🔒 Data Protection
Privacy Policy — bibaji Bangladesh
Your privacy matters to us. This Privacy Policy explains exactly what personal data bibaji collects, why we collect it, how we use it, and the rights you hold as a registered player on our platform.
Welcome to the bibaji Privacy Policy. This document governs how bibaji collects, processes, stores, and protects the personal data of all registered players and visitors to the bibaji platform. By registering a bibaji account or using any part of the bibaji website, you confirm that you have read, understood, and agreed to the terms set out in this Privacy Policy.
bibaji is committed to protecting the privacy of every player across Bangladesh — whether you are based in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, or anywhere else in the country. We operate in accordance with applicable data protection standards and apply industry-best security practices to keep your personal information safe at all times.
This Privacy Policy applies to all personal data collected through the bibaji website, mobile experience, live chat, email, Telegram support, and any other channel through which you interact with bibaji. If you do not agree with any part of this Privacy Policy, you must discontinue use of the platform immediately and contact [email protected] to request account closure.
1. Data We Collect
bibaji collects personal data only when it is necessary to provide our services, verify your identity, process your transactions, and comply with applicable legal obligations. We do not collect data beyond what is reasonably required for these purposes. The categories of personal data bibaji may collect include:
Category 1.1
Registration & Identity Data
When you create a bibaji account, we collect your full legal name, date of birth, residential address, nationality, email address, and mobile phone number. This information is required to establish your account, verify your age (21+ requirement), and meet our identity verification obligations.
Category 1.2
Payment & Transaction Data
We collect records of all deposits and withdrawals made through your bibaji account, including the payment method used (bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, City Bank), transaction reference numbers, amounts in BDT, and timestamps. We do not store full card numbers or bKash PINs — payment authentication is handled directly by the respective payment provider.
Category 1.3
Device & Technical Data
When you access bibaji, we automatically collect your IP address, device type, operating system, browser type and version, screen resolution, session duration, pages visited, and referring URL. This data is used to improve platform performance, detect fraud, and ensure platform security. We may also collect a unique device identifier for fraud prevention purposes.
Category 1.4
Gameplay & Betting Data
bibaji maintains detailed records of all gaming and betting activity on your account, including game types played, bet amounts, outcomes, session times, and responsible gaming tool usage. This data is used for account management, dispute resolution, and regulatory compliance purposes.
Category 1.5
Communication Data
If you contact bibaji via email, live chat, or Telegram, we retain records of those communications including the content of messages, timestamps, and any attachments. This data is used to respond to your queries, resolve disputes, and improve our customer support service.
Category 1.6
Verification Documents
When identity verification is required, we may collect copies of government-issued identification documents such as your National ID card, passport, or driving licence, along with proof of address documents such as a utility bill or bank statement. These documents are stored securely and accessed only by authorised verification personnel.
2. How We Use Your Data
bibaji processes your personal data for specific, legitimate purposes only. We do not use your data for purposes beyond those stated in this Privacy Policy without first obtaining your consent. The primary purposes for which bibaji processes personal data are as follows:
Summary of key uses: Account management · Age and identity verification · Payment processing · Fraud detection and prevention · Responsible gaming monitoring · Customer support · Platform security · Legal compliance · Aggregate analytics (anonymised). bibaji does NOT use your data for third-party advertising profiling or sell your data to marketing companies.
Use 2.1
Account Management
We use your registration data to create and maintain your bibaji account, authenticate your login sessions, update your account settings, and send you transactional communications such as deposit confirmations, withdrawal approvals, and security alerts.
Use 2.2
Identity & Age Verification
bibaji is required to verify that all players are at least 21 years of age before allowing real-money play. We process your identity data and verification documents for this purpose. Where automated verification is not possible, documents are reviewed by trained verification staff. Verified status is stored on your account record.
Use 2.3
Payment Processing
We share the minimum necessary transaction data with our payment partners — including bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, and City Bank — to process your deposits and withdrawals. Payment partners receive only the data required to complete the transaction and are contractually prohibited from using it for any other purpose.
Use 2.4
Fraud Detection & Platform Security
bibaji uses technical and behavioural data — including IP addresses, device fingerprints, login patterns, and betting behaviour — to identify and prevent fraudulent activity, bonus abuse, multi-accounting, money laundering, and other prohibited conduct. Automated fraud detection systems may flag accounts for manual review.
Use 2.5
Responsible Gaming
We monitor gameplay data and account behaviour to identify potential signs of problem gambling, in line with our responsible gaming obligations. If our systems or support team identify concerning patterns, we may proactively contact you to discuss responsible gaming tools, including deposit limits, session reminders, and self-exclusion.
