gobaji Privacy Policy

1. Introduction

gobaji ("we", "us", "our", "the Platform") is committed to protecting the privacy and personal data of all individuals who visit, register on, or interact with gobaji.com (the "Website"). This Privacy Policy describes how gobaji collects, uses, stores, shares, and protects your personal information when you use our online betting and casino platform.

This Policy applies to all gobaji services, including sports betting, live casino, slots, Tower, Racing, and all associated account management features. It should be read alongside the gobaji Terms & Conditions and Responsible Gaming policy, both of which are incorporated by reference.

gobaji operates as a data controller in respect of the personal data you provide when registering and using the Platform. We process personal data only for the purposes described in this Policy and only to the extent necessary to fulfil those purposes. We do not sell, rent, or trade your personal data to third parties for their own commercial use.

This Privacy Policy is written in English and is intended for players in Bangladesh and other permitted jurisdictions. In the event of any conflict between this English version and any translated version, the English version shall prevail.

2. Personal Data We Collect

2.1 Data You Provide Directly

When you register for a gobaji account or use gobaji services, you provide us with the following categories of personal data:

• Identity data: Full legal name, date of birth, national identity card number or passport number, and gender.
• Contact data: Mobile phone number, email address, and residential address including city, district, and postal code.
• Account credentials: Username and encrypted password (gobaji never stores passwords in plain text).
• Verification documents: Copies of government-issued photo ID, proof of address, and payment method ownership documents submitted as part of the KYC process.
• Financial data: Mobile wallet numbers (bKash, Nagad, Rocket, Upay), bank account details where applicable, transaction history, deposit and withdrawal records.
• Communications data: Messages sent to gobaji support via live chat or email, including any supporting documentation you attach.

2.2 Data Collected Automatically

When you access and use the gobaji Platform, we automatically collect certain technical and behavioural data:

• Device and technical data: IP address, device type, operating system, browser type and version, screen resolution, and device identifiers.
• Usage data: Pages visited, games played, bets placed, session duration, click-through paths, and feature interactions.
• Location data: Approximate geographic location derived from your IP address for fraud prevention and geo-restriction compliance purposes. gobaji does not collect precise GPS location data.
• Log data: Server-side logs recording access times, error reports, and platform performance data.

2.3 Data from Third Parties

gobaji may receive personal data about you from the following third-party sources:

• Payment processors: Transaction confirmation data from bKash, Nagad, Rocket, Upay, and banking partners to verify deposit and withdrawal status.
• Identity verification providers: Results from third-party KYC and anti-money laundering screening services used to verify the information you have provided.
• Fraud prevention agencies: Risk scores and flagging data to help identify fraudulent account activity.

3. How We Use Your Personal Data

gobaji uses the personal data we collect for the following purposes:

Purpose	Data Categories Used
Creating and managing your gobaji account	Identity, contact, account credentials
Processing deposits and withdrawals in BDT	Financial data, identity data
Verifying your identity (KYC compliance)	Identity data, verification documents
Detecting and preventing fraud and money laundering	All categories, device and usage data
Providing customer support	Identity, contact, communications data
Sending account-related notifications	Contact data
Sending marketing communications (with consent)	Contact data, usage data
Personalising your platform experience	Usage data, preferences
Enforcing responsible gaming tools	Identity, financial, usage data
Complying with legal and regulatory obligations	All categories as required
Analysing and improving platform performance	Technical and usage data (anonymised)

4. Legal Basis for Processing

gobaji processes your personal data on the following legal bases:

• Contract performance: Processing is necessary to create and maintain your gobaji account, process transactions, and deliver the services you have requested.
• Legal obligation: gobaji is required by applicable anti-money laundering, fraud prevention, and player protection regulations to collect, verify, and retain certain personal data.
• Legitimate interests: gobaji processes certain data — such as device information and usage behaviour — to protect the security of the Platform, detect fraud, and improve our services, provided that these interests are not overridden by your privacy rights.
• Consent: Where gobaji sends marketing communications or uses non-essential cookies, we do so only with your explicit consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

5. Sharing Your Personal Data

5.1 Authorised Third Parties

gobaji does not sell your personal data. We share personal data only with the following categories of third parties, and only to the extent strictly necessary for the stated purpose:

