Privacy Policy
at gabaee
Your privacy matters to us. This Privacy Policy explains exactly what personal data ga baee collects, how we use it, who we share it with, and what rights you have as a player based in Bangladesh.
How gabaee Treats Your Data
The following highlights summarise gabaee's core data protection principles. These summaries are for quick reference only — please read each full section below for complete details.
Minimal Collection
gabaee collects only the personal data that is strictly necessary to operate your account, process payments, verify your identity, and comply with applicable anti-money laundering requirements.
Secure Storage
All personal data stored on gabaee's servers is protected using AES-256 encryption at rest and TLS 1.3 encryption in transit. Our infrastructure undergoes regular third-party security audits.
No Data Selling
gabaee does not sell, rent, or trade your personal data to any third party for marketing purposes. Data is shared only with service partners who are contractually bound to protect it.
Your Control
You have the right to access, correct, or request deletion of your personal data at any time. Requests are processed within 30 days of receipt by our data protection team.
Cookie Transparency
gabaee uses essential, analytical, and functional cookies. We do not deploy third-party advertising cookies. You can review and manage cookie preferences through your browser settings.
Defined Retention
Personal data is retained only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. Account data is typically retained for up to 5 years after closure.
1 Information We Collect
When you register for, access, or use the gabaee platform, we collect certain categories of personal data about you. This section describes what we collect and why each category is necessary.
1.1 Registration & Identity Data
To create a gabaee account, you are required to provide the following information:
- Full legal name as it appears on your government-issued identification document.
- Date of birth (used to verify that you are 18 years of age or older).
- Residential address, including city, district, and postal code within Bangladesh.
- Email address and mobile phone number registered in your name.
- A unique username and password of your choosing.
1.2 Identity Verification (KYC) Documents
As part of our Know Your Customer (KYC) obligations, we may request copies of the following documents to verify your identity and address:
- National Identity Card (NID) — both front and back.
- Passport biographical data page.
- Driving licence (Bangladesh Road Transport Authority issued).
- Recent utility bill or bank statement as proof of residential address (dated within 3 months).
- A selfie photograph holding your ID document, where required for enhanced due diligence.
1.3 Financial & Transaction Data
To process deposits and withdrawals, we collect and retain the following financial information:
- Mobile wallet account numbers (bKash, Nagad, Rocket, Upay) linked to your gabaee account.
- Bank account details where bank transfer is used as a payment method.
- Complete transaction history including deposit amounts, withdrawal amounts, dates, and payment references.
- Records of any bonuses or promotional credits applied to your account.
1.4 Technical & Usage Data
When you interact with the gabaee website, our systems automatically collect certain technical data to ensure platform stability, security, and regulatory compliance:
- IP address and approximate geographic location derived from it.
- Device type, operating system, browser type and version.
- Session timestamps, pages visited, game sessions played, and betting activity logs.
- Referral source (the URL from which you arrived at gabaee).
1.5 Communications Data
If you contact gabaee's support team via email, live chat, or any other channel, we retain records of those communications — including the content of your messages and our responses — for customer service quality assurance and dispute resolution purposes.
2 How We Use Your Data
gabaee uses the personal data we collect for specific, clearly defined purposes. We do not use your data for any purpose that is incompatible with what is stated in this Privacy Policy without first obtaining your explicit consent.
| Purpose | Data Used | Lawful Basis |
|---|---|---|
| Account creation & management | Identity data, contact details, username/password | Contractual necessity |
| Age & identity verification (KYC) | KYC documents, date of birth, NID/passport | Legal obligation |
| Processing deposits & withdrawals | Financial data, mobile wallet numbers, transaction history | Contractual necessity |
| Fraud & money laundering prevention | All data categories, IP address, device data | Legal obligation / Legitimate interests |
| Responsible gaming monitoring | Betting activity, session logs, deposit patterns | Legal obligation / Legitimate interests |
| Customer support & dispute resolution | Communications data, account history | Contractual necessity / Legitimate interests |
| Platform security & technical operation | Technical data, IP address, session data | Legitimate interests |
| Marketing & promotional communications | Email address, mobile number, game preferences | Consent (opt-in only) |
2.1 Marketing Communications
gabaee may send you promotional emails or SMS messages about bonuses, new game launches, seasonal promotions (such as BPL cricket offers, Eid specials, and Pohela Boishakh promotions), and other gabaee services — but only if you have given your explicit consent to receive such communications during registration or at a later date via your account settings.
You may withdraw your consent and unsubscribe from marketing communications at any time by updating your notification preferences in your account settings or by contacting [email protected]. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.
