rbaiee Privacy
Policy

1 Introduction

rbaiee ("we", "us", "our", or "the Platform") is committed to protecting the privacy and personal data of every individual who visits, registers with, or interacts with the rbaiee website and associated services. This Privacy Policy has been drafted to provide clear, honest and complete information about our data practices.

rbaiee operates as an online casino and sports betting platform serving the Bangladesh market. We recognise that trust is the cornerstone of our relationship with players from Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, and across the country. Protecting your personal data is not merely a legal obligation — it is a business and ethical commitment we take seriously.

This policy applies to all personal data collected through the rbaiee website, mobile browser experience, customer support channels, and any other touchpoint through which you interact with rbaiee. It applies equally to registered account holders and to anonymous visitors who browse the platform without creating an account.

Please read this Privacy Policy in full before submitting any personal data to rbaiee. If you have questions about any provision in this document, contact our support team at [email protected] before proceeding with registration.

2 Personal Data We Collect

rbaiee collects the following categories of personal data, depending on how you interact with the platform:

rbaiee does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, biometric data used for identification, health data, or data concerning sexual orientation — unless such data is voluntarily disclosed by the user in a support communication, in which case it will not be processed for any purpose beyond resolving the immediate support matter.

3 How We Collect Your Data

rbaiee collects personal data through the following channels and mechanisms:

• Direct submission: Data you enter into account registration forms, deposit/withdrawal forms, KYC document upload portals, customer support chat, and email correspondence.
• Automated technical collection: Log files, server records, and analytics tools automatically capture technical data (IP address, device identifiers, session times) each time you access the rbaiee website.
• Cookies and similar technologies: rbaiee uses cookies and similar tracking technologies to maintain session state, remember your preferences, and analyse platform usage patterns. See Section 7 for full cookie details.
• Payment processors: When you initiate a deposit or withdrawal via bKash, Nagad, Rocket, Upay or a banking partner, the payment processor confirms transaction status and reference data to rbaiee. rbaiee does not receive or store your full bKash PIN, bank password, or card CVV at any point.
• Third-party identity verification services: For KYC compliance, rbaiee may use an automated document verification service to authenticate government-issued ID documents. These services return a verification result to rbaiee without storing your document data independently.

4 Legal Basis for Processing

rbaiee processes your personal data on the following legal grounds, depending on the specific processing activity:

• Contractual necessity: Processing required to register your account, verify your identity, process deposits and withdrawals, maintain your account balance, and deliver the services you have requested. Without this processing, rbaiee cannot provide its services.
• Legal obligation: Processing required to comply with applicable laws, including anti-money laundering (AML) regulations, Know Your Customer (KYC) requirements, fraud prevention obligations, and responses to lawful requests from regulatory or law enforcement authorities.
• Legitimate interests: Processing carried out for rbaiee's legitimate business interests, including platform security monitoring, fraud detection, prevention of prohibited conduct, improving platform features, and internal analytics — provided these interests do not override your fundamental privacy rights.
• Consent: Where rbaiee sends optional marketing communications (e.g., promotional emails, bonus newsletters), this is done on the basis of your explicit opt-in consent, which you may withdraw at any time.

5 How We Use Your Personal Data

The personal data rbaiee collects is used for the following specific purposes:

• Account management: Creating and maintaining your rbaiee player account, processing login authentication, and managing account settings.
• Identity verification (KYC): Verifying that you are who you claim to be, confirming you meet the 18+ age requirement, and ensuring you are not a restricted or self-excluded player.
• Transaction processing: Processing deposits and withdrawals in BDT (৳) via bKash, Nagad, Rocket, Upay, BRAC Bank, Dutch-Bangla Bank, City Bank, Visa and Mastercard.
• Customer support: Responding to your queries, resolving disputes, and providing account assistance via email and live chat.
• Responsible gaming compliance: Monitoring account activity to identify patterns consistent with problem gambling, enforcing self-exclusion requests, and implementing deposit limits and cooling-off periods as requested.
• Fraud prevention and security: Detecting and preventing unauthorised account access, money laundering, bonus abuse, multi-accounting, and other prohibited activities.
• Legal compliance: Meeting our obligations under applicable Bangladeshi law and responding to lawful requests from government authorities.
• Platform improvement: Analysing aggregated, anonymised usage data to understand how players interact with rbaiee and to improve features, navigation, and game offerings.
• Marketing (with consent): Sending promotional emails, bonus notifications, and cricket/sports betting updates to players who have opted in to marketing communications.

