fbaaji Privacy Policy — Your Data, Your Rights
At fbaaji, protecting your personal data is a core obligation, not an afterthought. This Privacy Policy explains precisely what information we collect, why we collect it, how it is used, and the rights you hold as a registered user. We are committed to handling your data with transparency, care, and strict confidentiality at all times.
How fbaaji Protects Your Privacy
A summary of our core data protection commitments to every registered user on the fbaaji platform in Bangladesh.
SSL Encryption
All data transmitted between your browser and fbaaji is protected by 256-bit SSL encryption. Your personal details, payment information, and account credentials are never sent in plain text over any network connection.
No Data Sales
fbaaji does not sell, rent, or trade your personal data to any third party for marketing or commercial purposes. Your information is used solely to operate and improve the fbaaji platform and related services.
KYC Compliance
Identity verification is conducted in line with standard KYC practice. Documents you submit for verification are stored securely, accessed only by authorised compliance personnel, and never shared without legal basis.
Cookie Transparency
fbaaji uses cookies solely for platform functionality, session management, and aggregate performance analytics. No behavioural profiling cookies are placed for third-party advertising. Full cookie details are in Section 4.
Your Data Rights
You have the right to access, correct, export, restrict processing of, and request deletion of your personal data held by fbaaji, subject to legal retention obligations. Submit requests via our 24/7 live chat support.
Defined Retention
fbaaji retains personal data only for as long as necessary to fulfil the purposes for which it was collected, and in compliance with applicable financial record-keeping obligations. Full retention periods are listed in Section 6.
Complete Policy Document
This document constitutes the full and binding Privacy Policy for fbaaji. By registering an account or using any fbaaji service, you confirm that you have read and understood this policy in its entirety.
1. Data We Collect
1.1 Registration Data
When you create a fbaaji account, we collect the following information: your full legal name (as it appears on your National Identity Document or passport), date of birth, residential address in Bangladesh, email address, and mobile phone number. This information is mandatory — without it, we cannot create a verified account or process financial transactions in BDT.
1.2 Identity Verification (KYC) Data
To comply with our Know Your Customer obligations and to prevent underage gambling and fraud, fbaaji may request documentary evidence including a copy of your National ID Card (NID), passport, driving licence, or birth certificate, as well as proof of address (such as a utility bill or bank statement issued to your registered address in Bangladesh). KYC documents are processed by authorised compliance staff only and are stored in an encrypted document management system.
1.3 Financial Transaction Data
When you make a deposit or withdrawal, fbaaji records transaction metadata including the payment method used (e.g., bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, Mastercard), the transaction amount in BDT, the transaction timestamp (BST, UTC+6), and a transaction reference number. We do not store full card numbers — only masked payment identifiers where technically required for reconciliation.
1.4 Behavioural and Usage Data
fbaaji collects data about how you use the platform, including pages visited, games played, bets placed, session duration, login timestamps, and navigation patterns. This data is used in aggregate to improve platform performance, identify technical issues, personalise your experience, and detect suspicious activity patterns. Individual behavioural data is not sold or disclosed to third-party advertisers.
1.5 Technical and Device Data
When you access fbaaji, our servers automatically log certain technical data including your IP address, browser type and version, operating system, device type (desktop or mobile), screen resolution, language preference, referring URL, and error logs. This data is used for security monitoring, fraud detection, and platform optimisation purposes.
1.6 Communication Data
If you contact fbaaji via live chat, email, or any other support channel, we retain records of those communications including the content of messages, timestamps, and any attachments. These records are used to resolve disputes, train support staff, and maintain an audit trail of customer interactions.
1.7 Data You Voluntarily Provide
In addition to mandatory registration data, you may voluntarily provide additional information such as preferred payment methods, notification preferences, responsible gaming limit settings, or responses to optional surveys. This data is used solely to personalise your fbaaji experience and will never be used against your interests.
2. How We Use Your Data
2.1 Account Management and Service Delivery
The primary purpose for collecting your personal data is to create and maintain your fbaaji account, process your BDT deposits and withdrawals via local payment methods, settle bets and casino game outcomes, deliver customer support, and provide you with a secure and uninterrupted gambling experience on the fbaaji platform.
2.2 Legal and Regulatory Compliance
fbaaji processes certain personal data because it is required to do so by applicable law. This includes retaining financial transaction records for anti-money laundering (AML) compliance, verifying user identity and age for responsible gambling and KYC obligations, and providing data to law enforcement or regulatory authorities where lawfully directed to do so.
