Privacy Policy — gobahis

When you create and use a gobahis account, we collect a range of personal data in order to deliver our services, verify your identity, process transactions, and meet our legal obligations. The categories of personal data we collect are set out below.

1.1 Information You Provide Directly

• Registration data: Full legal name, date of birth, country and city of residence (e.g., Dhaka, Chittagong, Sylhet, Khulna), email address, and mobile phone number provided when creating your gobahis account.
• Identity verification (KYC) documents: Copies of your national identity card (NID), passport, or other government-issued identification documents submitted as part of the Know Your Customer process.
• Payment information: Mobile financial service (MFS) account numbers associated with bKash, Nagad, Rocket, or Upay accounts used to make deposits or receive withdrawals. gobahis does not store full card numbers or MFS PINs.
• Support communications: Records of correspondence you send to gobahis support via email at support@gobahis, including the content of your messages and any attachments you provide.
• Responsible gaming information: Self-exclusion requests, deposit limit preferences, and time-out requests you submit through the platform or to support.

1.2 Information Collected Automatically

• Device and browser data: IP address, device type, operating system, browser type and version, screen resolution, and device identifiers collected when you access gobahis.
• Usage and activity data: Pages visited, games played, bets placed, session duration, navigation paths, and feature interactions recorded during your use of the platform.
• Log data: Server-side logs recording access times, error events, and transaction processing records generated in the ordinary course of platform operations.
• Cookie and tracking data: Information collected through cookies, web beacons, and similar technologies as described in the Cookies section of this Privacy Policy.

1.3 Information from Third Parties

• Payment processors: Transaction confirmation data received from bKash, Nagad, Rocket, and Upay confirming the status of deposit and withdrawal requests.
• Identity verification providers: Where gobahis uses a third-party KYC service to assist with document verification, that provider may share verification status and fraud risk signals with us.
• Game providers: Aggregated game session data from providers such as Pragmatic Play, Evolution Gaming, Ezugi, Spribe, and NetEnt relating to game outcomes and session activity on your account.

gobahis may share your personal data with the following categories of third parties in the circumstances described below:

• Payment service providers: bKash, Nagad, Rocket, and Upay receive only the transaction data required to process your deposit or withdrawal request. These providers operate under their own privacy policies and are bound by applicable Bangladesh Bank regulations.
• Identity verification providers: Third-party KYC and document verification services used by gobahis may process your name, date of birth, and identity document details solely for the purpose of verifying your identity. They are contractually prohibited from using this data for any other purpose.
• Game providers: Providers such as Pragmatic Play, Evolution Gaming, Ezugi, Spribe, and NetEnt receive your account session identifier and applicable game transaction data to deliver their games through the gobahis platform. They do not receive your full personal profile.
• Platform infrastructure providers: Hosting, cloud infrastructure, content delivery, and cybersecurity providers that support the technical operation of gobahis may process personal data as data processors acting on our instructions. They are bound by data processing agreements that restrict their use of your data.
• Legal and regulatory authorities: gobahis will disclose personal data to law enforcement agencies, financial intelligence units, or other regulatory authorities where we are legally required to do so, or where disclosure is necessary to protect the rights, property, or safety of gobahis, its players, or the public.
• Professional advisers: Lawyers, auditors, and compliance consultants engaged by gobahis may access personal data on a need-to-know basis and are bound by strict confidentiality obligations.

In the event that gobahis undergoes a business restructuring, merger, or acquisition, your personal data may be transferred to the acquiring entity as part of the transaction. You will be notified of any such transfer and of any changes to this Privacy Policy that result from it, before the transfer takes effect.

gobahis takes the security of your personal data seriously. We implement a layered set of technical and organisational measures designed to protect your data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• SSL/TLS encryption: All data transmitted between your device and gobahis servers is encrypted using a minimum of 256-bit SSL/TLS encryption, ensuring that your account credentials and payment details are protected in transit.
• Password hashing: Account passwords are stored using a strong one-way cryptographic hashing algorithm. gobahis staff cannot view your plaintext password at any time.
• Access controls: Access to systems that hold personal data is restricted to authorised gobahis personnel on a strict need-to-know basis. All internal access is logged and reviewed periodically.
• Infrastructure security: gobahis servers are hosted in secure data centres with physical access controls, redundant power systems, and continuous network monitoring to detect and respond to intrusion attempts.
• Vulnerability management: The gobahis platform undergoes regular security assessments. Identified vulnerabilities are prioritised and remediated in accordance with their severity.
• Fraud and AML monitoring: Automated systems monitor account activity in real time for patterns associated with fraud, bonus abuse, and money laundering. Alerts are reviewed by the gobahis compliance team.

While gobahis maintains robust security practices, no online platform can guarantee absolute security against all possible threats. In the unlikely event of a data breach that is likely to affect your rights and freedoms, gobahis will notify affected players without undue delay and will take all reasonable steps to mitigate the impact of the breach.

You also play an important role in keeping your account secure. You should use a strong, unique password for your gobahis account, never share your credentials with any third party, and contact support@gobahis immediately if you suspect that your account has been accessed without your authorisation.

As a gobahis player, you hold the following rights in relation to your personal data. These rights apply subject to applicable law and to certain exceptions where gobahis is required to retain or process data for legal compliance purposes.

• Right of Access: You have the right to request a copy of the personal data gobahis holds about you, along with information about how it is used and with whom it is shared. This is commonly referred to as a Subject Access Request (SAR).
• Right to Rectification: If any personal data gobahis holds about you is inaccurate or incomplete, you have the right to request that it be corrected or completed. For basic account data such as your email address or phone number, you can update these directly within your account settings.
• Right to Erasure: In certain circumstances, you have the right to request that gobahis deletes your personal data. This right is subject to exceptions — for example, gobahis may be required to retain transaction records and KYC documents for the retention periods set out in Section 6, even after your account is closed.
• Right to Restriction of Processing: You have the right to request that gobahis restricts its processing of your personal data in certain circumstances, for example while a dispute about the accuracy of data is being resolved.
• Right to Object: Where gobahis processes your data on the basis of legitimate interest, you have the right to object to that processing. If you object, gobahis will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent — for example, receiving promotional emails — you may withdraw that consent at any time without affecting the lawfulness of prior processing.
• Right to Data Portability: Where technically feasible and where processing is carried out by automated means on the basis of your consent or a contract, you may request that gobahis provides your personal data in a structured, commonly used, machine-readable format.

gobahis will not discriminate against you for exercising any of the rights described above. We will never penalise you, restrict your access to the platform, or offer you inferior service as a consequence of a legitimate privacy rights request.