gdbaje Privacy Policy

This Privacy Policy ("Policy") is issued by gdbaje ("gdbaje", "we", "us", "our") and applies to all players, visitors, and users ("you", "your") who access or use the gdbaje website at gdbaje.net and any associated mobile or desktop applications, services, games, and features (collectively, the "Platform"). By registering an account, making a deposit, or otherwise using the gdbaje Platform, you acknowledge that you have read and understood this Policy and consent to the collection, use, and processing of your personal data as described herein.

gdbaje is committed to handling all personal data with transparency, integrity, and care. We collect only the data that is necessary to deliver a safe, legal, and enjoyable gambling experience for players in Bangladesh, and we take robust technical and organisational measures to protect that data against unauthorised access, disclosure, or loss.

1 Information We Collect

gdbaje collects personal data through several channels: directly from you when you register or interact with the Platform, automatically through your use of the Platform, and in certain circumstances from trusted third-party sources. The categories of personal data we collect are set out in the table below.

1.1 Data We Do Not Collect

gdbaje does not collect or store the full numbers of payment cards (Visa, Mastercard) — card transactions are processed through secure third-party payment gateways that are responsible for card data under their own PCI-DSS compliance obligations. We do not collect biometric data, health information, or data about racial or ethnic origin unless this information is incidentally visible on identity documents submitted for KYC purposes, in which case it is stored securely and used only for verification.

1.2 Data From Minors

gdbaje does not knowingly collect personal data from any person under the age of 18. If we become aware that personal data has been submitted by a minor, we will immediately close the associated account, delete the personal data, and where applicable, refer the matter to our compliance team. If you believe a minor has registered an account on gdbaje, please contact us immediately at [email protected].

2 How We Use Your Data

gdbaje processes your personal data only for lawful purposes and only to the extent necessary to fulfil those purposes. The primary legal bases on which we rely to process your personal data are: (a) the performance of our contract with you (providing the gambling services you have requested); (b) compliance with our legal obligations (including anti-money laundering and age verification requirements); (c) our legitimate business interests (fraud prevention, security, Platform improvement); and (d) your consent (for marketing communications, where applicable).

Specific purposes for which gdbaje uses your personal data include:

• Account management: Creating and maintaining your gdbaje account, authenticating your identity at login, and enabling account recovery.
• Service delivery: Processing deposits and withdrawals via bKash, Nagad, Rocket, Upay, bank transfer, and cryptocurrency; crediting winnings; applying bonuses; and making the full range of casino games and sports betting markets available to you.
• Identity verification (KYC): Verifying your age, identity, and residential address in Bangladesh to comply with anti-money laundering (AML) obligations and age restriction requirements.
• Fraud prevention and security: Detecting and preventing fraudulent account activity, money laundering, collusion, bonus abuse, and unauthorised access. This includes automated behavioural profiling designed to flag anomalous patterns for manual review.
• Responsible gaming compliance: Monitoring gaming behaviour to identify potential signs of problem gambling, enforcing deposit limits and self-exclusion requests, and delivering responsible gaming communications.
• Customer support: Responding to enquiries, complaints, and disputes submitted via live chat, email, or any other support channel.
• Marketing communications: Sending you promotional emails, SMS messages, and in-Platform notifications about bonuses, new games, sporting events (such as BPL cricket season and T20 tournaments), and seasonal offers (such as Eid, Pohela Boishakh promotions) — where you have opted in or where we have a legitimate interest to do so. You may opt out of marketing communications at any time by contacting [email protected].
• Platform analytics and improvement: Analysing aggregated usage data to understand how players interact with the Platform, identify popular games and features, and improve the overall user experience for our Bangladeshi player base.
• Legal compliance: Retaining records as required by applicable law, responding to lawful requests from regulatory authorities and law enforcement, and defending against legal claims.

3 Cookies & Tracking Technologies

gdbaje uses cookies and similar tracking technologies (including web beacons, pixel tags, and local storage objects) to operate the Platform, analyse usage patterns, and deliver a personalised experience. A cookie is a small text file placed on your device by a website server. Cookies do not contain executable code and cannot access other data stored on your device.

