Privacy Policy

1 Introduction & Scope

This Privacy Policy ("Policy") describes how rbakee ("the Platform", "we", "us", "our") collects, uses, stores, and protects personal data in connection with the operation of the rbakee online casino and sports betting platform available at https://rbakee.net.

This Policy applies to all individuals who interact with the rbakee platform, including registered account holders, visitors who browse the platform without registering, and individuals who contact our support team through any channel. By accessing the rbakee platform or creating an account, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.

This Policy should be read in conjunction with the rbakee Terms & Conditions. In the event of any conflict between this Policy and the Terms & Conditions on matters of data privacy, this Policy shall prevail.

2 Data Controller

rbakee acts as the data controller with respect to the personal data of its registered users and platform visitors. As data controller, rbakee determines the purposes and means of processing your personal data and is responsible for ensuring that processing activities comply with applicable data protection standards.

All data-related enquiries, access requests, and complaints should be directed to our designated data contact point:

• Email: [email protected] (plain text only — not a clickable link)
• Subject line for data requests: "Data Privacy Request — [Your Full Name]"
• Response timeframe: Within 30 calendar days of receipt

3 Data We Collect

rbakee collects the following categories of personal data in the ordinary course of operating the platform:

3.1 Identity Data

• Full legal name
• Date of birth
• Government-issued identification number (National ID, passport, or driving licence number)
• Scanned or photographed copies of identity documents submitted during KYC verification

3.2 Contact Data

• Mobile phone number (primary contact and verification channel)
• Email address
• Residential address (required for KYC and fraud prevention)

3.3 Financial Data

• Mobile financial service identifiers (bKash account number, Nagad account number, Rocket account number, Upay account number)
• Card details limited to card type, last four digits, and expiry date — full card numbers are never stored by rbakee and are processed exclusively by PCI-DSS-compliant payment processors
• Transaction history including deposit amounts, withdrawal requests, and wager records

3.4 Technical & Usage Data

• IP address and approximate geolocation derived from IP
• Device type, operating system, and browser version
• Session timestamps, pages visited, and interaction logs
• Platform feature usage patterns (game categories accessed, betting markets viewed)

3.5 Communication Data

• Records of live chat conversations with rbakee support agents
• Email correspondence sent to or received from [email protected]
• Records of any complaints or disputes submitted through official channels

4 How We Collect Data

Your personal data is collected through the following means:

• Direct submission: Data you provide when registering an account, completing KYC verification, making a deposit or withdrawal request, or contacting our support team.
• Automated collection: Technical and usage data collected automatically through cookies, server logs, and analytics tools when you access or interact with the platform.
• Third-party sources: Identity verification data received from KYC service providers when we conduct automated document checks; fraud-scoring data received from risk management services to protect both you and the platform from fraudulent activity.
• Payment processors: Transaction confirmation data received from bKash, Nagad, Rocket, Upay, and card processing networks to reconcile deposits and withdrawals against your account.

5 Legal Basis for Processing

rbakee processes your personal data on the following legal bases depending on the nature and purpose of the processing activity:

6 How We Use Your Data

The personal data rbakee collects is used exclusively for the following purposes:

6.1 Platform Operations

To create and maintain your account, authenticate your identity on each login, process financial transactions, record wagering activity, and provide access to all games and betting markets available on the platform.

6.2 Identity Verification & Compliance

To conduct KYC verification in accordance with anti-money-laundering best practices; to verify that you meet the minimum age requirement of 18 years; and to fulfil any reporting or record-keeping obligations that may apply to the platform's operations in Bangladesh.

6.3 Fraud Prevention & Security

To detect and investigate suspicious account activity, identify potential multi-accounting, monitor for unusual transaction patterns that may indicate money laundering, and protect the integrity of the platform for all users.

6.4 Customer Support

To respond to your enquiries, resolve disputes, process self-exclusion requests, manage responsible gaming interventions, and maintain an accurate record of all support interactions for quality assurance purposes.

