bjbaji Privacy Policy

1. Introduction and Scope

bjbaji ("we", "us", "our") operates the online casino and sports betting platform accessible at bjbaji.games. This Privacy Policy describes how bjbaji collects, uses, discloses, stores, and protects personal information relating to individuals who visit the bjbaji website or mobile interface, register a player account, make deposits or withdrawals, or interact with bjbaji's customer support team.

This policy applies to all personal data processed by bjbaji regardless of the device or channel through which it is collected. It covers information collected directly from you, information generated through your use of the Platform, and information received from trusted third-party sources such as identity verification providers and payment processors.

By accessing or using the bjbaji Platform, you confirm that you are at least 21 years of age and that you consent to the collection and use of your personal data as described in this Privacy Policy. If you do not agree with any part of this policy, you should discontinue use of the Platform and contact our support team to request account closure and data deletion where applicable.

2. Personal Data We Collect

2.1 Information You Provide Directly

When you register an account, make a transaction, or contact our support team, bjbaji collects the following categories of personal data:

• Registration data: Full name, date of birth, email address, mobile phone number, and residential address.
• Identity verification documents: Government-issued photo ID (National ID card, passport, or driving licence), proof of address (utility bill or bank statement), and selfie photographs where required for KYC (Know Your Customer) compliance.
• Payment information: bKash/Nagad/Rocket/Upay mobile wallet numbers, bank account details, cryptocurrency wallet addresses, and Visa/Mastercard card numbers (stored in truncated form only — full card numbers are never retained by bjbaji).
• Support communications: The content of any messages, emails, or live chat transcripts exchanged between you and the bjbaji support team.
• Preference settings: Responsible gaming limits, notification preferences, and language or display settings you configure within your account.

2.2 Data Collected Automatically

When you access the bjbaji Platform, certain technical data is collected automatically through cookies, log files, and similar technologies:

• Device and browser data: Device type, operating system, browser type and version, screen resolution, and device identifiers.
• Network data: IP address, approximate geolocation derived from IP, internet service provider, and connection type.
• Usage data: Pages visited, games played, session duration, click patterns, bet history, deposit and withdrawal history, and navigation paths through the Platform.
• Cookie data: Session cookies (required for login and navigation), functional cookies (storing preferences), and analytics cookies (measuring Platform performance). See Section 9 for full cookie details.

2.3 Data from Third Parties

bjbaji may receive personal data about you from the following trusted third-party sources:

• Identity verification and KYC service providers who confirm the authenticity of documents you submit.
• Payment processors and mobile money operators (bKash, Nagad, Rocket, Upay) who confirm transaction status and flag suspicious activity.
• Fraud prevention and anti-money laundering (AML) screening databases.
• Marketing affiliates who referred you to bjbaji (limited to referral identifier only — affiliates do not share your personal contact details with bjbaji).

3. How bjbaji Uses Your Personal Data

bjbaji processes your personal data only for the specific purposes listed below. We rely on one or more lawful bases for each processing activity:

bjbaji will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or as otherwise required by law.

4. Data Sharing and Disclosure

bjbaji does not sell, rent, or trade your personal data. We share your information only in the limited circumstances described below, and only to the extent necessary for each purpose:

4.1 Service Providers and Data Processors

bjbaji engages trusted third-party service providers who process personal data on our behalf under strict data processing agreements. These include payment processors (bKash, Nagad, Rocket, Upay, Visa, Mastercard), identity verification providers, cloud hosting and infrastructure providers, customer support software providers, and fraud prevention services. All data processors are contractually required to maintain appropriate technical and organisational security measures and to use your data solely for the purpose for which it was shared.

4.2 Game Providers

When you play games on the bjbaji Platform powered by providers such as Evolution Gaming, Pragmatic Play, Spribe, and Ezugi, a limited set of anonymised session data (such as a session token and game result seed) is transmitted to the game provider's servers to facilitate gameplay. Your full name, payment details, and contact information are never shared with game providers.

4.3 Legal and Regulatory Disclosure

bjbaji may disclose your personal data to law enforcement agencies, regulatory authorities, or other government bodies where we are legally required to do so, or where disclosure is necessary to prevent or detect crime, protect the rights of bjbaji or third parties, or comply with a court order or legal process.

4.4 Business Transfers

In the event of a merger, acquisition, or sale of all or part of bjbaji's business, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer and the applicable privacy protections before your data is transferred or becomes subject to a different privacy policy.

5. Data Retention

bjbaji retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulation. The following general retention periods apply:

• Account and identity data: Retained for the lifetime of the account, plus a minimum of five (5) years following account closure, in compliance with anti-money laundering record-keeping obligations.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction.
• Support communications: Retained for three (3) years from the date of the last interaction, or longer if the communication relates to an ongoing dispute or legal matter.
• Marketing preferences and consent records: Retained until you withdraw consent, plus one (1) year thereafter as evidence of consent history.
• Analytics and usage data: Retained in aggregated, anonymised form indefinitely. Individual-level usage data is anonymised or deleted within twenty-four (24) months of collection.

When personal data is no longer required, bjbaji will securely delete or anonymise it in accordance with our internal data destruction procedures. Backups containing personal data are subject to the same retention schedule and are purged on a rolling basis.