6 Data Sharing & Disclosure

rbaiee does not sell, rent or trade your personal data to any third party for marketing or commercial purposes. Your personal data may be shared only in the following limited and controlled circumstances:

• Payment processors: Transaction data is shared with bKash, Nagad, Rocket, Upay, and banking partners solely for the purpose of processing your deposit or withdrawal. Each payment provider operates under its own privacy policy and data protection obligations.
• Identity verification providers: KYC document data may be processed by a contracted third-party verification service operating under strict confidentiality and data protection terms with rbaiee.
• Game content providers: Game session data (bets placed, outcomes, session duration) may be shared with game content providers such as Evolution Gaming, Pragmatic Play, Ezugi, Spribe, Microgaming and NetEnt to the extent necessary for game operation, dispute resolution, and regulatory reporting by those providers.
• Legal and regulatory authorities: rbaiee will disclose personal data to law enforcement, regulatory bodies or courts of competent jurisdiction where legally required to do so, including in response to valid court orders, government investigations, or anti-money laundering reporting obligations.
• Business successors: In the event of a merger, acquisition, or sale of substantially all of rbaiee's assets, player data may be transferred to the acquiring entity, subject to equivalent privacy protections being maintained. Players will be notified of such a transfer in advance where practically possible.

All third parties who process personal data on rbaiee's behalf are required by contract to maintain appropriate technical and organisational security measures and to process data only in accordance with rbaiee's instructions and applicable law.

7 Cookies & Tracking Technologies

rbaiee uses cookies — small text files stored on your device — and similar tracking technologies to operate and improve the platform. The cookies used by rbaiee fall into the following categories:

• Strictly necessary cookies: Required for the platform to function correctly. These include session authentication cookies that keep you logged in and security cookies that protect against cross-site request forgery. These cookies cannot be disabled.
• Functional cookies: Remember your preferences such as language settings, preferred game categories, and last-visited sections to personalise your experience on return visits.
• Analytics cookies: Collect anonymised data about how visitors navigate the rbaiee website — pages visited, time spent, entry and exit pages. This data is used in aggregate to improve platform design. rbaiee uses self-hosted analytics tools and does not send this data to third-party advertising networks.
• Security and fraud-detection cookies: Support rbaiee's fraud detection systems by helping to identify unusual patterns of access or suspicious activity across sessions.

Most web browsers allow you to control cookies through their settings. You can configure your browser to refuse all cookies, accept only first-party cookies, or delete existing cookies. Note that disabling strictly necessary cookies will prevent you from logging into your rbaiee account and using core platform features.

8 Data Retention

rbaiee retains your personal data for as long as is necessary to fulfil the purposes described in this Privacy Policy, subject to the following retention guidelines:

• Active account data: Retained for the full duration of your account's active status plus a minimum of 5 years following account closure, in order to comply with anti-money laundering record-keeping obligations and to resolve any post-closure disputes.
• KYC verification documents: Retained for a minimum of 5 years from the date of verification or from the date of account closure, whichever is later.
• Transaction records: Financial transaction logs are retained for a minimum of 7 years in accordance with financial record-keeping best practices and applicable regulatory requirements.
• Customer support communications: Support chat transcripts and email correspondence are retained for 3 years from the date of the interaction.
• Marketing consent records: Records of your consent to (or opt-out from) marketing communications are retained for the duration of your account plus 3 years.
• Technical and session logs: Server log files are retained for up to 12 months on a rolling basis for security monitoring purposes, then securely deleted.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Anonymised, aggregated data (from which you cannot be identified) may be retained indefinitely for statistical and platform improvement purposes.

9 Data Security

rbaiee employs a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. Our security infrastructure includes:

• 256-bit SSL/TLS encryption on all data transmitted between your device and rbaiee servers.
• Encrypted database storage for sensitive fields including passwords (stored as salted cryptographic hashes, never in plain text), financial data, and KYC document files.
• Role-based access controls ensuring that rbaiee staff can only access personal data that is necessary for their specific job function. Support agents do not have access to financial account numbers or KYC document files unless operationally required.
• Two-factor authentication (2FA) available to all players and mandatory for all rbaiee administrative staff accounts.
• Regular security audits and vulnerability assessments conducted on the rbaiee platform infrastructure.
• Intrusion detection systems that monitor for suspicious access patterns and automatically flag or block anomalous activity.

Despite these measures, no internet-based system can guarantee absolute security. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, rbaiee will notify affected players without undue delay and will take all reasonable steps to mitigate the impact of the breach.

10 Your Data Rights

As an rbaiee account holder, you have the following rights in relation to your personal data:

• Right of access: You may request a copy of all personal data rbaiee holds about you. rbaiee will provide this within 30 days of a verified request.
• Right to rectification: You may request correction of any inaccurate or incomplete personal data held on your account. You can update basic contact details directly in your account settings; other corrections should be requested via support.
• Right to erasure ("right to be forgotten"): You may request deletion of your personal data. Note that rbaiee may be legally required to retain certain data (e.g., transaction records, KYC documents) for the retention periods set out in Section 8, even after account closure.
• Right to restrict processing: You may request that rbaiee restricts the processing of your data in certain circumstances — for example, while a dispute about data accuracy is being resolved.
• Right to data portability: You may request a copy of your personal data in a structured, commonly used, machine-readable format (e.g., CSV) for data that you provided directly and that is processed on the basis of contract or consent.
• Right to withdraw consent: Where rbaiee processes your data on the basis of consent (e.g., marketing emails), you may withdraw that consent at any time by clicking the unsubscribe link in any marketing email or by contacting [email protected].
• Right to object: You may object to processing carried out on the basis of legitimate interests. rbaiee will honour such objections unless it can demonstrate compelling legitimate grounds that override your interests.