6.5 Responsible Gaming

To monitor wagering patterns that may indicate problem gambling behaviour; to enforce deposit limits, loss limits, and session time limits set by you; and to administer self-exclusion periods elected by you in accordance with the rbakee Responsible Gaming policy.

6.6 Platform Improvement

To analyse aggregated, anonymised usage data for the purpose of improving platform performance, optimising user experience, and developing new features. Individual user data is not used for A/B testing or experimental feature deployment without prior consent.

6.7 Marketing Communications

To send promotional emails, SMS messages, or in-platform notifications about bonuses, tournaments, and new game launches — but only where you have explicitly opted in to receive such communications. You may withdraw your marketing consent at any time by contacting [email protected] with the subject line "Unsubscribe — Marketing".

7 Sharing & Disclosure

rbakee does not sell, rent, or trade your personal data. We share data only in the following limited and controlled circumstances:

7.1 Payment Service Providers

Transaction data is shared with bKash, Nagad, Rocket, Upay, Visa, and Mastercard solely to the extent necessary to process your deposit and withdrawal requests. These providers operate under their own privacy policies and are contractually prohibited from using your data for any purpose other than payment processing.

7.2 Identity Verification Partners

Where automated KYC checks are performed, identity document data is transmitted to our verification partner using encrypted channels. Verification partners are bound by strict data processing agreements and are not permitted to retain your document data beyond the period required to complete the verification check.

7.3 Fraud Prevention Services

Technical data including IP addresses and device fingerprints may be shared with fraud-scoring and risk management service providers for the purpose of detecting and preventing fraudulent account activity. This sharing is undertaken on the basis of our legitimate interest in protecting the platform and its users.

7.4 Legal & Regulatory Disclosure

rbakee may disclose personal data to law enforcement agencies, regulatory bodies, or courts of competent jurisdiction where we are legally compelled to do so, or where disclosure is necessary to prevent, detect, or investigate criminal activity including fraud and money laundering.

7.5 Business Transfers

In the event of a merger, acquisition, or sale of all or a portion of the rbakee business, personal data held by rbakee may be transferred to the successor entity. You will be notified of any such transfer and any material change to the terms under which your data is processed.

8 Data Retention

rbakee retains personal data for the minimum period necessary to fulfil the purpose for which it was collected, subject to any legal or regulatory obligations that require longer retention. The following retention schedule applies:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to an identifiable individual.

9 Security Measures

rbakee implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure:

• Transport encryption: All data transmitted between your browser or app and the rbakee servers is protected by 256-bit TLS/SSL encryption.
• Data-at-rest encryption: Sensitive personal data stored in rbakee databases is encrypted using industry-standard AES-256 encryption.
• Access controls: Access to personal data within rbakee's systems is restricted to authorised personnel on a strict need-to-know basis. All internal access is logged and audited.
• Password storage: Account passwords are stored exclusively as salted cryptographic hashes. rbakee never stores or transmits passwords in plain text.
• Penetration testing: The rbakee platform undergoes regular security assessments to identify and remediate vulnerabilities before they can be exploited.
• Incident response: In the event of a data breach that poses a risk to your rights, rbakee will notify affected users and take appropriate remedial action without undue delay.

10 Cookies & Tracking

rbakee uses a minimal set of cookies to support the operation of the platform. Cookies are small text files stored on your device. The following cookie categories are used:

10.1 Strictly Necessary Cookies

These cookies are essential for the platform to function correctly. They manage your login session, maintain your account state during navigation, remember your preferred language and currency settings, and prevent cross-site request forgery (CSRF). These cookies cannot be disabled without breaking core platform functionality.

10.2 Analytical Cookies

rbakee uses anonymised, first-party analytical cookies to understand how users navigate the platform, which game categories generate the most engagement, and where users experience difficulty. This data is aggregated and cannot be used to identify individual users. Analytical cookies may be disabled by adjusting your browser settings without affecting your ability to use the platform.

