Kabaji Privacy Policy — Our Firm Commitment to Protecting Your Data

Welcome to kabaji.win. We understand that many users have concerns about the security of their personal data on online platforms. This Privacy Policy is written to answer those questions honestly and clearly.

This Privacy Policy applies to all members using the kabaji.win website and app. By accessing the site or creating an account, you confirm that you have read and accepted this Privacy Policy.

Kabaji believes that user privacy is not just a legal obligation — it is a core value. We always collect the minimum data necessary and protect it with the highest level of security.

Kabaji collects information from three main sources. Full details are listed below:

We never store your full bank account number or card number. Payment gateways (bKash, Nagad, Rocket) handle that information securely on their own end.

Kabaji uses your data only for specific, lawful purposes. Each purpose is clearly explained below:

• Account Management: To create your profile, verify login, and ensure account security.
• Financial Transaction Processing: To process deposits and withdrawals and maintain transaction records.
• Identity Verification (KYC): To meet regulatory requirements for fraud prevention and anti-money laundering.
• Customer Support: To resolve your complaints or queries quickly and effectively.
• Promotions & Offers: To inform you of relevant bonuses and offers based on your preferences (you can opt out at any time).
• Security Monitoring: To detect suspicious activity and maintain the integrity of the platform.
• Service Improvement: To analyze user experience and improve the platform.

Kabaji never sells your personal data. However, limited information may be shared with third parties in certain specific circumstances:

• Payment Providers: Information required to process transactions via bKash, Nagad, and Rocket. Each of these providers operates under its own privacy policy.
• Regulatory Authority: Data may be disclosed to government or regulatory authorities when required as part of a legal obligation.
• Technology Partners: Server hosting, cybersecurity, and analytics providers — they can only access the technical data necessary to perform their services.
• Legal Requirements: Data may be disclosed in response to a court order or a lawful request from law enforcement.

Kabaji.win uses cookies — small text files stored in your browser. kabaji uses the following types of cookies:

• Essential Cookies: Essential for login sessions and security. These cannot be disabled.
• Performance Cookies: To analyze which sections of the site are used most. These can be disabled.
• Preference Cookies: To remember your language and theme settings. Disabling these cookies means you will need to reconfigure your settings each time.
• Marketing Cookies: To show you promotions relevant to your preferences. These are entirely optional.

You can delete existing cookies or block new ones at any time through your browser settings. However, disabling essential cookies may affect the site's functionality.

Kabaji does not retain your data indefinitely. Each type of data has a defined retention period:

• Account Information: For the duration the account remains active, and for 5 years after closure (as required by law).
• Transaction Records: 7 years — in accordance with financial regulatory requirements.
• KYC documents: 5 years after account closure.
• Cookie Data: Up to 12 months.
• Customer Support Chat Logs: 2 years.

Once the retention period expires, data is securely deleted or anonymized so that your identity can no longer be identified.

As a kabaji user, you have full rights over your own data. All of your rights are listed below:

To exercise any of these rights, please contact our support team. We aim to respond within 30 days. Some rights may be limited due to legal obligations — in such cases, we will explain the reason.

Kabaji employs industry-leading technology to keep your data secure. The key elements of our security framework are:

• 256-bit SSL/TLS Encryption: All data transfers take place over encrypted channels.
• Two-Factor Authentication (2FA): An additional layer of security when logging into your account.
• Firewall & DDoS Protection: To prevent unauthorized access from external sources.
• Regular Security Audits: Periodic testing conducted by independent external experts.
• Access Controls: Only authorized personnel can access data on a need-to-know basis.
• Data Backup: Regular encrypted backups — to ensure no data is ever lost.

Kabaji's services are intended for users aged 18 and above only. We do not knowingly collect or store data from minors.

If we are notified that a minor has created an account, we will immediately close that account and delete all associated data.

Kabaji may update this Privacy Policy as needed. When changes are made, we will take the following steps:

• For significant changes, you will be notified via SMS to your registered mobile number or through a profile notice.
• The "Last Updated" date at the top of this page will be revised accordingly.
• Continued use of the site after any changes will be considered acceptance of the updated policy.
• If you do not agree to the updated policy, you may request to close your account.

Check this page regularly. kabaji will always communicate all changes with full transparency.

For any privacy-related questions, complaints, or requests, please contact kabaji's support team. We typically respond within 24 to 48 hours.

• Email: [email protected]
• Live Chat: Click the chat icon at the bottom right corner of the site.
• Complaint Form: Submit a written complaint with full details via email.

When requesting data deletion or correction, please provide your account ID and registered mobile number. This helps us process your request faster.