Privacy Policy
for suparbaj

suparbaj acts as the data controller in respect of all personal data collected through the Platform. The data controller is responsible for determining the purposes and means by which your personal information is processed.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way your personal data is handled, you may contact our dedicated data protection team using the following details:

For general support queries unrelated to data privacy, please use the Support page, which is monitored 24 hours a day, seven days a week.

suparbaj collects personal information through several channels: directly from you when you register or interact with the Platform, automatically as you use the service, and from trusted third-party sources such as payment providers and identity verification services. The categories of data we collect include:

2.1 Registration & Identity Data

• Full legal name (as it appears on your National ID card or passport);
• Date of birth (used to verify that you meet the 18+ age requirement);
• Bangladesh mobile number (01XXXXXXXXX format) and/or email address;
• Username and encrypted password hash;
• Division or city of residence (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh).

2.2 KYC & Verification Documents

• Scanned or photographed copy of your National ID card (NID) or passport;
• Proof of address document (utility bill, bank statement from City Bank, BRAC Bank, Dutch-Bangla Bank, or mobile financial service statement);
• Payment method confirmation (confirmation that the bKash, Nagad, Rocket, or Upay account is registered in your name).

2.3 Financial Transaction Data

• Deposit and withdrawal history, including amounts in BDT and timestamps;
• Mobile financial service account reference numbers (bKash, Nagad, Rocket, Upay) — we do not store your full mobile wallet PIN or password;
• Bank account details where bank transfer methods are used;
• Bonus and promotional credit history.

2.4 Gaming & Betting Activity Data

• Game session logs including game title, stake amounts, outcomes, and session duration;
• Sports betting records including markets selected, odds accepted, bet amounts, and settlement results;
• Responsible gaming tool usage, including deposit limits set, session timers activated, and any self-exclusion requests submitted.

2.5 Technical & Device Data

• IP address and approximate geographic location derived from IP;
• Device type, operating system, and browser version;
• Session login and logout timestamps;
• Referral source (how you arrived at suparbaj — organic search, direct URL, affiliate link);
• Error logs and crash reports to support platform stability.

2.6 Communications Data

• Records of communications between you and the Support team, including live chat transcripts, email exchanges, and any formal complaints submitted;
• Optional survey or feedback responses you choose to submit.

suparbaj processes your personal data only for clearly defined, legitimate purposes. We do not use your data for automated profiling that produces legal or similarly significant effects without human review. The specific purposes for which we process your data are:

3.1 Account Management & Platform Access

To create and maintain your account, authenticate your identity at each login, enable you to participate in casino games and sports betting markets, process deposits and withdrawals in BDT, and provide account history and statements.

3.2 Identity Verification & Fraud Prevention

To conduct KYC verification in compliance with anti-money laundering (AML) obligations, detect and prevent fraudulent activity (including multi-accounting, bonus abuse, and unauthorised access), and comply with international financial crime prevention standards.

3.3 Responsible Gaming

To administer responsible gaming tools including deposit limits, session timers, loss caps, and self-exclusion; to identify patterns of play that may indicate problem gambling behaviour; and to direct at-risk players toward support resources in accordance with our Responsible Gaming Policy.

3.4 Customer Support

To respond to support enquiries, resolve disputes, process formal complaints, and maintain records of communications for quality assurance and dispute resolution purposes.

3.5 Legal & Regulatory Compliance

To meet obligations under applicable anti-money laundering regulations, respond to lawful requests from regulatory or law enforcement authorities, and retain financial and identity records for the periods required by applicable law.

3.6 Platform Improvement & Security

To analyse aggregated, anonymised usage patterns for product development; to monitor and maintain platform security; to investigate and resolve technical errors reported by players or identified by automated monitoring systems.

