Privacy Policy — kakabaji

kakabaji collects personal data from players in Bangladesh in order to provide a safe, compliant, and personalised online gaming experience. The categories of data we collect fall into three broad groups: data you provide directly to us, data generated automatically through your use of the platform, and data obtained from third-party verification partners.

1.1 Data You Provide Directly

When you register an account, complete identity verification, make a deposit, or contact our support team, you may provide the following information:

• Identity data: Full legal name, date of birth, National ID number, passport number, or driving licence number (for KYC verification).
• Contact data: Mobile phone number (registered in Bangladesh), email address, and residential address including district, city (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, or Mymensingh), and postcode.
• Financial data: Mobile financial service account details for bKash, Nagad, Rocket, and Upay; bank account or card details for Visa, Mastercard, and participating Bangladeshi banks including City Bank, BRAC Bank, Islami Bank, Sonali Bank, and Dutch-Bangla Bank. Note: full payment credentials are processed securely by the relevant payment provider — kakabaji does not store raw card numbers or mobile wallet PINs.
• Account data: Your chosen username, encrypted password, account preferences, deposit limit settings, and self-exclusion status.
• Support communications: The content of any messages, emails, or live chat transcripts sent to the kakabaji support team.

1.2 Data Collected Automatically

When you access and use the kakabaji platform, certain data is collected automatically by our systems:

• Device and technical data: IP address, device type, browser type and version, operating system, screen resolution, and unique device identifiers.
• Usage data: Pages and game categories visited, time spent on each page, click patterns, search queries entered within the platform, and navigation paths.
• Transaction data: A complete record of all deposits, withdrawals, bets placed (including cricket matches, live casino rounds, slot spins), bet amounts in Bangladeshi Taka (৳), outcomes, and timestamps in Bangladesh Standard Time (BST, UTC+6).
• Session data: Login timestamps, session duration, logout events, and any failed login attempts.

1.3 Data from Third Parties

kakabaji may receive limited personal data from trusted third-party partners in the following circumstances:

• Identity verification providers: Third-party KYC and document verification services may confirm the authenticity of identification documents submitted during account verification.
• Payment providers: bKash, Nagad, Rocket, Upay, and affiliated banking partners may share transaction confirmation references with kakabaji solely to reconcile deposits and withdrawals.
• Fraud detection services: Anti-fraud and responsible gaming screening tools may provide risk signals that inform account-level decisions.

kakabaji processes your personal data on the basis of contractual necessity, legal obligation, and legitimate business interest. We do not use your data for purposes incompatible with those stated in this Privacy Policy. The table below summarises our primary data processing activities:

2.1 Promotional Communications

If you have opted in to receive promotional communications, kakabaji may send you information about bonuses, seasonal offers (Eid, Pohela Boishakh, Victory Day promotions), cricket tournament offers (BPL, T20 World Cup, IPL), and new game launches via email or SMS to your registered mobile number. You may opt out of promotional communications at any time by contacting support@kakabaji or updating your notification preferences in your account settings. Opting out of marketing communications does not affect the delivery of essential account-related communications.

2.2 Automated Decision-Making

kakabaji may use automated systems to detect fraudulent activity, identify problem gambling patterns, or flag accounts for KYC review. Where an automated decision materially affects your account (such as a temporary suspension), you have the right to request human review by contacting our support team.

kakabaji does not sell, rent, or trade your personal data to any third party for commercial or marketing purposes. We share personal data only in the limited circumstances described below, and only to the minimum extent necessary for the stated purpose.

3.1 Service Providers

We engage carefully selected third-party service providers who assist us in operating the kakabaji platform. These providers are contractually bound to process your data only on our instructions and in accordance with appropriate security standards. Categories of service providers include:

• Payment processing partners (bKash, Nagad, Rocket, Upay, Visa, Mastercard, and participating Bangladeshi banks)
• Game software providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi) — these providers receive only the minimum session data required to deliver the game
• KYC and identity verification technology providers
• IT infrastructure, cloud hosting, and cybersecurity service providers
• Customer support platform providers

3.2 Legal and Regulatory Disclosure

kakabaji may disclose personal data to law enforcement agencies, courts, or regulatory bodies where required to do so by applicable law, court order, or where disclosure is necessary to protect the rights, safety, or property of kakabaji or its players. Any such disclosure will be limited to the specific data required to satisfy the legal obligation.

3.3 Business Transfers

In the event of a merger, acquisition, or sale of all or part of the kakabaji business, personal data held by kakabaji may be transferred to the acquiring entity as part of that transaction. Players will be notified of any such transfer and of any changes to this Privacy Policy that arise as a result.

kakabaji uses cookies and similar tracking technologies to enable core platform functionality, remember your session, and analyse how players use the site. Cookies are small text files stored on your device when you visit kakabaji. The table below describes the categories of cookies we use:

4.1 Managing Cookies

You may manage or disable non-essential cookies through your browser settings. Most modern browsers (including those commonly used in Bangladesh such as Chrome, Firefox, Samsung Internet, and Opera Mini) provide options to block or delete cookies. Please note that disabling strictly necessary cookies will prevent you from logging in to your kakabaji account and using core platform features.

