1. Data We Collect
wbaji collects personal data from you at several points during your relationship with the platform. We collect only the data that is necessary for the purpose described and we do not collect data speculatively or beyond what is required for legitimate operational and compliance needs. The categories of data we collect are as follows:
1.1 Registration Data
When you create a wbaji account, we collect the information you submit in the registration form. This includes your full legal name, date of birth, email address, mobile phone number (used for account verification and transaction notifications), and your chosen username. You may also be asked to set security questions and answers during registration to support account recovery procedures.
1.2 Identity Verification (KYC) Data
In accordance with our Know Your Customer obligations and to verify that you meet the minimum age requirement of 18 years, wbaji collects copies of identity documents. Acceptable documents include your National Identity Card (NID), passport, or birth certificate. Where address verification is also required, we may request a recent utility bill or bank statement. These documents are processed by our compliance team and stored securely for the duration required by applicable law.
1.3 Financial Transaction Data
Every deposit and withdrawal made through wbaji is recorded. Financial data collected includes the payment method used (e.g., bKash, Nagad, Rocket, Upay, or bank transfer), the transaction reference number provided by the payment provider, the amount in Bangladeshi Taka (৳), the date and time of the transaction, and the transaction status. wbaji does not store full payment account credentials such as bKash PIN numbers, bank PINs, or card CVV codes.
1.4 Gameplay and Betting Data
wbaji maintains a full record of all bets placed, games played, stakes wagered, and outcomes achieved on your account. This data is used for account management, dispute resolution, responsible gaming monitoring, and statistical analysis to improve the platform. Betting history records are linked to your account and retained in accordance with the data retention schedule set out in Section 5 of this policy.
1.5 Technical and Device Data
When you access wbaji, our servers automatically collect certain technical information. This includes your IP address, browser type and version, device type and operating system, screen resolution, referring URL, pages visited within the wbaji platform, session duration, and timestamp of each visit. This data is used for security monitoring, fraud detection, platform optimisation, and internal analytics.
2. How We Use Your Data
The personal data wbaji collects is used for the following defined purposes. We do not use your data for any purpose beyond what is listed here without first obtaining your explicit consent or as otherwise required by law.
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Account creation and management | Registration data, KYC documents | Contractual necessity |
| Processing deposits and withdrawals | Financial transaction data, KYC documents | Contractual necessity |
| Age and identity verification | KYC documents, date of birth | Legal obligation |
| Fraud prevention and security | Technical data, transaction data, IP address | Legitimate interest |
| Responsible gaming monitoring | Gameplay data, deposit history, session data | Legal obligation / legitimate interest |
| Customer support | Registration data, communication records | Contractual necessity |
| Platform analytics and improvement | Technical data, gameplay data (anonymised) | Legitimate interest |
| Promotional communications (opt-in) | Email address, mobile number | Consent |
wbaji sends promotional communications — including information about new games, seasonal offers tied to events such as BPL match days, Eid, or Pohela Boishakh, and deposit bonus reminders — only to players who have opted in to receive marketing messages. You may withdraw your marketing consent at any time by contacting [email protected] or by using the unsubscribe mechanism included in every promotional message.
3. Data Sharing and Disclosure
wbaji does not sell your personal data. We share personal data only in the circumstances described below, and only to the minimum extent necessary for the specific purpose:
3.1 Payment Processing Partners
To process your deposits and withdrawals, wbaji shares the necessary transaction data with your chosen payment service provider — for example, bKash, Nagad, Rocket, Upay, or your designated Bangladeshi bank. These providers receive only the data required to execute the specific transaction and are bound by their own data protection obligations and applicable payment regulations.
3.2 Game Providers
Certain games available on wbaji are supplied by third-party game providers including, but not limited to, Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. Where you play a game supplied by one of these providers, technical session data — such as a session token, game round ID, and stake/result data — is exchanged with the provider's servers in real time. Game providers do not receive your full personal profile, name, or contact details.
3.3 Legal and Regulatory Disclosure
wbaji may be required to disclose personal data to law enforcement agencies, regulatory bodies, or other government authorities where required by applicable law or pursuant to a valid legal order. In such cases, wbaji will disclose only the data specifically required by the legal request and will, where permitted, notify the affected player of the disclosure.
3.4 Anti-Money Laundering (AML) Compliance
As part of its AML and counter-terrorist financing obligations, wbaji may share transaction data and account information with relevant financial intelligence units or compliance bodies where there is a legal obligation to do so. Such disclosures are made in strict confidence and in accordance with applicable legal frameworks.
3.5 Corporate Transactions
In the event of a merger, acquisition, corporate restructuring, or sale of substantially all of wbaji's business assets, your personal data may be transferred to the successor entity as part of that transaction. You will be notified of any such transfer and the privacy terms applicable to your data post-transfer.
4. Cookies and Tracking Technologies
wbaji uses cookies and similar tracking technologies to enable core platform functionality, remember your preferences, detect fraudulent activity, and understand how players interact with the platform. By continuing to use wbaji after being informed of our cookie use, you consent to the placement of cookies in accordance with this policy.
4.1 Categories of Cookies We Use
| Category | Purpose | Can Be Disabled? |
|---|---|---|
| Essential | Required for the platform to function — manages login sessions, security tokens, and load balancing. | No — platform will not work without these |
| Functional | Remembers your language preference, bet slip settings, and display layout choices between sessions. | Yes — via browser settings |
| Analytics | Collects anonymised data on page visits, session duration, and feature usage to help improve the platform. | Yes — via browser settings |
| Security | Detects bot activity, unusual login patterns, and potential fraud attempts to protect your account. | No — required for account security |
wbaji does not use third-party advertising cookies or cross-site tracking technologies. You can manage cookie preferences through your browser settings at any time. Note that disabling functional or analytics cookies will not prevent you from using the core wbaji platform but may affect the quality of your experience.
