bobajee Privacy Policy

1. Information We Collect

bobajee collects personal data through several channels during your interaction with the platform. We are transparent about each category and the specific purpose it serves. The primary categories of data we collect are as follows:

Registration & Identity Data

When you create a bobajee account, we collect the information you provide directly during the registration process. This includes:

• Full legal name (as it appears on your government-issued ID)
• Date of birth (used to verify that you are 18 years of age or older)
• Bangladeshi mobile phone number (used for account verification and OTP delivery)
• Email address (used for account communications and password recovery)
• Preferred username and encrypted password
• Residential city or district (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi)

Identity Verification (KYC) Data

Before processing your first withdrawal, bobajee conducts Know Your Customer (KYC) verification. During this process, we may collect copies of the following documents:

• National Identity Card (NID) — front and back
• Passport (biographical data page)
• Proof of address (utility bill, bank statement, or similar document dated within 90 days)
• A selfie or live photograph for facial verification purposes

KYC documents are processed by our verification partner and stored securely in accordance with our data retention policy. They are never shared with game providers or third-party marketers.

Financial & Transaction Data

To process deposits and withdrawals, bobajee records transaction data including deposit amounts in Bangladeshi Taka (৳), transaction timestamps, payment method type (e.g., bKash, Nagad, Rocket, Upay, Visa, Mastercard), and transaction reference numbers. bobajee does not store your full bKash PIN, card CVV, or any other payment credential. That sensitive authentication data is handled exclusively by the respective payment provider.

Gaming & Betting Activity Data

We record your gameplay and betting history on the bobajee platform. This includes bets placed, games played, wagering amounts, bonus usage, session start and end times, and game outcomes. This data is used for account management, dispute resolution, responsible gaming monitoring, and platform improvement.

Technical & Device Data

When you access bobajee, our servers automatically collect certain technical information, including your IP address, browser type and version, operating system, device type, screen resolution, referring URL, and session duration. This data is used for security monitoring, fraud prevention, and analytics.

2. How We Use Your Data

bobajee processes your personal data only for specific, legitimate purposes. The table below summarises the key processing activities and the legal basis for each:

Marketing Communications

bobajee will only send you promotional emails, SMS messages, or push notifications if you have explicitly opted in to receive them during registration or via your account notification preferences. You may withdraw consent for marketing communications at any time by updating your account settings or by contacting [email protected]. Withdrawal of marketing consent does not affect your ability to use the bobajee platform or receive transactional account communications (such as deposit confirmations and withdrawal notifications).

During major cricket events — including the BPL, IPL, and T20 World Cup — bobajee may send eligible opted-in players targeted promotional offers relating to cricket betting markets. These are subject to the same opt-in and opt-out framework described above.

3. Data Sharing & Disclosure

bobajee does not sell, rent, or trade your personal data to third parties for their commercial purposes. We share your data only in the following defined circumstances:

Game Providers & Platform Partners

To deliver the games available on bobajee — including titles from Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — we share a limited player session token and account identifier with the relevant provider when you launch a game. Game providers do not receive your full name, payment details, or contact information. The data shared is limited to what is technically necessary to establish and authenticate your game session.

Payment Processors

Deposit and withdrawal transactions are processed via third-party payment providers including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, and supported card networks. We share transaction details — including the transaction amount in Bangladeshi Taka (৳) and your registered account identifier — with the relevant processor solely for the purpose of completing the transaction. These providers operate under their own privacy policies and data security frameworks.

KYC & Identity Verification Services

bobajee uses a third-party KYC verification partner to process identity documents. This partner receives your KYC documents for the sole purpose of verifying your identity and age. They are contractually prohibited from using your data for any other purpose and must meet security standards equivalent to or exceeding those applied by bobajee.

Legal and Regulatory Disclosure

bobajee may disclose your personal data to law enforcement agencies, regulatory bodies, or other competent authorities where required by applicable law, court order, or where we believe in good faith that such disclosure is necessary to prevent fraud, money laundering, match-fixing, or other criminal activity. We will notify you of any such disclosure where we are legally permitted to do so.

4. Cookies & Tracking Technologies

bobajee uses cookies and similar tracking technologies to operate the platform, personalise your experience, ensure security, and gather analytics data. A cookie is a small text file placed on your device when you visit bobajee. Cookies do not contain executable code and cannot be used to access files on your device.

Types of Cookies We Use

• Essential Cookies: Required for core platform functionality — including login sessions, security tokens, and load balancing. These cannot be disabled without disrupting platform access.
• Functional Cookies: Remember your preferences such as language settings, preferred game categories, and responsible gaming limits you have set in your account.
• Analytics Cookies: Collect aggregated, anonymised data about how players interact with the bobajee platform — such as which pages are visited most frequently and where players exit. This data is used to improve the platform experience.
• Security Cookies: Used for fraud detection, bot prevention, and to detect unusual account access patterns that may indicate compromised credentials or multi-accounting behaviour.

