wbaji Privacy Policy

wbaji ("we", "us", "our", or "Platform") is the operator of wbaji.pro, an online casino and sports betting platform serving players in Bangladesh. This Privacy Policy ("Policy") describes how wbaji collects, processes, stores, shares, and protects personal data belonging to users ("you", "your", or "Player") who visit, register on, or use any service provided through wbaji.pro. By creating an account or using our platform, you acknowledge that you have read and understood this Policy and consent to the data practices described herein.

This Policy applies to all personal data collected through wbaji.pro and any associated mobile or web application operated by wbaji. It does not apply to third-party websites or services linked from our platform, including game providers and payment processors, who operate under their own privacy policies. We encourage you to review the privacy policies of any third-party services you use in connection with wbaji.

wbaji collects personal data that is necessary to provide a safe, compliant, and functional online gaming service to players in Bangladesh. We collect data in three primary ways: data you provide directly during registration and use of the platform, data generated automatically by your device and browser when you access the platform, and data received from third-party payment processors and identity verification partners.

Registration and Account Data

• Full name and date of birth (required to verify your identity and confirm you are aged 21 or above).
• Bangladesh mobile phone number (used as your login identifier, for deposit/withdrawal confirmations, and for security alerts via SMS).
• Username and password (your password is stored in hashed form — wbaji staff cannot see your plain-text password at any time).
• Identity verification documents where requested (national ID card, passport scan, or equivalent) to satisfy age verification and anti-money-laundering requirements.

Transaction and Payment Data

• Deposit and withdrawal records including date, time, amount in BDT, payment method (bKash, Nagad, Rocket, or Upay), and transaction reference numbers.
• Mobile wallet identifiers associated with your deposits and withdrawals (the registered wallet number). wbaji does not store full bKash, Nagad, Rocket, or Upay PIN numbers.
• Account balance history and bonus transaction records for compliance, dispute resolution, and responsible gaming monitoring purposes.

Technical and Usage Data

• IP address, device type, operating system, browser type and version, and screen resolution — collected automatically when you access wbaji.pro.
• Session logs including pages visited, games played, time spent on each game, betting history, and session start/end timestamps. This data is used for responsible gaming monitoring and fraud detection.
• Cookies and similar tracking technologies as described in the Cookies section of this Policy.

wbaji uses the personal data we collect for the following specific purposes. We do not use your data for any purpose beyond what is described in this Policy without first obtaining your explicit consent.

• Account creation, login authentication, and identity verification — to establish and maintain your wbaji account securely.
• Processing deposits and withdrawals via bKash, Nagad, Rocket, and Upay — to credit your account balance and fulfil withdrawal requests.
• Fraud prevention and security — to detect and investigate suspicious activity, prevent money laundering, and protect the platform from abuse.
• Responsible gaming monitoring — to identify at-risk gaming behaviour patterns and proactively offer self-exclusion or limit-setting tools where appropriate.
• Customer support — to respond to queries, investigate complaints, and resolve disputes relating to your account, game outcomes, or payment transactions.
• Regulatory compliance — to meet our anti-money-laundering obligations, age verification requirements, and any applicable legal reporting duties under Bangladeshi law.
• Platform improvement — to analyse anonymised usage patterns and technical performance data to improve the wbaji platform, fix bugs, and optimise the mobile experience for Bangladesh 4G network conditions.

Promotional communications — to send you information about wbaji bonuses, promotions, cricket betting events (such as BPL and T20 World Cup), and new game launches, where you have not opted out of such communications. You may opt out at any time by contacting wbaji support.

wbaji processes personal data on the following legal bases, as applicable to each processing activity:

• Contract performance: Processing necessary to fulfil our obligations under the Terms and Conditions you accepted upon registration, including account management, payment processing, and game delivery.
• Legal obligation: Processing required to meet our regulatory duties including anti-money-laundering checks, age verification, and cooperation with lawful law-enforcement requests.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and anonymised analytics — where such processing does not override your fundamental privacy rights.
• Consent: Processing for optional promotional communications and non-essential analytics cookies, where you have provided explicit consent. Consent may be withdrawn at any time without affecting the lawfulness of processing carried out before withdrawal.

wbaji does not sell, rent, or trade your personal data to any third party. We share personal data only in the following limited circumstances, and only to the extent necessary for the specific purpose described:

• Payment processors (bKash, Nagad, Rocket, Upay): We share the minimum transaction data required to process your deposit or withdrawal request — specifically your registered wallet number and the transaction amount. These providers process data under their own privacy policies and are not permitted to use your data for any other purpose.
• Game providers (Pragmatic Play, Evolution Gaming, Ezugi, Spribe, and others): A session token is passed to the game provider to authenticate your game session. wbaji does not pass your full personal profile to game providers — only a session identifier.
• Identity verification and KYC partners : Where we require document verification to satisfy our age-verification or anti-money-laundering obligations, we use a trusted KYC verification partner. Only the documents and data necessary for verification are shared, and these partners are contractually bound to process data solely for the verification purpose.
• Law enforcement and regulatory authorities: wbaji may disclose personal data to government bodies, law enforcement agencies, or regulatory authorities where required by law, court order, or to protect the legal rights of wbaji or other players. We will notify you of any such disclosure where permitted by law.

All payment transactions on wbaji are processed exclusively in Bangladeshi Taka (BDT) via bKash, Nagad, Rocket, and Upay. wbaji does not collect, store, or have access to your full mobile wallet PIN or password at any time. Transaction confirmations are handled directly between your mobile wallet provider and wbaji's payment gateway. wbaji retains only the minimum transaction metadata required for accounting, dispute resolution, and regulatory compliance — specifically: transaction reference number, date and time, amount, and the registered wallet number used.

