Privacy & Security

RoyalBaji Privacy Policy — Your Data, Your Rights

This policy — written in plain language — covers everything about how royalbaji handles your personal data: how it's kept safe, where it's stored, and who can access it, so you're never left with unanswered questions.

Last Updated: January 2026 256-bit SSL Your data is never sold Fully in Bengali
🔐
Data protection summary
Your data is never sold to third parties
All transactions secured with SSL encryption
You have the right to view and delete your data
Minors prohibited from holding accounts
Cookie policy is disclosed transparently
256-bit
SSL encryption
Zero
Data Sales
11
Privacy Clause
Jan. 2026
Last Updated
Core Pillars of Data Protection

How Does royalbaji Protect Your Privacy?

Royalbaji protects your data through six core principles.

End-to-End Encryption

Every login, payment, and personal data exchange on royalbaji is secured with 256-bit TLS encryption — completely unreadable to anyone outside.

Your Data Is Never Sold

Royalbaji never sells your name, mobile number, NID, or any other personal information to advertisers or third parties — under any circumstances.

Storage on secured servers

All your data is stored in internationally certified data centers equipped with firewalls, anti-DDoS protection, and regular security audits.

Minimal data collection policy

Royalbaji collects only the information genuinely needed to provide its services. No unnecessary data is requested, and nothing is stored beyond what is required.

You're in Control

You can request to view, correct, or delete your data at any time. royalbaji processes such requests within 30 days.

Marketing opt-out option

You can opt out of royalbaji promotional emails or SMS at any time — just update your settings or let our support team know.

Royalbaji's Privacy Policy is written with Bangladeshi users in mind. Reading it will help you understand exactly what data is collected, how it's used — and what rights you have over it.

1
Introduction & Scope of This Policy
Introduction

This privacy policy applies to anyone using the royalbaji platform — including the website (royalbaji.click) and the mobile application. "Personal information" refers to any data that can identify a specific individual, such as name, mobile number, national ID number, financial transaction details, and similar information.

Royalbaji upholds this policy because we believe your data belongs to you — not to us. We hold it only temporarily to provide our services. By using royalbaji, you are considered to have accepted this policy. If you do not agree, we recommend you refrain from using the platform.

In plain terms: What is written on this page is royalbaji's commitment — what we will and will not do with your data.
2
What Information We Collect and Why
Collection

Royalbaji collects information through three main methods:

  • Provided directly by you: Name and mobile number at registration; NID or passport for KYC verification; mobile banking number for payments; information provided when contacting support.
  • Collected automatically: Your device type, operating system, browser, IP address, and session duration are collected for technical purposes.
  • From Third Parties: Payment providers (bKash, Nagad) share transaction confirmation details. KYC service providers verify identity information to prevent fraud.
Please Note: royalbaji never stores your full bKash PIN, bank password, or card number. Payment details go directly to the payment provider.
3
Purpose of data use
Purpose

Royalbaji uses the data it collects for the following purposes:

  • Account management: Registration, login, password recovery
  • Payment Processing: Confirming deposits and withdrawals
  • KYC verification: Legal Compliance and Fraud Prevention
  • Customer Support: Troubleshooting assistance
  • Platform improvement: Understanding where issues occur and which features are used most
  • Responsible Gaming: Identifying unusual gaming patterns to provide assistance
  • Legal Compliance: Generating reports required by regulatory authorities

If you've opted in to marketing communications, you may also receive offers and promotional updates — but you can unsubscribe at any time.

To be clear: royalbaji uses your data to provide you with services — not to sell it to advertising companies.
4
Who Your Data Is Shared With
Data Sharing

Royalbaji shares your data with a limited set of parties, strictly for defined purposes:

  • Payment providers (bKash, Nagad, Rocket): Only the information needed to verify a transaction — not your full financial profile.
  • KYC & Identity Verification Provider: To verify your NID or passport details — for this purpose only.
  • Game Providers (Pragmatic Play, Microgaming, etc.): Session data required for gameplay only — not your name or mobile number.
  • Legal Authorities: Only when legally compelled — such as by a court order or a lawful demand from a regulatory authority.

Outside of this list, royalbaji does not share your information with anyone — not ad networks, data brokers, or marketing companies.

If anyone claims to be contacting you on behalf of royalbaji and asks for your personal details or password — this is fraud. royalbaji will never ask for your password or OTP over the phone or by message.

