baji Privacy Policy

This Privacy Policy ("Policy") describes how baji ("the Platform", "we", "us", "our") collects, uses, stores, and protects the personal data of individuals ("you", "your", "the Player") who register for an account, access the website, use any feature of the Services, or communicate with the baji support team.

baji is committed to handling personal data responsibly and with full transparency. We recognise that players in Bangladesh trust us with sensitive information — including identity documents, financial transaction records, and contact details — and we take that responsibility seriously. This Policy sets out clearly what data we hold, why we hold it, and how we keep it safe.

This Policy applies to all personal data processed through the baji platform, including data collected via the website, any mobile-optimised interface, live chat communications, email correspondence, and payment processing flows. It applies to all registered players and to any visitor who browses the baji website without registering.

By registering on the baji platform or by continuing to use the Services after this Policy has been published or updated, you acknowledge that you have read and understood this Policy and that you consent to the processing of your personal data as described herein. If you do not agree to this Policy, you must not register or continue to use the platform.

baji collects personal data through a number of channels and at various points during your relationship with the platform. The categories of data we collect are set out below.

2.1 Registration Data. When you create a baji account, we collect your full name, date of birth, mobile number, email address, and the city or region of residence you provide during sign-up. This data is required to create and manage your account and to verify that you meet the minimum age requirement of 21 years.

2.2 Identity Verification (KYC) Data. To comply with anti-money-laundering obligations and to process withdrawal requests, baji requires players to complete identity verification. This involves submitting a copy of a government-issued photo identification document (such as a National Identity Card, passport, or driving licence) and, where applicable, proof of ownership of the payment method used to deposit funds. KYC documents are handled with the highest level of confidentiality.

2.3 Financial Transaction Data. We record all deposit and withdrawal transactions associated with your baji account, including the amounts, timestamps, payment method used (e.g., bKash, Nagad, Rocket, Upay, bank transfer), and transaction reference numbers. This data is retained for financial reconciliation, fraud prevention, and regulatory compliance purposes.

2.4 Gameplay and Betting Data. baji records all gaming activity on the platform, including the games played, bet amounts, wager timestamps, outcomes, bonus usage, and cumulative win/loss data. This data is used for account management, dispute resolution, bonus monitoring, and responsible gaming oversight.

2.5 Device and Session Data. When you access the baji platform, we automatically collect technical data about your device and browsing session. This includes your IP address, device type, operating system, browser type and version, screen resolution, language settings, referring URL, pages visited on the baji platform, session duration, and click-stream data. This data is used for security monitoring, fraud detection, and platform optimisation.

2.6 Communications Data. If you contact baji via live chat, email, or any other support channel, we retain records of those communications. This includes the content of the message, the date and time of the communication, and any account or transaction information referenced in the exchange. These records are used for customer service quality, dispute resolution, and compliance documentation.

2.7 Promotional Preferences. Where you have opted in to receive promotional communications, we record that preference and use it to deliver relevant offers and updates. You may withdraw this consent at any time by contacting baji support or updating your communication preferences within your account settings.

baji uses the personal data it collects for a range of specific, legitimate purposes. We do not use your data for any purpose that is incompatible with the original purpose for which it was collected without obtaining your prior consent.

• Account Management: Creating, maintaining, and administering your baji account, including processing deposits, withdrawals, and bonus claims.
• Identity and Age Verification: Verifying that you meet the 21+ age requirement and confirming the accuracy of the information you provided during registration.
• KYC and AML Compliance: Fulfilling our obligations under applicable anti-money-laundering and know-your-customer frameworks by verifying your identity before processing withdrawal requests.
• Fraud Prevention and Security: Detecting, investigating, and preventing fraudulent activity, multi-accounting, unauthorised access, money laundering, and other prohibited behaviours on the platform.
• Customer Support: Responding to your enquiries, resolving complaints, processing account closure requests, and handling disputes in a fair and timely manner.
• Platform Improvement: Analysing aggregated, anonymised usage data to identify trends, improve the user experience, optimise platform performance, and develop new features.
• Responsible Gaming: Monitoring gameplay patterns to identify potential indicators of problem gambling behaviour and to administer responsible gaming tools such as deposit limits and self-exclusion.
• Promotional Communications: Where you have opted in, sending you relevant offers, bonus announcements, tournament notifications, and platform updates via email or other communication channels.
• Legal and Regulatory Compliance: Complying with applicable laws, responding to lawful requests from regulatory authorities, law enforcement agencies, or courts, and maintaining records as required by applicable legal obligations.

baji processes your personal data on one or more of the following legal bases:

4.1 Contractual Necessity. The majority of data processing activities are necessary for the performance of the contract between you and baji — specifically, the account agreement established when you register and accept the Terms & Conditions. Without processing your registration data, KYC information, and financial transaction records, baji cannot provide the Services to you.

4.2 Legitimate Interests. baji processes certain categories of data — including device and session data, gameplay history, and communications records — on the basis of its legitimate interests in operating a secure, fair, and commercially sustainable platform. Where we rely on legitimate interests, we have assessed that our interests do not override your fundamental rights and freedoms.