5. Data Retention
wbaji retains personal data for the minimum period necessary to fulfil the purpose for which it was collected, to meet legal obligations, and to resolve any outstanding disputes or claims. The specific retention periods applicable to each data category are set out below:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account registration data | Duration of account + 5 years after closure | Legal and compliance obligations |
| KYC identity documents | Duration of account + 5 years after closure | AML regulatory requirements |
| Financial transaction records | 7 years from transaction date | Financial record-keeping obligations |
| Betting and gameplay history | 5 years from last activity | Dispute resolution, responsible gaming review |
| Customer support communications | 3 years from last interaction | Dispute resolution and quality assurance |
| Technical / server logs | 12 months from creation | Security monitoring and fraud investigation |
| Marketing consent records | Until consent is withdrawn + 1 year | Demonstrating lawful basis for communications |
On expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to you as an identifiable individual. Anonymised aggregate data (e.g., platform-level betting statistics) may be retained indefinitely for analytical purposes.
6. Data Security Measures
wbaji employs a layered security architecture to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. Our security programme includes the following measures:
- Transport Layer Security (TLS): All data transmitted between your device and wbaji servers is encrypted using TLS 1.2 or higher. This applies to all platform pages including account login, deposit flows, and withdrawal requests.
- Data-at-rest encryption: Personal data stored in wbaji databases is encrypted at rest. Encryption keys are managed separately from the data they protect and are rotated on a defined schedule.
- Access controls: Internal access to personal data is restricted on a role-based, need-to-know basis. Access privileges are reviewed regularly and revoked immediately upon staff departure or role change.
- Two-factor authentication (2FA): wbaji offers 2FA on player accounts and mandates 2FA for all internal staff access to systems holding personal data.
- Penetration testing: wbaji commissions independent security assessments of the platform on a periodic basis to identify and address vulnerabilities before they can be exploited.
- Incident response: wbaji maintains a documented data breach response plan. In the event of a security incident that poses a risk to your rights, affected players will be notified promptly with details of the incident and the steps taken to contain it.
7. Your Privacy Rights
As a player who has provided personal data to wbaji, you have a number of rights in relation to that data. wbaji is committed to honouring these rights promptly and without undue obstacles. The rights available to you are as follows:
7.1 Right of Access
You have the right to request a copy of the personal data that wbaji holds about you. This is sometimes referred to as a Subject Access Request (SAR). Upon receiving a verified SAR, wbaji will provide you with a summary of your personal data in a readable format within a reasonable timeframe. To submit a SAR, email [email protected] with the subject line "Data Access Request" and include your registered username and the email address associated with your account.
7.2 Right to Rectification
If any personal data that wbaji holds about you is inaccurate or incomplete, you have the right to request that it be corrected. Minor corrections — such as updating a phone number — can be made directly through your account settings. For corrections to KYC documents or legal name records, please contact [email protected] with supporting evidence.
7.3 Right to Erasure
In certain circumstances, you have the right to request that wbaji delete your personal data. This right is not absolute — wbaji may be required to retain certain data to meet legal obligations (for example, financial transaction records required for AML compliance cannot be deleted early). Where erasure is possible and no legal retention obligation applies, wbaji will process your request and confirm deletion within a reasonable period.
7.4 Right to Object to Marketing
You have the right to withdraw your consent to receive marketing communications from wbaji at any time. You can do this by clicking the unsubscribe link in any promotional email, by replying "STOP" to any promotional SMS, or by contacting [email protected] directly. Once you withdraw marketing consent, wbaji will cease sending promotional messages within a reasonable processing period. Note that withdrawal of marketing consent does not affect your receipt of transactional communications (e.g., deposit confirmations, withdrawal notifications, account security alerts).
7.5 Right to Data Portability
Where technically feasible, you may request that wbaji provide your personal data in a structured, commonly used, machine-readable format (such as CSV) so that it can be transferred to another platform. This right applies to data you provided directly to wbaji and which is processed on the basis of your consent or the performance of a contract.
8. Changes to This Policy
wbaji reviews this Privacy Policy on a regular basis to ensure it accurately reflects our data processing practices and remains compliant with applicable law. When material changes are made to this policy — for example, because we introduce a new data processing activity or change our data retention periods — we will publish the updated policy on this page and update the effective date shown at the top of the document.
For significant changes that materially affect your rights, wbaji will provide additional notice via email to your registered address or via an in-platform notification. Continued use of the wbaji platform following publication of an updated Privacy Policy constitutes your acknowledgement of the changes. If you do not agree to the updated policy, you should cease using the platform and contact [email protected] to request account closure.
This policy does not create or modify any contractual rights or obligations between you and wbaji beyond those set out in the wbaji Terms & Conditions. In the event of any conflict between this Privacy Policy and the Terms & Conditions, the Terms & Conditions shall prevail to the extent of the inconsistency.
If you have any questions, concerns, or feedback regarding this Privacy Policy or wbaji's data practices generally, please contact us at [email protected]. We are committed to addressing all privacy queries transparently and in good faith.
Last Updated: 1 January 2026 | Version: 2026.1 | Language: English | Platform: wbaji.app