Last Updated: 1 January 2025

GBAJ Privacy Policy

Your privacy matters to us. This Privacy Policy explains exactly what personal data GBAJ collects, why we collect it, how we use it, and what rights you have over your own information. We keep things straightforward — no legal jargon, no hidden surprises.

Encrypted Storage No Data Selling Your Rights Protected Secure Platform

How GBAJ Handles Your Data

These cards give you a quick overview of the most important privacy commitments GBAJ makes to every player. The full details are in the policy sections below.

We Only Collect What We Need

GBAJ collects personal data only when there is a clear and legitimate reason to do so — account registration, payment processing, identity verification, and platform security. We do not collect data for the sake of it, and we do not build profiles beyond what is necessary to operate your account safely.

We Never Sell Your Data

GBAJ does not sell, rent, or trade your personal data to any third party for marketing or commercial purposes. Your information stays within the GBAJ platform and is only shared with trusted service providers who help us operate the platform — and only under strict data processing agreements.

Industry-Standard Encryption

All data transmitted between your device and the GBAJ platform is protected using TLS encryption. Sensitive data stored on GBAJ servers — including payment details and identity documents — is encrypted at rest. GBAJ conducts regular security reviews to ensure your data remains protected.

You Control Your Data

GBAJ gives you meaningful control over your personal data. You can request access to the data we hold about you, ask us to correct inaccurate information, or request deletion of your data subject to our legal retention obligations. All requests are handled by our support team within 30 days.

Marketing You Can Opt Out Of

GBAJ sends promotional communications only to players who have opted in. If you no longer want to receive bonus offers, game updates, or promotional emails from GBAJ, you can opt out at any time through your account settings or by contacting support. Opting out of marketing does not affect your account.

Clear Data Retention Periods

GBAJ retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. Account data is retained for a minimum of five years after account closure for compliance purposes. After this period, data is securely deleted or anonymised.

1 Who We Are

GBAJ ("we", "us", "our") operates the online gaming platform accessible at gbaj.club. We are the data controller responsible for the personal data collected through the GBAJ platform. This Privacy Policy applies to all players who register an account, visit the GBAJ website, or use any GBAJ service.

This Privacy Policy should be read alongside the GBAJ Terms and Conditions, which govern your use of the platform. By registering a GBAJ account or using the platform, you confirm that you have read and understood this Privacy Policy.

Questions about your privacy? Contact our dedicated privacy team at [email protected]. We aim to respond to all privacy-related enquiries within 5 business days.

2 Personal Data We Collect

GBAJ collects personal data through several channels — directly from you when you register or use the platform, automatically through your device and browser, and from third-party payment providers such as bKash and Nagad. Below is a clear breakdown of the categories of data we collect.

Category Examples How Collected
Identity Data Full name, date of birth, gender, national ID number Registration form, verification process
Contact Data Mobile number, email address Registration form, account settings
Payment Data bKash / Nagad account number, transaction IDs Deposit and withdrawal processes
Technical Data IP address, device type, browser, operating system Automatically via cookies and server logs
Usage Data Games played, bet amounts, session duration, login times Automatically via platform activity tracking
Communications Data Support chat transcripts, email correspondence When you contact GBAJ support

Note: GBAJ does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health data, except where strictly required for responsible gaming purposes (for example, if you self-declare a gambling problem).

3 How We Use Your Personal Data

GBAJ uses your personal data only for the purposes described in this Privacy Policy. We do not use your data in ways that are incompatible with the reason it was originally collected. The main purposes for which GBAJ processes your personal data are:

  • Account management: To create, maintain, and manage your GBAJ account, including processing deposits and withdrawals via bKash and Nagad.
  • Identity verification: To verify your identity and age as required by our compliance obligations, including anti-money laundering (AML) checks.
  • Platform security: To detect and prevent fraud, cheating, money laundering, and other prohibited activities on the GBAJ platform.
  • Customer support: To respond to your enquiries, resolve disputes, and provide assistance with your GBAJ account.
  • Responsible gaming: To monitor gaming patterns and identify players who may be at risk of problem gambling, and to apply responsible gaming tools where appropriate.
  • Marketing communications: To send you promotional offers, bonus notifications, and game updates — but only if you have opted in to receive these communications.
  • Platform improvement: To analyse usage patterns and improve the GBAJ platform, games, and user experience.
  • Legal compliance: To comply with applicable laws, regulations, and requests from competent authorities.

