Privacy Policy

1. Introduction & Scope

This Privacy Policy applies to all personal data collected, processed, and stored by solbaji (hereinafter referred to as "the Platform", "we", "us", or "our") in connection with the use of the solbaji website, mobile-optimised interface, and any associated services made available to members and visitors.

By registering an account, making a deposit, placing a wager, or simply browsing the Platform, you acknowledge that you have read and understood this Privacy Policy. Where your continued use of the Platform constitutes consent to any particular processing activity, we will make that clear at the relevant point of data collection.

This Policy should be read alongside our Terms & Conditions and Responsible Gaming Policy, both of which are available on this website. In the event of any conflict between this Privacy Policy and any other document on the Platform regarding data handling, this Privacy Policy shall prevail.

2. Data We Collect

solbaji collects personal data in three broad categories: data you provide directly, data generated automatically by your use of the Platform, and data received from trusted third-party partners where this is necessary to deliver our services.

2.1 Data You Provide Directly

• Registration data: Full legal name, date of birth, residential address (including division, district, and upazila within Bangladesh), email address, and mobile phone number.
• Identity verification (KYC) documents: National Identity Card (NID), passport, driving licence, or other government-issued photo ID; proof of residential address (utility bill, bank statement, or similar document issued within the past three months).
• Financial data: Your registered bKash, Nagad, Rocket, Upay, or SureCash mobile wallet number; USDT wallet address (TRC-20); deposit and withdrawal transaction records.
• Communications data: Content of messages sent to our support team via live chat, email, or any other contact channel, together with timestamps and support ticket reference numbers.
• Preference data: Game preferences, chosen deposit method, promotional preferences, and responsible gaming settings such as deposit limits or self-exclusion elections.

2.2 Data Collected Automatically

• Device and technical data: IP address, browser type and version, operating system, device type (mobile, tablet, desktop), screen resolution, and time zone (Bangladesh Standard Time, UTC+6).
• Usage data: Pages visited, game sessions initiated (title, provider, duration, stake amounts, outcomes), navigation paths, search queries made within the Platform, and session duration.
• Transaction logs: Automated records of all deposits, withdrawals, bonus claims, wager placements, and account balance changes, retained for audit and fraud-prevention purposes.
• Cookie and tracking data: Please refer to Section 6 (Cookies & Tracking Technologies) for full details.

2.3 Data Received from Third Parties

• Payment confirmation data: Transaction reference numbers and status confirmations received from bKash, Nagad, Rocket, Upay, SureCash, and USDT network providers to reconcile your deposit and withdrawal records.
• Identity verification responses: Confirmation of document authenticity and identity match status from any third-party KYC verification service we may engage.
• Fraud and risk signals: Risk scores or watchlist match indicators from anti-money laundering (AML) screening providers used to comply with our legal obligations.

3. How We Use Your Data

We use the personal data described above for the following specific purposes. Where a purpose relies on your consent, you may withdraw that consent at any time by contacting our support team, without affecting the lawfulness of processing carried out prior to withdrawal.

4. Legal Basis for Processing

Every data processing activity carried out by solbaji rests on one or more of the following legal bases:

• Contract performance: Processing is necessary to fulfil the contractual obligations between you and solbaji under our Terms & Conditions — for example, operating your account, processing transactions, and delivering the gaming services you have requested.
• Legal obligation: Processing is required for solbaji to comply with applicable laws and regulations, including anti-money laundering obligations, age verification requirements, and any lawful requests from competent authorities.
• Legitimate interests: Processing is necessary to pursue the legitimate business interests of solbaji, including fraud prevention, platform security, product improvement, and responsible gaming interventions — provided these interests are not overridden by your own privacy rights.
• Consent: Where processing is not covered by the above bases — most notably in the context of direct marketing communications and non-essential cookies — we will ask for your explicit consent before processing begins. You may withdraw consent at any time.

5. Data Sharing & Third Parties

solbaji does not sell, rent, or exchange your personal data with third parties for their own commercial purposes. We share personal data only in the limited circumstances described below, and only to the extent strictly necessary for each purpose.

