gbjee Privacy Policy — How We Handle Your Data

1 Introduction and Scope

This Privacy Policy (the "Policy") describes how gbjee (the "Company", "we", "us", or "our") collects, uses, stores, shares, and protects personal data relating to individuals (each a "Player" or "you") who access or use the gbjee online casino and sports betting platform at https://gbjee.ws (the "Platform"), including all associated pages, features, games, betting markets, and customer support channels.

This Policy applies to all personal data collected in connection with your use of the Platform, whether you are a registered account holder, a visitor browsing the Platform without an account, or an individual who contacts gbjee support. It covers data collected via the website, mobile-responsive interfaces, live chat, email, and any other channel through which you interact with gbjee.

By registering an account, making a deposit, or otherwise using the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you must not use the gbjee Platform.

2 Data Controller

For the purposes of this Policy, gbjee acts as the data controller in respect of personal data collected from players in Bangladesh. As data controller, gbjee determines the purposes for which your personal data is collected and the means by which it is processed.

All data rights requests, privacy concerns, and queries regarding this Policy should be directed to the gbjee data support team by email at [email protected]. Please include "Privacy Request" in the subject line of your email so that your message is routed to the appropriate team member promptly.

3 What Personal Data We Collect

gbjee collects the following categories of personal data from players. The specific data points collected in each category depend on how you use the Platform and the stage of your account lifecycle:

gbjee does not collect sensitive personal data such as racial or ethnic origin, religious beliefs, political opinions, biometric data, or health information, except where a player voluntarily discloses health-related information in the context of a responsible gaming request, in which case that information is handled with heightened care and used solely for the purpose of providing appropriate support.

4 How We Collect Your Data

gbjee collects personal data through the following means:

• Directly from you: When you register an account, complete identity verification, make a deposit or withdrawal, contact support, respond to a survey, or interact with any feature of the Platform that requires you to submit information.
• Automatically: Via cookies, server logs, and similar tracking technologies as you browse and use the Platform. Technical and usage data is collected automatically during each session.
• From payment providers: bKash, Nagad, Rocket, Upay, and supported banking partners provide transaction confirmation data to gbjee to facilitate deposit and withdrawal processing. gbjee does not receive full payment account credentials from these providers.
• From identity verification services: Where third-party identity verification is required to confirm your eligibility or comply with anti-money-laundering obligations, gbjee may receive verification status and related data from approved verification service providers.
• From publicly available sources: In limited circumstances related to fraud prevention or responsible gaming compliance, gbjee may consult publicly available information to verify details provided by a player.

5 Legal Basis for Processing

gbjee processes your personal data on the following legal bases, depending on the specific processing activity in question:

• Performance of a contract: Processing that is necessary to provide you with the Platform services you have requested, including account creation, payment processing, game settlement, and customer support.
• Compliance with a legal obligation: Processing required to comply with applicable laws and regulatory requirements, including anti-money-laundering (AML) obligations, know-your-customer (KYC) requirements, and responsible gaming mandates.
• Legitimate interests: Processing carried out for gbjee's legitimate business interests where those interests are not overridden by your rights and interests. This includes fraud detection, Platform security monitoring, service improvement analytics, and internal reporting.
• Consent: Where gbjee relies on your consent as the legal basis for processing — for example, when sending marketing communications — you may withdraw that consent at any time by contacting support or adjusting your account preferences. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

6 How We Use Your Data

gbjee uses the personal data it collects for the following specific purposes:

• Creating and managing your gbjee account, including verifying your identity and confirming your eligibility to use the Platform.
• Processing deposits and withdrawals via bKash, Nagad, Rocket, Upay, and supported bank channels, and maintaining accurate transaction records denominated in Bangladeshi Taka (BDT).
• Settling bets, crediting winnings, and resolving disputes related to game outcomes and betting markets.
• Detecting, investigating, and preventing fraudulent activity, multi-accounting, money laundering, and other prohibited conduct.
• Providing customer support via live chat and email, including maintaining records of previous interactions to ensure continuity of service.
• Operating responsible gaming tools, including monitoring account activity for indicators of problem gambling and administering self-exclusion, deposit limit, and time-out requests.
• Sending transactional communications, such as deposit confirmations, withdrawal notifications, and account security alerts.
• Sending marketing communications about gbjee promotions, cricket betting offers, seasonal campaigns (such as BPL, Eid, and Pohela Boishakh promotions), and new game launches — but only where you have consented to receive such communications.
• Improving and optimising the Platform through analysis of aggregated and anonymised usage data.
• Complying with applicable legal obligations and responding to lawful requests from competent authorities.

7 Data Sharing and Third Parties

gbjee does not sell, rent, or trade your personal data to any third party. Data is shared only in the following limited and controlled circumstances:

• Payment service providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, and Sonali Bank receive only the data necessary to process a specific transaction on your behalf. These providers are independent data controllers in respect of transaction data processed through their own systems.
• Identity verification providers: Where KYC verification is required, gbjee may share identity documents with approved verification service providers operating under strict data processing agreements.
• Game and platform technology providers: Game studios (such as Pragmatic Play, Evolution Gaming, NetEnt, Spribe, and Ezugi) may receive technical session data necessary to deliver their game content. These providers do not receive your full identity or financial data.
• Fraud prevention and security services: Aggregated or pseudonymised data may be shared with fraud detection service providers to protect the Platform and its players from malicious activity.
• Legal and regulatory authorities: gbjee will disclose personal data to competent authorities, courts, or law enforcement agencies where required to do so by applicable law or in response to a valid legal process. gbjee will notify affected players of such disclosures where permitted by law.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of gbjee's business, player data may be transferred to the acquiring entity, subject to equivalent data protection commitments. Players will be notified of any such transfer in advance.

