bjbajji Privacy Policy

bjbajji collects personal data through several channels: directly from you when you register or interact with the platform, automatically through your device and browser, and from third-party verification services. The categories of data we collect include:

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, genetic data, or biometric data for identification purposes, unless specifically required by law.

Where you choose not to provide personal data that is marked as mandatory at registration or during KYC, we may be unable to open or maintain your bjbajji account or process withdrawal requests.

bjbajji uses the personal data we collect for the following specific purposes:

• Account Creation and Management: To register your bjbajji account, verify your identity, maintain your account settings, and provide you with access to the platform's games, betting markets, and payment features.
• Payment Processing: To facilitate deposits and withdrawals via bKash, Nagad, Rocket, Upay, and bank transfers in Bangladeshi Taka (৳), and to maintain accurate transaction records.
• KYC and Fraud Prevention: To verify your age and identity in compliance with responsible gaming obligations, to detect and prevent fraudulent activity, money laundering, and unauthorised account access.
• Customer Support: To respond to your enquiries, resolve disputes, process complaints, and communicate important account-related updates via email or live chat.
• Legal and Regulatory Compliance: To meet obligations under applicable anti-money laundering (AML) regulations, to respond to lawful requests from regulatory or law-enforcement authorities, and to maintain records required by law.
• Platform Improvement: To analyse aggregated, anonymised usage patterns in order to improve game performance, platform navigation, and the overall user experience for Bangladesh players.
• Marketing Communications: Where you have provided explicit consent, to send you promotional offers, bonus notifications, and updates about new games or features on bjbajji. You may withdraw this consent at any time.
• Responsible Gaming: To monitor account activity for signs of problem gambling, to enforce self-exclusion and deposit limit settings, and to deliver responsible gaming messaging in accordance with our Responsible Gaming policy.

bjbajji will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or establishing a new lawful basis for processing.

bjbajji processes your personal data under the following legal bases, depending on the specific purpose of the processing activity:

• Contractual Necessity: Processing required to perform our contract with you — i.e., to operate your bjbajji account, facilitate deposits and withdrawals, settle bets, and provide customer support.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including AML checks, age verification requirements, and responses to lawful authority requests.
• Legitimate Interests: Processing conducted in pursuit of bjbajji's legitimate business interests, including fraud detection, platform security, abuse prevention, and internal analytics — provided those interests are not overridden by your privacy rights.
• Consent: Processing based on your freely given, specific, and informed consent — primarily for marketing communications and non-essential cookies. You may withdraw consent at any time by contacting support or updating your account preferences.

Where legitimate interests are relied upon as a lawful basis, bjbajji has conducted a balancing assessment to confirm that those interests do not disproportionately override the privacy rights of individual players. Copies of relevant balancing assessments are available on request.

bjbajji does not sell or rent your personal data to any third party. We may share your data with the following categories of trusted recipients, solely to the extent necessary for each stated purpose:

• Payment Processors: bKash, Nagad, Rocket, Upay, Visa, Mastercard, and participating Bangladeshi banks receive the financial data necessary to process your deposits and withdrawals. Each payment partner operates under its own privacy policy and data security standards.
• Identity Verification Providers: Third-party KYC service providers who assist bjbajji in verifying player identity and age. These providers are contractually bound to process data only on bjbajji's instructions and may not use it for their own purposes.
• Game Technology Providers: Software providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive pseudonymised session data necessary to deliver and certify game outcomes. No directly identifying personal data is shared with game providers beyond what is technically required.
• IT Infrastructure and Cloud Providers: Hosting, database, and security service providers who store and process platform data on our behalf, operating under strict data processing agreements.
• Regulatory and Law Enforcement Authorities: When required by a lawful order, subpoena, or regulatory directive, bjbajji may disclose personal data to competent authorities. We will notify affected players where we are legally permitted to do so.
• Fraud Prevention Services: Shared fraud databases and risk-scoring providers who assist in detecting and preventing account fraud, bonus abuse, and money laundering activity.

All third-party service providers engaged by bjbajji are required to implement appropriate technical and organisational data protection measures and to process personal data only in accordance with bjbajji's documented instructions.

bjbajji uses cookies and similar tracking technologies (including local storage and session tokens) to operate the platform, maintain your logged-in session, remember your preferences, and analyse usage patterns. The types of cookies we use are:

• Strictly Necessary Cookies: These cookies are essential for the bjbajji platform to function. They enable core features such as session management, login state, and security tokens. You cannot opt out of strictly necessary cookies without ceasing to use the platform.
• Functional Cookies: These cookies remember your preferences such as preferred language, display settings, and recently played games, to provide a more personalised experience on your next visit.
• Analytical Cookies: These cookies collect anonymised data about how players navigate and interact with the bjbajji platform. The information helps us identify usability issues, measure feature adoption, and plan platform improvements.
• Marketing Cookies: Where you have consented, these cookies allow bjbajji to tailor promotional content displayed on the platform to your gaming preferences and activity history. They do not share your data with external advertising networks.

