moja88 Privacy Policy

This Privacy Policy ("Policy") sets out the terms on which moja88 ("we", "us", "our", or "the Platform") collects, processes, stores, and shares personal data in connection with the operation of the online gaming and sports betting platform accessible at https://moja88.app.

moja88 is committed to handling personal data responsibly, transparently, and in a manner consistent with the principles of data minimisation, purpose limitation, and individual rights. We recognise that players entrust us with sensitive personal and financial information, and we take that responsibility seriously.

This Policy applies to all individuals who visit the moja88 website, register an account, make a deposit, place a wager, or otherwise interact with our Services. It covers data collected through the website, via email correspondence, through live chat interactions, and through our payment processing integrations.

By accessing moja88 and creating an account, you confirm that you have read, understood, and agreed to the practices described in this Privacy Policy. If you do not agree with any part of this Policy, you should discontinue use of the platform and, if applicable, close your account by contacting [email protected].

For the purposes of this Privacy Policy, the data controller responsible for the personal data you provide is the moja88 platform operating entity. As the data controller, moja88 determines the purposes for which personal data is processed and the means by which such processing is carried out.

All data protection enquiries, subject access requests, and complaints relating to the handling of personal data should be directed to our dedicated support channel:

• Email: [email protected]
• Subject Line: "Data Privacy Request — [Your Account Username]"
• Response Time: We aim to acknowledge all privacy-related correspondence within 3 business days and provide a substantive response within 14 calendar days.

moja88 may appoint a designated data protection contact where required by applicable regulation. Where such an appointment is made, the contact details will be updated in this section of the Policy accordingly.

moja88 collects personal data through several channels and at various points during your relationship with the platform. The categories of personal data we collect are described in the table below:

Special Categories of Data: moja88 does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data beyond what is strictly necessary for identity verification purposes (e.g., a selfie photograph compared against a government-issued ID).

moja88 processes personal data for the following defined purposes. We do not use your data for any purpose incompatible with those listed below without first obtaining your explicit consent:

• Account Creation & Management: To register your account, authenticate your identity at login, maintain your account profile, and process your preferences and settings.
• Identity & Age Verification: To confirm that all players are aged 18 or above and to verify identity as required under our Know Your Customer (KYC) programme.
• Payment Processing: To facilitate deposits via bKash, Nagad, Rocket, Upay, Visa, and Mastercard, and to process withdrawal requests back to verified payment methods.
• Fraud Prevention & AML Compliance: To detect, investigate, and prevent fraudulent transactions, collusive behaviour, money laundering, and any other activity that may violate applicable law or our Terms and Conditions.
• Customer Support: To respond to enquiries, resolve disputes, and provide technical assistance via email and live chat.
• Responsible Gaming: To monitor gaming patterns that may indicate problem gambling behaviour, and to apply or communicate responsible gaming tools where appropriate.
• Platform Improvement: To analyse aggregate usage patterns, test new features, and improve the overall quality and reliability of the moja88 platform.
• Marketing Communications: Where you have provided explicit consent, to send promotional offers, bonus notifications, and platform updates. You may withdraw consent at any time by contacting [email protected].
• Legal Obligations: To comply with applicable legal and regulatory requirements, including responding to lawful requests from law enforcement or governmental authorities.

moja88 processes personal data on the basis of one or more of the following legal grounds, depending on the nature and purpose of the processing activity:

• Contractual Necessity: Processing required to perform the contract between you and moja88, including account registration, payment processing, and the delivery of gaming services.
• Legal Obligation: Processing required to comply with a legal or regulatory obligation, including KYC verification, AML reporting, and record-keeping requirements.
• Legitimate Interests: Processing carried out in pursuit of moja88's legitimate business interests, such as fraud detection, platform security, responsible gaming monitoring, and analytics — provided that such interests are not overridden by your privacy rights and fundamental freedoms.
• Consent: Processing based on your explicit, freely given, and informed consent — primarily in relation to direct marketing communications. Consent may be withdrawn at any time without affecting the lawfulness of processing carried out prior to withdrawal.

