obaje Privacy Policy
At obaje, your privacy is not an afterthought — it is a core part of how we operate. This Privacy Policy sets out exactly what personal data we collect from players in Bangladesh, why we collect it, how we use and store it, and what rights you have over your information. We are committed to handling your data with the highest standards of care, security, and transparency. By using obaje.vip, you acknowledge and agree to the practices described in this document.
Our Privacy Commitments
Six principles that define how obaje treats your personal information at every stage of your journey on the platform.
End-to-End SSL Encryption
All data transmitted between your browser and obaje.vip is protected by industry-standard SSL/TLS encryption. Your login credentials, payment details, and personal information are encrypted in transit at all times.
Purpose-Limited Collection
obaje collects only the personal data that is strictly necessary for account registration, identity verification, payment processing, and regulatory compliance. We do not collect data for its own sake.
No Sale of Personal Data
obaje does not sell, rent, or trade your personal data to third-party marketers, data brokers, or advertisers. Your information is used solely to operate and improve your experience on the platform.
Secure Payment Data Handling
Payment details processed via bKash, Nagad, Rocket, Upay, and partner banks are handled exclusively by certified payment processors. obaje does not store full card or mobile banking credentials on its own servers.
Transparent Data Practices
This Privacy Policy is written in plain English so every player in Bangladesh can understand exactly what data we hold and why. We update this document whenever our practices change and notify registered players of material changes.
Player Rights Respected
You have the right to access, correct, and request deletion of your personal data held by obaje. Requests are processed within a reasonable timeframe and at no cost to you. Contact us at [email protected] to exercise your rights.
1. Data We Collect
When you interact with obaje — whether by browsing the site, registering an account, making a deposit, playing a game, or contacting our support team — we may collect the following categories of personal data:
Identity & Contact Data: When you register an account on obaje, we collect your full legal name, date of birth, residential address, email address, and mobile phone number. This information is required to create your account, verify your identity, and communicate with you about your account and transactions.
Identity Verification Documents: As part of our Know Your Customer (KYC) process, we may collect copies of government-issued identity documents. Acceptable documents include your National Identity Card (NID), Bangladesh passport, and driving licence. We may also collect address verification documents such as a recent utility bill or a bank statement from a Bangladeshi bank. These documents are processed securely and retained only for the period required by applicable compliance obligations.
Financial Data: When you make a deposit or request a withdrawal via bKash, Nagad, Rocket, Upay, or a Bangladesh bank transfer, we collect transaction reference numbers, the mobile number or bank account number associated with the transaction, and transaction amounts and timestamps. We do not store full payment credentials such as full mobile banking PINs or complete bank account numbers on our own servers — these are processed directly by our certified payment partners.
Account & Gaming Activity Data: We maintain a record of your account activity on obaje, including login timestamps and IP addresses, games played and bet amounts, game outcomes and winnings, bonus claims and wagering progress, and any self-exclusion or responsible gaming settings you apply to your account. This data is used to operate the platform, detect fraud, enforce our Terms & Conditions, and improve the player experience.
Technical & Device Data: When you visit obaje.vip, our servers automatically log certain technical data including your IP address, browser type and version, operating system, device type, screen resolution, referring URL, pages visited, and session duration. This data helps us optimise the platform for different devices and diagnose technical issues.
Communications Data: If you contact obaje via email, live chat, or any other support channel, we retain a record of that correspondence, including any personal information you share in the course of the communication. This enables us to provide continuity of service and reference previous interactions when assisting you.
Cookies & Tracking Data: obaje uses cookies and similar tracking technologies to personalise your experience, remember your preferences, and analyse platform usage. Full details are provided in Section 4 of this Privacy Policy.
- Full name & date of birth
- Residential address (Bangladesh)
- Email & mobile number
- NID / passport / driving licence
- bKash, Nagad, Rocket transaction refs
- Login history & IP addresses
- Game play & betting history
- Device & browser metadata
- Support correspondence records
2. How We Use Your Data
obaje processes your personal data for the following specific purposes. For each purpose, we rely on one of the lawful bases set out in applicable data protection standards:
Account Registration & Management: We use your identity and contact data to create and maintain your obaje account, authenticate your identity at login, communicate with you about account activity, and process your requests such as password resets, contact detail updates, and account closure. This processing is necessary for the performance of our contract with you.
