Mbaje Privacy Policy — Your Complete Guide to Data Protection

Welcome to mbaje. This Privacy Policy explains how we collect, use, and protect your personal information. By using the mbaje website or mobile app, you agree to this Privacy Policy.

We believe you should have full control over your own data. That's why we're always transparent about what information is collected and why. mbaje's Privacy Policy is built in accordance with international data protection standards.

This policy applies solely to mbaje's core platform. Third-party links or services are governed by their own respective privacy policies.

Mbaje collects various types of data, but only what is strictly necessary to provide our services. Details are outlined below:

Mbaje only collects data that serves a specific purpose — nothing more. Here's a detailed breakdown:

• Account Management: Identity information is used to create, secure, and manage your account.
• Payment Processing: Financial information is used to process deposits and send withdrawals.
• Service Improvements: We analyse how you use the platform to continually improve your experience.
• Security Assurance: Device and location data is used to detect and prevent fraud, hacking, and unauthorized access.
• Legal Obligation: Certain data must be retained to comply with KYC verification and anti-money laundering regulations.
• Contact: Your contact details are used to send you important updates, security alerts, and offers.
• Personalisation: Your usage data is analysed to show you content and offers relevant to your preferences.

We only use your data for the purpose it was collected. You will be notified before it is used for any new purpose.

Mbaje does not sell your personal data to any advertisers or data brokers. However, in certain limited circumstances, information may be shared with third parties:

• Payment Provider: Only the data necessary to process transactions is shared with bKash, Nagad, or Rocket.
• KYC Verification Partner: Documents may be shared with authorised institutions for identity verification purposes.
• Legal Authorities: We may be required to disclose data to relevant authorities in compliance with court orders or legal obligations under Bangladeshi law.
• Technology Service Providers: Data is shared with cloud storage and server management providers, all of whom are bound by strict confidentiality agreements.

The mbaje website and app use cookies and similar technologies. Cookies are small text files stored on your device that help enhance your experience.

• Essential Cookies: Used for login sessions, language preferences, and security — these cannot be disabled as they are essential for the platform to function.
• Performance Cookies: Helps us understand which pages get the most traffic and where issues arise. All data is fully anonymised.
• Functionality Cookies: To remember your preferences — such as display settings and favourite game categories.
• Analytics Cookies: Used to review platform usage and drive improvements. You can opt out of these at any time.

You can manage cookies through your browser settings. Please note that disabling essential cookies may affect the functionality of certain platform features.

Mbaje retains your data only for as long as necessary. Retention periods depend on the type of data and applicable legal requirements.

• Account Information: For the duration of the account and up to 5 years after closure.
• Transaction Information: Retained for up to 7 years in accordance with financial regulatory requirements.
• KYC Documents: Up to 5 years after account closure.
• Log Files: Up to 12 months for security purposes.
• Marketing Information: Until you withdraw your consent.

Once the retention period expires, data is securely deleted or anonymized so you can no longer be identified.

As an mbaje user, you have several important rights over your personal data:

To exercise these rights support@mbaje.click. We will respond to your request within 30 days of receipt.

Mbaje's services are strictly for users aged 18 and above. We do not knowingly collect data from anyone under 18.

If we become aware that data has been collected from a minor, it will be deleted immediately and the associated account will be closed. If you believe a minor is using our platform, please support@mbaje.clickto let us know.

Mbaje uses industry-leading security measures to protect your data. Our security team operates 24/7 and responds immediately to any suspicious activity.

• All data transmission is secured with 256-bit TLS encryption.
• Sensitive data is stored in the database using AES-256 encryption.
• Regular third-party penetration testing is conducted.
• Two-factor authentication (2FA) is available and actively encouraged.
• Access logs are reviewed on a regular basis.
• Staff may only access personal data when required for their specific job responsibilities.

We may update this Privacy Policy from time to time. When changes are made:

• The "Last Updated" date at the top of this page will reflect any changes.
• For significant changes, you will be notified via email or in-app notification.
• Continued use of the platform after any changes constitutes acceptance of the updated policy.

We recommend revisiting this page from time to time to stay up to date with our latest policy.

For any questions, concerns, or requests regarding this Privacy Policy, please reach out to our dedicated Privacy Team:

• Email: support@mbaje.click (Subject: Privacy Request)
• Live Chat: Via the platform's chat widget
• Response Time: Within 48 hours