5
Data Retention Period & Deletion Policy
Save

How long royalbaji retains your data depends on the type of information:

  • Account Information: For as long as your account remains active. After account closure, data is retained for 5 years for legal compliance.
  • Financial transaction data: Retention for 7 years is mandatory under international anti-money laundering laws.
  • KYC Documents: 5 years after account closure.
  • Support Contact: Deleted 2 years after the issue is resolved.
  • Session & Browsing Logs: Automatically deleted after 90 days.

If you request account deletion, all data beyond legal obligations will be removed within 30 days. To submit a request, email support@royalbaji.click.

6
Use of cookies and tracking technologies
Cookies

Royalbaji uses cookies and similar technologies on its website and app. These fall into three categories:

  • Essential Cookies: These are required to maintain login sessions and complete security checks — the site cannot function without them and they cannot be disabled.
  • Functional cookies: Used to remember your language preference and theme settings — these can be disabled.
  • Analytics Cookies: To understand which pages are visited most and where issues arise — these can also be disabled.

Royalbaji does not use third-party advertising cookies. You may disable non-essential cookies through your browser settings, though doing so may limit certain features.

Please Note: Disabling cookies won't affect your payments or gameplay — you may just need to log in again each session.
7
Special Measures for Payment Data Protection
Payment

Financial data is the most sensitive information we handle. royalbaji takes special precautions in this area:

  • For bKash, Nagad, or Rocket transactions, your full mobile banking number is never stored in royalbaji's database — only the last four digits are retained for reference.
  • All payment processing complies with PCI DSS (Payment Card Industry Data Security Standard).
  • Transaction history is stored in an encrypted database — even regular royalbaji staff cannot access it, only authorized senior personnel can.
  • Suspicious transactions are automatically flagged by the system — a human then reviews and takes appropriate action.
Warning: royalbaji will never ask for your bKash PIN, OTP, or full mobile number over the phone, via live chat, or by email. Anyone making such a request is attempting fraud.
8
Minor Data Protection Policy
Age Protection

Royalbaji strictly prohibits anyone under 18 from using the platform. To enforce this, royalbaji has put a number of measures in place:

  • Age declaration mandatory at registration
  • Age is verified during KYC by checking the NID — which is only issued to individuals aged 18 and above.
  • Accounts flagged as suspicious are subject to additional verification.
  • If a user is identified as under 18, their account is immediately closed and any deposited funds are returned.

Royalbaji does not knowingly collect any information from users under the age of 18. If we become aware that a minor's data has inadvertently entered our system, all associated information will be deleted immediately.

For Parents: If you believe your child is using royalbaji, please contact us at support@royalbaji.click — we will take immediate action.
9
Your Data Rights
Your Rights

You have several important rights regarding your personal data on royalbaji:

  • Right to Access: You may request to see what personal data royalbaji holds about you.
  • Right to Rectification: You can correct inaccurate or outdated information — either through your account settings or by contacting support.
  • Right to erasure: You may request that your account be closed and all your data deleted — except for information we are legally required to retain.
  • Right to Restrict Processing: You can request that your data not be used for specific purposes.
  • Right to Portability: You may request a copy of your data in a specific format.
  • Right to lodge a complaint: If you believe your privacy has been violated, you may file a complaint directly with royalbaji or with the relevant regulatory authority.

To exercise any of your rights, email support@royalbaji.click with "Privacy Request" in the subject line. royalbaji will respond within 30 days.

10
What Happens in the Event of a Data Breach
Breach Policy

In the event of a cyberattack or data breach affecting royalbaji's systems, royalbaji will take the following steps:

  • Immediate action: Affected systems will be isolated immediately upon detection of a breach.
  • Investigation: An immediate investigation will be launched to determine what data was affected and how.
  • Notifying the user: If you believe your data has been compromised, you will be notified within 72 hours.
  • Notifying the regulatory authority: Relevant authorities will be notified within the legally required timeframe.

Royalbaji conducts regular penetration testing, security audits, and staff training to guard against such incidents.

Your Action: If you notice any unusual activity on your account — such as a login from an unrecognized device or an unfamiliar transaction — contact support immediately and change your password.
11
Policy updates and contact information
Updates & Contact

Royalbaji updates this Privacy Policy as needed. For significant changes, you will be notified by email or an on-platform notice at least 7 days in advance. Minor changes are updated on this page only, with a revised date.