10.3 What We Do Not Use

rbakee does not deploy third-party advertising cookies, behavioural retargeting pixels, social media tracking scripts, or any cookie that enables cross-site tracking of your internet activity outside the rbakee platform.

10.4 Cookie Management

You may review and delete cookies stored by the rbakee platform at any time through your browser's cookie management settings. Deleting session cookies will log you out of your account. Most modern browsers allow you to block cookies from specific domains while permitting them on others.

11 Your Rights

As a data subject, you hold the following rights with respect to the personal data that rbakee processes about you. To exercise any of these rights, submit a written request to [email protected] with the subject line "Data Privacy Request — [Right Type] — [Your Full Name]". rbakee will respond within 30 calendar days.

11.1 Right of Access

You have the right to request a copy of the personal data rbakee holds about you, together with information about the purposes for which it is processed, the categories of data held, the recipients to whom it has been disclosed, and the retention period applicable to each category.

11.2 Right to Rectification

If any personal data rbakee holds about you is inaccurate or incomplete, you have the right to request that it be corrected or supplemented. Where data accuracy is disputed, rbakee will investigate and update records within 14 days of receiving supporting evidence.

11.3 Right to Erasure

You may request deletion of your personal data where: the data is no longer necessary for the purpose for which it was collected; you withdraw consent and there is no other legal basis for processing; or the data has been processed unlawfully. The right to erasure is subject to overriding legal obligations — for example, financial transaction records required to be retained under AML regulations cannot be deleted on request.

11.4 Right to Restrict Processing

You have the right to request that rbakee suspend active processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or where a complaint regarding unlawful processing is under investigation.

11.5 Right to Data Portability

Where processing is carried out by automated means on the basis of your consent or contractual necessity, you have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format (CSV or JSON). This applies to registration data and transaction history.

11.6 Right to Object

You have the right to object to processing carried out on the basis of legitimate interest, including direct marketing and analytical profiling. Where you object to marketing, rbakee will cease processing your data for that purpose immediately upon receipt of your request.

12 Children's Privacy

The rbakee platform is strictly intended for adults aged 18 years and above. rbakee does not knowingly collect personal data from individuals under the age of 18. If we become aware that personal data has been submitted by a person below the minimum age threshold, we will immediately delete all associated data and close the account in question.

If you have reason to believe that a minor has registered an account on the rbakee platform, please notify us immediately at [email protected] so that we may take prompt corrective action.

13 Policy Amendments

rbakee reserves the right to update or amend this Privacy Policy at any time to reflect changes in operational practices, legal requirements, or service offerings. Where amendments are material — such as changes to the categories of data collected, new third-party sharing arrangements, or changes to retention periods — we will notify registered users by email at least 14 days before the changes take effect.

Non-material amendments, such as corrections of typographical errors or clarifications that do not alter the substantive meaning of any provision, may be made without advance notice. The "Last Updated" date at the top of this Policy will always reflect the date on which the most recent version came into effect.

Your continued use of the rbakee platform following the effective date of any amendment constitutes your acknowledgment and acceptance of the revised Policy. If you do not accept the revised terms, you should cease using the platform and may request account closure in accordance with the rbakee Terms & Conditions.

14 Contact & Complaints

For any questions, concerns, or formal complaints regarding the processing of your personal data by rbakee, please contact us through the following channel:

• Email: [email protected]
• Subject line: "Privacy Policy Enquiry" or "Formal Data Complaint — [Your Full Name]"
• Response time: Acknowledgment within 48 hours; substantive response within 30 calendar days

rbakee takes all privacy complaints seriously. Upon receipt of a formal complaint, we will investigate the matter thoroughly and provide a written response setting out our findings and any remedial action taken. Where a complaint cannot be resolved to your satisfaction through our internal process, you retain the right to escalate the matter to the appropriate regulatory authority in your jurisdiction.