LEGAL DOCUMENT

ebaji Privacy Policy

We respect your privacy. This policy explains what data ebaji collects, why we collect it, and how we keep it safe for every player in Bangladesh.

📅 Last Updated: January 2026

Introduction

ebaji ("we", "us", "the Platform") is committed to protecting the privacy and personal data of every player who accesses or registers on the ebaji platform at ebaji.onl. This Privacy Policy explains the categories of personal data we collect, the purposes for which we process that data, the conditions under which we may share it with third parties, and the rights you hold with respect to your personal information. This policy applies to all players, visitors, and registered account holders who interact with the ebaji website and its associated services.

By registering an account with ebaji, making a deposit, or continuing to use the platform after this policy has been updated, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not agree with any part of this policy, you must not use the ebaji platform.

ebaji does not sell, rent, or trade your personal data to third-party marketing companies. Your information is used solely to operate and improve the platform, comply with legal obligations, and provide you with a secure and personalised experience.

Your Privacy at a Glance

🔒
SSL Encryption

All data transmitted between your device and ebaji servers is protected by SSL encryption.

🙈
No Data Selling

ebaji never sells or rents your personal information to third-party marketers or data brokers.

✅
Your Consent

We collect only the information you provide during registration and your activity on the platform.

🗑️
Right to Delete

You may request deletion of your personal data at any time by contacting the ebaji support team.

📦
Data Minimisation

ebaji collects only the minimum personal data necessary to operate the platform and fulfil legal requirements.

📞
Support Access

Contact our support team any time to exercise your privacy rights or ask questions about your data.

1. Information We Collect

ebaji collects personal data in three broad categories: information you provide directly during account registration and use of the platform, information generated automatically by your use of the platform, and information provided by third-party payment processors during deposit and withdrawal transactions. The specific data collected in each category is described below.

Information You Provide Directly

  • Registration information: your full legal name, date of birth, gender, nationality, residential address, and a valid Bangladeshi mobile phone number. This information is required to create and verify your account.
  • Identity documents submitted for KYC verification: a copy of your Bangladesh National Identity Card (NID), passport, or other government-issued photo identification, and where required, proof of address documents.
  • Communication records: messages, emails, and live chat transcripts exchanged with the ebaji support team, including any complaints or feedback submitted by you.
  • Responsible gaming settings: deposit limits, loss limits, session reminders, and self-exclusion requests that you configure in your account settings.

Information Generated Automatically

  • Device and technical data: your IP address, device type and model, operating system version, browser type and version, screen resolution, and mobile network operator. This data is collected automatically each time you access the platform.
  • Usage and session data: pages visited, time spent on each page, navigation paths, games played, bets placed, game results, login and logout timestamps, and session duration. This data helps ebaji improve platform performance and detect unusual activity.
  • Cookies and similar tracking technologies: session cookies required for platform functionality, preference cookies that remember your settings, and analytics cookies that help us understand aggregate usage patterns. See Section 5 for full details on cookies.

Information from Payment Providers

  • Transaction records: deposit and withdrawal amounts, timestamps, transaction reference numbers, and the payment method used (e.g. bKash, Nagad, Rocket, Upay). ebaji does not store full mobile banking PINs or passwords — these are handled entirely by the payment provider.
  • Partial payment identifiers: the last four digits of a card number or the partial mobile number associated with a payment wallet, used solely for the purpose of identifying and matching your payment method to your account during withdrawals.
  • Fraud and AML screening data: information returned by payment fraud detection and anti-money-laundering (AML) screening services used by ebaji's payment processing partners. ebaji uses this data solely to comply with its legal obligations and protect the integrity of the platform.

2. How We Use Your Information

ebaji uses the personal data it collects for the following specific purposes. We process your data only to the extent necessary for each stated purpose, in line with the principle of data minimisation:

  • Account creation and management: to register your account, verify your identity, maintain your account settings and preferences, and enable you to access all platform features.
  • Payment processing: to process deposits and withdrawals via bKash, Nagad, Rocket, Upay, and other supported payment methods, and to maintain an accurate financial record of all transactions on your account.
  • Customer support: to respond to your queries, complaints, and account requests through live chat and email support channels. Support communications may be retained for quality assurance and dispute resolution purposes.
  • Legal and regulatory compliance: to fulfil KYC obligations, conduct age verification, perform anti-money-laundering checks, respond to lawful requests from law enforcement or regulatory bodies, and maintain records required by applicable law.
  • Platform security and fraud prevention: to detect, investigate, and prevent fraudulent activity, bonus abuse, account takeover attempts, and other prohibited conduct using automated monitoring tools and manual review processes.
  • Service improvement and personalisation: to analyse aggregate usage patterns across the platform, identify performance issues, improve game loading times, and deliver a more relevant experience based on your activity history. ebaji does not use your data to profile you for commercial advertising beyond its own platform.

