rbje Privacy Policy

1.1 This Privacy Policy ("Policy") describes how rbje ("we", "us", "our", "the Platform") collects, processes, stores, and protects personal information relating to users ("you", "the Player", "the User") of the rbje platform, accessible at rbje.io.

1.2 rbje operates as an English-language online casino and sports betting platform serving the Bangladesh market. As part of delivering this service, we process certain categories of personal data — primarily for the purposes of account management, payment processing, identity verification, and player protection.

1.3 By registering an account on the rbje platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you must not use the rbje platform.

1.4 This Policy should be read alongside the rbje Terms and Conditions and Responsible Gaming Policy. Together, these documents constitute the full agreement between you and rbje regarding your use of the platform.

1.5 rbje is committed to handling all personal data in accordance with applicable data protection principles — including purpose limitation, data minimisation, accuracy, storage limitation, integrity, and confidentiality — as these are globally recognised standards of responsible data stewardship.

2.1 rbje collects personal data in the following categories, depending on how you interact with the platform:

2.2 rbje does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health information, unless such information is volunteered by you in a support communication context. Any such data received incidentally will not be stored beyond the duration of the support interaction.

2.3 You are not obligated to provide all requested data, but failure to provide information required for KYC verification may result in withdrawal restrictions being applied to your account until verification is completed satisfactorily.

3.1 rbje uses the personal data we collect for the following specific purposes:

• Account Management: Creating and maintaining your rbje player account, authenticating your identity at login, and managing account settings and preferences.
• Payment Processing: Facilitating deposits and withdrawals via bKash, Nagad, Rocket, Upay, and other supported payment methods. Financial data is passed to payment processors only to the extent necessary to complete the transaction.
• Identity Verification (KYC): Verifying that you are who you say you are, confirming that you are aged 21 or above, and complying with anti-money laundering obligations. KYC data is processed by rbje and by our appointed third-party verification service provider.
• Fraud Prevention and Security: Monitoring for suspicious account activity, detecting duplicate accounts, investigating potential Terms violations, and protecting the platform and other players from fraudulent behaviour.
• Platform Improvement: Analysing aggregated usage data to understand how players interact with the platform, identify technical issues, and improve the overall user experience.
• Customer Support: Responding to your queries, resolving account issues, and maintaining records of support interactions for quality assurance purposes.
• Responsible Gaming: Monitoring betting patterns to identify signs of problem gambling behaviour and applying responsible gaming interventions where appropriate, including enforcing self-exclusion and deposit limit settings.
• Marketing Communications: Sending you information about rbje promotions, bonuses, and new game launches — but only where you have opted in to receive marketing communications. You may opt out at any time by contacting [email protected].

3.2 rbje will not use your personal data for any purpose beyond those listed above without first obtaining your explicit consent or establishing another lawful basis for that processing.

4.1 rbje processes your personal data on the following legal bases, depending on the specific processing activity:

• Contractual Necessity: Processing required to perform the contract between you and rbje — including account creation, payment processing, bet settlement, and withdrawal handling — is carried out on the basis that it is necessary for the performance of our agreement with you.
• Legitimate Interests: Processing carried out for fraud prevention, security monitoring, duplicate account detection, and platform improvement is based on rbje's legitimate interest in operating a safe, fair, and commercially viable platform. We apply a balancing test to ensure these interests do not override your privacy rights.
• Legal Obligation: Processing required to comply with applicable legal obligations — including anti-money laundering checks, identity verification, and cooperation with law enforcement agencies — is carried out on the basis of legal compliance.
• Consent: Marketing communications and the use of non-essential cookies are processed on the basis of your explicit consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

5.1 rbje does not sell, rent, or trade your personal data to third parties for marketing or commercial purposes. Your data is shared only in the limited circumstances described below:

