gbajo Privacy Policy

1. Introduction

gbajo ("we", "us", "our") is committed to protecting the privacy of all individuals who use the gbajo website and mobile platform (the "Platform"). This Privacy Policy describes the categories of personal data we collect, the purposes for which we use that data, the parties with whom we may share it, and the rights available to you in relation to your personal data.

By registering an account, browsing the Platform, or otherwise using any gbajo services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein. If you do not consent, please refrain from using the Platform.

2. Data We Collect

We collect the following categories of personal data when you interact with the gbajo Platform:

• Identity data: full name, date of birth, gender, and a copy of a government-issued identity document submitted for KYC verification purposes.
• Contact data: email address, mobile phone number, and residential address.
• Financial data: details of your nominated payment method (bKash number, Nagad number, Rocket number, or bank account details as applicable), transaction history, deposit and withdrawal records.
• Technical data: IP address, device type and operating system, browser type and version, time zone, session duration and pages visited, and referral source.
• Usage data: game history, wagering activity, bonus usage, session time patterns, and responsible gaming tool activations.
• Communications data: records of any correspondence between you and gbajo, including support ticket history, live chat transcripts, and email exchanges.

3. How We Use Your Data

gbajo processes your personal data only for the following lawful purposes:

• Account administration: to create, verify, and maintain your account, including processing KYC documentation and managing your account settings and preferences.
• Transaction processing: to facilitate deposits and withdrawals, record transaction history, and detect or prevent fraudulent or suspicious financial activity.
• Legal compliance: to fulfil obligations under applicable law, including anti-money laundering (AML) requirements, age verification obligations, and any reporting requirements imposed by relevant authorities.
• Platform improvement: to analyse usage patterns, conduct internal research, develop new features, and improve the overall quality of the Platform and the user experience for Bangladeshi players.
• Customer communications: to respond to your support requests, send transactional notifications (such as deposit confirmations and withdrawal updates), and, where you have opted in, to send promotional communications about gbajo offers and new features.

4. Sharing Your Data

gbajo does not sell, rent, or trade your personal data to any third party for their independent marketing or commercial use. We may share your data only in the following limited circumstances:

Service providers: we engage regulated third-party service providers to assist in operating the Platform, including payment processors (bKash, Nagad, Rocket), identity verification providers, fraud detection services, and cloud infrastructure providers. These parties are bound by contractual confidentiality obligations and are permitted to use your data only to provide the specific service for which they have been engaged.

• Legal obligations: we may disclose your data to law enforcement agencies, regulatory authorities, or other government bodies when we are legally required to do so or when disclosure is necessary to protect the legal rights of gbajo or its users.
• Business transfers: in the event of a merger, acquisition, or sale of all or part of our business, your personal data may be transferred to the acquiring entity as part of that transaction, subject to equivalent privacy protections.
• With your consent: in circumstances not described above, we will only share your data with third parties if you have given us your explicit prior consent to do so.

gbajo does not transfer your personal data outside of the jurisdictions covered by applicable data protection frameworks without implementing appropriate safeguards to ensure your data receives equivalent protection.

5. Data Retention

gbajo retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. The specific retention periods we apply are as follows:

• Account data and KYC records: retained for a minimum of five years from the date of account closure, in line with standard anti-money laundering record-keeping obligations.
• Transaction records: retained for a minimum of five years from the date of the transaction to comply with applicable financial record-keeping requirements.
• Communications records: retained for two years from the date of the last interaction, unless a longer period is required by law or to resolve an ongoing dispute.
• Technical and usage data: retained in anonymised or aggregated form for platform analytics purposes after your account is closed.

6. Cookies and Tracking Technologies

gbajo uses cookies and similar tracking technologies to operate and improve the Platform. A cookie is a small text file placed on your device when you visit a website. We use the following categories of cookies: (a) Essential cookies — strictly necessary for the Platform to function, including session management and security tokens; these cannot be disabled. (b) Analytics cookies — used to understand how users navigate the Platform, which pages are most visited, and where technical issues occur; this data is collected in aggregated, non-personally identifiable form.

gbajo does not use advertising cookies, cross-site tracking cookies, or any cookie technology that profiles your behaviour across third-party websites. You may disable non-essential cookies through your browser settings; however, disabling essential cookies will impair the functionality of the Platform and may prevent you from logging in or completing transactions.

7. Your Data Rights

Subject to applicable law, you have the following rights in relation to your personal data held by gbajo:

• Right of access: you may request a copy of the personal data gbajo holds about you at any time. We will respond to verified access requests within 30 days.
• Right of rectification: if any of the personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it.
• Right of erasure: you may request that we delete your personal data where it is no longer necessary for the purposes for which it was collected, subject to any overriding legal obligations that require us to retain it.
• Right to restrict processing: you may ask us to suspend processing of your personal data in certain circumstances, for example where you contest the accuracy of the data while we verify it.
• Right to withdraw consent: where we process your data based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to the withdrawal.

8. Data Security

gbajo implements appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. These measures include SSL/TLS encryption for all data transmitted between your device and the Platform, encrypted storage of sensitive data at rest, access controls that restrict data access to authorised personnel only, regular security assessments and penetration testing of the Platform infrastructure, and two-factor authentication options for account access.

While gbajo takes all reasonable steps to protect your personal data, no data transmission over the internet or storage system can be guaranteed to be 100% secure. If you become aware of any security vulnerability or believe your account has been compromised, please contact our support team immediately at [email protected].

9. Marketing Communications

gbajo may send you promotional emails, SMS notifications, or in-platform messages about new game releases, bonus offers, and platform updates. We will only send such communications where you have opted in to receive them at the time of registration or subsequently through your account settings. You have the right to opt out of marketing communications at any time by:

• Using the unsubscribe link included in any marketing email we send you.
• Updating your communication preferences in your account settings on the Platform.
• Contacting our support team directly at [email protected] and requesting removal from our marketing list.
• Please note that opting out of marketing communications will not affect the delivery of transactional notifications, such as deposit confirmations and withdrawal status updates, which are necessary for the operation of your account.

10. Changes to This Privacy Policy

gbajo reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or Platform functionality. Where changes are material, we will notify registered users by email or via a prominent notice on the Platform prior to the changes taking effect. The updated policy will display the revised "Last Updated" date at the top of the page.

Your continued use of the Platform after any amendment to this Privacy Policy constitutes your acceptance of the revised policy. If you do not agree with any changes, you must close your account and cease using the Platform.

11. Contact and Data Enquiries

If you wish to exercise any of your data rights, have a question about this Privacy Policy, or wish to make a complaint about the way we have handled your personal data, please contact the gbajo support team. We aim to respond to all privacy-related enquiries within 30 days of receipt. You may reach us at:

12. Responsible Gaming and Data

gbajo treats responsible gaming data — including self-exclusion status, deposit limit settings, session time reminders, and cooling-off period activations — with the highest level of care. This data is used exclusively to enforce the responsible gaming tools you have activated and will not be used for marketing profiling or shared with third parties for commercial purposes.

All gbajo players are encouraged to review our Responsible Gaming page for full information on the tools available to help you stay in control of your gaming activity. If you have concerns about your gaming behaviour or that of someone you know, please reach out to our support team at [email protected] at any time.