kobajee
Privacy Policy

When you register for a kobajee account, we collect the following personal information that you provide directly to us:

• Full legal name — as it appears on your government-issued identification document.
• Date of birth — to verify that you are aged 18 or above in accordance with kobajee's strict age restriction policy.
• Email address — used for account communications, security alerts, and, where you have consented, promotional messages.
• Mobile phone number — used for account verification, two-factor authentication, and transaction confirmations via bKash, Nagad, or Rocket.
• Residential address — including district, city (Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, or Cox's Bazar), and postcode where applicable.
• Username and password — your chosen account credentials. Passwords are stored using one-way cryptographic hashing and are never visible to kobajee staff.

To process deposits and withdrawals via the payment methods available in Bangladesh, kobajee collects and retains the following financial information:

• bKash, Nagad, Rocket, or Upay mobile wallet numbers associated with your account.
• Bangladeshi bank account details (account number and bank name) where bank transfer is the chosen payment method.
• Visa or Mastercard partial card details (last four digits, card type, and expiry date) where card payment is used — full card numbers are processed exclusively by our certified payment gateway and are never stored on kobajee servers.
• Full transaction history including deposit amounts, withdrawal requests, bonus credits, and wager records, expressed in Bangladeshi Taka (৳).

All financial data is retained for a minimum of five years from the date of each transaction, in compliance with standard financial record-keeping requirements applicable to online gaming and payment platforms operating for Bangladeshi users.

When you access the kobajee platform, our servers and analytics systems automatically collect certain technical data about your device and browsing behaviour. This data is collected to maintain platform security, improve user experience, and detect fraudulent or unusual activity. It includes:

• IP address and approximate geolocation (country and city level only).
• Device type, operating system, and browser version.
• Pages visited on kobajee.net, time spent on each page, and navigation path through the platform.
• Game session data, including games played, session duration, bet amounts, and wagering patterns.
• Referring URL (the site or search engine from which you arrived at kobajee.net).
• Timestamps of login events, password changes, and other significant account actions.

As part of the kobajee Know Your Customer (KYC) process, you may be required to submit copies of identity and address verification documents. The types of documents we may request include:

• National Identity Card (NID) issued by the Bangladesh Election Commission.
• Passport (biographical data page).
• Driver's licence (front and back).
• Recent utility bill, bank statement, or official correspondence as proof of address.
• Selfie photograph or video verification where enhanced identity confirmation is required.

KYC documents are stored in an encrypted document management system with access restricted to authorised kobajee compliance personnel only. These documents are used exclusively for age and identity verification, fraud prevention, and anti-money laundering compliance. They are never used for marketing purposes and are never shared with third parties except where legally required.

kobajee processes your personal data only for the following defined purposes. We do not process data for any purpose that is incompatible with those listed below:

Where kobajee relies on your consent as the legal basis for processing (for example, sending promotional emails about kobajee bonuses, cricket betting offers, or BPL season promotions), you may withdraw that consent at any time by contacting [email protected] or using the unsubscribe link in any marketing communication.

kobajee shares personal data with carefully selected third-party service providers solely to the extent necessary for them to deliver services that support platform operations. These providers are contractually bound to process your data only on kobajee's instructions and in accordance with applicable data protection standards. Categories of service providers we work with include:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard, for the purposes of processing financial transactions.
• Game providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other certified studios, who receive only a pseudonymised player identifier and session token — no full name, address, or payment data is shared with game studios.
• Identity verification services: Third-party KYC technology providers who assist in verifying the authenticity of identity documents submitted during account registration.
• IT infrastructure providers: Cloud hosting, content delivery, and cybersecurity providers who process data as part of running and protecting the kobajee platform.
• Customer support tools: Providers of the live chat and ticketing systems used to manage player enquiries, who may process your account name and support correspondence.

kobajee may disclose personal data to governmental authorities, law enforcement agencies, or regulatory bodies where required to do so by applicable law, court order, or other binding legal process. Such disclosures are made only to the extent strictly required by the applicable legal obligation and are not treated as a breach of this Privacy Policy. Where permissible, kobajee will notify affected players of any such legal disclosure request.

kobajee will never voluntarily disclose player data to third parties for commercial purposes, and under no circumstances will kobajee sell, rent, or licence player data to advertising networks, data brokers, or any entity unaffiliated with the legitimate operation of the kobajee platform.

kobajee.net uses cookies and similar tracking technologies to ensure the platform functions correctly, to remember your preferences, and to understand how players navigate the site. The categories of cookies we use are as follows:

