Privacy Policy — ubaje Betting & Casino Platform

1. Who We Are

1.1 ubaje operates the online betting and casino platform accessible at https://ubaje.io (the "Platform"). References to "ubaje", "we", "us", or "our" in this Privacy Policy refer to the ubaje platform and its authorised operators.

1.2 ubaje serves players across Bangladesh, with primary operations targeting users in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar. All platform communications and support are conducted in English.

1.3 For all data-related enquiries, including requests to access, correct, or delete your personal data, please contact us at support@ubaje.io.

2. Scope of This Policy

2.1 This Privacy Policy applies to all personal data collected, processed, and stored by ubaje in connection with your use of the Platform, including but not limited to:

• Registration and account creation data
• Identity and age verification (KYC) documents
• Payment and transaction data
• Betting and gaming activity data
• Communications with the ubaje support team
• Technical data collected automatically via cookies and similar technologies

2.2 This Policy applies regardless of whether you access the Platform via a desktop browser, mobile browser, or any other means. It should be read together with our Terms & Conditions and Responsible Gaming Policy.

2.3 This Policy does not apply to third-party websites or services that may be referenced on the Platform. ubaje is not responsible for the privacy practices of any third party.

3. Data We Collect

3.1 ubaje collects personal data through several channels. The categories of data we collect are set out in the table below:

3.2 Special Category Data: ubaje does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data beyond what is strictly necessary for age and identity verification purposes.

3.3 Data from Third Parties: ubaje may receive personal data from payment processors (such as bKash, Nagad, and Rocket) and identity verification service providers to assist in completing KYC checks. Such data is used solely for verification purposes and is not shared further.

4. How We Use Your Data

4.1 ubaje uses the personal data we collect for the following purposes:

• Account Management: To register, maintain, and administer your ubaje account, including processing your login credentials and account settings.
• Identity & Age Verification: To verify that you are aged 21 or above and that your identity matches the details provided at registration, in compliance with our 21+ policy.
• Payment Processing: To process deposits and withdrawals in Bangladeshi Taka (৳) via bKash, Nagad, Rocket, Upay, Visa, and Mastercard.
• Platform Provision: To deliver sports betting markets, casino games, slots, and other services available on the ubaje platform.
• Customer Support: To respond to your enquiries, resolve complaints, and provide live chat support in English around the clock.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, money laundering, collusion, and other prohibited conduct on the platform.
• Responsible Gaming: To monitor gaming activity for signs of problem gambling behaviour and to enforce responsible gaming limits you have set.
• Legal Compliance: To comply with applicable anti-money laundering (AML) regulations, record-keeping obligations, and any lawful requests from competent authorities.
• Platform Improvement: To analyse aggregated, anonymised usage data to improve the design, performance, and content of the ubaje platform.
• Marketing Communications: To send you promotional offers, bonuses, and platform updates by email or mobile notification, where you have opted in. You may withdraw consent at any time by contacting support@ubaje.io.

4.2 ubaje will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your consent or as otherwise required by law.

5. Legal Bases for Processing

5.1 ubaje processes your personal data only where a valid legal basis exists. The legal bases we rely on are:

• Contractual Necessity: Processing that is necessary to perform the contract between you and ubaje — for example, operating your account, processing transactions, and delivering games.
• Legal Obligation: Processing required to comply with applicable laws — for example, retaining KYC documents for AML compliance, or cooperating with lawful requests from authorities.
• Legitimate Interests: Processing that is necessary for ubaje's legitimate business interests, provided those interests are not overridden by your privacy rights — for example, fraud detection, platform security, and anonymised analytics.
• Consent: Where ubaje relies on your consent — for example, for sending marketing communications — you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

6. Sharing Your Data

6.1 ubaje does not sell or rent your personal data to any third party. We may share your data with the following categories of recipients in the limited circumstances described:

• Payment Service Providers: bKash, Nagad, Rocket, Upay, Visa, and Mastercard — to process your deposits and withdrawals. These providers process data under their own privacy policies and are bound by applicable payment industry security standards.
• Identity Verification Providers: Third-party KYC and AML screening services engaged by ubaje to verify player identity and age. These providers act as data processors on our behalf and are contractually bound to process data only on ubaje's instructions.
• IT & Infrastructure Providers: Cloud hosting, server, and security service providers that support the operation of the ubaje platform. All such providers are subject to data processing agreements.
• Regulatory and Legal Authorities: Where required by law or a lawful order, ubaje may disclose personal data to government bodies, law enforcement agencies, or financial intelligence units. ubaje will notify you of any such disclosure where legally permitted to do so.
• Business Transfers: In the event of a merger, acquisition, or sale of ubaje's business assets, personal data may be transferred as part of that transaction. Affected players will be notified in advance where reasonably practicable.

6.2 Any third party with whom ubaje shares personal data is required to maintain appropriate technical and organisational security measures and to use the data only for the specified purpose.

