// Data Protection & Privacy
fbajr Privacy Policy
Your privacy matters to us. This Privacy Policy explains in plain terms what personal data fbajr collects from players in Bangladesh, why we collect it, how we store and protect it, and what rights you hold over your own information at every stage of your relationship with the platform.
SSL-Encrypted Storage
All personal data collected by fbajr is stored on servers protected by SSL/TLS 1.3 encryption. Data at rest is encrypted using AES-256 standards, ensuring your information remains inaccessible to unauthorised parties.
No Data Selling
fbajr does not sell, rent, or trade your personal data to third-party marketers or data brokers under any circumstances. Your information is used exclusively for operating the platform and fulfilling legal obligations.
Player Data Rights
Players registered on fbajr retain the right to access, correct, export, and request deletion of their personal data at any time. Submit data requests by contacting support at fbajr.net — responses are delivered within 30 days.
Defined Retention Periods
fbajr applies clear retention schedules to all data categories. Transaction and account data is retained for a minimum of five years for compliance purposes. Non-essential behavioural data is deleted after 24 months of inactivity.
Transparent Cookie Use
fbajr uses cookies strictly for session management, security, and platform performance analytics. No third-party advertising cookies are placed without your knowledge. You may adjust cookie preferences through your browser settings at any time.
KYC & Compliance
Identity verification data collected during the KYC process is handled with the highest level of care, stored separately from general account data, and shared only with regulated verification partners where strictly required by anti-money laundering obligations.
// Section 01
Information We Collect
fbajr collects personal data from players through several distinct channels: the registration process, ongoing account activity, payment transactions, customer support interactions, and automatic technical collection via cookies and server logs. The categories of data we collect, and the specific data points within each category, are described in full below.
We collect only the minimum data necessary to provide a safe, functional, and legally compliant gaming service. We do not collect sensitive personal data such as biometric identifiers, political opinions, or religious beliefs. Where collection of a data category is mandatory for service delivery, this is indicated clearly at the point of collection.
| Data Category | Specific Data Points Collected | Collection Method |
|---|---|---|
| Identity Data | Full legal name, date of birth, gender (optional), national ID number, passport or driving licence details submitted during KYC. | Registration form, KYC document upload |
| Contact Data | Email address, mobile phone number, residential address (city, district, postal code), country of residence (Bangladesh). | Registration form, account settings |
| Financial Data | Deposit and withdrawal amounts, transaction timestamps, payment method identifiers (e.g., bKash mobile number, last four digits of bank account), transaction reference numbers. Full payment credentials are never stored by fbajr. | Cashier / payment gateway |
| Gaming Activity Data | Game sessions played, wager amounts, win/loss outcomes, bonus participation history, game preferences, session duration, and bet history. | Automated — platform activity logs |
| Technical Data | IP address, browser type and version, operating system, device type (mobile/desktop), screen resolution, referring URL, session cookies, and access timestamps. | Automated — server logs and cookies |
| Communication Data | Records of support chat conversations, emails sent to and received from fbajr, feedback submissions, and dispute correspondence. | Support channels, email |
Voluntary vs. Mandatory Data: Fields marked as required during registration (email address, full name, date of birth, phone number) are mandatory for account creation. Optional fields such as city of residence and preferred payment method help us personalise your experience but are not required to access the Service. You may update or correct your contact data at any time through your account settings.
// Section 02
How We Use Your Data
fbajr processes your personal data only for specified, legitimate purposes. We do not use your data in ways that are incompatible with the purposes stated at the time of collection. The legal basis for each processing activity is identified below alongside the purpose it serves.
- Account Creation and Management (Contractual Necessity): We process your identity and contact data to create and maintain your player account, verify your eligibility to play, authenticate your logins, and manage your account settings and preferences.
- Payment Processing (Contractual Necessity): Financial data is processed to facilitate deposits and withdrawals through your chosen Approved Payment Method, to maintain accurate account balance records, and to manage any payment disputes or chargebacks.
- Identity Verification and Anti-Money Laundering (Legal Obligation): KYC identity data is processed to verify your age (18+ requirement), confirm your identity, and comply with anti-money laundering and counter-terrorism financing obligations. This processing is mandatory; failure to provide the required data will prevent withdrawal of funds.
- Responsible Gaming Monitoring (Legitimate Interest / Legal Obligation): Gaming activity data is analysed to identify patterns that may indicate problem gambling behaviour, to enforce self-exclusion requests, and to apply deposit limits or time-out restrictions where requested or required.