5.1 Payment Processing Partners

To process your deposits and withdrawals, we share the minimum necessary financial and identity data with your chosen payment provider — bKash, Nagad, Rocket, Upay, SureCash, or USDT network infrastructure providers. Each of these partners operates under their own privacy and security standards and is bound by contractual obligations to handle your data lawfully.

5.2 Identity Verification Providers

Where KYC verification is required, we may share your submitted identity documents and personal details with a trusted third-party verification service for the sole purpose of confirming your identity and age. Verification providers are prohibited from using your data for any purpose other than responding to our verification request.

5.3 Anti-Money Laundering and Fraud Prevention Services

We may share certain transaction data and identity information with AML screening and fraud prevention providers to meet our legal obligations and protect the integrity of the Platform. Any such sharing is carried out under strict data processing agreements and in compliance with applicable law.

5.4 Game Content Providers

Game studios and providers whose content is available on solbaji — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — may receive aggregated, anonymised session data (such as game round outcomes and RTP performance metrics) for technical and auditing purposes. These providers do not receive your personally identifiable information.

5.5 Legal and Regulatory Disclosure

We may disclose personal data to law enforcement agencies, courts, regulatory bodies, or other government authorities where we are legally obliged to do so, or where disclosure is necessary to protect the rights, property, or safety of solbaji, our members, or the public. Where permitted by law, we will inform you of any such disclosure.

6. Cookies & Tracking Technologies

solbaji uses cookies and similar tracking technologies (such as pixel tags and local storage objects) to operate the Platform effectively, remember your preferences, analyse usage patterns, and — where you have given consent — deliver personalised content.

6.1 Categories of Cookies We Use

• Strictly necessary cookies: Essential for core Platform functionality such as maintaining your login session, processing transactions, and routing traffic securely. These cannot be disabled without breaking the Platform's basic operation.
• Functional cookies: Remember your preferences such as your chosen language, preferred game categories, deposit method, and responsible gaming settings, so you do not need to re-enter them on each visit.
• Analytical cookies: Help us understand how members use the Platform — which pages are visited most, how long sessions last, and where technical issues occur — so we can improve the user experience. Data collected is aggregated and anonymised wherever possible.
• Marketing and personalisation cookies: Used only with your explicit consent to deliver promotional content and offers relevant to your interests and gaming history. You may withdraw consent at any time through your account settings.

6.2 Managing Cookies

You can control and delete cookies through your browser settings at any time. Please note that disabling strictly necessary cookies will impair your ability to use core Platform features, including logging in and processing transactions. Instructions for managing cookies in popular browsers are available from the browser provider's support pages.

We do not use any cross-site tracking technologies that follow your activity outside of the solbaji Platform.

7. Data Retention

We retain your personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law. The following retention periods apply as a general guide:

• Active account data: Retained for the full duration of your membership, plus a minimum of five (5) years following account closure, to meet AML record-keeping obligations.
• KYC verification documents: Retained for a minimum of five (5) years from the date of verification, as required by applicable anti-money laundering legislation.
• Transaction and wagering records: Retained for a minimum of five (5) years from the date of each transaction, for audit, dispute resolution, and regulatory compliance purposes.
• Support communications: Retained for three (3) years from the date of each interaction, to support dispute resolution and service improvement.
• Marketing consent records: Retained for the duration of your membership and for two (2) years following any withdrawal of consent, as evidence of your election.
• Anonymised analytical data: May be retained indefinitely in fully anonymised form, as it no longer constitutes personal data once de-identified.

Upon expiry of the applicable retention period, your personal data will be securely deleted or irreversibly anonymised. Where deletion is not immediately possible (for example, due to data being held in backup storage), the data will be isolated and protected from further processing until deletion is completed.

8. Data Security Measures

solbaji employs a multi-layered approach to data security, combining technical, organisational, and procedural safeguards to protect your personal data from unauthorised access, accidental loss, disclosure, alteration, or destruction.