2.3 Fraud Prevention and Security
fbaaji uses your account data, transaction history, device information, and IP address to detect and prevent fraudulent activity, money laundering, collusion, use of automated betting software, and unauthorised account access. Where suspicious activity is identified, fbaaji may temporarily restrict your account pending investigation, in accordance with our Terms & Conditions.
2.4 Platform Improvement and Analytics
Aggregate, anonymised usage data is analysed by fbaaji's technical team to identify performance bottlenecks, improve the user interface, optimise page load speeds, prioritise new feature development, and understand how users across Bangladesh interact with different sections of the platform, including cricket betting, slots, racing, and the finance wallet.
2.5 Responsible Gambling Monitoring
fbaaji uses your gameplay data and account history to monitor for indicators of problem gambling behaviour, such as sudden increases in deposit frequency, extended session durations, or rapid loss escalation. Where such indicators are detected, fbaaji may proactively reach out to offer responsible gaming tools including deposit limits, session reminders, and self-exclusion options. See our Responsible Gaming page for full details.
2.6 Communications and Promotions
With your consent, fbaaji may use your email address and mobile number to send you transactional notifications (bet confirmations, deposit receipts, withdrawal updates) and, where you have opted in, promotional communications about bonuses, seasonal offers tied to events such as BPL, IPL, T20 World Cup, Eid, or Pohela Boishakh. You may withdraw your consent for promotional communications at any time via your account notification settings or by contacting support.
2.7 Legal Basis Summary
fbaaji processes personal data on the following legal bases: (a) contractual necessity — to perform our obligations to you as a platform; (b) legal obligation — to comply with AML, KYC, and other applicable laws; (c) legitimate interests — for fraud prevention, security, and platform improvement; (d) consent — for promotional communications and optional data uses where we have expressly sought your permission.
3. Data Sharing & Disclosure
3.1 Game Technology Providers
To deliver casino and slot content, fbaaji integrates with third-party game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and Play'n GO. These providers may receive limited technical session data (such as a pseudonymous session token and game transaction ID) necessary to load games and settle outcomes. They do not receive your full name, NID details, or payment method information.
3.2 Payment Processing Partners
To process BDT deposits and withdrawals via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard, fbaaji shares the minimum transaction data required by each payment processor to complete the transaction. All payment partners are bound by their own data protection obligations and applicable Bangladeshi financial regulations.
3.3 Identity Verification Services
Where fbaaji uses a third-party identity verification or KYC service to validate documents submitted by users, that provider will process the document data under a strict data processing agreement with fbaaji. Verified document data is not retained by the third-party provider beyond the verification event unless required by applicable law.
3.4 Legal and Regulatory Authorities
fbaaji will disclose personal data to law enforcement agencies, regulatory bodies, tax authorities, or courts where required to do so by applicable law, valid legal process, or lawful order. fbaaji will, where permitted, notify the affected user of such a disclosure request before compliance. Where prior notification is not permitted by the requesting authority, fbaaji will notify the user as soon as legally practicable thereafter.
3.5 Business Transfers
In the event of a merger, acquisition, asset sale, or restructuring involving fbaaji, user personal data may be transferred to the acquiring or successor entity as part of that transaction. In any such event, fbaaji will ensure that the acquiring entity is bound by data protection obligations at least equivalent to those set out in this Privacy Policy, and users will be notified of any material change to the data controller identity.
3.6 No Onward Third-Party Marketing
fbaaji does not share your personal data with any third-party marketing network, data broker, affiliate marketing platform, or social media advertising platform for the purpose of targeting you with advertisements on other websites or applications. Your data remains within the fbaaji ecosystem and its directly contracted service providers as described above.
4. Cookies & Tracking Technologies
4.1 What Are Cookies
Cookies are small text files placed on your device by a website you visit. fbaaji uses cookies and similar tracking technologies (such as local storage and session tokens) to keep you logged in, remember your platform preferences, maintain your betting slip state, and collect aggregate analytics about how the platform is used. Cookies do not contain your full personal data and cannot execute code.
4.2 Types of Cookies fbaaji Uses
| Cookie Type | Purpose | Duration | Third Party? |
|---|---|---|---|
| Strictly Necessary | Session management, authentication, security tokens, CSRF protection | Session / 24 hrs | No |
| Functional | Language preference, odds format, layout preference, responsible gaming alert timers | 30 days | No |
| Analytics | Aggregate page view counts, device type distribution, feature usage statistics — anonymised, used to improve the platform | 90 days | Limited (anonymised only) |
| Fraud Detection | Device fingerprint tokens used to detect suspicious login patterns and automated account activity | 180 days | No |
4.3 What fbaaji Does NOT Use Cookies For
fbaaji does not deploy advertising cookies, retargeting pixels, social media tracking scripts, or any cookie that follows you across other websites to build a behavioural advertising profile. No Google Ads, Facebook Pixel, or similar third-party advertising tracking technology is active on fbaaji pages.