To exercise any of the above rights, submit a written request to [email protected] with the subject line "Data Rights Request". We will verify your identity before processing the request and will respond within 30 days. Where a request is complex or numerous, the response period may be extended by a further 30 days, in which case you will be notified.

11 Children's Privacy

The rbaiee platform is strictly intended for adults aged 18 and above. rbaiee does not knowingly collect, process or store personal data from individuals under the age of 18. The registration process includes mandatory age verification steps, and KYC procedures are designed to detect and reject underage applicants.

If rbaiee discovers that an account has been registered by a person under the age of 18, or that personal data belonging to a minor has been collected in error, the account will be immediately suspended, all funds will be frozen pending investigation, and the minor's personal data will be securely deleted from rbaiee systems as soon as practically possible. Any deposits made by a minor will be returned to the originating payment method following verification. 18+

If you are a parent or guardian and believe that your child has created an rbaiee account, please contact [email protected] immediately. We will act on such notifications as a priority.

12 Marketing Communications

rbaiee may send you promotional communications including bonus offers, cricket and BPL betting updates, tournament announcements, seasonal promotions (such as Eid, Pohela Boishakh or IPL season offers), and new game launch notifications — but only if you have provided your explicit consent to receive such communications during or after registration.

You may opt out of marketing communications at any time by:

• Clicking the "Unsubscribe" link found at the bottom of any rbaiee marketing email.
• Logging into your account and updating your communication preferences in the account settings panel.
• Contacting the support team at [email protected] with the subject line "Unsubscribe from Marketing".

Please note that opting out of marketing communications does not affect transactional communications such as deposit confirmations, withdrawal notifications, KYC requests, or security alerts. These service-essential communications will continue to be sent regardless of your marketing preferences.

13 Third-Party Services & Links

The rbaiee platform integrates third-party game content from providers including Evolution Gaming, Ezugi, Pragmatic Play, Spribe, Microgaming and NetEnt. When you launch and play a game delivered by one of these providers, your gameplay data (session ID, bets, outcomes) is processed jointly by rbaiee and the relevant provider for operational and regulatory purposes. Each provider operates under its own privacy and data protection policies, which rbaiee recommends you review independently.

The rbaiee platform does not contain outbound links to third-party websites for commercial or advertising purposes. Where links to our own internal pages (such as Responsible Gaming, Terms & Conditions, or FAQ) appear in this document, these remain within the rbaiee platform and are governed by this same Privacy Policy.

14 International Data Transfers

rbaiee primarily serves players based in Bangladesh and processes most personal data within the region. However, certain technical service providers (such as cloud infrastructure providers and game content delivery networks) may process data in server facilities located outside Bangladesh.

Where personal data is transferred internationally, rbaiee takes steps to ensure that appropriate safeguards are in place, including contractual clauses requiring the receiving entity to apply data protection standards equivalent to those described in this Privacy Policy. rbaiee does not transfer personal data to jurisdictions that are known to have inadequate data protection frameworks without implementing additional compensating controls.

15 Amendments to This Policy

rbaiee reserves the right to amend, update or replace this Privacy Policy at any time. Where changes materially affect your rights or the way your data is processed, rbaiee will notify registered players by email and by posting a prominent notice on the rbaiee website prior to the changes taking effect.

Minor updates such as typographic corrections, clarifications that do not alter the substance of the policy, or updates to reflect new features that do not change the data processing purposes may be made without advance notice. The effective date at the top of this document will always reflect the date of the most recent revision.

Your continued use of the rbaiee platform following the publication of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the revised policy, you must cease using the platform and may request account closure by contacting [email protected].

16 Contact & Complaints

If you have any questions, concerns or complaints about this Privacy Policy or about rbaiee's data processing practices, please contact our dedicated privacy team using the details below. All correspondence regarding data privacy matters should be submitted in English.

• Email: [email protected]
• Subject line for data rights requests: "Data Rights Request"
• Subject line for privacy complaints: "Privacy Complaint"
• Response time: Within 5 business days for general enquiries; within 30 days for formal data rights requests
• Support hours: 24 hours a day, 7 days a week (Bangladesh Standard Time, UTC+6)

rbaiee takes all privacy complaints seriously. Upon receipt of a complaint, we will acknowledge it within 5 business days, conduct a thorough internal investigation, and provide a substantive written response within 30 days. Where a complaint cannot be resolved within 30 days due to complexity, we will keep you informed of progress at regular intervals until resolution.

If you are not satisfied with rbaiee's response to your privacy complaint, you retain the right to escalate the matter to the appropriate regulatory authority or to seek independent legal advice.