wbajee Privacy Policy

1. Introduction

This Privacy Policy ("Policy") sets out the basis on which wbajee ("we", "us", "our") collects, processes, stores, and shares personal data relating to individuals ("you", "your", "the Player") who visit, register on, or otherwise interact with the wbajee platform at wbajee.club and all associated services, features, and products offered therein.

wbajee is committed to handling your personal data with care, transparency, and respect. We recognise that the personal data you provide to us is important to you, and we take our responsibilities as a data handler seriously. This Policy explains in plain terms what we collect, why we collect it, what we do with it, and the rights you have in relation to it.

By registering a wbajee account, accessing the platform, or using any wbajee product or service, you acknowledge that you have read and understood this Privacy Policy. This Policy should be read alongside the wbajee Terms & Conditions and Responsible Gaming Policy, both of which form part of the overall agreement governing your use of the platform.

2. Data Controller

For the purposes of this Privacy Policy, the data controller responsible for the personal data of wbajee players is wbajee, operating the platform at wbajee.club. As data controller, wbajee determines the purposes and means by which personal data is processed.

If you have any questions, concerns, or requests relating to the way wbajee processes your personal data, you may contact our support team at any time:

• Email: [email protected]
• Support Hours: 24 hours a day, 7 days a week
• Response Language: English

3. Personal Data We Collect

3.1 Registration Data

When you create a wbajee account, we collect the information you provide during the registration process. This typically includes your full name, date of birth, residential address, email address, and a chosen username. This data is necessary to create and manage your account and to verify that you meet the minimum age requirement of 18 years.

3.2 Identity Verification Data

In order to comply with our age verification and anti-money laundering obligations, wbajee may request copies of identity documents at any point during the account lifecycle. These documents may include a national identity card (NID), passport, driving licence, or other government-issued identification. We may also request proof of address, such as a recent utility bill or bank statement, and in some circumstances proof of the source of funds used to deposit.

3.3 Financial and Transaction Data

wbajee collects data relating to all financial transactions carried out on your account, including deposits, withdrawals, bonus credits, wagering activity, and account balance history. Payment method details — such as the bKash or Nagad mobile number, Rocket account number, or bank account details used for transactions — are collected and stored to facilitate payment processing and to comply with financial record-keeping obligations.

3.4 Usage and Behavioural Data

When you use the wbajee platform, we automatically collect certain technical and behavioural data, including:

• IP address and approximate geographic location;
• Device type, operating system, and browser type and version;
• Pages visited, features used, and time spent on the platform;
• Game sessions played, bets placed, and wagering patterns;
• Login timestamps and session duration.

This data is used to deliver and improve the platform, to detect fraud and irregular activity, and to monitor for signs of problem gambling behaviour as part of our responsible gaming obligations.

3.5 Communications Data

If you contact wbajee by email, live chat, or any other channel, we retain a record of that communication, including the content of messages exchanged and any attachments provided. This data is used to resolve your enquiry, to train and assess our support team, and for quality assurance purposes.

3.6 Marketing Preferences

Where you have opted in to receive promotional communications from wbajee, we record your marketing consent and communication preferences. This includes the channel through which consent was given and the date on which it was provided or withdrawn.

Data Category	Examples	Collected At
Registration	Name, date of birth, email, address, username	Account sign-up
Identity Verification	NID, passport, proof of address, source of funds	KYC / verification request
Financial	bKash / Nagad number, deposit history, withdrawal records	Payment transactions
Usage	IP address, device info, game sessions, betting patterns	Platform use (automatic)
Communications	Support emails, chat transcripts	Support interactions
Marketing	Opt-in status, preferred channels, consent date	Registration or preference update

4. How We Use Your Data

wbajee uses the personal data it collects for the following purposes:

• Account management: To create, maintain, and administer your wbajee account, including processing deposits, withdrawals, and bet settlements.
• Identity and age verification: To verify that you are who you claim to be and that you meet the minimum age requirement of 18 years, in compliance with our responsible gaming commitments.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, money laundering, collusion, bonus abuse, and other forms of dishonest or illegal activity on the platform.
• Responsible gaming: To monitor wagering patterns and account behaviour for signs of problem gambling, and to intervene appropriately where such signs are identified, including by applying protective account limits.
• Platform improvement: To analyse how the platform is used in aggregate, to identify technical issues, and to develop and improve our products, features, and user experience.
• Customer support: To respond to your enquiries, resolve complaints, and provide assistance in relation to your account and our services.
• Legal compliance: To comply with applicable laws, regulations, and obligations, including financial record-keeping, anti-money laundering (AML) requirements, and responses to lawful requests from competent authorities.
• Marketing communications: Where you have provided consent, to send you promotional offers, bonus notifications, and news about wbajee products and events relevant to the Bangladesh market, including BPL, Eid promotions, and seasonal campaigns.

