Privacy Policy

ubaji ("we", "us", "our") operates the online gaming platform at ubaji.bio and is committed to protecting the privacy of every registered user and visitor ("you", "your"). This Privacy Policy sets out what personal data we collect, why we collect it, how we use it, and the rights available to you. By registering an account or using the ubaji platform you confirm that you have read and understood this policy. This policy should be read alongside the ubaji Terms and Conditions.

This policy may be updated periodically. Where changes are material, ubaji will notify you — for example by displaying a notice when you next log in. We encourage you to review this page regularly. Continued use of the platform after any update constitutes acceptance of the revised policy.

1.1 Information You Provide Directly

When you register, use the platform, contact support, or take part in any promotion, you may provide us with the following categories of personal data:

• Identity data — your registered mobile number, and any name or identity document details provided during KYC verification.
• Financial data — your bKash, Nagad, Rocket, Upay, or bank account details used for deposits and withdrawals. ubaji does not store full card numbers; card payments are handled through PCI-DSS-compliant gateways.
• Support communications — messages you send to our team, feedback you submit, and information provided in connection with any dispute or complaint.
• Age verification documents — identity documents you supply when ubaji requests proof of age, and the result of that verification check.

1.2 Information Collected Automatically

When you access and use ubaji, we automatically collect the following technical and behavioural data:

• Device and connection data — IP address, device type, operating system, browser type and version, screen resolution, and mobile network operator.
• Usage data — pages visited, games played, bet amounts, game outcomes, session duration, and navigation paths within the platform.
• Transaction data — a complete record of all deposits, withdrawals, bonus activations, wagering activity, and account balance changes.
• Log data — server logs including timestamps, error reports, and security events such as failed login attempts.

1.3 Information from Third Parties

We may receive information about you from third-party service providers that help us operate the platform, including identity verification (KYC) providers, payment processors such as bKash, Nagad, Rocket and Upay, fraud detection services, and game content providers such as Pragmatic Play, Evolution Gaming, and Spribe. Information received from these providers is limited to what is necessary for the specific function they perform and is handled in accordance with this Privacy Policy.

ubaji uses the personal data it collects for the following purposes:

• Account creation and management — to register your account, verify your identity and age, manage your profile, process your login, and maintain account security.
• Service delivery — to give you access to all games, sports betting markets, live casino streams, and all other features available on the ubaji platform.
• Financial processing — to process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, Mastercard, and bank transfer; to apply bonuses; and to maintain an accurate record of your account balance and transaction history.
• Compliance — to comply with applicable anti-money-laundering (AML) requirements, KYC obligations, and all other legal or regulatory obligations applicable to an online gaming platform operating in Bangladesh.
• Responsible gaming — to monitor gaming activity for indicators of problem gambling and to apply responsible gaming tools (deposit limits, cooling-off periods, self-exclusion) where requested or required by our responsible gaming policy.
• Platform security and improvement — to detect and prevent fraud, diagnose technical issues, improve platform performance, and analyse anonymised usage trends.

ubaji processes your personal data on the following legal bases:

• Contractual necessity — processing required to perform our contract with you, including delivering platform services, processing transactions, and managing your account.
• Legal obligation — processing required to comply with applicable law, including KYC/AML requirements, age verification, and responding to lawful requests from competent authorities.
• Legitimate interests — processing for fraud prevention, platform security, and service improvement, where such processing does not override your fundamental privacy rights.
• Consent — where we send non-essential communications or use optional analytics, we do so only with your consent, which you may withdraw at any time by contacting support.

ubaji does not sell, rent, or trade your personal data. We share your information only with the following categories of third party, strictly for the purposes described in this policy:

• Payment processors — bKash, Nagad, Rocket, Upay, Visa, Mastercard, and bank partners receive only the minimum data needed to process your transaction.
• Identity verification providers — KYC partners receive identity and document data solely to verify your identity and age in line with applicable requirements.
• Game content providers — Pragmatic Play, Evolution Gaming, Spribe, NetEnt, Microgaming, and Ezugi may receive session identifiers and bet data necessary to deliver and record game outcomes.
• Legal and regulatory authorities — where required by applicable law, court order, or a lawful request from a competent authority, ubaji will disclose the minimum personal data necessary to comply.

ubaji uses cookies and similar technologies on the platform. Our cookies fall into the following categories:

