Gbajaa's Privacy Policy – Your Data Is Safe With Us

Gbajaa collects various types of data to deliver its services. This data falls into three main categories — information you provide directly, data collected automatically, and information received from third parties.

Information You Provide Directly

• Name, date of birth, email address, and mobile number.
• National ID or passport number (for KYC verification).
• Payment method details — bKash/Nagad/Rocket number.
• The username and password you set yourself.
• Your message via support ticket or live chat.

Automatically Collected Data

• Your device's IP address and device model.
• Browser type and operating system.
• How long you spend on gbajaa, which pages you visit, and which games you play.
• Login and logout timestamps, and transaction history.

Gbajaa uses your data only for specific, legitimate purposes. We do not misuse your information under any circumstances.

Primary Use Cases

• To create and manage your account and ensure its security.
• To process deposits, withdrawals, and other financial transactions.
• To complete age and identity verification (KYC).
• To prevent fraud, money laundering, and other illegal activities.
• To provide customer service and support.
• To fulfill legal and regulatory obligations.
• To monitor responsible gaming and provide assistance when needed.
• To inform you about promotional offers and bonuses, with your consent.

Gbajaa uses the latest technology to keep your data secure. Our servers are hosted in internationally certified data centers with 24/7 active security systems.

Security Measures

• 256-bit TLS/SSL encryption — applied to all data transfers.
• Passwords are stored using bcrypt hashing — never in plain text.
• Two-factor authentication (2FA) available for added security.
• Regular security audits and penetration testing.
• Automatic alerts for suspicious logins or unauthorized access attempts.
• Sensitive data is stored in encrypted form in the database.

Gbajaa does not sell your data or share it unnecessarily. However, limited data is shared with trusted partners where required to deliver our services.

Who Your Data May Be Shared With

• Payment Providers: bKash, Nagad, Rocket — only the minimum information required to verify transactions.
• KYC Services: Identity verification agencies — for ID document data only.
• Legal Authorities: Under a court order or legal obligation.
• Fraud Prevention Agencies: To investigate fraudulent activity.

Every partner operates under our strict confidentiality agreements and is prohibited from using your data for any other purpose.

Gbajaa uses cookies on its website and app to ensure smooth operation and enhance your experience. Cookies are small text files stored on your device.

Cookie Types

• Essential Cookies: Required for login sessions and security.
• Functional Cookies: Remembers your preferences and settings.
• Analytics Cookies: To understand which pages are used most.
• Marketing Cookies: Only with your consent — for relevant advertising.

You can delete or disable cookies at any time through your browser settings. Please note that disabling essential cookies may cause certain features of the site to stop working.

As a gbajaa user, you have several important rights over your personal data. Exercising these rights is completely free of charge.

• Right to Know: You can find out exactly what data we hold about you.
• Right to Rectification: You can request corrections to any inaccurate or outdated information.
• Right to Erasure: You may request deletion of your data under certain circumstances.
• Portability: You can export your data in a machine-readable format.
• Right to Restrict Processing: You can request that we restrict the processing of your data in certain circumstances.
• Right to Object: You can object to your data being used for marketing purposes.

Gbajaa strictly prohibits its services to anyone under the age of 18. We do not knowingly collect any information from minors.

• Age is verified at registration, and ID documents may be requested when necessary.
• Any data collected from a minor is deleted immediately upon discovery.
• Parents with concerns are welcome to contact us at support@gbajaa.com.

If you suspect a minor is using your account, change your password immediately and contact our support team.

Gbajaa does not retain your data longer than necessary. Retention periods depend on the type of data and applicable legal requirements.

Once the retention period expires, data is securely deleted or anonymised in a way that makes it impossible to identify you.

Gbajaa may update this Privacy Policy at any time. You will be notified in advance of any significant changes.

• You will be notified at your registered email address of any significant changes.
• The "Last Updated" date at the top of the page will always reflect the most recent changes.
• Continuing to use gbajaa after any changes takes effect constitutes acceptance of the updated policy.
• If you do not agree to the updated policy, you may close your account.

If you have any questions, concerns, or complaints about this Privacy Policy, don't hesitate to reach out. We're always here to help.

• Email: support@gbajaa.com
• Live Chat: Chat with us directly from the Support section at gbajaa.com.
• Response Time: Usually within 24–48 hours.