lbaji Privacy Policy — Your Data, Our Responsibility

lbaji ("we", "us", "our") operates the online gaming and sports betting platform at lbaji.bio, serving players in Bangladesh. We take the privacy and security of your personal data seriously. This Privacy Policy describes the categories of personal data we collect, the purposes for which we process it, the legal bases for that processing, and the rights available to you as a data subject.

By registering an account or using any service on lbaji.bio, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. This Policy forms part of our Terms and Conditions. If you do not agree with any part of this Policy, you should not use the lbaji platform.

Privacy at a Glance

1. Data We Collect

When you register and use lbaji, we collect the following categories of personal data. We collect only what is necessary and relevant to the services we provide. You are responsible for ensuring the accuracy of the data you submit.

1. Registration data: Full name, date of birth, mobile phone number, and account credentials (username and password hash) provided at the time of account creation.
2. Identity verification (KYC) data: Government-issued identification documents such as National ID card or passport, submitted when KYC is requested prior to withdrawal processing.
3. Transaction data: Details of deposits and withdrawals including payment method identifier (e.g. bKash or Nagad account number), transaction amounts, timestamps, and transaction reference numbers.
4. Gaming activity data: Records of games played, bet amounts, game outcomes, session durations, and platform interactions. This data is used for account management, responsible gaming monitoring, and dispute resolution.
5. Technical and device data: IP address, device type, operating system, browser type and version, screen resolution, language preference, and referring URL. This information is collected automatically when you access lbaji.bio and is used for platform security and performance optimisation.

2. How We Use Your Data

lbaji processes personal data only for specific, legitimate purposes. We do not use your data in ways that are incompatible with the purpose for which it was originally collected. The primary purposes for which we process personal data are as follows.

1. Account management: To create and maintain your player account, verify your identity, process your registration, and manage your login credentials securely.
2. Service delivery: To provide you with access to games, process deposits and withdrawals via bKash, Nagad, Rocket, and other supported payment methods, and deliver promotions and bonuses for which you are eligible.
3. Legal and regulatory compliance: To comply with applicable anti-money laundering (AML) obligations, KYC requirements, age verification requirements, and any other legal or regulatory obligations that apply to lbaji's operations.
4. Responsible gaming: To monitor gaming activity for signs of problem gambling, enforce the deposit limits and self-exclusion tools you configure, and contact you if our responsible gaming systems identify a concern.
5. Security and fraud prevention: To detect, investigate, and prevent fraudulent transactions, bonus abuse, multi-accounting, and other activities that violate our Terms and Conditions or applicable law.
6. Platform improvement: To analyse aggregated and anonymised usage data to improve the performance, layout, and content of the lbaji platform and to understand which games and features are most valued by our Bangladeshi players.

3. Legal Basis for Processing

lbaji processes your personal data on one or more of the following legal bases, depending on the specific processing activity involved.

1. Contractual necessity: Processing is necessary to fulfil our contract with you — specifically, to operate your account, process transactions, and deliver the gaming services you have requested.
2. Legal obligation: Processing is necessary to comply with applicable legal obligations including AML, KYC, and age verification requirements.
3. Legitimate interests: Processing is necessary for our legitimate interests in securing the platform, preventing fraud and abuse, and improving our services — provided those interests are not overridden by your rights and interests.
4. Consent: Where we send you promotional communications about bonuses, new games, or seasonal offers, we do so on the basis of your consent given at registration. You may withdraw this consent at any time by contacting lbaji support.

4. Sharing Your Data

lbaji does not sell or rent your personal data. We share personal data only in the limited circumstances described below, and only to the extent necessary for each purpose.

1. Game providers: Licensed game studios such as Pragmatic Play, Evolution Gaming, Spribe, and others require certain session-level data to operate their games correctly within our platform. This data exchange is governed by data processing agreements and is limited to what is technically necessary.
2. Payment processors: To process your deposits and withdrawals via bKash, Nagad, Rocket, or bank transfer, we share the minimum necessary transaction data with the relevant payment provider. These providers are bound by their own regulatory obligations and data protection standards.
3. Regulatory and law enforcement authorities: lbaji may disclose personal data to regulatory bodies, law enforcement agencies, or other competent authorities where required by applicable law, court order, or official government request. We will notify you of such disclosures where legally permitted to do so.
4. Third-party service providers: We engage certain third-party service providers to assist with platform operations including hosting, analytics, customer support, and fraud detection. These providers act as data processors under our instruction and are prohibited from using your data for any purpose other than the specific service they provide to us.

