Privacy Policy — rajabets

1 Information We Collect

When you register for and use a rajabets account, we collect personal data across several categories. The information we gather depends on how you interact with the platform — some data is provided directly by you, some is generated automatically as you use our services, and some may be received from third-party verification partners.

Data You Provide Directly:

• Registration Data: Full legal name, date of birth, gender, email address, mobile phone number, and residential address (including city — such as Dhaka, Chittagong, Sylhet, Khulna or Rajshahi — and postal code).
• Identity Verification Documents: National Identity Card (NID) number and scan, passport, birth certificate (for age verification), and proof of address documents such as utility bills or bank statements dated within 90 days.
• Payment Information: Mobile banking account numbers for bKash, Nagad, Rocket, and Upay; bank account or card details for Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank, Visa, or Mastercard transactions. Full card numbers and banking PINs are never stored on rajabets servers.
• Account Preferences: Communication preferences, responsible gaming limit settings, self-exclusion status, and language or display preferences you configure within your account.
• Support Communications: Any messages, emails, or chat transcripts exchanged between you and the rajabets support team.

Data Collected Automatically:

• Technical Data: IP address, browser type and version, operating system, device identifiers, screen resolution, and referring URL.
• Usage Data: Pages visited on the rajabets platform, games played, bet amounts and outcomes, session duration, login timestamps, and navigation paths.
• Cookies and Tracking: Session cookies, persistent preference cookies, and analytics identifiers as described in Section 4 of this policy.

2 How We Use Your Data

rajabets processes your personal data only for lawful, specified, and transparent purposes. Below is a detailed breakdown of the purposes for which your data is used, along with the legal basis for each activity.

rajabets does not use automated decision-making or profiling in a way that produces legal or similarly significant effects on players, beyond standard fraud and bonus-abuse detection systems which are subject to human review upon request.

3 Data Sharing and Third Parties

rajabets does not sell, rent, or otherwise commercially transfer your personal data to unaffiliated third parties. However, in certain defined circumstances, we share data with trusted service providers and partners who assist us in delivering the rajabets service. All such third parties are bound by confidentiality agreements and are prohibited from using your data for any purpose outside the services they provide to us.

Categories of Third Parties Who May Receive Your Data:

• Identity Verification Providers: Third-party KYC services that validate the authenticity of identity documents and confirm player age. These providers process only the minimum data required for verification and do not retain document copies beyond the verification window.
• Payment Processing Partners: Mobile financial services (bKash, Nagad, Rocket, Upay) and banking institutions (Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank) involved in processing your deposit and withdrawal transactions. Payment processors operate under their own privacy policies and are governed by Bangladesh Bank regulations.
• Game Software Providers: Game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive session identifiers and anonymised game-play statistics necessary for operating the games and detecting cheating. These providers do not receive your full name, address, or payment details.
• Analytics and Performance Services: Platform analytics tools that aggregate and anonymise usage data to help us understand platform performance, identify technical issues, and improve user experience.
• Legal and Regulatory Authorities: Where required by applicable law, court order, or regulatory demand, rajabets may disclose personal data to government bodies, law enforcement agencies, or financial intelligence units. We will notify you of any such disclosure where we are legally permitted to do so.

4 Cookies and Tracking Technologies

rajabets uses cookies and similar tracking technologies to operate core platform functions, remember your preferences, analyse site performance, and detect fraudulent or abusive behaviour. By continuing to use the rajabets platform, you consent to the use of cookies as described in this section.

Types of Cookies We Use:

• Strictly Necessary Cookies: These cookies are essential for the platform to function. They manage your login session, maintain your account state during an active betting session, and support security features such as cross-site request forgery (CSRF) protection. These cookies cannot be disabled without breaking core platform functionality.
• Preference Cookies: These cookies remember settings you have chosen, such as your preferred language, display preferences, and responsible gaming limit acknowledgements, so you do not need to reconfigure them on each visit.
• Analytics Cookies: These cookies collect aggregated, anonymised data about how players navigate the rajabets platform — which pages are visited most often, how long players spend on each section, and where navigation drop-offs occur. This data is used solely to improve the platform experience.
• Fraud and Security Cookies: These cookies help rajabets identify unusual patterns of behaviour that may indicate account takeover attempts, bonus abuse, or multi-accounting. They form part of our broader security infrastructure and cannot be disabled by players.

rajabets does not use third-party advertising cookies or cross-site tracking technologies that follow your activity on websites outside of the rajabets platform itself.