ebaji does not use your personal data for automated decision-making that produces legal or similarly significant effects on you without human review. All account closure decisions resulting from fraud investigations are subject to manual review by the ebaji compliance team.

ebaji processes your personal data under one or more of the following legal bases, depending on the specific processing activity:

  • Contractual necessity: processing required to perform the contract between you and ebaji — specifically, to create your account, process your deposits and withdrawals, and provide you with access to games and betting markets.
  • Legal obligation: processing required to comply with applicable laws and regulations, including KYC and age verification requirements, anti-money-laundering obligations, and the retention of financial transaction records.
  • Legitimate interests: processing carried out in pursuit of ebaji's legitimate interests in operating a secure, fair, and commercially viable platform — including fraud detection, platform security monitoring, and aggregate analytics to improve platform performance.
  • Consent: where we have obtained your specific, informed, and freely given consent before processing — for example, when you opt into receiving promotional communications from ebaji. You may withdraw consent at any time by contacting the support team or updating your account notification preferences.

4. Sharing Your Information

ebaji does not sell, rent, or otherwise transfer your personal data to third parties for their own marketing or commercial purposes. We share your personal data only in the limited circumstances described in this section:

Payment Processing Partners

ebaji shares transaction data with payment processing partners — including bKash, Nagad, Rocket, and Upay — to the extent strictly necessary to process your deposits and withdrawals. These partners operate their own privacy policies and are bound by their own data protection obligations. ebaji does not control what data these providers independently collect from you during a payment transaction on their own platforms.

Game and Technology Providers

ebaji uses game content and platform technology from third-party suppliers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These suppliers may receive session identifiers and game-play data necessary to deliver their game content within the ebaji platform. No directly identifying personal data such as your full name, NID, or mobile number is shared with game suppliers unless required for a specific regulatory compliance purpose.

Legal and Regulatory Disclosure

ebaji may disclose your personal data to law enforcement agencies, regulatory bodies, or government authorities where required by applicable law, where disclosure is necessary to comply with a valid legal order or process, or where disclosure is necessary to protect the rights, property, or safety of ebaji, its players, or the public. In all such cases, ebaji will disclose only the minimum data required to satisfy the legal obligation and will, where legally permissible, notify the affected player of the disclosure.

ebaji will never voluntarily share your personal data with a third party who has not been described in this Privacy Policy. If we engage a new category of third-party processor in the future, this Privacy Policy will be updated before that processing begins, and registered players will be notified.

5. Cookies and Tracking Technologies

ebaji uses cookies and similar local storage technologies to ensure the platform functions correctly, to remember your preferences, and to understand how players use the platform in aggregate. The cookies ebaji uses fall into three categories:

  • Essential cookies: strictly necessary for the platform to function. These include session cookies that keep you logged in during a game session, security tokens that protect against cross-site request forgery, and load-balancing cookies that ensure your requests are served consistently. These cookies cannot be disabled without breaking core platform functionality.
  • Preference cookies: used to remember your language preference, display settings, and responsible gaming configuration so that these settings persist between sessions. These cookies improve your experience but are not strictly required for the platform to work.
  • Analytics cookies: used to collect anonymised, aggregated data about how players navigate and use the platform — including which pages are visited most frequently, average session lengths, and the device types most commonly used. This data is used solely to improve platform performance and does not identify you personally.

You may manage or disable non-essential cookies through your browser settings. Please note that disabling preference or analytics cookies will not prevent you from using the platform but may result in your display preferences not being remembered between sessions. ebaji does not use third-party advertising networks or remarketing cookies.

6. Data Retention

ebaji retains your personal data for as long as your account remains active and for a defined period after account closure, in order to fulfil our legal, regulatory, and contractual obligations. The specific retention periods that apply to different categories of data are as follows: account registration and identity data is retained for a minimum of five years following account closure; financial transaction records are retained for a minimum of five years from the date of each transaction; customer support communication records are retained for two years from the date of the communication; game play and session logs are retained for one year from the date of the session; KYC documentation is retained for five years following the completion of the verification process.

Once the applicable retention period has expired, ebaji will securely delete or anonymise your personal data so that it can no longer be attributed to you as an individual. Where data is anonymised rather than deleted, it may be retained in aggregated form for statistical and platform improvement purposes indefinitely, as anonymised data does not constitute personal data.