5. Cookies and Tracking Technologies

lbaji.bio uses cookies and similar tracking technologies to improve your experience, maintain your session, and help us understand how the platform is used. The following categories of cookies are used on the site.

1. Essential cookies: These cookies are strictly necessary for the platform to function. They maintain your login session, remember your language preference, and enable secure payment flows. These cookies cannot be disabled without breaking core platform functionality.
2. Analytics cookies: We use anonymised analytics cookies to understand how players navigate lbaji.bio, which pages are visited most frequently, and where users exit the platform. This helps us improve page layouts and game discoverability for Bangladeshi players.
3. Fraud prevention cookies: Certain cookies assist our fraud detection and responsible gaming systems by identifying unusual device or session patterns. These are essential to maintaining a secure platform for all players.
4. Cookie management: You may manage non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of lbaji.bio. Most modern browsers provide options to block, delete, or receive notifications about cookies.

6. Data Retention

lbaji retains personal data only for as long as is necessary to fulfil the purposes described in this Policy, or as required by applicable law. The specific retention periods depend on the category of data and the purpose for which it was collected.

Account and transaction data is typically retained for a minimum of five years following account closure to meet AML and financial record-keeping obligations. KYC documents are retained for the same minimum period. Gaming activity logs are retained for a shorter period unless required for an ongoing dispute or investigation. Technical and device data used for analytics is anonymised or deleted within 12 months of collection.

7. Data Security

lbaji implements appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, or disclosure. These measures are reviewed and updated regularly to reflect current security best practices.

Specific security measures in place at lbaji include SSL/TLS encryption for all data transmitted between your device and our servers, password hashing using industry-standard algorithms, access controls that restrict staff access to personal data on a need-to-know basis, and regular security testing of our platform infrastructure.

8. Your Rights

As a data subject, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, please contact lbaji support. We will respond to all valid requests within a reasonable time and without charge in the first instance.

1. Right of access: You have the right to request a copy of the personal data we hold about you. We will provide this in a structured, commonly used format.
2. Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or completed without undue delay.
3. Right to erasure: Subject to applicable legal retention obligations (e.g. AML record-keeping), you may request the deletion of your personal data. Where we are legally required to retain certain data, we will inform you of this and explain how long we must keep it.
4. Right to restrict processing: In certain circumstances you may request that we restrict the processing of your personal data — for example, while we investigate a rectification request or a complaint.
5. Right to object: You have the right to object to processing of your personal data that is based on our legitimate interests, including profiling for responsible gaming purposes. You also have the right to object to receiving direct marketing communications at any time.
6. Right to withdraw consent: Where processing is based on your consent (e.g. receipt of promotional communications), you may withdraw that consent at any time by contacting lbaji support. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

lbaji aims to resolve all data rights requests promptly and fairly. If you are not satisfied with how we have handled your request, you have the right to raise a complaint with the relevant data protection authority in your jurisdiction.

9. Children and Minors

lbaji is strictly for adults aged 21 and above. We do not knowingly collect or process personal data from any person under the age of 21. If we become aware that personal data has been collected from a person under 21, we will delete that data immediately and close the associated account. If you believe a minor has registered on lbaji, please contact our support team without delay.

10. Third-Party Links

lbaji.bio does not contain links to external third-party websites. However, some of our game providers and payment partners operate their own platforms that are accessed when you use their services. lbaji is not responsible for the privacy practices or content of those third-party platforms. We recommend that you review the privacy policies of any third-party service before providing your personal data to them.

11. Changes to This Privacy Policy

lbaji may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or platform functionality. When we make material changes to this Policy, we will update the effective date shown at the top of this page and, where appropriate, notify registered players via their registered mobile number or through a notice on lbaji.bio.

Your continued use of lbaji.bio after the effective date of any update to this Privacy Policy constitutes your acceptance of the revised Policy. We encourage you to review this Policy periodically to stay informed about how we protect your data.

12. Contact Us

If you have any questions about this Privacy Policy, wish to exercise a data right, or want to raise a concern about how we have handled your personal data, please contact the lbaji support team. Our team is available 24 hours a day, 7 days a week via live chat on lbaji.bio.

Email: [email protected]