abaje Privacy Policy

This Privacy Policy ("Policy") describes how abaje ("abaje", "we", "us", "our") collects, uses, stores, and shares personal data in connection with the operation of the abaje platform at https://abaje.pro. This Policy applies to all users of the abaje website and associated services, including registered account holders, visitors who browse the platform without registering, and individuals who contact abaje's support team.

By accessing the abaje platform, creating an account, or otherwise using any abaje service, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any aspect of this Policy, please cease using the abaje platform immediately and contact [email protected] to request account closure.

This Policy should be read alongside abaje's Terms and Conditions, which govern the overall use of the platform. Where this Policy is silent on a matter that is addressed in the Terms and Conditions, the Terms and Conditions shall apply. This Policy is reviewed and updated periodically; the current version is always accessible at https://abaje.pro/privacy-policy.

abaje processes your personal data only for the purposes described in this Policy. We do not use your data for purposes that are incompatible with those for which it was originally collected without first obtaining your explicit consent. The primary purposes for which abaje uses your personal data are:

• Account creation and management — to register your account, maintain your player profile, and administer your account settings, preferences, and responsible gaming tools.
• Identity verification (KYC) — to verify your identity, confirm your age (minimum 21 years), screen against sanctions and fraud watchlists, and comply with applicable anti-money laundering obligations.
• Transaction processing — to process your deposits and withdrawals via bKash, Nagad, Rocket, Upay, and supported bank payment methods, and to maintain accurate financial records of all transactions.
• Platform operation and customer support — to deliver the game lobby, sports betting markets, live casino services, and crash games; to provide customer support responses via email or live chat; and to communicate account-related notifications to you.
• Responsible gaming monitoring — to track indicators of problem gambling behaviour (such as unusually high deposit frequencies, session lengths, or rapid reversal of withdrawal requests) and to proactively reach out where our responsible gaming team identifies a player who may benefit from support.
• Fraud prevention and security — to detect and prevent fraud, unauthorised account access, money laundering, and other prohibited conduct; to investigate suspected breaches of our Terms and Conditions; and to share relevant data with law enforcement authorities where required by law.
• Promotions and marketing communications — to send you information about abaje promotions, bonuses, seasonal offers (such as BPL and IPL cricket betting specials, Eid promotions, and Pohela Boishakh offers), and platform updates. You may opt out of marketing communications at any time by contacting [email protected].

abaje does not use your personal data to make fully automated decisions that have a legal or similarly significant effect on you without the involvement of a human reviewer. Where automated tools are used in fraud or responsible gaming screening, a human reviewer assesses all cases that result in account restriction, suspension, or closure.

abaje processes your personal data on one or more of the following legal bases, depending on the purpose and nature of the processing activity:

• Contractual necessity — processing required to enter into or perform the contract between you and abaje, including account registration, KYC verification, transaction processing, and delivering the platform service.
• Legal obligation — processing necessary to comply with applicable legal requirements, including anti-money laundering obligations, record-keeping requirements, and responses to lawful requests from competent authorities.
• Legitimate interests — processing for abaje's legitimate business interests where those interests are not overridden by your data protection rights, including fraud detection, platform security monitoring, responsible gaming analytics, and service improvement.
• Consent — where we rely on consent as the basis for processing (for example, for optional marketing communications), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

abaje does not sell your personal data to any third party. We share your personal data only in the limited circumstances described below, and only to the extent necessary for the specific purpose in each case:

• Payment processors and mobile wallet providers — we share transaction data with bKash, Nagad, Rocket, Upay, and supported bank payment gateways solely to process your deposits and withdrawals. These providers process your payment data under their own privacy policies and are independently responsible for their data handling.
• Game technology providers — we share session identifiers and account references with our game studio partners (including Pragmatic Play, Evolution Gaming, Spribe, and Ezugi) to authenticate your access to their games hosted on the abaje platform. These providers do not receive your full identity or financial data.
• Identity verification and KYC service providers — we share identity documentation with third-party KYC verification services that assist abaje in fulfilling its age verification and anti-money laundering obligations. These providers are contractually bound to process your data only for the purpose of KYC verification and under strict confidentiality obligations.
• Law enforcement and regulatory authorities — we will disclose your personal data to competent authorities where we are legally required to do so, including in response to a court order, a regulatory investigation, or a lawful request from an anti-money laundering authority. We will, where permitted by law, notify you of any such disclosure.
• Professional advisers — our legal counsel, auditors, and accountants may access relevant personal data on a strictly need-to-know basis in connection with the provision of their professional services to abaje. All professional advisers are bound by confidentiality obligations.

abaje requires all third parties who process personal data on our behalf or in connection with our platform to implement appropriate technical and organisational security measures, and to process that data only in accordance with our instructions or as required by law. We do not permit our third-party service providers to use your personal data for their own marketing or unrelated business purposes.

abaje uses cookies and similar tracking technologies on the platform to support core functionality, improve the user experience, and gather analytics data. The categories of cookies used are as follows:

• Strictly necessary cookies — these cookies are essential for the platform to function and cannot be disabled. They include session authentication tokens, load-balancing identifiers, and security cookies that protect against cross-site request forgery.
• Functional cookies — these cookies remember your preferences such as language settings, last-used payment method, and responsible gaming tool configurations, so that you do not have to re-enter them on each visit.
• Analytics cookies — these cookies collect aggregated, non-personally-identifiable data about how visitors use the platform, including pages visited, session duration, and navigation paths. This data is used to improve platform design and performance.
• Session security tokens — short-lived tokens used to maintain authenticated sessions and prevent session hijacking. These expire automatically when you log out or when the session times out due to inactivity.

