Privacy Policy — How gdbaje Protects Your Data

gdbaje collects personal data through several channels. The categories of information we may hold about you include:

• Identity data: full name, date of birth, nationality, and copies of government-issued identification (National ID card, passport).
• Contact data: Bangladeshi mobile number, email address, and residential address.
• Financial data: mobile wallet account details (bKash, Nagad, Rocket, Upay), bank account information (BRAC Bank, City Bank, Dutch-Bangla Bank), transaction history, deposit and withdrawal records.
• Account data: username, encrypted password hash, account preferences, responsible gaming settings, and gameplay history.
• Technical data: IP address, device type, operating system, browser type, session timestamps, and cookies or similar tracking technologies.
• Communications data: records of your interactions with gdbaje customer support, including chat logs, emails, and support ticket history.

We do not intentionally collect sensitive personal data such as racial or ethnic origin, religious beliefs, political opinions, or health information. If such data is provided incidentally during a support interaction, it will be deleted promptly.

gdbaje uses your personal data strictly for the following purposes:

• Account management: creating and maintaining your gdbaje player account, verifying your identity, and managing your login credentials.
• Payment processing: facilitating deposits and withdrawals through bKash, Nagad, Rocket, Upay, and partnered Bangladeshi banks; detecting and preventing fraudulent transactions.
• Legal compliance: fulfilling anti-money laundering (AML) obligations, Know Your Customer (KYC) requirements, and any other applicable legal or regulatory duties.
• Responsible gaming: monitoring gameplay patterns to identify potential signs of problem gambling; enforcing player-requested deposit limits, cooling-off periods, and self-exclusion requests.
• Platform improvement: analysing aggregated, anonymised usage data to improve game offerings, platform performance, and user experience.
• Customer support: responding to your queries, resolving disputes, and communicating updates about your account or transactions.
• Marketing communications: sending promotional offers, bonus notifications, and seasonal campaign updates — only where you have opted in to receive such communications.

gdbaje uses cookies and similar technologies to operate core platform features and to understand how players interact with the site. Cookies are small text files stored on your device when you visit the gdbaje platform.

The types of cookies we use include:

• Essential cookies: required for the platform to function — for example, maintaining your logged-in session and storing your preferences.
• Analytics cookies: used to collect anonymised data about page visits, time spent on the platform, and navigation paths, helping us optimise the user experience.
• Security cookies: used to detect and prevent fraudulent account activity, bot traffic, and multiple-account abuse.

You may disable non-essential cookies through your device or browser settings. Disabling essential cookies may impair your ability to access certain features of the gdbaje platform, including login and payment functions.

gdbaje does not sell your personal data. We share data only with carefully selected third-party processors who assist us in operating the platform, and only to the extent necessary for the services they provide. Categories of recipients include:

• Payment processors: mobile wallet operators (bKash, Nagad, Rocket, Upay) and Bangladeshi banking partners process transaction data necessary to complete deposits and withdrawals on your behalf.
• Game content providers: licensed game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive anonymised session identifiers to operate their games on our platform. These providers do not receive your identity or payment data.
• Identity verification services: KYC and document verification partners may process copies of your identification documents solely for the purpose of confirming your identity and age.
• Fraud prevention providers: security and fraud analytics services receive technical data (IP address, device fingerprint) to identify and block fraudulent activity.

All third-party processors engaged by gdbaje are contractually bound to handle your data in accordance with the same privacy standards described in this Policy and are prohibited from using your data for any other purpose.

gdbaje retains your personal data for as long as your account remains active and for a defined period thereafter, as required by applicable legal obligations. Our standard retention periods are as follows:

• Account and identity data: retained for the duration of your account and for a minimum of 5 years following account closure, in compliance with anti-money laundering record-keeping requirements.
• Transaction records: retained for a minimum of 5 years from the date of each transaction.
• Support communications: retained for 3 years from the date of the last interaction.
• Technical and analytics data: retained in anonymised or aggregated form for up to 2 years for platform analytics purposes.

When data reaches the end of its retention period, it is securely deleted or irreversibly anonymised so that it can no longer be linked to any individual.

The gdbaje platform is strictly for adults aged 21 years and above. gdbaje does not knowingly collect personal data from individuals under the age of 21. If we become aware that a minor has registered an account or submitted personal data, we will immediately close the account, delete the associated data, and forfeit any funds held in that account in accordance with our Terms & Conditions.

If you believe that a person under the age of 21 has registered on the gdbaje platform, please notify us immediately at [email protected] so that we can take prompt action.

gdbaje employs a layered security architecture to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our security measures include:

• 256-bit SSL/TLS encryption on all data in transit between your device and our servers.
• AES-256 encryption for sensitive data stored at rest, including payment credentials and identity documents.
• Two-factor authentication (2FA) options for player accounts.
• Continuous intrusion detection and real-time security monitoring.
• Strict access controls ensuring that only authorised gdbaje personnel can access player data, and only to the extent required by their role.
• Regular third-party security penetration testing and vulnerability assessments.

Despite these measures, no platform can guarantee absolute security. In the event of a data breach that materially affects your rights, gdbaje will notify affected players without undue delay and take all reasonable remedial action.

gdbaje reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. When material changes are made, we will notify registered players via their registered mobile number or email address before the changes take effect. The updated Policy will also be published on this page with a revised effective date.

Your continued use of the gdbaje platform following notification of any update constitutes your acceptance of the revised Privacy Policy. If you do not accept a revised Policy, you must cease using the platform and may request account closure by contacting [email protected].

For any questions, requests, or concerns regarding this Privacy Policy or the handling of your personal data, please contact the gdbaje support team. We are committed to responding to all privacy-related enquiries within 5 business days.

Contact us at: [email protected] (plain text — not a clickable link). Include your registered username, the nature of your enquiry, and, where applicable, the specific data or transaction you are enquiring about. All privacy-related communications are handled confidentially.