fdbaji Privacy Policy — Your Data, Our Responsibility

1 Data Controller Information

For the purposes of this Privacy Policy, the data controller responsible for the personal information collected through the fdbaji website at fdbaji.net and all associated services is fdbaji ("the Platform", "we", "us", "our"). fdbaji operates as an offshore online gaming and sports betting platform providing services to players in Bangladesh and other eligible markets.

If you have any questions about how fdbaji handles your personal data, or if you wish to exercise any of your privacy rights described in Section 9 of this policy, you may contact our data team at any time using the details provided in Section 12.

2 Information We Collect

fdbaji collects personal data through several channels: information you provide directly during registration and account use, information generated automatically through your interaction with the platform, and information received from third-party payment and identity verification partners. The categories of data we collect are described below.

2.1 Information You Provide Directly

• Registration data: Full legal name, date of birth, residential address, email address, and mobile phone number provided when creating your fdbaji account.
• Identity verification documents: Copies of government-issued photo identification (National ID card, passport, or driving licence) and proof of address submitted during KYC verification.
• Payment method details: Mobile banking account identifiers (bKash, Nagad, Rocket, Upay) or bank account references used for deposits and withdrawals. fdbaji does not store full card numbers; card transactions are processed by PCI-DSS-compliant payment processors.
• Communications data: Content of messages sent to fdbaji through our customer support system, including live chat transcripts, emails, and any attachments you submit.
• Responsible gaming preferences: Self-imposed deposit limits, session time preferences, take-a-break requests, and self-exclusion requests you submit through your account settings or to our support team.

2.2 Information Collected Automatically

• Device and technical data: IP address, browser type and version, operating system, device identifiers, screen resolution, and time zone (Bangladesh Standard Time, UTC+6).
• Usage and behavioural data: Pages visited, games played, bets placed, session duration, click paths, search queries within the platform, and feature interactions.
• Transaction data: Records of all deposits, withdrawals, bonus claims, wagers placed, game results, and account balance changes.
• Cookie and tracking data: Data collected via cookies, local storage, and similar technologies as described in Section 6.

2.3 Information Received from Third Parties

• Payment processors: Transaction confirmation data and fraud signals from bKash, Nagad, Rocket, Upay, Visa, Mastercard, and banking partners including Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, and Sonali Bank.
• Identity verification services: Confirmation results and risk scores from third-party KYC providers used to verify identity documents.
• Fraud prevention partners: Device fingerprinting signals and behavioural risk indicators used to detect account fraud, bonus abuse, and multi-accounting.

3 Legal Basis for Processing

fdbaji processes your personal data on one or more of the following legal grounds, depending on the nature and purpose of the processing activity:

Where fdbaji relies on legitimate interests as a legal basis for processing, we have conducted a balancing assessment to confirm that our interests do not override your fundamental rights and freedoms. You may request a copy of this assessment by contacting us at the details in Section 12.

4 How We Use Your Data

fdbaji uses the personal data we collect for the following specific purposes. We do not use your data for any purpose that is incompatible with the reasons for which it was originally collected without first obtaining your consent or establishing a separate legal basis.

4.1 Service Delivery

Your registration data and payment information are used to create and maintain your fdbaji account, process transactions in Bangladeshi Taka (BDT), verify your eligibility to participate in games and promotions, and deliver the core betting and casino services you have signed up for. Without this processing, fdbaji cannot provide its services to you.

4.2 Identity Verification and Compliance

fdbaji is obligated to verify the identity and age of all players before permitting real-money activity. The identity documents and personal details you submit are used to conduct this verification, ensure compliance with our age restriction policy (18+), and satisfy the anti-money laundering (AML) and Know Your Customer (KYC) requirements applicable to our operations.

4.3 Security and Fraud Prevention

We analyse account activity, device data, IP addresses, and transaction patterns to detect and prevent fraud, bonus abuse, multi-accounting, money laundering, and other prohibited conduct described in the fdbaji Terms & Conditions. This processing is essential to protect the integrity of the platform and the interests of legitimate players.

4.4 Responsible Gaming

fdbaji uses behavioural and transaction data to monitor for potential indicators of problem gambling. Where our systems identify patterns that may suggest a player is experiencing difficulties — such as escalating deposit frequency, late-night session clustering, or rapid stake escalation — our responsible gaming team may reach out proactively to offer support tools. We retain responsible gaming request records to honour self-exclusion and limit preferences accurately.

