ibaji's Privacy Policy —
Your Data Is Our Responsibility

To provide services on the ibaji platform, we collect the following types of personal information. Each piece of information is collected for a specific purpose, and information that is not needed is never collected.

1.1 Registration and Identity Information

• Full name (in Bengali or English)
• Date of birth (for age verification — only users aged 21 and above may create an account)
• Email address
• Mobile number
• Username and password (stored in encrypted form)

1.2 Payment and Financial Information

• bKash, Nagad, Rocket, or Upay mobile number
• Deposit and withdrawal history
• Transaction amounts and timestamps

1.3 Technical and Device Information

• IP address
• Browser type and version
• Device type (mobile, tablet, or desktop)
• Operating system
• Cookie data and session ID
• Referral URL (the page you came from)

1.4 Gaming Activity Information

• Betting history and gameplay logs
• Bonus usage records
• Account balance changes
• Promotion participation details

ibaji collects and processes user information only for necessary and legitimate purposes. The main reasons we collect information are listed below:

• Account management: To create, verify, and manage your ibaji account.
• Identity verification: To confirm a user's age and identity — only users aged 21 and above may use the service.
• Payment processing: To securely complete deposits and withdrawals.
• Fraud prevention: To detect suspicious activity and keep the platform secure.
• Support services: To resolve your requests and complaints quickly.
• Responsible gaming: To identify patterns of excessive play and provide assistance when needed.
• Legal compliance: To comply with applicable laws and regulations.
• Service improvement: To enhance the user experience and develop new features.

To protect your privacy at ibaji, we apply industry-standard security measures. SSL encryption is active on our platform, which keeps your data transfers protected from third parties.

3.1 Technical Security Measures

• 256-bit SSL encryption — applied to all data transfers
• Password hashing — no password is stored in plain text
• Firewall protection and intrusion prevention systems
• Two-factor authentication support
• Regular security audits and vulnerability testing

3.2 Administrative Security Measures

• Employee access to data is limited and controlled
• Regular privacy policy training
• Data access logs recorded and reviewed
• Strict hiring processes and confidentiality agreements

ibaji never sells your personal information or shares it with third parties for commercial purposes. However, information may be shared in the following limited circumstances:

• Payment processors: Only the information necessary to complete transactions is shared with payment partners including bKash, Nagad, Rocket, and Upay.
• Legal obligations: Information may be provided in response to a court order or a lawful request from a government authority.
• Fraud prevention: To assist relevant authorities in investigating serious fraud or criminal activity.
• Game providers: Necessary session information may be shared with technology partners (such as Pragmatic Play, Evolution Gaming, JILI, PG Soft, Spribe) to ensure gameplay.

Before sharing information in each of the above cases, we ensure that the third party follows adequate data protection measures.

Cookies and similar technologies are used on the ibaji website. Cookies are small text files stored in your browser.

5.1 Cookies We Use

• Essential cookies: To maintain login sessions and ensure the core functionality of the site.
• Performance cookies: To analyse site usage patterns and improve performance.
• Preference cookies: To remember your language and other preferences.

5.2 Cookie Controls

You can disable cookies from your browser settings. However, disabling certain essential cookies may mean that some features of the site are no longer available. We never use third-party advertising cookies.

ibaji retains your personal information only for as long as it is needed. The retention period depends on the type and purpose of the information:

• Active account information: Retained for as long as the account remains active.
• Financial transaction records: Retained for the period required by legal obligations.
• Closed account information: Retained for a specified period after account closure for fraud prevention and legal purposes.
• Marketing preferences: Updated as soon as you withdraw your consent.

Once the retention period ends, information is securely deleted or anonymised in a way that no individual can be identified from it.

As an ibaji user, you have the following rights regarding your personal information. To exercise these rights, please contact our support team.

7.1 Right of Access and Correction

You can view the information stored in your account at any time and correct any inaccurate information. Profile information can be updated directly from account settings.

7.2 Right to Delete Information

In certain circumstances you may request that your information be deleted. However, some information may need to be retained due to legal obligations or legitimate business requirements.

7.3 Right to Restrict Processing

You may request that the use of your information be limited for specific purposes, particularly in relation to marketing communications.

7.4 Right to Data Portability

You may request to receive your account information in a structured format.

ibaji strictly does not provide services to anyone under the age of 21. Our platform is for adult users only.

• Age is verified at the time of registration.
• We do not knowingly collect information from anyone under the age of 21.
• If information belonging to a minor is found in an account, the account is immediately closed and the relevant information is deleted.
• If you believe a minor is using our service, please notify our support team.

ibaji's server infrastructure may be located in various countries. If your information is processed outside Bangladesh, we ensure that adequate data protection measures are in place in that country as well. For international data transfers we apply industry-standard encryption and security protocols.

If a data security breach occurs that may affect your personal information, ibaji will act quickly:

• The breach will be contained as soon as possible after it is identified.
• Affected users will be informed in a timely manner.
• The extent of the damage will be assessed and an investigation will be conducted.
• Necessary measures will be taken to prevent such incidents in the future.
• Relevant authorities will be notified where applicable.

The ibaji platform may contain links to third-party websites. The privacy policies of these external sites are entirely their own. We are not responsible for the data collection practices of those sites. We advise you to read the privacy policy of any external site before visiting it.

ibaji reserves the right to update this privacy policy as needed. If changes are made:

• The "Last Updated" date at the top of the page will be changed.
• For significant changes, a notification will be sent to the registered email address.
• Continuing to use the platform after a new policy is published will be considered as your consent to the new policy.

We therefore recommend that you visit this page regularly.

If you have any questions or concerns about this privacy policy, or if you wish to exercise your data rights, please contact us:

Our data protection team members are always ready to respond to your requests. For more information on responsible gaming, please visit our Responsible Gaming page.