Privacy Policy — bdbajji

At bdbajji, we take the privacy of our players seriously. This Privacy Policy describes the types of personal information we collect when you use the bdbajji platform, how that information is used, who it may be shared with, and how long it is retained. By registering an account or using any service offered through bdbajji, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein.

This policy applies to all players accessing the bdbajji platform from Bangladesh, including those using the platform via desktop browser or mobile device. It covers data collected through our website, account registration process, customer support interactions, and payment processing activities.

1. Information We Collect

1.1 Information You Provide Directly

When you create an account or interact with bdbajji support, we collect the personal information you submit. This includes:

• Identity information: Full legal name, date of birth, gender, and nationality.
• Contact information: Mobile phone number, email address, and residential address in Bangladesh (including district, division, and postal code).
• Verification documents: National Identity Card (NID) number, passport details, or driving licence information submitted during KYC verification.
• Payment information: bKash wallet number, Nagad wallet number, Rocket wallet number, Upay account details, or bank account details used for deposits and withdrawals. We do not store full payment card numbers on our servers.
• Account preferences: Responsible gaming settings, deposit limit configurations, and communication preferences set within your account dashboard.

1.2 Information Collected Automatically

When you visit or use the bdbajji platform, certain technical information is collected automatically by our systems. This includes:

• IP address and approximate geographic location (city and district level within Bangladesh).
• Browser type, browser version, operating system, and device type (desktop, mobile, tablet).
• Pages visited, time spent on each page, referring URL, and click-path data within the platform.
• Session duration, login timestamps, and logout timestamps.
• Game activity logs, including game titles played, session duration, wager amounts in Bangladesh Taka (৳), and outcomes.
• Transaction logs for all deposits and withdrawals, including timestamps, amounts, and payment methods used.

2. How We Use Your Data

bdbajji uses the personal data it collects solely for legitimate purposes directly connected to operating a safe, fair, and functional online casino and sports betting platform for players in Bangladesh. The specific purposes for which your data is used are set out below.

Purpose	Data Used	Legal Basis
Account registration and identity verification (KYC)	Name, date of birth, NID / passport, contact details	Contractual necessity; legal obligation
Processing deposits and withdrawals	Payment method details, transaction history	Contractual necessity
Fraud prevention and anti-money-laundering (AML) compliance	Identity data, transaction data, IP address, device data	Legal obligation; legitimate interest
Responsible gaming monitoring and intervention	Gaming activity logs, session data, account history	Legitimate interest; player protection
Customer support and dispute resolution	Account data, communication records, transaction logs	Contractual necessity; legitimate interest
Platform analytics and performance improvement	Anonymised usage data, session data, click-path data	Legitimate interest
Promotional communications (where consent is given)	Email address, mobile number, gaming preferences	Consent (opt-in only)

bdbajji does not use your personal data for automated decision-making that produces legally significant effects without human review. Where automated systems flag an account for review (for example, as part of AML or responsible gaming monitoring), a member of the bdbajji compliance or support team will review the case before any action is taken.

3. Cookies & Tracking

3.1 What Are Cookies

Cookies are small text files placed on your device when you visit the bdbajji website. They allow the platform to recognise your browser, maintain your login session, and remember your preferences between visits. bdbajji uses both session cookies (which expire when you close your browser) and persistent cookies (which remain on your device for a defined period).

3.2 Types of Cookies Used by bdbajji

• Essential cookies: Required for the platform to function. These include session management cookies, security tokens, and login state cookies. These cannot be disabled without disrupting your ability to use bdbajji.
• Analytics cookies: Used to understand how players navigate the platform — which pages are visited most frequently, where players spend the most time, and where they encounter difficulties. This data is aggregated and anonymised.
• Preference cookies: Store your language and display preferences so you do not need to reconfigure them on each visit.
• Security cookies: Used to detect unusual login patterns, repeated failed authentication attempts, and other signals of account compromise.

3.3 Managing Cookies

You may control cookie behaviour through your browser settings. Most modern browsers allow you to block or delete cookies, or to receive a notification before a cookie is placed. Please note that disabling essential cookies will impair the functionality of the bdbajji platform, including the ability to maintain a logged-in session. Instructions for managing cookies in commonly used browsers are available in each browser's help documentation.

4. Data Sharing & Disclosure

bdbajji does not sell, rent, or trade your personal data to third parties. Data may be shared in the following limited and controlled circumstances:

4.1 Game and Technology Providers

To deliver casino games and live dealer experiences, bdbajji works with third-party game providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive session-level data (such as game session identifiers and wager amounts) necessary to deliver and settle game outcomes. They do not receive your full identity or payment information.

4.2 Payment Processors

When you make a deposit or request a withdrawal via bKash, Nagad, Rocket, Upay, or a Bangladeshi bank, necessary transaction data is shared with the relevant payment processor to complete the transfer. Each payment processor operates under its own privacy policy and data handling obligations. bdbajji does not store full payment credentials on our systems beyond the minimum required for transaction reconciliation.

4.3 Identity Verification Services

bdbajji may use third-party KYC and identity verification service providers to validate the authenticity of documents submitted during account registration or prior to withdrawal. These providers process identity data under strict confidentiality agreements and are not permitted to use your data for any purpose other than the identity check requested by bdbajji.

