mbaje Privacy
Policy
Your privacy matters to mbaje. This Privacy Policy explains in clear, plain English exactly what personal data we collect when you use our platform, how we use and protect it, who we may share it with, and what rights you have as a player based in Bangladesh. We are committed to full transparency.
Data We Collect
When you register an account, use the mbaje platform, make a deposit or withdrawal, or contact our support team, mbaje collects certain categories of personal data. We collect only the data that is necessary for the purposes described in this Privacy Policy, and we do not collect personal data beyond what is reasonably required to operate a safe, compliant, and functional online gaming platform for players in Bangladesh.
The categories of personal data that mbaje may collect about you are summarised in the table below:
| Data Category | Examples | Collection Point |
|---|---|---|
| Identity Data | Full name, date of birth, National ID (NID) number, passport number | Account registration, KYC verification |
| Contact Data | Email address, mobile phone number, city of residence (e.g., Dhaka, Chittagong, Sylhet) | Account registration, support contact |
| Financial Data | bKash / Nagad / Rocket / Upay account numbers, bank account details, transaction history, deposit and withdrawal records | Payment processing, KYC verification |
| Technical Data | IP address, device type, browser type and version, operating system, session tokens, time-zone (BST UTC+6) | Automatic collection on platform access |
| Usage Data | Pages visited, games played, bet history, session duration, click-path data | Automatic collection during platform use |
| Communications Data | Live chat transcripts, support email correspondence, feedback submissions | Support interactions |
| Verification Documents | Scanned copies or photographs of government-issued ID, selfie images submitted for identity verification | KYC verification process |
mbaje does not knowingly collect personal data from individuals under the age of 18. If we become aware that personal data has been submitted by a person under the age of 18, we will delete that data promptly and close the associated account. If you believe a minor has registered on the mbaje platform, please contact us immediately at [email protected].
How We Use Your Data
mbaje uses the personal data it collects for specific, legitimate purposes directly connected to the operation of its online casino and sports betting platform. We do not sell your personal data to third parties. We do not use your data for purposes unrelated to the operation of the mbaje platform or your account with us.
The primary purposes for which mbaje processes your personal data are as follows:
- Account creation and management: To register your account, verify your identity, maintain your account records, and deliver the features of the mbaje platform to you as a registered user.
- Payment processing: To process your deposits and withdrawals via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, and other supported payment methods. Financial data is processed solely for the purpose of completing your requested transaction.
- KYC and regulatory compliance: To verify your age (you must be 18 or older), identity, and payment method ownership in compliance with our anti-money laundering (AML) and Know Your Customer (KYC) obligations.
- Platform security and fraud prevention: To monitor platform activity for signs of fraudulent behaviour, account takeover, bonus abuse, money laundering, or other prohibited conduct described in our Terms & Conditions.
- Customer support: To respond to your enquiries, resolve disputes, investigate complaints, and provide assistance via live chat and email support at [email protected].
- Responsible gaming: To monitor gameplay patterns that may indicate problem gambling behaviour, enforce self-exclusion requests, implement deposit limits and session controls, and fulfil our responsible gaming obligations.
- Platform improvement: To analyse aggregated and anonymised usage data to improve the performance, design, and features of the mbaje platform. Aggregated data used for this purpose does not identify individual users.
- Promotional communications: To send you bonus offers, seasonal promotions (Eid, Pohela Boishakh, BPL season offers), and other marketing communications — but only where you have provided explicit consent or where we have a legitimate interest in keeping you informed. You may opt out of promotional communications at any time.
- Legal obligations: To comply with any legal obligation imposed on mbaje, including responding to lawful requests from competent authorities.
Data Sharing & Disclosure
mbaje does not sell, rent, or trade your personal data with any third party for their own marketing or commercial purposes. Your personal data may be shared with carefully selected third parties only where such sharing is necessary for the operation of the mbaje platform, for legal compliance, or for the delivery of a service you have requested.
The categories of third parties with whom mbaje may share your personal data are described below:
- Payment service providers: Your financial data (such as your bKash or Nagad mobile number, or bank account details) is shared with the relevant payment service provider solely for the purpose of processing your deposit or withdrawal transaction. Payment providers process your data under their own privacy policies and security standards.
