rebaje Privacy
Policy

1. Information We Collect

rebaje collects personal data that is necessary to operate a safe, compliant, and high-quality online gaming platform for players across Bangladesh. We collect information in three primary ways: information you provide to us directly, information generated automatically through your use of the platform, and information we receive from trusted third-party partners.

Information you provide directly:

• Registration data: Your full name, date of birth, email address, and account credentials when you create a rebaje account.
• Identity verification documents: Government-issued photo ID, proof of address, and payment method verification documents submitted as part of our Know Your Customer (KYC) process.
• Payment information: Mobile wallet identifiers (bKash, Nagad, Rocket, Upay), bank account details, or card information used to process deposits and withdrawals. Full payment credentials are handled by our payment processing partners and are not stored in their entirety on rebaje servers.
• Communications: The content of any emails, live chat transcripts, or support tickets you submit to the rebaje support team at [email protected].
• Responsible gaming preferences: Deposit limit settings, self-exclusion requests, cooling-off period activations, and session time reminder configurations you set within your account.

Information collected automatically:

• Device and technical data: IP address, browser type and version, operating system, device identifiers, screen resolution, and time zone settings.
• Usage data: Pages visited on the rebaje platform, games played, bets placed, session duration, click-path data, and features accessed.
• Transaction data: A full record of all deposits, withdrawals, bonus activations, wagers, game outcomes, and account balance changes associated with your account.
• Cookies and similar technologies: Data collected via cookies, web beacons, local storage, and similar tracking technologies as described in the Cookies section of this policy.

Information received from third parties:

• Payment processors: Transaction status confirmations and fraud screening results from bKash, Nagad, Rocket, Upay, Visa, and Mastercard processing networks.
• Identity verification services: Results of identity and document verification checks conducted by third-party KYC service providers on our behalf.
• Game providers: Game session data, round results, and RNG certification records from providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi.
• Fraud detection partners: Risk scores and flagged activity alerts generated by our fraud prevention and anti-money laundering screening services.

2. How We Use Your Data

rebaje uses the personal data we collect strictly for the purposes described in this Privacy Policy. We do not use your data for any purpose that is incompatible with the reason it was originally collected. The primary purposes for which rebaje processes personal data are as follows:

• Account creation and management: To register your rebaje account, verify your identity, maintain your account profile, and provide access to the full range of rebaje products and services.
• Payment processing: To process your deposits and withdrawals accurately and securely via your chosen payment method (bKash, Nagad, Rocket, Upay, bank transfer, or card), and to maintain a complete and accurate financial record associated with your account.
• Platform delivery and personalisation: To operate the rebaje platform, deliver games and betting markets, display relevant content, and where you have consented, personalise your experience based on your activity and preferences.
• Customer support: To respond to your enquiries, resolve account disputes, process complaints, and provide technical assistance through the rebaje support team.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, money laundering, bonus abuse, duplicate account creation, and other prohibited conduct on the platform.
• Regulatory compliance: To meet our obligations under applicable anti-money laundering (AML) legislation, Know Your Customer (KYC) requirements, and any other legal obligations to which rebaje is subject.
• Responsible gaming: To monitor your gaming patterns for signs of problem gambling behaviour, enforce deposit limits and self-exclusion requests you have set, and proactively reach out where our systems detect indicators of potential harm.
• Service improvement: To analyse aggregated, anonymised usage data in order to improve the rebaje platform, fix technical issues, and develop new features that better serve our players across Bangladesh.
• Marketing communications: Where you have explicitly opted in to receive promotional communications, to send you information about rebaje bonuses, seasonal promotions (such as BPL season offers or Eid promotions), and platform updates. You may withdraw your marketing consent at any time by contacting [email protected].

3. Legal Basis for Processing

rebaje processes personal data only where a valid legal basis exists for doing so. Depending on the specific processing activity, rebaje relies on one or more of the following legal bases:

• Contractual necessity: Processing that is necessary to perform the contract between rebaje and a registered player — including account management, payment processing, game delivery, and customer support. Without this processing, rebaje cannot provide its services.
• Legal obligation: Processing required to comply with applicable laws, including anti-money laundering regulations, KYC/identity verification obligations, tax reporting requirements, and any instruction from a competent legal or regulatory authority.
• Legitimate interests: Processing necessary for rebaje's legitimate business interests, provided those interests are not overridden by your rights and interests. This includes fraud detection, platform security, responsible gaming monitoring, analytics, and general platform improvement activities.
• Consent: Where rebaje relies on your consent as the legal basis for processing — primarily for optional marketing communications and non-essential cookies — you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

Where the legal basis for a specific processing activity changes — for example, if a new legal obligation is introduced — rebaje will update this Privacy Policy and notify registered players accordingly.