You can manage or disable non-essential cookies through your browser settings. Please note that disabling functional or analytical cookies may affect your experience on the bjbajji platform. For detailed instructions on managing cookies in your specific browser, refer to your browser's official help documentation.

bjbajji does not use third-party advertising trackers (such as Facebook Pixel or Google Ads remarketing tags) that transmit your personal data to external advertising platforms.

bjbajji implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security framework includes:

• Encryption in Transit: All communications between your browser or mobile device and the bjbajji servers are encrypted using TLS 1.2 or higher (256-bit SSL). This protects your login credentials, payment details, and personal data as they travel across the internet.
• Encryption at Rest: Sensitive personal data and financial records stored in bjbajji's databases are encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data is restricted on a strict need-to-know basis. bjbajji employees and contractors are granted the minimum level of data access required to perform their roles. Access rights are reviewed regularly.
• Two-Factor Authentication (2FA): Players are encouraged to enable 2FA on their bjbajji accounts to add an additional layer of protection against unauthorised login attempts.
• Security Monitoring: bjbajji's infrastructure is monitored continuously for suspicious activity, intrusion attempts, and anomalous data access patterns. Automated alerts are in place for potential data security incidents.
• Penetration Testing: bjbajji conducts periodic security assessments, including penetration testing and vulnerability scans, to identify and address potential weaknesses in the platform's security posture.

In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of affected players, bjbajji will take prompt steps to contain the breach, assess its impact, and notify affected individuals without undue delay.

While bjbajji takes all reasonable steps to protect your data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your bjbajji login credentials and for logging out of your account when using shared or public devices.

bjbajji retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required or permitted by applicable laws and regulations. Our standard retention periods are as follows:

After the applicable retention period expires, personal data is securely deleted or anonymised so that it can no longer be associated with any individual. Anonymised, aggregated data (which cannot identify any individual) may be retained indefinitely for statistical and research purposes.

Where you request deletion of your data before the standard retention period has elapsed, bjbajji will honour that request to the maximum extent permitted by law. Certain data — particularly that which is required for AML compliance and financial record-keeping — may not be deleted early regardless of a deletion request.

As a bjbajji player, you have the following rights in relation to your personal data. To exercise any of these rights, contact our privacy team at [email protected] with the subject line "Privacy Rights Request". We will respond within 30 days of receiving a valid request.

The bjbajji platform is strictly intended for adults aged 18 years and over. 18+ bjbajji does not knowingly collect, process, or retain personal data from any individual under the age of 18.

Age verification is conducted as part of the registration and KYC process. Where bjbajji has reasonable grounds to believe that a registered user is under 18, the account will be suspended immediately and the user's data will be reviewed by our compliance team. If an underage user is confirmed, their account will be permanently closed, any funds will be returned to the verified payment source, and their data will be securely deleted or anonymised to the extent not required for regulatory record-keeping.

If you believe that a minor has registered an account on bjbajji without parental consent, please contact us immediately at [email protected]. We take all such reports seriously and will investigate and act promptly.

Parents and guardians are encouraged to use parental control software to restrict access to gambling websites on devices shared with or used by minors.

bjbajji may update this Privacy Policy periodically to reflect changes in our data processing practices, new regulatory requirements, or improvements to our platform. When material changes are made, we will update the "Last Updated" date at the top of this page and, where practicable, notify registered players via email or an in-platform notification.

We encourage you to review this Privacy Policy each time you visit the bjbajji platform. Your continued use of the platform following the publication of a revised Privacy Policy constitutes your acknowledgement of the updated terms.

Where a proposed change to this policy requires your consent (for example, a new use of your personal data that was not previously disclosed), we will obtain that consent before the new processing activity begins.

If you have any questions, concerns, or requests regarding this Privacy Policy or the way bjbajji handles your personal data, please contact our privacy team through any of the following channels:

• Email: [email protected] — use the subject line "Privacy Enquiry" or "Privacy Rights Request" for the fastest response.
• Live Chat: Available 24/7 directly on the bjbajji platform. Our support agents can log your privacy request and escalate it to the compliance team.
• Support Hours: Bangladesh Standard Time (UTC+6). Email responses are typically issued within 2 business days; privacy rights requests are addressed within 30 calendar days.

If you are not satisfied with our response to a privacy complaint, you have the right to escalate the matter to the appropriate data protection authority or an independent dispute resolution body in your jurisdiction.