ibaje Privacy Policy

ibaje collects personal information from you in three principal ways: information you provide directly when you register or use the platform, information generated automatically through your use of the service, and information obtained from trusted third-party sources where necessary for verification and compliance purposes.

Information You Provide Directly:

• Registration data: Your full legal name, date of birth, email address, and contact number provided when you create an ibaje account.
• Identity verification documents: Copies of government-issued photo identification (e.g., National Identity Card, passport, or driving licence) submitted during the KYC process to verify your age and identity.
• Payment information: Your payment method details, including mobile wallet identifiers (bKash, Nagad, Rocket, Upay) or card details (Visa, Mastercard), provided when making deposits or requesting withdrawals. ibaje does not store full card numbers — these are handled by our payment service providers using tokenisation.
• Communications: The content of any messages, emails, or live chat conversations you initiate with ibaje's customer support team.
• Responsible gaming declarations: Any self-exclusion requests, deposit limit preferences, or time-out settings you apply through the ibaje platform.

Information Collected Automatically:

• Device and browser data: Your IP address, device type, operating system, browser type and version, and screen resolution.
• Usage data: Pages visited on ibaje, games played, bets placed, session duration, click patterns, and navigation paths through the platform.
• Transaction records: A complete history of deposits, withdrawals, bonuses claimed, and bets placed on your ibaje account, retained for financial audit and compliance purposes.
• Cookies and similar technologies: Session identifiers, persistent preference cookies, and analytics identifiers. See the Cookies section below for full details.

Information from Third Parties: ibaje may receive identity and address verification data from trusted identity verification partners and payment processors operating in Bangladesh. This information is used solely to complete KYC obligations and prevent fraud. ibaje does not purchase marketing lists or obtain data from social media platforms without your explicit consent.

ibaje processes your personal data only for legitimate, defined purposes. We do not use your data in ways that are incompatible with the purposes described below. The primary legal bases for our processing are: (a) performance of the contract between you and ibaje (i.e., providing the betting and gaming service); (b) compliance with legal obligations; (c) your consent, where explicitly given; and (d) our legitimate interests in operating a secure, fair, and commercially viable platform.

Service Delivery: We use your registration and contact details to create and manage your ibaje account, process deposits and withdrawals, settle bets and casino game outcomes, and deliver account notifications including security alerts, transaction confirmations, and responsible gaming messages.

Identity and Age Verification: We process identity and date-of-birth data to confirm that you are at least 18 years of age before allowing you to deposit or wager real money. This is both a legal obligation and a core responsible gaming commitment of ibaje. We retain verification records for the legally required period.

Fraud Prevention and Security: ibaje analyses usage patterns, IP addresses, device fingerprints, and transaction behaviour to detect and prevent fraudulent activity, money laundering, account takeover, and bonus abuse. Where suspicious activity is identified, we may share relevant data with law enforcement or financial intelligence authorities as required by applicable law.

Customer Support: Communications data (support chat logs, email exchanges) is used to respond to your queries, resolve disputes, and improve the quality of ibaje's support service. Support interactions are retained for a period of 24 months for quality assurance and dispute resolution purposes.

Responsible Gaming Compliance: ibaje uses your gaming activity data — including session duration, deposit frequency, loss patterns, and self-exclusion history — to monitor for signs of problematic gambling behaviour and, where appropriate, to intervene in accordance with our responsible gaming obligations. This processing is a condition of operating a fair gaming platform.

Platform Improvement and Analytics: Aggregated, anonymised usage data helps ibaje understand how players navigate the platform, which games are most popular, and where technical issues arise. This analytics processing does not identify individual players and is used solely to improve the ibaje experience.

Marketing Communications: Where you have given explicit consent, ibaje may send you promotional emails or platform notifications about new games, seasonal bonus offers (such as those tied to BPL cricket season, Eid, or Pohela Boishakh), and platform updates. You may withdraw consent for marketing communications at any time by contacting [email protected]. Withdrawing marketing consent does not affect your ability to use the platform or receive service-critical notifications.

ibaje does not sell, rent, or trade your personal data to third parties for commercial purposes. We share your information only with the categories of recipient listed below, and only to the extent strictly necessary for the stated purpose.

Payment Service Providers: When you make a deposit or request a withdrawal, your payment details are processed by our partner payment service providers, including the operators of bKash, Nagad, Rocket, and Upay mobile financial services, as well as card payment processors handling Visa and Mastercard transactions. These providers are contractually required to handle your data securely and to use it only for payment processing purposes.

Identity Verification Partners: ibaje works with accredited identity and document verification services to conduct KYC checks. These partners receive the identity documents you submit and return a verification outcome. They are prohibited from using your documents for any purpose other than the verification requested by ibaje.

Game Technology Providers: Casino and sports betting content on ibaje is delivered through technology platforms provided by studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may process limited technical data (such as session tokens and bet outcomes) for the purposes of delivering game content and auditing results. They do not receive your personal identity or payment details.

Legal and Regulatory Authorities: ibaje may disclose personal data to relevant law enforcement agencies, financial intelligence units, or regulatory bodies where required to do so by applicable law, court order, or as part of an investigation into suspected criminal activity including money laundering or fraud. ibaje will not notify you of such disclosures where doing so would compromise an investigation or is prohibited by law.