4.2 Do Not Track

Some browsers offer a "Do Not Track" (DNT) signal. kakabaji currently does not alter its data collection practices in response to DNT signals, as there is no universally accepted standard for how platforms should respond to these signals. We will review this position as standards develop.

kakabaji retains personal data for as long as is necessary to fulfil the purposes for which it was collected, comply with legal and regulatory obligations, and resolve any disputes that may arise. The following retention periods apply as a general guide:

• Account data and KYC records: Retained for the duration of your active account plus a minimum of 5 years following account closure, in accordance with anti-money laundering (AML) record-keeping obligations applicable to financial platforms operating in Bangladesh.
• Transaction and betting records: Retained for a minimum of 5 years from the date of each transaction to support dispute resolution, fraud investigations, and regulatory compliance.
• Support communications: Retained for 3 years from the date of the last interaction, to allow us to reference prior contact history in the event of follow-up queries.
• Marketing consent records: Retained for the duration of your marketing opt-in plus 2 years from the date of opt-out, to demonstrate compliance with consent obligations.
• Analytics and session data: Retained in anonymised or aggregated form for up to 24 months for platform improvement purposes.

Upon the expiry of the applicable retention period, personal data will be securely deleted or anonymised so that it can no longer be attributed to an identifiable individual. Where data is being retained pending the resolution of a dispute or legal proceeding, deletion will be deferred until that matter is resolved.

kakabaji takes the security of your personal data seriously and employs a multi-layered approach to protect the information we hold. Our security framework includes the following measures:

• Transport Layer Security (TLS/SSL): All data in transit between your device and the kakabaji platform is encrypted using industry-standard TLS protocols. The padlock symbol in your browser address bar confirms that your connection is secure.
• Encrypted data storage: Sensitive data including identity records and payment references is stored in encrypted form on secured servers. Access to raw data is restricted to authorised personnel only.
• Access controls: kakabaji operates a strict role-based access control policy. Staff members may only access the personal data necessary to perform their specific job functions. Access logs are maintained and reviewed regularly.
• Two-factor authentication (2FA): Players are encouraged to enable 2FA on their kakabaji accounts for an additional layer of login security. OTP codes are delivered to your registered Bangladesh mobile number.
• Intrusion detection and monitoring: Our infrastructure is monitored continuously for unusual activity patterns, potential intrusions, and data anomalies. Automated alerts trigger immediate investigation by our security team.
• Regular security reviews: kakabaji conducts periodic internal security reviews and vulnerability assessments to identify and address potential weaknesses before they can be exploited.

Despite these measures, no online platform can guarantee absolute security. In the event of a data breach that affects your personal data, kakabaji will notify affected players as promptly as practicable, providing information about the nature of the breach and the steps being taken to address it.

As a player on kakabaji, you hold the following rights in relation to your personal data. To exercise any of these rights, contact our support team at support@kakabaji. We will respond to verified requests within a reasonable timeframe, typically within 30 days.

7.1 Right of Access

You have the right to request a copy of the personal data that kakabaji holds about you. Upon receipt of a verified access request, we will provide a summary of the data we hold, the purposes for which it is processed, the categories of recipients to whom it has been disclosed, and the applicable retention period.

7.2 Right to Rectification

If you believe that any personal data kakabaji holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update certain contact information directly through your account settings panel. For corrections to identity documents or KYC records, please contact support@kakabaji with supporting evidence.

7.3 Right to Erasure

You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where the data has been processed unlawfully. Please note that erasure requests cannot be fulfilled where retention is required by applicable law — for example, AML-related transaction records must be retained for the mandatory period described in Section 5.

7.4 Right to Restrict Processing

In certain circumstances, you may request that kakabaji restricts the processing of your personal data — for example, while the accuracy of data is being contested, or pending the outcome of an objection request. During the restriction period, kakabaji will continue to store the data but will not process it for other purposes.

7.5 Right to Object

You have the right to object to the processing of your personal data where that processing is based on legitimate interest. You also have an absolute right to object to the use of your personal data for direct marketing purposes, including profiling for marketing. Objections to marketing may be submitted at any time via support@kakabaji.

7.6 Right to Data Portability

Where processing is based on your consent or on a contract, you have the right to receive a copy of the personal data you have provided to kakabaji in a structured, commonly used, machine-readable format (such as CSV or JSON). You may also request that kakabaji transmit this data directly to another service provider where technically feasible.

8.1 Changes to This Privacy Policy

kakabaji reserves the right to update or amend this Privacy Policy at any time. When material changes are made, the revised policy will be published on this page with an updated effective date. Where the changes are significant, we may notify registered players directly via the email address or mobile number on their account. We encourage all players to review this Privacy Policy periodically to stay informed of how kakabaji protects their data.

Your continued use of the kakabaji platform following the publication of a revised Privacy Policy constitutes your acknowledgment of the updated terms. If you do not agree with any changes to this Policy, you should cease using the platform and contact support@kakabaji to request account closure.

8.2 Contact for Privacy Queries

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way kakabaji handles your personal data, please contact our support team using the following details:

• Support email: support@kakabaji (plain text — not a clickable link)
• Support hours: 24 hours a day, 7 days a week
• Time zone: Bangladesh Standard Time (BST, UTC+6)
• Response commitment: All privacy-related queries will receive an initial response within 3 business days

We are committed to resolving any privacy concerns fairly and promptly. If you are not satisfied with our response, you retain the right to escalate the matter to the appropriate regulatory authority in your jurisdiction.