Managing Cookies

You can manage or disable non-essential cookies through your browser settings. Most modern browsers — including Chrome, Firefox, Safari, and the default Android browser widely used in Dhaka and across Bangladesh — provide granular cookie management controls. Please note that disabling essential cookies will prevent you from accessing your bobajee account.

bobajee does not use cross-site tracking cookies or third-party advertising pixels. Analytics data is collected in aggregate form and is not linked to individually identifiable player profiles.

5. Data Retention & Storage

bobajee retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply to the main categories of data we hold:

Upon expiry of the applicable retention period, personal data is securely deleted or permanently anonymised so that it can no longer be linked to an individual player. Anonymised aggregate data (such as platform usage statistics) may be retained indefinitely for research and development purposes.

bobajee stores player data on servers protected by physical and logical access controls. Data is backed up regularly using encrypted backup protocols. Access to production data is restricted to authorised personnel on a strict need-to-know basis.

6. Your Privacy Rights

As a bobajee player, you hold the following rights with respect to your personal data. To exercise any of these rights, contact our support team at [email protected]. We will respond to all privacy requests within 30 days of receipt and will not charge any fee for handling your request.

• Right of Access: You may request a copy of all personal data that bobajee holds about you, along with information on how it is processed and who it has been shared with.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Minor corrections (e.g., updating your email address or city of residence) can be made directly within your account settings.
• Right to Erasure: You may request that bobajee delete your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where we have no legitimate interest that overrides your right to erasure. Note that certain data must be retained to comply with legal obligations (e.g., KYC and transaction records) and cannot be erased on request during the applicable retention period.
• Right to Restriction: You may request that bobajee restrict the processing of your data in certain circumstances — for example, while the accuracy of the data is being contested, or while an objection to processing is being assessed.
• Right to Data Portability: You may request a copy of your personal data in a structured, machine-readable format (such as CSV or JSON) for the data you have provided to us directly and which is processed on the basis of consent or contract.
• Right to Object: You may object to bobajee processing your data on the basis of legitimate interest, including for direct marketing purposes. Objection to marketing processing will result in immediate cessation of marketing communications.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

7. Data Security Measures

bobajee maintains a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security framework includes the following measures:

• Transport Encryption: All data in transit between your device and bobajee servers is encrypted using TLS 1.3, the current industry standard for secure web communications.
• At-Rest Encryption: Sensitive data fields — including identity documents, passwords (stored as salted hashes), and financial records — are encrypted at rest using AES-256 encryption.
• Access Controls: Internal access to player data is governed by role-based access controls (RBAC). Only staff with a demonstrated operational need can access personal data, and all access is logged and auditable.
• Two-Factor Authentication: bobajee offers SMS OTP-based two-factor authentication for all player accounts. Players are strongly encouraged to enable 2FA to protect against unauthorised account access.
• Intrusion Detection: Our infrastructure is monitored around the clock by automated intrusion detection systems (IDS) that flag unusual access patterns, brute-force attempts, and anomalous transaction behaviour for immediate review.
• Penetration Testing: bobajee conducts periodic third-party security assessments to identify and remediate vulnerabilities before they can be exploited.
• Staff Training: All bobajee staff who handle personal data receive regular training on data protection obligations and secure data handling practices.

Despite the robust measures described above, no digital system can guarantee absolute security. In the event of a personal data breach that poses a risk to your rights and freedoms, bobajee will notify affected players promptly and take all necessary remedial action.

8. Policy Updates & Contact

Changes to This Policy

bobajee reserves the right to update or amend this Privacy Policy at any time. When we make material changes — for example, changes to how we use your data, who we share it with, or how long we retain it — we will notify registered players via email or account notification at least 7 days before the changes take effect. The updated policy will always be accessible on this page with a revised effective date.

Continued use of the bobajee platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised policy. If you do not agree with the revised policy, you should close your account before the effective date by contacting our support team.

We recommend bookmarking this page and reviewing the Privacy Policy periodically, particularly if you are a regular player on the bobajee platform. The date shown in the "Effective" badge on this page always reflects the most recently published version.

Contact Our Privacy Team

All privacy-related enquiries, data subject access requests, and concerns about how bobajee handles your personal data should be directed to our support team. We are committed to responding promptly and thoroughly to all privacy communications.

For general account support, game queries, or deposit and withdrawal assistance, the same contact address is monitored by our full support team during Bangladesh Standard Time (BST, UTC+6) business hours, with coverage extended during major cricket events such as the BPL and T20 World Cup.