Privacy Policy

How gibaje collects, uses, and protects your personal information — written in plain English for our Bangladeshi players.

SSL Secured Data Protected 21+ Only
Last Updated: January 2026

Our Commitment to Your Privacy

gibaje takes your personal data seriously — here is exactly how we handle it

This Privacy Policy ("Policy") explains how gibaje ("gibaje", "we", "us", "our") collects, uses, stores, shares, and protects the personal information of users ("you", "your", "Player") who access the gibaje platform at gibaje.app. This Policy applies to all services offered through the platform, including casino games, sports betting, account registration, payment processing, customer support, and promotional communications.

By registering an account or otherwise using the gibaje platform, you confirm that you have read, understood, and accepted this Privacy Policy. This Policy forms an integral part of the gibaje Terms & Conditions. If you do not agree with how we handle your data as described here, you should not use the platform and should contact us to request account closure.

Plain-Language Summary
gibaje collects only the personal data necessary to operate your account, verify your identity, process your payments, and keep your account secure. We do not sell your data to third parties. You have the right to access, correct, and request deletion of your data at any time by contacting [email protected].

Data We Collect

Six categories of personal data that gibaje may collect from you

👤
Identity Data
Full name, date of birth, gender, and national ID or passport details collected during registration and KYC verification.
📞
Contact Data
Mobile phone number, email address, and city of residence — used to manage your account and deliver platform notices.
💳
Financial Data
bKash, Nagad, Rocket, or Upay account references, transaction amounts in BDT, and deposit/withdrawal history.
🎮
Gaming Data
Bet history, game session records, wagering patterns, bonus usage, and responsible gaming tool activations.
🌐
Technical Data
IP address, device type, browser version, operating system, session timestamps, and referral source data.
💬
Communications Data
Records of your correspondence with gibaje support, including chat logs, email threads, and in-app support tickets.

gibaje does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health records, or biometric data. If you voluntarily disclose such information in a support communication, it will be handled with strict confidentiality and used only to resolve the specific issue you raised.

How We Use Your Data

Every use of your personal data has a specific, legitimate purpose

  • Account Management: To create and maintain your gibaje account, verify your identity, and ensure the security of your login credentials.
  • Payment Processing: To receive deposits and issue withdrawals in Bangladeshi Taka via bKash, Nagad, Rocket, Upay, and bank transfers. Financial data is processed solely for transaction fulfilment.
  • Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, money laundering, unauthorised account access, and any other activity that could harm you or other players.
  • Responsible Gaming: To monitor wagering behaviour and identify patterns that may indicate problem gambling, enabling timely intervention and access to support tools.
  • Customer Support: To respond to your enquiries, resolve disputes, process complaints, and provide assistance with account or game issues.
  • Promotions & Communications: To send you bonus offers, seasonal promotions (Eid, Pohela Boishakh, BPL season), and platform updates — but only where you have not opted out of marketing communications.
  • Platform Improvement: To analyse aggregated, anonymised usage data to improve game offerings, site performance, and user experience — no individual player is identified in this analysis.
  • Legal Compliance: To fulfil any legal obligations that may apply to gibaje, including responding to lawful requests from regulatory or law enforcement authorities.

Data Retention

How long gibaje keeps different categories of your personal data

gibaje retains personal data only for as long as is necessary for the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The table below summarises our standard retention periods by data category.

Identity & KYC
Retained for the lifetime of the account plus 5 years after account closure, to satisfy anti-money-laundering obligations.
Financial Records
All transaction records retained for a minimum of 5 years from the date of the transaction.
Gaming History
Bet and session records retained for 3 years from the date of the activity.
Support Logs
Customer support correspondence retained for 2 years from the date of the last interaction.
Technical / Log Data
Server and session logs retained for up to 12 months for security monitoring purposes.
Marketing Preferences
Retained until you withdraw consent or close your account, whichever is earlier.

After the applicable retention period has expired, your personal data will be securely deleted or anonymised so that it can no longer be linked back to you. In exceptional circumstances — for example, where data is required as evidence in an ongoing legal dispute — retention may be extended until the matter is resolved.

Sharing Your Data

gibaje does not sell your data — here is who may access it and why

gibaje will never sell, rent, or trade your personal data to third parties for their own marketing purposes. We share your data only in the following limited and controlled circumstances:

Payment Service Providers
Transaction data is shared with bKash, Nagad, Rocket, Upay, and our banking partners (Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank) exclusively to process your deposits and withdrawals. These providers are bound by strict data-sharing agreements and are not permitted to use your data for any other purpose.
Game Studio Partners
When you play a game powered by Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, or Ezugi, a game session identifier is passed to the studio's servers to authenticate the session and record the outcome. No personal identity data beyond a session token is shared with game studios.
Fraud & Security Services
gibaje may share technical and identity data with third-party fraud detection and cybersecurity partners where there is a reasonable suspicion of fraudulent activity, money laundering, or a security threat. These partners are contractually required to handle data in accordance with this Policy.
Legal & Regulatory Authorities
gibaje may disclose personal data to law enforcement agencies, courts, or regulatory bodies where required by a lawful order, court directive, or applicable legal obligation. In all such cases, we will disclose only the minimum data required and will, where legally permitted, notify you of the disclosure.

