pbaje Privacy Policy — Your Data, Your Rights

This Privacy Policy applies to all personal data processed by pbaje in connection with the operation of the pbaje platform, including the website accessible at pbaje.io, any associated mobile-optimised interfaces, and all customer support interactions conducted via email or messaging channels.

pbaje is committed to handling your personal data responsibly, lawfully, and with full transparency. We have drafted this policy in plain English so that every player — regardless of technical background — can understand exactly how their information is treated. Where legal terminology is unavoidable, we have provided explanations in accessible language alongside it.

This policy applies to all registered pbaje players, prospective players who visit the platform without registering, and individuals who contact our support team. It does not apply to third-party websites, payment processors, or game studios whose own privacy practices are governed by their respective policies.

The categories of personal data pbaje collects depend on how you interact with the platform. The following table summarises the main categories and the context in which each is collected:

pbaje does not intentionally collect special-category data (such as health information, racial or ethnic origin, religious beliefs, or political opinions) and requests that players do not include such information in any communication with pbaje.

pbaje collects personal data through the following channels:

• Direct submissions: Information you provide when creating an account, completing KYC verification, making a deposit or withdrawal, or contacting our support team.
• Automated technical collection: Data collected automatically by our servers when you access pbaje, including your IP address, device identifiers, browser type, and session metadata via server logs and analytics tools.
• Cookies and similar technologies: Session and persistent cookies placed on your device to maintain your login state, remember your preferences, and generate platform usage statistics. See Section 7 for full details.
• Payment processors: Confirmation and reference data returned by bKash, Nagad, Rocket, Upay, and other payment partners following a transaction. pbaje does not receive or store your full mobile banking PIN or password.
• KYC service providers: Where we use third-party identity verification services to authenticate your identity documents, those providers may return structured identity data to pbaje as part of the verification result.

pbaje uses the personal data we collect for the following purposes:

• Account management: To create, maintain, and administer your pbaje player account, including authentication, password resets, and account settings management.
• Transaction processing: To process deposits and withdrawals via your chosen payment method, verify payment ownership, and maintain accurate transaction records.
• Identity and age verification: To confirm that you are at least 21 years of age and that your identity matches the information on your account, as required for responsible gaming compliance.
• Customer support: To respond to your enquiries, resolve disputes, investigate complaints, and provide technical assistance.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, money laundering, account takeovers, and other prohibited conduct as described in our Terms & Conditions.
• Responsible gaming: To monitor playing patterns, enforce self-exclusion and deposit limits, and identify players who may be showing signs of problem gambling.
• Platform improvement: To analyse usage patterns, identify technical errors, and improve the overall performance and user experience of the pbaje platform.
• Marketing communications: Where you have given explicit consent, to send you promotional offers, bonus notifications, and platform updates via SMS or email. You may withdraw this consent at any time by contacting [email protected].

pbaje processes your personal data on the following legal grounds, depending on the specific processing activity:

• Contractual necessity: Processing required to fulfil our obligations under the player account agreement, including operating your account, processing bets, and handling payments.
• Legal obligation: Processing required to comply with applicable laws, including anti-money-laundering regulations, age verification requirements, and obligations to report suspicious activity to relevant authorities.
• Legitimate interests: Processing carried out in pursuit of pbaje's legitimate business interests, including fraud detection, platform security, and service improvement — provided those interests are not overridden by your data protection rights.
• Consent: Processing based on your freely given, specific, and informed consent — primarily for optional marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

pbaje does not sell or commercially transfer your personal data to third parties. We may share your data only in the following limited circumstances:

• Payment service providers: We share transaction-specific data with bKash, Nagad, Rocket, Upay, and other payment partners as necessary to process deposits and withdrawals. These providers are contractually bound to handle your data securely and to use it only for payment processing purposes.
• KYC and identity verification providers: Where required for age and identity verification, we may share identity documents with regulated third-party KYC service providers. These providers operate under strict data processing agreements.
• Game content providers: Certain game studios (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) may receive a session token or anonymised player identifier to launch game sessions. These studios do not receive your full account data or payment information.
• Legal and regulatory authorities: Where required by applicable law, court order, or a lawful request from a competent regulatory or law-enforcement authority, pbaje will disclose relevant personal data. We will notify you of such disclosure where legally permitted to do so.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of pbaje's business assets, your personal data may be transferred to the acquiring entity. You will be notified in advance of any such transfer and of any resulting changes to this Privacy Policy.

