bajjie Privacy Policy

1 Information We Collect

bajjie collects personal information from you in several ways: directly when you register an account or contact our support team, automatically as you use the platform, and from third-party sources such as payment processors and identity verification services. The categories of information we collect are described below.

1.1 Registration & Account Data

When you create a bajjie account, we collect the information you provide in the registration form. This includes:

• Full legal name
• Date of birth (used to verify that you are 18 or older)
• Email address
• Mobile phone number (used for OTP authentication and account communications)
• Residential address including city, district, and postal code
• Username and encrypted password
• Preferred language (English)

1.2 Identity Verification (KYC) Documents

As part of our Know Your Customer (KYC) process, we may request and store copies of official identity documents, including your Bangladesh National Identity Card (NID), passport, or driving licence. We may also request proof of address documents such as a recent utility bill or bank statement. These documents are used solely to verify your identity, confirm your age, and satisfy our anti-money laundering compliance obligations.

1.3 Financial & Transaction Data

bajjie records all financial transactions conducted through your account, including deposits, withdrawals, bet placements, bonus credits, and refunds. We also store payment method identifiers — such as the registered mobile number associated with your bKash or Nagad account, or the last four digits of a linked bank card — for verification and fraud prevention purposes. bajjie does not store full card numbers or mobile banking PINs on its servers.

1.4 Usage & Behavioural Data

When you use the bajjie platform, we automatically collect technical and behavioural data about your session. This includes:

• IP address and approximate geographic location
• Device type, operating system, and browser version
• Pages visited, time spent on each page, and navigation patterns
• Games played, bet amounts, and betting history
• Session start and end times
• Error logs and crash reports

This data helps us improve platform performance, detect unusual activity, and tailor the experience to your preferences.

1.5 Communications Data

If you contact bajjie's customer support team — whether via live chat, email, or any other channel — we retain a record of that correspondence. This includes your messages, our responses, and any attachments you provide. This data is used to resolve your queries, train our support team, and maintain an accurate history of your interactions with bajjie.

2 How We Use Your Information

bajjie uses your personal data only for the purposes described in this Privacy Policy. We do not use your data for purposes that are incompatible with those for which it was originally collected. The table below sets out the primary purposes for which we process your personal information and the lawful basis for each.

2.1 Marketing Communications

If you have opted in to receive promotional communications from bajjie, we may send you emails or SMS messages about new games, special offers, seasonal promotions (such as Eid or Pohela Boishakh bonuses), and platform updates. You may withdraw your consent to receive marketing communications at any time by clicking the unsubscribe link in any marketing email or by contacting [email protected]. Withdrawing consent for marketing does not affect the lawfulness of processing based on consent prior to withdrawal.

2.2 Automated Decision-Making

bajjie uses automated systems for certain decisions, including fraud detection, bonus eligibility assessments, and responsible gaming alerts. Where an automated decision has a significant effect on your account — such as a temporary restriction — you have the right to request human review of that decision. Please contact [email protected] if you believe an automated decision has been applied to your account incorrectly.

3 Sharing & Disclosure of Data

bajjie does not sell your personal data. We share your information only in the limited circumstances described below, and only to the extent necessary for the stated purpose.

3.1 Service Providers

We work with a small number of trusted third-party service providers who process data on our behalf. These include payment processing partners (such as the operators of bKash, Nagad, Rocket, and Upay integrations), identity verification providers, game software suppliers (such as Pragmatic Play, Evolution Gaming, and Ezugi), cloud hosting providers, and customer support tooling vendors. All third-party processors are subject to binding data processing agreements that prohibit them from using your data for any purpose other than delivering the service for which they were engaged.

3.2 Legal & Regulatory Disclosure

bajjie may disclose your personal data to law enforcement agencies, regulatory bodies, financial intelligence units, or other competent authorities when required to do so by applicable law, court order, or lawful request. We will, where legally permissible, notify you of such disclosures in advance.

3.3 Business Transfers

In the event that bajjie undergoes a merger, acquisition, restructuring, or sale of all or part of its business assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and of any material changes to how your data is processed as a result.

4 Cookies & Tracking Technologies

bajjie uses cookies and similar tracking technologies on its website to provide a functional, personalised, and secure experience. A cookie is a small text file stored on your device when you visit a website. Cookies do not contain executable code and cannot access other data on your device.

4.1 Types of Cookies We Use

4.2 Third-Party Cookies

bajjie does not deploy third-party advertising cookies or retargeting pixels. The only third-party cookies that may be set on your device when using bajjie are those placed by our game providers (such as Pragmatic Play or Evolution Gaming) within their embedded game frames. These cookies are limited in scope and are governed by each provider's own privacy policy.