2.2 Automated Decision-Making
gabaee employs automated systems for fraud detection, responsible gaming monitoring, and bonus abuse prevention. These systems may flag accounts for review or apply temporary restrictions based on algorithmic analysis. Where such automated processing has a significant effect on your account, you have the right to request human review of the decision by contacting [email protected].
3 Data Sharing & Third Parties
gabaee does not sell, rent, or otherwise trade your personal data to any third party. However, in order to operate a secure and fully functional gaming platform, we share limited data with trusted service partners and where required by law. All third parties with whom we share data are contractually obligated to handle it in accordance with applicable data protection standards.
3.1 Categories of Third-Party Recipients
- Payment processors: bKash, Nagad, Rocket, Upay, and partner banks receive the minimum transaction data necessary to process your deposits and withdrawals.
- Identity verification providers: Third-party KYC service providers may receive copies of your identification documents solely for the purpose of age and identity verification.
- Game software providers: Studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive a pseudonymous player ID and session data necessary to operate their games within the gabaee platform.
- IT infrastructure and security providers: Cloud hosting and cybersecurity partners who provide the technical infrastructure on which gabaee operates. These providers act as data processors under strict contractual data processing agreements.
- Analytics providers: Anonymised and aggregated usage data may be shared with analytics platforms to help us understand platform performance and improve the user experience. No personally identifiable information is included in analytics data transfers.
3.2 Legal Disclosure
gabaee may be required to disclose personal data to regulatory authorities, law enforcement agencies, or courts of competent jurisdiction where we are legally compelled to do so. We will notify you of any such disclosure request where we are legally permitted to do so before complying.
3.3 International Data Transfers
As an offshore-licensed platform, some of gabaee's data processing infrastructure is located outside of Bangladesh. Where personal data is transferred internationally, we ensure that appropriate safeguards are in place — including standard contractual clauses and data processing agreements — to protect your data to a standard equivalent to the protections described in this Privacy Policy.
4 Cookies & Tracking Technologies
gabaee uses cookies and similar tracking technologies on its website to ensure the platform functions correctly, to maintain your session when you are logged in, to remember your preferences, and to analyse how players interact with the platform so that we can continue to improve the experience.
4.1 Types of Cookies We Use
| Cookie Type | Purpose | Can Be Disabled? |
|---|---|---|
| Essential / Strictly Necessary | Required for the website to function. Includes session authentication tokens, load-balancing cookies, and security tokens (CSRF protection). | No — disabling these will prevent login and core platform functionality. |
| Functional / Preference | Remember your language preferences, display settings, and other personalisation choices. | Yes — disabling these means your preferences will not be saved between sessions. |
| Analytical / Performance | Collect anonymised data on how visitors use the website (pages visited, time on site, navigation paths) to help us identify and fix usability issues. | Yes — you may opt out via your browser settings without affecting platform functionality. |
4.2 What We Do Not Use
- gabaee does not use third-party advertising cookies or tracking pixels from ad networks.
- gabaee does not use social media tracking cookies (Facebook Pixel, Twitter/X tags, TikTok Pixel, etc.).
- gabaee does not share cookie data with any data broker or advertising exchange.
4.3 Managing Your Cookie Preferences
You can manage or delete cookies through your browser settings at any time. Most modern browsers allow you to block all cookies, block only third-party cookies, or delete existing cookies. Please note that disabling essential cookies will impair or prevent your ability to log in and use the gabaee platform. Instructions for managing cookies are available in the help documentation for all major browsers including Google Chrome, Mozilla Firefox, Microsoft Edge, and Safari.
5 Data Security & Retention
gabaee takes the security of your personal data seriously and implements a layered set of technical and organisational measures designed to protect your data against unauthorised access, accidental loss, alteration, or disclosure.
5.1 Security Measures
- All data transmitted between your browser and gabaee's servers is encrypted using TLS 1.3 (Transport Layer Security), indicated by the padlock in your browser's address bar.
- Stored personal data and KYC documents are encrypted at rest using AES-256 encryption.
- Access to personal data within gabaee's internal systems is restricted on a strict need-to-know basis, with role-based access controls and full audit logging.
- gabaee conducts regular penetration testing and vulnerability assessments of its platform infrastructure.
- Two-factor authentication (2FA) is available for player accounts and is mandatory for all internal staff accounts with data access.
- gabaee maintains an incident response plan. In the event of a data breach, affected players will be notified without undue delay where the breach poses a risk to their rights and freedoms.