6. Data Security

bjbaji implements a comprehensive set of technical and organisational measures to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. Key security controls include:

• Transport Layer Security (TLS 1.2 / 1.3): All data in transit between your device and bjbaji's servers is encrypted using 256-bit SSL/TLS certificates.
• Encryption at rest: Sensitive personal data fields — including identity document images and payment identifiers — are encrypted at rest using AES-256 encryption.
• Access controls: Access to personal data within bjbaji's systems is restricted on a strict need-to-know basis, enforced through role-based access controls and multi-factor authentication for all staff accounts.
• Network security: bjbaji's infrastructure is protected by firewalls, intrusion detection systems, and regular vulnerability assessments and penetration testing.
• Incident response: bjbaji maintains a documented data breach response procedure. In the event of a breach that poses a risk to your rights and freedoms, bjbaji will notify affected players without undue delay.

While bjbaji takes all reasonable steps to protect your personal data, no internet-based platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your own account credentials. If you suspect your bjbaji account has been compromised, contact our support team immediately.

7. Your Data Rights

As a bjbaji account holder, you have the following rights with respect to your personal data. To exercise any of these rights, contact our support team using the email address in the footer of this page and include your registered username and a clear description of your request. bjbaji will respond within 30 days of receiving a valid request.

• Right of Access: You may request a copy of the personal data bjbaji holds about you, along with information about how it is used and with whom it is shared.
• Right to Rectification: If any personal data held by bjbaji is inaccurate or incomplete, you may request that it be corrected or updated.
• Right to Erasure: You may request deletion of your personal data in circumstances where it is no longer necessary for the purposes for which it was collected, subject to bjbaji's legal record-keeping obligations (see Section 5).
• Right to Restrict Processing: You may request that bjbaji limits the processing of your personal data in certain circumstances, such as while the accuracy of data is being contested.
• Right to Data Portability: You may request that bjbaji provides your personal data in a structured, commonly used, machine-readable format so that it can be transferred to another service provider.
• Right to Object: You may object to the processing of your personal data where bjbaji relies on legitimate interests as its lawful basis. You may also withdraw marketing consent at any time via your account notification settings or by contacting support.
• Right not to be subject to automated decision-making: Where bjbaji makes decisions that significantly affect you (such as account suspension for suspected fraud) using automated systems, you have the right to request human review of that decision.

Please note that some rights may be subject to conditions or limitations under applicable law. Where bjbaji is unable to fulfil a request in full, we will explain the reasons clearly in our response.

8. International Data Transfers

bjbaji's primary infrastructure and data storage systems are located in secure data centres in the Asia-Pacific region. Some of our trusted third-party service providers — including certain cloud infrastructure and game provider partners — may process personal data in locations outside Bangladesh. Where such transfers occur, bjbaji takes appropriate steps to ensure that your personal data receives an equivalent level of protection, including through the use of contractual data protection clauses with the relevant data processors.

bjbaji does not transfer personal data to any jurisdiction that does not provide an adequate level of data protection without implementing appropriate safeguards. If you have questions about the specific countries to which your data may be transferred, please contact our support team.

9. Cookies and Tracking Technologies

bjbaji uses cookies and similar tracking technologies to operate the Platform effectively, remember your preferences, and understand how players use the Platform so we can improve it. The following categories of cookies are used:

• Strictly Necessary Cookies: These cookies are essential for the Platform to function. They enable core features such as logging in, maintaining your session, and processing transactions. These cookies cannot be disabled without impairing Platform functionality.
• Functional Cookies: These cookies remember your preferences, such as your chosen display language, notification settings, and responsible gaming limits, so they persist across sessions.
• Analytics Cookies: bjbaji uses anonymised analytics data to understand which games are most popular, how players navigate between pages, and where technical errors occur. This data is aggregated and does not identify you as an individual.

bjbaji does not use third-party advertising cookies or behavioural profiling cookies. You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will prevent you from logging in or using core Platform features. For details on managing cookies in your specific browser, refer to your browser's help documentation.

10. Protection of Minors

The bjbaji Platform is strictly intended for adults aged 21 and above. bjbaji does not knowingly collect, store, or process personal data belonging to individuals under the age of 21. If bjbaji discovers or is notified that an account has been registered by a person under the age of 21, that account will be immediately suspended, all associated data will be deleted in accordance with our data retention procedures, and any funds deposited will be returned to the originating payment method pending verification.

If you believe a minor has accessed the bjbaji Platform using your payment details or identity, please contact our support team immediately. bjbaji takes child protection obligations seriously and will cooperate fully with any relevant investigations.

11. Changes to This Privacy Policy

bjbaji reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, Platform features, or applicable legal requirements. When material changes are made, bjbaji will notify registered players by email and/or through a prominent notice on the Platform at least seven (7) days before the changes take effect.

The "Last updated" date at the top of this page will always reflect the date of the most recent revision. We encourage you to review this Privacy Policy periodically. Your continued use of the bjbaji Platform following the effective date of any updated Privacy Policy constitutes your acceptance of those changes.

12. Contact Us About Privacy

If you have any questions, concerns, or requests relating to this Privacy Policy or the way bjbaji handles your personal data, please reach out to our support team using the contact details displayed in the footer of this page. When submitting a privacy-related enquiry, please include the following information to help us respond efficiently:

• Your registered bjbaji username or the email address associated with your account.
• A clear description of your request or concern (e.g., "request for data access", "request for data deletion", "query about cookie use").
• Any relevant transaction references, dates, or other context that may help us locate your records.

bjbaji aims to acknowledge all privacy-related enquiries within 48 hours (Bangladesh Standard Time, UTC+6) and to provide a full response within 30 calendar days. For complex requests, we may extend this period by an additional 30 days and will inform you accordingly.

If you are not satisfied with bjbaji's response to a privacy concern, you have the right to lodge a complaint with the applicable data protection authority in your jurisdiction.