gabaji Privacy Policy
Your privacy matters. This Privacy Policy explains precisely what personal data gabaji collects, the lawful basis on which we process it, how long we retain it, and the rights you have over your own information as a player on our platform.
gabaji ("we", "us", "our", "the Platform") is committed to protecting the personal data of every player who uses our online casino and sports betting services at gabaji.bio. This Privacy Policy applies to all personal data collected through the gabaji website, mobile site, and any related customer support interactions.
By registering an account with gabaji, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree to this Privacy Policy, you must not register an account or use any part of the gabaji platform. You must be at least 21 years of age to use gabaji services.
This policy has been drafted with reference to internationally recognised data protection principles, including those set out in the General Data Protection Regulation (GDPR) and comparable frameworks. While gabaji primarily serves the Bangladeshi market, we apply these high standards of data stewardship to all users regardless of geographic location.
Privacy at a Glance
The six core principles governing how gabaji handles your data.
Purpose Limitation
We collect personal data only for clearly defined, legitimate purposes — account management, payments, fraud prevention, and regulatory compliance. We never collect data speculatively.
Data Minimisation
gabaji collects only the minimum data required to deliver our services. We do not ask for information beyond what is necessary for account registration, identity verification, or payment processing.
Security by Design
All personal data stored by gabaji is protected using industry-standard SSL/TLS encryption in transit and AES-256 encryption at rest. Access to personal data is restricted to authorised personnel only.
Retention Limits
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. Inactive account data is reviewed and purged on a rolling schedule.
No Unnecessary Sharing
gabaji does not sell your personal data to third parties. Data is shared only with trusted service providers who are contractually bound to protect it, and only to the extent necessary for them to perform their services.
Your Rights are Respected
You have clear rights over your data — including access, correction, deletion, and portability — and gabaji provides straightforward mechanisms to exercise those rights at any time.
1. Personal Data We Collect
gabaji collects personal data in several ways: directly from you when you register an account, make a deposit, or contact our support team; automatically when you interact with the platform; and, in limited circumstances, from third-party verification providers. The categories of personal data we collect are set out below.
Special Category Data
gabaji does not intentionally collect special category data (such as health information, ethnicity, religious beliefs, or political opinions). If you voluntarily disclose such information — for example, in a support message — we will treat it with the highest level of confidentiality and will not process it beyond what is strictly necessary to respond to your query.
2. How We Use Your Personal Data
gabaji processes your personal data only where we have a lawful basis to do so. The primary bases we rely on are: contractual necessity (to deliver our services to you), legal obligation (to comply with applicable laws including AML and KYC requirements), legitimate interests (to protect the platform from fraud and improve our services), and consent (for marketing communications, which you may withdraw at any time).
2.1 Account Management
We use your identity and contact data to create and maintain your gabaji account, verify your age and identity, process your login credentials securely, and communicate important account-related notifications such as deposit confirmations, withdrawal updates, and security alerts.
2.2 Payment Processing
Financial data is processed to execute deposits and withdrawals via bKash, Nagad, Rocket, Upay, and cryptocurrency channels; to reconcile transaction records; and to investigate and resolve any payment disputes. We do not store full payment credentials on our own servers — sensitive payment data is handled directly by our certified payment processing partners.
2.3 Fraud Prevention and AML Compliance
Technical data, usage data, and financial data are analysed to detect suspicious activity, prevent money laundering, identify unauthorised access attempts, and comply with our anti-money laundering and know-your-customer obligations. This processing is carried out as a legal obligation and as a legitimate interest of the platform.
2.4 Responsible Gaming
We use usage data and account history to monitor for signs of problem gambling, enforce self-exclusion requests, apply deposit and loss limits set by the player, and proactively reach out to players whose betting patterns suggest distress. This processing is a core part of our commitment to player welfare.
2.5 Platform Improvement
Aggregated and anonymised usage data is used to analyse platform performance, improve user experience, test new features, and optimise game selection for our Bangladeshi player base. This data cannot be used to identify individual users.
2.6 Marketing Communications
With your explicit consent, we may send you promotional emails, SMS notifications, or in-platform messages about bonuses, new games, tournaments, and seasonal promotions. You may withdraw your consent and opt out of all marketing communications at any time by contacting [email protected] or updating your account notification preferences. Withdrawal of marketing consent does not affect the lawfulness of any processing carried out before the withdrawal.
3. Data Sharing and Third Parties
gabaji does not sell, rent, or trade your personal data to any third party for their own commercial purposes. We share personal data only in the limited circumstances described below, and only to the extent strictly necessary for the purpose stated.
3.1 Payment Service Providers
We share financial data with our payment processing partners — including bKash, Nagad, Rocket, Upay, and cryptocurrency network operators — solely for the purpose of executing your requested transactions. Each payment partner is independently responsible for its own data processing and privacy practices.
3.2 Identity Verification Partners
During KYC verification, identity documents and personal data may be shared with accredited identity verification service providers. These providers are contractually bound to process your data only for verification purposes and to maintain appropriate security standards.