3.1 Types of Cookies We Use

3.2 Managing Cookies

You can control and manage cookies through your browser settings. Most modern browsers allow you to refuse cookies, delete existing cookies, or receive a warning before a cookie is stored. Please note that disabling strictly necessary cookies will impair the functionality of the gdbaje Platform — in particular, you may be unable to maintain a login session or complete transactions.

For guidance on managing cookies in popular browsers, refer to the help documentation for your specific browser (Chrome, Firefox, Safari, Edge, or Samsung Internet for Android users in Bangladesh).

4 Data Sharing & Third Parties

gdbaje does not share your personal data with third parties except in the specific circumstances described below. In all cases where data is shared, we require the recipient to handle your data with the same level of care and confidentiality that we apply ourselves.

4.1 Payment Service Providers

To process deposits and withdrawals, gdbaje shares the minimum necessary financial and identity data with our payment service providers, including mobile financial services (bKash, Nagad, Rocket, Upay), banking partners (Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank), and cryptocurrency processing partners. These providers act as independent data controllers in respect of the transaction data they process, and their own privacy policies apply to that processing.

4.2 Game Software Providers

Third-party game software providers (including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, Ezugi, Play'n GO, and Hacksaw Gaming) may receive anonymised session and game-round data to facilitate gameplay, dispute resolution, and game auditing. These providers do not receive your full identity or financial data unless specifically required for a dispute resolution process.

4.3 Identity Verification Partners

gdbaje uses specialist KYC and anti-money laundering technology partners to assist with identity verification. These partners process your identity documents and government-issued ID data on our behalf under strict data processing agreements that prohibit them from using your data for any purpose other than the KYC service they provide to gdbaje.

4.4 Fraud Prevention and Security Services

We may share account activity data (including IP addresses, device fingerprints, and transaction patterns) with fraud prevention service providers to detect and prevent fraudulent account activity, money laundering, and other prohibited conduct. This sharing is carried out under our legitimate interest in protecting the security and integrity of the Platform.

4.5 Legal and Regulatory Authorities

gdbaje may disclose your personal data to law enforcement agencies, regulatory authorities, courts, or government bodies in Bangladesh or internationally where we are required to do so by law, court order, or regulatory directive. We will notify you of any such disclosure where we are legally permitted to do so.

4.6 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of gdbaje's business, your personal data may be transferred to the acquiring entity as part of that transaction. We will notify affected players of any such transfer and ensure that the receiving entity is bound to treat your data in accordance with this Privacy Policy.

5 Data Retention

gdbaje retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by law. Our standard data retention periods are as follows:

At the end of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked to an identifiable individual. Anonymised, aggregated data (which cannot be used to identify you) may be retained indefinitely for statistical and analytical purposes.

6 Data Security

gdbaje takes the security of your personal data seriously and implements a comprehensive set of technical and organisational security measures to protect your data against unauthorised access, accidental loss, destruction, or disclosure. Our security measures include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and the gdbaje Platform, including account credentials, payment information, and personal data.
• Encrypted data storage for sensitive personal data including passwords (stored as salted cryptographic hashes), KYC documents, and financial records.
• Access controls: Personal data is accessible only to gdbaje staff who have a legitimate need to process it for their job function. All staff with access to personal data undergo data protection training and are bound by confidentiality obligations.
• Two-factor authentication (2FA) available to all players to add an additional layer of protection to account access.
• Regular security audits and penetration testing of the Platform infrastructure to identify and remediate vulnerabilities.
• Fraud monitoring systems that continuously analyse account activity for anomalous patterns indicative of unauthorised access or fraudulent conduct.
• Secure data centres with physical access controls, redundant backups, and disaster recovery capabilities to ensure data availability and integrity.

Despite these measures, no data transmission over the internet or electronic storage system is completely immune to risk. In the event of a data security incident that is likely to result in a high risk to your rights or freedoms, gdbaje will notify you without undue delay and will take immediate steps to contain and remediate the incident.

