ebaje Privacy Policy

Introduction

ebaje ("we", "us", "our") is committed to safeguarding the privacy of all individuals who use the ebaje platform at ebaje.io ("the Platform"). This Privacy Policy sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by us.

Personal data means any information that can be used to identify you directly or indirectly — for example, your name, email address, phone number, payment details, IP address, or device identifiers. We take the privacy and security of this data very seriously and handle it in accordance with applicable data protection principles.

ebaje is an entertainment platform offering online sports betting, live casino games, slots, and related services to players in Bangladesh and other permitted jurisdictions. The personal data we collect is necessary to operate these services safely, fairly, and in compliance with anti-money-laundering and responsible gaming obligations.

Please read this policy carefully. If you have questions about any aspect of it, you can contact us at any time via the channels listed in Section 14. If you are under 21 years of age, you must not use the ebaje Platform and must not provide us with any personal data.

Data We Collect

ebaje collects the following categories of personal data in the course of operating the Platform:

Identity and Contact Information

• Full legal name
• Date of birth (for age verification — players must be 21 or older)
• Gender
• Email address
• Mobile phone number
• Residential address (including city, district, and postal code)

Identity Verification Documents

• National ID card (NID) number and scanned copy
• Passport or driving licence (where NID is unavailable)
• Proof of address documents (utility bills, bank statements)

Financial Information

• bKash, Nagad, Rocket, or Upay mobile wallet number
• Bank account details (for Dutch-Bangla Bank, BRAC Bank, Islami Bank, Sonali Bank, City Bank, and similar institutions) where used for deposits or withdrawals
• Transaction history — deposits, withdrawals, and associated amounts in BDT

Account and Activity Data

• Account username and encrypted password
• Betting history, game history, and session records
• Bonus claims and wagering activity
• Responsible gaming settings and self-exclusion status
• Communication records with ebaje support

Technical and Device Data

• IP address and approximate geographic location
• Device type, operating system, and browser version
• Pages visited on the Platform, time spent, and click paths
• Cookie identifiers and session tokens (see Section 6)

How We Collect Your Data

ebaje collects personal data through the following means:

• Direct provision: When you register an account, complete your profile, submit verification documents, make a deposit or withdrawal request, or contact our support team, you provide data to us directly.
• Automated collection: When you browse or use the Platform, our systems automatically collect technical data including your IP address, device identifiers, and browsing behaviour via cookies and similar tracking technologies.
• Payment processors: When you initiate a deposit or withdrawal via bKash, Nagad, Rocket, Upay, or a partner bank, the relevant payment provider shares transaction confirmation data with us to allow us to credit or debit your ebaje account balance.
• Identity verification providers: Where ebaje uses third-party KYC (Know Your Customer) services to verify your identity documents, those providers may return verification status and document metadata to us.
• Game providers: Third-party game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may share game session data and outcome records with us for settlement and auditing purposes.

How We Use Your Data

ebaje uses your personal data for the following purposes:

• Account management: To create, maintain, and administer your player account, including processing your registration, verifying your identity, and managing your account settings.
• Service delivery: To allow you to place bets, play casino games, deposit and withdraw funds, and access all features of the Platform.
• Age and identity verification: To confirm that you are at least 21 years of age and to verify your identity in accordance with anti-money-laundering obligations.
• Transaction processing: To process deposits and withdrawals via your chosen payment method, reconcile your account balance, and maintain accurate financial records.
• Responsible gaming: To monitor your gaming activity for signs of problem gambling, to enforce deposit limits and self-exclusion settings, and to provide responsible gaming tools and interventions where appropriate.
• Fraud prevention and security: To detect and prevent fraudulent activity, money laundering, multi-accounting, bonus abuse, and other prohibited activities described in our Terms & Conditions.
• Customer support: To respond to your enquiries, resolve disputes, and provide assistance through our 24/7 live chat and email support channels.
• Marketing communications: Where you have consented, to send you promotional offers, bonus notifications, and information about new features. You may withdraw this consent at any time by updating your account communication preferences.
• Platform improvement: To analyse aggregated, anonymised usage data to improve the design, performance, and content of the Platform.
• Legal compliance: To comply with applicable laws and regulations, respond to lawful requests from authorities, and exercise or defend legal claims.