For any questions or concerns regarding our Privacy Policy:

  • Email: support@royalbaji.click (Subject: Privacy Inquiry)
  • Live Chat: From the bottom-right corner of any royalbaji page
  • For general inquiries: FAQ Page View
  • For Terms & Conditions: Terms & Conditions Page View

The latest version of this Privacy Policy is always available at royalbaji.click/privacy-policy. Bookmark this page to stay up to date with any changes.

Data Journey

How Does Your Data Flow Through royalbaji?

From registration to payment — where your data goes and how it stays protected at every step.

1
Registration

Your name and mobile number are transmitted to royalbaji's servers via SSL encryption. Passwords are stored as hashes — no one can read them.

2
KYC verification

NID or passport details are shared only with our KYC provider. royalbaji receives only a "verified" or "failed" result.

3
Payment

Your bKash/Nagad number goes directly to the payment gateway. royalbaji only sees the transaction ID and amount.

4
Gaming

Game providers receive only game session data — your name and mobile number are never shared with them.

5
Save

All data is stored in encrypted databases and deleted after a defined retention period.

Your Rights

What You Can Do With Your Data at royalbaji

These rights belong to you — exercise them at any time.

Right to access your data

You can request a full list of what royalbaji holds about you. You will receive a response within 30 days.

Right to Rectification

You can update incorrect or outdated information — via your settings or by reaching out to support.

Right to erasure

You can request account closure and data deletion. All data will be removed except what we are legally required to retain.

Right to Data Portability

You can request a copy of your data in a specific format — so you can use it elsewhere if needed.

Right to Opt Out of Marketing

If you no longer wish to receive promotional emails or SMS, you can opt out at any time.

Right to Lodge a Complaint

If you believe your privacy has been violated, you can file a complaint with royalbaji or the relevant regulatory authority.

Security Layers

Royalbaji's Data Protection Framework

See which security measures are active at each level — all at a glance.

Security Layers Technologies used What keeps it secure Status
Transmission encryption TLS 1.3 / 256-bit SSL All data transmitted between your browser and our servers Active
Database Encryption AES-256 Stored Personal & Financial Data Active
Password hashing Bcrypt User passwords — unreadable to anyone Active
Payment Security PCI DSS standard Financial Transaction Data Agree
Firewall WAF + DDoS Protection Server and network infrastructure Active
Two-Factor Authentication (2FA) OTP / TOTP Withdrawal & Login Security Optional
Security Audit Third-party penetration testing Identifying vulnerabilities across the entire system Regular
Access Control Role-Based Access Control (RBAC) Restricting staff access to personal data Active
FAQ

Common Questions After Reading the Privacy Policy

Direct answers to two important questions.

royalbaji's policy is one account per person. Multiple people living at the same address may each create their own account, provided certain conditions are met. Each account must be linked to a unique ID (NID or passport) — meaning each person must have their own separate identity document. Two accounts cannot be registered under the same mobile number. A single person cannot hold two separate accounts — this is strictly prohibited. Issues arise when the same person operates two accounts from the same IP address. If two household members are genuinely different individuals and register with separate NIDs, sharing the same home network is generally not a problem. That said, if you want to be sure, contact support beforehand — they can review your situation and advise accordingly.

royalbaji's age restriction is absolute — no exceptions. No one under 18 may use royalbaji under any circumstances. This is not merely a written policy; it is actively enforced at the system level. In Bangladesh, a National ID (NID) is issued only upon turning 18, so age is automatically confirmed when an NID is presented during KYC verification. If someone creates an account by misrepresenting their age and is later found out, their account will be closed immediately. Any deposited funds will be returned, but no winnings will be paid out. If you are a parent or guardian and become aware that your child or sibling is using royalbaji in any way, please contact support@royalbaji.click immediately. royalbaji will take prompt action on that account, and in accordance with this Privacy Policy, no data belonging to a minor will be retained.
🔐 Your Data Is Safe — Play with Complete Peace of Mind

Your privacy is always protected on royalbaji

Now that you know your data is in safe hands, go ahead and create your account — and enjoy the experience on Bangladesh's most trusted betting platform.

18+ only. Play responsibly. Gambling can be addictive.

বাংলা