Obajje Privacy Policy — how your information is collected and kept secure

Obajje collects three types of information about you — what you provide directly, what is generated automatically through your use of the service, and what comes via third parties.

Sensitive financial information related to payment gateways (bKash, Nagad) is never stored directly on Obajje's servers. This data remains within the respective payment provider's secure systems, and Obajje only receives a transaction confirmation reference.

Obajje uses your information only for the specific purposes outlined below — it is never used for anything beyond these:

• Account Management: Login verification, password reset, and account security.
• Service Delivery: Processing bets, gaming activity, deposits, and withdrawals.
• Age & identity verification: To prevent access by minors and to guard against money laundering.
• Customer Support: Troubleshooting, complaint resolution, and customer support.
• Service Improvement: Understanding which features are used most and where issues occur, in order to improve the app.
• Security: Detecting and preventing fraud, account hacking, and suspicious activity.
• Legal Obligation: Compliance with license terms, AML regulations, and government directives.
• Personalized Experience: Showing game recommendations and promotions tailored to your preferences.

Obajje may use your information to send you direct marketing messages — but you can opt out at any time. Every marketing email includes an "Unsubscribe" option, or you can contact us at support@obajje.best to stop receiving them.

To protect your data, Obajje employs industry-leading technical and procedural safeguards:

• Encryption: All data transfers are secured with 256-bit TLS/SSL encryption. Sensitive information stored in the database is encrypted using AES-256.
• Password Hashing: Passwords are hashed using the bcrypt algorithm. Your raw password is never stored anywhere.
• Server Security: Obajje servers undergo regular penetration testing, with active firewalls and intrusion detection systems in place.
• Access Controls: Only authorized personnel can access sensitive data. A strict "Need-to-know" policy is enforced.
• Backup: Data is regularly backed up in encrypted form.

Obajje has a clear data retention policy. Data for active accounts is retained for the duration of the account. After an account is closed, financial transaction records may be kept for up to 5 years as required by law. All other data is deleted within 90 days.

Obajje does not sell your data. However, limited information may be shared with trusted third parties where necessary to provide our services:

• Payment Provider: bKash, Nagad, Rocket — used to process transactions. Only transaction reference details are shared.
• Game providers: Pragmatic Play, Evolution Gaming, JILI — for delivering gaming services. Only the data necessary for the game session is shared.
• Identity Verification Service: A certified provider for identity document verification during the KYC process.
• Analytics: Anonymised usage data for platform improvement. No personal identifiers are attached.
• Legal authorities: In accordance with a court order or government directive — only where legally required.

All third parties listed above are bound by a data privacy agreement with Obajje. They may not use your information for any purpose beyond what Obajje has authorized. Each partner undergoes regular compliance reviews.

The Obajje website and app use cookies and similar technologies. Cookies are small text files stored on your device. Obajje uses the following types of cookies:

Disabling essential cookies will prevent Obajje from functioning properly. Other cookies can be turned off through your browser settings, though some features may not work as expected.

In the Obajje mobile app, app-specific tokens are used for device identification instead of cookies. These are removed immediately when the app is uninstalled.

To exercise any of your data rights, email us directly at support@obajje.best. Use the subject line "Data Rights Request". We typically respond within 30 days.

• Data Access Request: Email us and we will send you a summary of the data held in your account.
• Data Correction: If any of your information is incorrect, you may request a correction — it will be resolved within 7 business days.
• Data Deletion: Upon a request to delete your account, all data except that which is legally required to be retained will be removed within 30 days.
• Data Portability: You may request a copy of your data in a machine-readable format (JSON/CSV).
• Opt out of marketing: You can opt out of promotional communications at any time — via the Unsubscribe link in any email or by contacting support.

Obajje strictly does not serve anyone under 18. We do not collect personal data from minors, and we have no intention of doing so. Age verification is carried out during the registration process.

If a minor is found to have registered by mistake, their account is immediately closed and all collected data is deleted. If you believe your child is using Obajje, please contact us at support@obajje.best — we will act promptly.

When you install the Obajje Android APK or iOS PWA, the app may request certain permissions. The purpose of each permission is clearly explained:

• Internet Connection: Essential for using the service — the app will not function without it.
• Notifications: For sending push notifications — match updates, bonus offers, and more. You can turn these off at any time.
• Biometric: For fingerprint or Face ID login — optional. Biometric data stays on your device and is never sent to Obajje's servers.
• Camera / Storage: To capture identity document images during KYC verification — only at the time of verification.

Obajje's app never accesses your phone's call logs, SMS, or contact list. It does not collect any additional data while running in the background — it only stays connected for push notifications.

Obajje's primary servers are located in secure data centers. In some cases, data may be transferred internationally — for example, to servers in Europe or Singapore — due to requirements from game providers or payment services.

All transfers occur over encrypted connections, and recipient parties are required to maintain privacy protections equivalent to Obajje's own standards. Providers such as Evolution Gaming comply with Europe's GDPR regulations, which represent the highest standard of privacy protection internationally.

Obajje may update this Privacy Policy from time to time — when new services are added, laws change, or the nature of the service evolves. When changes are made:

• The "Last Updated" date at the top of the page will be changed.
• You will be notified of significant changes via your registered email or in-app notification.
• Continued use of the service after any changes constitutes acceptance of the updated policy.

For any questions, requests, or complaints regarding this policy, please contact us:

• Email: support@obajje.best
• Live Chat: On the Obajje website or app — active 24/7
• Subject Line: Writing "Privacy Policy Query" in the subject line will get you a faster response

The Bengali version of Obajje's Privacy Policy is the authoritative text. In the event of any conflict with a translation, the Bengali version shall prevail. For independent advice regarding this policy, you are encouraged to consult your own legal counsel.