Privacy Policy — gibajee

Information We Collect

When you register and use gibajee, we collect personal data in several ways. The categories of information we may gather include, but are not limited to, the following:

We collect this information directly from you when you register, make a deposit or withdrawal, contact our support team, or interact with any feature of the gibajee platform. We may also collect technical and usage data automatically through cookies and server logs as detailed in Section 4 of this policy.

How We Use Your Data

gibajee processes your personal data only for specific, lawful, and legitimate purposes. We do not use your data in ways that are incompatible with the purposes for which it was originally collected. The primary purposes for which we use your data are as follows:

• Account management: To create, maintain, and administer your gibajee player account, including processing your registration, verifying your identity, and managing your account settings and preferences.
• Payment processing: To facilitate deposits and withdrawals in BDT via bKash, Nagad, Rocket, Upay, Visa, and Mastercard, and to maintain accurate records of all financial transactions associated with your account.
• Legal and regulatory compliance: To fulfil our obligations under applicable Anti-Money Laundering (AML) regulations, Know Your Customer (KYC) requirements, and any other legal obligations. This includes verifying your identity and the source of funds where required.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, money laundering, account takeover attempts, and other activities that may breach our Terms & Conditions or applicable law.
• Responsible gaming: To monitor gameplay patterns for signs of problem gambling behaviour, to apply player-requested deposit limits or self-exclusion measures, and to fulfil our duty of care to all players on the platform.
• Platform personalisation: To tailor your experience on gibajee, including surfacing game recommendations, relevant promotional offers, and content that reflects your preferences and play history. You may opt out of personalisation at any time via your account settings.
• Customer support: To respond to your queries, complaints, and requests in a timely and accurate manner, and to maintain records of our communications for quality and dispute resolution purposes.
• Platform improvement: To analyse aggregated, anonymised usage data in order to improve the performance, reliability, and features of the gibajee platform over time.
• Marketing communications: To send you promotional offers, bonus notifications, and news about gibajee — but only where you have explicitly opted in to receive such communications. You may withdraw your consent and unsubscribe at any time.

We will never use your personal data for purposes unrelated to the operation of the gibajee platform without seeking your explicit consent first. We do not engage in automated decision-making or profiling that produces legal or similarly significant effects on you without human review.

Data Sharing & Third Parties

gibajee does not sell, rent, or trade your personal data. We may, however, share specific categories of your information with carefully selected third parties under the following strictly defined circumstances:

• Payment service providers: We share the minimum necessary financial data with bKash, Nagad, Rocket, Upay, Visa, Mastercard, and partner banks (including Dutch-Bangla Bank, BRAC Bank, and City Bank) solely to process your deposits and withdrawals. These providers operate under their own privacy frameworks and are contractually bound to handle your data securely.
• Identity verification partners: To fulfil our KYC obligations, we may share identity documents and related data with third-party verification services that are contractually bound to use this information exclusively for identity verification purposes and to delete it once the verification process is complete.
• Game technology providers: Our game providers — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — may receive anonymised session and gameplay data necessary for the technical operation of their games on our platform. These providers do not receive your identity or financial data.
• Legal and regulatory authorities: We may be required by law to disclose your personal data to law enforcement agencies, financial intelligence units, or other governmental bodies in Bangladesh or internationally, where such disclosure is required by a valid legal obligation. We will notify you of any such disclosure unless prohibited from doing so by law.
• Platform infrastructure providers: We work with cloud hosting, content delivery, and cybersecurity providers who may process certain technical data on our behalf as part of their contracted services. All such providers are bound by data processing agreements that strictly limit how they may use your data.

Cookies & Tracking Technologies

gibajee uses cookies and similar tracking technologies to ensure the platform functions correctly, to keep your session secure, and to understand how players interact with our services. A cookie is a small text file stored on your device by your web browser. The types of cookies we use are described below:

You can manage or delete cookies at any time through your browser settings. Please note that disabling certain cookies may affect the functionality of gibajee, including your ability to stay logged in or access certain platform features. For detailed guidance on managing cookies in your browser, refer to your browser's help documentation.

gibajee does not use third-party advertising cookies, tracking pixels, or social media tracking scripts that would enable external platforms to track your browsing behaviour on our site.

