fbajia Privacy
Policy & Data Protection

This Privacy Policy (the "Policy") describes the data protection practices of fbajia (the "Platform", "we", "us", or "our") in connection with the operation of the fbajia online casino and sports betting platform available at fbajia.net. This Policy applies to all registered players, visitors who browse the Platform without registering, and any individual who communicates with the fbajia support team via email or live chat.

fbajia is committed to collecting only the personal data that is necessary for the lawful and efficient operation of the Platform, using that data only for the purposes described in this Policy, and retaining it only for as long as is necessary or required by applicable legal obligations. We do not sell your personal data to any third party for marketing or advertising purposes under any circumstances.

By creating a fbajia account, making a deposit, or otherwise using the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and use of your personal data as described herein. If you do not agree with the terms of this Policy, you must stop using the Platform and contact [email protected] to request closure of your account and deletion of your data where permitted by law.

This Policy is reviewed and updated periodically. The current version and effective date are displayed at the top of this page. Material changes will be communicated to registered players via the contact details held on their account before the revised Policy takes effect. Continued use of the Platform after such notification constitutes your acceptance of the updated Policy.

fbajia collects personal data from you in three ways: information you provide to us directly during registration and platform use, information we collect automatically through your use of the Platform, and information we receive from trusted third-party partners such as payment processors and identity verification services.

Information you provide directly:

• Full legal name (as it appears on your National Identity Card or passport)
• Date of birth (used to verify you are 18 years of age or older)
• Residential address in Bangladesh (city, district, postal code)
• Mobile phone number (used for SMS verification and account security)
• Email address (used for account communications and security alerts)
• Username and encrypted password (account access credentials)
• KYC documents: copy of National Identity Card (NID), passport, or driving licence; proof of address; and, where required, source-of-funds documentation
• Payment method details: mobile wallet identifiers (bKash, Nagad, Rocket, Upay account numbers) and bank account details where applicable — note that full payment card numbers are never stored by fbajia directly
• Any information you voluntarily provide when contacting our support team, including the content of your messages and any attachments

Information collected automatically:

• IP address and approximate geolocation derived from IP
• Device type, operating system, browser type and version
• Session timestamps, session duration, and pages visited within the Platform
• Game session data: games played, wager amounts, win/loss outcomes, and session duration per game title
• Deposit and withdrawal transaction records including amounts, timestamps, and payment method used
• Cookie identifiers and similar tracking technologies (see Section 3)
• Referral source (how you arrived at fbajia.net — organic search, direct, or internal navigation)

Information received from third parties:

• Identity and age verification results from KYC processing partners
• Transaction confirmation and fraud screening data from payment processors (bKash, Nagad, Rocket, Upay, and banking partners)
• Risk and sanctions screening results where required by applicable anti-money laundering obligations

fbajia processes your personal data only for specific, documented, and lawful purposes. We do not use your data for purposes incompatible with those described below. The primary purposes for which we process your personal data are:

• Account creation and management: To set up your fbajia account, verify your identity and age, maintain your account profile, and facilitate your secure login.
• Platform operation and service delivery: To process deposits and withdrawals in BDT via bKash, Nagad, Rocket, Upay, and partner banks; to make casino games and sports betting markets available to you; and to record your wagering activity accurately.
• Legal and regulatory compliance: To fulfil our Know Your Customer (KYC) and anti-money laundering (AML) obligations, including age verification, identity screening, and transaction monitoring. These obligations require us to retain certain data for defined periods regardless of account status.
• Fraud prevention and platform security: To detect and investigate suspicious account activity, multi-account abuse, bonus fraud, payment chargebacks, and any other activity that may constitute a breach of our Terms & Conditions or applicable law.
• Customer support: To respond to your enquiries, process complaints, assist with account recovery, and provide guidance on responsible gaming resources.
• Responsible gaming: To monitor your gaming behaviour for indicators of problem gambling (such as rapidly increasing bet sizes, extended uninterrupted sessions, or large deposit volumes relative to account history) and to facilitate self-exclusion requests, deposit limits, and cooling-off periods.
• Platform improvement: To analyse aggregate, anonymised usage patterns in order to improve the fbajia user experience, optimise page performance, and refine game selection — without identifying individual players in this analysis.
• Communications: To send you security alerts, account notifications, and — where you have opted in — promotional messages about fbajia bonuses and offers. You may withdraw your consent to promotional communications at any time by contacting [email protected].

fbajia does not use automated decision-making processes (including profiling) that produce legal or similarly significant effects on players without human review. Where automated tools flag an account for investigation (for example, for suspected bonus abuse or AML review), a member of the fbajia compliance team will conduct a manual assessment before any consequential action is taken.

fbajia uses cookies and similar client-side tracking technologies to operate the Platform securely and efficiently. A cookie is a small text file stored on your device by your web browser when you visit a website. Cookies allow the Platform to recognise your device across pages and sessions, maintain your login state, and collect anonymised analytics data.

