qbaji Privacy Policy

This Privacy Policy ("Policy") is published by qbaji ("we", "us", "our", or the "Platform") and describes how we collect, use, store, share, and protect personal information relating to individuals ("you", "your", "Player", or "User") who access or use the qbaji online gaming and sports betting platform at qbaji.onl and any related services, mobile applications, or communications channels operated by qbaji.

qbaji is committed to handling your personal data with integrity, transparency, and care. We recognise that our players entrust us with sensitive information — including identity documents, financial data, and gaming behaviour — and we take that responsibility seriously. This Policy is written in plain English so that you can clearly understand your rights and our obligations.

This Policy applies to all personal data processed by qbaji in connection with:

• Account registration and ongoing account management.
• Deposit and withdrawal transactions, including via bKash, Nagad, Rocket, Upay, and Bangladeshi bank transfers.
• Participation in casino games, sports betting markets, live casino sessions, slots, and promotional activities.
• Customer support interactions via live chat, email, or any other communication channel.
• Visits to the qbaji website, including data collected via cookies and analytics tools.
• Participation in the VIP Club, Rewards programme, and any other loyalty or promotional scheme operated by qbaji.

This Policy should be read alongside qbaji's Terms and Conditions and Responsible Gaming Policy, both of which contain additional provisions relevant to your use of the platform.

qbaji collects personal data through several channels: directly from you when you register an account or interact with our platform, automatically when you browse the website, and — in limited circumstances — from third-party sources such as payment processors and fraud-prevention partners. The following table summarises the categories of data we collect and the primary source of that data.

2.1 Data We Do Not Collect

qbaji does not collect or store your bKash PIN, Nagad PIN, bank account passwords, or any other authentication credentials associated with your external financial accounts. We will never ask for these via any channel. If you receive a request for such credentials purporting to come from qbaji, it is fraudulent — please report it to us immediately at [email protected].

We also do not collect biometric data (fingerprints, facial recognition templates) or health-related personal data, except to the limited extent that a player voluntarily discloses health information in the context of a responsible gaming support interaction.

qbaji processes personal data only for specific, legitimate purposes. We do not process your data in ways that are incompatible with the purposes described in this Policy. The primary purposes for which we use your personal information are as follows:

3.1 Account Operation and Service Delivery

We use your identity, contact, and financial data to create and manage your account, verify your eligibility to use the platform (including age verification to ensure you are 18 or older), process deposits and withdrawals via your chosen payment method, and deliver the gaming and betting services you have requested. Without this processing, it is not possible to provide you with a functioning account.

3.2 Identity Verification and KYC Compliance

qbaji is committed to preventing underage gambling, fraud, and the use of the platform for money laundering. We use identity and document data to verify that you are who you say you are, that you meet the age requirement of 18 years or older, and that your payment methods are legitimately yours. KYC verification is a prerequisite for processing withdrawals and for accessing higher deposit tiers.

3.3 Financial Transactions and Fraud Prevention

Your financial data is used to process deposits and withdrawals, reconcile account balances, detect and investigate suspicious transactions, and prevent fraud, chargebacks, and money laundering. We may use automated tools to flag unusual patterns of financial activity for manual review.

3.4 Responsible Gaming

Gaming activity data and responsible gaming configuration data are used to monitor your play patterns, deliver reality check notifications, enforce the limits and exclusions you have set, and — where our platform identifies patterns that may indicate problem gambling — proactively reach out to offer support or impose protective restrictions. This processing reflects qbaji's duty of care to its players.

3.5 Customer Support

Communication data is used to respond to your support queries, investigate complaints, and improve the quality of our support service. Support interactions are recorded and retained as described in Section 7 (Data Retention).

3.6 Platform Improvement and Analytics

Technical and behavioural data collected via cookies and analytics tools is used in aggregated and anonymised form to understand how players use the platform, identify areas for improvement, test new features, and optimise the user experience. We do not use this data to make decisions that significantly affect individual players.

3.7 Marketing Communications

With your consent, we may use your contact data to send you information about promotions, bonuses, seasonal offers (such as Eid or Pohela Boishakh specials), and VIP programme updates that we believe may be of interest to you. You may withdraw your consent to marketing communications at any time by contacting support or updating your account preferences. Withdrawal of marketing consent does not affect the processing of your data for other purposes.

qbaji processes personal data on the following legal bases, depending on the nature and purpose of the processing activity:

• Contractual Necessity: Processing that is necessary to fulfil the contract between you and qbaji — specifically, to provide the gaming and betting services you have registered to use — is carried out on the basis of contractual necessity. This includes account creation, payment processing, KYC verification, and delivery of gaming features.
• Legal Obligation: Some processing is required to comply with applicable legal and regulatory obligations. This includes anti-money laundering (AML) checks, age verification, record-keeping for financial transactions, and cooperation with legitimate law enforcement or regulatory enquiries.
• Legitimate Interests: qbaji may process certain data on the basis of its legitimate interests in operating a safe, secure, and well-functioning platform. This includes fraud detection, platform security, responsible gaming monitoring, and aggregated analytics for product improvement. We conduct a balancing test to ensure our legitimate interests do not override your fundamental rights.
• Consent: Where processing is not otherwise justified by contractual necessity, legal obligation, or legitimate interests, qbaji will seek your consent before processing. This applies primarily to marketing communications and to the use of non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

qbaji does not sell, rent, or trade your personal data to third parties for commercial gain. We may, however, share your data with a limited number of trusted partners and service providers where necessary to deliver the platform's services or comply with our legal obligations. All third parties with whom we share data are contractually required to handle it securely and to use it only for the specified purpose.