• Strictly necessary cookies: Essential for basic platform functionality, including maintaining your login session, securing your account, and processing transactions. These cookies cannot be disabled without impairing your ability to use kobajee.
• Functional cookies: Remember your preferences such as language settings, last visited game categories, and display options. Disabling these cookies may affect personalisation features.
• Analytics cookies: Collect anonymised data about how players interact with kobajee.net, which pages are most visited, and where users encounter difficulty. This data is used to improve the platform experience for all Bangladesh players.
• Session identification tokens: Short-lived tokens stored in browser session storage that identify your active game session with kobajee's game providers (such as Pragmatic Play or Evolution Gaming). These expire automatically when your browser session ends.

kobajee does not use third-party advertising or retargeting cookies. You can manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent you from logging into or using the kobajee platform.

kobajee retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. Specific retention periods for key data categories are as follows:

• Account registration data: Retained for the full duration of your active kobajee account and for a period of five years following permanent account closure.
• Financial transaction records: Retained for a minimum of five years from the date of each transaction in accordance with standard financial compliance requirements.
• KYC identity documents: Retained for the full duration of your active account and for five years following account closure, consistent with anti-money laundering record-keeping standards.
• Game session and wagering data: Retained for up to three years for responsible gaming monitoring, dispute resolution, and platform analytics purposes.
• Customer support correspondence: Retained for two years from the date the support ticket was closed.
• Marketing consent records: Retained until you withdraw your consent and for one year thereafter as a record of the original consent.

When data reaches the end of its applicable retention period, kobajee securely deletes or irreversibly anonymises it so that it can no longer be associated with any individual player.

As a player on the kobajee platform, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact kobajee at [email protected] from the email address associated with your account:

• Right of Access: You may request a copy of all personal data that kobajee holds about you, along with information about how it is being processed.
• Right to Rectification: If any personal data kobajee holds about you is inaccurate or incomplete, you have the right to request that it be corrected or updated.
• Right to Erasure ("Right to be Forgotten"): You may request that kobajee delete your personal data where it is no longer necessary for the purposes for which it was collected, subject to kobajee's legal data retention obligations. Please note that where data must be retained to comply with financial or anti-money laundering requirements, full erasure may not be immediately possible.
• Right to Restrict Processing: You may request that kobajee temporarily suspend processing of your data in certain circumstances, for example where you contest the accuracy of the data or object to a particular processing purpose.
• Right to Data Portability: Where processing is based on your consent or on contract performance, you may request that kobajee provide your personal data in a structured, machine-readable format.
• Right to Withdraw Consent: Where kobajee processes your data on the basis of your consent (such as marketing communications), you may withdraw that consent at any time with immediate effect for future processing.
• Right to Object to Marketing: You may object to receiving promotional communications from kobajee at any time by using the unsubscribe link in any marketing email or by contacting [email protected].

kobajee will respond to all verified data rights requests within 30 calendar days of receipt. If an extension is required due to the complexity or volume of a request, we will notify you within the initial 30-day period and provide an estimated completion date.

kobajee implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Key security measures include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and the kobajee platform, indicated by the HTTPS protocol in your browser address bar.
• Encrypted password storage using industry-standard one-way cryptographic hashing algorithms. kobajee staff cannot read your password and will never ask you to share it.
• Encrypted document storage for KYC identity documents, accessible only to authorised compliance personnel via role-based access controls.
• Firewalls and intrusion detection systems that continuously monitor kobajee's network perimeter for suspicious activity or unauthorised access attempts.
• Regular security audits and penetration testing conducted by independent cybersecurity professionals to identify and remediate vulnerabilities before they can be exploited.
• Data minimisation — kobajee systems are designed so that payment processing sub-systems handle only the minimum data necessary for their specific function, reducing the risk surface in the event of a security incident.

In the unlikely event of a personal data breach that poses a material risk to your rights and interests as a kobajee player, we will notify affected players via the email address registered to their account without undue delay after becoming aware of the breach. The notification will describe the nature of the breach, the categories and approximate number of players affected, the likely consequences, and the measures kobajee has taken or proposes to take to address the breach and mitigate its impact.

kobajee reserves the right to update or amend this Privacy Policy at any time. When material changes are made — for example, changes to the categories of data we collect, changes to our sharing practices, or changes in the rights available to players — we will publish the revised policy at kobajee.net/privacy-policy with an updated effective date prominently displayed at the top of the page.

Where changes are significant, kobajee will also notify active account holders via the email address registered to their account, providing a reasonable period before the changes take effect. Continued use of the kobajee platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way kobajee handles your personal data, please contact the kobajee privacy team using the following details. All privacy-related enquiries will be acknowledged within two business days (Bangladesh Standard Time, UTC+6) and resolved as promptly as possible.

• Email: [email protected] (plain text — not a clickable link)
• Response time: Within 2 business days for general enquiries; within 30 calendar days for formal data rights requests.
• Business hours: 24 hours a day, 7 days a week for support enquiries.

For enquiries specifically relating to the kobajee Terms and Conditions, please visit the Terms & Conditions page. For information on responsible gaming tools available to Bangladesh players, please visit the Responsible Gaming page.