bdbaji Privacy Policy

Introduction & Scope

bdbaji ("bdbaji", "we", "us", "our") is committed to protecting the personal data of all individuals who interact with the bdbaji Platform at bdbaji.vu. This Privacy Policy sets out, in clear and accessible language, the categories of personal data we collect, the purposes for which that data is processed, the legal bases on which we rely, the circumstances under which data may be shared with third parties, and the rights available to you as a data subject.

This Policy applies to all users of the bdbaji Platform regardless of the device or browser used to access it, and covers data collected through account registration, gameplay activity, payment transactions, customer support interactions, and general browsing of the bdbaji website. It does not apply to third-party websites or services that may be linked from or integrated into the Platform — those services are governed by their own privacy policies.

This Policy should be read alongside the bdbaji Terms & Conditions and Responsible Gaming Policy, both of which contain additional provisions that may be relevant to the processing of your personal data.

Data Controller

For the purposes of applicable data protection law, bdbaji is the data controller in respect of personal data collected through the Platform. As data controller, bdbaji determines the purposes and means of processing your personal data and is responsible for ensuring that such processing is conducted lawfully, fairly, and transparently.

All data protection queries, subject access requests, and complaints regarding bdbaji's handling of personal data should be directed to the bdbaji data protection contact point at [email protected]. bdbaji will acknowledge all data protection requests within five business days of receipt and will endeavour to respond substantively within 30 calendar days.

Data We Collect

bdbaji collects personal data across several categories, depending on the nature of your interaction with the Platform. The categories of data we collect are set out in the table below.

bdbaji does not collect special categories of sensitive personal data (such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data for identification purposes) except where you voluntarily disclose such information during a support interaction. Any such disclosure is treated with heightened care and is not used for profiling or marketing purposes.

How We Collect Your Data

bdbaji collects personal data through the following means:

• Directly from you — when you complete the account registration form, submit identity verification documents, make a deposit or withdrawal, contact customer support, or update your account profile settings.
• Automatically — when you visit and interact with the Platform. Technical data such as your IP address, device identifiers, and session logs are captured automatically by bdbaji's web servers and analytics infrastructure. This automatic collection begins as soon as you access the bdbaji website, regardless of whether you are logged in.
• From payment processors — when you initiate a financial transaction through bKash, Nagad, Rocket, Upay, Visa, or Mastercard, bdbaji receives transaction confirmation data from the relevant payment processor, including transaction identifiers and status codes.
• From identity verification partners — where bdbaji uses a third-party Know Your Customer (KYC) service to cross-reference the identity documents you submit, that service may return structured data points confirming or querying the validity of the documents provided.
• From cookies and similar tracking technologies — as described in Section 8 of this Policy.

Legal Basis for Processing

bdbaji processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Performance of a contract: Processing that is necessary for bdbaji to provide the Services you have requested — including account creation, processing deposits and withdrawals, recording bet and game outcomes, and communicating service updates — is carried out on the basis that it is necessary for the performance of the contract between you and bdbaji.
• Compliance with a legal obligation: Processing carried out to comply with anti-money-laundering (AML) obligations, age and identity verification requirements, and record-keeping mandates is carried out on the basis of legal obligation.
• Legitimate interests: Processing carried out for fraud prevention, platform security monitoring, responsible gaming monitoring, and aggregate analytics is carried out on the basis of bdbaji's legitimate interest in operating a safe and commercially viable platform, balanced against your rights and interests.
• Consent: Where bdbaji sends you direct marketing communications (such as promotional emails or SMS notifications about bonuses and events), it does so on the basis of your consent, which you may withdraw at any time by contacting [email protected] or adjusting your account communication preferences.

How We Use Your Data

bdbaji uses the personal data it collects for the following purposes:

• Account management: Creating, maintaining, verifying, and securing your bdbaji player account, including processing login authentication and password resets.
• Service delivery: Enabling you to place bets, play casino games, access jackpot and slot titles, participate in promotions, and use all other features of the bdbaji Platform.
• Payment processing: Facilitating deposits and withdrawals through your chosen payment method (bKash, Nagad, Rocket, Upay, Visa, Mastercard) and maintaining accurate financial records of all transactions.
• Identity verification and KYC compliance: Confirming that you are who you say you are, that you meet the minimum age requirement of 18 years, and that your payment methods are registered in your own name.
• Responsible gaming: Monitoring your gaming activity for indicators of problem gambling behaviour, enforcing deposit limits and self-exclusion restrictions you have set, and contacting you if your activity triggers internal responsible gaming alerts.
• Fraud prevention and security: Detecting and preventing unauthorised account access, duplicate account creation, bonus abuse, money laundering, and other forms of fraudulent or prohibited conduct.
• Customer support: Responding to your enquiries, resolving disputes, and maintaining records of support interactions for quality assurance and dispute resolution purposes.
• Marketing communications: Sending you information about bdbaji promotions, bonuses, seasonal offers (such as Eid specials or BPL match-day promotions), and platform updates, where you have consented to receive such communications.
• Platform improvement: Analysing aggregated, anonymised usage data to understand how players interact with the Platform and to identify areas for improvement in game selection, navigation, and performance.
• Legal compliance: Retaining records as required by applicable law and responding to lawful requests from regulatory or law enforcement authorities.