4.4 Managing Cookies
You may manage or disable cookies through your browser settings at any time. Most modern browsers allow you to block third-party cookies, clear existing cookies, or be notified before a cookie is placed. Please note that disabling strictly necessary cookies will impair platform functionality — you may not be able to remain logged in or use the betting interface correctly. Disabling analytics or functional cookies will not prevent you from using the core platform but may reduce personalisation quality.
5. Data Security
5.1 Technical Security Measures
fbaaji applies the following technical controls to protect personal data:
- 256-bit TLS/SSL encryption for all data in transit between your browser and fbaaji servers.
- AES-256 encryption at rest for all stored personal and financial data.
- Hashed and salted password storage — fbaaji never stores passwords in plain text.
- Multi-factor authentication available for user accounts and mandatory for internal administrative access.
- Firewalls, intrusion detection systems, and DDoS mitigation across all platform infrastructure.
- Regular third-party penetration testing and vulnerability assessments.
- Automated monitoring and alerting for anomalous access patterns or data exfiltration attempts.
5.2 Organisational Security Measures
Access to personal data within fbaaji is governed by a strict role-based access control (RBAC) policy. Only personnel with a direct operational need to access specific categories of data are granted permission. All personnel with access to personal data are bound by confidentiality obligations. Regular data protection training is conducted for all relevant staff, with particular emphasis on handling KYC documents and payment data.
5.3 Data Breach Response
In the event of a personal data breach that poses a risk to your rights and freedoms, fbaaji will take immediate steps to contain the breach, assess its scope and impact, and notify affected users without undue delay. Notifications will be sent to your registered email address and will include a description of the breach, the categories of data affected, the steps fbaaji has taken in response, and guidance on any protective actions you should take.
5.4 Your Role in Security
The security of your fbaaji account also depends on you. You are responsible for maintaining a strong, unique password for your account, not sharing your credentials with any third party, logging out of shared or public devices after each session, and notifying fbaaji support immediately if you suspect unauthorised access to your account. fbaaji will never ask for your password via email, live chat, SMS, or any other channel.
6. Data Retention
6.1 Retention Principles
fbaaji retains personal data only for as long as is necessary to fulfil the purposes for which it was originally collected, and in accordance with applicable legal, regulatory, and financial record-keeping requirements. When the retention period for a category of data expires, fbaaji securely deletes or anonymises that data in a manner that prevents reconstruction.
6.2 Retention Schedule
| Data Category | Retention Period | Legal Basis for Retention |
|---|---|---|
| Account registration data (name, DOB, address, email, phone) | Duration of account + 5 years post-closure | AML compliance, dispute resolution |
| KYC identity documents (NID, passport, proof of address) | Duration of account + 5 years post-closure | KYC regulatory obligation |
| Financial transaction records (deposits, withdrawals, bet history) | 7 years from transaction date | Financial record-keeping, AML |
| Support communication logs (live chat, email) | 3 years from last interaction | Dispute resolution, quality assurance |
| Behavioural and usage analytics (anonymised) | 2 years (rolling) | Platform improvement (legitimate interest) |
| Technical and device logs (IP, browser, session) | 12 months (rolling) | Security monitoring, fraud prevention |
| Responsible gaming interaction records | Duration of account + 5 years post-closure | Regulatory compliance, user protection |
6.3 Account Closure and Data Deletion
When you close your fbaaji account, your account profile is deactivated immediately. Certain categories of personal data are retained for the periods specified in the schedule above for legal compliance purposes. After the applicable retention period has elapsed, all remaining personal data associated with your account will be securely deleted or irreversibly anonymised. You may request a copy of all data held about you before closure — see Section 7 for your data rights.
7. Your Rights & Choices
7.1 Right of Access
You have the right to request a copy of all personal data fbaaji holds about you, along with information about why it is held, how long it will be retained, and who it has been shared with. This is commonly referred to as a Subject Access Request (SAR). fbaaji will provide this information in a structured, commonly used, machine-readable format within 30 days of receiving a verified request.