Sharing Your Data

ebaje does not sell your personal data. We may share your data with the following categories of third parties, strictly to the extent necessary to deliver the services described in this policy:

• Payment processors: bKash, Nagad, Rocket, Upay, and partner banks receive the data necessary to execute your deposit and withdrawal transactions. These providers operate under their own privacy policies and data protection obligations.
• Identity verification providers: Third-party KYC providers receive your identity document data to perform age and identity verification checks on our behalf.
• Game studios: Third-party providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive session identifiers and stake/payout data to operate their games on the Platform.
• IT and infrastructure providers: Cloud hosting and cybersecurity partners who provide the infrastructure on which the Platform operates. These partners act under strict data processing agreements and may not use your data for their own purposes.
• Legal and regulatory authorities: Where we are required by law or by a lawful order to disclose personal data to a government body, law enforcement agency, or court, we will comply with that requirement. Where permitted, we will notify you of such a disclosure.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of the ebaje business, your personal data may be transferred to the acquiring entity, subject to the same data protection obligations described in this policy.

Cookies and Tracking Technologies

ebaje uses cookies and similar technologies to operate and improve the Platform. A cookie is a small text file placed on your device when you visit a website. Cookies allow the Platform to recognise your device on return visits, maintain your session, and remember your preferences.

Types of Cookies We Use

• Strictly necessary cookies: Required for the Platform to function. These include session authentication cookies that keep you logged in during your visit. The Platform cannot operate correctly without these cookies and they cannot be disabled.
• Functional cookies: These remember your preferences, such as language settings and display options, to personalise your experience on the Platform.
• Analytics cookies: These help us understand how players use the Platform by collecting aggregated, anonymised data on pages visited, time on site, and navigation paths. This data is used solely to improve Platform performance and content.
• Security cookies: Used to detect and prevent fraudulent activity, including bot activity and multi-accounting attempts.

ebaje does not use third-party advertising cookies or behavioural tracking cookies that monitor your activity across other websites.

You can manage cookie preferences through your browser settings. Disabling strictly necessary cookies may prevent you from using certain features of the Platform. For full details on how to manage cookies in your browser, refer to your browser's help documentation.

Data Security

ebaje implements a range of technical and organisational measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• SSL/TLS encryption: All data transmitted between your device and the ebaje Platform is encrypted using industry-standard SSL/TLS protocols.
• Password hashing: Account passwords are never stored in plain text. They are processed using a cryptographic hashing algorithm before storage, meaning that even ebaje staff cannot view your password.
• Access controls: Access to personal data within ebaje is restricted to personnel and systems that have a specific operational need for that data. All staff with access to personal data are subject to confidentiality obligations.
• Secure infrastructure: The Platform is hosted on secure infrastructure with regular security audits, vulnerability assessments, and intrusion detection systems in place.
• Two-factor authentication: ebaje supports and encourages the use of two-factor authentication (2FA) on player accounts to provide an additional layer of protection against unauthorised access.

While ebaje takes all reasonable steps to protect your data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials. If you suspect that your account has been compromised, please contact our support team immediately via live chat.

Data Retention

ebaje retains your personal data for as long as your account remains active and for a period thereafter as required by applicable legal and regulatory obligations. The following general retention periods apply:

• Account and identity data: Retained for the duration of your account and for a minimum of five years following account closure, to satisfy anti-money-laundering record-keeping requirements.
• Transaction records: Retained for a minimum of five years from the date of the transaction, in accordance with financial record-keeping standards.
• Betting and game history: Retained for a minimum of three years from the date of each session, for dispute resolution and auditing purposes.
• Support communication records: Retained for two years from the date of the interaction, to allow us to reference prior communications in the event of related future enquiries.
• Technical and device data: Retained for up to 12 months from collection, after which it is anonymised or deleted.

