Privacy Policy — yesbaji

1 Data We Collect

yesbaji collects personal data from you when you register an account, use our services, make deposits or withdrawals, contact our support team, or interact with the platform in any way. The categories of personal data we collect are described below.

Registration & Identity Data

When you create a yesbaji account, we collect your full legal name, date of birth, email address, and mobile phone number. This information is required to create your account, verify your identity, and comply with responsible gaming obligations, including our strict 18+ age restriction policy.

Identity Verification (KYC) Data

As part of our Know Your Customer (KYC) process, we may request copies of government-issued identity documents such as your National Identity Card (NID), passport, or birth certificate. We may also request proof of address documents such as a utility bill or bank statement. These documents are reviewed by our compliance team and stored securely for the minimum period required by our internal compliance policy.

Financial & Transaction Data

yesbaji records all deposit and withdrawal transactions processed through your account, including the payment method used (such as bKash, Nagad, Rocket, Upay, or bank transfer), transaction reference numbers, amounts in Bangladeshi Taka (৳), and timestamps. We do not store full payment card numbers — card transactions are tokenised by our payment processing partners.

Technical & Usage Data

When you access yesbaji, our servers automatically collect certain technical information, including your IP address, browser type and version, operating system, device type, referring URL, pages visited, time spent on pages, and click interactions. This data helps us diagnose technical issues, monitor platform security, and improve the user experience for players across Dhaka, Chittagong, Sylhet, and all other regions of Bangladesh.

Communications Data

If you contact yesbaji via live chat, email at support@yesbaji, or any other channel, we retain a record of that communication, including its content and metadata, for customer service, training, and dispute resolution purposes.

2 How We Use Your Data

yesbaji uses the personal data we collect for specific, legitimate purposes directly related to operating our platform and serving our players in Bangladesh. We do not use your data for any purpose that is incompatible with the purposes described below.

• Account Management: To create and maintain your yesbaji player account, authenticate your identity when you log in, and manage your account preferences and settings.
• Payment Processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, bank transfer, Visa, and Mastercard, and to maintain an accurate record of your transaction history in Bangladeshi Taka (৳).
• Identity & Age Verification: To confirm that you are at least 18 years of age and that your identity details are accurate, in compliance with our 18+ only policy.
• Fraud & Security: To detect, investigate, and prevent fraudulent activity, money laundering, multi-accounting, bonus abuse, and other prohibited conduct on the platform.
• Responsible Gaming: To monitor your gambling behaviour and, where indicators suggest potential harm, to take appropriate steps such as offering deposit limit tools, time-out periods, or self-exclusion. For full details, visit our Responsible Gaming page.
• Customer Support: To respond to your queries, resolve disputes, and provide assistance via live chat and email.
• Platform Improvement: To analyse usage patterns, identify technical issues, and continuously improve the yesbaji experience for players across Bangladesh.
• Marketing Communications (opt-in only): To send you promotional emails or SMS messages about bonuses, offers, BPL cricket betting markets, and seasonal promotions — but only where you have explicitly opted in to receive such communications.
• Legal Compliance: To comply with applicable legal obligations, respond to lawful requests from authorities, and maintain records as required by internal compliance policy.

3 Data Sharing & Disclosure

yesbaji does not sell, rent, or trade your personal data to third parties for commercial or marketing purposes. We may share your data only in the specific and limited circumstances described below.

Payment Processing Partners

To process your deposits and withdrawals, we share the minimum necessary financial data with our payment processing partners, including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, and card processing networks such as Visa and Mastercard. These partners are bound by their own privacy and data security obligations and may not use your data for any purpose other than processing the transaction.

Game Technology Providers

yesbaji integrates games and live casino products from third-party software providers including Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, and Spribe. To deliver these games to your device and maintain fair-play certification, limited technical session data may be shared with these providers. They are prohibited from using this data for any purpose other than service delivery.

Identity Verification Services

Where we use third-party KYC or identity verification technology to assist with document review, the relevant identity data is shared with that provider solely for verification purposes and is handled under strict confidentiality obligations.

Legal & Regulatory Authorities

yesbaji may disclose personal data to law enforcement agencies, regulatory bodies, or other authorities where required to do so by law, court order, or in connection with the investigation of suspected fraud, money laundering, or other illegal activity. We will notify affected players of such disclosures where we are legally permitted to do so.

Business Transfers

In the event of a merger, acquisition, or sale of all or part of yesbaji's business assets, personal data held by yesbaji may be transferred to the acquiring entity. Players will be notified of any such transfer via email and will be given an opportunity to close their account before the transfer takes effect if they do not consent.

4 Cookies & Tracking

yesbaji uses cookies and similar technologies to provide core platform functionality, maintain session security, remember your preferences, and analyse aggregate usage patterns to improve our service. This section explains what cookies we use and why.

What Are Cookies?

Cookies are small text files placed on your device by a website when you visit it. They allow the website to recognise your device on subsequent visits and recall information about your session or preferences. Cookies do not contain executable code and cannot access other files stored on your device.

