gbiji Privacy Policy

1. Information We Collect

gbiji collects personal data in several ways: directly from you when you register an account or interact with the platform, automatically as you navigate the site, and from third-party verification partners where necessary for Know Your Customer (KYC) compliance. We only collect information that is genuinely necessary for the purposes described in this Privacy Policy.

Information You Provide Directly

When you register a gbiji account, make a deposit, request a withdrawal, contact support, or participate in a promotion, we may collect the following categories of personal data:

• Identity data: Full legal name, date of birth, gender, and nationality as they appear on your government-issued identification documents.
• Contact data: Email address, mobile phone number, and, where provided, a residential address in Bangladesh or elsewhere.
• Account credentials: Your chosen username and a hashed (never plain-text) version of your password. We do not store your password in readable form.
• Financial data: Payment method details such as your bKash or Nagad mobile number, bank account details for Dutch-Bangla Bank, City Bank, or BRAC Bank transfers, and card details (card number last four digits only; full card data is handled exclusively by our PCI-compliant payment processors and is never stored on gbiji servers).
• Identity verification documents: Copies of your national ID card, passport, or driving licence submitted during the KYC process. These are stored securely and used solely for age and identity verification purposes.
• Communications data: The content of any messages you send to gbiji via live chat, email, or support ticket, including any attachments or screenshots you choose to share.

Information Collected Automatically

When you visit and use the gbiji platform, our servers and analytics tools automatically record certain technical and behavioural data, including:

• Device and browser data: IP address, browser type and version, operating system, device type, screen resolution, and referring URL.
• Session and usage data: Pages visited, time spent on pages, game sessions initiated, bets placed, in-platform search queries, and interaction patterns such as clicks and scrolls.
• Geolocation data: Approximate geographic location derived from your IP address (country and city level). We do not collect precise GPS coordinates.
• Cookie and tracking data: As described in the Cookies section of this Policy.

Information From Third Parties

gbiji may receive supplementary personal data from trusted third-party service providers, including identity verification agencies used for KYC checks, fraud prevention services, and payment processors. This data is used solely to verify your identity, process transactions, and protect the integrity of the platform. It is not used for marketing profiling.

2. How We Use Your Data

gbiji processes your personal data for clearly defined purposes. We do not use your data in ways that are incompatible with those purposes, and we do not engage in automated decision-making that has a legal or similarly significant effect on you without human review. The primary purposes for which we use your data are as follows:

Marketing Communications

Where you have opted in to receive marketing communications from gbiji, we may send you information about promotions, bonuses, new game releases, seasonal offers (such as Eid or BPL-related promotions), and other platform news. You can withdraw your consent and unsubscribe from marketing emails at any time by clicking the unsubscribe link in any marketing email or by contacting [email protected]. Withdrawal of marketing consent does not affect the lawfulness of processing that occurred prior to withdrawal.

Responsible Gaming Monitoring

As part of our commitment to player welfare, gbiji uses account activity data — including deposit frequency, session duration, and betting patterns — to identify players who may be exhibiting signs of problem gambling. Where our monitoring system flags a concern, a trained member of the gbiji responsible gaming team may proactively reach out to the player. This monitoring is conducted in the interests of player safety and does not result in account suspension unless separate grounds for suspension exist under our Terms & Conditions.

3. Data Sharing and Disclosure

gbiji does not sell your personal data to third parties. We share personal data only in the limited circumstances described below, and always with appropriate contractual safeguards in place to ensure your data is treated with the same standard of care that gbiji itself applies.

Service Providers and Technology Partners

We share data with carefully selected third-party service providers who assist us in operating the gbiji platform. These include:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, and international card processors for Visa and Mastercard transactions. These providers receive only the payment data necessary to process your specific transaction.
• KYC and identity verification providers: Third-party verification agencies that help us confirm the identity and age of players in compliance with our anti-money laundering obligations.
• Game technology providers: Software studios such as Pragmatic Play, NetEnt, Evolution Gaming, Microgaming, Ezugi, and Spribe whose games are hosted on the gbiji platform. These providers may receive anonymised session data for the purposes of game performance and RNG auditing, but do not receive your personally identifiable registration data.
• Fraud prevention and security services: Providers of fraud detection software that analyse platform activity to identify suspicious patterns. Data shared is subject to strict confidentiality agreements.
• Analytics platforms: Anonymised and aggregated usage data may be shared with analytics partners for the purpose of understanding how players use the gbiji platform and improving the user experience. No personally identifiable information is included in this sharing.

Legal and Regulatory Disclosure

gbiji may be required to disclose personal data to law enforcement agencies, financial intelligence units, courts, or other government bodies where we are legally compelled to do so. We will comply with all valid legal requests. Where we are legally permitted to notify you of such a disclosure, we will do so. We will not voluntarily share data with authorities beyond what is legally required.

Business Transfers

In the event that gbiji undergoes a merger, acquisition, or sale of all or a substantial part of its assets, player data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and the resulting changes to this Privacy Policy before the transfer takes effect.

4. Cookies and Tracking Technologies

The gbiji platform uses cookies and similar tracking technologies to ensure the platform functions correctly, to remember your preferences, to keep your session secure, and to gather anonymised data about how the platform is used so that we can continue to improve it.

What Are Cookies?

Cookies are small text files placed on your device by a website you visit. They allow the website to recognise your device on subsequent visits and to store certain information about your preferences and session state. Cookies cannot execute code and cannot be used to access other files on your device.

