ubajee Privacy Policy

1 Introduction

ubajee operates the online casino and sports betting platform accessible at ubajee.biz, serving registered players primarily located in Bangladesh. As the data controller in respect of personal data collected through the platform, ubajee takes its obligations regarding data privacy seriously and is committed to handling all personal information with transparency, care, and in accordance with applicable data protection principles.

This Privacy Policy applies to all individuals who visit, register on, or otherwise interact with the ubajee platform, including prospective players who begin but do not complete the registration process. It covers all personal data collected through the website, account management interface, payment systems, customer support channels, and any communications sent by ubajee to players.

This policy should be read together with the ubajee Terms & Conditions and Responsible Gaming Policy, both of which are published on the platform and incorporated by reference. In the event of any conflict between this Privacy Policy and any other document, this Privacy Policy shall prevail in respect of all data protection matters.

2 Data We Collect

2.1 Registration and Account Data

When you create an account with ubajee, we collect the personal data necessary to establish and manage your account. This includes:

• Full legal name as it appears on your identity document.
• Date of birth (used to verify that you meet the 18+ age requirement).
• Email address (used as your primary account identifier and for communications).
• Mobile telephone number (used for account verification and security notifications).
• Residential address, including city and postal code.
• Username and encrypted password credentials.

2.2 Identity Verification (KYC) Data

To comply with our Know Your Customer obligations and to process withdrawal requests, ubajee may request and retain copies of the following documents:

• Government-issued photo identity documents, such as a National Identity Card (NID), passport, or driving licence.
• Proof of residential address, such as a utility bill, bank statement, or official correspondence dated within the last three months.
• Evidence of the payment method used for deposits, such as a screenshot or confirmation from bKash, Nagad, Rocket, or Upay accounts, or a copy of a Visa or Mastercard statement.

2.3 Transaction and Financial Data

ubajee records all financial transactions conducted through your account, including deposit amounts, withdrawal requests, bonus credits, wagering activity, and account balance history. We do not store full card numbers or complete mobile banking credentials; payment transaction data is handled by our regulated third-party payment processors under their own security and compliance frameworks.

2.4 Technical and Usage Data

When you access the ubajee platform, we automatically collect certain technical data through standard web server logs and analytics tools. This includes your IP address, browser type and version, operating system, device type, referring URL, pages visited, session duration, and click-path data. This information is used for platform security, fraud detection, and service improvement purposes.

2.5 Communications Data

If you contact ubajee through our customer support channels — including email to [email protected] or any on-platform messaging system — we retain records of those communications, including the content of messages, timestamps, and any attachments, for the purposes of resolving your query and maintaining a complete support history.

2.6 Responsible Gaming Data

Where you make use of ubajee's responsible gaming tools — such as setting deposit limits, requesting a cooling-off period, or initiating self-exclusion — we record those preferences and actions. This data is retained for the purpose of enforcing your chosen restrictions and is treated with the highest level of care given its sensitive nature.

3 How We Use Your Data

ubajee uses the personal data it collects for clearly defined purposes. We do not use your data in ways that are incompatible with the purposes described at the point of collection. The primary purposes for which ubajee processes personal data are as follows:

• Account creation and management: To register your account, verify your identity, manage your profile, and maintain accurate records of your relationship with ubajee.
• Service delivery: To provide access to casino games, sports betting markets, live dealer games, and all other platform features available to registered players.
• Payment processing: To process deposits and withdrawal requests through our integrated payment partners, including bKash, Nagad, Rocket, Upay, Visa, and Mastercard.
• KYC compliance: To verify the identity, age, and address of players before processing withdrawals, in line with our anti-money laundering obligations.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, multiple account creation, bonus abuse, and other prohibited conduct as defined in our Terms & Conditions.
• Customer support: To respond to your enquiries, process complaints, and maintain a record of all support interactions for quality and accountability purposes.
• Platform communications: To send you transactional emails such as deposit confirmations, withdrawal notifications, password reset instructions, and account security alerts.
• Responsible gaming: To enforce self-imposed player restrictions, deliver reality-check reminders, and monitor account activity for indicators of problem gambling behaviour.
• Legal and regulatory compliance: To fulfil ubajee's obligations under applicable law, including responding to lawful requests from regulatory and law enforcement authorities.
• Service improvement and analytics: To analyse aggregated usage patterns, improve platform performance, and develop new features based on player behaviour data.