Where moja88 relies on legitimate interests as the legal basis for processing, a balancing assessment is carried out to ensure that your interests and rights are appropriately protected. You may request information about any such assessment by contacting [email protected].

moja88 does not sell personal data. We may share your personal data with the following categories of recipients only where strictly necessary and subject to appropriate data protection safeguards:

• Payment Processors: bKash, Nagad, Rocket, Upay, Visa, and Mastercard processing partners receive transaction data necessary to complete deposit and withdrawal instructions.
• Identity Verification Providers: Third-party KYC and AML service providers receive identity documents and personal data to complete verification checks as required by compliance obligations.
• Fraud Detection Services: Risk management platforms may receive IP addresses, device fingerprints, and behavioural data to assess the legitimacy of account activity.
• Game Content Providers: Live casino and game studios (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) may receive a player identifier and session token to facilitate game delivery. These providers do not receive full KYC data.
• IT & Hosting Providers: Cloud hosting and infrastructure partners process data on behalf of moja88 under data processing agreements that require them to maintain data confidentiality and security.
• Legal & Regulatory Authorities: Where moja88 is under a legal obligation to disclose information to law enforcement, government bodies, or regulatory authorities, we will do so as required and, where lawfully permitted, will notify the affected player.

All third parties with whom moja88 shares personal data are contractually required to process that data solely for the specified purpose, to maintain appropriate technical and organisational security measures, and to refrain from further disclosure without moja88's written consent.

moja88 uses cookies and similar tracking technologies to operate the platform, improve user experience, and gather analytical data. Cookies are small text files placed on your device when you visit the moja88 website. The following categories of cookies are used:

• Strictly Necessary Cookies: These are essential for the platform to function correctly. They enable core functionality such as session management, secure login, and navigation between pages. These cookies cannot be disabled without significantly impairing your ability to use the site.
• Functional Cookies: These cookies remember your preferences (such as your preferred language or deposit method) to provide a more personalised experience during and between sessions.
• Analytical Cookies: Used to collect aggregated, anonymised data about how players use the platform — including which pages are visited most frequently and how users navigate through the site. This data is used solely to improve platform performance.
• Security Cookies: These cookies support fraud detection and platform integrity, including device fingerprinting to identify suspicious login attempts or account takeover behaviour.

moja88 does not use third-party advertising cookies or behavioural profiling cookies for the purpose of serving targeted advertisements outside the platform. All cookies placed by moja88 are first-party or directly managed third-party cookies subject to data processing agreements.

You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies may affect platform functionality. For guidance on managing cookies in your specific browser, consult your browser's help documentation.

moja88 retains personal data for no longer than is necessary to fulfil the purpose for which it was collected, subject to any overriding legal, regulatory, or contractual obligations that require a longer retention period. The following general retention guidelines apply:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that makes re-identification impossible. Where data is anonymised rather than deleted, the anonymised dataset may be retained for longer periods for statistical and analytical purposes.

moja88 implements a range of technical and organisational security measures designed to protect personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include, but are not limited to:

• SSL/TLS Encryption: All data transmitted between your browser and the moja88 platform is encrypted using industry-standard Transport Layer Security (TLS) protocols.
• Password Hashing: Account passwords are stored using one-way cryptographic hashing algorithms. moja88 staff cannot retrieve your plaintext password under any circumstances.
• Access Controls: Internal access to personal data is restricted on a strict need-to-know basis. Staff with access to player data are subject to confidentiality obligations and receive regular data protection training.
• Intrusion Detection: moja88's infrastructure employs automated monitoring tools to detect and alert on suspicious access patterns, potential data breaches, and unauthorised system access attempts.
• Regular Security Assessments: The platform undergoes periodic security reviews and vulnerability assessments to identify and remediate potential weaknesses before they can be exploited.
• Secure Data Centres: Player data is hosted in secure, access-controlled data centre environments with physical security measures including surveillance, restricted entry, and redundant infrastructure.