Cookies & Tracking

How gibaje uses cookies and similar technologies on the platform

gibaje uses cookies and similar tracking technologies (including local storage and session tokens) to operate the platform, maintain your login session, remember your preferences, and analyse aggregate usage patterns. The following types of cookies are used:

  • Essential Cookies: Required for the platform to function. These include session authentication tokens that keep you logged in and CSRF protection tokens. These cannot be disabled without breaking core platform functionality.
  • Functional Cookies: Remember your preferences such as game filters, display settings, and language selection. Disabling these will reset your preferences on every visit.
  • Analytics Cookies: Collect anonymised data about how players navigate the platform — page views, session duration, and feature engagement. This data helps us improve the platform experience. No individual player is identified.
  • Marketing Cookies: Used to track the effectiveness of promotional campaigns. These are only activated where you have given explicit consent. You may withdraw this consent at any time by contacting support.

Most mobile browsers allow you to control cookies through their settings. Blocking essential cookies will prevent you from using key platform features. For more information on managing cookies on your device, consult your browser's help documentation.

Your Data Rights

Rights you hold over your personal data held by gibaje

As a user of the gibaje platform, you have the following rights regarding your personal data. To exercise any of these rights, contact us at [email protected]. We will respond to all verified requests within 14 days.

  • Right of Access: You may request a copy of all personal data gibaje holds about you. We will provide this in a readable format at no charge for the first request per 12-month period.
  • Right to Rectification: If any of the personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update basic contact details directly from your account settings.
  • Right to Erasure: You may request deletion of your personal data. Note that data subject to legal retention requirements (e.g., financial records under anti-money-laundering regulations) cannot be deleted until the mandatory retention period has expired.
  • Right to Restrict Processing: You may request that gibaje pause processing of your data in certain circumstances — for example, while a dispute about data accuracy is being resolved.
  • Right to Withdraw Marketing Consent: You may opt out of receiving promotional communications at any time by contacting support or using the unsubscribe option in any marketing message. Opting out of marketing does not affect operational account communications.
Exercise Your Rights
Send all data rights requests to [email protected] with the subject line "Data Rights Request". Include your registered mobile number and a brief description of your request. We will acknowledge receipt within 2 business days (Bangladesh Standard Time, UTC+6) and complete all verified requests within 14 days.

Data Security

Technical and organisational measures that protect your personal data

gibaje implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. Key security measures include:

SSL / TLS Encryption
All data transmitted between your device and the gibaje platform is encrypted using SSL/TLS technology. This protects your login credentials, payment details, and personal data from interception during transmission.
Secure Data Storage
Personal data is stored on secure servers with restricted access controls. Sensitive fields such as passwords are stored using one-way cryptographic hashing. Access to raw personal data is limited to authorised gibaje personnel on a need-to-know basis only.
Continuous Monitoring
gibaje maintains continuous security monitoring to detect anomalous access patterns, brute-force attempts, and other indicators of compromise. Automated systems flag suspicious activity for immediate human review.

Despite these measures, no online platform can guarantee absolute security. You are responsible for keeping your gibaje account credentials confidential. If you believe your account has been accessed without your authorisation, contact gibaje support immediately at [email protected] so that we can investigate and, where necessary, secure or suspend your account.

Children & Minors

gibaje does not collect or process data from persons under the age of 21

The gibaje platform is strictly for adults aged 21 years and above. We do not knowingly collect personal data from anyone under the age of 21. If we become aware that a registered account belongs to a person under 21, we will immediately suspend that account, freeze all associated funds pending review, and delete the personal data of the underage user except where retention is required by law.

Age Verification is Mandatory
All players must complete age verification before their first withdrawal is processed. If you suspect that a minor has accessed the gibaje platform using your payment details or identity, contact [email protected] immediately. For guidance on preventing underage access to gambling platforms, visit the Responsible Gaming page.

Policy Updates

How gibaje will notify you when this Privacy Policy changes

gibaje reserves the right to update this Privacy Policy at any time. When material changes are made, we will notify registered players via the mobile number or email address associated with their account, and display a notice on the platform. The "Last Updated" date at the top of this page will reflect the most recent revision.

Your continued use of the gibaje platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated Policy. If you do not agree with the revised Policy, you should cease using the platform and request account closure before the changes take effect. We recommend reviewing this page periodically to stay informed of how your data is being handled.

Ready to Explore gibaje?
Your data is protected. Now enjoy cricket betting, live casino games, slots, Dragon Tiger, and Jackpot Bingo — all in BDT.
Visit gibaje Casino Login to Your Account Read the FAQ

21+ only. Play responsibly. Gambling involves risk.