Data Security & Retention

gibajee employs a multi-layered approach to data security. Our technical and organisational security measures include the following:

• 256-bit TLS/SSL encryption for all data transmitted between your device and our servers, ensuring that your credentials and financial data cannot be intercepted in transit;
• Encrypted data storage for all sensitive personal and financial records held on our servers, with access restricted to authorised personnel only;
• Role-based access controls ensuring that individual team members can only access the categories of data required for their specific role;
• Regular security audits and penetration testing conducted by independent security specialists to identify and remediate vulnerabilities before they can be exploited;
• Two-factor authentication (2FA) available for player accounts and mandatory for all staff accessing internal systems that contain player data;
• Intrusion detection systems that monitor network traffic in real time for unusual patterns indicative of unauthorised access attempts.

Despite these measures, no system connected to the internet can be guaranteed to be completely impenetrable. If you become aware of any security vulnerability or suspect that your account has been compromised, please contact us immediately at support@gibajee.

Data Retention: We retain your personal data only for as long as is necessary to fulfil the purposes for which it was collected, to comply with our legal obligations, and to resolve any disputes or enforce our agreements. Specifically:

• Active account data is retained for the duration of your account's existence on gibajee;
• Following account closure, identity and transaction records are retained for a minimum of five (5) years to comply with applicable AML record-keeping obligations;
• Communication records (support chat transcripts, emails) are retained for two (2) years after the relevant interaction closes;
• Technical and usage logs are retained for up to twelve (12) months for security and performance analysis purposes, after which they are automatically deleted or anonymised.

Your Privacy Rights

As a player on gibajee, you hold a number of rights in relation to your personal data. We are committed to honouring these rights in a timely and transparent manner. Your rights include:

• Right of access: You may request a copy of the personal data that gibajee holds about you at any time. We will provide this information within 30 days of receiving a valid request.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. You may update basic account information directly through your account settings, or contact our support team for assistance.
• Right to erasure: In certain circumstances, you have the right to request the deletion of your personal data. Please note that we may be legally obligated to retain certain categories of data (such as transaction records for AML compliance) even following a deletion request.
• Right to restrict processing: You may request that we restrict the processing of your personal data in certain situations — for example, while a dispute about the accuracy of your data is being investigated.
• Right to data portability: You have the right to receive a copy of the personal data you have provided to us in a structured, commonly used, machine-readable format, and to request that we transmit this data directly to another service provider where technically feasible.
• Right to withdraw consent: Where processing is based on your consent (for example, for marketing communications or platform personalisation), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
• Right to object: You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on our legitimate interests, subject to our demonstrating compelling grounds that override your interests.

To exercise any of the rights listed above, please contact our support team at support@gibajee with the subject line "Privacy Request". We aim to acknowledge all privacy-related requests within 48 hours and to provide a substantive response within 30 calendar days.

Protection of Minors

gibajee is strictly an adult platform intended for players aged 18 and above. We do not knowingly collect, process, or store personal data from any individual under the age of 18. Our registration process includes mandatory age declarations and identity verification steps specifically designed to prevent minors from accessing the platform.

If we discover that personal data has been collected from a minor, we will immediately suspend the associated account, delete all personal data collected in connection with that account, and refund any deposits made — minus any withdrawals already processed — in accordance with our Terms & Conditions. We may also report the incident to the relevant authorities where required by law.

If you are a parent or guardian and believe that your child may have created an account on gibajee, please contact us immediately at support@gibajee. We treat reports of potential underage access with the highest priority and will investigate and act without delay.

Policy Updates & Contact

gibajee reserves the right to amend this Privacy Policy at any time in response to changes in applicable law, platform features, or industry best practice. When we make material changes to this policy, we will update the "Last Updated" date at the top of this page and, where the changes are significant, we will notify active account holders by email.

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your data. Your continued use of gibajee following the publication of any amendment to this policy constitutes your acceptance of the revised terms.

Previous versions of this Privacy Policy are available on request by contacting our support team. We maintain an archive of all prior versions with their respective effective dates.

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way in which gibajee handles your personal data, please reach out to our dedicated privacy team:

• Email: support@gibajee (subject line: "Privacy Query")
• Response time: We aim to acknowledge all privacy queries within 48 hours and to provide a full response within 30 calendar days (Bangladesh Standard Time, UTC+6).
• Escalation: If you are not satisfied with our response to a privacy complaint, you have the right to escalate the matter to the relevant data protection or consumer protection authority in your jurisdiction.