abaje Privacy Policy

1 Information We Collect

abaje collects personal data from you in several ways: directly through the registration and KYC verification process, automatically through your use of our platform, and occasionally from third-party sources such as payment processors and fraud prevention services. Below is a summary of the categories of data we collect.

1.1 Registration & Identity Data

When you create an account on abaje, we collect the following information as part of the registration process:

• Full legal name as it appears on your government-issued identity document.
• Date of birth (used to verify that you meet the 18+ age requirement).
• Residential address, including city, district, and postal code within Bangladesh.
• Mobile phone number registered to a Bangladesh-issued SIM card or mobile financial service account (bKash, Nagad, Rocket, or Upay).
• Email address used as the primary channel for account communications.
• Username and encrypted password credentials.

1.2 KYC Verification Documents

As part of our mandatory Know Your Customer (KYC) process, we may collect and retain copies of:

• National ID Card (NID) issued by the Bangladesh Election Commission, or a valid passport.
• Proof of address documents such as utility bills, bank statements, or government correspondence dated within three months.
• Proof of ownership of your payment method (e.g., screenshot of your registered bKash or Nagad account).
• Selfie or live photograph taken alongside your identity document where requested for enhanced verification.

1.3 Financial Transaction Data

We collect data related to all financial transactions on your account, including deposit amounts, withdrawal requests, bonus credits, wagering activity, game-by-game transaction history, and the payment methods used. This data is retained in accordance with applicable financial record-keeping requirements and our own anti-money laundering obligations.

1.4 Technical & Usage Data

When you access abaje.app, our servers and analytics systems automatically collect the following technical data:

2 How We Use Your Data

abaje processes your personal data only for clearly defined, legitimate purposes. We do not sell your personal data to third parties, and we do not use your data for any purpose that is incompatible with the purposes stated in this Privacy Policy. The primary purposes for which we process your personal data are as follows:

• Account Management: To create, maintain, and administer your abaje player account, including processing your registration, verifying your identity through KYC, and enabling you to log in securely.
• Service Delivery: To provide access to the games, sports betting markets, live casino tables, and all other features of the abaje platform that you use in the normal course of play.
• Payment Processing: To facilitate deposits from and withdrawals to your verified bKash, Nagad, Rocket, Upay, Visa, or Mastercard account, and to maintain an accurate record of all financial transactions on your account.
• Legal & Regulatory Compliance: To fulfil our obligations under applicable anti-money laundering (AML) regulations, to respond to law enforcement requests, to comply with court orders, and to satisfy our age-verification and responsible gaming obligations.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, multi-accounting, money laundering, and any other conduct that breaches our Terms & Conditions or applicable law.
• Responsible Gaming: To monitor player activity for signs of problem gambling behaviour and to trigger responsible gaming interventions such as deposit limit notifications, cooling-off recommendations, and self-exclusion processing where requested or required.
• Customer Support: To respond to your enquiries, complaints, and requests submitted via live chat or email to [email protected], and to maintain a record of support interactions for quality assurance and dispute resolution purposes.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates via email or SMS — but only where you have provided your consent to receive such communications. You may withdraw consent at any time by contacting our support team or using the unsubscribe mechanism in any marketing email.
• Platform Improvement: To analyse aggregated usage data and improve the design, performance, and feature set of abaje.app for the benefit of all Bangladeshi players on the platform.

3 Data Sharing & Disclosure

abaje does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share your data only in the limited circumstances described below, and only to the extent necessary for the stated purpose.

3.1 Payment Service Providers

To process your deposits and withdrawals, abaje shares the minimum necessary transaction data with your chosen payment provider — which may include bKash, Nagad, Rocket, Upay, Visa, or Mastercard. These providers receive only the data required to complete and authenticate your transaction. They are not permitted to use your data for any other purpose.

3.2 Game Content Providers

The games available on abaje are powered by licensed third-party game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive anonymised or pseudonymised session data (such as a player token or session ID) to operate their game software. They do not receive your full name, contact details, or financial information.

3.3 Fraud Prevention & KYC Partners

abaje uses specialist third-party identity verification and fraud detection services to assist with KYC compliance and account security. These partners process identity document data and biometric data (where applicable) solely for the purpose of verifying your identity and detecting fraud. They operate under strict data processing agreements and are prohibited from using your data for any independent purpose.

3.4 Legal & Regulatory Authorities

abaje may disclose your personal data to law enforcement agencies, courts, government authorities, or regulatory bodies where we are legally required to do so by applicable Bangladeshi law or by a valid court order. We will inform you of such disclosure where we are legally permitted to do so.

3.5 Business Transfers

In the event that abaje undergoes a merger, acquisition, or sale of all or part of its assets, your personal data may be transferred to the acquiring entity as part of the transaction. You will be notified of any such transfer and the privacy terms applicable to your data under the new ownership structure before the transfer takes effect.

4 Cookies & Tracking Technologies

abaje uses cookies and similar tracking technologies to operate core platform functionality, enhance your user experience, and gather analytical insights that help us improve our services. A cookie is a small text file stored on your device by your browser when you visit abaje.app.