7. Data Security

ebaji takes the security of your personal data seriously. We implement a range of technical and organisational measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. The security measures we employ include:

  • SSL/TLS encryption: all data transmitted between your device and ebaji servers is encrypted using industry-standard SSL/TLS protocols. This protects your account credentials, payment information, and personal data from interception during transmission.
  • Access controls: personal data is accessible only to ebaji staff who require it to perform their specific job functions. Access is governed by role-based permissions and is logged for audit purposes. No member of staff has unrestricted access to the full database of player personal data.
  • Secure password storage: account passwords are stored using one-way cryptographic hashing. ebaji never stores passwords in plain text and cannot retrieve your password — only reset it via a verified identity process.
  • Incident response: ebaji maintains a data breach response procedure. In the event of a security incident that affects your personal data, ebaji will notify affected players as promptly as practicable and will take immediate steps to contain and remediate the incident.

While ebaji takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security. You are responsible for keeping your login credentials confidential and for notifying ebaji immediately if you suspect your account has been accessed without your authorisation.

8. Your Privacy Rights

As a registered ebaji player, you hold the following rights with respect to your personal data. To exercise any of these rights, please contact the ebaji support team using the email address shown in the footer of this page. ebaji will respond to all valid privacy rights requests within 30 days of receipt:

  • Right of access: you may request a copy of all personal data ebaji holds about you, together with a description of the purposes for which it is being processed and the categories of recipients with whom it has been shared.
  • Right to rectification: if you believe that any personal data ebaji holds about you is inaccurate or incomplete, you may request that it be corrected or updated. ebaji will action valid rectification requests within 14 days.
  • Right to erasure: you may request the deletion of your personal data. ebaji will fulfil erasure requests where the data is no longer necessary for the purposes for which it was collected, where you withdraw consent and no other legal basis applies, or where the data has been unlawfully processed. Erasure requests will be declined where retention is required by law, for example to satisfy financial record-keeping obligations.
  • Right to restrict processing: you may request that ebaji restricts the processing of your personal data in certain circumstances — for example, while a rectification request is being assessed, or where you contest the legal basis for processing.
  • Right to object: you may object to the processing of your personal data where ebaji relies on legitimate interests as its legal basis. ebaji will cease processing upon receipt of a valid objection unless it can demonstrate compelling legitimate grounds for the processing that override your interests.

To submit a privacy rights request, please contact the ebaji support team using the email address displayed in the footer of this page. Include your registered mobile number and a brief description of the right you wish to exercise. ebaji may request identity verification before processing a privacy rights request to ensure that personal data is not disclosed to an unauthorised third party.

9. Third-Party Links

The ebaji platform may contain references to third-party payment providers and game suppliers. While ebaji takes care to work only with reputable partners, ebaji is not responsible for the privacy practices, data processing activities, or security standards of any third-party website or service that you access through or in connection with the ebaji platform. We encourage you to read the privacy policy of any third-party service before providing your personal data to that service. This Privacy Policy applies exclusively to data processed by ebaji and does not extend to third-party services.

10. Children's Privacy

The ebaji platform is strictly intended for adults aged 21 years and above. ebaji does not knowingly collect personal data from individuals under the age of 21. Age is verified at the point of registration using the date of birth provided by the applicant, and KYC verification is required to confirm age before the first withdrawal is processed.

If ebaji becomes aware that personal data has been collected from a person under the age of 21 without appropriate parental or guardian consent, ebaji will delete that data promptly and close the associated account. If you believe that a minor has registered an account on the ebaji platform, please contact the support team immediately using the email address in the footer.

11. Changes to This Privacy Policy

ebaji reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the services we provide. When changes are made, the updated policy will be published on this page with a revised effective date shown at the top of the document. Where changes are material — meaning they significantly affect how we process your personal data or the rights available to you — ebaji will make reasonable efforts to notify registered players via their registered mobile number or email address before the changes take effect.

Your continued use of the ebaji platform after any changes to this Privacy Policy have been communicated constitutes your acceptance of the revised policy. If you do not agree with the changes, you should stop using the platform and may request account closure by contacting the support team.

12. Contact Us

If you have questions, concerns, or requests relating to this Privacy Policy or the way ebaji handles your personal data, please contact the ebaji support team using the email address displayed in the footer of this page. Support is available 24/7. When submitting a privacy inquiry, please include your registered mobile number and a clear description of your request so that our team can process it efficiently. ebaji is committed to responding to all privacy-related inquiries within 30 days of receipt.

Your Privacy Matters to Us

Have questions about your data? Visit our FAQ or explore our Responsible Gaming page for more information on how we protect your experience.

Read the FAQ Responsible Gaming

21+ only. Please gamble responsibly.