Privacy & Data Protection

Gibaji Privacy Policy – Your Data, Protected

At Gibaji, your privacy matters as much as your gameplay. This policy explains exactly what personal data we collect, why we collect it, how we use it, and what rights you have as a player on our Bangladesh platform. No jargon, no hidden clauses — just straight answers.

Last updated: 1 January 2025
Our Commitments

How Gibaji Handles Your Data

Six principles that guide every data decision we make on the Gibaji platform.

Data Is Encrypted End-to-End

Every piece of personal data you share with Gibaji — from your registration details to your payment information — is encrypted in transit and at rest. We use industry-standard TLS encryption across the entire platform so your data is never exposed in plain text.

We Never Sell Your Data

Gibaji does not sell, rent, or trade your personal data to third parties for marketing purposes. Your information is used only to operate the platform, verify your identity, process payments, and improve your experience. That's it — nothing more.

You Control Your Data

Gibaji gives you real control over your personal data. You can request access to everything we hold about you, ask us to correct inaccurate information, or request deletion of your data subject to our legal obligations. Contact support at any time to exercise these rights.

Minimal Data Collection

We only collect the data we actually need. Gibaji does not gather unnecessary personal information. Every data point we collect has a specific, documented purpose — whether that's verifying your identity, processing a payment, or keeping your account secure.

Verified Third-Party Partners Only

When Gibaji shares data with third-party service providers — such as payment processors or identity verification services — we only work with partners who meet our data security standards. Every partner is contractually bound to protect your data to the same standard we apply internally.

Breach Notification Within 72 Hours

In the unlikely event of a data breach that affects your personal information, Gibaji will notify affected players within 72 hours of becoming aware of the incident. We will explain what happened, what data was involved, and what steps we are taking to address it.


01

Who We Are

Gibaji is an online betting and casino platform serving players in Bangladesh. When this Privacy Policy refers to "Gibaji", "we", "us", or "our", it means the Gibaji platform and the team responsible for operating it. We act as the data controller for all personal information collected through the Gibaji website and app.

This Privacy Policy applies to all users of the Gibaji platform, including registered players, visitors who browse without registering, and anyone who contacts our support team. If you have questions about how we handle your data, you can reach us at [email protected] at any time.

This policy should be read alongside our Terms and Conditions and our Responsible Gaming policy, both of which form part of your overall agreement with Gibaji.
02

Data We Collect

Gibaji collects personal data in three main ways: information you provide directly, information generated by your use of the platform, and information received from third-party service providers. Here is a breakdown of each category:

Category Examples When Collected
Identity Data Full name, date of birth, national ID number, photo ID document During registration and KYC verification
Contact Data Mobile number, email address During registration
Financial Data bKash / Nagad / Rocket account number, transaction history During deposits and withdrawals
Technical Data IP address, device type, browser, operating system Automatically on each visit
Usage Data Games played, bets placed, session duration, pages visited Automatically during platform use
Communications Data Support chat transcripts, emails sent to Gibaji When you contact support

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health information, unless it is directly relevant to a responsible gaming request you have made.

03

How We Use Your Data

Every piece of data Gibaji collects is used for a specific purpose. We do not use your data in ways that are incompatible with the reason it was originally collected. The main purposes for which we use your personal data are:

  • To create and manage your Gibaji account, including verifying your identity and age.
  • To process deposits, withdrawals, and other financial transactions on the platform.
  • To detect and prevent fraud, money laundering, and other prohibited activities.
  • To comply with legal and regulatory obligations, including anti-money laundering requirements.
  • To provide customer support and respond to your enquiries.
  • To send you account-related notifications, such as deposit confirmations and withdrawal updates.
  • To personalise your experience on the platform, including recommending games you may enjoy.
  • To monitor and improve the performance, security, and reliability of the Gibaji platform.
  • To enforce our Terms and Conditions and protect the rights of Gibaji and other players.
  • To send you promotional communications about Gibaji offers, if you have opted in to receive them.
You can opt out of promotional communications at any time by contacting support or updating your notification preferences in your account settings. Opting out of marketing will not affect your ability to use the platform.
04

Legal Basis for Processing

Gibaji processes your personal data on one or more of the following legal grounds, depending on the specific purpose:

  • Contract performance: Processing necessary to provide the services you have signed up for, including account management, payments, and game access.
  • Legal obligation: Processing required to comply with applicable laws, including identity verification, anti-money laundering checks, and record-keeping requirements.
  • Legitimate interests: Processing necessary for Gibaji's legitimate business interests, such as fraud prevention, platform security, and improving our services, where these interests are not overridden by your rights.
  • Consent: Processing based on your explicit consent, such as sending promotional emails or SMS messages. You may withdraw consent at any time.

Where we rely on legitimate interests as the legal basis for processing, we carry out a balancing test to ensure that our interests do not override your fundamental rights and freedoms. If you would like more information about any specific processing activity, contact us at [email protected].