4.3 Managing Cookies

You can manage or disable cookies at any time through your browser settings. Please note that disabling strictly necessary cookies will impair the functionality of the bajjie platform, including your ability to log in and maintain an active session. Disabling functional or analytics cookies will not prevent you from using the platform but may result in a less personalised experience.

5 Data Retention & Storage

bajjie retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, comply with our legal and regulatory obligations, resolve disputes, and enforce our agreements. The specific retention periods we apply to different categories of data are outlined below.

5.1 Retention Periods

• Account registration data: Retained for the duration of your account and for a minimum of 5 years following account closure, in accordance with anti-money laundering record-keeping requirements.
• KYC and identity documents: Retained for a minimum of 5 years from the date of verification or from account closure, whichever is later.
• Transaction and betting history: Retained for a minimum of 5 years from the date of each transaction for AML and dispute resolution purposes.
• Customer support correspondence: Retained for 3 years from the date of the last interaction in the relevant support thread.
• Usage and behavioural data: Retained for up to 24 months in identifiable form, after which it may be aggregated and anonymised for statistical analysis.
• Marketing consent records: Retained for the duration of your consent and for 2 years after withdrawal of consent as proof of the consent lifecycle.

5.2 Data Storage Location

bajjie's primary data infrastructure is hosted on secure cloud servers. All servers that store personally identifiable information are protected by firewalls, intrusion detection systems, and access control lists that restrict access to authorised personnel only. Physical access to server facilities is subject to enterprise-grade security protocols including biometric access control and 24/7 monitoring.

5.3 Data Deletion

When the applicable retention period for a category of data expires, bajjie will securely delete or anonymise that data in a manner that makes re-identification impossible. You may also request early deletion of your personal data (subject to our legal retention obligations) by submitting a deletion request to [email protected]. We will acknowledge your request within 5 business days and aim to complete the deletion within 30 days.

6 Your Privacy Rights

As a bajjie player, you have a number of rights with respect to the personal data we hold about you. bajjie is committed to honouring these rights promptly and transparently. To exercise any of the rights below, please contact our Data Protection team at [email protected] with the subject line "Privacy Rights Request".

7 Data Security Measures

bajjie takes the security of your personal data seriously. We implement a combination of technical, organisational, and procedural controls designed to protect your information against unauthorised access, accidental loss, destruction, or disclosure.

7.1 Technical Controls

• Transport Layer Security (TLS 1.3): All data in transit between your browser or app and bajjie's servers is encrypted using TLS 1.3, the current industry standard for secure communications.
• AES-256 Encryption at Rest: Sensitive data stored on bajjie's servers — including identity documents and payment identifiers — is encrypted using AES-256 symmetric encryption.
• OTP Authentication: Account logins and withdrawals above a certain threshold require one-time password (OTP) verification via your registered mobile number, adding a second authentication factor.
• Intrusion Detection Systems: bajjie's infrastructure is monitored continuously by automated intrusion detection and prevention systems that flag anomalous access patterns in real time.
• Regular Penetration Testing: bajjie engages independent security auditors to conduct penetration tests on our platform infrastructure on a periodic basis.

7.2 Organisational Controls

Access to personal data within bajjie is restricted on a strict need-to-know basis. Staff members who handle personal data are required to complete data protection training before being granted access. All employees and contractors who access personal data are bound by confidentiality obligations in their contracts.

7.3 Reporting a Security Concern

If you become aware of or suspect a security vulnerability affecting the bajjie platform, or if you believe your account has been compromised, please contact us immediately at [email protected] with the subject line "Security Concern". We take all security reports seriously and will investigate promptly. Please do not disclose potential vulnerabilities publicly before giving bajjie a reasonable opportunity to address them.

8 Changes to This Policy

bajjie reserves the right to update this Privacy Policy at any time in response to changes in applicable law, changes in our data processing practices, new product features, or for other operational reasons. When we make material changes to this policy, we will notify you by sending an email to your registered email address at least 14 days before the updated policy comes into effect.

Material changes are defined as changes that affect your rights, the categories of data we collect, the purposes for which we use your data, or the parties with whom we share your data. Minor editorial corrections, clarifications, or formatting changes that do not affect the substance of this policy may be made without advance notice.

The "Effective Date" shown at the top of this page will always reflect the date on which the current version of the policy took effect. We encourage you to review this page periodically. Your continued use of the bajjie platform after the effective date of an updated Privacy Policy constitutes your acceptance of the changes.

8.1 Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise your privacy rights, or want to raise a complaint about how bajjie handles your personal data, please contact our Data Protection team:

bajjie is committed to resolving all privacy-related complaints in a fair, transparent, and timely manner. If you are not satisfied with our response to your complaint, you may wish to seek further advice from a consumer protection or data privacy authority in Bangladesh.