All third parties who process personal data on gbjee's behalf are required to implement appropriate technical and organisational security measures and to process data only in accordance with gbjee's documented instructions.

8 Cookies and Tracking Technologies

gbjee uses cookies and similar technologies (collectively, "cookies") to operate the Platform, remember your preferences, maintain session security, and analyse Platform usage. The following types of cookies are used:

• Strictly necessary cookies: Required for the Platform to function. These include session authentication cookies that keep you logged in during a game session. These cookies cannot be disabled without preventing core Platform functionality.
• Functional cookies: Remember your preferences such as language settings, last visited game category, and responsible gaming limit configurations. These improve your experience but are not essential.
• Analytics cookies: Collect anonymised data about how players navigate and use the Platform. This data is used in aggregated form to identify usability issues and improve the overall experience.
• Security cookies: Detect and prevent fraudulent activity, multi-account behaviour, and automated bot access.

You can control non-essential cookies through your browser settings. Please note that disabling functional or analytics cookies may affect your experience on the Platform. Strictly necessary cookies cannot be disabled via browser settings without logging out of the Platform entirely.

9 Data Retention

gbjee retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal obligations, whichever is longer. The following general retention periods apply:

• Account data and identity verification records: Retained for the duration of your account and for a minimum of five (5) years following account closure, in line with anti-money-laundering record-keeping requirements.
• Transaction records: Retained for a minimum of five (5) years from the date of the transaction.
• Customer support communications: Retained for three (3) years from the date of the last interaction, unless the content relates to a dispute, fraud investigation, or regulatory matter, in which case it is retained for the duration of the relevant proceeding plus three (3) years.
• Responsible gaming records: Retained for the duration of the account and for five (5) years following account closure to support ongoing responsible gaming obligations.
• Technical and usage logs: Retained for thirteen (13) months on a rolling basis for security and analytics purposes, then deleted.
• Marketing consent records: Retained for the duration of the consent and for three (3) years after consent is withdrawn, as evidence of the consent having been given.

Once a retention period expires, personal data is securely deleted or anonymised so that it can no longer be associated with an individual player.

10 Data Security

gbjee implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and the gbjee Platform, consistent with the encryption standard used by major Bangladeshi financial institutions.
• Encrypted storage of sensitive data fields, including financial data and identity document references, at rest on gbjee's servers.
• Role-based access controls ensuring that only authorised personnel with a legitimate operational need can access player personal data. All access is logged and subject to periodic audit.
• Multi-factor authentication for all gbjee staff who access systems containing player data.
• Regular security assessments and penetration testing to identify and remediate vulnerabilities before they can be exploited.
• Incident response procedures that ensure any confirmed or suspected data breach is assessed promptly and that affected players are notified in accordance with applicable notification requirements.

While gbjee takes all reasonable precautions to protect your data, no online platform can guarantee absolute security against all possible threats. Players are encouraged to use strong, unique passwords for their gbjee accounts and to enable OTP verification to reduce the risk of unauthorised access.

11 Your Data Rights

As a gbjee player, you have the following rights in relation to your personal data. To exercise any of these rights, please contact the gbjee support team at [email protected] with the subject line "Data Rights Request". gbjee will respond within ten (10) business days of receiving a verifiable request.

• Right of access: You have the right to request a copy of the personal data gbjee holds about you and information about how that data is processed.
• Right to rectification: You have the right to request correction of inaccurate or incomplete personal data held by gbjee. Certain data corrections require identity re-verification before they can be actioned.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected. This right is subject to gbjee's legal retention obligations, which may require certain data to be retained even after account closure.
• Right to restriction of processing: You may request that gbjee restricts the processing of your data in certain circumstances — for example, while the accuracy of data you have disputed is being verified.
• Right to data portability: You have the right to receive personal data you have provided to gbjee in a structured, machine-readable format, where processing is based on your consent or the performance of a contract.
• Right to withdraw consent: Where gbjee processes your data based on consent (for example, for marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.
• Right to object: You have the right to object to processing carried out on the basis of gbjee's legitimate interests. gbjee will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests and rights.

12 Children and Underage Players

gbjee applies age verification checks at the point of registration and during the KYC process to confirm that all account holders meet the minimum age requirement of 21 years. Where gbjee discovers that personal data has been collected from an individual who was under 21 years of age at the time of collection, that data will be deleted promptly and the associated account will be closed.

Parents and guardians who are concerned about underage access to online gambling platforms in Bangladesh are encouraged to use parental control software on shared devices. gbjee cooperates fully with any credible report of underage access and takes such reports seriously.

13 Changes to This Policy

gbjee reserves the right to update or amend this Privacy Policy at any time. When changes are made, the revised Policy will be published on this page with an updated effective date. Material changes — those that significantly affect how your data is collected, used, or shared — will be communicated to registered players via a notice on the Platform or by direct communication to your registered contact details prior to the change taking effect.

Your continued use of the gbjee Platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not accept the changes, you must stop using the Platform and may request account closure by contacting gbjee support.

14 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way gbjee handles your personal data, please get in touch with the gbjee privacy support team through any of the following channels:

• Email: [email protected] — please use the subject line "Privacy Request" or "Data Rights Request" so your message is handled by the appropriate team member.
• Live Chat: Available 24 hours a day, 7 days a week via the live chat widget on the gbjee Platform. Average response time is 2–5 minutes.
• Response time: Written responses to data rights requests will be issued within ten (10) business days of identity verification being completed.

gbjee is committed to resolving all privacy-related concerns fairly and efficiently. If you remain dissatisfied following gbjee's response to your concern, you may seek further assistance through any applicable consumer protection channel available in Bangladesh.