• Essential cookies — strictly necessary for the platform to function, including session cookies that keep you logged in, security tokens that protect your account, and preference cookies that remember your in-session settings. These cannot be disabled without breaking core functionality.
• Functional cookies — used to remember your language preference and display settings between sessions so you do not need to reconfigure the platform on each visit.
• Analytics cookies — anonymised data about how users navigate the platform, used to identify performance issues and improve the user experience. These cookies do not identify you personally.

ubaji does not use third-party advertising cookies, cross-site tracking pixels, or social media tracking scripts. You may disable non-essential cookies via your browser settings; however, disabling essential cookies will prevent core platform features from working correctly.

ubaji retains your personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law. As a general guide: account data and transaction history are retained for a minimum of 5 years from the date of account closure to satisfy AML and KYC record-keeping obligations; support communications are retained for 2 years from the date of the communication; age verification documents are retained for the duration of the account plus 5 years post-closure; anonymised analytics data may be retained indefinitely as it cannot be linked to any individual.

When your data is no longer required and no legal retention obligation applies, ubaji will securely delete or anonymise it. If you wish to request early deletion of data that is not subject to a mandatory retention period, contact the support team. Note that a deletion request cannot be fulfilled where retention is required by law or where the data is needed to resolve an outstanding dispute.

ubaji implements a range of technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, or disclosure. These include SSL/TLS encryption for all data in transit; encryption at rest for sensitive stored data including financial details and identity documents; strict access controls limiting employee access to personal data on a need-to-know basis; regular security assessments of the platform; and real-time monitoring systems that detect and respond to suspicious access attempts.

While ubaji takes all reasonable steps to protect your data, no method of electronic transmission or storage is completely secure. If you believe your account has been compromised, contact the support team immediately at [email protected] so that prompt action can be taken to secure your account.

Subject to applicable law and the exceptions noted below, you have the following rights regarding the personal data ubaji holds about you:

• Right of access — you may request a copy of the personal data ubaji holds about you, together with information about how it is used and with whom it is shared.
• Right of rectification — you may request correction of any personal data that is inaccurate or incomplete.
• Right of erasure — you may request deletion of your personal data where it is no longer necessary, where you have withdrawn consent, or where processing is unlawful. This right is subject to legal retention obligations that may require us to retain certain data despite a deletion request.
• Right to restrict processing — you may request that ubaji restrict processing of your data in certain circumstances, for example where you contest the accuracy of the data or object to its use.
• Right to object — you may object to processing based on legitimate interests. ubaji will cease such processing unless it can demonstrate compelling legitimate grounds that override your rights.

To exercise any of these rights, contact the ubaji support team at [email protected]. ubaji will respond to all verified requests within a reasonable timeframe and may request proof of identity before processing a data rights request to protect against unauthorised disclosure.

The ubaji platform is strictly for adults aged 21 and above. ubaji does not knowingly collect personal data from any person under the age of 21. If ubaji becomes aware that personal data has been collected from a person under 21, that data will be deleted immediately and the associated account will be closed without delay. If you believe a person under 21 has registered an account or provided personal data to ubaji, please contact the support team immediately at [email protected].

The ubaji platform integrates third-party game content from providers including Pragmatic Play, Evolution Gaming, Spribe, NetEnt, Microgaming, and Ezugi, embedded directly within the platform. While ubaji works only with reputable providers, each provider operates under its own privacy practices and security standards. ubaji is not responsible for the data practices of third-party game providers beyond the contractual data protection obligations imposed on them by ubaji. The ubaji platform does not contain links to external websites outside its own domain. If you navigate away from the ubaji platform by any means, the privacy practices of any destination site are outside ubaji's control.

ubaji reserves the right to update this Privacy Policy at any time. The effective date at the top of this page will be revised with each update. Where changes are material — for example, where a new category of data collection or a new sharing arrangement is introduced — ubaji will take reasonable steps to notify you when you next access the platform. Your continued use of the platform after the effective date of any revision constitutes acceptance of the revised Privacy Policy. If you do not agree with a change, you should stop using the platform and may close your account by contacting the support team.

If you have questions or concerns about this Privacy Policy, wish to exercise any of your data rights, or need to report a suspected privacy incident, please contact the ubaji support team. We aim to acknowledge all enquiries within 24 hours Bangladesh Standard Time (BST, UTC+6) and to provide a substantive response within a reasonable period thereafter.

Email: [email protected] (plain text — not a clickable link). Support is available 24/7. ubaji is committed to handling all data rights requests promptly and in accordance with applicable requirements.