Types of cookies used by fbajia:

fbajia does not sell, rent, or trade your personal data to any third party for commercial purposes. We share your data only in the limited circumstances described below, and only to the extent necessary for the stated purpose:

• Payment processors: When you make a deposit or request a withdrawal, the transaction data necessary to execute the payment is shared with the relevant payment provider (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, or Sonali Bank). These providers process your data under their own privacy policies and are independently regulated financial institutions.
• KYC and identity verification partners: To fulfil our age-verification and anti-money-laundering obligations, we share identity document data with specialist KYC processing partners. These partners are contractually bound to process your data only for the purposes of identity verification and to maintain it with equivalent security standards to those described in this Policy.
• Game software providers: When you play a casino game or live dealer title, the game provider (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Ezugi) receives the technical session data required to run the game, including your Player ID and bet/win amounts for that session. Game providers do not receive your full name, address, or payment method details.
• Legal and regulatory authorities: fbajia will disclose personal data to law enforcement agencies, financial intelligence units, or other competent authorities where required to do so by law, court order, or in response to a lawful regulatory request. We will notify you of any such disclosure where permitted by law.
• Corporate transactions: In the event of a merger, acquisition, or sale of all or substantially all of fbajia's assets, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer and the privacy terms applicable to your data under the new entity.

All third parties with whom fbajia shares personal data are required to maintain appropriate technical and organisational security measures and to process your data only for the purposes for which it was shared. fbajia conducts periodic due diligence reviews of its key data-processing partners to ensure continued compliance with these standards.

fbajia retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or for as long as required by our legal and regulatory obligations — whichever period is longer. The following retention periods apply:

As a player on the fbajia Platform, you have a number of rights in relation to the personal data we hold about you. fbajia respects and upholds these rights in accordance with internationally recognised data protection principles. The rights available to you are:

fbajia applies a layered set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Security is treated as an ongoing operational priority, not a one-time implementation.

Technical measures include:

• 256-bit SSL/TLS encryption applied to all data in transit between your device and fbajia's servers
• AES-256 encryption for sensitive data fields stored in our database (passwords are stored as salted cryptographic hashes — they are never stored in plain text)
• Two-factor authentication (2FA) available for all player accounts and mandatory for all fbajia administrative accounts
• Regular automated vulnerability scanning and periodic independent penetration testing of the Platform infrastructure
• Web Application Firewall (WAF) and DDoS mitigation applied at the network perimeter
• Strict rate limiting and anomaly detection on login and payment endpoints to prevent credential stuffing and brute-force attacks
• Immutable audit logs for all administrative access to player data, with automated alerts on anomalous access patterns

Organisational measures include:

• Role-based access controls ensuring that employees can only access the player data necessary for their specific job function
• Mandatory data protection training for all fbajia staff upon onboarding and annually thereafter
• Documented data breach response procedures with clearly assigned responsibilities and defined notification timelines
• Supplier due diligence programme reviewing the security posture of all third-party data processors before engagement and annually thereafter

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, fbajia will notify affected players without undue delay and, in any case, within 72 hours of becoming aware of the breach where feasible. Notification will be sent to the email address registered to your account and will describe the nature of the breach, the categories of data affected, the likely consequences, and the steps fbajia has taken or proposes to take to address the breach.

While fbajia takes all reasonable precautions to protect your data, no internet transmission or electronic storage system is 100% secure. You also have a responsibility to protect your account: use a strong, unique password for your fbajia account, do not share your login credentials with any other person, and contact [email protected] immediately if you suspect unauthorised access to your account.

If you have any questions about this Privacy Policy, wish to exercise your data subject rights, or have a concern about how fbajia handles your personal data, please contact our data protection team using the details below. All privacy enquiries are handled confidentially and with priority by a dedicated member of the fbajia compliance team.

Email: [email protected]
Response time: Within 30 calendar days for formal data subject requests; within 48 hours for general privacy enquiries.
Support hours: 24 hours a day, 7 days a week, Bangladesh Standard Time (BST, UTC+6).

Complaints procedure: If you are not satisfied with fbajia's response to a privacy concern, you may escalate your complaint in writing to [email protected] with the subject line "Formal Privacy Complaint". We will acknowledge formal complaints within 48 hours and provide a substantive written response within 15 business days. fbajia treats all formal privacy complaints with the utmost seriousness and maintains a complete audit trail of all complaint handling activities.

Children's data: The fbajia Platform is strictly for adults aged 18 and above. We do not knowingly collect personal data from individuals under the age of 18. If you believe that a person under 18 has registered on the Platform or that fbajia holds personal data belonging to a minor, please notify us immediately at [email protected]. Upon verification, we will delete the data and close the account without delay.

Changes to this Policy: fbajia reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or Platform features. The current version number and effective date are displayed at the top of this page. We will notify registered players of material changes via email at least 7 days before the updated Policy takes effect. We recommend checking this page periodically to remain informed of how fbajia protects your privacy.