05

Data Sharing and Disclosure

Gibaji does not sell your personal data. We share your data only in the following limited circumstances, and only to the extent necessary for the stated purpose:

  • Payment processors: We share financial data with bKash, Nagad, Rocket, and other payment providers to process your transactions. These providers are bound by their own privacy policies and data security standards.
  • Identity verification providers: We share identity documents with KYC verification partners to confirm your age and identity as required by our operating standards.
  • Fraud prevention services: We may share technical and usage data with fraud detection services to identify and prevent suspicious activity on the platform.
  • IT and platform service providers: We work with hosting, analytics, and security providers who process data on our behalf under strict data processing agreements.
  • Legal and regulatory authorities: We will disclose personal data to law enforcement, regulators, or courts where required to do so by applicable law or a valid legal order.
All third-party service providers who process data on behalf of Gibaji are contractually required to implement appropriate technical and organisational security measures and to use your data only for the purposes we specify.
06

Cookies and Tracking

Gibaji uses cookies and similar tracking technologies to operate the platform, remember your preferences, and understand how players use the site. Here is a summary of the types of cookies we use:

  • Essential cookies: Required for the platform to function. These include session cookies that keep you logged in and security cookies that protect against cross-site request forgery. You cannot opt out of essential cookies.
  • Analytics cookies: Help us understand how players navigate the platform, which pages are most visited, and where technical issues occur. This data is aggregated and anonymised.
  • Preference cookies: Remember your settings, such as language preferences and display options, so you do not have to re-enter them on each visit.
  • Marketing cookies: Used to show you relevant Gibaji promotions based on your activity. These are only set with your consent.

You can manage your cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of the Gibaji platform. For more details on the specific cookies we use, contact our support team.

07

Data Retention

Gibaji retains your personal data for as long as necessary to fulfil the purposes for which it was collected, including satisfying any legal, regulatory, accounting, or reporting requirements. The general retention periods we apply are:

Data Type Retention Period Reason
Account and identity data 5 years after account closure Legal and regulatory compliance
Transaction records 5 years from transaction date Anti-money laundering requirements
Support communications 2 years from last contact Dispute resolution and quality assurance
Technical and usage data 13 months from collection Platform analytics and security monitoring
Marketing consent records Until consent is withdrawn Proof of consent for regulatory purposes

When your data is no longer required, Gibaji will securely delete or anonymise it. In some cases, we may retain anonymised data for longer periods for statistical analysis, but this data cannot be used to identify you.

08

Your Rights

As a Gibaji player, you have the following rights in relation to your personal data. To exercise any of these rights, contact us at [email protected] and we will respond within 30 days.

Right of Access

Request a copy of all personal data Gibaji holds about you, along with information about how it is being used.

Right to Rectification

Ask us to correct any inaccurate or incomplete personal data we hold about you.

Right to Erasure

Request deletion of your personal data where there is no longer a legal basis for us to retain it.

Right to Restriction

Ask us to pause processing of your data in certain circumstances, such as while a dispute is being resolved.

Right to Portability

Receive your personal data in a structured, machine-readable format so you can transfer it to another service.

Right to Object

Object to processing of your data for direct marketing purposes or where we rely on legitimate interests as our legal basis.

09

Data Security

Gibaji takes the security of your personal data seriously. We have implemented a range of technical and organisational measures to protect your data against unauthorised access, loss, destruction, or alteration. These measures include:

  • TLS encryption for all data transmitted between your device and the Gibaji platform.
  • Encryption of sensitive data stored in our databases, including payment information and identity documents.
  • Strict access controls ensuring that only authorised Gibaji staff can access personal data, and only to the extent required for their role.
  • Regular security audits and penetration testing of the Gibaji platform and infrastructure.
  • Two-factor authentication options for player accounts to prevent unauthorised access.
  • Continuous monitoring of our systems for suspicious activity and potential security incidents.
While Gibaji takes every reasonable precaution to protect your data, no online platform can guarantee absolute security. You also play a role in keeping your account safe — use a strong, unique password and never share your login credentials with anyone.
10

Children's Privacy

The Gibaji platform is strictly for adults aged 18 and over. We do not knowingly collect personal data from anyone under the age of 18. If you are a parent or guardian and believe that a minor has registered on Gibaji or provided us with personal data, please contact us immediately at [email protected].

Upon receiving such a report, Gibaji will promptly investigate, close the account if the user is found to be underage, and delete all associated personal data. We take underage gambling extremely seriously and have age verification measures in place at registration and during the KYC process to prevent it.

11

Changes to This Policy

Gibaji may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or platform features. When we make material changes, we will notify registered players via email or a prominent notice on the platform before the changes take effect.

The "Last updated" date at the top of this page will always show when the most recent revision was made. We encourage you to review this policy periodically. Continued use of the Gibaji platform after any update constitutes your acceptance of the revised Privacy Policy.

12

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way Gibaji handles your personal data, please get in touch with our team. We are committed to resolving all privacy-related enquiries promptly and transparently.

  • Email: [email protected]
  • Live chat: available directly within the Gibaji platform and app
  • FAQ: visit our FAQ page for answers to common questions
For data access, correction, or deletion requests, please email us with the subject line "Data Privacy Request" and include your registered mobile number so we can locate your account. We will respond within 30 days.

Safe and Secure

Your Privacy Is Protected — Play with Confidence

Gibaji is built on trust. Register your free account today and enjoy a secure, fair, and transparent betting experience designed for players in Bangladesh.