Marketing opt-out: You can withdraw your consent to receive marketing communications from GBAJ at any time by updating your preferences in your account settings or by contacting [email protected]. Opting out will not affect your ability to use the GBAJ platform.

4 Legal Basis for Processing

GBAJ processes your personal data on one or more of the following legal bases, depending on the specific purpose of the processing:

  • Contract performance: Processing that is necessary to provide you with the GBAJ gaming service under the Terms and Conditions you agreed to at registration — for example, processing deposits, managing your account balance, and paying out winnings.
  • Legal obligation: Processing that is required to comply with applicable laws and regulations — for example, identity verification for anti-money laundering compliance and age verification.
  • Legitimate interests: Processing that is necessary for GBAJ's legitimate business interests, provided those interests are not overridden by your rights — for example, fraud detection, platform security, and improving the GBAJ service.
  • Consent: Processing based on your explicit consent — for example, sending you marketing communications. You can withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

5 Data Sharing and Third Parties

GBAJ does not sell, rent, or trade your personal data to any third party. We share your data only in the limited circumstances described below, and only with parties who are contractually required to handle your data securely and in accordance with this Privacy Policy.

  • Payment processors: bKash and Nagad receive the payment data necessary to process your deposits and withdrawals. These providers operate under their own privacy policies and are responsible for the data they process on their platforms.
  • Identity verification providers: GBAJ may use third-party identity verification services to confirm your identity and age. These providers process only the data necessary for verification and are bound by strict data processing agreements.
  • IT and hosting providers: GBAJ uses trusted cloud hosting and IT infrastructure providers to operate the platform. These providers process data on our behalf and are contractually prohibited from using your data for their own purposes.
  • Regulatory and law enforcement authorities: GBAJ may disclose your data to competent authorities where required by law, court order, or regulatory requirement. We will notify you of such disclosures where legally permitted to do so.
  • Business transfers: In the event of a merger, acquisition, or sale of GBAJ's business, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer and your rights will be protected throughout the process.

No international transfers: GBAJ processes and stores your personal data within secure data centres. We do not transfer your personal data to countries outside your region without ensuring appropriate safeguards are in place.

6 Cookies and Tracking Technologies

GBAJ uses cookies and similar tracking technologies to operate the platform, remember your preferences, and analyse how the platform is used. A cookie is a small text file stored on your device when you visit the GBAJ website. Cookies do not contain your personal information directly, but they can be used to identify your device and browser session.

GBAJ uses the following categories of cookies:

  • Essential cookies: These are required for the GBAJ platform to function. They enable core features such as account login, session management, and security. You cannot opt out of essential cookies without disabling the platform entirely.
  • Analytics cookies: These help GBAJ understand how players use the platform — which games are most popular, how long sessions last, and where players encounter issues. This data is aggregated and anonymised.
  • Preference cookies: These remember your settings and preferences, such as your language preference and display settings, so you do not have to re-enter them each time you visit.
  • Marketing cookies: These are used to deliver relevant promotional content to you. They are only set if you have consented to marketing communications.

You can manage your cookie preferences through your browser settings. Most browsers allow you to block or delete cookies. Note that blocking essential cookies may affect the functionality of the GBAJ platform.