While moja88 takes all reasonable precautions to protect personal data, no system is entirely impervious to security threats. You are encouraged to use a strong, unique password for your moja88 account and to notify us immediately at [email protected] if you suspect that your account has been compromised.

As a player on the moja88 platform, you hold a number of rights with respect to the personal data we hold about you. moja88 will honour these rights subject to applicable legal exceptions and identity verification requirements:

• Right of Access: You may request a copy of the personal data we hold about you, together with information about how it is processed, the purposes of processing, and the categories of recipients with whom it is shared.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you may request that it be corrected or updated. Where possible, please update contact details directly through your account profile settings.
• Right to Erasure ("Right to Be Forgotten"): In certain circumstances, you may request the deletion of your personal data. Note that this right is not absolute — moja88 may be required to retain certain data to comply with legal obligations (such as AML record-keeping requirements), in which case your erasure request will be fulfilled to the maximum extent legally permitted.
• Right to Restrict Processing: You may request that moja88 restrict the processing of your personal data in specific circumstances, for example while the accuracy of data is being contested.
• Right to Data Portability: Where processing is carried out on the basis of consent or contractual necessity and by automated means, you may request that your personal data be provided to you in a structured, commonly used, and machine-readable format.
• Right to Object: You may object to the processing of your personal data where that processing is based on moja88's legitimate interests, including objecting to the use of your data for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of any processing that took place prior to the withdrawal.

To exercise any of the above rights, please submit a written request to [email protected] with the subject line "Data Rights Request — [Your Account Username]". We will verify your identity before processing the request and will respond within 14 calendar days.

The moja88 platform is strictly intended for adults aged 18 years and above. moja88 does not knowingly collect personal data from any individual under the age of 18. Registration on the platform by a minor is a violation of our Terms and Conditions and constitutes a serious breach of this Privacy Policy.

moja88 employs age verification measures during the registration process and as part of KYC procedures to identify and prevent underage access. Where moja88 becomes aware or reasonably suspects that an account has been created by or for a person under 18:

• The account will be suspended immediately pending investigation.
• All personal data associated with the account will be deleted without further processing, subject only to any legally mandated retention obligations.
• Any balance held within the account will be returned to the original payment method, and any bonus or winnings associated with the account will be voided.

The moja88 website does not contain links to external third-party websites for general browsing purposes. However, certain service integrations — such as payment gateway redirect flows and game launch protocols operated by third-party studios — may involve brief interactions with external technical environments.

Where such interactions occur, the relevant third party's own privacy policy governs the collection and processing of any data on their systems. moja88 does not accept responsibility for the privacy practices of third-party technical environments accessed as part of the payment or gaming service delivery process.

Players are encouraged to review the privacy documentation of any payment provider (such as bKash or Nagad) whose services they use in connection with the moja88 platform, as those providers operate independently under their own data governance frameworks.

moja88 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the services we provide. The effective date at the top of this page will be updated each time a new version is published.

Where changes are material — meaning they could significantly affect your privacy rights or the manner in which your data is processed — moja88 will provide advance notice to registered players via the email address on file or through a prominent platform announcement. We will always give you a reasonable opportunity to review material changes before they take effect.

Minor amendments (such as typographical corrections, clarifications that do not alter the substance of the policy, or updated contact information) may be published without advance notice. Continued use of the moja88 platform following publication of any amendment constitutes your acceptance of the revised Policy.

The version of this Policy that applies to you is the version that was in effect at the time of the relevant data collection or processing activity, unless you have explicitly consented to a subsequent version.

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data, please contact the moja88 data privacy team using the details below:

• Email: [email protected]
• Subject Line Format: "Privacy Enquiry — [Your Account Username]"
• Response Time: Acknowledgement within 3 business days; substantive response within 14 calendar days.
• Support Hours: 24 hours a day, 7 days a week — Bangladesh-based agents active during BST (UTC+6) business hours.

moja88 takes all privacy-related correspondence seriously. Whether you are exercising a data subject right, reporting a potential data breach, withdrawing marketing consent, or raising a concern about how your data has been handled, our team is committed to providing a thorough and timely response.