Identity Verification (KYC): We use your identity documents and personal details to verify that you meet our eligibility requirements — in particular that you are 18 years of age or older and that you are the person you claim to be. KYC verification is a legal and operational necessity for a platform of obaje's nature and is required before withdrawals are processed.
Payment Processing: We use your financial data to process deposits and withdrawals via bKash, Nagad, Rocket, Upay, and Bangladesh bank partners; to match withdrawal requests with the deposit payment method on file; and to investigate and resolve any payment disputes.
Game & Platform Operation: We use your gaming activity data to deliver the games and betting markets you request; to calculate and credit winnings; to apply bonus awards and track wagering progress; and to enforce game rules and the terms of any active promotion.
Fraud Prevention & Security: We use technical data, account activity data, and device information to detect and prevent fraudulent activity including multi-accounting, payment fraud, collusion, and automated play. Suspicious activity may be escalated internally or referred to relevant authorities in accordance with our legal obligations.
Responsible Gaming: We use your gaming activity data to monitor for behavioural indicators of problem gambling — such as rapidly increasing bet sizes, extended uninterrupted play sessions, or repeated failed withdrawal requests. Where such indicators are present, our responsible gaming team may reach out proactively. We also use this data to apply and enforce any self-exclusion or account limit settings you have configured.
Platform Improvement & Analytics: We use aggregated and anonymised technical and activity data to understand how players use obaje, identify performance bottlenecks, and guide product development. Wherever possible, analytics processing uses data that cannot be linked back to an individual player.
Legal & Regulatory Compliance: We may process your personal data to meet obligations imposed by applicable law, including record-keeping requirements, anti-money laundering (AML) reporting obligations, and the production of data in response to lawful requests from competent authorities.
Marketing Communications: If you have opted in to receive marketing communications from obaje, we may use your email address or mobile number to send you information about promotions, new games, and seasonal offers relevant to your interests. You may withdraw your consent to marketing communications at any time by contacting our support team or using the unsubscribe link in any marketing email.
- Contract performance — account operation, payments, game delivery
- Legal obligation — KYC, AML, regulatory reporting
- Legitimate interests — fraud prevention, security, analytics
- Consent — marketing emails & promotional SMS
3. Data Sharing & Disclosure
obaje does not sell your personal data. We share your information only in the limited circumstances described below, and only to the extent necessary for the stated purpose.
Payment Service Providers: To process your deposits and withdrawals, we share relevant transaction data with our payment partners including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, and Sonali Bank. These partners process your payment data in accordance with their own privacy policies and applicable financial services regulations.
Identity Verification Partners: We may share your identity document information with third-party KYC and identity verification service providers for the purpose of verifying your identity and age. These partners are contractually bound to process your data only for the stated verification purpose and to maintain appropriate security standards.
Game Technology Providers: Games on the obaje platform are supplied by third-party game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. To deliver these games to your session, certain technical and account-level data (such as your player session token and stake amounts) may be passed to the game provider's systems. Game providers do not receive your full identity or payment details.
IT Infrastructure & Hosting Providers: obaje's platform is hosted on professional server infrastructure. Our hosting and infrastructure partners may have limited access to platform data as part of their service delivery. All such partners are subject to strict confidentiality obligations and data processing agreements.
Legal & Regulatory Authorities: obaje may disclose your personal data to law enforcement agencies, financial intelligence units, or other competent government bodies where we are legally required to do so — for example, in response to a court order, a regulatory investigation, or our AML reporting obligations. We will only make such disclosures to the minimum extent required and, where permitted by law, will notify you that a disclosure has been made.
Business Transfers: In the event that obaje undergoes a merger, acquisition, or transfer of substantially all of its assets, your personal data may be transferred to the successor entity as part of that transaction. You will be notified of any such transfer and any change in the privacy practices applicable to your data.
What We Do Not Do: obaje does not share your personal data with third-party advertisers or data brokers. We do not share your data for profiling by external marketing platforms. We do not share your gaming history with your employer, family members, or any other private individual.
- bKash, Nagad, Rocket, Upay
- Dutch-Bangla, City, BRAC, Islami, Sonali Bank
- KYC verification partners
- Game studios (session tokens only)
- Hosting & infrastructure providers
- Legal & regulatory authorities (when required)
5. Data Retention
obaje retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply to the main categories of data we hold:
Active Account Data: Identity, contact, and account settings data is retained for the full duration that your obaje account remains active. You may request account closure at any time by contacting our support team.