5 Data Security Measures

rajabets implements a layered set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. While no online platform can guarantee absolute security, we maintain controls consistent with industry best practice for online gaming operators.

• Transport Encryption: All data transmitted between your browser or app and the rajabets platform is encrypted using TLS 1.2 or TLS 1.3 protocols. The padlock icon in your browser's address bar confirms an active secure connection.
• Data Encryption at Rest: Sensitive personal data — including identity document references, payment identifiers, and KYC records — is stored in encrypted form on rajabets servers. Encryption keys are managed separately from the encrypted data.
• Access Controls: Access to personal data within rajabets is restricted on a strict need-to-know basis. Staff members are granted only the minimum level of data access required to perform their specific job functions. All internal data access is logged and subject to periodic audit.
• Password Security: Account passwords are stored as salted cryptographic hashes. rajabets staff cannot view your password in plaintext. We strongly encourage players to use a unique, strong password for their rajabets account and to enable two-factor authentication where available.
• Incident Response: In the event of a data security incident that poses a material risk to players, rajabets will notify affected account holders via their registered email address as promptly as practicable and in accordance with applicable notification obligations.

6 Data Retention Policy

rajabets retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, accounting, or dispute-resolution obligations. The following general retention periods apply:

• Active Account Data: Personal data associated with an active rajabets account is retained for the duration of the account relationship and is accessible within your account settings at any time.
• Closed Account Data: Upon voluntary account closure or termination, rajabets retains core account records — including identity verification documents, transaction history, and betting records — for a minimum period of five (5) years from the date of closure. This retention period supports our obligations relating to anti-money-laundering compliance, financial record-keeping, and the resolution of any disputes that may arise post-closure.
• KYC Documents: Identity verification documents are retained for a minimum of five (5) years following the end of the account relationship, in line with applicable financial crime prevention requirements.
• Support Communications: Customer support transcripts and correspondence are retained for a period of three (3) years from the date of the last interaction, after which they are securely deleted.
• Analytics Data: Anonymised and aggregated analytics data that cannot be linked back to an individual is not subject to the same retention limits and may be retained indefinitely for platform improvement purposes.

When personal data is no longer required and the applicable retention period has expired, rajabets securely deletes or anonymises the data so that it can no longer be associated with an identifiable individual.

7 Your Privacy Rights

As a player on the rajabets platform, you hold the following rights in relation to your personal data. To exercise any of these rights, please submit a written request to support@rajabets with the subject line "Privacy Rights Request". We will acknowledge your request within 5 business days and aim to respond fully within 30 calendar days.

• Right of Access: You have the right to request a copy of the personal data rajabets holds about you, along with information about the purposes for which it is processed and the categories of third parties with whom it is shared.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it. You may also update certain information (such as your email address or phone number) directly within your account settings.
• Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where you object to processing based on legitimate interests. Please note that erasure requests may be declined where retention is required by law or to defend legal claims.
• Right to Restrict Processing: You may request that we restrict the processing of your personal data in certain circumstances — for example, while the accuracy of the data is being verified, or where you have objected to processing and we are assessing the grounds for that objection.
• Right to Object: You have the right to object to the processing of your personal data where that processing is based on our legitimate interests. You also have an unconditional right to object to the use of your data for direct marketing purposes.
• Right to Data Portability: Where processing is based on your consent or on contract performance, you may request that we provide your personal data in a structured, commonly used, machine-readable format so that you can transfer it to another service provider.
• Right to Withdraw Consent: Where we rely on your consent as the legal basis for processing, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of any processing carried out prior to the withdrawal.

8 Privacy Contact and Policy Updates

If you have any questions, concerns, or complaints about this Privacy Policy or about the way rajabets handles your personal data, please contact our privacy support team using the details below. All privacy-related communications are handled confidentially by a dedicated team member.

• Email: support@rajabets (plain text — not a clickable link)
• Subject Line: "Privacy Policy Enquiry" or "Privacy Rights Request"
• Response Time: We aim to acknowledge all privacy enquiries within 5 business days (Bangladesh Standard Time, UTC+6) and to provide a full response within 30 calendar days.
• Support Hours: Our 24/7 English-language live chat and email support team is available every day of the year, including Bangladeshi public holidays.

Policy Updates: rajabets reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, operational requirements, or applicable legal obligations. When material changes are made, we will notify registered players by email or via an in-platform notification at least 7 days before the changes take effect. The "Last Updated" date at the top of this document will always reflect the most recent revision. We encourage you to review this page periodically to stay informed about how rajabets protects your personal information.