3.7 Promotional Communications (With Consent)

Where you have expressly opted in to receive marketing communications, to send you information about relevant promotions on suparbaj — such as BPL cricket betting offers, Eid bonus events, or Pohela Boishakh seasonal promotions. You may withdraw this consent at any time via account settings or by contacting Support.

suparbaj processes personal data on one or more of the following legal bases, in accordance with internationally recognised data protection principles:

• Contractual necessity: Processing required to perform the contract between you and suparbaj — including account creation, payment processing, and game service delivery — is carried out on the basis that it is necessary to fulfil that contract.
• Legal obligation: Processing required to comply with applicable laws — including AML/KYC obligations, financial record-keeping requirements, and regulatory reporting — is carried out on the basis of legal obligation.
• Legitimate interests: Processing carried out to protect the security and integrity of the Platform, prevent fraud, improve services, and enforce the Terms & Conditions is justified by suparbaj's legitimate interests, provided those interests are not overridden by your fundamental rights.
• Consent: Processing for optional purposes such as marketing communications is carried out solely on the basis of your freely given, informed, and revocable consent. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

suparbaj does not sell your personal data. We share your information with third parties only in the following limited and controlled circumstances:

5.1 Payment Service Providers

To process deposits and withdrawals, we share transaction reference data with bKash, Nagad, Rocket, Upay, and participating banks (Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank). These providers receive only the data necessary to complete the transaction and are contractually bound to protect it.

5.2 Game Content Providers

Game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive a session token and anonymised player identifier to deliver game content and record outcomes. These providers do not receive your full name, NID details, or payment information.

5.3 Identity Verification Services

Third-party KYC verification providers may receive copies of identity documents submitted during the verification process. These providers operate under strict data processing agreements and are prohibited from using the data for any purpose other than identity verification.

5.4 Legal & Regulatory Authorities

suparbaj will disclose personal data to law enforcement, regulatory bodies, or judicial authorities where required to do so by applicable law, valid legal process, or to protect the rights, property, or safety of the Company, its employees, or its players.

5.5 Business Transfers

In the event of a merger, acquisition, or sale of all or part of suparbaj's business, player data may be transferred to the acquiring entity, subject to equivalent privacy protections. Affected players will be notified of any such transfer in advance.

suparbaj uses cookies and similar tracking technologies to ensure the Platform functions correctly and securely. A cookie is a small text file stored on your device when you visit a website.

6.1 Types of Cookies We Use

6.2 Managing Cookies

You may control and delete cookies at any time through your browser settings. Please note that disabling strictly necessary cookies will prevent you from logging in and using the Platform. For instructions on managing cookies in your specific browser, refer to your browser's help documentation. Most modern browsers on Android and iOS devices used by players in Dhaka, Chittagong, Sylhet, and across Bangladesh support granular cookie management.

6.3 No Third-Party Advertising Trackers

suparbaj does not embed third-party advertising tracking pixels (such as those used by social media advertising platforms) on the Platform. The only tracking technologies deployed are those listed in the table above, operated either directly by suparbaj or by our analytics service provider under a strict data processing agreement.

suparbaj retains personal data for as long as is necessary to fulfil the purpose for which it was collected, comply with legal obligations, resolve disputes, and enforce agreements. The following retention periods apply:

When the applicable retention period expires, data is securely deleted or anonymised so that it can no longer be associated with any individual player. Anonymised aggregated data (for example, total bets placed by player segment) may be retained indefinitely for statistical and platform improvement purposes.

As a player on suparbaj, you hold the following rights in respect of your personal data. These rights may be subject to conditions and limitations where processing is required by law or to protect legitimate interests.

8.1 Right of Access

You have the right to request a copy of the personal data suparbaj holds about you. We will provide this in a structured, commonly used, machine-readable format within 28 days of a verified request.

8.2 Right to Rectification

You have the right to request correction of any inaccurate or incomplete personal data held in your account. Minor corrections (such as updating your email address or mobile number) can be made directly in account settings. Corrections to identity data (name, date of birth) require KYC document resubmission to prevent fraud.

8.3 Right to Erasure ("Right to Be Forgotten")

You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (for consent-based processing), or where processing is unlawful. Please note that data subject to legal retention obligations (such as financial transaction records retained for AML purposes) cannot be deleted until the mandatory retention period expires.