7 Data Security

GBAJ takes the security of your personal data seriously. We implement a range of technical and organisational measures to protect your data against unauthorised access, loss, destruction, or alteration. These measures include:

  • TLS (Transport Layer Security) encryption for all data transmitted between your device and the GBAJ platform.
  • Encryption at rest for sensitive data stored on GBAJ servers, including payment details and identity documents.
  • Access controls that restrict access to personal data to authorised GBAJ staff only, on a need-to-know basis.
  • Regular security audits and penetration testing of the GBAJ platform and infrastructure.
  • Incident response procedures to detect, investigate, and respond to data security incidents promptly.

Your responsibility: While GBAJ takes every reasonable step to protect your data, you also play a role in keeping your account secure. Use a strong, unique password for your GBAJ account and never share your login credentials with anyone. If you suspect unauthorised access to your account, contact [email protected] immediately.

In the event of a data breach that is likely to result in a risk to your rights and freedoms, GBAJ will notify you as soon as reasonably practicable and will take all necessary steps to contain and remediate the breach.

8 Data Retention

GBAJ retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulatory obligations. The following retention periods apply:

Data Category Retention Period Reason
Account & Identity Data 5 years after account closure AML and regulatory compliance
Transaction Records 5 years after transaction date Financial record-keeping obligations
Support Communications 3 years after last interaction Dispute resolution and quality assurance
Technical & Usage Data 13 months from collection Platform analytics and security monitoring
Marketing Preferences Until opt-out or account closure Consent management

After the applicable retention period, your personal data is securely deleted or anonymised so that it can no longer be linked to you. Anonymised data may be retained indefinitely for statistical and analytical purposes.

9 Your Privacy Rights

GBAJ respects your rights over your personal data. Depending on your location and applicable law, you may have some or all of the following rights:

Right of Access

Request a copy of the personal data GBAJ holds about you.

Right to Rectification

Ask us to correct inaccurate or incomplete personal data.

Right to Erasure

Request deletion of your data, subject to legal retention obligations.

Right to Restriction

Ask us to restrict processing of your data in certain circumstances.

Right to Portability

Receive your data in a structured, machine-readable format.

Right to Object

Object to processing based on legitimate interests or for direct marketing.

How to exercise your rights: Submit your request to [email protected] with the subject line "Privacy Request". GBAJ will respond within 30 days. We may need to verify your identity before processing your request to protect your data from unauthorised access.

10 Children's Privacy

The GBAJ platform is strictly for adults aged 18 and above. GBAJ does not knowingly collect personal data from anyone under the age of 18. If you are a parent or guardian and believe that a minor has registered a GBAJ account or provided personal data to GBAJ, please contact us immediately at [email protected].

Upon receiving a verified report of a minor's account, GBAJ will immediately suspend the account, delete all associated personal data, and refund any deposits made, in accordance with our responsible gaming and child protection obligations.

GBAJ uses age verification checks during the registration process and reserves the right to request additional age verification documents at any time. For more information about our approach to responsible gaming and underage gambling prevention, visit our Responsible Gaming page.

11 Changes to This Privacy Policy

GBAJ may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or platform features. When we make changes, we will update the "Last Updated" date at the top of this page. For significant changes that materially affect how we use your personal data, we will notify registered players via email or an in-platform notification before the changes take effect.

We encourage you to review this Privacy Policy periodically to stay informed about how GBAJ protects your personal data. Continued use of the GBAJ platform after any update to this Privacy Policy constitutes your acknowledgement of the revised policy.

12 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way GBAJ handles your personal data, please get in touch with our privacy team. We are committed to resolving all privacy-related enquiries promptly and transparently.

For information about your rights and obligations as a GBAJ player, please read our Terms and Conditions. For information about responsible gaming tools and support, visit our Responsible Gaming page.


Play with Confidence on GBAJ

Now you know exactly how GBAJ protects your privacy. Register your free account today, deposit securely via bKash or Nagad, and enjoy a safe, fair gaming experience built for players in Bangladesh.

18+ Gambling involves risk. Play responsibly. Responsible Gaming