Privacy Policy for b bajee

When you register and use your b bajee account, we collect personal data across several categories. The specific data collected depends on the features you use and the interactions you have with the platform. Below is a comprehensive breakdown of the categories of information b bajee may collect:

b bajee does not knowingly collect sensitive personal data such as racial or ethnic origin, religious beliefs, health information, or biometric data beyond what is strictly required for identity verification purposes (e.g., a facial match to a submitted NID photograph during KYC review).

Where we collect data about minors, it is solely to identify and exclude them from the platform. b bajee does not maintain records of underage individuals beyond what is necessary to prevent their access. If you believe a minor has registered on b bajee, please contact us immediately at [email protected].

b bajee processes personal data for specific, legitimate purposes only. We do not use your data for any purpose that is incompatible with the reason it was originally collected. The primary purposes for which b bajee uses personal data are as follows:

• Account Management: Creating and maintaining your b bajee player account, processing login requests, managing account settings, and communicating account-related updates to your registered email or mobile number.
• Identity Verification (KYC): Verifying that you meet the 18+ age requirement and confirming your identity before processing withdrawals. KYC checks are mandatory for all accounts with active withdrawal requests and may be triggered at any stage of the account lifecycle.
• Payment Processing: Processing deposits and withdrawals via bKash, Nagad, Rocket, Upay, and bank transfer. Financial data is shared with our payment processing partners solely to complete your transaction.
• Fraud Detection & Security: Monitoring account activity, device data, and transaction patterns to detect and prevent fraudulent behaviour, multi-accounting, money laundering, and other prohibited conduct as described in our Terms & Conditions.
• Responsible Gaming: Analysing betting patterns to identify signs of problem gambling. Where risk indicators are detected, b bajee may proactively contact the player to offer responsible gaming resources, enforce deposit limits, or apply temporary account restrictions.
• Customer Support: Responding to your support queries, resolving disputes, and maintaining a record of communications for quality assurance and accountability purposes.
• Marketing Communications (with consent): Sending promotional offers, bonus notifications, and event updates via email or SMS to players who have opted in to marketing communications. You may withdraw this consent at any time via your account settings.
• Platform Improvement: Analysing aggregated, anonymised usage data to improve website performance, game selection, payment flows, and the overall b bajee player experience.
• Legal Compliance: Meeting obligations under applicable laws and regulations, responding to lawful requests from government authorities, and maintaining financial records as required by anti-money laundering legislation.

b bajee applies a lawful basis to every data processing activity. Depending on the purpose, the applicable lawful basis may be: contractual necessity (to fulfil the player account agreement), legal obligation (KYC and AML compliance), legitimate interests (fraud prevention, platform security), or consent (marketing communications).

b bajee does not sell personal data to any third party. However, in order to operate the platform and fulfil our legal obligations, we do share certain categories of data with trusted third-party partners under strict contractual controls. The categories of third-party recipients and the data shared with each are described below:

• Payment Processors (bKash, Nagad, Rocket, Upay, banks): Your wallet number or bank account details are shared with the relevant payment provider solely to process your deposit or withdrawal transaction. These providers operate under their own privacy policies and are independently regulated financial institutions in Bangladesh.
• KYC Verification Partners: Identity documents (NID, passport scans) and facial images submitted during the verification process may be shared with our third-party KYC technology partner for automated identity matching. This partner is contractually prohibited from using your data for any purpose other than completing your verification.
• Game Technology Providers (Pragmatic Play, Playtech, Microgaming, NetEnt, Spribe, Ezugi): When you play a game supplied by a third-party provider, basic session data (player ID, stake amounts, game results) is shared with the provider in real time to facilitate gameplay and resolve disputes. Game providers do not receive your full identity or contact data.
• Fraud Prevention Services: Technical data including IP address and device fingerprint may be processed by third-party fraud detection tools to identify suspicious activity. These services operate under data processing agreements that restrict use to fraud prevention only.
• Legal and Regulatory Authorities: b bajee may disclose personal data to law enforcement, financial intelligence units, or other government authorities in Bangladesh or internationally, where required to do so by law, court order, or regulatory obligation. Such disclosures are made only to the extent required and are documented internally.

All third parties with whom b bajee shares personal data are required to process that data only for the purposes described above, to maintain appropriate security standards, and to delete or return the data when it is no longer needed for the specified purpose.

b bajee uses cookies and similar tracking technologies to operate the platform effectively, maintain your session, remember your preferences, and analyse how players interact with the site. A cookie is a small text file placed on your device by your browser when you visit a website. Cookies do not contain executable code and cannot access other files on your device.

b bajee uses the following categories of cookies:

b bajee does not use third-party advertising cookies or place tracking pixels for the benefit of external advertisers. All cookies set on the b bajee domain serve the platform's own operational and security needs.