4.5 Marketing Communications

With your consent, fdbaji may send you promotional emails, SMS notifications, and in-platform messages about bonuses, seasonal promotions (such as Eid offers, BPL cricket season promotions, and IPL special events), new game launches, and platform updates. You may withdraw your consent to marketing communications at any time by updating your notification preferences in your account settings or by contacting our support team.

4.6 Platform Improvement and Analytics

Aggregated and anonymised usage data helps us understand how players interact with the fdbaji platform, identify features that need improvement, optimise page performance, and develop new products tailored to the interests of our Bangladesh player base. Where possible, analytics processing uses data that cannot be linked back to individual players.

5 Sharing Your Information

fdbaji does not sell, rent, or trade your personal data to any third party for their own marketing purposes. We share personal data only in the limited circumstances described below, and only to the extent necessary for the specific purpose.

5.1 Payment Service Providers

To process your deposits and withdrawals, fdbaji shares the minimum necessary payment and identity data with our payment partners, including bKash, Nagad, Rocket, Upay, and banking institutions such as Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, and Sonali Bank. These partners are contractually bound to use your data only for the purpose of processing your transactions and are prohibited from using it for any other purpose.

5.2 Identity Verification and KYC Partners

fdbaji works with third-party identity verification services to conduct KYC checks. Your identity documents and personal details may be shared with these providers solely for the purpose of verifying your identity and age. All KYC partners are contractually required to handle your data securely and in accordance with applicable data protection standards.

5.3 Technology and Platform Partners

Game content on the fdbaji platform is provided by third-party game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive limited technical data (such as session tokens and game round identifiers) necessary to deliver their games. They do not receive your full personal profile, financial data, or identity documents.

5.4 Legal and Regulatory Disclosure

fdbaji may disclose your personal data to law enforcement agencies, regulatory authorities, courts, or other governmental bodies where we are required to do so by applicable law, court order, or valid legal process. In such cases, fdbaji will disclose only the information specifically requested and will take reasonable steps to notify you of the disclosure where legally permitted to do so.

5.5 Business Transfers

In the event that fdbaji undergoes a merger, acquisition, restructuring, or sale of all or part of its business assets, your personal data may be transferred to the acquiring entity as part of that transaction. We will notify affected players of any such transfer and the privacy practices of the new entity prior to the transfer taking effect.

6 Cookies & Tracking Technologies

fdbaji uses cookies and similar technologies (including local storage and session storage) to operate the platform, remember your preferences, maintain your login session, and analyse usage patterns. The following table summarises the categories of cookies we use.

You can manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will prevent you from logging in to your fdbaji account. Disabling functional or analytics cookies will not affect your ability to place bets or play games but may reduce the quality of your experience.

7 Data Retention

fdbaji retains your personal data only for as long as it is necessary to fulfil the purposes for which it was collected or to comply with applicable legal, regulatory, or contractual obligations. The following retention periods apply as a general guide:

• Active account data: Retained for the duration of your account relationship with fdbaji, plus a period of up to 5 years after account closure to comply with anti-money laundering record-keeping obligations.
• Transaction records: All deposit, withdrawal, and betting records are retained for a minimum of 5 years from the date of the transaction to satisfy financial record-keeping requirements.
• KYC and identity documents: Retained for a minimum of 5 years after account closure. In cases where an account was closed following a fraud or AML investigation, documents may be retained for up to 10 years.
• Customer support communications: Retained for up to 3 years from the date of the interaction, unless the communication relates to a dispute or legal matter that requires longer retention.
• Marketing preferences and consent records: Retained for the duration of your account plus 2 years to document the history of your consent status.
• Analytics and usage data: Anonymised or aggregated analytics data may be retained indefinitely. Data that can be linked to an individual is deleted or anonymised within 24 months of collection.
• Self-exclusion records: Retained permanently or for the duration of the exclusion period plus 5 years to prevent re-registration in violation of the exclusion.

When retention periods expire, personal data is securely deleted or irreversibly anonymised. Secure deletion procedures include cryptographic erasure for cloud-stored data and certified destruction for any physical storage media.

8 Security Measures

fdbaji takes the security of your personal data seriously and implements a range of technical and organisational measures to protect it against unauthorised access, disclosure, alteration, or destruction. Our security framework includes:

• Encryption in transit: All data exchanged between your device and fdbaji servers is encrypted using TLS 1.2 or higher with 256-bit encryption keys. This applies to all pages of the fdbaji website, including account pages, deposit flows, and support chat.
• Encryption at rest: Sensitive personal data, including identity documents and payment references, is encrypted at rest in our database systems using AES-256 encryption.
• Access controls: Access to personal data is restricted on a strict need-to-know basis. fdbaji staff can access player data only for legitimate operational purposes, and all access events are logged and audited.
• Password security: Player passwords are stored using a one-way cryptographic hashing algorithm. fdbaji staff cannot read your password. If you forget your password, a reset process is triggered — your original password cannot be retrieved.
• Penetration testing: fdbaji commissions periodic third-party security assessments of its platform infrastructure to identify and remediate vulnerabilities before they can be exploited.
• Incident response: fdbaji maintains a documented data breach response procedure. In the event of a breach that is likely to result in a risk to the rights of affected players, we will notify affected individuals promptly and take immediate steps to contain and investigate the incident.