Use 2.6
Legal & Regulatory Compliance
bibaji may be required by law to retain certain categories of personal data for specified periods, or to disclose data to law enforcement or regulatory authorities upon receipt of a valid legal order. In such cases, bibaji will comply with its legal obligations while taking reasonable steps to notify affected players where disclosure is not legally prohibited.
3. Data Sharing & Third Parties
bibaji does not sell, rent, or trade your personal data to third parties for commercial or marketing purposes. We share personal data only in the limited circumstances described below, and only to the extent strictly necessary for the stated purpose.
| Third Party | Purpose | Data Shared |
|---|---|---|
| bKash, Nagad, Rocket, Upay | Mobile payment processing | Transaction amount, reference, account number |
| Visa, Mastercard | Card payment processing | Masked card data, transaction reference |
| Dutch-Bangla Bank, City Bank | Bank transfer processing | Account name, amount, reference |
| Identity verification providers | Age and KYC verification | Name, date of birth, ID document images |
| Game providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi) | Game delivery and fairness | Session token, game result data (anonymised) |
| Law enforcement / regulatory bodies | Legal compliance (upon valid legal order only) | Data specified in the legal order |
All third-party service providers engaged by bibaji are required to execute data processing agreements that obligate them to handle your personal data securely, use it only for the purposes specified, and comply with applicable data protection standards. bibaji conducts due diligence on all third-party processors prior to engagement.
4. Cookies & Tracking
bibaji uses cookies and similar tracking technologies to operate the platform, remember your preferences, detect fraud, and analyse aggregate usage patterns. Cookies are small text files placed on your device by your browser when you visit bibaji. The types of cookies used by bibaji are described below.
Cookie Type 4.1
Strictly Necessary Cookies
These cookies are essential for the bibaji platform to function. They maintain your login session, remember your account preferences, and support core security features. Strictly necessary cookies cannot be disabled without impairing platform functionality.
Cookie Type 4.2
Functional Cookies
Functional cookies remember your platform settings — such as your preferred language, last-visited game category, and responsible gaming tool configurations — so you do not need to reconfigure them on every visit. These cookies do not track you across external websites.
Cookie Type 4.3
Analytics Cookies
bibaji uses anonymised analytics tools to understand how players navigate the platform, which game categories are most popular, and where users encounter difficulties. Analytics data is aggregated and cannot be used to identify you individually. This data is used solely to improve the bibaji platform experience.
Cookie Type 4.4
Security & Fraud Prevention Cookies
These cookies help bibaji identify and block suspicious activity, including automated bot access, duplicate account creation, and session hijacking attempts. Security cookies are strictly necessary and cannot be disabled. They store a temporary encrypted device identifier that expires at the end of each session.
You can manage cookie preferences through your browser settings. Note that disabling non-essential cookies may affect certain platform features. bibaji does not use third-party advertising cookies or participate in cross-site behavioural advertising networks.
5. Data Security
bibaji applies a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security framework includes, but is not limited to, the following controls:
256-Bit SSL Encryption
All data transmitted between your device and bibaji servers is encrypted using 256-bit TLS/SSL protocols. This applies to login sessions, deposit flows, withdrawal requests, and all customer support communications. The padlock icon in your browser confirms the encrypted connection is active.
SMS Two-Factor Authentication
bibaji supports SMS two-factor authentication (2FA) on all accounts. When enabled, a one-time passcode is sent to your registered mobile number each time you log in from a new device. We strongly recommend all bibaji players enable 2FA to protect their accounts against unauthorised access.
Secure Data Storage
Personal data and payment records are stored on encrypted servers with access restricted to authorised personnel only. Identity verification documents are stored in isolated, access-controlled environments separate from general account data. Server access logs are maintained and reviewed regularly for anomalous activity.
Continuous Security Monitoring
bibaji employs automated security monitoring systems that operate 24 hours a day, 7 days a week. These systems detect and alert our security team to unusual login patterns, failed authentication attempts, abnormal transaction behaviour, and potential data breach indicators. Incidents are investigated and resolved promptly.
Data Minimisation & Retention Limits
bibaji retains personal data only for as long as it is necessary for the purposes for which it was collected, or as required by law. Transaction records are retained for a minimum of 5 years for anti-money-laundering compliance. After the applicable retention period expires, data is securely deleted or anonymised in accordance with our data retention schedule.
Staff Access Controls
Access to personal data within bibaji is restricted on a strict need-to-know basis. All staff members with access to personal data undergo background checks, receive data protection training, and are bound by confidentiality obligations. Access permissions are reviewed regularly and revoked immediately upon termination of employment or change of role.