4.3 Legal Obligation. Certain data processing activities — particularly those related to KYC, AML compliance, and the retention of transaction records — are required by applicable law. baji is legally obligated to conduct these activities and cannot waive this obligation on the basis of an individual player's objection.

4.4 Consent. Where baji relies on consent as the legal basis for processing — most notably for sending promotional communications — you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn. To withdraw consent for marketing communications, contact baji support or update your account preferences.

baji does not sell, rent, or trade your personal data to any third party for commercial purposes. Data sharing is strictly limited to the categories described below, and only to the extent necessary for the stated purpose.

5.1 Payment Processors. To facilitate deposits and withdrawals, baji shares the minimum necessary transaction data with the relevant payment service providers (e.g., bKash, Nagad, Rocket, Upay, and partnering banks). These providers are contractually bound to handle your data securely and to use it only for the purpose of processing the payment transaction in question.

5.2 Identity Verification Providers. KYC documents and identity data may be shared with third-party identity verification service providers engaged by baji to perform document authentication and database checks. These providers operate under strict data processing agreements and may not use the data for any purpose other than the verification service they provide to baji.

5.3 Game Providers. Gameplay data (bet amounts, game sessions, timestamps) is shared with the third-party game studios — including Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, and Ezugi — whose games you access through the baji platform. This data sharing is necessary for game delivery, outcome verification, and dispute resolution. Game providers are bound by their own applicable data protection obligations.

5.4 Legal and Regulatory Authorities. baji may disclose personal data to law enforcement agencies, regulatory bodies, courts, or other competent authorities where required to do so by applicable law, by a valid legal order, or where baji believes in good faith that disclosure is necessary to prevent fraud, money laundering, or other serious criminal activity.

5.5 Business Transfers. In the event that baji undergoes a merger, acquisition, restructuring, or sale of all or substantially all of its assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and the acquiring entity will be required to honour the commitments made in this Privacy Policy.

The baji platform uses cookies and similar tracking technologies to enhance your browsing experience, maintain session continuity, and gather analytical data about how the platform is used. This section explains what cookies are, which types baji uses, and how you can manage your cookie preferences.

6.1 What Are Cookies. Cookies are small text files placed on your device by a website when you visit it. They allow the website to recognise your device on subsequent visits, remember your preferences, and collect data about your interaction with the site. Cookies are widely used across the internet and are essential for many standard website features.

6.2 Types of Cookies Used by baji.

• Strictly Necessary Cookies: Required for the platform to function. These include session cookies that keep you logged in during your visit, security tokens, and load-balancing cookies. These cannot be disabled without breaking core platform functionality.
• Functional Cookies: Remember your preferences such as language settings, preferred game view, and responsible gaming tool configurations. These improve your experience but are not essential for basic functionality.
• Analytical Cookies: Used to collect anonymised, aggregated data about how players navigate the platform — which pages are visited most, where players drop off, and how long sessions last. This data is used purely to improve the platform experience and is not linked to individual identities.
• Security Cookies: Support baji's fraud detection and account security systems by flagging unusual session behaviours, detecting automated bots, and identifying devices associated with known fraudulent activity.

6.3 Managing Cookies. You may control cookie behaviour through your browser settings. Most modern browsers allow you to block, delete, or receive notifications about cookies. Please note that blocking strictly necessary cookies will impair your ability to use the baji platform, including logging in and accessing your account. Adjusting cookie settings in your browser does not affect data already collected prior to the change.

baji implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. These measures are reviewed and updated regularly in line with evolving industry standards.

7.1 Encryption. All data transmitted between your device and the baji platform is encrypted using Transport Layer Security (TLS) protocols. Data stored on baji servers — including KYC documents, financial records, and account credentials — is encrypted at rest using industry-standard encryption algorithms.

7.2 Access Controls. Access to personal data held by baji is restricted to authorised personnel who require it in the performance of their specific job functions. All staff with access to personal data are subject to confidentiality obligations and receive regular training on data protection best practices.

7.3 Two-Factor Authentication. baji strongly encourages all players to enable two-factor authentication (2FA) on their accounts. When 2FA is active, any login attempt from an unrecognised device requires a one-time verification code in addition to the account password, significantly reducing the risk of unauthorised account access.

7.4 Fraud Detection Systems. baji operates automated security monitoring systems that continuously analyse session and transaction data for patterns consistent with fraud, account takeover, or money laundering. Suspicious activity triggers an alert for manual review by the baji security team.

7.5 Security Incidents. In the event of a security incident that results in the unauthorised access or disclosure of your personal data, baji will notify affected players promptly and take all reasonable steps to contain the breach, assess its impact, and prevent recurrence. baji will cooperate fully with any relevant regulatory authority in the event of a notifiable data breach.

