Privacy Policy — rbsji

When you register for an rbsji account, use the platform's features, or contact the support team, we collect certain categories of personal data. The scope of data collected depends on how you interact with the platform. We collect only what is necessary for the purposes described in this Privacy Policy.

Registration & Account Data

When you create an rbsji account, we collect the following information directly from you:

• Full legal name
• Date of birth (for age verification)
• Email address
• Mobile phone number (used for SMS OTP verification)
• Residential address in Bangladesh (city, district, postcode)
• Preferred username and encrypted account password

Identity Verification (KYC) Data

To comply with anti-money laundering obligations and to verify that players are aged 18 or above, rbsji may collect:

• Copies of government-issued photo identification (Bangladesh NID, passport, or driving licence)
• Proof of residential address (utility bill, bank statement issued within 90 days)
• Proof of payment method ownership (screenshot or statement from bKash, Nagad, Rocket, or Upay account)
• Source of funds declaration for high-volume accounts

Transaction & Financial Data

Each time you make a deposit or withdrawal on rbsji, we record:

• Transaction amount in Bangladeshi Taka (BDT)
• Payment method used (e.g., bKash, Nagad, Visa, Mastercard, Dutch-Bangla Bank)
• Transaction reference numbers and timestamps in Bangladesh Standard Time (BST, UTC+6)
• Account balance snapshots at the time of each transaction

We do not store full card numbers or mobile banking PINs. Payment credentials are handled by our PCI-DSS-compliant payment processing partners.

Gaming & Betting Activity Data

To operate the platform correctly and to detect fraud or problem gambling patterns, rbsji records:

• Games played, bet amounts, game outcomes, and session durations
• Sports betting markets accessed, odds accepted, and settlement results
• Bonus offers claimed and wagering progress
• Responsible gaming tool activations (deposit limits, time-outs, self-exclusion requests)

Technical & Device Data

When you access rbsji via a web browser or mobile device, our servers automatically collect:

• IP address and approximate geographic location (country and city level)
• Browser type, version, and operating system
• Device type (desktop, mobile, tablet) and screen resolution
• Referring URL and pages visited within the rbsji platform
• Session start and end timestamps

Communications Data

When you contact rbsji support via live chat or email, we retain records of those communications, including the content of messages and any attachments, for the purposes of resolving your query, training quality assurance, and maintaining a record of any dispute or complaint.

rbsji uses the personal data it collects for the following specific purposes. We do not use your data in ways that are incompatible with the purposes described at the time of collection.

Marketing Communications

rbsji will only send you promotional emails, SMS messages, or in-platform notifications about bonuses, seasonal offers (such as BPL T20 promotions, Eid campaigns, or Pohela Boishakh specials), and new game releases if you have actively opted in to receive such communications. You may withdraw your marketing consent at any time by updating your notification preferences in your account dashboard or by contacting support at [email protected].

rbsji processes personal data on the basis of one or more of the following lawful grounds, consistent with internationally recognised data protection principles:

Contractual Necessity

The majority of data processing carried out by rbsji is necessary to perform the contract between rbsji and the player — namely, the account agreement established when you register and accept the Terms & Conditions. This includes processing your registration data, verifying your identity, handling deposits and withdrawals, settling bets, and operating your account. Without this processing, rbsji cannot provide the services you have contracted for.

Legal Obligation

Certain processing activities are required by law, including KYC identity verification, transaction record-keeping for anti-money laundering (AML) compliance, and the monitoring of problem gambling indicators. rbsji processes data for these purposes regardless of player consent because we are legally obligated to do so.

Legitimate Interests

rbsji processes some data on the basis of its legitimate business interests, provided those interests are not overridden by your rights. This includes fraud detection and prevention, platform security monitoring, and technical analytics used to improve platform performance. We apply a balancing test before relying on legitimate interests to ensure that our use of your data is proportionate and expected.

Consent

Where processing is not required by contract or law, rbsji relies on your freely given, specific, informed, and unambiguous consent. This applies primarily to marketing communications. Consent may be withdrawn at any time without affecting the lawfulness of processing carried out prior to withdrawal.

rbsji does not sell, rent, or trade your personal data to third parties for their own marketing purposes under any circumstances. We may share data with the following categories of recipients, strictly on a need-to-know basis and subject to binding confidentiality or data processing agreements:

Payment Processing Partners

To process deposits and withdrawals, rbsji shares transaction data with payment service providers including bKash, Nagad, Rocket, Upay, and card processing networks (Visa, Mastercard). These partners receive only the transaction data required to execute and verify your payment. They are bound by their own regulatory obligations and industry security standards (including PCI-DSS for card networks).

Identity Verification Providers

KYC document checks may be performed by a third-party identity verification service engaged by rbsji. This provider receives copies of the documents you submit for verification purposes only, and is prohibited from using that data for any other purpose.

Fraud Prevention & AML Services

rbsji uses third-party fraud screening and AML transaction monitoring tools. These services may process IP addresses, device fingerprints, and transaction patterns to identify suspicious activity. Data shared with these providers is anonymised or pseudonymised wherever technically feasible.