4 Legal Basis for Processing

ubajee processes your personal data on one or more of the following legal bases, depending on the nature of the processing activity:

• Contractual necessity: Processing that is necessary for the performance of the contract between you and ubajee — for example, creating your account, processing payments, and delivering access to platform services.
• Legal obligation: Processing required to comply with applicable legal obligations, including KYC identity verification, anti-money laundering checks, and responding to lawful requests from authorities.
• Legitimate interests: Processing conducted for ubajee's legitimate business interests where those interests are not overridden by your data protection rights — for example, fraud detection, platform security, and internal analytics. ubajee has assessed its legitimate interests against the potential impact on players and is satisfied that the balance supports this basis.
• Consent: Where processing is based on your consent — for example, receiving marketing communications — you have the right to withdraw that consent at any time without affecting the lawfulness of any processing that took place prior to withdrawal.

5 Cookies and Tracking Technologies

5.1 What Are Cookies

Cookies are small text files placed on your device by the ubajee platform when you visit the website. They allow the platform to recognise your browser, remember your session state, and collect certain usage data. ubajee also uses similar tracking technologies including local storage objects and session tokens.

5.2 Types of Cookies Used

• Strictly necessary cookies: Required for the platform to function correctly. These include session authentication tokens, login state persistence, and security cookies. These cannot be disabled without preventing access to core platform features.
• Functional cookies: Used to remember your preferences such as language settings, display options, and last-visited game category. These improve your experience but are not essential to platform operation.
• Analytics cookies: Used to collect aggregated data about how players use the platform, including pages visited, time spent, and navigation paths. This data is used internally to improve the platform and does not identify individual players in reports.
• Security cookies: Used to detect and prevent fraudulent activity, including repeated failed login attempts and suspicious device fingerprinting patterns.

5.3 Managing Cookies

You may configure your browser to refuse or delete cookies at any time. Please note that disabling strictly necessary cookies may prevent you from accessing your account or using key platform features. Instructions for managing cookies are available in the help documentation for all major browsers including Chrome, Firefox, Safari, and Edge.

6 Third-Party Data Sharing

ubajee does not sell, rent, or share your personal data with third parties for their own commercial or marketing purposes. We share personal data only in the following limited circumstances, and only to the extent strictly necessary for the specified purpose:

• Payment processors: bKash, Nagad, Rocket, Upay, Visa, and Mastercard receive the transaction data necessary to process your deposit or withdrawal. Each processor operates under its own privacy policy and security framework.
• KYC and identity verification providers: Third-party identity verification services receive the personal and document data necessary to complete the KYC verification process. These providers are bound by data processing agreements and may not use your data for any purpose other than verification.
• Fraud prevention and security services: Aggregated or pseudonymised technical data (such as IP addresses and device fingerprints) may be shared with fraud detection services to identify and prevent prohibited activity on the platform.
• Game technology providers: Providers such as Pragmatic Play, Evolution Gaming, PG Soft, JILI, and Spribe operate the game software delivered through the ubajee platform. These providers may receive session data necessary for game delivery but do not receive your full personal profile.
• Legal and regulatory authorities: ubajee will disclose personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by applicable law, or where disclosure is necessary to protect the rights, safety, or property of ubajee or its players.
• Business transfers: In the event of a merger, acquisition, or sale of all or substantially all of ubajee's assets, player data may be transferred to the acquiring entity as part of that transaction. Registered players will be notified of any such transfer by email prior to their data being transferred and subject to a different privacy policy.

7 Data Retention

ubajee retains personal data for as long as is necessary to fulfil the purposes for which it was collected, or for as long as required or permitted by applicable law. The following general retention periods apply:

• Active account data: Retained for the full duration of your account being active on the ubajee platform.
• Closed account data: Following account closure, core account and transaction records are retained for a minimum of five years to satisfy anti-money laundering record-keeping obligations.
• KYC documents: Retained for a minimum of five years following the date of verification, in line with applicable regulatory requirements.
• Customer support records: Retained for a minimum of two years following the resolution of the relevant support interaction or complaint.
• Responsible gaming records: Self-exclusion records are retained indefinitely to prevent re-registration by excluded players. Other responsible gaming preference records are retained for the duration of the account plus two years.
• Technical and analytics data: Aggregated analytics data is retained for up to twenty-four months. Raw technical logs (including IP address logs) are retained for up to twelve months unless required for an active investigation.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with ubajee's internal data lifecycle procedures.

