mibajee Privacy Policy

1. Information We Collect

mibajee collects personal information in order to provide you with a safe, personalised, and legally compliant gaming experience. The categories of personal information we collect include the following:

mibajee does not knowingly collect personal information from individuals under the age of 18. If we become aware that a minor has provided personal data to mibajee, the account will be immediately suspended, the data will be securely deleted, and any associated deposits will be returned where possible. If you believe a minor has registered on the platform, please notify us immediately at [email protected].

You are not obligated to provide all requested personal information; however, failure to provide certain mandatory data (such as name, date of birth, and a valid payment method) will prevent mibajee from creating or maintaining your account or processing your transactions.

2. How We Use Your Data

mibajee processes personal data only for legitimate, specified purposes. The following table sets out our primary purposes for processing personal data and the legal basis we rely upon for each:

• Account Management: To create, maintain, and administer your mibajee player account, including authentication, password recovery, and account preference storage.
• Transaction Processing: To facilitate deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard, and to maintain accurate financial records of all transactions conducted through your account.
• Identity Verification (KYC/AML): To verify your identity and age, comply with anti-money laundering obligations, and detect and prevent financial crime. This processing is necessary for legal compliance and the protection of the platform's integrity.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, multi-accounting, bonus abuse, money laundering, and other prohibited conduct. We analyse technical and gameplay data to identify anomalous patterns.
• Platform Improvement: To understand how players interact with mibajee, identify technical issues, improve game offerings, and enhance the overall user experience. This processing is based on our legitimate interests as an operator.
• Responsible Gaming Compliance: To monitor player behaviour for indicators of problem gambling and to enforce self-exclusion, deposit limits, and cooling-off measures activated by the player or mandated by the platform's responsible gaming obligations.
• Customer Support: To respond to your enquiries, resolve disputes, process complaints, and maintain records of communications for quality assurance purposes.
• Marketing Communications: To send you promotional offers, bonus notifications, and relevant product updates by email or SMS, where you have consented to receive such communications. You may withdraw consent at any time.
• Legal Obligations: To comply with applicable laws, respond to lawful requests from regulatory authorities, law enforcement agencies, or courts, and to enforce our Terms & Conditions.

3. Data Sharing & Third Parties

mibajee does not sell, rent, or otherwise disclose your personal data to third parties for their own independent commercial purposes. We may, however, share your data with carefully selected third parties in the following circumstances:

• Payment Service Providers: We share transaction-related data with our payment partners — including bKash, Nagad, Rocket, Upay, Visa, and Mastercard — strictly to facilitate deposit and withdrawal processing. These providers operate under their own privacy policies and are responsible for data they independently collect.
• Game Software Providers: Certified third-party game studios (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) may receive your player session identifier and gameplay data in order to serve game content and maintain RNG audit logs. No personally identifiable information beyond an anonymous session token is shared for this purpose.
• Identity Verification Services: We may use third-party KYC verification platforms to authenticate identity documents submitted by players. These services process document data under strict confidentiality agreements with mibajee.
• Analytics Providers: Aggregated, anonymised usage data may be processed by analytics platforms to help us understand platform performance. No personally identifiable information is included in analytics data streams.
• Fraud Detection & Security: We work with specialised fraud detection services that analyse technical data (such as IP addresses, device fingerprints, and behavioural patterns) to identify and prevent prohibited conduct on the platform.
• Legal & Regulatory Authorities: mibajee may disclose personal data to law enforcement agencies, financial intelligence units, or regulatory bodies where required by applicable law, court order, or where we reasonably believe disclosure is necessary to protect the rights, property, or safety of mibajee, our players, or the public.
• Business Transfers: In the event of a merger, acquisition, or sale of substantially all of mibajee's assets, your personal data may be transferred to the acquiring entity. We will provide notice of any such transfer and the privacy choices available to you.

All third parties with whom mibajee shares personal data are required, by contract, to implement appropriate technical and organisational security measures and to process personal data solely for the purposes for which it was shared. mibajee remains responsible for ensuring that such transfers comply with applicable data protection principles.

4. Cookies & Tracking Technologies

mibajee uses cookies, web beacons, and similar tracking technologies to operate the platform effectively, maintain your session, and gather anonymised usage statistics. A cookie is a small text file stored on your device by your browser when you visit a website. Cookies do not contain executable code and cannot access other files on your device.

The types of cookies used on the mibajee platform are as follows:

mibajee does not deploy third-party advertising or behavioural tracking cookies. You can manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will prevent you from logging into and using the mibajee platform. Disabling functional cookies may result in some preferences not being saved between sessions.

Most modern browsers allow you to view, delete, and block cookies through their settings menu. Refer to your browser's help documentation for specific instructions. Clearing cookies will log you out of your current mibajee session.