• Payment Processors: Financial data is shared with bKash, Nagad, Rocket, Upay, Visa, Mastercard, and other payment partners solely to process transactions you initiate. These partners operate under their own privacy policies and are contractually bound to handle your data securely.
• KYC Verification Providers: Identity documents and biometric data may be shared with our appointed third-party KYC verification service to confirm your identity and age. This provider is contractually bound to use the data solely for verification purposes.
• Game Content Providers: Technical identifiers (such as player session tokens, game outcomes, and bet records) are shared with game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi to deliver and settle game results. These providers do not receive your full personal profile.
• Law Enforcement and Regulatory Authorities: rbje will disclose personal data to law enforcement agencies, financial intelligence units, or regulatory bodies where required to do so by applicable law, court order, or binding regulatory request.
• Fraud Prevention Networks: In cases of suspected fraud, money laundering, or account abuse, rbje may share limited data with specialist fraud prevention organisations to protect the platform and its players.

5.2 All third-party service providers who receive personal data from rbje are required to maintain appropriate data security standards and to process personal data only for the specific purpose for which it was shared. rbje does not transfer personal data to recipients outside of its operational network without appropriate safeguards in place.

6.1 The rbje platform uses cookies and similar tracking technologies to enable core platform functionality, improve user experience, and analyse platform usage. The categories of cookies used on rbje.io are as follows:

• Strictly Necessary Cookies: Essential for the platform to function. These include session cookies that keep you logged in during a browsing session and security cookies that protect against cross-site request forgery. These cookies cannot be disabled.
• Functional Cookies: Used to remember your preferences such as language settings, preferred game categories, and last-used payment method. These improve the convenience of the platform experience.
• Analytics Cookies: Used to collect aggregated, anonymised data about how players navigate and interact with the platform. This data is used exclusively for platform improvement and does not identify individual users.
• Marketing Cookies: Used only where you have explicitly consented to receive marketing communications. These cookies help us understand which promotions are relevant to your interests so we can avoid sending irrelevant offers.

6.2 You may control or disable non-essential cookies through your browser settings. Please note that disabling certain functional cookies may affect your experience of the platform. Strictly necessary cookies cannot be disabled as they are required for the platform to operate.

7.1 rbje retains personal data only for as long as necessary to fulfil the purposes for which it was collected, subject to the following retention guidelines:

• Active Account Data: Retained for the duration of your account's active status plus a post-closure period of five years, to comply with anti-money laundering record-keeping obligations and to resolve any post-closure disputes.
• KYC and Identity Documents: Retained for a minimum of five years following account closure, in line with financial crime prevention standards.
• Transaction Records: Retained for a minimum of five years following each transaction, for audit and compliance purposes.
• Support Communications: Retained for three years following the resolution of the support interaction, for quality assurance and dispute resolution purposes.
• Marketing Consent Records: Retained for the duration of your consent and for two years following withdrawal of consent, to demonstrate compliance.
• Technical and Usage Data: Aggregated analytics data is retained indefinitely in anonymised form. Individual-level technical data is retained for up to 12 months.

7.2 At the end of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with an identifiable individual. Where deletion is not immediately possible (for example, where data is held in backup archives), the data will be isolated from active processing until deletion is possible.

8.1 rbje implements technical and organisational security measures appropriate to the nature and sensitivity of the personal data we process. These measures include, but are not limited to:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the rbje platform is encrypted using industry-standard SSL/TLS protocols. This prevents interception of your data in transit.
• Hashed Password Storage: Account passwords are stored using industry-standard cryptographic hashing algorithms with salt. rbje staff cannot view your plain-text password under any circumstances.
• Access Controls: Access to personal data within rbje's systems is restricted to authorised personnel on a strict need-to-know basis. All internal access is logged and audited.
• Intrusion Detection: rbje operates continuous monitoring systems to detect and respond to unauthorised access attempts, data breaches, and anomalous activity on the platform.
• Secure Data Storage: Personal data is stored on servers with physical and logical access controls, regular security patching, and encrypted storage at rest.