You may manage your cookie preferences through your browser settings. Please note that disabling cookies other than strictly necessary ones may affect the functionality of certain platform features. abaje does not currently respond to "Do Not Track" signals from browsers, as there is no industry-standard mechanism for doing so.

abaje retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply to the main categories of data held by abaje: Account and identity data is retained for the duration of your account plus a minimum of 5 years following account closure, in accordance with standard anti-money laundering record-keeping requirements. Transaction and financial data is retained for a minimum of 5 years from the date of the transaction, in line with applicable financial record-keeping obligations. Communications and support records are retained for 3 years from the date of the last communication. Technical and log data (IP logs, session logs) is retained for up to 12 months, after which it is deleted or anonymised.

Where retention beyond these standard periods is required for the purposes of legal proceedings, regulatory investigations, or dispute resolution, abaje will retain the relevant data until those proceedings are finally resolved. At the end of any applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with an identifiable individual.

abaje takes the security of your personal data seriously and has implemented a range of technical and organisational measures to protect it against unauthorised access, accidental loss, destruction, or alteration. These measures include SSL/TLS encryption for all data transmitted between your device and the abaje platform; encryption of sensitive data fields at rest in our database systems; access controls restricting employee access to personal data on a need-to-know basis; firewalls and intrusion detection systems on our server infrastructure; and routine security assessments and penetration testing.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, abaje will notify affected players without undue delay, providing information about the nature of the breach, the data affected, the likely consequences, and the measures abaje has taken or proposes to take to address it. Notification will be sent to the email address associated with your account.

abaje will respond to all data subject requests within 30 calendar days of receipt. Where a request is complex or where we have received a high volume of requests, we may extend this period by a further 30 days and will notify you of the extension. We will not charge a fee for handling data subject requests unless a request is manifestly unfounded or excessive.

Financial data associated with your payment methods — including your bKash, Nagad, or bank account references — is used solely to process transactions, verify the source of funds where required, and comply with financial crime prevention obligations. abaje does not store full payment card numbers. Where card payments are supported, card data is processed directly by PCI-DSS-compliant payment processors and abaje retains only a tokenised reference.

KYC documentation — including government-issued identification and proof of address — is stored securely and accessed only by authorised members of abaje's compliance team. KYC documents are not shared with game studios, payment processors, or marketing partners. They are retained for the period required by applicable anti-money laundering law following account closure, after which they are securely destroyed.

The behavioural and gaming data abaje collects is used, in part, to support responsible gaming outcomes for our players. Our responsible gaming system analyses deposit patterns, session lengths, betting frequencies, and self-exclusion history to identify players who may be experiencing difficulty with their gambling. Where our system identifies a player at risk, a member of our responsible gaming team will review the case and may reach out to the player directly via the contact details associated with the account.

Self-exclusion records are treated with the highest level of confidentiality within abaje. If a player has voluntarily self-excluded, that fact is not shared with marketing partners and will not be used to target the player with promotional communications during the exclusion period. Self-exclusion data is retained for a minimum of 5 years following the end of the exclusion period to prevent inadvertent re-registration.

The abaje platform may contain references to third-party game studios and payment service providers. While abaje takes care to work only with reputable partners, abaje is not responsible for the privacy practices of third-party providers once you leave the abaje platform environment. We encourage you to review the privacy policies of any third-party provider whose services you use in connection with the abaje platform. abaje's Privacy Policy applies solely to the abaje platform at https://abaje.pro.

The abaje platform is strictly intended for adults aged 21 and above. abaje does not knowingly collect personal data from individuals under the age of 21. If you are a parent or guardian and believe that a minor has accessed the abaje platform and provided personal data, please contact us immediately at [email protected] so that we can take steps to delete the data and close the account. Age verification is a mandatory step in the abaje registration process, and accounts found to be held by minors will be closed immediately with all funds forfeited.

abaje may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or the structure of the platform. Where changes are material — meaning they significantly affect the way we use your personal data or the rights available to you — we will notify registered users via email at least 14 days before the updated Policy takes effect.

Your continued use of the abaje platform following the effective date of any updated Privacy Policy constitutes your acceptance of the updated Policy. The date at the top of this page indicates when the Policy was last revised. Previous versions of the Policy are available upon request by writing to [email protected].

For all privacy-related enquiries, data subject access requests, rectification requests, erasure requests, or complaints relating to how abaje handles your personal data, please contact our support team in writing. Our Bangla-speaking agents are available around the clock to assist players from Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, and across Bangladesh.

Please include your full name, registered account username, and a clear description of your request or complaint. abaje will acknowledge receipt within 3 business days and will provide a substantive response within 30 calendar days of receipt.