fbaje Privacy Policy — How We Handle Your Data

fbaje is committed to protecting the personal data of players who use our online casino and sports betting platform. This Privacy Policy describes how we collect personal information when you register an account, make deposits via bKash, Nagad, or Rocket, place bets, participate in promotions, or contact our support team. It also explains how we use, store, and protect that information, and what rights you have over your personal data.

This Privacy Policy should be read alongside the fbaje Terms and Conditions and the Responsible Gaming Policy, both of which form part of the overall agreement between you and fbaje. We encourage you to review all three documents before using the platform. If you have any questions about how fbaje handles your data, please contact us at [email protected].

When you register and use your fbaje account, we may collect the following categories of personal data:

• Identity information: your full name, date of birth, and any government-issued identification document provided during KYC verification, such as a National Identity Card (NID) or passport.
• Contact information: your mobile phone number (used as your primary login identifier and for account notifications), and any email address you provide voluntarily during registration or support interactions.
• Financial data: records of your deposit and withdrawal transactions, the payment methods used (including the mobile wallet account identifiers associated with your bKash, Nagad, or Rocket account), and your current account balance.
• Gameplay and betting data: records of all games played, bets placed, amounts wagered, winnings received, and bonus usage within your fbaje account. This data is used for account management, dispute resolution, and responsible gaming monitoring.
• Technical data: your IP address, device type, operating system, browser type, session timestamps, and pages visited within fbaje. This data is collected automatically and used to detect fraud, maintain platform security, and improve the user experience.

fbaje does not collect sensitive personal data beyond what is required for identity verification and fraud prevention. We do not collect political opinions, religious beliefs, health data, or biometric data outside the context of mandatory KYC identity verification.

fbaje processes personal data on one or more of the following lawful bases, depending on the specific purpose of each processing activity:

• Contractual necessity: processing your registration data, payment information, and gameplay records is necessary to perform the contract between you and fbaje — specifically, to provide the platform services you have requested.
• Legal obligation: KYC verification, anti-money laundering checks, and the retention of financial transaction records are required by law. fbaje processes this data to comply with its legal obligations under applicable regulations.
• Legitimate interests: fraud detection, platform security monitoring, and responsible gaming pattern analysis are carried out on the basis of fbaje's legitimate interests in protecting the platform and its players, provided those interests are not overridden by your rights.
• Consent: where fbaje sends you optional promotional communications by mobile notification or email, we do so on the basis of your consent. You may withdraw consent at any time by contacting our support team, without affecting the lawfulness of processing carried out before your withdrawal.

fbaje is required to verify the identity of all players before processing withdrawals above certain thresholds, and in all cases where our anti-money laundering obligations require it. The KYC verification process requires you to submit identity documentation — typically a National Identity Card (NID), passport, or other acceptable government-issued document — together with any supporting proof of address or payment method ownership that may be requested.

Documents submitted for KYC are stored securely and used only for the purposes of identity verification, fraud prevention, and legal compliance. They are not shared with third parties except as described in Section 4 of this policy. KYC documentation is retained for as long as required by applicable anti- money laundering regulations, typically a minimum of five years from the date of account closure.

fbaje retains your personal data for as long as your account remains active, and for such further period as is necessary to comply with legal obligations, resolve disputes, and enforce our agreements. In practice, this means the following retention periods apply:

Account and transaction records are retained for a minimum of five years from the date of account closure, in compliance with applicable anti-money laundering and financial record-keeping regulations. KYC identity documents are retained for the same minimum period. After the applicable retention period has expired and there is no remaining legal basis for retaining your data, fbaje will securely delete or anonymise it.

As a registered fbaje player, you have the following rights in relation to your personal data. To exercise any of these rights, contact our support team at [email protected]:

• Right of access: you have the right to request a copy of the personal data fbaje holds about you, along with information about how it is used and with whom it has been shared.
• Right to rectification: if any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. If you notice an error in your registered details, contact support immediately.
• Right to erasure: in certain circumstances, you have the right to request that fbaje delete your personal data. This right is not absolute — it does not apply where fbaje is required by law to retain the data, or where retention is necessary for the establishment or defence of legal claims.
• Right to restriction: you may request that fbaje restrict the processing of your personal data in certain circumstances — for example, while the accuracy of your data is being verified following a rectification request.
• Right to object: where fbaje processes your data on the basis of legitimate interests, you have the right to object to that processing. fbaje will cease the processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.

fbaje will respond to data rights requests within a reasonable timeframe and in any event no later than 30 days from receipt of the request. Where a request is complex or involves a large volume of data, fbaje may extend this period by a further 30 days, notifying you of the extension and the reason for it.

fbaje may update this Privacy Policy from time to time to reflect changes in applicable law, the way the platform operates, or the data processing activities we carry out. The current version of this Privacy Policy will always be available at fbaje.vu/privacy-policy, with the date of the most recent update indicated at the top of the document.

Where a change to this Privacy Policy materially affects your rights or the way your data is processed, fbaje will notify you by email or via an in-platform notification before the change takes effect. Your continued use of fbaje following the publication of any update to this Privacy Policy constitutes your acceptance of the revised terms.