8.1 Technical Safeguards

• 256-bit SSL/TLS encryption for all data in transit between your device and our servers
• AES-256 encryption for sensitive data at rest, including KYC document stores and financial records
• Multi-factor authentication requirements for all Platform administrative access
• Automated intrusion detection and prevention systems monitoring network activity around the clock
• Regular independent penetration testing and vulnerability scanning of all public-facing and internal systems
• Strict role-based access controls ensuring that staff can only access personal data necessary for their specific job function

8.2 Organisational Safeguards

• Mandatory data protection training for all staff with access to personal data
• Confidentiality agreements binding all employees, contractors, and third-party service providers
• A documented data breach response procedure with defined escalation timelines and member notification protocols
• Regular internal audits of data processing activities to verify compliance with this Privacy Policy

9. Your Data Rights

As a member or user of solbaji, you hold the following rights with respect to your personal data. To exercise any of these rights, please contact our support team via live chat or by emailing support@solbaji (plain text — not a clickable link). We will respond to all verified requests within thirty (30) calendar days.

• Right of access: You may request a copy of all personal data we hold about you, together with information about how it is being used and on what legal basis.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it without undue delay.
• Right to erasure ("right to be forgotten"): You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where you believe the data has been processed unlawfully. Note that this right is subject to our legal retention obligations — we cannot delete data we are legally required to retain.
• Right to restrict processing: You may ask us to temporarily suspend the processing of your personal data while a rectification or objection request is being considered, or where you have contested the accuracy of the data.
• Right to data portability: Where processing is based on your consent or on contract performance, you may request a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to object: You may object at any time to processing carried out on the basis of our legitimate interests, including profiling for responsible gaming monitoring. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent (such as marketing communications), you may withdraw that consent at any time through your account settings or by contacting support. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

10. International Data Transfers

solbaji is operated primarily to serve the Bangladesh market. The majority of your personal data is processed and stored on servers located in secure data centre facilities. Where it is necessary to transfer personal data to service providers or infrastructure partners located outside Bangladesh — for example, in connection with cloud hosting, game platform integration, or fraud prevention services — we ensure that appropriate safeguards are in place before any such transfer occurs.

Safeguards for international transfers include contractual data processing agreements that impose data protection obligations equivalent to those described in this Privacy Policy, and where relevant, standard contractual clauses or equivalent legal mechanisms recognised under applicable law.

By using the Platform and providing your personal data, you acknowledge that your data may be processed in countries outside Bangladesh. In all cases, solbaji remains responsible for ensuring your data is treated in accordance with this Privacy Policy regardless of where it is processed.

11. Children's Privacy

solbaji is an 18+ platform. We do not knowingly collect personal data from any individual under the age of 18. Our registration process includes age verification steps specifically designed to prevent minors from creating accounts or accessing gambling services.

If we become aware that personal data has been collected from an individual who was under 18 at the time of collection, we will take immediate steps to delete that data and close the associated account. All winnings accrued in an underage account will be forfeited in accordance with our Terms & Conditions.

If you are a parent or guardian and believe your child has registered on solbaji, please contact our support team immediately via live chat so we can investigate and take appropriate action without delay.

12. Policy Updates & Contact

12.1 Updates to This Policy

solbaji reviews this Privacy Policy regularly and reserves the right to update it at any time to reflect changes in our data practices, applicable law, or the services we offer. The date of the most recent revision is displayed at the top of this page and in the effective date metadata.

Where changes are material — meaning they significantly affect how we use your personal data or the rights available to you — we will notify you via your registered email address or through a prominent in-platform notice at least fourteen (14) days before the changes take effect. For minor corrections or clarifications, the updated Policy will be posted on this page without prior notification.

Your continued use of solbaji following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with any changes, you should cease using the Platform and request account closure.

12.2 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way solbaji handles your personal data, please reach our support team via live chat on the Platform, available 24 hours a day, 7 days a week. You may also contact us by email at support@solbaji (plain text — not a clickable link). We are committed to resolving all privacy-related enquiries promptly and transparently.