Sharing Your Data

bdbaji does not sell your personal data to third parties for marketing or commercial purposes. bdbaji may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection agreements where required:

• Payment processors: bKash, Nagad, Rocket, Upay, Visa, and Mastercard, or their technical intermediaries, receive the transaction data necessary to process your deposits and withdrawals. These providers process data under their own privacy policies and are independent data controllers in respect of their own processing activities.
• Identity verification providers: Third-party KYC and AML screening services that assist bdbaji in verifying your identity and cross-referencing your details against sanctions and watchlists. These providers act as data processors on bdbaji's behalf and are contractually bound to use your data only for the purposes instructed by bdbaji.
• Game providers: Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, Spribe, and other licensed studios whose games are hosted on the bdbaji Platform may receive session and game-round identifiers necessary for the technical operation of their games. These providers do not receive your full identity or financial data.
• IT and infrastructure providers: Cloud hosting, content delivery, and cybersecurity service providers that underpin the technical operation of the Platform. These providers act as data processors and are bound by strict confidentiality and data processing agreements.
• Legal and regulatory authorities: Where bdbaji is required by law, court order, or lawful regulatory request to disclose personal data, it will do so. bdbaji will notify you of any such disclosure where it is legally permitted to do so.
• Professional advisers: Legal counsel, auditors, and accountants may access personal data on a strictly confidential basis in connection with the provision of professional services to bdbaji.

In the event that bdbaji undergoes a merger, acquisition, or sale of all or part of its business, personal data held by bdbaji may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and of any material changes to this Privacy Policy that result from it.

Cookies & Tracking Technologies

bdbaji uses cookies and similar tracking technologies on the Platform to support core functionality, improve user experience, and analyse platform usage. A cookie is a small text file placed on your device by a web server when you visit a website. Cookies do not contain executable code and cannot access other data stored on your device.

bdbaji uses the following categories of cookies:

• Strictly necessary cookies: These cookies are essential for the Platform to function correctly. They enable session management, login authentication, and security features. These cookies cannot be disabled without materially impairing the usability of the Platform.
• Functional cookies: These cookies remember your preferences, such as your preferred language setting and responsible gaming configuration, so that you do not need to re-enter them on each visit.
• Analytics cookies: bdbaji uses aggregated, anonymised analytics data to understand traffic patterns, page performance, and feature usage on the Platform. This data does not identify individual users and is used solely for internal improvement purposes.
• Session replay and heatmap tools: bdbaji may use privacy-respecting session analysis tools to understand how players navigate the Platform. Personal data fields (such as password inputs and payment details) are masked by default in any such recordings.

You may manage cookie preferences through your browser settings. Most browsers allow you to refuse new cookies, delete existing cookies, or receive a warning before a cookie is stored. Please note that disabling strictly necessary cookies may prevent you from logging in or using certain features of the Platform.

Data Retention

bdbaji retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by applicable law. The following general retention periods apply:

• Account and identity data: Retained for the duration of the account relationship and for a minimum of five years after account closure, to comply with AML record-keeping obligations.
• Financial transaction data: Retained for a minimum of five years from the date of the transaction, in accordance with financial record-keeping requirements.
• Gaming activity logs: Retained for a minimum of three years from the date of the relevant session, for dispute resolution and responsible gaming audit purposes.
• Customer support communications: Retained for three years from the date of the most recent interaction in a support thread, to support quality assurance and dispute escalation.
• Marketing consent records: Retained for the duration of the consent and for one year after consent is withdrawn, to demonstrate compliance with marketing opt-in requirements.
• Technical / log data: Typically retained for 90 days in rolling logs, except where specific log entries are preserved in connection with an active security investigation or dispute.

When personal data is no longer required for any of the purposes listed above and no legal retention obligation applies, bdbaji will securely delete or irreversibly anonymise the data.