4. Data Sharing & Third Parties

rebaje does not share your personal data with third parties except in the limited circumstances described below. All third parties with whom rebaje shares data are required to handle that data in accordance with applicable data protection principles and are prohibited from using it for their own independent purposes.

• Payment processors: Your payment details are shared with the relevant payment processor (bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, or other approved partners) solely for the purpose of processing your deposit or withdrawal transaction. Each payment processor operates under its own privacy policy and security standards.
• Identity verification providers: Where you submit KYC documents, those documents may be passed to a third-party identity verification service operating on rebaje's behalf. These providers verify your identity and return a verification result; they do not retain your documents beyond what is required for the verification process.
• Game providers: When you play a casino game or participate in a live dealer session, the relevant game provider (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, or others) receives the technical data necessary to deliver and record the game session. Game providers are data processors operating under contract with rebaje.
• Fraud prevention and AML services: rebaje uses third-party services to screen transactions and account activity for fraud, money laundering, and other financial crimes. These services may receive transaction data, IP addresses, and device identifiers as part of their screening function.
• Analytics providers: Aggregated, pseudonymised behavioural data may be shared with analytics platforms to help rebaje understand how the platform is used and identify areas for improvement. No personally identifiable data is shared with analytics providers in a form that could identify you individually.
• Legal and regulatory authorities: rebaje will disclose personal data to law enforcement, regulatory bodies, courts, or other competent authorities where required to do so by applicable law, or where rebaje reasonably believes disclosure is necessary to prevent fraud, protect the safety of persons, or defend its legal rights.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of rebaje's business, your personal data may be transferred to the acquiring entity as part of the transaction, subject to equivalent data protection obligations being maintained.

5. Cookies & Tracking Technologies

The rebaje platform uses cookies and similar tracking technologies to operate correctly, improve user experience, and — where you have given consent — to deliver relevant content and measure platform performance.

A cookie is a small text file stored on your device by your web browser when you visit a website. Cookies allow the platform to remember information about your visit, such as your login session, language preferences, and platform settings, so you do not need to re-enter them each time you return.

Categories of cookies used on the rebaje platform:

• Strictly necessary cookies: Required for the core functions of the platform to operate — including maintaining your login session, routing your requests to the correct server, and preserving your account security settings. These cookies cannot be disabled without preventing the platform from functioning correctly.
• Functional cookies: Used to remember your preferences and settings (such as game display options or responsible gaming limits you have configured) to personalise your experience on the platform.
• Performance and analytics cookies: Used to collect anonymised information about how players interact with the rebaje platform — including which pages are visited most frequently, how long sessions last, and where errors occur. This data helps rebaje improve platform performance and user experience.
• Targeting and marketing cookies: Used, where you have consented, to recognise your device when you return to the rebaje platform and to present content relevant to your demonstrated interests. These cookies may also be used to measure the effectiveness of rebaje's promotional campaigns.

In addition to cookies, rebaje may use web beacons (also known as pixel tags) — small transparent image files embedded in web pages or emails — to track whether a page has been viewed or an email has been opened. This data is used solely for internal analytics and to improve communication relevance.

6. Data Retention

rebaje retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. The retention periods applied to different categories of data are outlined below.

When the applicable retention period expires, rebaje will securely delete or anonymise your personal data so that it can no longer be associated with you. Where full deletion is not immediately technically feasible (for example, in backup systems), data will be isolated and protected from active processing until deletion is possible.

If you request closure of your rebaje account, your data will be retained for the minimum period required by law before deletion is initiated. You will not be contacted for marketing purposes after account closure unless you separately consent to receive communications as a non-account-holder.

7. Data Security

rebaje implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. While no online platform can guarantee absolute security, rebaje applies industry-standard safeguards appropriate to the sensitivity of the data it processes.

• SSL/TLS encryption: All data transmitted between your device and the rebaje platform is encrypted using SSL/TLS protocols. The padlock icon visible in your browser's address bar confirms that your connection is secured.
• Password hashing: Account passwords are never stored in plain text. rebaje uses strong one-way cryptographic hashing algorithms to store password data, meaning that even rebaje's own technical team cannot read your password.
• Access controls: Access to systems containing personal data is restricted to rebaje staff and contractors who require it to perform their specific job functions. All access is logged and monitored. Staff are required to complete data protection training as part of their onboarding.
• Payment data security: Financial data processed through payment partners (bKash, Nagad, Rocket, Visa, Mastercard) is handled in accordance with the security standards required by those networks. rebaje does not store full card numbers or mobile banking PINs on its own servers.
• Intrusion detection: rebaje's infrastructure is monitored for unusual access patterns and potential intrusion attempts. Security alerts are reviewed by the technical team on a continuous basis.
• Data minimisation: rebaje collects and retains only the minimum personal data necessary to operate the platform and comply with legal obligations. Data that is no longer required is deleted or anonymised in accordance with the retention schedule described in Section 6.

