rbagi Privacy Policy
Your privacy matters to us. This policy explains exactly what personal data rbagi collects when you use our platform, why we collect it, how we protect it, and what rights you have over your own information.
Introduction
rbagi ("the Platform", "we", "us", "our") is committed to protecting the privacy and security of all personal information entrusted to us by our registered players and website visitors. This Privacy Policy describes how we collect, use, disclose, store, and protect your personal data when you access or use the services available at rbagi.org, including the online casino, sports betting, and all related account and payment services.
By registering an account with rbagi or by continuing to use the platform after the effective date of this Privacy Policy, you acknowledge that you have read and understood this policy and consent to the collection and use of your personal data as described herein. If you do not agree to this policy, you must not use the rbagi platform.
Our Privacy Principles
We handle personal data according to six core principles that reflect our commitment to responsible, transparent, and secure data practices.
1. Information We Collect
Personal Information You Provide
When you register an account, verify your identity, make a deposit, request a withdrawal, or contact our support team, you may provide us with some or all of the following personal information:
- Full legal name, date of birth, and nationality — required for identity verification (KYC).
- Bangladesh mobile phone number — used for account registration, OTP authentication, and mobile wallet withdrawals via bKash, Nagad, or Rocket.
- Email address — used for account communications, promotional messages (where opted in), and password reset.
- Government-issued identification documents (National ID card / NID, passport, or driving licence) — provided during KYC verification and retained as required by anti-money-laundering obligations.
- Payment method details — mobile wallet numbers (bKash, Nagad, Rocket, Upay) and bank account or card information used for deposits and withdrawals.
Automatically Collected Usage Data
When you use rbagi.org, our servers and analytics systems automatically record certain technical information about your visit and activity:
- IP address and approximate geographic location (country and region level only — we do not pinpoint your exact street address from IP data).
- Device type, operating system, browser type and version — used to optimise the platform display for your device.
- Pages visited, time spent on each page, game sessions played, bet amounts, and other in-platform activity logs — used to improve user experience and detect irregular activity.
- Referral source (how you arrived at rbagi.org) — used for internal marketing analysis only.
Cookies and Similar Tracking Technologies
rbagi uses cookies and similar local storage technologies to maintain your logged-in session, remember your preferences, and measure platform usage. Strictly necessary cookies are placed automatically. You can manage non-essential cookies through your browser settings, though disabling them may affect platform functionality. For full details on the types of cookies used, see Section 8 below.
2. How We Use Your Information
rbagi uses the personal data we collect solely to operate and improve our platform and to fulfil our legal and regulatory obligations. We do not use your data for any purpose that is incompatible with the reasons stated below.
Purposes of Processing
- Account creation and management — to create your rbagi account, maintain your account records, and provide access to games and betting services.
- Identity verification (KYC) — to verify your age and identity, satisfy anti-money-laundering requirements, and comply with responsible gaming obligations.
- Transaction processing — to process deposits and withdrawals via bKash, Nagad, Rocket, Upay, bank transfer, Visa, and Mastercard; to maintain transaction records; and to investigate disputed transactions.
- Customer support — to respond to your enquiries, complaints, and account requests submitted to [email protected].
- Fraud and security — to detect, investigate, and prevent fraudulent activity, money laundering, bonus abuse, multi-accounting, and other prohibited conduct outlined in our Terms & Conditions.
- Platform improvement and analytics — to analyse aggregate, anonymised usage data to improve game selection, site performance, and user experience. Individual players are not profiled or targeted based on this data.
3. Legal Basis for Processing
We process your personal data only where a valid legal basis exists. The main legal bases on which rbagi relies are:
Our Legal Bases
- Contractual necessity — processing required to fulfil our obligations to you under the Terms & Conditions (e.g. account management, payment processing, game access).
- Legal obligation — processing necessary to comply with applicable laws, including anti-money-laundering laws, age verification requirements, and financial record-keeping obligations.
- Legitimate interests — processing for fraud prevention, security monitoring, and platform improvement, where these interests are not overridden by your fundamental rights and freedoms.
- Consent — processing for optional marketing communications, where you have provided explicit opt-in consent. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.
4. Sharing Your Information
rbagi does not sell, rent, or trade your personal data. We share your personal information only in the limited circumstances described below, and only to the minimum extent necessary:
Permitted Disclosures
- Payment processors and mobile wallet providers (bKash, Nagad, Rocket, Upay, Visa, Mastercard) — to process your deposits and withdrawals. These providers process data under their own privacy policies and applicable financial regulations.
- Game software providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi and similar) — limited technical identifiers (e.g. session tokens) are shared to facilitate game-play. Providers do not receive your full personal profile.
- Identity verification and KYC service providers — third-party services used to verify identity documents. These providers are contractually bound to process data only for verification purposes and to maintain equivalent data security standards.
- Law enforcement and regulatory authorities — we may disclose personal data where required by applicable law, court order, or regulatory directive, including disclosures required under anti-money-laundering legislation.
5. Data Retention
rbagi retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The specific retention periods we apply are as follows: account profile data is retained for the duration of your account and for a period of five (5) years following account closure, to satisfy financial record-keeping and anti-money-laundering requirements. Transaction records (deposit and withdrawal history) are retained for a minimum of five (5) years from the date of each transaction. Identity verification documents (KYC) are retained for a period of five (5) years following account closure or the date of the last transaction, whichever is later. Support communications are retained for two (2) years from the date of last contact.
