ubaje Privacy Policy
ubaje is committed to protecting the personal information of every player on our platform. This Privacy Policy explains in plain terms what data we collect, why we collect it, how we use and safeguard it, and the rights you hold as a registered player based in Bangladesh.
How ubaje Protects Your Privacy
End-to-End Encryption
All data transmitted between your device and ubaje's servers is protected by TLS 1.3 encryption. Your login credentials, payment details, and personal profile information are never transmitted in plain text across any network connection.
Minimal Data Collection
ubaje collects only the personal data that is strictly necessary to operate the platform, verify player identity, process payments, and comply with applicable legal obligations. We do not collect or store data that serves no legitimate operational purpose.
No Sale of Personal Data
ubaje does not sell, rent, or trade your personal information to any third-party advertiser, data broker, or marketing company. Your data is used exclusively to operate and improve the ubaje platform and to fulfil legal obligations.
Restricted Internal Access
Access to player personal data within ubaje's organisation is granted on a strict need-to-know basis. Only personnel whose role requires access to specific categories of data — such as the KYC verification team or the fraud prevention team — are authorised to view that data.
Your Right to Erasure
Subject to our legal retention obligations, registered players may request the deletion of their personal data by contacting ubaje's support team. Erasure requests are reviewed within 14 business days. Data linked to unresolved disputes or active regulatory obligations cannot be erased until those obligations are satisfied.
Regular Security Audits
ubaje conducts periodic internal security reviews of its data handling practices, access control configurations, and encryption standards. Any identified vulnerabilities are remediated on a priority basis to ensure the ongoing protection of player data held on our systems.
Information We Collect
Registration Data
When you create an ubaje account, we collect the personal information you provide during the registration process. This includes your full legal name, date of birth, email address, and mobile phone number registered in Bangladesh. This information is used to create and maintain your account, verify your identity, and communicate with you about your account activity.
Identity Verification Data
To comply with our Know Your Customer (KYC) obligations and to process withdrawal requests, ubaje collects identity verification documents from registered players. For Bangladeshi players, this primarily means a clear copy of your National Identity Card (NID). In certain circumstances — for example, where a withdrawal exceeds ৳50,000 or where a security review is in progress — we may additionally request proof of address or documentation relating to your source of funds.
Financial Transaction Data
ubaje records all deposit and withdrawal transactions processed through your account. This includes the transaction amount in BDT, the payment method used (bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, BRAC Bank, or City Bank), the transaction timestamp in Bangladesh Standard Time (BST, UTC+6), and the transaction reference number assigned by your payment provider. Payment instrument credentials — such as your mobile wallet PIN or card number — are never stored by ubaje directly; these are handled by your payment provider's own secure systems.
Technical and Device Data
When you access ubaje through a browser or mobile device, our servers automatically collect certain technical data. This includes your IP address, browser type and version, operating system, device type, screen resolution, and the referring URL from which you arrived at ubaje.app. This data is used for platform security, fraud detection, and aggregate analytics purposes. It is not used to build individual advertising profiles.
Behavioural and Gaming Data
ubaje logs your in-platform activity, including the games you play, the bets you place, the duration of your play sessions, and how you interact with the platform's features. This data is used to operate the platform correctly, to identify indicators of problem gambling behaviour as part of our responsible gaming obligations, to detect fraud or bonus abuse patterns, and to improve the overall player experience on ubaje.
Data Categories at a Glance
| Category | Examples |
|---|---|
| Identity | Name, DOB, NID, email, phone |
| Financial | Transaction history, payment method, BDT amounts |
| Technical | IP address, browser, device type |
| Behavioural | Games played, session duration, betting patterns |
| Communications | Support tickets, chat logs, email correspondence |
How We Use Your Data
Account Operation and Service Delivery
The primary purpose for which ubaje processes your personal data is to operate your account and deliver the services you have registered to use. This includes processing your deposits and withdrawals in BDT, settling your wagers on cricket markets and casino games, applying bonuses and loyalty points to your account, and sending you transactional notifications such as deposit confirmations, withdrawal status updates, and OTP codes for account security.
Identity Verification and Fraud Prevention
ubaje uses your registration data, KYC documents, and transaction records to verify your identity, confirm your age eligibility (18+ requirement), detect and investigate suspicious activity, and prevent fraud, money laundering, and bonus abuse. These activities are a legal and operational necessity for a licensed gambling platform and cannot be opted out of by registered players.
Responsible Gaming Monitoring
ubaje processes your behavioural and gaming data — including session frequency, deposit velocity, and wagering patterns — to identify indicators of potentially harmful gambling behaviour. Where such indicators are detected, our responsible gaming team may contact you proactively to discuss the tools available to you, including deposit limits, cool-off periods, and self-exclusion options. This processing is carried out in the interest of player welfare and is a core obligation of our responsible gaming commitments.
Customer Support
When you contact ubaje's support team via email at [email protected], we record and retain your correspondence — including the content of your message, any attachments you provide, and the resolution outcome — to resolve your query effectively and to maintain a complete record of account-related communications. Support records may be reviewed internally for quality assurance and training purposes.