8 Data Security

ubajee implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the ubajee platform.
• Encryption of sensitive data fields (including passwords and payment reference data) at rest using industry-standard algorithms.
• Role-based access controls ensuring that only authorised personnel with a legitimate business need can access player personal data.
• Regular internal security reviews and vulnerability assessments of the platform infrastructure.
• Audit logging of all access to sensitive player data, with automated alerts for anomalous access patterns.
• Staff training on data protection obligations and secure data handling procedures.

While ubajee takes all reasonable steps to protect your personal data, no method of internet transmission or electronic storage is completely secure. In the unlikely event of a data breach that is likely to result in a risk to your rights and freedoms, ubajee will notify affected players without undue delay and in accordance with applicable legal requirements.

9 Your Data Rights

As a data subject, you have the following rights in respect of the personal data ubajee holds about you. Requests to exercise any of these rights should be submitted in writing to [email protected]. ubajee will acknowledge receipt within three business days and endeavour to respond substantively within thirty calendar days.

• Right of access: You have the right to request a copy of the personal data ubajee holds about you, along with information about how that data is being processed.
• Right to rectification: You have the right to request that ubajee correct any personal data that is inaccurate or incomplete. You may update certain account information directly through your account profile settings.
• Right to erasure: You have the right to request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where processing is unlawful. This right is subject to ubajee's legal retention obligations — for example, anti-money laundering record-keeping requirements may prevent immediate deletion of certain data.
• Right to restrict processing: You have the right to request that ubajee restricts the processing of your personal data in certain circumstances — for example, while a dispute about accuracy is being resolved.
• Right to object: You have the right to object to processing carried out on the basis of legitimate interests, and to object at any time to the processing of your data for direct marketing purposes.
• Right to data portability: Where processing is based on consent or contractual necessity and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that occurred prior to withdrawal.

10 Children's Privacy

The ubajee platform is strictly restricted to individuals aged 18 years and over. ubajee does not knowingly collect, process, or retain personal data from individuals under the age of 18. If you are a parent or guardian and believe that a minor has created an account or provided personal data to ubajee without your consent, please contact us immediately at [email protected]. Upon verification, ubajee will promptly close the account and delete all associated personal data.

ubajee employs age verification measures during the registration process and as part of the KYC verification procedure. Any account found to belong to a person under 18 will be suspended without notice and referred for investigation in accordance with our child protection obligations.

11 International Data Transfers

The ubajee platform serves players located in Bangladesh. Some of the third-party service providers with whom ubajee shares data — including certain game technology providers, KYC verification services, and fraud prevention platforms — may process data on servers located outside Bangladesh. Where personal data is transferred to processors in other countries, ubajee ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that described in this Privacy Policy.

Such safeguards may include contractual data processing agreements incorporating standard data protection clauses, or reliance on the third party's certification under a recognised international data protection framework. Where you have questions about the safeguards applicable to any specific international transfer, please contact [email protected].

12 Changes to This Privacy Policy

ubajee reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, platform features, or applicable legal requirements. Where changes are material — meaning they significantly affect how we collect, use, or share your personal data — we will notify registered players by email to the address on file at least fourteen days before the revised policy takes effect.

The updated Privacy Policy will be published on this page with a revised effective date. Your continued use of the ubajee platform after the effective date of any revised policy constitutes your acceptance of the updated terms. We encourage you to review this page periodically to stay informed of how ubajee protects your data.

13 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way ubajee handles your personal data, please contact our support team using the details below. All data-related correspondence should be submitted in English and clearly marked as a privacy enquiry.

• Email: [email protected]
• Subject line (recommended): Privacy Request — [Your Account Username]
• Support Hours: 24 hours a day, 7 days a week, including public holidays.
• Response Target: Acknowledgement within 3 business days; substantive response within 30 calendar days for formal data rights requests.

If you are not satisfied with ubajee's response to a privacy concern, you may seek further recourse through applicable consumer protection or data protection channels available in your jurisdiction.