mbajiee Privacy Policy
Your Data, Handled With Care

1.1 Data You Provide Directly

When you register an account with mbajiee or subsequently interact with the Platform, you may provide us with the following categories of personal information:

• Identity data: Full name, date of birth, gender, and national identification number or passport number (for age and identity verification purposes).
• Contact data: Email address, mobile phone number, and residential address (including city, district, and postcode within Bangladesh).
• Account credentials: Username and hashed password (passwords are never stored in plaintext).
• Financial data: bKash account number, Nagad account number, Rocket account number, Upay account number, bank account details (Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, or other supported banks), and Visa/Mastercard partial card details as processed by our payment partners.
• Verification documents: Copies of government-issued photo identification, utility bills, or other documents submitted in response to a Know Your Customer (KYC) request.
• Communication data: The content of any messages, complaints, or support requests you send to mbajiee via email at [email protected] or via any in-platform messaging tool.

1.2 Data Collected Automatically

When you access and use the mbajiee Platform, certain technical data is collected automatically by our systems. This data is used for security monitoring, fraud prevention, platform performance optimisation, and legal compliance purposes:

1.3 Data From Third Parties

In certain circumstances, mbajiee may receive personal data about you from third-party sources as part of its legal and compliance obligations. These sources include identity verification service providers engaged to conduct KYC checks, payment processors who confirm transaction status and flag suspicious activity, and fraud prevention services that provide risk scores based on device fingerprinting and behavioural analytics. mbajiee treats data received from third parties with the same level of care applied to data collected directly from you.

1.4 Data We Do Not Collect

mbajiee does not knowingly collect sensitive personal data beyond what is required for identity verification and AML compliance. We do not collect data relating to your racial or ethnic origin, political opinions, religious beliefs, trade union membership, health information (except where relevant to a responsible gaming self-exclusion request), or biometric data for identification purposes beyond standard photo ID review.

2.1 Account Management and Service Delivery

The primary purpose for which mbajiee processes your personal data is to create, maintain, and operate your player account and to deliver the betting and gaming services you have requested. This includes processing deposits and withdrawals via bKash, Nagad, Rocket, Upay, and supported bank channels; crediting winnings and bonuses to your account; and responding to your support enquiries in a timely and informed manner.

2.2 Identity Verification and Legal Compliance

mbajiee is required to verify the identity and age of all players before allowing real-money play. Your identity data and verification documents are processed for the purpose of complying with applicable age verification requirements, anti-money laundering (AML) obligations, and Know Your Customer (KYC) procedures. This processing is necessary for mbajiee to operate as a safe and reliable platform.

2.3 Fraud Prevention and Security

mbajiee uses technical and behavioural data collected automatically to detect and prevent fraudulent activity, unauthorised account access, bonus abuse, collusion, and any other activity that threatens the integrity of the Platform or the safety of our player community. This processing is carried out in the legitimate interests of mbajiee and its players.

2.4 Responsible Gaming Monitoring

mbajiee processes your usage and transaction data to monitor for indicators of problem gambling behaviour, including unusually rapid increases in wagering frequency or amounts. Where such indicators are identified, we may take proactive steps such as sending responsible gaming communications or temporarily restricting account activity. This processing is carried out in your interest and in accordance with our Responsible Gaming policy.

2.5 Marketing and Promotional Communications

Where you have provided your consent, mbajiee may use your contact data (email address and mobile number) to send you promotional communications about bonuses, new games, seasonal promotions (such as Eid, Pohela Boishakh, BPL season offers), and other mbajiee news. You may withdraw your consent to receive marketing communications at any time by contacting support at [email protected] or by using the unsubscribe mechanism in any marketing email. Withdrawal of consent does not affect the lawfulness of processing carried out before you withdrew consent.

2.6 Platform Analytics and Improvement

Aggregated and anonymised usage data is processed to understand how players interact with the mbajiee Platform, identify areas for improvement, test new features, and optimise the overall player experience. This analytics processing does not identify you personally and is carried out using aggregate statistical methods.

3.1 What Are Cookies?

Cookies are small text files placed on your device by a website when you visit it. They allow the website to recognise your device on subsequent visits and to store information about your preferences and activity. Cookies are widely used across the internet to make websites work more efficiently and to provide information to site operators.

3.2 Types of Cookies Used by mbajiee

3.3 Managing Cookies

You can control and manage cookies through your web browser settings. Most browsers allow you to view, delete, and block cookies from specific websites. Please note that disabling functional or analytics cookies will not prevent you from using the Platform, but it may affect certain personalisation features. Disabling strictly necessary or security cookies may prevent you from logging in or using parts of the Platform altogether.