5. Data Retention

mibajee retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, accounting, or reporting obligations. The following general retention periods apply:

• Active Account Data: Personal data associated with an active mibajee account is retained for the lifetime of the account, plus an additional period of five (5) years following permanent account closure. This extended retention is required for AML compliance and financial record-keeping purposes.
• KYC / Identity Documents: Copies of identity documents submitted for KYC verification are retained for a minimum of five (5) years following account closure, in compliance with international anti-money laundering best practices.
• Transaction Records: Financial transaction logs — including deposit history, withdrawal records, bonus transactions, and bet records — are retained for a minimum of five (5) years to support audit, dispute resolution, and regulatory reporting.
• Support Communications: Live chat transcripts and email correspondence with the mibajee support team are retained for up to two (2) years from the date of the interaction for quality assurance and dispute resolution purposes.
• Technical & Log Data: Server logs, IP address records, and device data are retained for up to twelve (12) months, unless a longer period is required for an ongoing fraud investigation or legal proceeding.
• Marketing Data: Records of marketing consent and communication history are retained for the duration of your account and for two (2) years following opt-out, to demonstrate compliance with consent obligations.

When personal data is no longer required and no legal obligation mandates its continued retention, mibajee will securely delete or anonymise the data in accordance with our internal data disposal procedures.

6. Your Privacy Rights

mibajee respects your rights over your personal data. As a registered player, you are entitled to exercise the following rights in relation to your personal information:

• Right of Access: You may request a copy of the personal data mibajee holds about you. We will provide this information within 30 days of receiving a valid request, free of charge for the first request in any 12-month period.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Minor corrections (such as updating a mobile number) can be made directly through your account settings.
• Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purpose it was collected, where you withdraw consent, or where you object to processing. Please note that this right is subject to our legal retention obligations — we cannot delete data we are legally required to retain for AML or financial compliance purposes.
• Right to Restrict Processing: You may request that we limit the processing of your personal data in certain circumstances, for example while the accuracy of data is being disputed.
• Right to Data Portability: You may request that we provide your personal data in a structured, commonly used, machine-readable format so that you can transfer it to another service provider.
• Right to Object: You may object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on our legitimate interests, though we may be able to demonstrate compelling grounds that override your objection.
• Right to Withdraw Consent: Where processing is based on your consent (for example, marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

To exercise any of the above rights, please contact the mibajee support team via 24/7 live chat on the platform or by writing to [email protected]. We may ask you to verify your identity before processing your request. We aim to respond to all privacy rights requests within 30 days. If your request is complex or you have submitted multiple requests, we may extend this period by a further 30 days, of which we will notify you.

7. Data Security

mibajee implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our key security measures include:

• 256-Bit SSL/TLS Encryption: All data transmitted between your browser and the mibajee platform is encrypted using industry-standard Transport Layer Security (TLS). This ensures that your account credentials, financial data, and personal information cannot be intercepted in transit.
• Encrypted Data Storage: Sensitive personal data — including identity documents and financial records — is stored in encrypted form at rest. Encryption keys are managed under strict access control policies.
• Access Controls: Access to systems holding personal data is restricted to authorised mibajee personnel on a strict need-to-know basis. All internal access is logged and regularly audited.
• Secure Password Practices: Player account passwords are stored as one-way cryptographic hashes. mibajee staff cannot view your plaintext password under any circumstances. We recommend using a unique, strong password for your mibajee account.
• Fraud Monitoring Systems: Automated fraud detection systems continuously monitor platform activity for indicators of account compromise, unauthorised access attempts, and suspicious transaction patterns.
• Regular Security Reviews: mibajee conducts periodic reviews of its data security practices, infrastructure configurations, and access control policies to identify and address potential vulnerabilities.

Despite these measures, no online platform can guarantee absolute security against all possible threats. mibajee strongly encourages players to take personal responsibility for account security by using a strong, unique password, enabling any available account verification features, and keeping their login credentials strictly confidential. If you suspect unauthorised access to your mibajee account, contact support immediately via live chat or at [email protected].

8. Policy Updates & Contact

mibajee reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. When material changes are made to this Policy, we will notify registered players via the email address on file or through an in-platform notification prior to the changes taking effect. The "Last Updated" date at the top of this Policy will always reflect the date of the most recent revision.

We encourage you to review this Privacy Policy periodically to stay informed about how mibajee handles your personal data. Continued use of the mibajee platform following the effective date of any updated Policy constitutes your acceptance of those changes.

For all privacy-related enquiries, data subject access requests, or concerns about how mibajee handles your personal information, please contact us through any of the following channels:

• Live Chat: Available 24/7 directly on the mibajee platform — the fastest route for urgent privacy concerns.
• Email: [email protected] — please use the subject line "Privacy Request" for all data-related enquiries. We aim to acknowledge all email enquiries within 24 hours (Bangladesh Standard Time, UTC+6).

mibajee is committed to handling all privacy requests promptly, transparently, and in accordance with the data subject rights described in this Policy. This Privacy Policy was last reviewed on 1 January 2026 and supersedes all previous versions.