Types of Cookies We Use

Managing Cookies

You can control and delete cookies through your browser settings. Most modern browsers allow you to refuse all cookies, accept only certain types, or delete existing cookies. Please note that disabling strictly necessary cookies will prevent the gbiji platform from functioning correctly — you will not be able to log in or maintain an active game session. Disabling functional or analytics cookies will not prevent you from using the platform but may result in a less personalised experience.

gbiji does not use advertising cookies or cross-site tracking cookies. We do not participate in third-party retargeting networks or behavioural advertising exchanges.

5. Data Retention

gbiji retains your personal data for as long as your account remains active and for a defined period thereafter, in accordance with our legal obligations and legitimate business purposes. We do not retain data indefinitely; once the retention period for a given category of data has passed, that data is securely deleted or anonymised.

Retention Periods by Data Category

• Account registration data (name, email, date of birth): Retained for the lifetime of the account and for five years following permanent account closure.
• KYC and identity verification documents: Retained for a minimum of five years from the date of verification, in compliance with applicable anti-money laundering record-keeping requirements.
• Financial transaction records (deposits, withdrawals, bet history): Retained for seven years from the date of each transaction, consistent with standard financial record-keeping obligations.
• Customer support communications: Retained for three years from the date of the last interaction in a support thread.
• Marketing consent records: Retained for the period of consent and for three years following withdrawal of consent, as evidence that the consent was valid at the time communications were sent.
• Anonymised analytics data: Retained indefinitely in aggregated, non-identifiable form for platform analytics purposes. This data cannot be linked back to any individual player.
• Self-exclusion records: Retained for a minimum of seven years following the end of the self-exclusion period to prevent circumvention through re-registration.

Where gbiji is subject to a legal hold — for example, where player data is required in connection with ongoing litigation, regulatory investigation, or law enforcement request — the relevant data will be retained beyond the standard periods until the hold is lifted.

6. Data Security Measures

gbiji implements a layered approach to data security, combining technical controls, procedural safeguards, and staff training to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure.

Technical Controls

• Transport Layer Security (TLS): All data in transit between your device and our servers is encrypted using TLS 1.2 or higher. The gbiji platform enforces HTTPS at all times; unencrypted HTTP connections are automatically redirected.
• Data encryption at rest: Sensitive data fields — including identity document data, financial account references, and KYC records — are encrypted at rest using AES-256 encryption on our storage infrastructure.
• Password hashing: Account passwords are never stored in plain text. We apply a strong one-way hashing algorithm with a unique salt per password record so that even in the unlikely event of a data breach, your actual password cannot be recovered.
• Access controls: Access to personal data within gbiji's internal systems is restricted on a strict need-to-know basis using role-based access control (RBAC). All internal access is logged and subject to periodic audit.
• Intrusion detection: Our platform is monitored around the clock by automated intrusion detection systems that alert our security team to anomalous access patterns in real time.

Procedural Safeguards

All gbiji staff and contractors who handle personal data are subject to confidentiality obligations. Staff with access to player data receive regular data protection and security awareness training. Third-party service providers with whom we share data are contractually required to implement equivalent security standards and are subject to periodic review.

Breach Response

In the event of a personal data breach that poses a risk to your rights and freedoms, gbiji will take immediate steps to contain the breach and will notify affected players as soon as reasonably practicable, providing clear information about the nature of the breach, the data affected, and the steps we are taking in response. We will also notify the relevant authorities as required by applicable law.

7. Your Privacy Rights

As a player on the gbiji platform, you hold a number of rights in relation to the personal data we hold about you. gbiji is committed to honouring these rights promptly and without undue burden. To exercise any of the rights described below, please contact us at [email protected] with the subject line "Privacy Rights Request" and include your registered username and a brief description of your request.

• Right of Access: You have the right to request a copy of the personal data that gbiji holds about you, along with information about how it is being processed. We will provide this within a reasonable timeframe following identity verification.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update basic account information directly within your account settings; for changes to KYC-verified data, please contact support.
• Right to Erasure: Subject to our legal retention obligations, you have the right to request the deletion of your personal data. Where we are required by law to retain certain records (such as KYC documents and transaction history), we will inform you of what data must be retained and for how long.
• Right to Restrict Processing: You may request that we temporarily restrict the processing of your personal data in certain circumstances — for example, while you contest the accuracy of data we hold about you.
• Right to Data Portability: Where processing is based on your consent or on contract performance, you may request that we provide your personal data in a structured, commonly used, machine-readable format so that you can transfer it to another service provider.
• Right to Object: You have the right to object to the processing of your personal data where it is carried out on the basis of our legitimate interests. We will consider your objection and cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (for example, for marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

gbiji aims to respond to all valid privacy rights requests within 30 days of receipt. In cases of complexity or volume, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it. We do not charge a fee for reasonable requests. Where requests are manifestly unfounded or excessive, we reserve the right to charge a reasonable administrative fee or decline to respond, explaining our reasons.

8. Contact and Policy Updates

Contacting gbiji About Privacy

If you have any questions, concerns, or complaints about this Privacy Policy or about how gbiji handles your personal data, please contact our support team in the first instance:

• Email: [email protected] — use the subject line "Privacy Enquiry" for fastest routing.
• Live Chat: Available 24/7 via the gbiji platform — our support agents can assist with privacy queries and escalate to our data protection team where necessary.

gbiji is committed to resolving privacy concerns promptly and transparently. If you submit a complaint, we will acknowledge receipt within two business days and provide a substantive response within 20 business days.

Updates to This Privacy Policy

gbiji may update this Privacy Policy from time to time to reflect changes in our data practices, changes to the services we offer, or changes in applicable law. When we make material changes to this Policy, we will publish the updated version on this page with a revised effective date and, where the changes are significant, we will send a notification to your registered email address. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your data.

Your continued use of the gbiji platform after the publication of an updated Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with any changes, you must cease using the platform and request account closure by contacting us at [email protected].