lbaji Privacy Policy

1.1 Registration Data. When you create a lbaji account, we collect the personal information you provide during the registration process. This includes your full legal name, date of birth, gender (where provided), email address, mobile phone number, and your chosen username. This information is required to establish your player account and to verify that you meet the minimum age requirement of 18 years.

1.2 Identity Verification Data. As part of our Know Your Customer (KYC) obligations, lbaji may request copies of government-issued identity documents. These include your National Identity Card (NID), passport, or driver's licence. We may also request proof of address (such as a recent utility bill or bank statement) and, in certain circumstances, evidence of the source of funds used for deposits. KYC documentation is stored securely and accessed only by authorised compliance personnel.

1.3 Financial and Transaction Data. We record all deposits and withdrawals made through your lbaji account, including the payment method used (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, or BRAC Bank), transaction amounts in Bangladeshi Taka (৳), transaction timestamps, and transaction reference numbers. We do not store full mobile banking PINs or full bank account credentials on our servers.

1.4 Gaming and Betting Activity. lbaji maintains a full log of all gaming sessions, bets placed, games played, wager amounts, outcomes, and bonus usage associated with your account. This data is used for account management, responsible gaming monitoring, dispute resolution, and regulatory compliance. It may also be used in aggregate (anonymised) form to improve our platform and product offering.

1.5 Device and Technical Data. When you access lbaji via a web browser or mobile device, we automatically collect certain technical information. This includes your IP address, browser type and version, operating system, device type, screen resolution, referring URL, and session duration. This data is used for security monitoring, fraud prevention, and platform performance optimisation.

1.6 Communications Data. If you contact our support team via live chat or email at [email protected], we retain records of those communications. This includes the content of messages, the date and time of contact, and any attachments or documents submitted. These records are used to resolve your enquiry, train support staff, and maintain service quality.

Summary of Data Categories Collected:

2.1 Account Operation and Service Delivery. The primary purpose for which lbaji collects and processes your personal data is to operate your player account and deliver the services you have requested. This includes processing deposits and withdrawals via bKash, Nagad, Rocket, and other accepted payment partners; maintaining your gaming history; applying bonuses and promotions to your account; and providing access to all lbaji products including cricket betting, slots, live casino, and Teen Patti Joker.

2.2 Identity Verification and Legal Compliance. lbaji is required to verify the identity of its players and to monitor account activity for anti-money laundering (AML) and counter-terrorism financing (CTF) purposes. Processing your identity data for these purposes is a legal obligation. Failure to complete identity verification may result in account restrictions or the delayed processing of withdrawal requests.

2.3 Fraud Prevention and Security. lbaji uses device data, IP address information, and transaction patterns to detect and prevent fraud, account takeover, bonus abuse, and other forms of platform misuse. Where suspicious activity is detected, we may temporarily restrict account access while an investigation is conducted. Security-related data processing is carried out in our legitimate interest as a platform operator and in the interest of protecting all registered players.

2.4 Responsible Gaming Monitoring. As part of our commitment to responsible gaming in Bangladesh, lbaji monitors player behaviour patterns — including session frequency, deposit velocity, and loss thresholds — to identify players who may be at risk of developing problematic gambling habits. Where our systems flag a concern, our responsible gaming team may reach out to you with information about available support tools, including deposit limits, cooling-off periods, and self-exclusion options.

2.5 Marketing Communications. With your consent, lbaji may send you promotional communications about new games, seasonal offers (such as Eid and Pohela Boishakh promotions), BPL and IPL cricket betting specials, and other lbaji benefits. You may withdraw consent to receive marketing communications at any time by updating your preferences in your account dashboard or by contacting our support team. Withdrawing marketing consent does not affect the lawfulness of any processing carried out prior to withdrawal.

2.6 Platform Improvement and Analytics. Anonymised and aggregated data about how players use the lbaji platform — including which game categories are most popular, peak usage times (Bangladesh Standard Time, UTC+6), and navigation patterns — is used to improve our product, user interface, and content offering. This analysis does not involve the use of personally identifiable information and cannot be used to re-identify individual players.

