ybajee Privacy Policy

1. Who We Are

ybajee operates the online casino and sports betting platform accessible at ybajee.club (referred to throughout this Privacy Policy as "ybajee", "we", "us", or "our"). ybajee is the data controller for all personal data collected from registered players and visitors to the Platform.

ybajee is a platform designed for the Bangladesh market. All services are provided in English and all account balances are denominated in Bangladeshi Taka (BDT). Our support team is available 24 hours a day, 7 days a week and can be reached via live chat on the Platform or at [email protected].

2. Information We Collect

ybajee collects personal data in the following categories, depending on how you interact with the Platform:

2.1 Registration Data. When you create an ybajee account, we collect:

• Full legal name;
• Date of birth (to verify you are 18 years of age or older);
• Email address;
• Mobile phone number;
• Residential address (city and district, e.g., Dhaka, Chittagong, Sylhet, Khulna);
• Username and encrypted password.

2.2 Identity Verification (KYC) Data. To comply with our Know Your Customer obligations and to process withdrawal requests, we may collect:

• National Identity Card (NID) number and scanned copy;
• Passport or other government-issued photo identification;
• Proof of address documentation (e.g., utility bill, bank statement);
• Selfie or live photograph for identity confirmation purposes.

2.3 Financial Data. When you make deposits or request withdrawals, we collect transaction reference data including:

• Payment method type (e.g., bKash, Nagad, Rocket, Upay, bank transfer);
• Transaction reference numbers and timestamps;
• Deposit and withdrawal amounts in BDT;
• Registered mobile number associated with your mobile wallet account.

ybajee does not store your bKash PIN, Nagad password, or any other payment authentication credentials. These are handled exclusively by the respective payment service providers.

2.4 Usage and Device Data. When you access the Platform, we automatically collect certain technical information:

• IP address and approximate geographic location;
• Device type, operating system, and browser version;
• Pages visited, time spent on each page, and navigation path;
• Game activity logs, betting history, and session duration;
• Referring URL (the site you visited immediately before ybajee.club).

2.5 Communication Data. If you contact our support team via live chat or email, we retain a record of that communication including your messages, the date and time of contact, and any supporting documents you submit as part of a complaint or query.

3. How We Use Your Information

ybajee uses the personal data it collects for the following purposes:

Purpose	Data Used
Creating and managing your account	Registration data, contact details
Verifying your age and identity (KYC)	KYC documents, date of birth, NID
Processing deposits and withdrawals in BDT	Financial data, payment method details
Preventing fraud and money laundering	All collected data, transaction records
Providing customer support	Communication data, account data
Sending account-related notifications	Email address, mobile number
Personalising your gaming experience	Usage data, game activity logs
Responsible gaming monitoring	Betting history, session data, deposit patterns
Improving Platform performance	Device data, usage analytics
Complying with legal obligations	All categories as required by applicable law

ybajee does not use your personal data for automated decision-making that produces legal or similarly significant effects without human review. Where automated processes are used (for example, in fraud screening), a human member of our team reviews any flagged outcome before action is taken against an account.

4. Legal Basis for Processing

ybajee processes your personal data on the following legal grounds:

• Contractual necessity: Processing your registration data, KYC documents, and financial data is necessary to open and maintain your ybajee account and to provide the gaming and betting services you have requested.
• Legal obligation: Certain processing activities — including identity verification, anti-money laundering checks, and retention of transaction records — are required by applicable law.
• Legitimate interests: ybajee has a legitimate interest in processing usage and device data to secure the Platform, detect fraud, prevent abuse, and improve the quality of our services for all players.
• Consent: Where we send you promotional communications or use non-essential cookies, we do so on the basis of your explicit consent, which you may withdraw at any time by contacting our support team.

5. Sharing Your Information

ybajee does not sell your personal data. We share your data only in the following limited and controlled circumstances:

5.1 Payment Service Providers. To process your deposits and withdrawals, ybajee shares the minimum necessary transaction data with your selected payment provider (such as bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, or Sonali Bank). Each payment provider operates under its own privacy policy and security framework.

5.2 Game Technology Providers. ybajee's casino games are supplied by certified third-party studios including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Ezugi, and Spribe. These providers may receive session tokens and game-result data necessary to run their games within the ybajee Platform. They do not receive your full personal profile.

5.3 Identity Verification Partners. ybajee may use third-party KYC verification services to assist with identity and age confirmation. These services receive only the documentation and data necessary for the verification task and are contractually bound to handle it securely and confidentially.

5.4 Legal and Regulatory Authorities. ybajee may disclose personal data to government agencies, law enforcement bodies, or regulatory authorities where required to do so by applicable law or in response to a valid legal order. We will notify you of any such disclosure where we are legally permitted to do so.

5.5 Business Transfers. In the event that ybajee undergoes a merger, acquisition, or transfer of assets, your personal data may be transferred to the successor entity as part of that transaction. You will be notified of any such transfer and the privacy terms applicable to your data under the new entity.

6. Cookies & Tracking Technologies

ybajee uses cookies and similar tracking technologies to operate and improve the Platform. A cookie is a small text file stored on your device that helps us recognise you between sessions and personalise your experience.