5.2 Data Retention Periods
gabaee retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by law. The following general retention periods apply:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account registration data | Duration of account + 5 years after closure | AML compliance, dispute resolution |
| KYC documents | Duration of account + 5 years after closure | Legal / regulatory obligation |
| Transaction & betting records | 7 years from transaction date | Financial record-keeping obligations |
| Customer support communications | 3 years from date of communication | Dispute resolution, quality assurance |
| Technical / session logs | Up to 12 months | Platform security, fraud detection |
| Marketing consent records | Until consent withdrawn + 2 years | Evidence of lawful processing basis |
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked to you as an individual.
6 Your Rights & Choices
As a gabaee player, you have a number of rights with respect to the personal data we hold about you. We are committed to honouring these rights promptly and transparently. To exercise any of the rights listed below, please contact us at [email protected] with the subject line "Data Rights Request" and include your registered username and a description of your request.
- Right of Access: You have the right to request a copy of all personal data that gabaee holds about you. We will provide this in a structured, commonly used, machine-readable format within 30 days of your request.
- Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it without undue delay. You can update many details directly through your account settings.
- Right to Erasure ("Right to be Forgotten"): You may request that we delete your personal data. This right is subject to certain limitations — for example, we cannot delete data that we are legally required to retain for AML compliance or financial record-keeping purposes.
- Right to Restrict Processing: You may request that we temporarily pause the processing of your data while a dispute about its accuracy or our use of it is resolved.
- Right to Data Portability: Where processing is based on your consent or contractual necessity, you have the right to receive your personal data in a portable format that allows you to transfer it to another service provider.
- Right to Object: You have the right to object to processing of your personal data where we rely on legitimate interests as the legal basis. You also have an unconditional right to object to your data being used for direct marketing.
- Rights Related to Automated Decision-Making: You have the right to request human review of any automated decision that has a significant effect on your account, as described in Section 2.2 above.
- Right to Withdraw Consent: Where processing is based on your consent (for example, for marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.
7 Children's Privacy
If gabaee becomes aware that it has inadvertently collected personal data from a person under the age of 18, we will take immediate steps to delete that data from our systems and close the associated account. All deposits made during any period of underage access will be returned to the originating payment method after deducting any winnings generated during that period, which will be forfeited.
We strongly encourage parents and guardians in Bangladesh to monitor their children's internet activity and to make use of parental control software tools to prevent minors from accessing online gambling websites. If you believe a minor has accessed gabaee using your account credentials or any other means, please contact our support team immediately at [email protected] so that we can investigate and take appropriate action without delay.
7.1 Age Verification
gabaee employs a multi-layered age verification process to prevent underage access. At the point of registration, all players are required to confirm that they are 18 years of age or older. Before any withdrawal is processed, players must complete KYC verification, which includes submission of a government-issued identity document confirming date of birth. Accounts where age cannot be verified will be suspended until verification is completed.
In addition to document-based verification, gabaee's automated responsible gaming monitoring systems analyse account behaviour patterns that may indicate underage play, and flag such accounts for manual review by our compliance team.
8 Policy Updates & Contact
8.1 Changes to This Privacy Policy
gabaee reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform functionality. When we make material changes to this policy, we will notify you by posting a prominent notice on the gabaee website and, where appropriate, by sending a notification to your registered email address at least 14 days before the changes take effect.
The "Effective Date" at the top of this Privacy Policy indicates the date on which the current version came into force. We encourage you to review this page periodically to stay informed about how gabaee protects your personal data. Your continued use of the gabaee platform after any updated version of this Privacy Policy takes effect constitutes your acceptance of the revised terms.
8.2 Previous Versions
If you would like to review a previous version of this Privacy Policy, you may request a copy by contacting our data protection team at [email protected]. We retain archived versions of this policy for a period of 5 years.
8.3 How to Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy or the way gabaee processes your personal data, please contact our data protection team using the details below. We aim to respond to all privacy-related inquiries within 5 business days.
For data rights requests, privacy questions, and general inquiries:
[email protected]
Subject line: "Privacy Policy Inquiry" or "Data Rights Request"
Response Time
General inquiries: within 5 business days.
Data rights requests: within 30 calendar days as required.
Urgent security concerns: within 24 hours.
Platform
gabaee operates as an offshore-licensed gaming platform serving players in Bangladesh. This Privacy Policy is governed by the laws applicable to our licensing jurisdiction.
Your Privacy Is Protected — Now Let's Play
Now that you understand how gabaee protects your data, explore over 3,000 casino games, live cricket betting, and exclusive BDT promotions — all in a safe and secure environment built for Bangladesh players.
18+ only. Gambling involves risk. Please play responsibly.