Instructions for managing cookies vary by browser. Refer to the help documentation for your specific browser (e.g., Chrome, Firefox, Samsung Internet, UC Browser) for guidance on how to adjust your cookie settings.

3.4 Third-Party Tracking

Third-party game providers integrated into the mbajiee Platform (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) may set their own cookies or tracking technologies when you play their games. mbajiee does not control the cookie practices of these third parties. We recommend reviewing the privacy notices of any game studio whose content you interact with if you have concerns about their tracking practices.

4.1 Payment Processors

To process your deposits and withdrawals in BDT, mbajiee shares relevant financial and identity data with our payment processing partners. These include mobile financial service providers (bKash, Nagad, Rocket, Upay) and banking partners (Dutch-Bangla Bank, City Bank, BRAC Bank, and others). Each payment partner is subject to contractual data protection obligations and is required to handle your data securely and in accordance with applicable financial regulations.

4.2 Identity Verification Providers

To fulfil our KYC and age verification obligations, mbajiee may share identity documents and personal details with specialist third-party verification service providers. These providers are engaged solely to confirm the authenticity of the information you have provided and are not permitted to use your data for any other purpose.

4.3 Game Content Providers

When you play games provided by third-party studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Ezugi, a session token and limited technical data (such as your player ID and account currency) are shared with the relevant studio to facilitate gameplay. Your full personal details are not shared with game studios. All game providers integrated into the mbajiee Platform are required to maintain the confidentiality of any data shared with them.

4.4 Legal and Regulatory Disclosure

mbajiee may be required to disclose your personal data to law enforcement agencies, regulatory authorities, or other government bodies where required to do so by applicable law, court order, or lawful regulatory request. In such circumstances, mbajiee will disclose the minimum amount of data necessary to comply with the legal obligation and will endeavour to notify you of any such disclosure where legally permitted to do so.

4.5 Business Transfers

In the event that mbajiee undergoes a merger, acquisition, or sale of all or substantially all of its business assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and any material changes to how your data is processed as a result, with a reasonable opportunity to close your account before the transfer takes effect if you do not wish your data to be transferred.

4.6 Aggregated and Anonymised Data

mbajiee may share aggregated, statistical data about Platform usage with business partners, investors, or analytics providers. This data does not identify any individual player and cannot reasonably be used to re-identify you. Examples include total wager volumes, game popularity statistics, and general player demographic trends.

5.1 Retention Periods

The retention period applied to your personal data depends on the category of data and the purpose for which it was collected. The following general retention periods apply:

5.2 Account Closure and Data Deletion

When you close your mbajiee account, your active account profile is deactivated. However, as noted in the table above, certain categories of data — particularly transaction records, KYC documents, and identity data — are retained for the periods specified by applicable AML and financial record-keeping obligations. This retained data is held in a restricted state and is accessible only to authorised personnel for compliance and legal purposes.

5.3 Requesting Earlier Deletion

You may request the deletion of your personal data before the end of the applicable retention period by contacting [email protected]. mbajiee will assess your request and comply where no overriding legal obligation requires continued retention. Where mbajiee is unable to fulfil a deletion request due to a legal retention requirement, we will inform you of this and explain which data must be retained and why.

6.1 Technical Security Measures

mbajiee employs the following technical safeguards to protect your personal data at rest and in transit:

• 256-bit SSL/TLS Encryption: All data transmitted between your browser or app and the mbajiee servers is encrypted using industry-standard SSL/TLS protocols. Look for the padlock icon in your browser's address bar to confirm your connection is secure.
• Password Hashing: Account passwords are stored using a strong, salted hashing algorithm. mbajiee employees cannot read your password in plaintext and will never ask you for your password.
• Firewall and Intrusion Detection: mbajiee's infrastructure is protected by enterprise-grade firewalls and continuous intrusion detection systems that monitor for anomalous access patterns.
• Access Controls: Access to personal data is restricted to authorised personnel on a strict need-to-know basis. All internal access to sensitive data is logged and audited.
• Payment Data Tokenisation: Payment credentials processed via bKash, Nagad, Rocket, Upay, and card networks are tokenised by our payment partners. Full payment credentials are not stored on mbajiee servers.

6.2 Organisational Security Measures

In addition to technical safeguards, mbajiee maintains organisational policies and procedures designed to protect personal data, including confidentiality obligations for all personnel who handle player data, regular internal security reviews, and incident response procedures that govern how mbajiee responds to any potential data security event.

