Your Privacy Matters at rbaze

rbaze operates as an internationally licensed online betting and casino platform, accessible at https://rbaze.io. We serve an English-speaking audience based in Bangladesh, offering cricket betting, live casino games, slots, and other wagering products. In the context of this Privacy Policy, "rbaze", "we", "us", and "our" refer to the operator of the rbaze Platform and its duly authorised subsidiaries and affiliates responsible for the collection and processing of Player data.

Our primary contact email for all privacy-related enquiries is [email protected] (plain text — not a clickable link). We are committed to handling all personal data in a lawful, fair, and transparent manner, consistent with internationally recognised data protection principles.

This Privacy Policy applies to all personal data collected by rbaze in connection with:

• The registration and maintenance of a Player account on the rbaze Platform.
• The use of any product or service offered through the Platform, including betting markets, casino games, and cashier functions.
• Communications between you and rbaze via email, live chat, or any other channel.
• Your browsing activity on the rbaze website, including data collected through cookies and similar tracking technologies.
• Identity verification (KYC) and anti-money-laundering (AML) processes required by our licence obligations.

This Policy does not apply to third-party websites, payment processors, or game providers that you may interact with through the Platform. Those third parties maintain their own privacy policies, and rbaze is not responsible for their data practices.

rbaze collects personal data through several channels. The categories of data we collect are described below, along with the primary source of collection for each category.

rbaze uses the personal data we collect for the following purposes:

• Account Management: To create, maintain, and administer your rbaze Player account, including processing deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard.
• Identity & Age Verification: To confirm that you are at least 21 years of age and are the genuine owner of the payment methods used on your account, as required by our licence obligations.
• Service Delivery: To provide access to all games, betting markets, and promotional offers available through the rbaze Platform.
• Fraud Prevention & AML Compliance: To detect, investigate, and prevent fraudulent activity, money laundering, account takeover attempts, multi-accounting, and other prohibited conduct described in our Terms & Conditions.
• Responsible Gaming: To monitor betting patterns and account behaviour for signs of problem gambling, and to apply any self-imposed limits, cooling-off periods, or self-exclusion requests made by you or required by our responsible gaming obligations.
• Customer Support: To respond to your enquiries, resolve disputes, and communicate account-related notifications in English via email or live chat.
• Legal Compliance: To fulfil our obligations under applicable laws, regulatory requirements, and any lawful requests from competent authorities.
• Platform Improvement: To analyse aggregated, anonymised usage data to improve the performance, security, and content of the rbaze Platform.
• Marketing Communications: To send you promotional offers and bonus notifications relevant to your interests, where you have provided consent or where we have a legitimate interest. You may opt out of marketing communications at any time by contacting [email protected].

rbaze does not use your personal data for automated decision-making that produces legal or similarly significant effects without human review, except where explicitly required by our AML compliance processes.

rbaze processes your personal data under the following legal bases, consistent with internationally recognised data protection frameworks:

• Contractual Necessity: Processing required to perform the agreement between you and rbaze — specifically, to operate your account, process payments, and deliver the services you have requested.
• Legal Obligation: Processing required to comply with applicable laws and regulatory requirements, including KYC, AML, and licence conditions imposed by rbaze's international offshore gaming authority.
• Legitimate Interests: Processing carried out for rbaze's legitimate business interests where those interests are not overridden by your rights — including fraud prevention, platform security, responsible gaming monitoring, and business analytics.
• Consent: Processing of data for optional purposes, such as marketing communications, where you have provided explicit consent. Consent may be withdrawn at any time without affecting the lawfulness of processing carried out before withdrawal.

rbaze does not sell, rent, or trade your personal data to any third party for commercial purposes. We may share your data with the following categories of recipients, strictly to the extent necessary for the purposes described in Section 4:

• KYC & AML Service Providers: Third-party identity verification and compliance partners who assist rbaze in verifying Player identities and detecting financial crime. These partners are bound by strict data processing agreements.
• Payment Processors: bKash, Nagad, Rocket, Upay, Visa, Mastercard, and other payment method operators, solely for the purpose of processing your deposits and withdrawals. We share only the minimum data required by each provider.
• Game Providers: Software studios such as Evolution Gaming, Pragmatic Play, Spribe, Ezugi, NetEnt, and Microgaming receive technical session data necessary to deliver their game content within the rbaze Platform. These providers do not receive your full identity data.
• Regulatory & Law Enforcement Authorities: Where we are legally required to disclose personal data to a government body, court, or law enforcement agency, we will do so in compliance with applicable legal process. Where permitted, we will notify you of such a disclosure.
• Professional Advisors: Legal counsel, auditors, and fraud investigators engaged by rbaze, who are bound by professional confidentiality obligations.
• Business Successors: In the event of a merger, acquisition, or sale of rbaze or its assets, your personal data may be transferred to the acquiring entity, subject to equivalent data protection commitments.

rbaze uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files stored on your device when you visit the rbaze website. The following categories of cookies are used:

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication cookies, security tokens, and load-balancing identifiers. These cookies cannot be disabled without preventing you from using the Platform.
• Functional Cookies: Allow the Platform to remember your preferences, such as language settings and game display options, to deliver a personalised experience.
• Analytics Cookies: Collect anonymised data about how Players navigate the Platform — which pages are visited most frequently, where users drop off, and how features are used — to help us improve the site.
• Security & Fraud Detection Cookies: Used to identify suspicious login activity, detect account sharing, and prevent bot-driven interactions on the Platform.