If you believe an unauthorised transaction has been made using your wbaji account or registered payment method, contact wbaji support immediately via live chat at wbaji.pro. wbaji will place a security hold on your account and investigate the matter as a priority. You should also contact your mobile wallet provider (bKash, Nagad, Rocket, or Upay) to report the unauthorised transaction directly.

wbaji uses cookies and similar technologies to operate the platform, maintain your login session, and understand how the platform is used. A cookie is a small text file placed on your device by your browser when you visit a website. The following types of cookies are used on wbaji.pro:

• Essential session cookies: These cookies are required for the platform to function. They maintain your login state, remember your currency preference, and keep your game session active. These cookies cannot be disabled without breaking platform functionality.
• Security cookies: Short-lived cookies used to support fraud detection and cross-site request forgery (CSRF) protection. These are functional security measures and cannot be opted out of.
• Analytics cookies (optional): These cookies collect anonymised data about how players use the platform — such as which games are most popular and how long sessions last. This data is used in aggregate form only to improve the platform. You may opt out by adjusting your browser's cookie settings.
• Preference cookies (optional): These cookies remember your platform preferences — such as your selected language and notification settings — so you do not need to re-enter them on each visit. You may clear these by clearing your browser's stored data.

You can manage or disable non-essential cookies at any time through your browser settings. Please note that disabling essential cookies will prevent you from logging in to your wbaji account and using the platform. wbaji does not use third-party advertising cookies or cross-site tracking pixels.

wbaji retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following retention periods apply: Account data and transaction records are retained for a minimum of 5 years from the date of account closure or the date of the last transaction, whichever is later, to meet anti-money-laundering and financial record-keeping obligations. Identity verification documents are retained for the same 5-year period from account closure. Session and gameplay logs are retained for 2 years from the date the session occurred, for responsible gaming monitoring and dispute resolution purposes. Promotional communication preferences and opt-out records are retained for the lifetime of the account and for 1 year after account closure.

Upon expiry of the applicable retention period, wbaji will securely delete or anonymise your personal data so that it can no longer be linked back to you as an individual. Anonymised aggregate data (such as total platform game statistics) may be retained indefinitely for business analytics purposes, as it contains no personal identifiers.

As a player on wbaji, you have the following rights with respect to your personal data. To exercise any of these rights, contact wbaji support via live chat or email at [email protected]. wbaji will respond to all data rights requests within 30 days of receipt.

• Right of access: You may request a copy of all personal data wbaji holds about you. We will provide this within 30 days in a readable format.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you may request that we correct it. For account details such as your registered mobile number, you may be required to complete identity verification before changes are applied.
• Right to erasure: You may request deletion of your personal data. This right is subject to exceptions where retention is required by law (for example, transaction records retained for anti-money-laundering compliance cannot be deleted on request).
• Right to restriction of processing: You may request that wbaji restrict the processing of your personal data in certain circumstances — for example, while a data accuracy dispute is being investigated.
• Right to withdraw consent: Where processing is based on your consent (such as promotional communications or optional analytics cookies), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

wbaji will not charge a fee for handling data rights requests unless the request is manifestly unfounded, excessive, or repetitive, in which case a reasonable administrative fee may apply. Identity verification may be required before we action any data rights request, to ensure we are responding to the genuine account holder.

wbaji takes the security of your personal data seriously and implements a range of technical and organisational measures to protect it against unauthorised access, disclosure, alteration, or destruction. These measures include: 256-bit SSL encryption on all data transmitted between your device and wbaji's servers; encrypted storage of all sensitive account data including hashed passwords and identity documents; access controls that restrict staff access to personal data on a need-to-know basis; regular security audits and penetration testing of the wbaji platform; and automated fraud detection systems that monitor for unusual account activity patterns.

Despite these measures, no internet-based platform can guarantee absolute security. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, wbaji will notify affected players promptly and take all reasonable steps to contain the breach and mitigate any harm. Your own password security is also important — do not share your wbaji password with anyone, and use a strong, unique password that you do not use on other websites or applications.

wbaji's services are strictly intended for adults aged 21 and above. wbaji does not knowingly collect personal data from individuals under the age of 21. Age verification is conducted as part of the registration process and may be repeated at any time during the account lifecycle. If wbaji discovers that an account has been registered by a person under the age of 21, the account will be immediately closed, any funds held in the account will be frozen pending investigation, and the personal data of the minor will be deleted as soon as reasonably possible in accordance with our legal obligations. Parents and guardians who believe a minor may have registered on wbaji should contact [email protected] immediately.

wbaji reserves the right to update this Privacy Policy at any time. When material changes are made to this Policy, wbaji will notify registered account holders via SMS to their registered mobile number at least 7 days before the updated Policy takes effect, except where changes are required urgently by law or to address a security incident. The updated Policy will also be published on this page at wbaji.pro/privacy-policy with the revised "Last updated" date.

Your continued use of wbaji after the effective date of any updated Privacy Policy constitutes your acceptance of the revised Policy. If you do not agree with the revised Policy, you must close your account before the effective date. The current version of this Policy is always the version displayed on this page.

If you have any questions about this Privacy Policy, wish to exercise a data right, or want to report a privacy concern, you can contact wbaji through the following channels: Live chat at wbaji.pro (available 24/7, fastest response). Email at [email protected] — please use the subject line "Privacy Enquiry" and include your registered mobile number so we can locate your account promptly.

wbaji aims to resolve all privacy-related queries promptly and professionally. Formal data rights requests will be acknowledged within 5 business days and resolved within 30 days. Where a request is complex or involves a large volume of data, wbaji may extend the response period by up to an additional 30 days, in which case you will be notified of the extension and the reason for it before the initial 30-day deadline.