KYC & Identity Verification Records: Copies of identity documents submitted for KYC verification are retained for a minimum of five years following account closure or the date of your last transaction, whichever is later. This retention period reflects our obligations under applicable anti-money laundering standards.
Transaction & Financial Records: Records of all deposits, withdrawals, and in-game transactions are retained for a minimum of five years from the date of the transaction. These records may be required to resolve disputes, conduct audits, or respond to regulatory enquiries.
Gaming Activity Logs: Detailed game logs including bet amounts, outcomes, and session timestamps are retained for a minimum of two years. Aggregated and anonymised game statistics may be retained indefinitely for product improvement purposes.
Support Correspondence: Records of customer support interactions are retained for two years from the date of the most recent communication in a given thread, or until the underlying matter is fully resolved, whichever is later.
Technical & Server Logs: Server access logs containing IP addresses and session metadata are retained for up to 90 days for security monitoring purposes, after which they are automatically deleted or anonymised.
Self-Exclusion Records: Where a player has self-excluded from obaje, a record of that self-exclusion is retained indefinitely. This is necessary to prevent self-excluded players from re-registering and to protect their wellbeing.
At the end of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with an individual player. Where data cannot be immediately deleted due to backup or archiving schedules, it will be isolated from active processing and deleted at the earliest practicable opportunity.
- Account & identity data: Duration of account + 5 years
- KYC documents: Min. 5 years post-closure
- Transaction records: Min. 5 years
- Game logs: Min. 2 years
- Support records: 2 years
- Server logs: Up to 90 days
- Self-exclusion records: Indefinite
6. Data Security
obaje takes the security of your personal data seriously and implements a range of technical and organisational measures designed to protect your information against unauthorised access, loss, alteration, or disclosure. These measures include:
- SSL/TLS Encryption: All data in transit between your browser and obaje.vip is encrypted using industry-standard SSL/TLS protocols. Look for the padlock icon in your browser's address bar to confirm you are connected securely.
- Encrypted Data at Rest: Sensitive personal data stored in our databases — including identity documents and financial records — is encrypted at rest using strong encryption standards.
- Access Controls: Access to personal data held by obaje is restricted to members of staff and technology partners who have a specific operational need to access it. All access is logged and aud ited.
- Password Security: Player account passwords are stored using one-way cryptographic hashing. obaje staff cannot view your password in plain text. If you forget your password, it must be reset — it cannot be retrieved.
- Two-Factor Authentication: obaje supports additional account security measures to help protect your account from unauthorised access. We recommend all players enable available security options from within their account settings.
- Fraud Detection Systems: obaje operates automated fraud detection systems that continuously monitor account activity for indicators of unauthorised access, account takeover attempts, and suspicious transaction patterns.
- Regular Security Reviews: Our platform and data handling practices are subject to regular internal security reviews. Where vulnerabilities are identified, they are remediated promptly.
- Staff Training: All obaje staff who handle personal data receive training on data protection obligations and security best practices. Confidentiality obligations are embedded in employment agreements.
Data Breach Response: In the event of a personal data breach that poses a risk to affected players, obaje will take immediate steps to contain the breach, assess its scope, and notify affected players without undue delay. We will also notify relevant authorities as required by applicable law. Notifications will include a description of the nature of the breach, the categories of data affected, and the steps we have taken or are taking to address it.
Your Role in Security: While obaje takes all reasonable steps to protect your data, you also play an important role in keeping your account secure. We strongly recommend that you use a strong, unique password for your obaje account; never share your login credentials with another person; log out of your account when using a shared or public device; and contact our support team immediately at [email protected] if you suspect your account has been accessed without your authorisation.
- Use a strong, unique password
- Never share your login details
- Enable all available security options
- Log out on shared devices
- Report suspicious activity immediately
7. Your Privacy Rights
As a player on the obaje platform, you have the following rights in relation to your personal data. To exercise any of these rights, contact our support team at [email protected]. We will respond to all privacy rights requests within a reasonable timeframe and at no charge to you.
