abaji Privacy Policy — How We Handle Your Data

Introduction and Scope

abaji is committed to protecting the privacy and personal data of every player who uses the platform. This Privacy Policy describes the types of personal information we collect, the purposes for which we use it, the circumstances under which we may share it, the steps we take to protect it, and the rights available to you in relation to your data. This policy applies to all users of the abaji website and mobile experience, regardless of the device or location from which you access it.

By registering an account with abaji, depositing funds, or otherwise using the platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein. If you do not consent to this policy, you must not use the abaji platform. This policy should be read alongside the abaji Terms and Conditions.

Personal Data We Collect

abaji collects the following categories of personal data. The table below summarises what we collect, why we collect it, and the legal basis for processing.

How We Use Your Data

abaji uses the personal data it collects for the following purposes, each of which is carried out on a lawful basis consistent with applicable data protection principles:

• To create and maintain your abaji account, including verifying your identity and age in accordance with our age-gating obligations (21+).
• To process deposits and withdrawals via bKash, Nagad, Rocket, and Upay, and to comply with anti-money laundering (AML) and know-your-customer (KYC) obligations.
• To provide, personalise, and improve the abaji gaming experience, including recommending games and promotions that may be relevant to your play history.
• To monitor platform usage for responsible gaming purposes, including detecting patterns consistent with problem gambling behaviour and triggering relevant safeguards.
• To send you transactional communications (deposit confirmations, withdrawal notifications, account security alerts) and, where you have opted in, promotional communications about abaji offers.

Sharing Your Data

abaji does not sell, rent, or trade your personal data to third parties for their own independent marketing purposes. We may, however, share your data with carefully selected third parties in the following limited circumstances: (a) with payment processing partners (bKash, Nagad, Rocket, Upay) strictly to the extent necessary to process your transactions; (b) with KYC and identity verification service providers for the purpose of verifying your identity in accordance with our legal obligations; (c) with game content providers (such as Pragmatic Play, Evolution Gaming, Spribe, and Ezugi) to the extent required to deliver game functionality; (d) with fraud prevention and security vendors; and (e) with regulatory or law enforcement authorities where we are legally required to disclose information.

All third-party service providers engaged by abaji are contractually required to process personal data only in accordance with abaji's instructions and for no other purpose, and to maintain appropriate technical and organisational security measures. abaji does not knowingly permit third-party advertising networks to place tracking technologies on the abaji platform or to collect personal data about abaji users for third-party advertising purposes.

Cookies and Tracking Technologies

abaji uses cookies and similar tracking technologies to operate the platform, improve your experience, and maintain security. The following categories of cookies are used:

• Essential cookies — required for the platform to function; these cannot be disabled without breaking core functionality such as session management and login persistence.
• Analytics cookies — used to understand how players navigate the platform, which pages are most visited, and where technical issues occur. This data is aggregated and does not identify individual users.
• Security cookies — used to detect and prevent fraudulent activity, bot traffic, and unauthorised access attempts.
• Preference cookies — used to remember your platform settings and preferences between sessions, such as language and display preferences.

Data Retention

abaji retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention periods apply: account registration data and identity documents are retained for the duration of the account relationship and for a minimum of five (5) years following account closure, in accordance with standard AML record-keeping requirements. Financial transaction records are retained for a minimum of five (5) years from the date of each transaction. Communications data (support tickets, live chat records) are retained for a minimum of two (2) years from the date of the interaction.

After the applicable retention period has expired, personal data is securely deleted or anonymised in a manner that prevents reconstruction. Where data has been anonymised, it may be retained for longer periods for statistical and platform improvement purposes, as it no longer constitutes personal data.

Your Rights

Subject to applicable law, you have the following rights in respect of the personal data abaji holds about you. To exercise any of these rights, please contact abaji at the email address shown in the footer of this page. abaji will respond to all data rights requests within a reasonable period and in any event within thirty (30) days of receiving a complete request.

• Right of access — you have the right to request a copy of the personal data abaji holds about you and information about how it is processed.
• Right to rectification — you have the right to request correction of inaccurate or incomplete personal data held about you. You may update many details directly from your account settings page.
• Right to erasure — you have the right to request deletion of your personal data in certain circumstances, including where the data is no longer necessary for the purposes for which it was collected and where no overriding legal obligation requires its retention.
• Right to restriction — you have the right to request that abaji restricts the processing of your personal data in certain circumstances, for example while a rectification request is being assessed.
• Right to object — you have the right to object to the processing of your personal data for direct marketing purposes at any time. You can unsubscribe from promotional communications using the unsubscribe mechanism included in every marketing message we send.

Data Security

abaji implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include: SSL/TLS encryption for all data in transit between your device and abaji's servers; encryption of sensitive data fields at rest; access controls that limit employee access to personal data on a strict need-to-know basis; regular security testing and vulnerability assessments; and incident response procedures that ensure prompt containment and notification in the event of a data breach.

While abaji takes all reasonable steps to protect your personal data, no method of electronic transmission or storage is completely secure. abaji cannot guarantee absolute security of data transmitted over the internet. You also have a role in keeping your data safe: choose a strong, unique password for your abaji account, do not share your login credentials, and notify abaji immediately if you suspect unauthorised access to your account.

Children and Minors

abaji is strictly an adult platform. We do not knowingly collect personal data from any person under the age of 21. If you are under 21, you must not use abaji or provide any personal data to us. The following measures are in place to prevent underage access:

• Age declaration is required at registration; providing a false date of birth constitutes a serious breach of the abaji Terms and Conditions and will result in immediate account closure.
• KYC identity verification, which includes verification of age via government-issued ID, is required before a player's first withdrawal.
• abaji may suspend any account where it has reason to believe the account holder is under 21, pending completion of age verification.
• If abaji discovers that it has inadvertently collected personal data from a person under 21, that data will be deleted promptly and the account will be permanently closed.
• Parents or guardians who believe their child has registered with abaji should contact support immediately at the email address shown in the footer of this website.

Third-Party Links

The abaji platform may contain references to third-party payment providers such as bKash, Nagad, Rocket, and Upay. When you interact with these payment providers' own interfaces or applications, you are subject to those providers' own privacy policies and terms, over which abaji has no control. abaji is not responsible for the privacy practices of third-party payment providers, game studios, or any other external service you may interact with in connection with your use of abaji.

abaji encourages you to review the privacy policies of any third-party service you interact with. The inclusion of references to payment partners on the abaji platform does not constitute an endorsement of those parties' privacy practices.

Changes to This Privacy Policy

abaji reserves the right to update or modify this Privacy Policy at any time. Where changes are material — for example, where we introduce a new purpose for processing your personal data — abaji will provide reasonable advance notice via the email address associated with your account or via a prominent notice on the abaji platform. The date at the top of this policy reflects when it was last updated.

Your continued use of abaji following notification of any change to this Privacy Policy constitutes your acceptance of the revised policy. If you do not accept the revised policy, you must discontinue use of the platform and may request closure of your account by contacting support.

Governing Law

This Privacy Policy is governed by and construed in accordance with the laws applicable to abaji's operating jurisdiction. Any disputes arising in connection with this Privacy Policy shall be subject to abaji's internal dispute resolution process as described in the Terms and Conditions. Nothing in this Privacy Policy limits any statutory rights you may have under applicable data protection law.

Entire Agreement

This Privacy Policy, together with the abaji Terms and Conditions, constitutes the entire agreement between you and abaji with respect to the collection, use, and protection of your personal data. If any provision of this Privacy Policy is found to be invalid or unenforceable, the remaining provisions shall continue in full force and effect.