You may manage or delete cookies at any time through your browser settings. Disabling functional or analytics cookies will not prevent you from using b bajee, but may affect the quality of your experience (for example, your display preferences may not be remembered between sessions). Disabling strictly necessary or fraud prevention cookies may prevent you from logging in or using certain security-dependent features.

b bajee implements a layered approach to data security, combining technical controls, operational procedures, and staff training to protect player data against unauthorised access, disclosure, alteration, or destruction. Our key security measures include:

• 256-Bit SSL/TLS Encryption: All data transmitted between your browser and b bajee's servers is encrypted using Transport Layer Security (TLS 1.2 or higher). This ensures that your login credentials, payment details, and personal data cannot be intercepted in transit.
• Encrypted Data Storage: Sensitive data fields including identity document references, payment method identifiers, and authentication credentials are stored in encrypted form within our database infrastructure. Encryption keys are managed separately from the data they protect.
• Access Controls: Access to personal data within b bajee's systems is restricted on a need-to-know basis. Staff members are granted access only to the data categories required to perform their specific role. All internal access is logged and subject to periodic audit.
• Two-Factor Authentication (2FA): b bajee offers OTP-based two-factor authentication to all players. We strongly encourage enabling 2FA to protect your account from unauthorised access, particularly when logging in from a new device or location.
• Intrusion Detection and Monitoring: b bajee's infrastructure is monitored continuously for unusual access patterns, failed authentication attempts, and other indicators of malicious activity. Automated alerts trigger immediate investigation of anomalous behaviour.
• Regular Security Review: Our technical security posture is reviewed regularly, including assessment of server configurations, dependency updates, and access control policies. We engage third-party security specialists to conduct periodic independent assessments.

Despite the security measures described above, no online platform can guarantee absolute security. b bajee will notify affected players without undue delay in the event of a data breach that is likely to result in a high risk to their rights and interests. Notifications will be sent to the registered email address associated with the affected account.

b bajee retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable legal or regulatory obligations. The following retention periods apply to the main categories of player data:

When data reaches the end of its retention period, it is securely deleted or irreversibly anonymised so that it can no longer be associated with any individual player. Anonymised aggregated data (for example, platform usage statistics) may be retained indefinitely as it no longer constitutes personal data.

If you request account closure, b bajee will stop processing your data for marketing and operational purposes immediately. However, certain categories of data will be retained for the periods specified above in order to comply with our legal obligations, even after the account has been closed.

As a b bajee player, you have a number of rights with respect to the personal data we hold about you. These rights are outlined below. To exercise any of these rights, please contact our support team at [email protected] from your registered email address, clearly stating the right you wish to exercise and, where relevant, the specific data concerned.

• Right of Access: You have the right to request a copy of the personal data b bajee holds about you. We will provide this in a structured, commonly used format. We aim to fulfil access requests within 30 days of receiving a verified request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request correction. For contact details and address information, you can update these directly in your account settings. For identity data, please contact support.
• Right to Erasure: You may request that b bajee delete your personal data. We will comply where we have no legal obligation to retain the data. Where legal retention requirements apply (see Section 6), we will explain which data must be retained and for how long.
• Right to Restrict Processing: You may request that b bajee limits the processing of your personal data in certain circumstances, for example while a rectification request is being investigated or while you contest the lawful basis for processing.
• Right to Data Portability: Where processing is based on your consent or on a contract, you may request that your data be provided to you in a machine-readable format so that it can be transferred to another service provider of your choosing.
• Right to Withdraw Consent: Where b bajee's processing of your data is based on your consent (for example, marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that took place before the withdrawal.
• Right to Object: You may object to b bajee processing your data on the basis of legitimate interests, including profiling for responsible gaming purposes. We will consider your objection and cease processing unless we can demonstrate compelling legitimate grounds that override your interests.

b bajee will respond to all data rights requests within 30 days. In cases of complexity or where multiple requests are received simultaneously, this period may be extended by a further 60 days, in which case you will be notified of the extension and the reason for the delay. All responses will be provided in English.

b bajee reviews this Privacy Policy periodically and may update it to reflect changes in our data processing practices, new legal obligations, or improvements to how we communicate privacy information to our players. When material changes are made to this policy, we will update the effective date at the top of this document and, where appropriate, notify active players via their registered email address.

We encourage you to review this Privacy Policy before each login session if you have been inactive for an extended period, or whenever you receive a policy update notification from b bajee. Your continued use of the platform following the posting of an updated Privacy Policy constitutes your acceptance of the changes.

This Privacy Policy applies exclusively to data collected and processed by b bajee through the website at https://b-bajee.com. It does not apply to the privacy practices of third-party game providers, payment processors, or any other external websites that may be referenced in our content. We encourage you to review the privacy policies of any third-party services you use in connection with your b bajee account.

b bajee is committed to resolving all privacy-related concerns fairly and transparently. If you are not satisfied with our response to your privacy concern, you may escalate the matter by submitting a formal complaint in writing to [email protected] with the subject line "Formal Privacy Complaint". We will acknowledge formal complaints within 5 business days and provide a substantive response within 30 days.