6. Your Privacy Rights
As a bibaji player, you hold a set of rights in relation to your personal data. bibaji is committed to honouring these rights promptly and without undue restriction. To exercise any of the rights described below, contact our privacy team at [email protected] with your full name, registered email address, and a description of the request.
Right 6.1
Right of Access
You have the right to request a copy of the personal data bibaji holds about you. We will provide a complete data summary within 30 days of receiving a valid access request. The summary will include the categories of data held, the purposes for which it is processed, and the third parties with whom it has been shared.
Right 6.2
Right to Rectification
If any personal data bibaji holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update basic account information (email address, phone number, residential address) directly through your account settings. For updates to identity-verified fields such as your legal name or date of birth, contact [email protected] with supporting documents.
Right 6.3
Right to Erasure
You may request that bibaji delete your personal data. Erasure requests will be honoured where the data is no longer necessary for the purposes for which it was collected, and where no legal obligation requires its retention. Note that transaction records must be retained for a minimum of 5 years under anti-money-laundering regulations and cannot be erased during this period.
Right 6.4
Right to Restriction of Processing
You have the right to request that bibaji restricts the processing of your personal data in certain circumstances — for example, while the accuracy of the data is being contested, or while you have objected to processing and bibaji is considering that objection. During the restriction period, bibaji will continue to store the data but will not process it for other purposes.
Right 6.5
Right to Data Portability
Where bibaji processes your personal data on the basis of your consent or to perform a contract with you, you have the right to receive that data in a structured, commonly used, machine-readable format (such as CSV or JSON), and to transfer it to another service provider. Portability requests will be fulfilled within 30 days.
Right 6.6
Right to Object
You have the right to object to bibaji processing your personal data where that processing is based on legitimate interests. bibaji will cease processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms. You may also object at any time to processing of your data for direct marketing purposes.
To exercise any of the above rights, contact our privacy team: [email protected] or via Telegram @bibaji_support. bibaji will acknowledge all privacy rights requests within 48 hours and resolve them within 30 days. There is no charge for exercising your privacy rights. Requests that are manifestly unfounded or excessive may be subject to a reasonable administrative fee or may be refused, with written reasons provided.
7. Data Retention
bibaji retains different categories of personal data for different periods, depending on the purpose for which the data was collected and applicable legal requirements. Our general data retention schedule is summarised below. After the applicable retention period, data is securely deleted or irreversibly anonymised.
| Data Category | Retention Period | Basis |
|---|---|---|
| Account registration data | Duration of account + 2 years after closure | Contract / legal compliance |
| Transaction records | Minimum 5 years from transaction date | Anti-money-laundering regulations |
| Identity verification documents | 5 years from date of verification | KYC / legal compliance |
| Customer support communications | 2 years from last interaction | Legitimate interest / dispute resolution |
| Gameplay and betting records | 5 years from date of activity | Legal compliance / responsible gaming |
| Device and technical data (logs) | 90 days (security monitoring) | Legitimate interest / fraud prevention |
8. Children's Privacy — 21+ Only
⚠️ bibaji is strictly for adults aged 21 and above. We do not knowingly collect or process personal data from any person under the age of 21. If you believe that a person under 21 has registered a bibaji account or provided personal data to bibaji, please contact us immediately at [email protected]. Upon confirmation, the account will be closed immediately, all data will be deleted, and any funds will be returned to the originating payment method.
bibaji operates robust age-verification procedures as part of its account registration and KYC process. All players are required to confirm their age at registration, and identity documents are requested to verify the declared date of birth where automatic verification is inconclusive. bibaji takes its responsibilities in this area extremely seriously and does not tolerate underage gambling in any form.
9. Policy Updates
bibaji reserves the right to update this Privacy Policy at any time. When material changes are made, we will notify registered players via the email address on file or via an in-platform notification prior to the change taking effect. The "Last updated" date at the top of this page will always reflect the most recent revision.
We encourage you to review this Privacy Policy periodically to stay informed about how bibaji protects your data. Your continued use of the bibaji platform after any changes take effect constitutes your acceptance of the updated Privacy Policy. If you do not agree with the updated terms, you must cease using the platform and request account closure.
10. Contact Our Privacy Team
If you have any questions, concerns, or requests relating to this Privacy Policy or the way bibaji processes your personal data, please contact our privacy team using the details below. All privacy-related enquiries are handled by dedicated staff and will receive a response within 48 hours.
bibaji Privacy Team
Email: [email protected]
Telegram: @bibaji_support
Support hours: 24 hours a day, 7 days a week
Response time: within 48 hours for all privacy requests
Resolution time: within 30 days for all subject access and rights requests