6.3 Data Breach Response

In the event of a personal data breach that poses a risk to your rights and freedoms, mbajiee will take prompt action to contain the breach, assess its scope, and notify affected players as soon as reasonably practicable. Notification will be provided via the registered email address on your mbajiee account. mbajiee will also fulfil any applicable regulatory notification obligations arising from such an event.

6.4 Your Role in Security

While mbajiee takes every reasonable step to secure the Platform, the security of your account also depends on the choices you make. We strongly recommend using a unique, strong password for your mbajiee account that you do not use on any other service, enabling any two-factor authentication options available to you, and contacting [email protected] immediately if you suspect your account has been compromised.

7.1 Right to Access

You have the right to request a copy of the personal data that mbajiee holds about you. Upon receipt of a valid access request, mbajiee will provide you with a summary of your personal data, the purposes for which it is being processed, the categories of data held, and details of any third parties with whom it has been shared. This is sometimes referred to as a Subject Access Request (SAR).

7.2 Right to Rectification

If any personal data mbajiee holds about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. You can update certain account details (such as your email address or contact number) directly through your mbajiee account settings. For corrections to identity documents or other sensitive data, please contact support.

7.3 Right to Erasure

You have the right to request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where the data has been unlawfully processed. As noted in the Data Retention section, mbajiee may be required to retain certain data for legal and compliance reasons even following an erasure request.

7.4 Right to Restrict Processing

You have the right to request that mbajiee restricts the processing of your personal data in certain circumstances — for example, while the accuracy of your data is being verified following a rectification request, or while a complaint about mbajiee's processing practices is being resolved. During a restriction period, mbajiee will continue to store your data but will not actively process it beyond what is strictly necessary.

7.5 Right to Object to Marketing

You have the right to object to the processing of your personal data for direct marketing purposes at any time. Upon receipt of a valid objection, mbajiee will cease sending you promotional communications. You can also unsubscribe from marketing emails by using the unsubscribe link included in every marketing message mbajiee sends.

7.6 Right to Data Portability

Where mbajiee processes your personal data on the basis of your consent or for the performance of your account contract, and where that processing is carried out by automated means, you have the right to receive a copy of your data in a structured, commonly used, machine-readable format (such as CSV or JSON), and to transmit that data to another service provider of your choice.

7.7 Rights Related to Minors

mbajiee is strictly an 18+ platform. If you believe that a person under the age of 18 has provided personal data to mbajiee without appropriate parental or guardian consent, please contact us immediately at [email protected] . mbajiee will promptly investigate any such report and, where confirmed, will delete the relevant data and close the associated account without delay.

8.1 How to Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to how mbajiee processes your personal data, please contact our support team using the details below. All privacy-related enquiries are handled by authorised personnel with responsibility for data protection matters.

When contacting us about a privacy matter, please include your registered mbajiee username and a brief description of your request so we can identify your account and respond efficiently. Do not include your password or full payment credentials in any correspondence.

8.2 Updates to This Privacy Policy

mbajiee reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal requirements, or the services we offer. When we make material changes to this Privacy Policy, we will notify registered players by email to their registered address and by displaying a prominent notice on the Platform prior to the changes taking effect.

The effective date at the top of this Privacy Policy indicates when the current version entered into force. We encourage you to review this Privacy Policy periodically so that you remain informed about how mbajiee protects your personal data. Your continued use of the mbajiee Platform following the publication of an updated Privacy Policy constitutes your acceptance of the updated terms.

8.3 Links to Third-Party Sites

The mbajiee Platform may contain references to or integrations with third-party services, including game studio content. This Privacy Policy applies solely to personal data processed by mbajiee in connection with the operation of the Platform. mbajiee is not responsible for the privacy practices of third-party websites or services. We encourage you to review the privacy policies of any third-party service you access in connection with your use of mbajiee.

8.4 Children and Age Verification

mbajiee is strictly a platform for adults aged 18 and above. We do not knowingly collect personal data from individuals under the age of 18. All new players are required to pass age verification checks before real-money play is permitted. If mbajiee becomes aware that a player is under 18, the account will be suspended immediately, all funds returned (where no fraud is involved), and all associated personal data deleted in accordance with our data retention obligations. For more information on our age verification and safer gambling measures, please visit our Responsible Gaming page.

8.5 Governing Language

This Privacy Policy is written in English, which is the governing language for all legal and compliance purposes on the mbajiee Platform. In the event of any inconsistency between an English version of this Privacy Policy and any translated version, the English version shall prevail.