3.3 Game Software Providers
When you play games delivered by third-party studios such as Evolution Gaming, Pragmatic Play, Ezugi, NetEnt, Microgaming, Hacksaw Gaming, or Spribe, limited technical data (session tokens, game identifiers) is exchanged with those providers to facilitate fair game delivery. No personally identifiable information beyond what is technically required is shared with game studios.
3.4 Legal and Regulatory Disclosure
gabaji may disclose personal data to law enforcement agencies, regulatory bodies, or courts where required by applicable law, a valid legal order, or where we reasonably believe disclosure is necessary to protect the safety of any person or to prevent or detect fraud. We will notify affected players of such disclosures where we are legally permitted to do so.
4. Cookies and Tracking Technologies
gabaji uses cookies and similar tracking technologies to ensure the platform functions correctly, to remember your preferences, and to analyse how players interact with our site. A cookie is a small text file stored on your device by your browser. The cookies we use fall into three categories:
Essential Cookies
These cookies are strictly necessary for the platform to operate. They maintain your login session, preserve your account security state, and ensure deposits and withdrawals are processed correctly. Essential cookies cannot be disabled without severely impairing platform functionality.
Functional Cookies
Functional cookies remember your preferences — such as your preferred payment method, language settings, and last-played games — to provide a more personalised experience each time you visit gabaji. These cookies are optional but enhance usability significantly.
Analytics Cookies
We use analytics cookies to understand aggregate usage patterns on the platform. This data helps us identify which games are most popular among Bangladeshi players, where navigation friction exists, and how our promotional pages perform. Analytics data is collected in anonymised or pseudonymised form and is not used to identify individual users. You may opt out of analytics cookies by adjusting your browser settings.
5. Data Retention
gabaji retains personal data for as long as is necessary to fulfil the purposes set out in this Privacy Policy, or as required by applicable law. The key retention periods that apply to different categories of data are as follows:
Following the expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where deletion is not technically possible in the short term (for example, due to backup system architecture), the data will be isolated from active processing until deletion can be completed.
6. Your Data Rights
As a gabaji player, you hold the following rights over your personal data.
Right of Access
Request a copy of all personal data gabaji holds about you.
Right to Rectification
Ask us to correct any inaccurate or incomplete personal data without delay.
Right to Erasure
Request deletion of your personal data where there is no legitimate reason to continue processing it.
Right to Restrict
Ask us to pause processing of your data while a correction or objection is being assessed.
Right to Portability
Receive your personal data in a structured, machine-readable format to transfer to another service.
Right to Object
Object to processing based on legitimate interests, including direct marketing at any time.
7. Data Security
gabaji implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Key measures include:
- SSL/TLS Encryption: All data transmitted between your device and gabaji's servers is encrypted using TLS 1.2 or higher.
- Encryption at Rest: Stored personal and financial data is protected with AES-256 encryption.
- Access Controls: Personal data is accessible only to authorised gabaji personnel who require it to perform their specific job functions. Access is governed by role-based permissions and monitored via audit logs.
- Two-Factor Authentication: gabaji supports two-factor authentication (2FA) on player accounts and requires it for internal administrative access to data systems.
- Regular Security Audits: Our platform and data infrastructure are subject to regular internal and third-party security assessments to identify and remediate vulnerabilities.
- Incident Response: In the event of a personal data breach, gabaji will notify affected players and, where applicable, relevant authorities within 72 hours of becoming aware of the breach, in accordance with applicable data protection regulations.
While we take all reasonable steps to protect your data, no internet transmission or electronic storage method is completely secure. You also play an important role in keeping your account safe by using a strong, unique password and enabling 2FA on your gabaji account.
8. Minors and Age Restriction
gabaji's services are strictly intended for adults aged 21 years and over. We do not knowingly collect, store, or process personal data relating to individuals under the age of 21. During registration, all players are required to confirm that they meet the minimum age requirement, and identity verification is conducted to enforce this restriction.
If gabaji discovers that personal data has been collected from a player who is under 21, that account will be immediately suspended, all related personal data will be deleted as promptly as technically possible, and any deposited funds will be returned to the originating payment method following verification of ownership.
If you believe that a minor may have registered a gabaji account, please notify us immediately at [email protected] and we will investigate and act without delay.
9. Changes to This Privacy Policy
gabaji reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or platform features. When we make material changes, we will notify registered players via the email address on file before the updated policy takes effect. The "Effective" date at the top of this page will be revised to reflect the date of the latest update.
We encourage you to review this Privacy Policy periodically to stay informed about how we protect your data. Your continued use of the gabaji platform following the effective date of any update constitutes acceptance of the revised Privacy Policy.
Ready to Play Safely?
Your data is protected. Explore gabaji's full range of casino games and sports betting markets, or visit our FAQ for quick answers to common questions.
Explore gabaji Casino Read Our FAQMore from gabaji