- Identity verification partners: mbaje may use third-party KYC and identity verification service providers to assist with the verification of documents submitted during account registration or prior to withdrawal processing. These partners are contractually bound to process your data only for verification purposes.
- Game technology providers: Game studios and platform technology partners (such as Pragmatic Play, Evolution Gaming, NetEnt, Spribe, Ezugi, and Microgaming) may receive technical session data necessary to deliver their games to your device. These providers do not receive your personal identity or financial data beyond what is technically required for game session management.
- Customer support platforms: Our live chat and support ticketing infrastructure providers process communications data (such as your support chat history and email correspondence) on our behalf under data processing agreements that restrict their use of that data to support service delivery only.
- Fraud prevention and security services: To protect the mbaje platform and its players from fraud, we may share technical data (IP addresses, device fingerprints, behavioural patterns) with third-party fraud detection and cybersecurity service providers.
- Competent authorities: mbaje will disclose personal data to law enforcement agencies, regulatory bodies, or other competent authorities when required to do so by a lawful legal obligation, court order, or other binding governmental request.
mbaje requires all third parties who process personal data on its behalf to do so only in accordance with mbaje's instructions, for the specific purpose for which the data was shared, and subject to binding data processing agreements that include confidentiality, security, and data protection obligations.
Cookies & Tracking
The mbaje platform uses cookies and similar tracking technologies (such as local storage and session tokens) to deliver a functional and personalised experience. Cookies are small text files stored on your device when you access mbaje.vip. They allow the platform to remember your session, preferences, and certain account states between visits.
mbaje uses the following categories of cookies:
| Cookie Type | Purpose | Required |
|---|---|---|
| Strictly Necessary | Session management, authentication tokens, security (CSRF protection), load balancing. Without these cookies, the mbaje platform cannot function. | Yes — always active |
| Functional | Remembering your language preference (English), display settings, last game played, and other personalisation features. | Optional |
| Analytics | Aggregated, anonymised data about how players navigate the platform — page views, session duration, game engagement — used to improve platform design and performance. | Optional |
| Marketing | Tracking which promotional offers you have viewed or claimed, to avoid showing you duplicate offers. mbaje does not use third-party advertising cookies or retargeting pixels. | Optional |
mbaje does not use third-party advertising networks, retargeting pixels, or social media tracking scripts on the mbaje.vip platform. The cookies used by mbaje are limited to those necessary for platform functionality, internal analytics, and responsible gaming monitoring.
Data Security
mbaje takes the security of your personal data seriously and implements a layered set of technical and organisational security measures designed to protect your data against unauthorised access, accidental loss, destruction, alteration, or disclosure. The security measures employed by mbaje include, but are not limited to:
- SSL/TLS 256-bit encryption: All data transmitted between your device and the mbaje platform is encrypted in transit using SSL/TLS 256-bit encryption. Look for the padlock symbol in your browser's address bar when using mbaje.vip.
- Encrypted data storage: Sensitive personal data stored on mbaje's servers — including identity documents, financial data, and password hashes — is encrypted at rest. Passwords are never stored in plain text.
- Access controls: Access to personal data held by mbaje is restricted on a strict need-to-know basis. Only authorised mbaje personnel whose job functions require access to specific categories of data are permitted to access it, and all such access is logged and auditable.
- Two-factor authentication: mbaje recommends and supports the use of two-factor authentication (2FA) for player accounts to provide an additional layer of protection against unauthorised account access.
- Intrusion detection and monitoring: The mbaje platform is monitored continuously for signs of unauthorised access, unusual activity, and potential security incidents. Automated alerting systems are in place to identify and respond to threats in real time.
- Penetration testing: mbaje's platform and infrastructure undergo periodic security assessments, including penetration testing by qualified security professionals, to identify and remediate vulnerabilities before they can be exploited.
In the unlikely event of a personal data breach that poses a risk to your rights and freedoms, mbaje will take immediate steps to contain the breach, assess its impact, and notify affected players without undue delay. Where required by applicable data protection obligations, mbaje will also notify the relevant competent authorities.
