Your Privacy at kabaji

1. Information We Collect

In order to provide you with a safe, personalised, and legally compliant gaming experience, kabaji collects personal data at several points during your interaction with the Platform. The categories of data collected, along with the context in which they are gathered, are set out below.

1.1 Registration Data

When you create a kabaji account, we collect the information you provide directly, including your full legal name, date of birth, mobile phone number registered in Bangladesh, and a chosen password (stored in hashed form — never in plain text). This information is essential to establish your identity, confirm your eligibility to use the Platform, and create a secure account environment.

1.2 Identity Verification (KYC) Data

As part of our Know Your Customer (KYC) process, we may request copies of government-issued identity documents such as your Bangladesh National Identity Card (NID), passport, or birth certificate. We may also request a photograph of you holding the document (a "liveness check") to confirm that the document belongs to the account holder. KYC data is collected to satisfy our anti-fraud and responsible gaming obligations, and to verify that you meet the minimum age requirement of 18 years.

1.3 Financial Transaction Data

When you make a deposit or withdrawal, kabaji records transaction details including the payment method used (e.g., bKash, Nagad, Rocket, Upay, bank transfer), the transaction amount in BDT, the date and time of the transaction, and a reference number. We do not store full mobile banking PINs or full card numbers — payment processing is handled by our payment partners using their own secure infrastructure.

1.4 Device and Technical Data

When you access kabaji.vip, our servers automatically collect certain technical data about your connection and device. This includes your IP address, browser type and version, operating system, device type (mobile, tablet, desktop), referring URL, and pages visited within the Platform. This data is used for security monitoring, fraud detection, and aggregate performance analytics.

1.5 Gameplay and Betting Data

kabaji maintains records of all games played, bets placed, and outcomes recorded under your account. This data is integral to the operation of the Platform, enables dispute resolution, supports responsible gaming monitoring, and allows us to personalise your experience with relevant game recommendations.

1.6 Communications Data

If you contact kabaji via live chat, WhatsApp, or email, we retain records of those communications for quality assurance, staff training, and dispute resolution purposes. This includes the content of messages, the date and time of contact, and any supporting evidence you provide.

2. How We Use Your Data

kabaji processes personal data only for specific, legitimate purposes. We do not use your data for any purpose that is incompatible with the reason for which it was originally collected. The table below summarises the primary purposes for which your data is used and the legal basis for each.

Purpose	Data Used	Legal Basis
Account creation and management	Registration data, KYC documents	Contractual necessity
Processing deposits and withdrawals	Financial transaction data, KYC data	Contractual necessity
Age verification and responsible gaming	Date of birth, KYC documents, gameplay data	Legal obligation
Fraud prevention and security monitoring	Device data, IP address, transaction data	Legitimate interest
Customer support and dispute resolution	Communications data, account history	Contractual necessity
Personalised game recommendations	Gameplay data, session data	Legitimate interest / Consent
Promotional communications (opted-in players)	Mobile number, email, preferences	Consent
Platform analytics and performance improvement	Aggregated technical and session data	Legitimate interest

Where kabaji relies on your consent as the legal basis for processing (for example, sending promotional SMS or WhatsApp messages), you may withdraw that consent at any time by contacting support via live chat or emailing [email protected]. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

3. Cookies & Tracking Technologies

kabaji.vip uses cookies and similar technologies to deliver, maintain, and improve the Platform. A cookie is a small text file stored on your device by your web browser when you visit a website. kabaji uses the following categories of cookies:

3.1 Strictly Necessary Cookies

These cookies are essential for the Platform to function. They manage your login session, remember your account state between pages, and help prevent cross-site request forgery (CSRF) attacks. Without these cookies, the Platform cannot operate correctly. Because they are strictly necessary, they cannot be disabled.

3.2 Performance and Analytics Cookies

kabaji uses aggregated, anonymised analytics data to understand how players navigate the Platform — which pages are most visited, where users spend the most time, and which features generate errors. This data helps our technical team prioritise improvements. No individual player is identified from this data. Analytics cookies are set on a session or persistent basis depending on the tool used.

3.3 Preference Cookies

These cookies remember your platform preferences, such as your selected game category or the last lobby section you visited, so that your next session starts where you left off. They are not used for advertising profiling.

3.4 What kabaji Does NOT Use

kabaji does not use third-party advertising or retargeting cookies. We do not share cookie data with advertising networks, social media platforms, or data brokers. You will not see kabaji-related advertisements following you around the web as a result of cookies set by our Platform.

4. Data Sharing & Third Parties

kabaji does not sell or rent your personal data to any third party. However, in order to deliver the full range of services on the Platform, we share limited and specific data with the following categories of trusted service providers:

4.1 Payment Processing Partners

To facilitate deposits and withdrawals via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, and card networks (Visa, Mastercard), we pass the minimum transaction data required to initiate and confirm each payment. These partners operate under their own privacy policies and security frameworks and are not permitted to use your data for any other purpose.