Platform Improvement and Analytics
ubaje uses aggregated, anonymised analytical data derived from player interactions to improve the platform's performance, identify popular features, prioritise development work, and enhance the overall player experience. This analysis is conducted on aggregate datasets and does not involve individual-level profiling for marketing purposes.
Promotional Communications
With your consent, ubaje may send you promotional communications about new games, seasonal bonuses (such as Eid or Pohela Boishakh promotions), VIP tier upgrades, and platform feature updates. You may withdraw your consent to receive promotional communications at any time by updating your account preferences or by emailing [email protected] with an opt-out request. Withdrawal of consent does not affect the lawfulness of any processing carried out prior to the withdrawal.
Data Sharing & Third Parties
Payment Processing Partners
To process deposits and withdrawals in BDT, ubaje must share limited transaction data with your chosen payment provider — bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, BRAC Bank, or City Bank. The data shared is limited to what is strictly required to initiate and confirm the transaction (for example, the mobile number associated with your bKash wallet or the masked card number for a Visa transaction). ubaje does not share your full KYC documentation with payment providers.
Game Software Providers
ubaje's casino game library is powered by third-party game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. When you launch a game from one of these providers, your account identifier and session token are passed to the game provider's server to enable the game to run and to record the outcome of your wager. Game providers are contractually prohibited from using this data for any purpose other than game delivery and outcome recording.
Legal and Regulatory Disclosure
ubaje may be required to disclose personal data to law enforcement agencies, financial intelligence units, or other competent authorities in response to a lawful request, court order, or regulatory obligation. ubaje will not disclose more information than is strictly required to satisfy the legal obligation and will notify the affected player of any such disclosure where legally permitted to do so.
Business Transfers
In the event that ubaje undergoes a corporate restructuring, merger, acquisition, or sale of assets, player personal data may be transferred to the acquiring entity as part of the transaction. Players will be notified of any such transfer and of any material changes to this Privacy Policy that result from it, with a minimum of 30 days' advance notice where practicable.
No Third-Party Marketing Sharing
ubaje does not share, sell, rent, or otherwise transfer your personal data to any third-party advertiser, affiliate marketing network, or data broker for marketing purposes. Any promotional communications you receive will originate exclusively from ubaje and will relate solely to ubaje's own products and services.
Approved Data Recipients
- Payment Providers — transaction processing only
- Game Studios — session delivery only
- KYC Service — identity verification only
- Cloud Hosting — encrypted server infrastructure
- Legal Authorities — lawful requests only
Cookies & Tracking Technologies
ubaje uses cookies and similar tracking technologies to operate the platform, maintain your login session, remember your preferences, and collect aggregate analytics data. Cookies are small text files stored on your device by your browser. They do not contain executable code and cannot be used to access other files on your device.
Strictly Necessary Cookies
These cookies are essential for the ubaje platform to function. They maintain your authenticated session after login, store your account region setting (Bangladesh / BDT), and protect against cross-site request forgery (CSRF) attacks. Strictly necessary cookies cannot be disabled without breaking core platform functionality. No consent is required for their use as they are technically indispensable.
Functional Cookies
Functional cookies remember your platform preferences between sessions — such as your preferred game view layout, notification settings, and display language (English). These cookies improve your experience by preventing you from having to re-configure your preferences each time you log in. They do not track your behaviour across external websites.
Analytics Cookies
ubaje uses first-party analytics cookies to collect aggregate data about how players navigate the platform — which pages are visited most frequently, where players arrive from, how long sessions last, and which features are used most. This data is anonymised and used solely to guide platform improvement decisions. No individual-level advertising profiles are created from analytics cookie data.
Managing Cookies
You may control cookie storage through your browser settings. Most modern browsers allow you to view, block, or delete cookies on a per-site basis. Please note that disabling strictly necessary cookies will prevent you from logging into your ubaje account and using the platform's core features. Disabling functional or analytics cookies will not affect your ability to log in or place bets.
Cookie Types Used
Strictly Necessary Functional Analytics
Data Security Measures
Encryption in Transit and at Rest
All data transmitted between players and ubaje's servers is encrypted using TLS 1.3, the current industry standard for secure web communications. Sensitive data held in ubaje's databases — including KYC documents, identity records, and financial transaction logs — is encrypted at rest using AES-256 encryption. Encryption keys are stored separately from the encrypted data and are rotated on a scheduled basis.
Access Controls
ubaje enforces strict role-based access controls (RBAC) across all internal systems that hold player data. Access is granted only to personnel whose specific job function requires it, and all access events are logged with a timestamp, user identifier, and the data category accessed. Administrative access to production systems requires multi-factor authentication (MFA). Access privileges are reviewed quarterly and revoked promptly upon a team member's departure from the organisation.