We use the following categories of cookies:

• Strictly necessary cookies: These are essential for the Platform to function. They enable you to log in, navigate between pages, and access secure areas of your account. These cookies cannot be disabled.
• Performance and analytics cookies: These cookies collect aggregated, anonymised information about how players use the Platform — such as which pages are visited most often — to help us improve site performance and layout.
• Functional cookies: These cookies remember your preferences (such as your language and display settings) so that you do not need to re-enter them on each visit.
• Targeting and personalisation cookies: With your consent, these cookies help ybajee deliver content and offers relevant to your interests based on your browsing and gaming behaviour on the Platform.

You can manage your cookie preferences through your browser settings at any time. Disabling certain cookies may affect the functionality of the ybajee Platform. For further information on how to manage cookies, refer to your browser's help documentation.

7. Data Retention

ybajee retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply as a general guide:

• Account and registration data: Retained for the duration of your active account and for a minimum of 5 years following account closure, in compliance with applicable financial record-keeping requirements.
• KYC and identity documents: Retained for a minimum of 5 years from the date of submission, or longer if required by law.
• Transaction records: Retained for a minimum of 5 years from the transaction date to satisfy financial and anti-money laundering record-keeping obligations.
• Support communications: Retained for 2 years from the date of the last communication, unless the matter relates to an ongoing dispute, in which case records are retained until the dispute is fully resolved.
• Usage and device data: Typically retained in identifiable form for 12 months, after which it is aggregated and anonymised for analytical purposes.

When the applicable retention period expires, ybajee securely deletes or anonymises your personal data so that it can no longer be associated with you.

8. Data Security

ybajee employs a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and our servers;
• Encryption of sensitive data at rest within our databases;
• Role-based access controls ensuring that only authorised personnel can access personal data, and only to the extent required for their specific job function;
• Regular independent security audits and penetration testing of the Platform;
• Multi-factor authentication requirements for administrative access to production systems;
• Incident response procedures that ensure prompt notification of any data breach to affected users and relevant authorities where required by law.

While ybajee takes every reasonable precaution to protect your data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your account password and for logging out of your session when using a shared or public device. If you suspect that your ybajee account has been accessed without your authorisation, please contact our support team immediately.

9. Your Rights

As a registered player on the ybajee Platform, you have the following rights in relation to your personal data. To exercise any of these rights, please contact our support team via live chat or email at [email protected]:

• Right of Access: You may request a copy of the personal data that ybajee holds about you. We will provide this within 30 days of receiving your request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may also update certain details directly within your account settings.
• Right to Erasure: You may request that ybajee delete your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to Data Portability: You may request that ybajee provide your personal data in a structured, machine-readable format so that you can transfer it to another service provider.
• Right to Object: You may object to the processing of your personal data where ybajee relies on legitimate interests as the legal basis, unless ybajee can demonstrate overriding legitimate grounds for the processing.
• Right to Withdraw Consent: Where processing is based on your consent (for example, for promotional communications or non-essential cookies), you may withdraw your consent at any time without affecting the lawfulness of processing carried out before withdrawal.
• Right to Restrict Processing: You may request that ybajee restrict the processing of your personal data in certain circumstances, such as while a dispute about accuracy is being resolved.

ybajee will respond to all data rights requests within 30 days. In complex cases, this period may be extended by a further 60 days, in which case we will notify you of the extension and the reason for it within the initial 30-day period.

10. Children's Privacy

The ybajee Platform is strictly for adults aged 18 years and above. ybajee does not knowingly collect personal data from individuals under the age of 18. If we become aware that personal data has been submitted by a person under 18, we will immediately delete that data and close the associated account. If you believe that a person under 18 has created an account on ybajee, please contact our support team at [email protected] so that we can investigate and take appropriate action without delay.

11. Third-Party Services

The ybajee Platform may contain references to third-party payment providers and game studios. ybajee is not responsible for the privacy practices of these third-party services. When your data is shared with a third party as described in Section 5 of this Privacy Policy, that third party processes your data under its own privacy policy. We encourage you to review the privacy policies of any third-party services you interact with through the ybajee Platform.

ybajee does not include third-party advertising networks, social media tracking pixels, or external analytics platforms that collect your data for purposes unrelated to the operation of the ybajee service.

12. Changes to This Policy

ybajee reviews this Privacy Policy regularly and may update it from time to time to reflect changes in our data practices, applicable law, or the services we offer. When material changes are made, we will notify registered players via the email address associated with their account at least 7 days before the changes take effect. The current version of the Privacy Policy is always available at ybajee.club/privacy-policy and is identified by its effective date at the top of this document.

Continued use of the ybajee Platform after the effective date of any revision constitutes your acknowledgement and acceptance of the updated Privacy Policy. If you do not agree to the revised terms, you should discontinue use of the Platform and request account closure via our support team.

13. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way ybajee handles your personal data, please contact our Data Support team using the details below:

• Email: [email protected]
• Live Chat: Available 24/7 on the ybajee Platform
• Response Time: Typically within 1 hour (Bangladesh Standard Time, UTC+6)

All privacy-related inquiries are handled by our dedicated support team. We take every data concern seriously and will acknowledge your inquiry within 24 hours of receipt, with a full response provided within 30 days.