8.2 In the event of a data security incident that poses a risk to your personal data, rbje will notify affected account holders by email within 72 hours of becoming aware of the incident, where technically feasible. The notification will describe the nature of the incident, the categories of data affected, and the steps rbje is taking in response.

9.1 As a data subject whose personal information is processed by rbje, you have the following rights with respect to your personal data:

• Right of Access: You have the right to request a copy of the personal data rbje holds about you, including information on how it is being processed. Requests will be responded to within 30 days of receipt.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold about you. If you believe your account data is incorrect, contact [email protected] with the corrected information.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to rbje's legal obligations to retain certain data for specified periods (see Section 7).
• Right to Restriction: You may request that processing of your personal data be restricted in certain circumstances — for example, while a rectification request is being assessed.
• Right to Object: You have the right to object to processing carried out on the basis of legitimate interests, including the use of your data for marketing purposes. Objections to marketing communications will be actioned immediately.
• Right to Data Portability: Where processing is based on your consent or on contract performance, you may request that rbje provide your personal data in a structured, machine-readable format for transfer to another service provider.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

9.2 To exercise any of the above rights, please submit a written request to [email protected]. rbje will acknowledge your request within five business days and will respond in full within 30 calendar days. Where a request is complex or numerous, this period may be extended by a further 30 days, with prior notification.

9.3 rbje will not charge a fee for reasonable data subject requests. Where requests are manifestly unfounded or excessive, rbje reserves the right to charge a reasonable administrative fee or to decline the request, providing written reasons for doing so.

10.1 The rbje platform is strictly for individuals aged 21 years and above. rbje does not knowingly collect personal data from any person under the age of 21. Age verification is a mandatory step in the account registration and withdrawal process.

10.2 If rbje becomes aware that personal data has been collected from a person under the age of 21 — whether through voluntary disclosure or through the KYC verification process — the associated account will be suspended immediately and all personal data relating to the minor will be securely deleted from our systems as quickly as practicable.

10.3 If you are a parent or guardian and you believe that a minor in your care has registered an account on rbje.io, please contact our support team immediately at [email protected]. We will investigate the matter promptly and take appropriate action to protect the minor's data and wellbeing.

11.1 The rbje platform integrates third-party services to deliver its full range of features, including game content from studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These services may involve your device communicating directly with third-party servers when loading game content.

11.2 rbje has no control over the data practices of third-party game studios, payment processors, or analytics providers beyond the contractual obligations we impose on them. We recommend that you review the privacy policies of any third-party services you interact with through the rbje platform.

11.3 rbje.io does not contain links to external third-party websites for general browsing purposes. All navigation within the platform remains on the rbje.io domain. rbje is not responsible for the privacy practices of any external sites that you may navigate to independently.

12.1 rbje reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the services we offer. The date of the most recent update is displayed at the top of this page.

12.2 Where changes to this Policy are material — meaning they could significantly affect your privacy rights or the way your personal data is used — rbje will notify registered account holders by email at the address associated with their account, at least 14 days before the changes take effect.

12.3 Continued use of the rbje platform after any update to this Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with any changes to this Policy, you must stop using the platform and contact [email protected] to close your account.

13.1 If you have any questions, concerns, or requests relating to this Privacy Policy or to the way rbje processes your personal data, please contact us using the details below. Our support team responds to privacy-related enquiries within five business days.

13.2 Data enquiries: [email protected] — please include "Privacy Request" in your subject line so your enquiry is routed to the appropriate team member.

13.3 All privacy correspondence must be submitted in English, as English is the operative language of the rbje platform and all internal processing of your request will be conducted in English.

13.4 rbje is committed to resolving all privacy concerns promptly and fairly. If you are not satisfied with our response to a privacy enquiry, you are entitled to escalate the matter through whatever dispute resolution mechanisms are available to you under applicable law.