Right of Access: You have the right to request a copy of the personal data that obaje holds about you. Upon receiving a verified access request, we will provide you with a summary of your data in a clear and readable format, including the categories of data held, the purposes for which it is processed, and the recipients to whom it has been disclosed.
Right to Rectification: If any personal data that obaje holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update many of your account details directly by contacting our support team. For identity documents, corrections must be supported by appropriate documentary evidence.
Right to Erasure: You have the right to request that obaje delete your personal data in certain circumstances — for example, where the data is no longer necessary for the purposes for which it was collected, or where you withdraw your consent and there is no other lawful basis for processing. Please note that we may be unable to fulfil erasure requests where retention is required by legal or regulatory obligations — for instance, our obligation to retain KYC and financial records for a minimum of five years.
Right to Restrict Processing: In certain circumstances, you have the right to request that obaje restricts the processing of your personal data — for example, while the accuracy of data you have disputed is being verified. Where processing is restricted, we will continue to store your data but will not actively process it for other purposes until the restriction is lifted.
Right to Data Portability: Where we process your personal data on the basis of your consent or for the performance of a contract, you have the right to receive a copy of that data in a structured, commonly used, machine-readable format. This right applies to data that you have provided directly to obaje, such as your account registration details.
Right to Object: You have the right to object to processing of your personal data that is carried out on the basis of obaje's legitimate interests — for example, analytical processing or certain security monitoring activities. Where you raise an objection, obaje will review whether its legitimate interests override your privacy interests in the specific circumstances.
Right to Withdraw Consent: Where obaje processes your data on the basis of your consent — in particular, for marketing communications — you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that took place before the withdrawal.
How to Exercise Your Rights: Send your request to [email protected] with the subject line "Privacy Rights Request" and include your full name and the email address registered to your obaje account. We may ask you to verify your identity before processing the request. We aim to respond to all requests within 30 days.
- Access — see what data we hold
- Rectification — correct inaccurate data
- Erasure — request deletion where applicable
- Restriction — limit how we use your data
- Portability — receive your data in a portable format
- Object — challenge legitimate interest processing
- Withdraw consent — opt out of marketing
8. Policy Updates & Contact
Changes to This Privacy Policy: obaje may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or the services we offer. When we make material changes to this Policy, we will notify registered players by email and/or by displaying a prominent notice on obaje.vip. The date of the most recent update is indicated at the top of this page.
We encourage you to review this Privacy Policy periodically. Your continued use of the obaje platform after any changes have been notified to you constitutes your acceptance of the updated Privacy Policy. If you do not agree with any changes, you should contact us to discuss your options, which may include account closure.
Children and Minors: obaje is strictly an adults-only platform. We do not knowingly collect personal data from individuals under the age of 18. If you are under 18, you must not attempt to register an account or use obaje in any way. If we become aware that we have inadvertently collected data from a minor, we will delete that data immediately and close any associated account. If you believe that a minor has registered on obaje, please notify us at [email protected] immediately.
International Data Transfers: obaje serves players across Bangladesh. Some of our technology partners and service providers may be located outside Bangladesh. Where personal data is transferred internationally, we ensure that appropriate safeguards are in place — including contractual data protection clauses — to protect your data to a standard equivalent to that described in this Privacy Policy.
Links to Third-Party Sites: obaje.vip may contain links to third-party websites or services — for example, game provider documentation or payment partner help pages. obaje is not responsible for the privacy practices of these third-party sites. We recommend that you review the privacy policy of any external site you visit.
Contact Us: If you have any questions about this Privacy Policy, how obaje handles your personal data, or wish to exercise a privacy right, please contact our support team. We are committed to responding to all privacy-related enquiries promptly and transparently.
Contact: [email protected] — Privacy Rights Requests, Data Protection Enquiries, Marketing Opt-Outs.
obaje support is available 24 hours a day, 7 days a week, 365 days a year to assist players across Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, Cox's Bazar, and throughout Bangladesh.
[email protected]
Subject line: "Privacy Rights Request" for data access, correction, or deletion requests. We respond within 30 days.
Explore obaje — Play with Confidence
Now that you understand how obaje protects your personal data, you are ready to enjoy the platform with full confidence. Browse our cricket markets, spin the latest slots, or join a live Teen Patti table — all in BDT, all secured by SSL encryption. 18+ only. Play responsibly.