Professional Advisers: ibaje's legal, audit, and compliance advisers may access personal data to the minimum extent necessary to provide their professional services. All such advisers are bound by confidentiality obligations.

Business Transfers: In the event that ibaje undergoes a merger, acquisition, or sale of all or part of its business, player data may be transferred as part of that transaction. ibaje will take reasonable steps to ensure that any acquiring entity is bound by data protection obligations consistent with this Privacy Policy, and will notify affected players where required.

ibaje uses cookies and similar tracking technologies to operate the platform effectively, remember your preferences, maintain your login session, and analyse how the platform is used. A cookie is a small text file placed on your device by your browser when you visit a website. ibaje uses the following categories of cookie:

Managing Cookies: You can control cookie behaviour through your browser settings. Most modern browsers allow you to block or delete cookies. Please note that disabling strictly necessary cookies will impair your ability to log in and use the ibaje platform. Disabling analytics or functional cookies will not prevent you from accessing the platform but may reduce the quality of your experience.

ibaje does not use third-party advertising cookies or retargeting pixels. Analytics data collected through cookies is aggregated and anonymised before being used for platform improvement purposes and is not linked back to your individual ibaje account.

Security Measures: ibaje implements a layered approach to data security. Technical measures in place include SSL/TLS encryption for all data in transit, AES-256 encryption for sensitive data at rest, access controls limiting staff access to personal data on a strict need-to-know basis, intrusion detection systems monitoring for unauthorised access attempts, and regular security audits of platform infrastructure. Organisational measures include mandatory data protection training for all ibaje staff who handle personal information and a formal incident response procedure.

Data Breach Notification: In the event of a personal data breach that poses a risk to your rights and freedoms, ibaje will notify affected players promptly via the registered contact details on their account. The notification will describe the nature of the breach, the categories of data affected, and the steps ibaje is taking to address the incident.

Retention Periods: ibaje retains personal data only for as long as is necessary for the purpose for which it was collected, or as required by applicable law. General retention guidelines are as follows:

• Active account data (identity, contact, financial history): Retained for the duration of the account relationship plus a minimum of 5 years after account closure, to meet financial record-keeping and anti-money-laundering obligations.
• KYC documents (ID scans, verification records): Retained for a minimum of 5 years from the date of submission, in accordance with financial compliance requirements.
• Transaction records (deposit and withdrawal history, bet records): Retained for a minimum of 5 years from the date of the transaction.
• Support communications (chat logs, emails): Retained for 24 months from the date of the last communication in the relevant thread.
• Analytics data (aggregated, anonymised usage data): Retained for up to 24 months, after which it is permanently deleted or further anonymised.
• Marketing consent records: Retained for the duration of the consent period plus 3 years following withdrawal of consent, as evidence of lawful processing.

When data is no longer required and its retention period has expired, ibaje securely deletes or irreversibly anonymises it so that it can no longer be linked to an individual player.

ibaje respects your right to control your personal information. The following rights are available to you as a player. To exercise any of these rights, contact ibaje at [email protected] with the subject line "Privacy Rights Request". ibaje will respond within a reasonable timeframe and in any event within 30 days of receiving your request. We may ask you to verify your identity before processing a rights request to protect your data from unauthorised access.

ibaje is strictly an adults-only platform. The ibaje service is intended exclusively for individuals who are 18 years of age or older. ibaje does not knowingly collect personal data from any person under the age of 18. Age verification is conducted as part of the registration and KYC process to prevent underage access to gambling services.

If ibaje becomes aware that personal data has been collected from a player who is under 18 years of age, the account will be immediately suspended, all associated data will be flagged for review, and any real-money balance will be handled in accordance with ibaje's underage gambling policy. The matter may also be referred to relevant authorities where appropriate.

Parental Controls: ibaje encourages parents and guardians in Bangladesh to make use of internet filtering and parental control tools to prevent minors from accessing online gambling platforms. If you believe a minor in your household has registered or accessed ibaje, please contact [email protected] immediately. ibaje will act swiftly to investigate and close any confirmed underage account.

For guidance on responsible gambling and tools available to protect vulnerable individuals, including minors, please review the ibaje Responsible Gaming policy.

Policy Updates: ibaje reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or platform features. When we make material changes to this policy, we will publish the revised version on this page with an updated effective date. For significant changes that affect your rights, ibaje will also notify registered players via their account email address where reasonably practicable.

We encourage you to review this Privacy Policy periodically. Your continued use of the ibaje platform following the publication of any amendment constitutes your acceptance of the updated policy. If you do not agree to the revised terms, you must discontinue use of the platform and may request account closure.

Contact ibaje About Privacy: If you have any questions about this Privacy Policy, wish to exercise a data rights request, or want to report a concern about how your personal information has been handled, please contact the ibaje privacy team:

• Email: [email protected] (subject line: "Privacy Policy Query" or "Privacy Rights Request")
• Live Chat: Available 24/7 via the ibaje platform
• Response Time: ibaje aims to respond to all privacy-related enquiries within 5 business days and to formal rights requests within 30 calendar days.

Last Updated: 1 January 2026. This Privacy Policy is effective from the date stated above and supersedes all previous versions of the ibaje privacy notice.