All third parties with whom pbaje shares personal data are required to maintain appropriate technical and organisational security measures and are prohibited from using your data for any purpose other than those specified in their agreement with pbaje.

pbaje uses cookies and similar tracking technologies to operate and improve the platform. A cookie is a small text file placed on your device by a website. The following types of cookies are used on pbaje:

Strictly necessary cookies are essential for the platform to function and cannot be disabled. Functional and analytics cookies may be managed through your browser settings. Disabling non-essential cookies will not prevent you from using pbaje but may affect certain personalisation features.

pbaje implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• Transport Layer Security (TLS/SSL): All data in transit between your browser and pbaje's servers is encrypted using 256-bit SSL/TLS protocols, ensuring that data cannot be intercepted in transit.
• Encrypted data storage: Sensitive personal and financial data is stored in encrypted form within pbaje's secured server infrastructure. Encryption keys are managed through a separate, access-controlled key management system.
• Access controls: Access to personal data within pbaje's internal systems is restricted on a strict need-to-know basis. All staff with access to player data undergo security training and are bound by confidentiality obligations.
• Intrusion detection and monitoring: pbaje operates continuous monitoring of its infrastructure for suspicious activity, unauthorised access attempts, and data anomalies.
• Incident response: In the event of a data security incident that poses a risk to your rights and freedoms, pbaje will notify affected players without undue delay and take immediate remedial action to contain the incident and prevent recurrence.

While pbaje takes all reasonable precautions, no internet-based platform can guarantee absolute security. You also have a role in keeping your account secure — never share your password, use a strong and unique password for your pbaje account, and notify us immediately at [email protected] if you suspect any unauthorised access.

pbaje retains your personal data for as long as is necessary to fulfil the purposes described in this policy, or as required by law. The following retention periods apply:

Once the applicable retention period has expired, pbaje will securely delete or anonymise your personal data in a manner that prevents reconstruction or re-identification.

As a pbaje player, you hold the following rights over your personal data. To exercise any of these rights, please contact our support team in writing at [email protected] with the subject line "Data Rights Request" and include your registered account username and mobile number.

• Right of Access: You may request a copy of all personal data pbaje holds about you. We will provide this within 30 calendar days of receiving your verified request.
• Right to Rectification: If any personal data we hold is inaccurate or incomplete, you have the right to request its correction. We will act on rectification requests within 14 days.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected. Please note that this right is subject to our legal obligations to retain certain data as described in Section 9.
• Right to Restrict Processing: You may request that we restrict the processing of your personal data in certain circumstances, for example while a rectification request is being reviewed.
• Right to Data Portability: You may request a copy of your personal data in a structured, commonly used, machine-readable format for transfer to another platform.
• Right to Object: You may object to processing carried out on the basis of pbaje's legitimate interests, including direct marketing. Where you object to marketing, we will cease marketing communications immediately.
• Right to Withdraw Consent: Where processing is based on your consent (primarily marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.

pbaje is strictly an adults-only platform. We do not knowingly collect personal data from individuals under the age of 21. Our registration process includes mandatory age declaration, and we reserve the right to request proof of age from any player at any time.

If pbaje becomes aware that personal data has been collected from a person under the age of 21, we will take immediate steps to close the relevant account, delete the associated personal data, and — where applicable — refund any net deposits made to the account.

If you are a parent or guardian and you believe your child has created a pbaje account, please contact us immediately at [email protected]. We take underage gambling extremely seriously and will investigate and act on all such reports with the utmost urgency.

The pbaje platform may contain references or links to third-party content including game providers, payment partners, and informational resources. This Privacy Policy applies exclusively to data processed by pbaje and does not cover the data practices of any third-party website, application, or service.

We encourage you to review the privacy policies of any third-party service you interact with in connection with your use of pbaje. pbaje accepts no responsibility or liability for the privacy practices, content, or data handling of any third party.

pbaje reviews this Privacy Policy on a regular basis and reserves the right to update it at any time to reflect changes in our data practices, applicable law, or platform functionality. The effective date at the top of this document will be updated to reflect the date of the most recent revision.

Where changes are material — meaning they significantly affect your rights or how we use your data — we will notify you via SMS or email at least 7 days before the change takes effect. For minor updates such as typographical corrections or clarifications that do not affect the substance of the policy, we may update the document without advance notice.

Your continued use of pbaje following publication of an updated Privacy Policy constitutes your acknowledgement of the changes. If you do not agree with any updated terms, you should cease using the platform and contact us to request account closure.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way pbaje handles your personal data, please contact our dedicated data support team using the details below. All contact information is provided as plain text only and is not a clickable link.

• Email: [email protected] (plain text — type this address into your email client manually)
• Subject Line for Data Requests: "Data Rights Request — [Your Username]"
• Response Time: We aim to acknowledge all privacy-related queries within 48 hours and provide a full response within 30 calendar days.
• Support Hours: 24 hours a day, 7 days a week, Bangladesh Standard Time (BST, UTC+6)
• Platform: pbaje.io

We are committed to resolving all privacy concerns promptly and fairly. If you feel your concern has not been adequately addressed, you retain the right to seek further guidance from the appropriate data protection authority in your jurisdiction.