3.1 lbaji does not sell, rent, or transfer your personal data to unaffiliated third parties for their own commercial use. We share data only in the limited circumstances described in this section, and only to the extent necessary for the stated purpose.

3.2 Payment Service Providers. To process your deposits and withdrawals, lbaji shares the minimum necessary transaction data with your chosen payment provider — bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, or BRAC Bank. Each of these providers operates under its own privacy policy and applicable financial regulations. lbaji is not responsible for the data handling practices of these independent third parties.

3.3 Game Technology Providers. lbaji's casino games are supplied by certified third-party providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive session-level technical data necessary to render and operate games. They do not receive your full personal profile, financial data, or identity documents.

3.4 Identity Verification Services. lbaji may use third-party KYC and identity verification services to assist in the review of identity documents submitted by players. These providers process data strictly under contract with lbaji and are prohibited from using your identity data for any purpose other than the verification service requested.

3.5 Legal and Regulatory Disclosure. lbaji may be required by law, court order, or regulatory authority to disclose personal data about specific players. In such cases, lbaji will comply with its legal obligations. Where legally permitted to do so, lbaji will notify the affected player of any such disclosure request before complying.

3.6 Fraud Prevention Networks. In cases of confirmed fraud, account abuse, or money laundering, lbaji may share relevant account data with industry fraud prevention databases, payment processors, and law enforcement agencies as required. This sharing is carried out in the legitimate interest of protecting the platform and all players registered on it.

4.1 lbaji uses cookies and similar technologies (including local storage, session storage, and pixel tags) to enable core platform functionality, maintain your session after lbaji Login, remember your preferences, and gather anonymised analytics about how the platform is used.

4.2 Essential Cookies. These cookies are strictly necessary for the lbaji website to function. They enable session management, security token storage, and authentication. Without these cookies, lbaji Login would not be possible and core platform features would not operate. These cookies cannot be disabled while you use the site.

4.3 Analytics Cookies. lbaji uses anonymised analytics cookies to understand how players navigate the platform — including which pages are visited most frequently, how long sessions last, and which game categories attract the most engagement. This data is used solely to improve the lbaji platform experience and is not linked to individually identifiable players.

4.4 Preference Cookies. These cookies remember choices you have made on the lbaji platform, such as your preferred language setting (English) and any responsible gaming tool configurations you have applied to your account. They improve your experience by ensuring your preferences are retained across sessions.

4.5 Managing Cookies. You can manage non-essential cookies through your browser settings at any time. Most modern browsers allow you to block or delete cookies. Please note that disabling essential cookies will impair your ability to use the lbaji platform, including the lbaji Login function. For detailed guidance on managing cookies in your specific browser, consult your browser's help documentation.

Cookie Reference Table:

5.1 lbaji retains your personal data only for as long as it is necessary to fulfil the purpose for which it was collected, or as required by applicable legal or regulatory obligations. The following retention periods apply as a general guide:

• Account and identity data: Retained for the duration of your active account, plus a minimum of 5 years following account closure, to comply with anti-money laundering record-keeping obligations.
• Transaction and financial records: Retained for a minimum of 5 years from the date of each transaction, consistent with financial record-keeping requirements.
• Gaming and betting history: Retained for a minimum of 3 years from the date of each session, for the purposes of dispute resolution, responsible gaming review, and audit.
• Support communications: Retained for 2 years from the date of the final communication in each support interaction.
• Analytics data: Retained in anonymised, aggregated form only. Individual-level technical data is anonymised within 13 months of collection.

5.2 Storage Location. All personal data collected from lbaji players is stored on secure servers. lbaji employs physical, administrative, and technical safeguards to protect data from unauthorised access, modification, loss, or destruction. Access to player data is restricted to authorised lbaji personnel on a strict need-to-know basis.

5.3 Data Deletion. When the applicable retention period for a category of data expires, lbaji will either securely delete that data or, where deletion is not technically practicable, anonymise it so that it can no longer be linked back to you as an individual. Requests for early deletion are handled under Section 6 (Your Privacy Rights) of this policy.