8. Your Data Rights

As a player on the rebaje platform, you have a number of rights in relation to your personal data. rebaje is committed to respecting and facilitating the exercise of these rights. To exercise any of the rights described below, please contact the rebaje support team at [email protected] with the subject line "Data Rights Request".

• Right of access: You have the right to request a copy of the personal data that rebaje holds about you. rebaje will provide this information in a clear, readable format within 30 days of receiving a valid request.
• Right to rectification: If any personal data rebaje holds about you is inaccurate or incomplete, you have the right to request that it be corrected. Where the correction relates to information you can update directly within your account settings, you are encouraged to do so without contacting support.
• Right to erasure: Also known as the "right to be forgotten", this right allows you to request deletion of your personal data where it is no longer necessary for the purpose it was collected, where you withdraw consent, or where you object to processing based on legitimate interests. Note that this right is not absolute — rebaje may be required to retain certain data to meet legal obligations, and erasure requests that conflict with mandatory retention requirements will be partially fulfilled, with the conflicting data retained only for the minimum period required by law.
• Right to restrict processing: You may request that rebaje restricts the processing of your personal data in certain circumstances — for example, while the accuracy of data you have contested is being verified.
• Right to data portability: Where processing is based on your consent or on contractual necessity, you have the right to receive your personal data in a structured, commonly used, machine-readable format and to have it transmitted to another service provider where technically feasible.
• Right to object: You have the right to object to processing of your personal data where rebaje relies on legitimate interests as the legal basis, including processing for direct marketing purposes. Where you object to marketing communications, rebaje will stop sending them without delay.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that took place before the withdrawal.

rebaje will respond to all data rights requests within 30 calendar days. In complex cases, this period may be extended by a further 60 days, in which case rebaje will notify you of the extension and the reason for it within the initial 30-day window.

9. Minors & Privacy

The rebaje platform is strictly intended for adults aged 18 and above. rebaje does not knowingly collect, store, or process personal data belonging to any individual under the age of 18. Our registration process includes mandatory age declaration, and we apply identity verification procedures to confirm that players meet the minimum age requirement.

If rebaje discovers that personal data belonging to a person under the age of 18 has been collected — whether through misrepresentation during registration or any other means — the following actions will be taken immediately:

• The account will be permanently closed without notice.
• All data associated with the account will be flagged for expedited deletion in accordance with applicable law.
• Any deposits made to the account will be returned to the original payment source where technically possible.
• All winnings accrued on the account will be forfeited.
• The incident will be reported to the relevant authority where required by applicable law.

If you are a parent or guardian and believe your child may have registered a rebaje account without your knowledge, please contact [email protected] immediately. rebaje will act on such reports promptly and confidentially.

10. Policy Updates

rebaje reserves the right to update this Privacy Policy at any time. Updates may be made to reflect changes in applicable data protection law, changes to the products and services available on the platform, changes to our data processing practices, or improvements to the clarity and transparency of this document.

When material changes are made to this Privacy Policy, rebaje will notify registered players by posting a prominent notice on the platform. For significant changes that affect your rights, we will also send a notification to the email address associated with your rebaje account. The effective date of the revised policy will be clearly stated at the top of this page.

Continued use of the rebaje platform after the effective date of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with any change to this policy, you should cease using the platform and request account closure by contacting [email protected] before the updated policy takes effect.

The current version of the rebaje Privacy Policy is always available at rebaje.net/privacy-policy. Players are encouraged to review this page periodically to stay informed about how their data is being handled.

11. Contact & Data Queries

If you have any questions, concerns, or requests relating to this Privacy Policy or to rebaje's handling of your personal data, our support team is available 24 hours a day, 7 days a week, 365 days a year to assist you.

Email: [email protected] (plain text — not a clickable link)

When contacting rebaje about a data-related matter, please use the subject line "Privacy Query" or "Data Rights Request" to ensure your message is routed directly to the appropriate team. Include your registered account email address in the body of your message so we can locate your account quickly.

rebaje aims to acknowledge all data-related enquiries within 24 hours and to provide a full response within 30 calendar days. For complex requests — particularly those involving data access, erasure, or portability — we will keep you informed of progress at regular intervals if additional time is required.