When the applicable retention period expires, personal data is securely deleted or anonymised in a manner that prevents reconstruction of identifiable information. If you request deletion of your account before the statutory retention period has elapsed, we will suppress your data from active processing but may retain it in secure archive form for the remainder of the legally required retention window.
6. Data Security
rbagi employs a range of technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. While no online platform can guarantee absolute security, we apply industry-standard practices appropriate to the sensitivity of the data we hold.
Security Measures in Place
- SSL/TLS encryption — all data transmitted between your device and rbagi.org is encrypted using industry-standard SSL/TLS protocols, preventing interception by third parties.
- Secure password storage — account passwords are stored using one-way cryptographic hashing. rbagi staff cannot view or retrieve your plaintext password.
- Access controls — access to personal data within rbagi's systems is restricted to authorised staff on a need-to-know basis. All internal access is logged and audited.
- Fraud detection systems — automated monitoring tools continuously scan for irregular account activity, unusual transaction patterns, and signs of unauthorised access.
7. Your Rights Over Your Data
You have a number of rights in relation to the personal data rbagi holds about you. These rights may be subject to certain limitations under applicable law, but we will always respond to your request in good faith and within a reasonable timeframe.
Rights You Can Exercise
- Right of access — you may request a copy of the personal data rbagi holds about you.
- Right to rectification — if any personal data we hold is inaccurate or incomplete, you may request that we correct or complete it.
- Right to erasure — you may request deletion of your personal data. This right is subject to our legal retention obligations; we cannot erase data we are legally required to retain.
- Right to restrict processing — you may request that we limit the processing of your data while a rectification or objection request is being considered.
- Right to data portability — where processing is based on your consent or on a contract with you, you may request a copy of your data in a structured, machine-readable format.
- Right to withdraw consent — where processing is based on consent (e.g. marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.
To exercise any of the above rights, please submit a written request to [email protected] with your registered mobile number, full name, and a description of the right you wish to exercise. We will acknowledge your request within 3 business days and aim to resolve it within 30 calendar days.
8. Cookies Policy
Cookies are small text files stored on your device by your browser when you visit rbagi.org. We use cookies to keep our platform functioning correctly, to remember your preferences, and to understand how players use the site so we can continue to improve it. The following categories of cookies are used:
Cookie Categories
- Strictly necessary cookies — essential for core platform functions such as maintaining your login session, processing secure transactions, and loading game content. These cannot be disabled without breaking core functionality.
- Functional cookies — remember your language preference, notification settings, and other optional platform customisations. Disabling these may reduce your personalised experience but will not prevent core platform access.
- Analytics cookies — collect anonymised, aggregated data about how players navigate the platform (pages viewed, session duration, device type). This data is used internally to improve site performance and content — no individual is personally identified.
- Security cookies — short-lived tokens used to validate active sessions, prevent cross-site request forgery (CSRF), and detect concurrent logins from multiple devices.
You can control and delete cookies through your browser settings at any time. Please note that restricting strictly necessary cookies will impair your ability to log in and use core platform features. For instructions on managing cookies in your specific browser, refer to your browser's help documentation.
9. Children and Minors
rbagi is strictly an adults-only platform. We do not knowingly collect personal data from any person under the age of 21. Our registration process includes age verification steps, and we reserve the right to request additional documentary proof of age at any time. If we discover that personal data has been collected from a person under 21 without parental or guardian consent, we will take immediate steps to delete that data and close the associated account. If you are a parent or guardian and you believe your child has registered on rbagi, please contact us immediately at [email protected].
10. Payment Data and Financial Information
When you make a deposit or request a withdrawal, rbagi collects and processes financial information including your payment method identifiers (mobile wallet number, bank account number, or card details). Full card numbers and CVV codes are never stored on rbagi's servers — card transactions are handled directly by our PCI-DSS-compliant payment processor partners. Mobile wallet transactions (bKash, Nagad, Rocket, Upay) are processed via the respective providers' secure APIs; rbagi retains only the transaction reference number and the associated account mobile number for record-keeping.
All financial records are retained in accordance with the data retention periods set out in Section 5 of this policy and in compliance with applicable financial regulations. rbagi does not use your payment data for any purpose other than processing your transactions and satisfying our legal record-keeping obligations.
11. Changes to This Privacy Policy
rbagi may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or the services we offer. When we make material changes to this policy, we will update the "Last Updated" date at the top of this page. Where the change is significant, we may also notify registered players by email or via an in-platform notification prior to the change taking effect.
Your continued use of the rbagi platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. We encourage you to review this policy periodically. The most current version of this Privacy Policy is always available at rbagi.org/privacy-policy.
12. Contact and Data Queries
If you have any questions, concerns, or requests relating to this Privacy Policy or the personal data rbagi holds about you, please contact our data support team in writing. We aim to acknowledge all data-related enquiries within 3 business days and to resolve them within 30 calendar days.
Have More Questions?
Our FAQ page covers the most common questions about accounts, payments, and security. You can also explore rbagi Casino for our full game and betting offerings.
Read Our FAQ Explore rbagi Casino