Data & Privacy

sbaje Privacy Policy — How We Protect Your Personal Data

This Privacy Policy explains what personal data sbaje collects from Bangladesh players, why we collect it, how it is used and stored, and what rights you have over your own information.

📅 Last Updated: January 2026

Overview

sbaje ("the Platform", "we", "us") is committed to protecting the privacy of every player who creates an account and uses the sbaje platform from Bangladesh. This Privacy Policy is incorporated by reference into our Terms & Conditions and forms part of the overall agreement between you and sbaje. By creating an sbaje account, you confirm that you have read and understood this Privacy Policy and that you consent to the collection and processing of your personal data as described herein.

sbaje collects only the personal data that is strictly necessary to operate the platform, process payments, verify player identity, and comply with our legal and compliance obligations. We do not sell personal data to third parties, do not use your data for advertising purposes unrelated to your use of sbaje, and do not share your data with any party that does not have a legitimate operational or legal need to process it. All data held by sbaje is protected by SSL encryption in transit and stored on secured servers.

What Data We Collect

sbaje collects personal data in four broad categories. The specific data points within each category are described below.

📱
Contact Data
Mobile number used for registration
🪪
Identity Data
Date of birth, name, ID document if requested
💳
Payment Data
Wallet numbers for bKash, Nagad, Rocket, Upay
📊
Usage Data
Login times, games played, bet amounts, device type

How We Use Your Data

sbaje processes personal data only for the specific purposes described in this section. We do not repurpose data collected for one purpose for an incompatible secondary purpose without obtaining fresh consent.

Purpose 1
Account Operation and Player Authentication
sbaje uses your registered mobile number and password to authenticate your login and identify your account across sessions. Your date of birth is used to verify that you meet the 21+ age requirement at registration and whenever sbaje conducts age verification checks. Your name and identity documentation (where provided) are used for KYC verification to satisfy our compliance obligations. Without this data, sbaje cannot operate your account or allow you to access the platform.
Purpose 2
Payment Processing
Your registered bKash, Nagad, Rocket, or Upay wallet number is required to process deposits credited to your sbaje account and withdrawals from your sbaje account to your wallet. sbaje does not store full wallet credentials or PINs. sbaje only stores the wallet number necessary to identify the correct payment method for a transaction. Payment data is shared with the relevant mobile wallet operator solely for the purpose of processing the specific transaction.
Purpose 3
Responsible Gaming Monitoring
sbaje uses account activity data — including login frequency, session duration, betting patterns, deposit amounts, and withdrawal frequency — to monitor for indicators of problem gambling behaviour. This processing is carried out in the interest of player protection. Where our systems identify patterns that may indicate harmful gambling behaviour, sbaje may contact the player or apply responsible gaming measures such as deposit limits or temporary account restrictions. Players may also use this data to configure their own responsible gaming tools in account settings.

sbaje processes personal data on the following legal grounds. Each processing activity is mapped to one of these grounds, and we do not process data where a valid legal basis does not exist.

Ground A
Contractual Necessity
The processing of your contact data, identity data, and payment data is necessary for the performance of the contract between you and sbaje — specifically, to operate your account, authenticate your login, verify your eligibility, and process deposits and withdrawals. Without this processing, sbaje cannot fulfil its obligations to you as a platform user. You cannot opt out of this processing and remain a registered sbaje account holder.
Ground B
Legitimate Interests
sbaje processes usage data on the basis of its legitimate interests in operating a safe, fair, and compliant gaming platform. Legitimate interest processing covers fraud detection and prevention, responsible gaming monitoring, platform security monitoring, and internal analytics used to improve platform performance and user experience. In each case, sbaje has assessed that its legitimate interests are not outweighed by your interests or fundamental rights and freedoms.

Data Sharing

sbaje does not sell or rent personal data. Data is shared with third parties only in the circumstances described below.

