mbajee Privacy
Policy

mbajee is an online gaming platform operating at mbajee.club, offering card games, slots, bingo, dice, and sports betting products to players in Bangladesh. When this Privacy Policy refers to "mbajee", "we", "us", or "our", it means the mbajee platform and the team responsible for operating it.

mbajee acts as the data controller for all personal information collected through the platform. This means we determine the purposes and means of processing your personal data, and we are responsible for ensuring that processing is carried out lawfully and transparently.

mbajee collects personal data in three main ways: information you provide directly, information generated by your use of the platform, and information received from third-party verification services. Here is a breakdown of what we collect and why:

mbajee does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health data, except where directly relevant to a responsible gaming assessment and with your explicit consent.

mbajee uses your personal data for the following purposes:

• Account management: Creating and maintaining your mbajee account, verifying your identity, and managing your login credentials.
• Payment processing: Handling deposits and withdrawals via bKash, Nagad, and Rocket, and maintaining accurate transaction records.
• Customer support: Responding to your queries, resolving disputes, and providing assistance when you contact the mbajee support team.
• Fraud prevention and security: Monitoring for suspicious activity, detecting multiple accounts, and protecting the integrity of the mbajee platform.
• Legal compliance: Meeting our obligations under applicable laws, including anti-money laundering (AML) requirements and age verification regulations.
• Responsible gaming: Monitoring your gaming patterns to identify potential problem gambling behaviour and providing appropriate support tools.
• Marketing communications: Sending you information about mbajee promotions, bonuses, and new games — but only where you have given your consent to receive such communications.
• Platform improvement: Analysing usage patterns in aggregate to improve the mbajee platform, fix bugs, and develop new features.

mbajee processes your personal data on the following legal bases:

• Contract performance: Processing necessary to provide the mbajee service you have signed up for, including account management and payment processing.
• Legal obligation: Processing required to comply with applicable laws, such as identity verification, AML checks, and record-keeping requirements.
• Legitimate interests: Processing carried out for mbajee's legitimate business interests, such as fraud prevention, platform security, and improving our services — provided these interests are not overridden by your rights.
• Consent: Processing based on your explicit consent, such as sending marketing communications. You can withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

mbajee does not sell your personal data. We share your data only in the following limited circumstances:

• Payment processors: We share necessary financial data with bKash, Nagad, and Rocket to process your transactions. These providers are bound by their own privacy policies and data protection obligations.
• Identity verification providers: We may share identity documents with certified KYC verification services to confirm your age and identity. These providers process data solely for verification purposes.
• Legal authorities: We may disclose personal data to law enforcement, regulatory bodies, or courts where required by law or in response to a valid legal request.
• Fraud prevention agencies: We may share data with fraud prevention organisations to protect mbajee and its players from financial crime.
• Business transfers: In the event of a merger, acquisition, or sale of mbajee assets, your personal data may be transferred to the acquiring entity, subject to the same privacy protections described in this policy.

mbajee uses cookies and similar tracking technologies to operate the platform effectively and improve your experience. Here is what we use and why:

• Essential cookies: Required for the mbajee platform to function. These include session cookies that keep you logged in and security cookies that protect against cross-site request forgery. You cannot opt out of essential cookies.
• Analytics cookies: Help us understand how players use mbajee — which pages are visited most, where players drop off, and how long sessions last. This data is aggregated and anonymised.
• Preference cookies: Remember your settings and preferences on mbajee, such as your preferred language or display settings.
• Marketing cookies: Used to show you relevant mbajee promotions. These are only set with your consent and can be disabled at any time through your browser settings.

You can manage your cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of the mbajee platform.

mbajee retains your personal data for as long as necessary to fulfil the purposes for which it was collected, including satisfying any legal, accounting, or reporting requirements. Specific retention periods are as follows:

• Account data: Retained for the duration of your mbajee account and for up to 5 years after account closure, as required for legal and compliance purposes.
• Transaction records: Retained for a minimum of 5 years from the date of the transaction, in line with financial record-keeping requirements.
• Identity verification documents: Retained for up to 5 years after account closure or the completion of the verification process.
• Support communications: Retained for up to 2 years from the date of the last communication.
• Marketing data: Retained until you withdraw consent or request deletion, whichever comes first.

As an mbajee player, you have the following rights over your personal data. You can exercise any of these rights by contacting us at [email protected]:

mbajee takes the security of your personal data seriously. We have implemented a range of technical and organisational measures to protect your information against unauthorised access, loss, destruction, or alteration:

• All data transmitted between your device and mbajee is encrypted using TLS (Transport Layer Security).
• Passwords are stored using one-way hashing algorithms — mbajee staff cannot see your password.
• Access to personal data within mbajee is restricted on a need-to-know basis and all access is logged.
• Our systems are monitored continuously for suspicious activity and potential security threats.
• We conduct regular security reviews and penetration testing to identify and address vulnerabilities.

While mbajee takes every reasonable precaution to protect your data, no online platform can guarantee absolute security. In the event of a data breach that is likely to affect your rights, mbajee will notify you promptly and take immediate steps to contain the breach.

mbajee is strictly an 18+ platform. We do not knowingly collect personal data from anyone under the age of 18. If you are a parent or guardian and believe that a minor has registered on mbajee or provided us with personal data, please contact us immediately at [email protected].

Upon receiving such a report, mbajee will promptly investigate, close the account if the user is found to be underage, and delete all associated personal data as quickly as possible in accordance with our legal obligations.

mbajee may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or the services we offer. When we make changes, we will update the "last updated" date at the top of this page.

For significant changes that materially affect how we use your personal data, mbajee will notify registered players via email or an in-platform notification before the changes take effect. We encourage you to review this Privacy Policy periodically to stay informed about how mbajee protects your information.

Your continued use of mbajee after the publication of an updated Privacy Policy constitutes your acknowledgement of the changes. If you do not agree with the updated policy, you should stop using mbajee and contact us to close your account and request data deletion.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way mbajee handles your personal data, please get in touch with our privacy team:

• Email: [email protected]
• Response time: We aim to respond to all privacy-related enquiries within 48 hours.
• Data requests: Subject access requests and deletion requests will be processed within 30 days.
• FAQ: Visit our FAQ page for quick answers to common questions about your account and data.

For questions about your account, responsible gaming tools, or general platform support, you can also visit our FAQ page or reach out to the mbajee support team at any time — we are available 24 hours a day, 7 days a week.