9 Your Privacy Rights

As a fdbaji player, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, please contact our data team using the details in Section 12. We will respond to all valid requests within 5 business days and aim to complete requests within 30 days.

9.1 Right of Access

You have the right to request a copy of the personal data fdbaji holds about you, along with information about how it is used, who it is shared with, and how long it is retained. This is sometimes called a Subject Access Request (SAR).

9.2 Right to Rectification

If any of the personal data fdbaji holds about you is inaccurate or incomplete, you have the right to request that we correct it without undue delay. For certain data fields (such as contact number and email address), you may update these directly through your account settings.

9.3 Right to Erasure

You may request that fdbaji delete your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (and no other legal basis applies), or where the data has been processed unlawfully. Please note that fdbaji may be required to retain certain data to comply with legal obligations — particularly financial and AML record-keeping requirements — even following a valid erasure request. We will inform you of any such obligations at the time of your request.

9.4 Right to Data Portability

Where fdbaji processes your data on the basis of consent or contractual necessity, and the processing is carried out by automated means, you have the right to receive a copy of your data in a structured, commonly used, machine-readable format (such as JSON or CSV) for transmission to another service.

9.5 Right to Object

You have the right to object to the processing of your personal data where fdbaji relies on legitimate interests as its legal basis. If you object, fdbaji will cease the relevant processing unless we can demonstrate compelling legitimate grounds that override your rights, or where processing is necessary for the establishment, exercise, or defence of legal claims.

9.6 Right to Withdraw Consent

Where fdbaji processes your data on the basis of your consent (for example, for marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that took place before the withdrawal. To withdraw consent for marketing, update your preferences in your account settings or email [email protected].

10 Children's Privacy

The fdbaji platform is strictly for adults aged 18 and above. 18+ fdbaji does not knowingly collect personal data from individuals under the age of 18. Our registration process includes an age declaration requirement and mandatory KYC verification to enforce this policy.

If fdbaji becomes aware that personal data has been collected from a person under 18 years of age — whether through a registration attempt, a tip-off, or our own detection systems — the relevant account will be immediately suspended, all associated data will be reviewed, any real-money balances will be returned to the source payment method (minus any bonus funds), and the account will be permanently closed. The personal data of the underage individual will be deleted as soon as practically possible, subject to any legal obligations to retain records of the incident.

If you believe that a person under the age of 18 has registered an account on fdbaji, please contact us immediately at [email protected] so we can investigate and take appropriate action.

11 Changes to This Policy

fdbaji may update this Privacy Policy from time to time to reflect changes in our data practices, the services we offer, or applicable legal and regulatory requirements. The "Effective Date" shown at the top of this document will be updated each time a revision is made.

For material changes — those that meaningfully affect how we collect, use, or share your personal data, or that reduce your rights under this policy — fdbaji will provide advance notice to registered players by email and by displaying a prominent notice on the fdbaji website for a period of at least 14 days before the change takes effect. Your continued use of the fdbaji platform after the effective date of any revision constitutes your acknowledgement of the updated policy.

For minor amendments, such as clarifications of existing language, corrections of typographical errors, or updates to contact information, fdbaji may update this page without advance notice. We encourage you to review this Privacy Policy periodically to stay informed of how your data is handled.

12 Contact & Complaints

If you have any questions, concerns, or requests relating to this Privacy Policy or the way fdbaji handles your personal data, please contact our data team using the details below. We aim to acknowledge all privacy-related enquiries within 2 business days and to provide a full response within 5 business days.

Email: [email protected]
Please include your registered account username and a brief description of your request in the subject line to help us locate your records quickly.

12.1 Formal Complaints

If you are not satisfied with fdbaji's response to a privacy concern, you have the right to escalate a formal complaint. fdbaji will investigate all formal complaints in good faith and provide a written response within 30 days. If a complaint cannot be resolved to your satisfaction through direct engagement with fdbaji, you may pursue the matter through applicable dispute resolution mechanisms or seek independent legal advice regarding your options under applicable law in your jurisdiction.