Types of Cookies We Use

• Strictly Necessary Cookies: These cookies are essential for the platform to function. They maintain your logged-in session, remember your language preference (English), and ensure that security tokens are valid throughout your visit. You cannot opt out of these cookies without stopping your use of the platform.
• Performance & Analytics Cookies: These cookies collect aggregated, anonymised data about how players navigate the yesbaji platform — which pages are visited most, how long sessions last, and where technical errors occur. This data is used internally to improve platform performance and does not identify individual users.
• Functionality Cookies: These cookies remember your account preferences such as notification settings and display choices so that you do not need to reconfigure them on every visit.

Managing Cookies

You may control and delete cookies through your browser settings. Most modern browsers allow you to block all cookies, block only third-party cookies, or delete existing cookies. Please note that disabling strictly necessary cookies will prevent you from logging in to your yesbaji account and using core platform features. For guidance on managing cookies in your specific browser, consult your browser's help documentation.

5 Data Security

yesbaji implements a multi-layered security architecture to protect your personal and financial data from unauthorised access, disclosure, alteration, or destruction. Our security measures are regularly reviewed and updated to address evolving threats.

Technical Security Measures

• All data transmitted between your device and yesbaji is encrypted using TLS 1.3 / 256-bit SSL. The padlock icon in your browser confirms this encryption is active during your session.
• Account passwords are stored using industry-standard one-way hashing. yesbaji staff cannot view your plaintext password at any time.
• Our payment systems are PCI-DSS compliant. Full card numbers are never stored on yesbaji servers — card transactions are tokenised by our payment processing partners.
• All bKash and Nagad transaction data is processed over encrypted API connections with our payment partners' verified endpoints.
• Access to production systems and player data is restricted to authorised yesbaji staff on a strict need-to-know basis, with access logged and audited.

Organisational Security Measures

• All yesbaji staff with access to personal data undergo data privacy and security training before being granted system access.
• Our compliance team conducts periodic internal security reviews and penetration testing exercises.
• A documented incident response procedure is in place to ensure that any data breach is identified, contained, and reported to affected players without undue delay.

6 Data Retention

yesbaji retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, including satisfying any legal, compliance, or reporting obligations.

Active Accounts

While your yesbaji account is active, we retain all account data, transaction records, and communication logs necessary to provide our services to you and to comply with our responsible gaming and anti-money laundering obligations.

Closed or Inactive Accounts

Following voluntary account closure or the permanent suspension of your account, yesbaji retains your core identity data, KYC documents, and transaction records for a minimum period of five years from the date of closure. This retention period is required to satisfy internal compliance policy and to address any potential legal claims, disputes, or regulatory inquiries that may arise after closure.

Communications Data

Live chat transcripts and email communications are retained for a period of three years from the date of the communication. After this period, communications data is permanently deleted from our systems unless it is subject to an ongoing dispute or legal hold.

Marketing Data

If you have opted in to marketing communications from yesbaji, your marketing preferences and the associated contact data are retained until you withdraw your consent. Upon opt-out, your contact details are removed from active marketing lists within 10 business days.

7 Your Privacy Rights

As a yesbaji player, you hold a set of rights with respect to the personal data we hold about you. yesbaji is committed to honouring these rights in a transparent and timely manner.

• Right of Access: You have the right to request a copy of the personal data yesbaji holds about you. We will provide this information in a clear, readable format within 30 days of receiving your verified request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Please contact our support team with the specific details you wish to update.
• Right to Erasure: You may request that yesbaji delete your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where you believe the data has been processed unlawfully. Please note that this right may be limited where yesbaji is required by law or legitimate compliance policy to retain certain data.
• Right to Restrict Processing: In certain circumstances — for example, where you contest the accuracy of your data or object to how it is being used — you may request that yesbaji restrict the processing of your personal data while the matter is under review.
• Right to Data Portability: You may request that yesbaji provide your personal data in a structured, commonly used, machine-readable format so that you can transfer it to another service provider, where technically feasible.
• Right to Object to Marketing: You may withdraw your consent to receive marketing communications from yesbaji at any time, through your account settings or by contacting the support team. Withdrawal of marketing consent does not affect the lawfulness of processing carried out before your withdrawal.
• Right to Close Your Account: You may request closure of your yesbaji account at any time. For responsible gaming-related closures, including self-exclusion, your request will be processed immediately with no cooling-off period. Visit our Responsible Gaming page for details.

8 Policy Updates & Contact

yesbaji reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform services. When material changes are made, registered players will be notified via email or an on-platform notification. The "Effective" date at the top of this page indicates when the current version was last updated.

Your continued use of yesbaji following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. We encourage you to review this page periodically to stay informed of how we are protecting your data.

Contact Our Privacy Team

If you have any questions, concerns, or requests relating to this Privacy Policy or the way yesbaji handles your personal data, please reach out using the contact details below. Our support team is based in Bangladesh Standard Time (BST, UTC+6) and responds to privacy-related email inquiries within 4 hours on average.

• Email: support@yesbaji
• Live Chat: Available 24/7 inside your yesbaji account
• Response Time: Under 90 seconds (live chat) / under 4 hours (email)
• Service Region: Bangladesh — Dhaka, Chittagong, Sylhet, Rajshahi, Khulna, Barisal, Rangpur, Mymensingh, Cox's Bazar