Data that is no longer required for the purposes for which it was collected and is not subject to a legal retention obligation will be securely deleted or irreversibly anonymised.

Your Rights

As a player on the ebaje Platform, you have the following rights in relation to your personal data:

• Right of access: You have the right to request a copy of the personal data that ebaje holds about you. We will provide this within a reasonable timeframe upon receipt of a verified request.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it.
• Right to erasure: You may request that ebaje delete your personal data where it is no longer necessary for the purposes for which it was collected, subject to any overriding legal retention obligations.
• Right to object: You have the right to object to the processing of your personal data for marketing purposes. You may exercise this right at any time by updating your communication preferences in your account dashboard.
• Right to restrict processing: In certain circumstances, you may request that ebaje restrict the processing of your data while a dispute about its accuracy or the lawfulness of processing is resolved.
• Right to data portability: Where processing is based on your consent or on a contract, you have the right to receive your personal data in a structured, commonly used, machine-readable format.

To exercise any of these rights, please contact the ebaje support team via live chat or email at [email protected]. We may need to verify your identity before processing a data rights request. We aim to respond to all requests within 30 days.

Minors

The ebaje Platform is strictly for persons aged 21 and above. ebaje does not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory step in the account registration and withdrawal process.

If ebaje discovers that personal data has been collected from a person under the age of 21, that data will be deleted immediately and the associated account will be permanently closed. If you believe that a minor has registered on the Platform, please contact us immediately at [email protected] so that we can investigate and take appropriate action.

Parents and guardians who are concerned about underage gambling are encouraged to use parental control software to restrict access to gambling websites. ebaje supports responsible gaming initiatives and takes underage gambling seriously.

International Data Transfers

The ebaje Platform serves players primarily in Bangladesh. Some of the third-party service providers used by ebaje — including cloud infrastructure providers, identity verification services, and game studios — may be located in or process data in countries outside Bangladesh.

Where personal data is transferred to service providers in other jurisdictions, ebaje ensures that appropriate safeguards are in place to protect the data, including contractual obligations requiring the receiving party to apply data protection standards equivalent to those described in this policy.

By using the ebaje Platform, you acknowledge that your personal data may be transferred to and processed in jurisdictions outside Bangladesh for the purposes described in this policy.

Third-Party Links

The ebaje Platform may contain references to third-party services such as payment providers and game studios. These third parties operate under their own privacy policies, which ebaje does not control. ebaje is not responsible for the privacy practices of any third party.

We encourage you to review the privacy policies of any third-party service you use in connection with the ebaje Platform, particularly bKash, Nagad, Rocket, Upay, and the game studios whose titles are available on the Platform.

Changes to This Privacy Policy

ebaje reserves the right to update this Privacy Policy at any time. Where changes are material — for example, where we change the categories of data we collect, the purposes for which we use it, or the third parties with whom we share it — we will notify registered players via the email address associated with their account and via a prominent notice on the Platform, with a minimum of seven days' notice before the changes take effect.

Your continued use of the Platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. The date at the top of this policy reflects when it was last reviewed. We recommend that you revisit this page periodically to stay informed about how ebaje handles your data.

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data ebaje holds about you, please contact our support team through the following channels:

• Live Chat: Available 24/7 inside your ebaje account dashboard, in Bangladesh Standard Time (UTC+6).
• Email: [email protected] (plain text — not a clickable link)
• WhatsApp: +880 1700 000000

For data rights requests — including access, rectification, erasure, or portability requests — please contact us via email with the subject line "Data Rights Request" and include your registered account username so we can verify your identity before processing the request.

For questions about responsible gaming, self-exclusion, and account limits, please visit our Responsible Gaming page or speak directly with a member of our support team via live chat.