sotbaji Privacy Policy — How We Collect, Use, and Protect Your Personal Data

When you use sotbaji.net — whether you are browsing as a visitor, creating an account, making a deposit, or placing a bet — we collect certain categories of personal and technical data. This section describes every category of data we collect, the specific data points within each category, and the reason we need them.

1.1 Registration & Account Data

When you create a sotbaji account, we collect the following information directly from you:

• Full legal name (as it appears on your government-issued identity document)
• Date of birth (used to verify that you are 18 years of age or older)
• Email address (used for account communications and security notifications)
• Mobile phone number (used for account verification and support contact)
• Residential address (used for identity verification and fraud prevention)
• Username and encrypted password (used to authenticate your login sessions)
• Preferred payment method (e.g., bKash, Nagad, Rocket, Upay, or bank account)

1.2 Identity Verification (KYC) Data

As part of our Know Your Customer (KYC) process — which is mandatory before your first withdrawal is processed — we collect copies of the following documents:

• Bangladesh National Identity Card (NID) — front and back image
• Valid passport (data page photograph)
• Government-issued driving licence (where applicable)
• Proof of address document (utility bill, bank statement, or similar, dated within 3 months)
• Proof of payment method ownership (screenshot of bKash/Nagad wallet or bank account statement)

KYC documents are processed securely and stored in encrypted form. They are used exclusively for age verification, identity confirmation, and fraud prevention purposes.

1.3 Financial Transaction Data

We record all financial transactions associated with your sotbaji account, including deposit amounts, withdrawal requests, processing timestamps, payment method identifiers (such as the last four digits of a card or a wallet reference number), and transaction status. This data is required for financial record-keeping, dispute resolution, and anti-money laundering compliance.

1.4 Betting & Gaming Activity Data

We maintain a complete log of your betting and gaming activity on sotbaji, including the games played, markets wagered on, bet amounts, outcomes, bonus usage, and session durations. This data is used to manage your account balance, calculate payouts, detect unusual betting patterns, and fulfil our responsible gaming obligations.

1.5 Technical & Device Data

When you access sotbaji.net, our servers automatically collect certain technical information from your device and browser, including:

• IP address (used to detect location and identify suspicious access patterns)
• Browser type and version
• Operating system and device type
• Referring URL (the page you visited immediately before sotbaji.net)
• Pages viewed on sotbaji.net and time spent on each page
• Date and time of each access session

1.6 Communications Data

If you contact sotbaji's customer support team — whether by email, live chat, or any other channel — we retain a record of the communication, including your name, contact details, the date and time of the exchange, and the content of the conversation. This data is used to resolve your query, train our support team, and maintain an audit trail of player interactions.

sotbaji uses the personal data it collects for specific, defined purposes only. We do not use your data for any purpose that is incompatible with the reasons for which it was originally collected. The table below sets out the primary purposes for which we process your data and the legal basis for each processing activity.

Marketing Communications: sotbaji will only send you promotional emails, SMS notifications, or in-platform messages about bonuses, seasonal promotions (such as BPL cricket season, Eid, Pohela Boishakh, or ICC tournament campaigns), and new game releases if you have opted in to receive such communications at registration or subsequently via your account settings. You may withdraw your marketing consent at any time by updating your preferences or by contacting [email protected].

sotbaji does not sell, rent, or otherwise transfer your personal data to third parties for their own commercial or marketing purposes. However, in order to operate the platform, we necessarily share certain data with a limited set of trusted third-party service providers and partners. Each of these relationships is governed by appropriate data processing agreements and strict confidentiality obligations.

Categories of third parties with whom sotbaji may share your data include:

• Payment processors and mobile wallet providers — bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, and Mastercard receive the transaction data necessary to process your deposits and withdrawals. These providers operate under their own privacy policies and applicable financial regulations.
• Game content providers — Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi supply game software to sotbaji. When you play their games on our platform, certain technical data (such as session tokens and game event logs) is transmitted to their systems for game integrity and payout calculation purposes. These providers do not receive your full personal profile.
• Identity verification services — We use third-party KYC and identity verification technology to assist in verifying the authenticity of identity documents submitted during the account verification process. These services process document images and return a verification result; they do not retain your document data longer than necessary for the verification task.
• Analytics and performance monitoring tools — We use server-side analytics tools to monitor platform performance, page load times, and error rates. These tools collect anonymised or pseudonymised technical data and do not have access to your personal profile or financial data.
• Legal and regulatory authorities — sotbaji may be required to disclose personal data to law enforcement agencies, courts, or other regulatory bodies when compelled to do so by law, court order, or other lawful governmental request. In such cases, we will disclose only the minimum data required to comply with the relevant legal obligation.