- Platform Security and Fraud Prevention (Legitimate Interest): Technical data including IP addresses, device identifiers, and session logs are used to detect and prevent fraudulent account activity, collusion, bot usage, and unauthorised access attempts.
- Customer Support (Contractual Necessity): Communication data is retained to handle support queries, resolve disputes, and maintain accurate records of the resolution history of each case.
- Service Improvement and Analytics (Legitimate Interest): Aggregated, anonymised gaming activity and technical data are used to improve platform performance, identify popular game categories, and optimise the user experience for Bangladeshi players. This analytics processing does not involve individual profiling for marketing purposes.
- Promotional Communications (Consent): Where you have explicitly opted in to marketing communications, we may send you promotional emails or platform notifications about bonuses, seasonal offers (such as Eid promotions or BPL cricket specials), and platform updates. You may withdraw consent and unsubscribe at any time.
No Automated Decision-Making: fbajr does not make legally significant decisions about players solely through automated processing without human review. Account closures and bonus-abuse determinations are reviewed by a member of the compliance team before action is taken.
// Section 04
Data Sharing & Third Parties
fbajr does not sell or rent your personal data to any third party. We share data only in the limited, specific circumstances described below, and only with parties who are contractually obligated to handle your data with the same level of care and security that fbajr applies internally.
- Game Providers: When you launch a game supplied by a third-party provider (such as Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, or Spribe), the provider receives a session token and your player account identifier. Game providers do not receive your full name, email address, payment details, or national ID. They use the session token solely to authenticate your game session and return results to fbajr's platform.
- Payment Partners: Your payment transaction data is shared with the payment gateway or mobile financial service provider you select (bKash, Nagad, Rocket, Upay, or a partner bank) to the extent necessary to complete the transaction. fbajr does not store your full payment credentials; the payment provider processes the transaction on their own secure infrastructure.
- Identity Verification Services: During KYC, your identity documents may be processed by a regulated third-party identity verification service provider. These providers are bound by strict data processing agreements and use the documents only for verification purposes.
- Legal and Regulatory Authorities: fbajr will disclose personal data to law enforcement, regulatory bodies, or courts where required to do so by applicable law, a valid court order, or a binding regulatory instruction. In such cases, we disclose only the minimum data required to satisfy the legal obligation.
- Professional Advisers: Lawyers, auditors, and other professional advisers engaged by fbajr may access personal data on a need-to-know basis, subject to professional confidentiality obligations.
- Business Transfers: In the event of a merger, acquisition, or sale of all or part of fbajr's business assets, player data may be transferred to the acquiring entity. Players will be notified of any such transfer and the privacy terms applicable to their data under the new entity.
No Cross-Border Transfers Without Safeguards: Where personal data is transferred to a service provider located outside Bangladesh, fbajr ensures that appropriate contractual safeguards (such as standard data protection clauses) are in place to protect your data to a standard equivalent to that applied within Bangladesh.
// Section 05
Data Retention & Storage
fbajr retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following retention schedule applies to the main categories of data we hold. After the applicable retention period, data is securely deleted or irreversibly anonymised.
| Data Category | Retention Period | Rationale |
|---|---|---|
| Account & Identity Data | Duration of account + 5 years after closure | Anti-money laundering and KYC compliance obligations. |
| Transaction Records | 7 years from transaction date | Financial record-keeping and audit requirements. |
| Gaming Activity Logs | 5 years from date of activity | Dispute resolution, fair play auditing, and responsible gaming monitoring. |
| Support Communications | 3 years from last interaction | Quality assurance, dispute resolution, and legal claims. |
| Technical / Log Data | 90 days from collection | Security monitoring and fraud detection. Rolling deletion after 90 days. |
| Analytics Data | 24 months, then anonymised | Platform performance improvement. Anonymised aggregates retained indefinitely. |
When an account is closed at the player's request, fbajr will cease active processing of the player's personal data for marketing or gaming-experience purposes immediately. However, the platform is legally required to retain identity, transaction, and gaming activity records for the periods stated above, even after account closure, to satisfy anti-money laundering, fraud prevention, and financial audit obligations.
Data Storage Location: fbajr's primary data storage infrastructure is hosted on secure servers. All servers handling player data employ full-disk encryption, access controls restricted to authorised personnel only, and regular independent security audits. Backups are encrypted and stored in geographically separated locations to ensure business continuity.
