fbajj Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how fbajj ("fbajj", "we", "us", "our"), the operator of the online betting and casino platform at https://fbajj.io, collects, uses, stores, discloses, and protects personal information obtained from registered players and visitors ("you", "your") in connection with your use of the fbajj platform.

fbajj serves players across Bangladesh and is committed to handling personal data in a transparent, lawful, and secure manner. This Policy is incorporated by reference into the fbajj Terms & Conditions. By creating an account on fbajj, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.

If you do not agree with this Policy, you must discontinue use of the fbajj platform. For questions or requests relating to your personal data, please contact [email protected] at any time.

2. Personal Data We Collect

fbajj collects the following categories of personal data in connection with the operation of player accounts and the delivery of betting and casino services:

Data Category	Examples
Identity Data	Full name, date of birth, gender, government-issued ID number (National ID, passport), selfie or photo for KYC verification
Contact Data	Email address, mobile phone number, city or district of residence (e.g., Dhaka, Chittagong, Sylhet, Khulna)
Financial Data	bKash account number, Nagad account number, Rocket number, Upay number, bank account details (Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank), Visa/Mastercard last four digits, deposit and withdrawal history, account balance records
Account Data	Username, hashed password, account preferences, marketing consent status, responsible gaming settings (deposit limits, self-exclusion status)
Transaction Data	Betting history, game session records, wager amounts, winnings, bonus usage, game titles played
Device & Usage Data	IP address, browser type and version, operating system, device identifiers, pages visited, session timestamps, click-path data
Location Data	Country and city inferred from IP address, used for geo-compliance screening
Communication Data	Support ticket content, live chat transcripts, email correspondence with the fbajj support team

3. How We Collect Personal Data

fbajj collects personal data through several channels in the ordinary course of operating the platform:

• Account Registration: When you create a fbajj account, you provide your name, date of birth, email address, and mobile number directly.
• KYC Verification: When you submit identity documents (National ID card, passport, utility bill) to satisfy our Know Your Customer obligations prior to withdrawal processing.
• Deposits and Withdrawals: When you make a payment via bKash, Nagad, Rocket, Upay, or a bank transfer, relevant transaction data is captured automatically.
• Platform Interaction: As you navigate the fbajj website and use betting or casino features, we collect device and usage data automatically through cookies and server logs.
• Support Contacts: When you contact our support team via email or live chat, the content of those communications is retained for quality assurance and dispute resolution purposes.
• Third-Party Data Providers: We may receive supplementary verification data from identity-check service providers engaged to support our KYC process.

4. Purpose and Legal Basis for Processing

fbajj processes personal data only where a valid legal basis exists for doing so. The table below sets out the primary purposes for which we use personal data and the corresponding legal basis in each case:

Processing Purpose	Legal Basis
Creating and managing your fbajj account	Performance of contract
Processing deposits and withdrawals	Performance of contract
Conducting KYC identity verification	Legal obligation; legitimate interest (fraud prevention)
Responsible gaming monitoring and intervention	Legitimate interest (player welfare); legal obligation
Fraud detection and anti-money-laundering screening	Legal obligation; legitimate interest
Customer support and dispute resolution	Performance of contract; legitimate interest
Sending account-related transactional notifications	Performance of contract
Sending promotional communications and bonus offers	Consent (opt-in only)
Platform analytics and performance improvement	Legitimate interest
Legal compliance and regulatory reporting	Legal obligation

5. Data Sharing and Disclosure

fbajj does not sell, rent, or trade your personal data to third parties. We may share personal data with the following categories of recipients only to the extent necessary for the stated purpose:

• Payment Processors: bKash, Nagad, Rocket, Upay, and banking partners receive transaction data necessary to process your deposit and withdrawal instructions.
• Identity Verification Providers: Third-party KYC service providers may receive identity document images and biographic data to complete automated verification checks on our behalf.
• Game Software Providers: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive anonymised session identifiers to facilitate game delivery, but do not receive your full identity or financial data.
• IT Infrastructure Providers: Cloud hosting and database providers that host fbajj platform data on our behalf under contractual data-processing agreements that prohibit independent use of your data.
• Fraud Prevention and AML Services: Specialist screening services may receive certain data fields to detect fraud, match funding, or unusual betting patterns consistent with financial crime.
• Legal and Regulatory Authorities: Where fbajj is required by applicable law, court order, or regulatory directive to disclose personal data, we will do so. We will notify you where permitted by law.

All third parties engaged by fbajj are contractually required to implement appropriate technical and organisational security measures and to process personal data only in accordance with fbajj's documented instructions.

6. Data Retention

fbajj retains personal data for as long as is necessary to fulfil the purposes for which it was collected, to maintain an accurate account record, and to comply with applicable legal and regulatory retention obligations. The following general retention periods apply:

• Active account data: Retained for the full duration of your registered account with fbajj.
• KYC and identity documents: Retained for a minimum of 5 years from the date of account closure, in line with standard anti-money-laundering record-keeping requirements.
• Transaction and betting history: Retained for a minimum of 5 years from the date of each transaction.
• Support communications: Retained for 3 years from the date of the last communication in a given case, or for the duration of any unresolved dispute.
• Device and usage logs: Retained for up to 13 months from the date of collection, after which they are aggregated or anonymised.
• Marketing consent records: Retained for the duration of your account plus 3 years to evidence consent compliance.

Following the applicable retention period, personal data is securely deleted or irreversibly anonymised. You may request early deletion of certain data categories by contacting [email protected], subject to our legal retention obligations overriding such requests where applicable.