Business Transfers: In the event that sotbaji undergoes a business restructuring, merger, acquisition, or sale of assets, your personal data may form part of the transferred assets. In such circumstances, the acquiring party would be bound by commitments no less protective than those set out in this Privacy Policy with respect to your personal data.

sotbaji uses cookies and similar tracking technologies (including local storage tokens and session identifiers) on sotbaji.net to ensure the platform functions correctly, to remember your preferences, and to understand how players interact with different areas of the site. This section explains what cookies we use and why.

What are cookies? A cookie is a small text file placed on your device by a website when you visit it. Cookies are stored in your browser and sent back to the website on subsequent visits, allowing the site to recognise your device and recall certain information about your previous interactions.

Managing Cookies: You can control and delete cookies through your browser settings. Most modern browsers allow you to block all cookies, block only third-party cookies, or delete existing cookies. Please note that disabling strictly necessary cookies will prevent you from logging in to your sotbaji account and will impair core platform functionality. Disabling analytics cookies will not affect your ability to use the platform.

sotbaji retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law and our internal compliance obligations. The retention periods set out below reflect both our operational needs and our commitment to not holding personal data beyond its useful life.

When the applicable retention period expires, sotbaji will either securely delete the relevant personal data or anonymise it so that it can no longer be associated with a specific individual. Anonymised data retained beyond these periods does not constitute personal data and falls outside the scope of this Privacy Policy.

Early Deletion Requests: You may request early deletion of your personal data by contacting [email protected] (see the Your Privacy Rights section below). Please note that where retention is required by law — for example, financial transaction records subject to anti-money laundering legislation — we may be unable to fulfil an early deletion request for that specific data category until the legally mandated retention period has elapsed.

As a player on sotbaji, you have a number of rights in relation to the personal data we hold about you. sotbaji is committed to honouring these rights and responding to requests in a timely and transparent manner. To exercise any of the rights described in this section, please contact our data privacy team at [email protected] with the subject line "Privacy Rights Request".

All privacy rights requests should be sent in English to [email protected] with the subject line "Privacy Rights Request". Please include your registered username, the email address associated with your account, and a clear description of the right you wish to exercise. There is no fee for submitting a privacy rights request.

sotbaji takes the security of your personal data seriously. We maintain a set of technical and organisational security measures designed to protect your data against unauthorised access, accidental loss, destruction, alteration, or disclosure. While no online platform can guarantee absolute security, the measures described below represent our ongoing commitment to protecting your information.

Technical Security Measures:

• SSL/TLS Encryption: All data transmitted between your browser and sotbaji.net is encrypted using industry-standard SSL/TLS protocols. This applies to all pages, including login, deposit, withdrawal, and account management sections.
• Encrypted Data Storage: Sensitive data — including KYC documents, payment method details, and password hashes — is stored in encrypted form at rest. Plain-text passwords are never stored on our systems.
• Access Controls: Access to personal data within sotbaji's internal systems is restricted on a need-to-know basis. Staff members are granted access only to the specific data categories required to perform their job function, and all access is logged for audit purposes.
• Firewall and Intrusion Detection: sotbaji's servers are protected by enterprise-grade firewall configurations and continuous intrusion detection monitoring. Unusual access patterns trigger automated alerts for investigation by our security team.
• Regular Security Audits: We conduct periodic security reviews of our platform infrastructure and third-party integrations to identify and remediate vulnerabilities before they can be exploited.

Organisational Security Measures:

• All staff members who handle personal data receive mandatory data protection and information security training.
• sotbaji operates a documented data breach response procedure. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify affected players without undue delay.
• Third-party service providers who process personal data on our behalf are subject to data processing agreements that require them to maintain appropriate security standards.

sotbaji reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform functionality. When we make material changes to this policy, we will notify registered players by email to the address associated with their account and by displaying a prominent notice on sotbaji.net. The "Last Updated" date at the top of this page will always reflect the date of the most recent revision.

We encourage you to review this Privacy Policy periodically, even when you have not received a notification of changes, to stay informed about how we handle your personal data. Your continued use of sotbaji.net following the publication of a revised Privacy Policy constitutes your acceptance of the updated terms.

Previous versions: Upon request, sotbaji can provide a summary of material changes made in the most recent revision of this Privacy Policy. Please contact [email protected] with the subject line "Privacy Policy History" to make this request.

If you are not satisfied with our response to a privacy complaint, you have the right to escalate your concern to the relevant data protection authority or regulatory body in your jurisdiction. sotbaji will cooperate fully with any such investigation.

This Privacy Policy applies solely to personal data collected and processed by sotbaji in connection with the operation of sotbaji.net. It does not apply to third-party websites or services that may be accessible via links from our platform (though as stated in our site-wide policy, sotbaji.net does not include external links to third-party sites in its main navigation).