Regulatory & Law Enforcement Authorities

rbsji will disclose personal data to relevant authorities where required to do so by applicable law, court order, or regulatory request. This includes responding to formal requests from financial crime investigation units. Where permitted by law, rbsji will notify you of such disclosures.

Game Content Providers

Third-party game studios and software providers (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) may receive anonymised session and gameplay data as part of their platform integration. These providers do not receive personally identifiable information such as your name, contact details, or payment records.

rbsji uses cookies and similar client-side tracking technologies to operate core platform functionality, maintain your login session, remember your preferences, and analyse how players navigate and use the platform. This section explains each category of cookie we use and how you can manage them.

Managing Your Cookie Preferences

Strictly necessary and security cookies cannot be disabled because they are essential to the operation of your rbsji account. Functional and analytics cookies may be disabled through your browser's cookie management settings. Please be aware that disabling functional cookies may affect your platform experience — for example, your display preferences may not be saved between sessions.

Most modern browsers provide controls to view, block, or delete cookies. Commonly used browsers with cookie management guides include Google Chrome, Mozilla Firefox, Microsoft Edge, and Safari for iOS. Consult your browser's help documentation for specific instructions on managing cookie settings on your device.

rbsji retains personal data for the minimum period necessary to fulfil the purposes for which it was collected, to meet our legal and regulatory obligations, and to resolve any outstanding disputes or claims. The following retention periods apply as standard:

When the applicable retention period expires and there is no outstanding legal, regulatory, or dispute-related reason to retain the data further, rbsji securely deletes or anonymises the personal data in question. Anonymised aggregated data — from which no individual can be identified — may be retained indefinitely for statistical and platform improvement purposes.

As an rbsji player, you hold the following rights with respect to your personal data. To exercise any of these rights, contact the rbsji support team at [email protected]. We aim to respond to all data rights requests within 30 days of receipt. Where a request is complex or involves a large volume of data, we may extend this period by a further 30 days, in which case we will notify you of the extension.

Right of Access

You have the right to request a copy of all personal data that rbsji holds about you, along with information about how it is being processed. We will provide this in a structured, commonly used, and machine-readable format upon verified request.

Right to Rectification

If any personal data rbsji holds about you is inaccurate or incomplete, you have the right to request that it be corrected. For routine account details such as your email address or mobile number, you can update these directly from within your account dashboard without needing to contact support.

Right to Erasure

You may request that rbsji delete your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent and there is no other lawful basis for processing, or where the data has been processed unlawfully. Note that erasure requests cannot be fulfilled where rbsji is legally required to retain the data — for example, KYC records subject to AML retention requirements.

Right to Restrict Processing

You may request that rbsji restrict the processing of your personal data in certain circumstances — for example, while the accuracy of the data is being contested, or while a legitimate interests objection is being assessed.

Right to Object

You have the right to object to processing carried out on the basis of legitimate interests or for direct marketing purposes. Where you object to direct marketing, rbsji will cease that processing immediately. Where you object to legitimate-interests processing, rbsji will assess whether its interests are overridden by your rights and communicate the outcome to you.

Right to Data Portability

Where processing is based on your consent or on contractual necessity and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to request that it be transmitted directly to another controller where technically feasible.

rbsji takes the security of your personal data seriously and implements a range of technical and organisational measures to protect against unauthorised access, accidental loss, destruction, or disclosure. These measures are reviewed and updated regularly in response to evolving security threats.

Technical Safeguards

• SSL/TLS Encryption: All data in transit between your browser or device and the rbsji platform is encrypted using industry-standard TLS protocols. Connections using outdated or insecure protocol versions are rejected.
• Password Hashing: Account passwords are stored as salted cryptographic hashes. rbsji staff cannot view your password in plain text at any time.
• SMS OTP Authentication: New device logins trigger an SMS one-time password sent to your registered mobile number, providing a second factor of identity confirmation.
• Automated Fraud Detection: Real-time transaction monitoring and anomaly detection systems flag unusual account behaviour for human review by the rbsji compliance team.
• Database Access Controls: Access to databases containing personal data is restricted to authorised personnel on a least-privilege basis. All database access is logged and audited.

Organisational Safeguards

• Staff with access to personal data are subject to confidentiality obligations and receive regular training on data protection responsibilities.
• Data processing agreements are in place with all third-party service providers who process personal data on rbsji's behalf.
• rbsji maintains an internal data breach response procedure. In the event of a breach likely to result in a risk to the rights and freedoms of affected individuals, impacted players will be notified without undue delay.

Your Role in Account Security

While rbsji implements robust platform-level security, the security of your account also depends on actions you take. You are responsible for keeping your rbsji login credentials confidential and for not sharing your username or password with any other person. If you suspect that your account credentials have been compromised, contact rbsji support immediately at [email protected] so that your account can be secured without delay.

Policy Updates

This Privacy Policy was last updated in January 2026. rbsji reserves the right to update this policy at any time to reflect changes in our data processing practices, changes in applicable law, or improvements to the platform. When material changes are made, registered players will be notified by email or via an in-platform message displayed upon their next login. Continued use of the rbsji platform following the publication of an updated Privacy Policy constitutes acceptance of the revised terms. We encourage you to review this page periodically to stay informed about how your data is being protected.