5. Lawful Basis for Processing

wbajee processes personal data only where a lawful basis exists for doing so. The lawful bases on which we rely are as follows:

• Contractual necessity: Processing that is necessary to perform the contract between you and wbajee — including account management, payment processing, and bet settlement — is carried out on the basis of contractual necessity.
• Legal obligation: Processing required to comply with applicable laws — including age verification, anti-money laundering checks, and the retention of financial records — is carried out on the basis of legal obligation.
• Legitimate interests: Processing carried out for fraud prevention, platform security, responsible gaming monitoring, and general platform improvement is carried out on the basis of wbajee's legitimate interests, balanced against your interests and fundamental rights.
• Consent: Processing carried out for the purpose of sending marketing communications is carried out on the basis of your freely given, informed consent. You may withdraw this consent at any time.

6. Data Sharing and Disclosure

6.1 Service Providers

wbajee works with a number of third-party service providers who process personal data on our behalf in order to deliver the platform and its services. These providers include payment processors (such as the operators of bKash, Nagad, Rocket, and Upay integrations), identity verification service providers, fraud detection and AML screening providers, game software suppliers (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi), and cloud hosting and infrastructure providers. All third-party processors engaged by wbajee are required to handle personal data in accordance with applicable data protection standards and to use it only for the purposes for which it was shared.

6.2 Legal and Regulatory Disclosure

wbajee may disclose personal data to law enforcement agencies, regulatory authorities, courts, or other competent bodies where required to do so by applicable law, by court order, or where wbajee has a good-faith belief that such disclosure is necessary to prevent fraud, protect the safety of players or third parties, or defend the legal rights and interests of wbajee.

6.3 Business Transfers

In the event that wbajee undergoes a merger, acquisition, restructuring, or sale of all or part of its business assets, personal data held by wbajee may be transferred to the acquiring or successor entity as part of that transaction. In such circumstances, wbajee will take reasonable steps to ensure that the privacy protections described in this Policy continue to apply to the transferred data.

6.4 No Sale of Personal Data

wbajee does not sell, rent, lease, or otherwise transfer personal data to third parties for their own independent marketing, advertising, or commercial purposes. Any data sharing that takes place is limited to what is described in this Policy and is conducted solely for the purposes of delivering services to you or complying with legal obligations.

7. Data Retention

wbajee retains personal data for as long as is necessary to fulfil the purposes described in this Policy, and in any event for no longer than is required by applicable legal, regulatory, or audit obligations.

The following general retention periods apply:

• Active account data: Retained for the full duration of your account and updated as necessary to reflect changes to your information.
• Transaction and financial records: Retained for a minimum of five (5) years following the date of the transaction or the closure of your account, whichever is later, in order to comply with financial record-keeping and anti-money laundering obligations.
• Identity verification documents: Retained for a minimum of five (5) years following account closure.
• Support communications: Retained for a minimum of two (2) years from the date of the most recent message in the relevant correspondence thread.
• Marketing consent records: Retained for the duration of your account and for a period of two (2) years following any withdrawal of consent, to demonstrate that marketing was sent on a valid lawful basis.

Once the applicable retention period has expired and there is no further legitimate purpose for holding the data, wbajee will securely delete or anonymise the personal data in question.