You may adjust your browser settings to block or delete cookies at any time. Please note that disabling strictly necessary cookies will prevent you from logging in to your rbaze account. rbaze does not use third-party advertising or retargeting cookies.

rbaze retains personal data for as long as is necessary to fulfil the purposes described in this Policy, subject to the following minimum retention periods:

• Active Account Data: Retained for the duration of your active account relationship with rbaze, plus a minimum period of 5 years following account closure, to meet AML and licence record-keeping obligations.
• KYC & Identity Documents: Retained for a minimum of 5 years following account closure or the conclusion of the last transaction, in compliance with anti-money-laundering regulations.
• Transaction Records: Deposit, withdrawal, and betting history records are retained for a minimum of 5 years following each transaction date.
• Support Communications: Email and chat records are retained for 2 years following resolution of the relevant interaction, unless a longer period is required for dispute resolution or regulatory compliance.
• Technical & Log Data: Server logs and IP address records are retained for up to 12 months for security monitoring and fraud investigation purposes.
• Marketing Consent Records: Records of your marketing consent or opt-out are retained indefinitely to demonstrate compliance with applicable regulations.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with any individual.

rbaze implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures include:

• SSL/TLS Encryption: All data transmitted between your browser and the rbaze Platform is encrypted using industry-standard SSL/TLS protocols. Look for the padlock icon in your browser address bar when visiting rbaze.io.
• Encrypted Data Storage: Sensitive personal data, including identity documents and financial records, is stored in encrypted form in access-controlled environments.
• Access Controls: Access to personal data within rbaze is restricted to authorised personnel who require that information to perform their role. All internal access is logged and audited.
• Two-Factor Authentication: rbaze supports two-factor authentication (2FA) for Player accounts to reduce the risk of unauthorised login. We strongly recommend enabling 2FA from your account settings.
• Penetration Testing & Security Audits: rbaze conducts periodic security assessments to identify and remediate vulnerabilities in the Platform infrastructure.
• Incident Response: In the event of a data breach that poses a risk to your rights and freedoms, rbaze will notify affected Players and relevant authorities as required by applicable law, within the timeframes prescribed by applicable regulations.

Subject to applicable law and rbaze's legitimate interests and legal obligations, you hold the following rights in relation to your personal data held by rbaze:

• Right of Access: You may request a copy of the personal data rbaze holds about you, along with information about how it is processed.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data held in your account.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to rbaze's overriding legal retention obligations (e.g., AML record-keeping requirements).
• Right to Restriction: You may request that rbaze restricts processing of your data while a complaint or accuracy dispute is being resolved.
• Right to Data Portability: You may request that rbaze provide your personal data in a structured, commonly used, machine-readable format where technically feasible.
• Right to Object: You may object to processing based on legitimate interests or for direct marketing purposes. Where you object to marketing, rbaze will cease sending marketing communications immediately.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of the above rights, submit a written request to [email protected] with the subject line "Data Rights Request". rbaze will acknowledge your request within 5 business days and respond in full within 30 calendar days. Where a request is complex or numerous, this period may be extended by up to a further 30 days, with notice provided to you.

rbaze does not knowingly collect personal data from any individual under the age of 21. The Platform is strictly intended for adults aged 21 and above. If rbaze becomes aware that personal data has been collected from a person under 21, that data will be deleted immediately and the associated account will be closed without further notice.

If you are a parent or guardian and believe that a person under 21 in your care has created an account or submitted personal data to rbaze, please contact us immediately at [email protected]. We take child protection seriously and will act on all such reports as a matter of the highest priority.

As an internationally operated platform, rbaze may transfer personal data to servers and service providers located outside Bangladesh. Such transfers are necessary to deliver the services described in this Policy — for example, game content hosted on servers operated by Evolution Gaming or Pragmatic Play in their respective data centre locations.

Where personal data is transferred internationally, rbaze ensures that appropriate safeguards are in place, which may include:

• Contractual clauses requiring the recipient to protect the data to a standard equivalent to that described in this Policy.
• Transfer to jurisdictions recognised as providing an adequate level of data protection by applicable regulatory frameworks.
• Binding corporate rules or equivalent mechanisms where applicable.

By registering an account and using the rbaze Platform, you acknowledge and consent to the transfer of your personal data to jurisdictions outside Bangladesh for the purposes described in this Policy.

The rbaze Platform may contain references to third-party game providers and payment services that operate under their own privacy policies. While rbaze takes care to partner with reputable organisations, we have no control over the data practices of external parties and are not responsible for the content or privacy practices of any third-party service accessed through or alongside the Platform.

We encourage you to review the privacy policies of any third-party service you interact with — particularly your mobile banking provider (such as bKash, Nagad, or Rocket) — to understand how they collect and use your information.

rbaze reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or Platform functionality. When material changes are made, we will notify registered Players via the email address on file and post a prominent notice on the Platform no fewer than 7 days before the revised Policy takes effect.

The "Last Updated" date at the top of this Policy indicates when the most recent revision was published. We encourage you to review this Policy periodically. Your continued use of the rbaze Platform following the effective date of any update constitutes your acceptance of the revised Privacy Policy.

For any questions, concerns, or requests related to this Privacy Policy or the way rbaze handles your personal data, please contact our privacy team:

• Email: [email protected] (plain text — not a clickable link)
• Subject Line: Use "Privacy Enquiry" for general questions or "Data Rights Request" for formal rights requests.
• Response Time: Within 24 hours for general enquiries; within 5 business days for formal data rights requests, measured in Bangladesh Standard Time (BST, UTC+6).

rbaze is committed to resolving all privacy-related concerns promptly and transparently. If you are not satisfied with our response to a privacy complaint, you may have the right to escalate your concern to the relevant data protection authority in your jurisdiction.