• Payment service providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, and other payment partners — to process deposits and withdrawals and confirm payment ownership.
• KYC and identity verification providers: Third-party services used to verify the identity documents and personal data you submit during account registration or withdrawal requests.
• Fraud prevention and risk management services: Providers that help gobaji identify suspicious account activity, prevent money laundering, and enforce responsible gaming restrictions.
• IT infrastructure and hosting providers: Organisations that provide the servers, databases, and cloud infrastructure on which the gobaji Platform operates, subject to strict data processing agreements.
• Regulatory and law enforcement bodies: Gobaji may be legally obligated to disclose certain personal data to regulatory authorities, law enforcement agencies, or courts in response to a lawful request or court order.
• Professional advisers: Lawyers, auditors, and compliance consultants engaged by gobaji under strict confidentiality obligations.

5.2 Business Transfers

In the event that gobaji undergoes a business reorganisation, merger, acquisition, or sale of assets, your personal data may be transferred to the acquiring entity as part of that transaction. gobaji will notify affected players via email or a prominent notice on the Platform before personal data is transferred and becomes subject to a different privacy policy.

6. Payment Data and Financial Information

gobaji processes all transactions in Bangladeshi Taka (BDT). When you make a deposit or withdrawal via bKash, Nagad, Rocket, Upay, or a banking partner, your mobile wallet number or bank account details are collected and transmitted securely to the relevant payment provider. gobaji does not store full payment credentials on its own servers beyond what is strictly necessary to process, verify, and record the transaction.

All financial transaction records are retained in accordance with gobaji's data retention schedule (see Section 8) and applicable anti-money laundering obligations. Transaction history is accessible to you at any time from within your gobaji account dashboard.

7. Cookies and Tracking Technologies

7.1 Types of Cookies Used

gobaji uses the following categories of cookies and similar tracking technologies on the Platform:

• Essential cookies: Required for the Platform to function correctly. These include session cookies that keep you logged in, security tokens, and load-balancing cookies. Essential cookies cannot be disabled without affecting core functionality.
• Analytics cookies: Used to understand how players navigate and use the gobaji Platform, which pages are most visited, and where errors occur. Data collected by analytics cookies is aggregated and anonymised where possible.
• Preference cookies: Store your platform preferences such as language settings, notification choices, and responsible gaming tool configurations so that they persist between sessions.
• Fraud prevention cookies: Help gobaji identify suspicious patterns of access, multiple account attempts, and bot activity by maintaining a consistent device fingerprint across sessions.

7.2 Managing Cookies

You can control non-essential cookies through your browser settings. Most modern browsers allow you to block or delete cookies entirely, or to receive a notification before a cookie is set. Please note that disabling certain cookies may affect the functionality of the gobaji Platform. Detailed browser-specific guidance on managing cookies is available from the help pages of your browser provider. gobaji does not respond to "Do Not Track" signals at this time.

8. Data Retention

gobaji retains personal data for as long as is necessary to fulfil the purposes described in this Privacy Policy, subject to the following minimum retention periods:

• Account data: Retained for the duration of your active gobaji account and for a minimum of 5 years following account closure, in accordance with anti-money laundering obligations.
• Transaction records: Financial transaction records are retained for a minimum of 5 years from the date of the transaction.
• KYC documents: Identity verification documents are retained for a minimum of 5 years following the end of the customer relationship.
• Communications data: Support communications are retained for 2 years following the resolution of the relevant enquiry, unless required for longer by an ongoing dispute or regulatory investigation.
• Technical and usage data: Server logs and anonymised analytics data are retained for up to 24 months.

When personal data is no longer required for any of the above purposes and no legal obligation requires its further retention, gobaji will securely delete or anonymise it.

9. Data Security

gobaji implements a range of technical and organisational security measures to protect your personal data from unauthorised access, alteration, disclosure, or destruction:

• Encryption in transit: All data transmitted between your device and the gobaji Platform is protected by 256-bit SSL/TLS encryption.
• Encryption at rest: Sensitive data stored on gobaji's servers — including identity documents and financial records — is encrypted at rest.
• Access controls: Access to personal data is restricted to authorised gobaji staff and contracted service providers on a strict need-to-know basis, enforced by role-based access controls and multi-factor authentication.
• Security monitoring: gobaji operates continuous intrusion detection and anomaly monitoring systems to identify and respond to potential security threats in real time.
• Vendor security standards: Third-party service providers with access to gobaji player data are required to maintain equivalent data security standards as a condition of their engagement with gobaji.