Sharing A
Payment Processors
When you make a deposit or request a withdrawal, sbaje shares the minimum data necessary with the relevant mobile wallet operator (bKash, Nagad, Rocket, or Upay) to process the transaction. This data is limited to the transaction amount, your registered wallet number, and a transaction reference. The mobile wallet operators process this data in accordance with their own privacy policies, which are separate from sbaje's Privacy Policy. sbaje is not responsible for the data practices of payment operators.
Sharing B
Legal and Regulatory Disclosure
sbaje may be required to disclose personal data in response to a lawful request from a competent authority — including a court order, a direction from a regulatory body, or a law enforcement request made under applicable law. In such cases, sbaje will disclose only the minimum data required to satisfy the legal obligation and will, where legally permitted to do so, notify the affected player that their data has been disclosed.

Data Retention and Security

sbaje retains personal data for as long as your account is active and for a period of up to 5 years following account closure, unless a longer retention period is required by applicable law or regulation. Usage data used solely for platform analytics is anonymised after 12 months. Payment transaction records are retained for 7 years in accordance with financial record-keeping requirements. After the applicable retention period has expired, sbaje will securely delete or irreversibly anonymise the relevant data.

sbaje secures all personal data using SSL encryption in transit between your browser and our servers. Account passwords are stored using one-way cryptographic hashing — sbaje does not hold a readable version of your password. Access to personal data within sbaje is restricted to personnel with a specific operational need to process that data, and all access is logged. sbaje conducts periodic internal security reviews to identify and address vulnerabilities. Despite these measures, no system can guarantee absolute security — players are encouraged to use strong, unique passwords and to log out of sbaje on shared devices.

Your Data Rights

As an sbaje account holder, you have the following rights in relation to your personal data. To exercise any of these rights, contact sbaje support using the email address in the footer of this page.

  • 1
    Right of AccessYou have the right to request a copy of the personal data sbaje holds about you. sbaje will respond to a verified access request within 30 days.
  • 2
    Right to RectificationIf any personal data sbaje holds about you is inaccurate or incomplete, you have the right to request that it be corrected. Update requests for registered contact details can be submitted via sbaje support.
  • 3
    Right to ErasureIn certain circumstances you may request that sbaje delete the personal data it holds about you. This right is subject to sbaje's legal obligation to retain data for compliance purposes — sbaje cannot erase data that it is legally required to keep. Where data can be deleted, sbaje will do so within 30 days of a verified erasure request.
  • 4
    Right to Restrict ProcessingYou have the right to ask sbaje to restrict processing of your personal data in certain circumstances, for example where you contest the accuracy of data sbaje holds. During a restriction period, sbaje will continue to store your data but will not actively process it beyond what is necessary for the restriction itself.
  • 5
    Right to ObjectWhere sbaje processes your data on the basis of legitimate interests, you have the right to object to that processing. sbaje will consider your objection and will cease the processing in question unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.

Cookies and Tracking

sbaje uses essential session cookies to maintain your login state between pages while you are using the platform. These cookies are strictly necessary for the platform to function and cannot be disabled without preventing you from using sbaje. Session cookies are deleted when you close your browser or log out. sbaje does not use third-party advertising cookies, tracking pixels, or cross-site tracking technologies. sbaje does not share browsing data with advertising networks.

sbaje may use anonymised, aggregated analytics data to understand how players navigate the platform and to identify areas for improvement. This analytics data cannot be used to identify individual players and is not shared with third parties. If sbaje's analytics approach changes materially, this Privacy Policy will be updated and players will be notified.

Changes to This Policy and How to Contact Us

sbaje may update this Privacy Policy from time to time. Where an update is material — meaning it significantly changes the way we process your personal data or the rights available to you — sbaje will notify registered players via their registered contact details at least 7 days before the change takes effect. The current version of this Privacy Policy is always available on this page and is dated with the effective date. Continued use of sbaje following notification of a change constitutes acceptance of the revised Privacy Policy.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a concern about how sbaje handles your personal data, please contact our support team using the email address listed in the footer of this page. We aim to respond to all data-related enquiries within 5 business days. For complex requests — such as full data subject access requests — we may require up to 30 days and will acknowledge receipt of your request promptly.

Your Data Is Safe With sbaje

Play with confidence on a platform that uses SSL encryption and never sells your personal data. Visit sbaje Casino or check our FAQ for more information. 21+ only.

Visit sbaje Casino Read Our FAQ