7.6 Your Role in Security. The security of your baji account also depends on you. You are responsible for maintaining the confidentiality of your password and for logging out of the platform when using shared or public devices. If you suspect that your account has been compromised, contact baji support immediately via live chat.

baji retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal or regulatory obligations. The following retention principles apply:

8.1 Active Accounts. While your baji account remains active, we retain all account data, KYC records, transaction history, gameplay records, and communications associated with your account. This data is necessary for ongoing account management, dispute resolution, and regulatory compliance.

8.2 Closed Accounts. Following the closure of a baji account — whether initiated by you or by baji — we retain your registration data, KYC documents, and transaction records for a minimum period required by applicable anti-money-laundering regulations. After this retention period expires, data is securely deleted or anonymised so that it can no longer be linked to your identity.

8.3 Promotional Data. Where you have opted in to promotional communications and subsequently withdrawn consent, your marketing preference record is updated immediately. Historical transaction and gameplay data is not affected by withdrawal of marketing consent and is retained per the standard retention schedule.

8.4 Deletion Requests. You may request deletion of your personal data at any time by contacting baji support. We will action deletion requests to the maximum extent possible consistent with our legal obligations. Where we are legally required to retain certain records (e.g., AML transaction records), we will inform you of the categories of data that cannot be deleted and the reason for their retention. Data that is not subject to a legal retention obligation will be deleted within a reasonable timeframe following your request.

As a baji account holder, you hold a number of rights in relation to the personal data we hold about you. baji is committed to facilitating the exercise of these rights promptly and without charge.

• Right of Access: You have the right to request a copy of the personal data baji holds about you. We will provide this in a clear and structured format within a reasonable timeframe of receiving your verified request.
• Right to Rectification: If any of the personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. You may update certain account details directly through your account settings; for other corrections, contact baji support.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, or where you have withdrawn consent and no other legal basis for processing applies. Deletion requests are subject to baji's legal retention obligations (see Section 8).
• Right to Restrict Processing: In certain circumstances, you may request that baji restrict the processing of your personal data — for example, while the accuracy of data you have disputed is being verified.
• Right to Data Portability: Where processing is based on your consent or on a contractual necessity and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing based on legitimate interests at any time. You also have the right to object to processing for direct marketing purposes at any time, and baji will cease such processing immediately upon receiving your objection.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.

To exercise any of the above rights, please contact baji's support team via live chat or email at [email protected]. We may need to verify your identity before processing a data rights request to ensure we are dealing with the account holder and not a third party.

The baji platform is strictly for adults aged 21 years and above. baji does not knowingly collect personal data from individuals under the age of 21. If we become aware that a registered account holder is under 21, the account will be closed immediately, all KYC data will be securely deleted, and any deposits will be returned less any amounts already wagered in accordance with our Terms & Conditions.

If you have reason to believe that a person under the age of 21 has registered or is using a baji account, please contact our support team immediately via live chat or at [email protected]. We take underage gambling extremely seriously and will investigate all reports promptly.

The baji platform integrates third-party services — including game providers, payment processors, and identity verification tools — that may process your personal data as part of delivering their respective services. Each of these providers operates under its own privacy policy and data protection obligations.

11.1 Game Providers. Games delivered by studios including Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, and Ezugi involve data sharing as described in Section 5.3. Players are encouraged to review the relevant provider's privacy documentation if they have specific concerns about how gameplay data is handled at the provider level.

11.2 Payment Providers. Payment transactions processed via bKash, Nagad, Rocket, Upay, Visa, Mastercard, and partnering banks are governed by those providers' own terms and privacy policies. baji is not responsible for the data practices of third-party payment service providers beyond the contractual obligations we impose on them as part of our data processing agreements.

11.3 No Responsibility for Third-Party Sites. The baji website does not contain links to external third-party websites. In the event that any baji communication (e.g., support documentation) references an external resource, baji accepts no responsibility for the privacy practices or content of those external sites.

baji reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable law, or improvements to our services. When material changes are made to this Policy, baji will notify registered players via the email address associated with their account and will publish the updated Policy on this page with a revised effective date.

We encourage you to review this Privacy Policy periodically. Your continued use of the baji platform after any revised Policy has been published constitutes your acknowledgement that you have read the revised Policy. If any update materially alters how we process your data in a way that requires fresh consent, we will seek that consent from you before proceeding with the new processing activity.

Where a change to this Policy is non-material — for example, a correction of a typographical error, a clarification of existing language, or an update to contact details — we may make that change without individual notification, though the updated Policy will always be published on this page.

If you have any questions, concerns, or requests relating to this Privacy Policy or to baji's handling of your personal data, please contact our support team using any of the channels below. We aim to respond to all data-related enquiries within 5 business days.

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24 hours a day, 7 days a week, directly on the baji platform. Our average response time is 2–5 minutes.
• Response Language: English
• Support Hours: 24/7, Bangladesh Standard Time (BST, UTC+6)

When contacting us about a data rights request, please include your registered username or the email address associated with your account so that we can locate your records and verify your identity efficiently. Do not include your password or full payment card details in any communication with the baji support team.