Incident Response
ubaje maintains a documented data breach incident response plan. In the event of a confirmed data breach that poses a risk to the personal data of players, ubaje will assess the scope and severity of the breach within 24 hours of detection, take all necessary steps to contain the breach, and notify affected players by email within 72 hours of confirmed identification. The notification will describe what data was affected, what steps ubaje has taken to address the breach, and what actions affected players should take to protect themselves.
Secure Development Practices
ubaje's platform is built and maintained following secure software development lifecycle (SSDLC) principles. All code changes undergo security review before deployment to the production environment. Dependency libraries are monitored for known vulnerabilities and updated promptly. The platform undergoes periodic third-party penetration testing to identify and remediate security weaknesses before they can be exploited.
Data Retention Policy
ubaje retains personal data only for as long as it is necessary to fulfil the purpose for which it was collected, or for as long as required to comply with applicable legal obligations. The table below summarises the standard retention periods applied to each category of player data.
| Data Category | Retention Period | Reason |
|---|---|---|
| Registration & Identity Data | Duration of account + 5 years post-closure | Legal obligation / AML compliance |
| KYC Documents | Duration of account + 5 years post-closure | Regulatory retention requirement |
| Financial Transaction Records | Duration of account + 7 years post-closure | Financial record-keeping obligation |
| Gaming & Wager Logs | Duration of account + 2 years post-closure | Dispute resolution / audit trail |
| Support Communications | 3 years from last correspondence | Quality assurance / dispute evidence |
| Analytics Data (anonymised) | Up to 36 months (rolling) | Platform improvement |
| Session Cookies | Duration of browser session | Authentication / security |
Data Deletion on Account Closure
When a player closes their ubaje account — whether voluntarily or as a result of platform action — personal data that is no longer required for legal compliance or dispute resolution purposes will be permanently deleted or irreversibly anonymised within 90 days of account closure. Data subject to mandatory retention periods under applicable law will be retained for the required period and then deleted securely at expiry.
Your Privacy Rights
Right of Access
You have the right to request a copy of the personal data that ubaje holds about you. Access requests must be submitted in writing to [email protected] from the email address registered to your account, along with your registered username and a description of the data categories you wish to access. ubaje will respond to access requests within 14 business days.
Right to Rectification
If any personal data held by ubaje is inaccurate or incomplete, you have the right to request that it be corrected or updated. For example, if you have legally changed your name or updated your residential address in Dhaka, Chittagong, Sylhet, or any other city in Bangladesh, you may request that your account records be amended to reflect the change. Supporting documentation may be required to process rectification requests for KYC-linked data fields.
Right to Erasure
You may request the deletion of your personal data where ubaje no longer has a lawful basis to retain it — for example, where you have withdrawn consent to receive promotional communications and no other legal basis applies to that specific data. The right to erasure does not apply to data that ubaje is legally required to retain, such as KYC records and financial transaction logs subject to mandatory retention periods.
Right to Object to Processing
You have the right to object to ubaje processing your personal data for purposes based on legitimate interest — including marketing analytics and non-essential platform improvement activities. Objections must be submitted to [email protected]. ubaje will review the objection and either cease the processing activity or provide a documented explanation of the overriding legitimate grounds that justify its continuation.
How to Exercise Your Rights
To exercise any of the privacy rights described in this section, contact ubaje's support team by email at [email protected]. Please include your registered username, the specific right you wish to exercise, and any supporting information required to process your request. All requests are handled in Bangladesh Standard Time (BST, UTC+6) and will be acknowledged within two business days of receipt.
Summary of Your Rights
- Access — obtain a copy of your data
- Rectification — correct inaccurate records
- Erasure — request deletion where lawful
- Restriction — limit how your data is used
- Objection — object to legitimate-interest processing
- Opt-Out — withdraw consent for marketing at any time
Policy Updates & Contact
Changes to This Privacy Policy
ubaje reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable law, or improvements to our platform's privacy controls. When a material change is made to this Policy, registered players will be notified by email to the address registered on their account at least 14 days before the change takes effect. The updated Policy will also be published at ubaje.app/privacy-policy with the revised effective date clearly displayed at the top of the page.
Continued Use as Acceptance
Your continued use of the ubaje platform after the effective date of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with a material change to this Policy, you have the right to close your account before the change takes effect by contacting [email protected]. Any data already collected under the prior version of this Policy will continue to be processed in accordance with the terms that were in effect at the time of collection.
Contact Details
For any queries, concerns, or requests relating to this Privacy Policy or to ubaje's data processing practices, players may contact the ubaje support team at [email protected]. Please include "Privacy Policy Query" in the subject line and provide your registered username and a clear description of your query. The support team operates in Bangladesh Standard Time (BST, UTC+6) and aims to respond to all privacy-related queries within five business days of receipt.
Play on ubaje With Confidence
Now that you understand how ubaje handles your personal data, you are ready to explore Bangladesh's premier VIP casino and sportsbook. Deposit via bKash or Nagad, bet on live cricket, and spin premium slots — all in BDT and protected by industry-standard encryption. 18+ only. Please gamble responsibly.
18+ Only — Gambling can be addictive. Please gamble responsibly. Terms & Conditions apply.