6.1 As a lbaji player, you hold the following rights in relation to your personal data. lbaji is committed to responding to all valid privacy rights requests within a reasonable timeframe, and in any event within 30 days of receipt. To exercise any of these rights, please contact our support team at [email protected] with the subject line "Privacy Rights Request" and your registered account email address.

• Right of Access. You have the right to request a copy of the personal data lbaji holds about you. We will provide this in a structured, commonly used format.
• Right to Rectification. If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may also update basic contact details directly from your account dashboard after lbaji Login.
• Right to Erasure. You may request that lbaji delete your personal data where: (a) the data is no longer needed for the purpose it was collected; (b) you withdraw consent and there is no other legal basis for processing; or (c) the data has been processed unlawfully. This right is subject to legal retention obligations — lbaji may be required to retain certain data even after account closure.
• Right to Restriction. You may request that lbaji restrict the processing of your data in certain circumstances, such as where you contest the accuracy of the data or object to its processing. During the restriction period, lbaji will store but not actively use the data.
• Right to Object. You have the right to object to lbaji processing your data on the basis of legitimate interests — including for marketing purposes. Upon receiving a valid objection, lbaji will cease the relevant processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Data Portability. Where processing is based on your consent or on contract performance, and is carried out by automated means, you have the right to receive your data in a portable format and to request its transfer to another service provider where technically feasible.
• Right to Withdraw Consent. Where lbaji processes your data on the basis of your consent (for example, for marketing communications), you have the right to withdraw that consent at any time. Withdrawal will not affect the lawfulness of any processing carried out before the withdrawal.

7.1 lbaji applies a layered, defence-in-depth approach to data security. Our security programme encompasses technical controls, organisational procedures, and regular independent review. The measures listed below represent a summary of the key safeguards in place to protect your personal information.

• 256-Bit SSL/TLS Encryption: All data transmitted between your browser or device and the lbaji platform is encrypted using TLS 1.2 or higher. This prevents interception of sensitive information including lbaji Login credentials and payment data.
• Encrypted Data Storage: Sensitive data fields — including identity document images and financial records — are encrypted at rest using AES-256 encryption standards.
• Access Controls: Access to player data within lbaji's systems is role-restricted. Only personnel with a verified business need (such as KYC analysts, fraud investigators, and support agents handling active enquiries) may access identifiable player data. All access is logged and auditable.
• Fraud Detection Systems: lbaji operates automated fraud detection systems that monitor transactions, login patterns, and betting behaviour for anomalies that may indicate account compromise or fraudulent activity.
• Penetration Testing: lbaji commissions periodic independent security assessments of its platform to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: In the event of a data security incident that affects player data, lbaji has an incident response protocol that includes containment, investigation, notification to affected players, and reporting to relevant authorities where required by law.

7.2 While lbaji takes its security obligations seriously and applies industry-standard measures, no digital platform can guarantee absolute security against all forms of cyber threat. Players are strongly encouraged to protect their own accounts by using a strong, unique password for their lbaji Login, enabling any available two-factor authentication features, and never sharing their credentials with any third party.

8.1 lbaji reserves the right to update, modify, or replace this Privacy Policy at any time. Changes may be made to reflect: updates to our data processing practices, changes in applicable law or regulatory guidance, the introduction of new products or features on the lbaji platform, or feedback received from players about the clarity of this document.

8.2 Where a change to this Privacy Policy is material — meaning it significantly affects how we collect, use, or share your personal data — lbaji will notify registered players via their registered email address at least 14 days before the change takes effect. For minor or administrative amendments (such as formatting corrections or minor clarifications), we will update the "Last Reviewed" date at the top of the relevant section without individual notification.

8.3 Your continued use of the lbaji platform following notification of a material change constitutes your acknowledgement of the updated Privacy Policy. If you do not agree with the changes, you should cease using the platform and contact our support team to close your account. Any data collected prior to the effective date of the change will continue to be governed by the version of the Privacy Policy in force at the time of collection, to the extent permitted by law.

8.4 The current version of this Privacy Policy is always available on the lbaji website at lbaji.vip/privacy-policy. If you have questions about any provision of this policy, or wish to understand how a specific change affects your account, please contact us directly at [email protected].