4.2 Game Technology Providers

The games available on kabaji are powered by independent studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. Your game session data (including bets placed and outcomes) is transmitted to the relevant provider in real time to render the game and determine results. These providers are bound by contractual data protection obligations consistent with this policy.

4.3 Identity Verification Services

kabaji may use trusted third-party KYC verification technology partners to assist with document authentication and liveness checks. These partners process KYC data solely for the purpose of identity verification on kabaji's behalf and are contractually prohibited from retaining or repurposing your data.

4.4 Legal and Regulatory Disclosure

kabaji may disclose personal data to law enforcement authorities, regulatory bodies, or financial intelligence units where required to do so by applicable law, court order, or in connection with the investigation of fraud, money laundering, or other serious criminal activity. In such cases, we disclose only the minimum data necessary to comply with the relevant obligation.

5. Data Retention

kabaji retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or financial record-keeping obligations. The following retention periods apply as a general guide:

• Active account data (registration details, KYC documents, transaction history, gameplay records): retained for the full duration of your active account relationship with kabaji, plus a minimum of five (5) years following account closure, to satisfy financial record-keeping obligations.
• Customer support communications: retained for three (3) years from the date of the last communication, to support dispute resolution.
• Marketing preferences and consent records: retained for the duration of your account, and for two (2) years following withdrawal of consent or account closure, as evidence of your consent decision.
• Technical and session log data: retained for a rolling period of twelve (12) months for security monitoring purposes, after which it is deleted or fully anonymised.
• Self-exclusion records: retained indefinitely in the case of permanent self-exclusion, to ensure that the exclusion cannot be reversed and that the player's protection is maintained.

When personal data reaches the end of its applicable retention period, kabaji deletes it securely or, where deletion is not technically feasible (for example, data held in backup archives), takes steps to isolate it from active processing until deletion is possible.

6. Security Measures

kabaji takes the security of your personal data seriously and maintains a range of technical and organisational measures to protect it against unauthorised access, accidental loss, alteration, or disclosure.

6.1 Technical Safeguards

All data transmitted between your browser or app and kabaji.vip is encrypted in transit using TLS (Transport Layer Security) 1.2 or higher. Data stored on our servers is encrypted at rest. Passwords are stored using a strong one-way hashing algorithm — kabaji staff cannot view your password in plain text. Access to production data environments is restricted to authorised personnel only, using multi-factor authentication and role-based access controls.

6.2 Organisational Safeguards

kabaji staff who handle personal data receive training on data protection responsibilities. Access to player data is granted on a need-to-know basis aligned with each team member's specific role. We conduct regular internal reviews of our data handling practices and take prompt corrective action where gaps are identified.

6.3 Incident Response

In the event of a data security incident that poses a risk to your personal data, kabaji will take immediate steps to contain the incident, assess the scope of any impact, and notify affected players as promptly as possible via their registered mobile number or within the Platform. We will also report the incident to the relevant authorities where required by applicable law.

6.4 Your Role in Security

While kabaji takes robust measures to secure the Platform, the security of your account also depends on you. We strongly encourage all players to use a unique, strong password for their kabaji account, to avoid sharing their login credentials with anyone, and to contact support immediately via live chat if they suspect their account has been accessed without authorisation. kabaji staff will never ask for your password.

7. Your Privacy Rights

As a player on kabaji.vip, you hold a number of rights in relation to the personal data we hold about you. kabaji is committed to honouring these rights promptly and transparently. The rights available to you are summarised below:

To exercise any of the rights listed above, please contact the kabaji data protection team in writing at [email protected], including your registered mobile number, your account identifier, and a clear description of the right you wish to exercise. kabaji will acknowledge your request within 5 business days (Bangladesh Standard Time) and aim to fulfil it within 30 days. In complex or high-volume cases, this period may be extended by a further 30 days with prior notification.

8. Policy Updates & Contact

kabaji reviews this Privacy Policy periodically and may update it to reflect changes in our data practices, the Platform's features, or applicable legal requirements. When a material change is made to this policy, we will notify registered players via an in-Platform notification and, where appropriate, via the mobile number associated with your account.

The version number and "Last Updated" date at the top of this document indicate whether you are reading the most current version. We encourage you to review this policy whenever you notice an update notification. Continued use of the Platform following the publication of an updated Privacy Policy constitutes your acknowledgement of the changes.

8.1 How to Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or the way kabaji handles your personal data, please reach out to us through any of the following channels:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24 hours a day, 7 days a week via the kabaji Platform
• WhatsApp: +880 1800-KABAJI, available 08:00–24:00 BST

All privacy-related correspondence is handled by kabaji's compliance team and is treated with strict confidentiality. We will not share the contents of your privacy enquiry with any third party unless we are required to do so by law.