7. Cookies & Tracking Technologies

7.1 ubaje uses cookies and similar tracking technologies to operate the platform, remember your preferences, analyse usage patterns, and prevent fraud. The main categories of cookies we use are:

• Strictly Necessary Cookies: Essential for the platform to function. These include session authentication cookies, security tokens, and load-balancing cookies. They cannot be disabled without affecting core platform functionality.
• Functional Cookies: Used to remember your preferences — such as your preferred language setting or responsible gaming limit selections — across sessions.
• Analytics Cookies: Used to collect anonymised data about how players navigate the platform, which pages are visited most, and where errors occur. This data is used solely to improve the platform experience.
• Fraud Prevention Cookies: Used to detect and prevent fraudulent account activity, bot access, and abnormal usage patterns.

7.2 Most browsers allow you to control or disable cookies through their settings. Please note that disabling certain cookies may affect the functionality of the ubaje platform, including your ability to log in or place bets.

7.3 ubaje does not use third-party advertising cookies or cross-site tracking technologies for behavioural advertising purposes.

8. Data Security

8.1 ubaje implements industry-standard technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and ubaje's servers
• Cryptographic hashing with unique salts for all stored passwords — ubaje never stores passwords in plain text
• Access controls ensuring that only authorised personnel can access personal data, on a need-to-know basis
• Regular independent security assessments and penetration testing of the platform infrastructure
• Automated intrusion detection systems monitoring for suspicious access patterns around the clock
• Secure, encrypted backups of all personal data stored on geographically distributed servers

8.2 While ubaje takes all reasonable precautions to protect your data, no internet-based platform can guarantee absolute security. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, ubaje will notify you as soon as practicable.

8.3 You are responsible for keeping your ubaje login credentials confidential. If you suspect that your account has been accessed without your authorisation, contact our support team immediately at support@ubaje.io.

9. Data Retention

9.1 ubaje retains personal data for the periods set out below, after which it is securely deleted or anonymised:

9.2 Where ubaje is required by law to retain data beyond the periods stated above, the data will be retained for the legally mandated period and then securely deleted.

10. Your Privacy Rights

10.1 As a ubaje player, you have the following rights in respect of your personal data. To exercise any of these rights, contact us at support@ubaje.io. ubaje will acknowledge your request within 48 hours and aim to fulfil it within 30 days.

10.2 ubaje will not charge a fee for handling data rights requests unless a request is manifestly unfounded or excessive, in which case a reasonable administrative fee may be applied. ubaje may request proof of identity before processing a rights request in order to protect your data from unauthorised access.

11. Children & Minors

11.1 The ubaje platform is strictly for adults aged 21 years and above. ubaje does not knowingly collect personal data from persons under the age of 21. Our registration process includes age verification steps to enforce this requirement.

11.2 If ubaje discovers that personal data has been collected from a player who is under 21, that account will be immediately suspended, the data will be deleted, and any deposits will be refunded to the payment method used.

11.3 If you believe that a minor has registered on the ubaje platform or that a person under 21 has accessed the platform, please notify us immediately at support@ubaje.io. We take underage gambling very seriously and will act swiftly on all credible reports.

12. Third-Party Services

12.1 The ubaje platform integrates with third-party services including payment processors (bKash, Nagad, Rocket, Upay, Visa, Mastercard), game content providers (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi), and identity verification services. These third parties operate under their own privacy policies and data protection frameworks.

12.2 ubaje is not responsible for the privacy practices of any third-party service provider. We recommend that you review the privacy policies of payment providers before initiating a transaction.

12.3 The ubaje platform does not contain links to external websites for general browsing purposes. Any third-party integrations present on the platform are limited to functional services required to deliver the betting and gaming experience.

13. Amendments to This Policy

13.1 ubaje reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or platform functionality. When material changes are made, we will notify registered players by email and post a prominent notice on the platform at least seven (7) days before the revised Policy takes effect.

13.2 The date at the top of this Policy indicates when it was last updated. Your continued use of the ubaje platform after the effective date of any revision constitutes your acceptance of the updated Policy.

13.3 If you do not agree to any change in this Policy, you should stop using the platform and may request account closure by contacting support@ubaje.io.

14. Contact & Complaints

14.1 If you have any questions, concerns, or complaints about this Privacy Policy or about how ubaje handles your personal data, please contact us using the following details:

• Email: support@ubaje.io (plain text — not a clickable link)
• Live Chat: Available 24/7 via the ubaje platform in English
• Response Time: ubaje aims to acknowledge privacy enquiries within 48 hours and to resolve them within 30 days
• Support Hours: Around the clock, Bangladesh Standard Time (BST, UTC+6)

14.2 ubaje takes all privacy complaints seriously. If you are not satisfied with our response, you have the right to escalate your complaint to the relevant data protection or consumer protection authority in your jurisdiction.