Data Retention
mbaje retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, as described in this Privacy Policy, or for as long as is required by applicable legal, regulatory, or contractual obligations. When your personal data is no longer needed, mbaje will securely delete or anonymise it.
The following retention periods apply to the main categories of personal data held by mbaje:
| Data Category | Retention Period | Rationale |
|---|---|---|
| Account and Identity Data | Duration of account plus 5 years after account closure | KYC compliance, AML obligations, dispute resolution |
| Financial Transaction Records | 7 years from the date of each transaction | Anti-money laundering record-keeping requirements |
| Bet and Game History | 5 years from the date of each session | Responsible gaming monitoring, dispute resolution |
| Support Communications | 3 years from the date of each interaction | Quality assurance, complaint investigation |
| KYC Verification Documents | 5 years after account closure | Regulatory compliance, fraud prevention |
| Technical and Usage Data | 13 months on a rolling basis | Platform analytics and security monitoring |
| Marketing Consent Records | Until consent is withdrawn plus 1 year | Evidence of lawful marketing basis |
Where a legal dispute, regulatory investigation, or law enforcement request is ongoing, mbaje may retain relevant personal data beyond the standard retention periods specified above until the matter is fully resolved. Upon resolution, the data will be deleted or anonymised in accordance with mbaje's standard data retention schedule.
Your Privacy Rights
As a user of the mbaje platform, you have a number of rights in relation to your personal data. mbaje is committed to respecting and upholding these rights. To exercise any of the rights described below, please contact the mbaje privacy team at [email protected] with the subject line "Privacy Rights Request". mbaje will respond to all verified privacy rights requests within a reasonable timeframe.
Contact & Policy Updates
If you have any questions, concerns, or requests relating to this Privacy Policy or the way in which mbaje processes your personal data, please contact the mbaje privacy team using the details below. All privacy-related enquiries are handled in English and are typically responded to within 5 business days of receipt, measured in Bangladesh Standard Time (BST, UTC+6).
- Privacy enquiries email: [email protected] (subject line: "Privacy Rights Request")
- Live chat: Available 24/7 on the mbaje platform — Bangladesh Standard Time (BST, UTC+6)
- WhatsApp: +880 1700-000000 (display only — for informational reference)
mbaje reviews and updates this Privacy Policy periodically to reflect changes in our data processing practices, changes to the mbaje platform, or updates to applicable data protection requirements. When we make a material change to this Privacy Policy, we will notify registered players by email and by displaying a prominent notice on the mbaje platform for a reasonable period following the update.
The effective date of the current version of this Privacy Policy is displayed at the top of this document and in the hero section above. By continuing to use the mbaje platform after a revised Privacy Policy has been published, you acknowledge and accept the updated terms. If you do not accept the revised Privacy Policy, you must cease using the mbaje platform and may request account closure by contacting [email protected].
How mbaje Protects Every Bangladesh Player's Data
No Data Selling
mbaje never sells, rents, or trades your personal data to third-party advertisers or data brokers. Your information exists solely to deliver a safe and personalised gaming experience on mbaje.vip.
SSL 256-Bit Encryption
Every interaction between your device and mbaje.vip is protected by SSL 256-bit encryption in transit. Stored sensitive data is also encrypted at rest, ensuring your financial and identity data is protected at every layer.
Purpose Limitation
mbaje collects only the minimum data required to operate the platform and process your transactions. We do not collect data speculatively or for purposes beyond those clearly stated in this Privacy Policy.
Your Controls
You retain full control over your data. Submit a privacy rights request at any time via [email protected] to access, correct, export, or delete your personal data held by mbaje. Responses within 5 business days.
Secure Payments
Your bKash, Nagad, Rocket, and Upay payment details are processed exclusively for completing your requested transaction and are never stored beyond what is operationally necessary for reconciliation.
18+ Enforcement
mbaje enforces strict age verification as part of its KYC process. Any account found to belong to a person under 18 years of age is immediately suspended and all associated data is securely deleted.
Ready to Explore mbaje?
Now that you understand how your data is protected, enjoy everything mbaje has to offer — from live cricket betting to hundreds of slots and a full live casino experience, all designed for Bangladeshi players.