7.2 Right to Rectification
If any personal data fbaaji holds about you is inaccurate or incomplete, you have the right to request that it be corrected. For minor account details such as your email address or phone number, you can update these directly in your account settings. For more sensitive data such as your legal name or date of birth (which must match your identity documents), please contact fbaaji support with supporting documentation.
7.3 Right to Erasure ("Right to Be Forgotten")
You may request that fbaaji delete your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where there is no overriding legitimate ground for continued processing. Please note that fbaaji cannot delete data that it is legally required to retain — for example, financial transaction records subject to AML retention obligations. In such cases, fbaaji will inform you of which data cannot be deleted and the legal reason why.
7.4 Right to Restriction of Processing
You may request that fbaaji restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data is being contested, or while an objection to processing is being assessed. During a restriction period, fbaaji will continue to store the data but will not actively process it beyond storage.
7.5 Right to Data Portability
Where processing is based on your consent or on a contract with you, and where processing is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to request that fbaaji transmit that data directly to another controller where technically feasible.
7.6 Right to Object
You have the right to object to fbaaji processing your personal data on the basis of legitimate interests — including profiling for responsible gaming monitoring — where you believe your individual circumstances override fbaaji's legitimate interest. You also have an unconditional right to object to your data being used for direct marketing purposes at any time.
7.7 Withdrawal of Consent
Where fbaaji processes your data on the basis of consent (such as for promotional email communications), you may withdraw that consent at any time without penalty. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal. To opt out of promotional communications, adjust your notification preferences in account settings or contact fbaaji support.
8. Contact & Data Protection Enquiries
8.1 How to Contact Us About Privacy
If you have any questions, concerns, or requests relating to this Privacy Policy or the personal data fbaaji holds about you, please contact our support team via 24/7 live chat on the fbaaji platform, or send a written enquiry to our support email address. The support email address for privacy-related matters is: [email protected] (plain text only — this is not a clickable link).
When submitting a data rights request, please include your registered full name, the email address associated with your fbaaji account, and a clear description of the request you are making. fbaaji may need to verify your identity before processing the request to protect your data from unauthorised disclosure.
8.2 Response Timeframes
fbaaji aims to acknowledge all privacy-related enquiries within 2 business days (BST, UTC+6) and to provide a full response within 30 calendar days of receiving a verified request. In cases of particular complexity, fbaaji may extend the response period by a further 30 days, in which case you will be notified of the extension and the reasons for it within the initial 30-day window.
8.3 Changes to This Privacy Policy
fbaaji may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or platform services. When material changes are made, fbaaji will post the updated policy at https://fbaaji.net/privacy-policy with a revised "Last Updated" date, and will notify registered users via email where the changes materially affect your rights or how your data is used. Continued use of the fbaaji platform following notification of a material change constitutes your acceptance of the revised policy.
8.4 Applicable Law
This Privacy Policy is written in English and is governed by the principles of fair and transparent data processing. While fbaaji operates in the Bangladesh market and serves users primarily located in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar, the English text of this policy is the authoritative and legally operative version. Any translation provided for convenience does not carry independent legal weight.
Privacy at a Glance
Key data protection facts every fbaaji user in Bangladesh should know. These cards summarise — but do not replace — the full policy above.
No Cold Calls or Spam
fbaaji will never cold-call you, send unsolicited SMS marketing without consent, or share your phone number with third-party marketers. Your mobile number is used only for account verification and opt-in notifications.
Secure BDT Payments
All BDT transactions via bKash, Nagad, Rocket, Upay, and bank transfers are processed through encrypted channels. fbaaji does not store full card numbers or mobile banking PINs under any circumstances.
You Control Email Opt-Ins
Promotional emails about bonuses, BPL offers, Eid promotions, and seasonal tournaments are only sent where you have explicitly opted in. Unsubscribe at any time via your account settings or the link in any email.
Password Never Requested
fbaaji will never ask for your account password by email, live chat, SMS, or phone. If anyone claiming to represent fbaaji requests your password, treat this as a phishing attempt and report it to support immediately.
Data Deletion on Request
Subject to legal retention obligations, you may request deletion of your personal data at any time by contacting support. Requests are acknowledged within 2 business days and resolved within 30 calendar days.
No Cross-Site Ad Tracking
fbaaji does not use advertising pixels or retargeting cookies that track your activity on other websites. Our analytics are internal and aggregate only — your browsing habits outside fbaaji are not monitored or profiled.
Your Privacy Is Protected — Now Explore fbaaji
Now that you understand how fbaaji safeguards your personal data, feel free to explore our full range of cricket betting, casino games, slots, and more — all in BDT with instant bKash and Nagad support.