7. Security Measures

fbajj implements a layered set of technical and organisational measures to protect personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures include but are not limited to:

• 256-bit SSL/TLS encryption for all data in transit between your browser or mobile device and fbajj servers.
• Encryption at rest for sensitive personal data fields including identity documents, financial account references, and password hashes.
• Role-based access controls that restrict internal access to personal data to employees and contractors whose job function requires it.
• Two-factor authentication requirements for all fbajj administrative systems that process personal data.
• Regular penetration testing and vulnerability assessments conducted by independent security specialists.
• Audit logging of all access to and modifications of personal data records within our systems.
• Formal incident response procedures for detecting, containing, and reporting personal data breaches within required timeframes.

8. Cookies and Tracking Technologies

fbajj uses cookies and similar client-side technologies to provide core platform functionality, remember your session and preferences, and collect aggregate analytics data. The following cookie categories are used:

• Strictly Necessary Cookies: Essential for core platform functions such as maintaining your login session, storing your language preference, and enabling secure payment flows. These cookies cannot be disabled without materially impairing the platform experience.
• Functional Cookies: Used to remember your personalisation choices such as preferred game categories, notification settings, and responsible gaming limits you have configured.
• Analytics Cookies: Used to collect anonymised, aggregated data about how players navigate and use the fbajj platform, helping us identify usability improvements. We use first-party analytics only — fbajj does not use Google Analytics or similar third-party analytics platforms that track users across other websites.

fbajj does not use advertising cookies, retargeting pixels, or any cross-site tracking technology. You may manage cookie settings through your browser's privacy controls. Note that disabling strictly necessary cookies may prevent certain platform features from functioning correctly.

9. Your Data Rights

Subject to applicable law and certain limitations, you hold the following rights with respect to the personal data fbajj holds about you. To exercise any of these rights, please submit a written request to [email protected] from the email address registered to your fbajj account. We will respond within 30 days of receiving a valid request.

• Right of Access: You may request a summary of the personal data fbajj holds about you, including the categories of data, the purposes for which it is processed, and the recipients with whom it has been shared.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data. For contact details and account preferences, you can make changes directly within your account settings.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose it was collected, where you have withdrawn consent, or where it has been processed unlawfully. This right is subject to fbajj's legal retention obligations, which may require us to retain certain data for a minimum period regardless of your request.
• Right to Restriction: You may request that we restrict processing of your personal data in certain circumstances, for example while a rectification request is being resolved.
• Right to Data Portability: You may request a machine-readable copy of personal data you have provided to fbajj in a structured, commonly used format.
• Right to Object: You may object to the processing of your personal data where fbajj relies on legitimate interests as its legal basis, including profiling for responsible gaming monitoring purposes.
• Right to Withdraw Marketing Consent: Where you have consented to receive promotional communications from fbajj, you may withdraw that consent at any time by contacting [email protected] or updating your account notification preferences. Withdrawal does not affect the lawfulness of prior processing.

10. Minors and Age Policy

fbajj is an adults-only platform. We do not knowingly collect personal data from individuals under the age of 21. Our registration process requires applicants to confirm that they are at least 21 years of age, and we verify this through KYC procedures prior to processing any withdrawal.

If fbajj becomes aware, through KYC review or any other means, that personal data belonging to a person under the age of 21 has been collected, we will immediately suspend the relevant account, void any associated bets or winnings derived from bonus activity, and securely delete the personal data of the underage individual as soon as practicable, subject to any legal retention obligations.

If you believe that a person under the age of 21 has registered an account with fbajj, please report this to [email protected] immediately.

11. International Data Transfers

fbajj operates as an internationally licensed offshore platform. Accordingly, personal data collected from Bangladesh players may be transferred to and stored on servers located outside of Bangladesh, including in jurisdictions that may have different data protection standards than those applicable locally.

Where personal data is transferred to third-party processors located in other jurisdictions, fbajj ensures that appropriate contractual safeguards are in place — including data processing agreements with standard contractual clauses — to ensure that your personal data is afforded a level of protection consistent with the principles set out in this Policy regardless of where it is processed.

12. Third-Party Links and Embedded Content

The fbajj platform may contain references to or integrations with third-party services such as game providers and payment processors. These third parties operate their own platforms and privacy practices, which are independent of fbajj. fbajj is not responsible for the data practices of any third party whose services are accessed through or in connection with the fbajj platform.

We encourage you to review the privacy policies of any third-party service providers whose services you use in connection with your fbajj account, including your chosen payment method provider (e.g., bKash, Nagad, Rocket) and any game studio whose titles you play on the platform.

13. Changes to This Privacy Policy

fbajj reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, platform features, or applicable legal requirements. When material changes are made, we will update the "Last Updated" date at the top of this document and, where practical, notify registered players by email or in-platform notification.

Your continued use of the fbajj platform following the effective date of any revised Privacy Policy constitutes your acknowledgement of the changes. It is your responsibility to review this page periodically. If you disagree with a revised Policy, you must cease using the platform and may request account closure by contacting [email protected].

14. Contact and Data Requests

For all privacy-related enquiries, data access requests, correction requests, erasure requests, or consent withdrawal notices, please contact the fbajj data team using the details below. All communications must be submitted in English from the email address registered to your fbajj account to enable us to verify your identity before processing the request.

Data Enquiries Email: [email protected]
Subject Line: Privacy Request — [Your Registered Username]
Response Target: Within 30 calendar days of receiving a valid, verifiable request
Platform: https://fbajj.io
Support Hours: 24 hours a day, 7 days a week

This Privacy Policy was last reviewed and updated on 1 January 2026. The version published on this page is the current and binding version of the fbajj Privacy Policy.