7 Your Privacy Rights

As a gdbaje player, you have the following rights in respect of your personal data. To exercise any of these rights, please contact our support team via live chat or email at [email protected]. We will respond to all valid requests within 30 days of receipt, though complex requests may require additional time, in which case we will notify you of the delay.

• Right of Access: You have the right to request a copy of all personal data that gdbaje holds about you, along with information about how it is being used and with whom it has been shared. This is sometimes called a Subject Access Request (SAR).
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. For account details (such as your email address or phone number), you can update these directly through your account settings.
• Right to Erasure ("Right to be Forgotten"): You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (and there is no other lawful basis for processing), or where you object to processing and there are no overriding legitimate grounds. Note that this right is subject to exceptions — in particular, gdbaje is legally required to retain certain financial and identity data for anti-money laundering compliance, which takes precedence over erasure requests.
• Right to Restriction of Processing: You may request that gdbaje restrict the processing of your personal data in certain circumstances — for example, while a rectification request is under review, or where you have objected to processing pending verification of our legitimate grounds.
• Right to Data Portability: Where processing is based on your consent or on a contract, and processing is carried out by automated means, you have the right to receive your personal data in a structured, machine-readable format and to request that it be transferred to another controller where technically feasible.
• Right to Object: You have the right to object at any time to the processing of your personal data for direct marketing purposes. You also have the right to object to processing carried out on the basis of our legitimate interests, though we may be able to demonstrate compelling legitimate grounds that override your objection.
• Right to Withdraw Consent: Where processing is based on your consent (for example, for marketing communications), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

gdbaje does not charge a fee for processing privacy rights requests unless they are manifestly unfounded or excessive. We may request proof of your identity before fulfilling a request in order to ensure that personal data is not disclosed to an unauthorised person.

8 Children's Privacy

gdbaje implements age verification procedures at the point of registration and during KYC checks to prevent minors from accessing the Platform. If a player is found to be under the age of 18 at any point, their account will be immediately closed, their personal data will be deleted (subject to any overriding legal retention obligations), and any funds deposited will be handled in accordance with our Terms & Conditions.

Parents and guardians who are concerned that a minor may have accessed the gdbaje Platform or submitted personal data are urged to contact us immediately at [email protected]. We will investigate and act on any such report promptly. We also recommend that parents and guardians in Bangladesh make use of parental control software to prevent minors from accessing online gambling websites.

9 Changes to This Policy

gdbaje reserves the right to update, revise, or replace this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or the services we offer. The most current version of this Policy will always be available at gdbaje.net/privacy-policy, with the date of the most recent revision noted at the top of the document.

Where changes are material — for example, where we introduce a new category of data collection, change the purposes for which data is used, or add new third-party data sharing arrangements — gdbaje will notify registered players by email to the address on file and/or by a prominent notice on the Platform, at least 7 days before the revised Policy takes effect.

Your continued use of the gdbaje Platform following the effective date of any revised Privacy Policy constitutes your acceptance of that revised Policy. If you do not agree with the changes, you should stop using the Platform and close your account before the revised Policy comes into effect.

This Privacy Policy was last reviewed and updated in January 2026. We conduct a full review of this Policy at least once every 12 months to ensure it remains accurate, up to date, and reflective of our data processing activities.

10 Contact & Data Enquiries

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way gdbaje processes your personal data, please contact us through any of the following channels:

• Live Chat: Available 24/7 directly on the gdbaje Platform. Our support agents can handle general privacy enquiries and direct urgent data protection matters to the appropriate team.
• Email: [email protected] — for privacy rights requests (Subject Access Requests, erasure requests, rectification requests), data breach reports, and all formal data protection correspondence. We acknowledge all privacy enquiries within 4 hours during BST business hours and aim to provide a full response within 30 days.

When contacting us about a privacy matter, please include your registered username or email address so that we can locate your account records and respond accurately to your request. All privacy enquiries are handled confidentially by our compliance team.