Despite these measures, no data transmission over the internet or electronic storage system can be guaranteed to be completely secure. If you have reason to believe that your gobaji account has been compromised, you must contact [email protected] immediately.

10. Your Privacy Rights

As a gobaji player, you have the following rights with respect to your personal data. To exercise any of these rights, please contact gobaji's support team at [email protected]:

• Right of access: You may request a copy of all personal data gobaji holds about you, along with information about how it is processed.
• Right to rectification: You may request the correction of any inaccurate or incomplete personal data held by gobaji. For basic account data such as your email address or phone number, you can update this directly within your account settings.
• Right to erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to gobaji's legal and regulatory retention obligations described in Section 8.
• Right to restriction: You may request that gobaji restricts the processing of your personal data in certain circumstances, such as while the accuracy of the data is being contested.
• Right to data portability: You may request a copy of the personal data you have provided to gobaji in a structured, commonly used, machine-readable format.
• Right to object: You may object to gobaji's processing of your data based on legitimate interests, including profiling for marketing purposes.
• Right to withdraw consent: Where processing is based on your consent (for example, marketing emails), you may withdraw consent at any time without affecting the lawfulness of processing conducted prior to withdrawal.

gobaji will respond to all valid privacy rights requests within 30 days of receipt. In cases of complexity or volume, this period may be extended by a further 60 days, in which case gobaji will notify you of the extension and the reason for it.

11. Children's Privacy

gobaji is strictly an adults-only platform. We do not knowingly collect personal data from individuals under the age of 18. If gobaji discovers that personal data has been collected from a minor, that account will be immediately closed, all associated balances will be returned in accordance with applicable law, and the minor's personal data will be deleted from our systems as quickly as possible.

If you are a parent or guardian and believe that a minor has registered a gobaji account or provided personal data to gobaji, please contact us immediately at [email protected]. gobaji takes the protection of minors extremely seriously and will act promptly on any verified report of underage account registration.

12. International Data Transfers

gobaji operates under an international offshore licence, and some of the third-party service providers we engage — including IT infrastructure providers, fraud prevention services, and KYC vendors — may process data in countries outside Bangladesh. Where personal data is transferred internationally, gobaji ensures that appropriate safeguards are in place, such as standard contractual clauses or equivalent data protection measures, to maintain the same level of protection described in this Policy.

By registering a gobaji account, you acknowledge that your personal data may be transferred to and processed in jurisdictions outside your country of residence. gobaji will not transfer personal data to any jurisdiction that does not provide an adequate level of data protection without ensuring that appropriate safeguards are in place.

13. Marketing Communications

gobaji may send you marketing communications about promotions, bonuses, new games, and special events by email or SMS where you have given explicit consent to receive such communications during registration or at any subsequent point.

You may opt out of marketing communications at any time by:

• Clicking the "unsubscribe" link included in any marketing email from gobaji.
• Updating your notification preferences within your gobaji account settings.
• Contacting gobaji support at [email protected] and requesting removal from all marketing lists.

Please note that opting out of marketing communications will not affect the delivery of essential account-related notifications, such as transaction confirmations, security alerts, or KYC verification requests. These transactional communications are not marketing messages and will continue to be sent regardless of your marketing preferences.

14. Changes to This Privacy Policy

gobaji reserves the right to update or amend this Privacy Policy at any time. When material changes are made, gobaji will notify registered players via email or by displaying a prominent notice on the Platform at least 7 days before the changes take effect, except where an immediate update is required for legal or security reasons.

The date of the most recent revision is displayed at the top of this page. Your continued use of the gobaji Platform after any amendment takes effect constitutes your acceptance of the revised Privacy Policy. If you do not accept the revised Policy, you must cease using gobaji and may request account closure by contacting [email protected].

We encourage you to review this Privacy Policy periodically to stay informed about how gobaji is protecting your personal data.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or gobaji's data practices, please reach out to the gobaji support team using the following contact details:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 through the gobaji Platform
• Support Hours: 24/7, Bangladesh Standard Time (BST, UTC+6)

For formal data subject rights requests, please email [email protected] with the subject line "Privacy Rights Request" and include your full registered name and the specific right you wish to exercise. gobaji will acknowledge your request within 48 hours and provide a substantive response within 30 days.