at each login, significantly reducing the risk of unauthorised access even if your password is compromised.
• Regular security assessments: pbaje conducts periodic internal security reviews and engages external security professionals to perform vulnerability assessments on our platform infrastructure.
• Data breach response: pbaje maintains an internal data breach response procedure. In the event of a security incident that affects your personal data, we will notify affected players and relevant authorities within the timeframes required by applicable law.

8. Changes to This Policy

pbaje reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, regulatory requirements, or platform features. When we make a material change to this Privacy Policy, we will notify registered players via the email address on their pbaje account and display a prominent notice on the platform for a minimum of 14 days following the change.

The updated Privacy Policy will be effective from the date shown in the "Last Updated" field at the top of this page. Your continued use of the pbaje platform after the effective date of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with a revised Privacy Policy, you should discontinue your use of the platform and may request account closure by contacting our support team.

We encourage you to review this Privacy Policy periodically, particularly before submitting any new personal data through the platform. The most current version of this Privacy Policy will always be accessible at https://pbaje.app/privacy-policy.

If you have any questions, concerns, or complaints about this Privacy Policy or about pbaje's data processing practices, please contact our Data Support team via the live chat function in your account dashboard. Our support team is available 24 hours a day, 7 days a week, on Bangladesh Standard Time (UTC+6). You may also reach us using the plain-text email address listed in the footer of this page.