// Section 06
Your Privacy Rights
As a player registered on fbajr, you hold a set of rights with respect to the personal data we hold about you. fbajr is committed to honouring these rights promptly and without unnecessary obstacles. To exercise any of the rights listed below, contact our support team at support at fbajr.net with the subject line "Data Rights Request" and your registered account username. We will respond within 30 calendar days.
Request a copy of all personal data fbajr holds about you, including the categories of data, purposes of processing, and any third parties with whom it has been shared.
Request correction of any inaccurate or incomplete personal data. For basic contact data, you can update this directly through your account settings without contacting support.
Request deletion of your personal data where it is no longer necessary for the purpose it was collected, subject to legal retention obligations that may prevent immediate deletion.
Request that fbajr restricts processing of your data while a dispute about accuracy or lawfulness is being resolved, rather than deleting it outright.
Request a structured, machine-readable export of the data you have provided to fbajr (such as account information and transaction history) in a portable format.
Object to processing of your personal data carried out on the basis of legitimate interest, including any profiling for service improvement. We will cease such processing unless we can demonstrate compelling legitimate grounds.
Marketing Opt-Out: If you previously consented to receiving promotional communications from fbajr and wish to withdraw that consent, you may do so at any time by clicking the unsubscribe link in any marketing email or by contacting support at fbajr.net. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
// Section 07
Data Security Measures
fbajr implements a layered security architecture to protect player data from unauthorised access, accidental loss, destruction, or disclosure. Our security programme is reviewed and updated on a regular basis in response to the evolving threat landscape. Key security measures currently in place include the following:
- Transport Layer Security: All data transmitted between your browser or device and fbajr's servers is encrypted using TLS 1.3, the current industry-standard protocol for secure web communications. Connections using older, insecure protocols (TLS 1.0, TLS 1.1, SSL) are rejected.
- Data Encryption at Rest: Personal data stored in fbajr's databases is encrypted using AES-256, a symmetric encryption standard used by financial institutions and government agencies worldwide. Encryption keys are managed separately from the encrypted data.
- Access Controls: Access to systems containing personal data is restricted to fbajr staff and contractors who have a documented need for access in the performance of their roles. All access is authenticated using multi-factor authentication and is logged for audit purposes. Access privileges are reviewed quarterly and revoked immediately upon termination of employment or contract.
- Password Security: Player account passwords are stored as salted cryptographic hashes, never as plain text. Even in the event of a database breach, stored password hashes cannot be used to directly authenticate as a player without additional computational attack.
- Vulnerability Management: fbajr conducts regular vulnerability assessments and periodic independent penetration tests of its platform infrastructure. Critical vulnerabilities are remediated within 48 hours of discovery; high-severity issues within 7 days.
- Incident Response: fbajr maintains a documented data breach response plan. In the event of a personal data breach that poses a risk to affected players, fbajr will notify affected individuals without undue delay and no later than 72 hours after becoming aware of the breach, providing details of the nature of the breach, the data affected, and the steps taken to mitigate harm.
Your Role in Security: While fbajr takes extensive technical measures to protect your data, the security of your account also depends on you using a strong, unique password and keeping your login credentials confidential. If you suspect your account has been compromised, change your password immediately and contact support at fbajr.net. fbajr support staff will never ask you for your password via email, chat, or phone.
// Section 08
Policy Updates & Contact
fbajr reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform functionality. When we make material changes to this Policy, we will notify registered players by email to the address associated with their account and by displaying a prominent notice on the fbajr platform for a period of at least 14 days prior to the changes taking effect.
The "Effective" date shown at the top of this page and in the page header badges always reflects the date on which the current version came into force. We encourage you to review this Policy periodically to stay informed about how fbajr protects your personal information. Your continued use of the platform after the effective date of any update constitutes your acknowledgement of the revised Policy.
Previous versions of this Privacy Policy are retained in our records and can be provided upon request by contacting support at fbajr.net with the subject line "Previous Privacy Policy Version".
Contact for Privacy Matters: For any questions, concerns, or requests relating to this Privacy Policy or the personal data fbajr holds about you, please contact our support team. Email: support at fbajr.net (plain text only — this address is not a clickable link). Our team will acknowledge receipt of your query within 2 business days and provide a substantive response within 30 calendar days.
Last updated: 1 January 2026 | Version 2.4 | Applies to: https://fbajr.net and all associated services | Contact: support at fbajr.net
Explore fbajr Responsibly
Now that you understand how fbajr handles your data, dive into our games with confidence. Visit our FAQ for common questions, or review our Responsible Gaming page to learn about the tools available to help you stay in control.