8. Your Data Rights

As a player on the wbajee platform, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, please contact us at [email protected]:

• Right of access: You have the right to request a copy of the personal data wbajee holds about you, along with information about how it is used and with whom it is shared.
• Right to rectification: You have the right to request that inaccurate or incomplete personal data held by wbajee be corrected or updated without undue delay.
• Right to erasure: In certain circumstances, you have the right to request that wbajee delete your personal data. This right is subject to limitations where retention is required by law or where the data is necessary for the establishment, exercise, or defence of legal claims.
• Right to restriction of processing: You have the right to request that wbajee restricts the processing of your personal data in certain circumstances, for example while the accuracy of data is contested or while an objection to processing is under consideration.
• Right to object: Where wbajee processes your data on the basis of legitimate interests, you have the right to object to that processing. wbajee will cease processing unless compelling legitimate grounds exist that override your interests and rights.
• Right to withdraw consent: Where processing is based on your consent (including marketing communications), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to the withdrawal.
• Right to data portability: Where processing is carried out by automated means and is based on your consent or on contractual necessity, you have the right to receive a copy of your personal data in a structured, commonly used, and machine-readable format.

wbajee will respond to all valid data rights requests within thirty (30) days of receipt. In complex cases, this period may be extended by a further two months, in which case you will be informed of the extension and the reasons for it.

9. Cookies and Tracking Technologies

9.1 What Are Cookies

Cookies are small text files placed on your device by a website when you visit it. They are widely used to make websites function correctly, to improve performance, and to deliver a personalised experience. wbajee uses cookies and similar tracking technologies on the wbajee.club platform.

9.2 Types of Cookies Used

• Strictly necessary cookies: These cookies are essential for the platform to function and cannot be switched off. They include session management cookies that keep you logged in to your wbajee account and security cookies that protect against cross-site request forgery.
• Performance and analytics cookies: These cookies collect anonymous information about how visitors use the platform — such as which pages are visited most frequently — to help wbajee identify technical issues and improve the user experience. The data collected by these cookies is aggregated and does not identify individual users.
• Functional cookies: These cookies allow the platform to remember choices you have made — such as your preferred language or display settings — to provide a more personalised experience.
• Marketing and targeting cookies: Where you have consented, these cookies may be used to track your activity across the platform in order to deliver promotional content that is relevant to your interests.

9.3 Managing Cookies

You can manage or disable cookies through your browser settings. Please note that disabling strictly necessary cookies will impair the functionality of the wbajee platform and may prevent you from logging in or completing transactions. Instructions for managing cookies vary by browser and can typically be found in the browser's help or settings menu.

10. Data Security

wbajee implements appropriate technical and organisational security measures to protect personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include, but are not limited to:

• SSL/TLS encryption for all data in transit between your device and the wbajee platform;
• Encryption of sensitive data at rest, including payment credentials and identity documents;
• Role-based access controls limiting internal access to personal data to authorised personnel only;
• Regular security assessments and monitoring of platform infrastructure;
• Incident response procedures to detect, contain, and remediate data security incidents promptly.

While wbajee takes all reasonable steps to protect your personal data, no method of electronic transmission or storage is completely secure. You also play an important role in protecting your data by keeping your account credentials confidential and by notifying us immediately at [email protected] if you believe your account has been compromised.

11. Minors

The wbajee platform is strictly intended for adults aged 18 years and above. wbajee does not knowingly collect personal data from any person under the age of 18. If we become aware that personal data has been collected from a minor, we will take immediate steps to delete that data and to close the associated account.

If you are a parent or guardian and believe that a person under 18 in your care has created a wbajee account or provided personal data to us, please contact us immediately at [email protected] so that we can take appropriate action.

12. Changes to This Privacy Policy

wbajee reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or the services we offer. When material changes are made to this Policy, we will notify registered players by email to the address associated with their account and by means of a prominent notice on the wbajee.club website.

The date on which this Policy was most recently updated is displayed at the top of this page. Your continued use of the wbajee platform following the publication of a revised Privacy Policy constitutes your acknowledgement of the updated Policy. If you do not accept the revised terms, you should cease using the platform and contact [email protected] to request account closure.

13. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way wbajee processes your personal data, please contact our support team using the details below:

• Email: [email protected]
• Support Hours: 24 hours a day, 7 days a week
• Language: English
• Expected Response Time: Within 30 days of receipt for formal data rights requests; within 24 hours for general support enquiries

When submitting a data rights request, please include your registered account username and a clear description of the right you wish to exercise. This will help us locate your data promptly and respond to your request within the applicable timeframe.