5.1 Payment Processors

To process your deposits and withdrawals, qbaji shares relevant financial data with your chosen payment provider. This includes mobile financial service providers (bKash, Nagad, Rocket, Upay) and banking partners (Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank) and card networks (Visa, Mastercard). These providers receive only the data necessary to process the specific transaction and are subject to their own privacy and security obligations.

5.2 Identity Verification and KYC Providers

qbaji uses specialist third-party KYC and identity verification services to assist with document verification. These providers process identity and document data on our behalf and are bound by strict data processing agreements. Verified data is not retained by the KYC provider beyond the scope required for the verification task.

5.3 Game Providers

Casino games are provided by third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive limited technical data (such as a pseudonymous player session identifier) necessary to deliver the game experience. They do not receive your full identity or financial data.

5.4 Fraud Prevention and Security Partners

qbaji uses third-party fraud detection and cybersecurity services to protect the platform and its players. These services may process IP addresses, device fingerprints, and transaction patterns to identify suspicious activity.

5.5 Legal and Regulatory Disclosures

qbaji may disclose personal data to law enforcement agencies, regulatory bodies, or other competent authorities where required to do so by law, court order, or regulatory direction. We will only disclose the minimum data necessary to satisfy the legal requirement and will, where legally permissible, notify you of any such disclosure.

qbaji uses cookies and similar tracking technologies (collectively "cookies") on the platform to ensure it functions correctly, to remember your preferences, and to collect analytics data that helps us improve the experience for all players. This section explains the types of cookies we use and how you can manage them.

6.1 Types of Cookies Used

6.2 Managing Your Cookie Preferences

You may manage your cookie preferences at any time through your browser settings. Most modern browsers allow you to block or delete cookies on a per-site or global basis. Please note that disabling strictly necessary cookies will impair the functionality of the platform and may prevent you from logging in or accessing key features.

qbaji does not use cookies for cross-site tracking, behavioural advertising on third-party platforms, or any purpose beyond those described in this section.

qbaji retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The retention periods below are applied as standard; specific circumstances (such as an open legal dispute or ongoing regulatory investigation) may necessitate retention beyond the standard period.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where anonymisation is not technically feasible, data is pseudonymised and access is restricted to authorised personnel only.

As a player on the qbaji platform, you hold a number of rights in relation to your personal data. qbaji is committed to honouring these rights promptly and without unnecessary obstruction. To exercise any of the rights described below, please contact our support team at [email protected] with the subject line "Privacy Rights Request" and a clear description of your request.

qbaji takes the security of your personal data seriously and maintains a comprehensive set of technical and organisational security measures designed to prevent unauthorised access, loss, alteration, or disclosure of player information. These measures are reviewed and updated regularly to reflect the evolving threat landscape.

9.1 Technical Safeguards

• SSL/TLS Encryption: All data transmitted between your browser or device and the qbaji platform is encrypted in transit using industry-standard SSL/TLS protocols. Look for the padlock icon in your browser address bar when using the platform.
• Data Encryption at Rest: Sensitive data fields — including identity document data, financial account references, and authentication credentials — are encrypted at rest using strong encryption algorithms.
• Access Controls: Access to player personal data within qbaji's internal systems is restricted on a strict need-to-know basis. Role-based access controls, multi-factor authentication, and privileged access management are enforced for all staff who handle personal data.
• Intrusion Detection: qbaji operates continuous network monitoring and intrusion detection systems to identify and respond to potential security incidents in real time.
• Vulnerability Management: The platform undergoes regular security assessments, penetration testing, and code reviews to identify and remediate vulnerabilities before they can be exploited.

9.2 Organisational Safeguards

• All staff who handle personal data receive mandatory data protection and security training upon joining qbaji and at regular intervals thereafter.
• Data processing activities are governed by internal policies and procedures aligned with recognised data protection principles.
• Third-party vendors who process personal data on behalf of qbaji are vetted for security compliance and bound by data processing agreements.
• qbaji maintains an incident response plan. In the event of a data breach that poses a risk to your rights and freedoms, we will notify affected individuals without undue delay.

9.3 Your Role in Data Security

While qbaji takes all reasonable steps to protect your personal data, you also play an important role in keeping your account secure. We strongly recommend that you:

• Use a strong, unique password for your qbaji account that is not used on any other website or service.
• Never share your account credentials — username, password, or security answers — with anyone, including persons claiming to represent qbaji support.
• Log out of your account when using shared or public devices.
• Contact us immediately at [email protected] if you suspect your account has been accessed without your authorisation.

qbaji reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, updates to the platform's features and services, developments in applicable data protection law, or feedback from players and regulators. The "Last Updated" date displayed at the top of this page will always reflect the date of the most recent revision.

When we make material changes to this Policy — changes that meaningfully affect how we collect, use, or share your personal data — we will notify you by sending a message to the email address associated with your registered account at least 14 days before the changes take effect. For minor, non-material changes such as typographical corrections, clarifications, or formatting updates, we may update the Policy without individual notification, though the updated version will always be accessible at qbaji.onl/privacy-policy.

Your continued use of the qbaji platform after the effective date of any amendment constitutes your acknowledgement of the revised Policy. If you do not agree with the revised terms, you may request account closure by contacting [email protected].

10.1 Contact for Privacy Enquiries

If you have any questions, concerns, or feedback regarding this Privacy Policy or qbaji's data protection practices generally, please reach out to our support team using the contact details below. We are committed to resolving privacy-related concerns promptly and transparently.

• Email: [email protected] (subject: "Privacy Enquiry")
• Live Chat: Available 24 hours a day, 7 days a week via the chat widget on every page of the platform
• Support Hours: 24/7, 365 days a year (BST, UTC+6)
• Response Time: We aim to acknowledge all privacy-related emails within 3 business days