Data Security

bdbaji implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include, but are not limited to:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the bdbaji Platform, ensuring that your login credentials, payment details, and personal information cannot be intercepted in transit.
• Encrypted storage of sensitive data fields, including identity verification documents and financial account references, at rest on bdbaji's servers.
• Access controls: Personal data is accessible only to bdbaji staff and authorised processors who have a demonstrated need to access that data in the course of their duties. Access is managed through role-based permission systems.
• Multi-factor authentication for bdbaji staff accessing systems that hold personal data.
• Regular security assessments and vulnerability testing of the Platform's infrastructure.
• Incident response procedures that govern how bdbaji identifies, contains, and reports data security incidents, including notification to affected users where required.

Your Rights Over Your Personal Data

Subject to applicable law, you have the following rights in respect of the personal data bdbaji holds about you. To exercise any of these rights, please contact bdbaji at [email protected] with a clear description of your request and sufficient information to identify your account.

• Right of access: You have the right to request a copy of the personal data bdbaji holds about you, along with information about how it is processed. bdbaji will provide this information within 30 calendar days of receiving a valid request.
• Right to rectification: If any personal data bdbaji holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You may also update certain profile information directly through your account settings.
• Right to erasure: You may request that bdbaji delete your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where the data has been unlawfully processed. This right is subject to bdbaji's legal retention obligations, which may require certain data to be kept for a minimum period after account closure.
• Right to restrict processing: In certain circumstances, you may request that bdbaji pause the processing of your personal data — for example, while a rectification request is being assessed, or where you have objected to processing and bdbaji is evaluating that objection.
• Right to data portability: Where processing is based on your consent or on contract performance and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format, and to request that bdbaji transmit that data directly to another data controller where technically feasible.
• Right to object: You have the right to object to processing carried out on the basis of bdbaji's legitimate interests, including any profiling based on your gaming activity. You also have an unconditional right to object to direct marketing, including profiling carried out for direct marketing purposes.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

Children's Privacy

The bdbaji Platform is strictly intended for adults aged 18 and above. bdbaji does not knowingly collect personal data from individuals under the age of 18. If bdbaji discovers or is notified that personal data has been collected from a person under 18, the associated account will be immediately closed, all data relating to that account will be deleted (subject to any legal retention obligations), and any funds in the account will be handled in accordance with applicable underage gambling procedures.

If you believe that a person under 18 has created a bdbaji account using false age information, please contact bdbaji immediately at [email protected]. bdbaji takes all such reports seriously and will investigate promptly.

Parents and guardians in Bangladesh who are concerned about underage access to online gaming platforms are encouraged to use device-level parental controls and to review our Responsible Gaming page for additional guidance and resources.

Third-Party Services & External Links

The bdbaji Platform integrates games and services provided by third-party studios including Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, and Spribe. When you play a game hosted by one of these providers within the bdbaji Platform, limited technical data (such as session tokens and game-round identifiers) may be transmitted to the provider's systems for the purpose of delivering and recording the game session. bdbaji has data processing agreements in place with these providers governing the use and protection of any shared data.

The bdbaji Platform does not contain outbound links to external websites. However, if you navigate to any external site in connection with your use of the Platform (for example, through a search engine result or a third-party reference), your use of that external site is governed entirely by the privacy policy of that site. bdbaji accepts no responsibility for the privacy practices of any third-party website or service.

Updates to This Privacy Policy

bdbaji reviews this Privacy Policy periodically and will update it to reflect changes in applicable law, regulatory guidance, or bdbaji's data processing practices. The effective date at the top of this page and in the hero section above will be updated whenever the Policy is revised.

Where changes to this Policy are material — meaning they significantly affect your rights or the way bdbaji processes your personal data — bdbaji will notify registered players by email to their registered address at least 14 calendar days before the revised Policy takes effect. For non-material updates, such as clarifications of existing language or corrections of typographical errors, the revised Policy will take effect on publication without advance notice.

Your continued use of the bdbaji Platform after any revised Policy takes effect constitutes your acknowledgement of the updated terms. If you do not agree with a revised Policy, you should cease using the Platform before the effective date and may request account closure by contacting [email protected].

Contact & Data Rights Requests

All privacy-related enquiries, data subject rights requests, and complaints regarding bdbaji's handling of personal data should be submitted to the bdbaji data protection contact point. Please provide your registered account username and a clear description of your request or concern to allow bdbaji to respond efficiently.

• Email: [email protected] (plain text — not a clickable link)
• Subject line for rights requests: "Data Rights Request — [Your Username]"
• Subject line for complaints: "Privacy Complaint — [Your Username]"
• Response time: Acknowledgement within 5 business days; substantive response within 30 calendar days
• Operating hours: 24/7, Bangladesh Standard Time (UTC+6)

bdbaji is committed to resolving all privacy concerns raised directly by players. If you are not satisfied with bdbaji's response to a privacy complaint, you may have the right to escalate the matter to a relevant data protection authority in your jurisdiction. bdbaji will cooperate fully with any such authority in connection with an investigation into its data processing practices.