8.4 Right to Restrict Processing

You may request that suparbaj restricts processing of your data while accuracy is being contested, while a complaint is pending, or where you object to processing based on legitimate interests pending verification of our grounds.

8.5 Right to Data Portability

Where processing is based on your consent or on contractual necessity, you have the right to receive your personal data in a portable format so you may transmit it to another service provider.

8.6 Right to Object

You have the right to object at any time to processing of your personal data for direct marketing purposes. You also have the right to object to processing based on legitimate interests, though suparbaj may continue processing if it can demonstrate compelling legitimate grounds that override your interests.

8.7 How to Exercise Your Rights

To exercise any of the rights listed above, submit a written request to support@suparbaj with the subject line "Data Rights Request" and include your full registered name and account username so we can verify your identity before actioning the request. Alternatively, use the Support page. We will respond within 28 days of receiving a verified request.

suparbaj employs a layered security architecture to protect your personal data from unauthorised access, disclosure, alteration, and destruction. Our security measures include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and the Platform;
• At-rest encryption of all sensitive data stored in our databases, including identity documents, payment references, and password hashes;
• Bcrypt password hashing — your password is never stored in plain text and cannot be recovered by any suparbaj employee;
• Role-based access controls ensuring that only authorised personnel with a specific operational need can access identifiable player data;
• Two-factor authentication (2FA) for all internal staff systems that hold player data;
• Intrusion detection and anomaly monitoring systems that flag unusual access patterns in real time;
• Regular penetration testing by independent security auditors to identify and remediate vulnerabilities before they can be exploited;
• Documented incident response procedures ensuring that in the event of a data breach, affected players are notified promptly and remedial action is taken without delay.

suparbaj operates under international licensing frameworks. This means that certain personal data — particularly data processed by third-party game studios and platform infrastructure providers — may be transferred to and stored in countries outside Bangladesh. The game providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi) are headquartered in various international jurisdictions.

Wherever such transfers occur, suparbaj ensures that appropriate safeguards are in place to provide a level of data protection equivalent to the standards described in this Privacy Policy. These safeguards may include:

• Data processing agreements incorporating internationally recognised standard contractual clauses;
• Transfer to recipients in jurisdictions that maintain adequate data protection frameworks;
• Binding corporate rules where data is transferred within a group of companies.

If you would like further information about the specific safeguards in place for a particular international data transfer, please contact us at support@suparbaj.

suparbaj operates a strict 18+ policy. The Platform is not directed at, and is not intended for use by, any person under the age of 18. We do not knowingly collect or process personal data from individuals under the age of 18.

During registration, all players are required to declare that they are 18 years of age or older. suparbaj reserves the right to request age verification documentation at any time. If we become aware — through KYC verification, a third-party report, or any other means — that an account has been created by an individual under the age of 18, the following steps will be taken immediately:

• The account will be suspended and then permanently closed;
• All winnings accumulated during the period of underage use will be forfeited;
• Any deposited funds (net of bonuses received) will be returned to the original payment source (bKash, Nagad, Rocket, or Upay);
• All personal data associated with the underage account will be securely deleted, except where retention is required to comply with legal obligations or to investigate the manner in which the underage individual gained access.

If you are a parent or guardian and believe your child has created an account on suparbaj, please contact us immediately at support@suparbaj so we can take swift action.

suparbaj reserves the right to update, modify, or replace this Privacy Policy at any time to reflect changes in our data practices, applicable law, or operational requirements. When material changes are made, we will notify all registered players through the following channels:

• An on-screen notification displayed the next time you log in to suparbaj;
• An email notification sent to your registered email address or mobile number;
• An updated "Last Reviewed" date displayed prominently at the top of this page.

Minor, non-material clarifications — such as correcting typographical errors or updating contact details — may be made without a formal notification, though the "Last Reviewed" date will always reflect the most recent update.

Your continued use of the Platform following notification of a material change constitutes your acceptance of the revised Privacy Policy. If you do not agree with the changes, you must cease using the Platform and contact Support to request account closure. Any data collected under the previous version of this policy will continue to be processed in accordance with the terms under which it was originally collected, unless you request otherwise.