4.1 Types of Cookies We Use

4.2 Managing Your Cookie Preferences

Strictly necessary cookies are essential for the platform to function and cannot be disabled. For all other cookie categories, you may adjust your preferences through your browser settings. Most modern browsers allow you to view, block, or delete cookies stored by specific websites. Please note that disabling functional or analytics cookies may affect certain features of abaje.app, such as personalised game recommendations or the correct display of your account preferences.

For players accessing abaje.app from mobile devices in Bangladesh — including those using Chrome on Android or Safari on iOS — your browser's built-in privacy settings provide full control over cookie storage and site data.

5 Data Retention

abaje retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply:

• Active Account Data: Retained for the full duration of your account's active status on abaje.app, plus a minimum of 5 years following account closure to satisfy financial record-keeping and AML compliance obligations.
• KYC Identity Documents: Retained for a minimum of 5 years from the date of verification, in line with standard financial services document retention requirements applicable in Bangladesh.
• Transaction Records: All deposit, withdrawal, and wagering transaction records are retained for a minimum of 5 years from the date of each transaction.
• Customer Support Communications: Support interaction logs and correspondence are retained for 2 years from the date of the most recent interaction in a given support thread.
• Marketing Consent Records: Records of your marketing consent and any consent withdrawal are retained for the duration of your account plus 3 years, to provide an audit trail of your preferences.
• Technical & Log Data: Server access logs, IP address logs, and session data are retained for up to 12 months for security and fraud analysis purposes, after which they are anonymised or deleted.

Upon expiry of the applicable retention period, your personal data will be securely deleted or irreversibly anonymised. Where deletion is not immediately technically feasible (for example, data held in backup archives), your data will be isolated and protected from further processing until deletion is possible.

6 Data Security Measures

abaje takes the security of your personal data seriously and implements a range of technical and organisational security measures to protect your information against unauthorised access, accidental loss, alteration, or disclosure. Our key security practices include:

• 256-Bit SSL/TLS Encryption: All data transmitted between your browser or mobile device and abaje servers is encrypted using industry-standard 256-bit SSL/TLS protocols. You can verify this by checking for the padlock icon in your browser's address bar when visiting abaje.app.
• Password Hashing: Your account password is never stored in plain text. It is hashed using a modern cryptographic algorithm before storage, meaning that even abaje staff cannot view your password.
• Two-Factor Authentication (2FA): abaje offers optional two-factor authentication for all registered accounts, adding an additional layer of security beyond your username and password combination.
• Access Controls: Access to personal data within abaje's internal systems is restricted on a strict need-to-know basis. Only authorised personnel whose job roles require access to specific categories of data are granted such access.
• Regular Security Audits: abaje conducts periodic internal and third-party security assessments of its platform infrastructure to identify and remediate vulnerabilities before they can be exploited.
• Fraud Detection Systems: Automated fraud detection tools monitor account activity in real time and flag unusual patterns — such as rapid successive logins from different geographic locations — for immediate human review.

Despite our rigorous security measures, no internet-based platform can guarantee absolute security. If you suspect that your abaje account has been compromised or that your credentials have been shared without your authorisation, contact our support team immediately via live chat or at [email protected] (plain text — not a clickable link).

7 Your Privacy Rights

As a player on abaje, you hold a number of rights with respect to your personal data. We are committed to honouring these rights in a timely and transparent manner. Your rights include:

• Right of Access (Subject Access Request): You have the right to request a copy of all personal data that abaje holds about you. We will respond to verified Subject Access Requests within 30 days of receipt.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. You may update basic profile information directly from your account settings panel. For corrections to KYC identity data, please contact our support team.
• Right to Erasure ("Right to Be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected and where no overriding legal obligation requires its retention. Please note that our regulatory obligations (see Section 5) may mean that certain categories of data cannot be deleted immediately upon request.
• Right to Restrict Processing: You may request that we restrict the processing of your personal data in certain circumstances — for example, where you contest its accuracy or where you have objected to processing and are awaiting our response.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests where you feel your individual circumstances outweigh those interests.
• Right to Data Portability: Where we process your data on the basis of your consent or to fulfil a contract, you may request that we provide your personal data in a structured, commonly used, machine-readable format so that you can transfer it to another service provider.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of the above rights, please contact our support team by emailing [email protected] (plain text — not a clickable link) with the subject line "Privacy Rights Request". We will verify your identity before processing any request to protect against unauthorised access to your data by third parties. There is no charge for submitting a rights request. We aim to acknowledge all requests within 5 business days and to resolve them within 30 calendar days.

8 Contact Us About Privacy

If you have any questions, concerns, or complaints regarding the way abaje collects, uses, or stores your personal data, we encourage you to contact our dedicated support team in the first instance. We take all privacy-related communications seriously and aim to resolve concerns promptly and transparently.

You may reach our support team through the following channels (note: email address is displayed as plain text and is not a clickable link):

• Email: [email protected]
• Live Chat: Available 24 hours a day, 7 days a week via abaje.app — staffed on Bangladesh Standard Time (BST, UTC+6).
• WhatsApp: +880 1700-000000 (plain text — not a clickable link)

abaje reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. When material changes are made, we will notify registered players by email and/or via a prominent notice on the platform before the updated policy takes effect. The "Last updated" date at the top of this page reflects the most recent revision. Continued use of abaje following the effective date of any update constitutes your acceptance of the revised Privacy Policy.