4.4 Legal and Regulatory Disclosure

bdbajji may disclose personal data to law enforcement authorities, regulatory bodies, or other government entities in Bangladesh when required to do so by applicable law, court order, or official regulatory request. In such cases, bdbajji will disclose only the minimum information required to satisfy the legal obligation and will notify the affected player where it is lawful and practical to do so.

4.5 Business Transfers

In the event that bdbajji undergoes a merger, acquisition, or sale of all or part of its business assets, player data may be transferred to the successor entity as part of that transaction. Affected players will be notified of any such transfer and the privacy practices of the successor entity prior to the data transfer taking effect.

5. Data Retention

bdbajji retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply:

• Account data and KYC records: Retained for the duration of the account and for a minimum of 5 years following account closure, in accordance with anti-money-laundering record-keeping requirements.
• Transaction records: Retained for a minimum of 5 years from the date of the transaction.
• Communication and support records: Retained for 3 years from the date of the last interaction, or longer if the communication relates to an unresolved dispute.
• Game activity logs: Retained for 2 years from the date of the session, then anonymised for aggregate analytics purposes.
• Marketing consent records: Retained for the duration of the consent period plus 2 years, to demonstrate compliance in the event of a query.

When personal data is no longer required, bdbajji will securely delete or irreversibly anonymise it so that it can no longer be attributed to an identifiable individual. Secure deletion involves overwriting or cryptographic erasure of stored data rather than simple logical deletion.

6. Your Data Rights

As a player based in Bangladesh using the bdbajji platform, you have the following rights in relation to your personal data. To exercise any of these rights, contact the bdbajji data team at support@bdbajji with your full account username and a description of your request. We will respond within 30 days.

• Right of access: You may request a copy of the personal data bdbajji holds about you, including the categories of data held, the purposes for which it is processed, and the parties with whom it has been shared.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Identity data corrections may require submission of updated verification documents.
• Right to erasure: You may request that bdbajji delete your personal data. This right is subject to legal retention obligations — for example, transaction records required by AML law cannot be deleted on request. We will inform you of any data that must be retained and the reason why.
• Right to restrict processing: You may request that bdbajji limit the processing of your personal data to storage only, pending the resolution of an objection or a rectification request.
• Right to withdraw consent: Where bdbajji processes your data on the basis of consent (for example, for promotional communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to the withdrawal.
• Right to object: You may object to the processing of your personal data where bdbajji relies on legitimate interest as the legal basis. bdbajji will assess whether its legitimate interests override your rights and respond accordingly.

7. Data Security

bdbajji takes a layered approach to data security. The following technical and organisational measures are in place to protect your personal information from unauthorised access, disclosure, alteration, or destruction:

• SSL/TLS encryption: All data transmitted between your browser or device and the bdbajji platform is encrypted in transit using industry-standard TLS 1.2 or higher protocols.
• Encryption at rest: Sensitive personal data stored in bdbajji databases — including identity documents and payment details — is encrypted at rest using AES-256 encryption.
• Access controls: Access to player personal data within the bdbajji organisation is restricted on a strict need-to-know basis. Staff with access to personal data are subject to confidentiality obligations and receive regular data protection training.
• Two-factor authentication (2FA): Players are encouraged to enable 2FA on their bdbajji accounts. Internal bdbajji systems that process personal data require 2FA for all staff access.
• Penetration testing and vulnerability management: bdbajji conducts periodic security assessments to identify and remediate vulnerabilities before they can be exploited.
• Incident response: bdbajji maintains a documented data breach response procedure. In the event of a breach that poses a risk to your personal data, we will notify affected players without undue delay and take immediate steps to contain and remediate the incident.

8. Policy Updates & Contact

8.1 Changes to This Privacy Policy

bdbajji reserves the right to update or revise this Privacy Policy at any time. When material changes are made — for example, changes to the types of data collected, new categories of data sharing, or changes to your rights — we will publish the updated policy on this page and update the "Last Updated" date shown at the top of the sidebar. For significant changes, we may also send a notification to your registered email address or mobile number.

Your continued use of the bdbajji platform following the publication of a revised Privacy Policy constitutes your acknowledgement of the changes. If you do not agree with the revised policy, you should discontinue use of the platform and request account closure in accordance with the voluntary closure procedure described in the bdbajji Terms & Conditions.

8.2 Contacting Us About Privacy

If you have any questions, concerns, or requests relating to this Privacy Policy or the way bdbajji handles your personal data, please contact our support team using the details below. All privacy-related enquiries are treated with priority and handled by staff who are familiar with our data protection obligations.

• Email: support@bdbajji (plain text — not a clickable link)
• Response time: We aim to acknowledge all data-related queries within 2 business days and provide a full response within 30 calendar days.
• Operating hours: Bangladesh Standard Time (BST, UTC+6), 7 days a week.

We are committed to resolving privacy concerns fairly and transparently. If you are not satisfied with our response to a privacy query, you may escalate your complaint in writing and it will be reviewed by a senior member of the bdbajji compliance team.