ybaje Privacy Policy — Your Data, Your Rights

1. Introduction

This Privacy Policy ("Policy") describes how ybaje ("Platform", "we", "us", "our") collects, uses, stores, and shares personal information about you ("User", "Player") when you access or use the ybaje website and related services, including sports betting, live casino, slots, and specialty games. This Policy forms part of our overall Terms and Conditions and should be read alongside them.

By registering an account with ybaje or continuing to use our platform, you acknowledge that you have read and understood this Policy and consent to the collection and use of your information as described herein. If you do not agree with this Policy, please do not use the ybaje platform.

2. Information We Collect

ybaje collects personal information through several means: directly from you when you register or use the platform, automatically through your device and browser, and in some cases from third-party verification services. The categories of data we collect include the following:

Data From Third Parties

In order to verify your identity and comply with anti-money laundering (AML) obligations, we may receive supplementary data from KYC verification partners, payment processors, and fraud detection services. This data is used solely for compliance purposes and is subject to the same protections as data you provide directly.

3. How We Use Your Information

ybaje uses the personal information we collect for the following specific purposes. We will not use your data for any purpose that is incompatible with those listed here without first obtaining your explicit consent.

• Account creation and management: to register your account, verify your identity, and maintain your player profile.
• Transaction processing: to handle deposits, withdrawals, and payment verification via bKash, Nagad, Rocket, Upay, and other supported methods.
• Legal and regulatory compliance: to meet our KYC, AML, and responsible gaming obligations under applicable law.
• Fraud prevention and security: to detect and prevent cheating, multi-accounting, bonus abuse, money laundering, and other prohibited activities.
• Customer support: to respond to your queries, complaints, and requests through our 24/7 support channels.
• Platform improvement: to analyse usage patterns, fix bugs, optimise performance, and develop new features based on how players interact with ybaje.
• Promotions and communications: to send you relevant promotional offers, bonus notifications, and platform updates — but only where you have opted in or where we have a legitimate interest in doing so.

4. Legal Basis for Processing

ybaje processes your personal data on the following legal grounds, depending on the specific purpose of the processing:

• Contract performance: processing necessary to provide the betting and gaming services you have registered for, including account management and payment processing.
• Legal obligation: processing required to comply with applicable laws, including KYC, AML, responsible gaming requirements, and tax reporting obligations.
• Legitimate interests: processing for fraud prevention, platform security, abuse detection, and improving our services, where those interests are not overridden by your rights and freedoms.
• Consent: for optional marketing communications and promotional notifications, which you may withdraw at any time by contacting our support team.

5. How We Share Your Information

ybaje does not sell, rent, or trade your personal data to any third party for their own commercial purposes. We may share your data only in the limited circumstances described below, and only to the extent necessary for the specific purpose.

Service Providers

We work with carefully selected third-party service providers who assist us in operating the platform. These include payment processors (such as bKash and Nagad gateway providers), identity verification partners, game content providers (such as Pragmatic Play, Evolution Gaming), cloud hosting services, and customer support tools. These partners are contractually bound to handle your data only for the purposes we specify and in accordance with applicable data protection laws.

Legal and Regulatory Disclosure

We may disclose your personal information to government authorities, law enforcement agencies, or regulators where we are legally required to do so, or where we reasonably believe that disclosure is necessary to prevent fraud, money laundering, or other illegal activity. We will only disclose the minimum information necessary for the specific legal purpose.

Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of ybaje's assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified via the email address registered on your account if such a transfer involves a material change to how your data is used.

6. Cookies and Tracking Technologies

ybaje uses cookies and similar tracking technologies to operate the platform, remember your preferences, and analyse platform usage. The following types of cookies are used:

• Essential cookies: required for core platform functions such as maintaining your login session, processing bets, and managing your account security settings. These cannot be disabled.
• Functional cookies: used to remember your language preference, display settings, and game history so your experience is consistent across sessions.
• Analytics cookies: used to understand how players navigate and use the platform, helping us identify areas for improvement. Analytics data is aggregated and not linked to individual player identities.
• Security cookies: used to detect and prevent fraudulent activity, bot access, and other security threats to the platform.

You may control non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the ybaje platform and your overall experience.

7. Data Retention

ybaje retains your personal data for as long as necessary to fulfil the purposes for which it was collected, including satisfying legal, regulatory, accounting, and reporting obligations. For active accounts, data is retained for the lifetime of the account plus a minimum of five (5) years following closure, in compliance with standard AML record-keeping requirements.

Where data is no longer required for any of the above purposes, we will securely delete or anonymise it. Anonymised data (which can no longer identify you) may be retained indefinitely for statistical and analytical purposes.

8. How We Protect Your Data

ybaje implements a range of technical and organisational security measures to protect your personal information from unauthorised access, disclosure, alteration, or destruction. Our security infrastructure includes SSL/TLS encryption on all data transmissions, encrypted storage of sensitive personal and financial data, two-factor authentication options for player accounts, regular security audits and penetration testing, and strict internal access controls ensuring that only authorised personnel can access player data.

Despite our best efforts, no system is entirely immune to security breaches. In the unlikely event of a data breach that poses a risk to your rights and freedoms, we will notify you and any relevant authorities as required by applicable law, without undue delay.

9. Your Data Rights

As a user of ybaje, you have the following rights in relation to your personal data. To exercise any of these rights, please contact our support team. We will respond to all verified requests within thirty (30) calendar days.

Please note that certain rights may be limited where processing is required by law (for example, AML record-keeping obligations) or where exercising a right would prejudice the rights of others. We will always explain clearly if we are unable to fulfil a request and the reason why.

10. Children's Privacy

The ybaje platform is strictly intended for adults aged 21 and above. We do not knowingly collect, solicit, or retain personal data from any person under the age of 21. If we become aware that we have inadvertently collected personal data from a person under 21, we will immediately delete that data and close the associated account.

11. International Data Transfers

ybaje's platform and its service providers may process and store your personal data in data centres located outside Bangladesh. Where such international transfers occur, we ensure that appropriate safeguards are in place to protect your data, including contractual data protection clauses with all relevant service providers. By using ybaje, you acknowledge and consent to your data being processed in jurisdictions outside Bangladesh, subject to the protections described in this Policy.

12. Third-Party Links

The ybaje platform does not contain links to external third-party websites. Should any third-party content or links appear on the platform in the future, please be aware that those third parties operate their own privacy policies independently of ybaje, and we accept no responsibility for their data practices. We encourage you to review the privacy policy of any external service before providing personal information.

13. Changes to This Privacy Policy

ybaje may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or platform features. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify you by email to the address registered on your account. Your continued use of ybaje following the publication of any updated Policy constitutes your acceptance of the revised terms. We recommend that you review this Policy periodically.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how ybaje handles your personal data, please contact our dedicated support team. We are available 24 hours a day, 7 days a week, and aim to respond to all privacy-related enquiries within 30 days.

Email: [email protected] (plain text only — not a clickable link). Please include your registered username and a brief description of your privacy request in all correspondence.