bgbaji Privacy Policy

Section 1

Information We Collect

bgbaji collects personal data only to the extent necessary to provide a safe, compliant, and high-quality gaming and betting service to players in Bangladesh. The categories of personal data we collect are set out below.

1.1 Registration Data

When you create a bgbaji account, we collect the following information directly from you:

• Full legal name (as it appears on your government-issued identity document)
• Date of birth (to verify that you meet the 18+ age requirement)
• Mobile phone number (for account verification and communication)
• Email address (for account notifications and correspondence)
• Preferred username and encrypted account password
• Residential address (collected during KYC verification)

1.2 Identity Verification (KYC) Data

As part of our Know Your Customer obligations and responsible gaming procedures, we may collect copies of:

• National Identity Card (NID), passport, or driving licence
• Proof of residential address (utility bill or bank statement dated within three months)
• Proof of payment method ownership (e.g., screenshot of bKash or Nagad wallet registration screen)

1.3 Transaction and Financial Data

When you make deposits or request withdrawals via bKash, Nagad, Rocket, Upay, or bank transfer, we collect transaction identifiers, payment method reference numbers, transaction amounts in BDT, and timestamps. bgbaji does not store full card numbers, bKash PINs, or Nagad PINs at any point.

1.4 Usage and Behavioural Data

bgbaji automatically collects certain technical and behavioural data when you use the platform, including:

• IP address and approximate geographic location (city-level)
• Device type, operating system, and browser version
• Pages visited, game sessions played, session duration, and navigation paths
• Betting history, game preferences, and wagering patterns
• Login timestamps and session activity logs

1.5 Communications Data

When you contact bgbaji's support team via live chat or email, we retain records of those communications — including the content of messages exchanged — for quality assurance, dispute resolution, and regulatory compliance purposes.

Section 2

How We Use Your Data

bgbaji uses the personal data described in Section 1 for the following clearly defined purposes. We do not use your data for any purpose that is incompatible with the purposes listed below without first obtaining your consent or having a separate legal basis to do so.

Purpose	Data Categories Used
Account creation and ongoing account management	Registration data, usage data
Identity verification and age confirmation (18+ enforcement)	KYC data, registration data
Processing deposits and withdrawals in BDT	Transaction data, KYC data
Fraud prevention and anti-money laundering (AML) screening	Transaction data, usage data, KYC data
Responsible gaming monitoring and player protection	Usage data, transaction data, behavioural data
Customer support and dispute resolution	Communications data, account data
Platform improvement and analytics	Usage data (aggregated and anonymised where possible)
Sending account-related notifications and service updates	Registration data, communications data
Compliance with applicable legal and regulatory obligations	All categories as required

2.1 Marketing Communications

bgbaji may send you promotional communications about bonuses, seasonal offers (such as Eid or Pohela Boishakh promotions), and new game releases where you have provided your consent to receive such communications at registration or at a later date. You may withdraw this consent at any time by contacting support via live chat or by updating your communication preferences within your account settings. Withdrawal of marketing consent does not affect the lawfulness of any processing carried out prior to withdrawal.

2.2 Automated Decision-Making

bgbaji uses automated systems to assist with fraud detection and responsible gaming monitoring. These systems may flag accounts for manual review based on unusual transaction patterns or behavioural indicators. Where an automated process leads to a decision that materially affects your account (such as a temporary suspension), you have the right to request human review of that decision by contacting our support team.

Section 3

Legal Basis for Processing

bgbaji processes personal data on the following legal bases, depending on the specific processing activity involved:

• Contractual necessity: Processing required to fulfil the account agreement between bgbaji and the player — including account creation, payment processing, game delivery, and customer support.
• Legal obligation: Processing required to comply with applicable legal and regulatory requirements, including anti-money laundering (AML) obligations, age verification duties, and financial record-keeping requirements.
• Legitimate interests: Processing carried out for bgbaji's legitimate business interests, where those interests are not overridden by your rights and freedoms. This includes fraud prevention, platform security, internal analytics, and service improvement activities.
• Consent: Processing based on your freely given, specific, and informed consent — primarily marketing communications and certain non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of prior processing.

Where processing is based on legitimate interests, bgbaji has carried out a balancing assessment to ensure that its interests do not override the fundamental rights and freedoms of individual players. You may request a summary of the relevant balancing assessment by contacting support.

Section 4

Data Sharing and Third Parties

bgbaji does not sell, rent, or trade your personal data to any third party for their own marketing or commercial purposes. We share personal data only in the circumstances described below, and only to the minimum extent necessary for each purpose.

4.1 Game Studio Providers

To deliver live casino games and slots through partners such as Evolution Gaming, Pragmatic Play, Spribe, NetEnt, Microgaming, Habanero, and Ezugi, limited technical data (such as session tokens and game history identifiers) is exchanged with these providers. Game studio partners operate under their own data processing agreements and are contractually prohibited from using your data for any purpose beyond delivering the game service.

4.2 Payment Service Providers

When you deposit or withdraw funds using bKash, Nagad, Rocket, Upay, or a bank transfer, the relevant payment service provider receives the transaction data necessary to process the payment. bgbaji does not transmit unnecessary personal data to payment providers beyond what is required to complete the transaction.

4.3 Identity Verification Services

bgbaji may engage trusted third-party KYC verification service providers to assist in validating identity documents and confirming age eligibility. These providers process your KYC documents strictly for verification purposes and are bound by confidentiality and data protection obligations.

4.4 Legal and Regulatory Disclosures

bgbaji may disclose personal data to law enforcement agencies, regulatory authorities, or courts where required to do so by applicable law, valid legal process, or a binding regulatory order. In such cases, bgbaji will disclose only the minimum data required and will, where legally permissible, notify the affected player of the disclosure.

4.5 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of assets involving bgbaji, your personal data may be transferred to the successor entity as part of that transaction. bgbaji will provide reasonable advance notice of any such transfer and the successor entity will be required to honour the commitments made in this Privacy Policy.

Section 5

Cookies and Tracking Technologies

bgbaji uses cookies and similar tracking technologies on the bgbaji.com website to provide a functional, personalised, and secure user experience. A cookie is a small text file that is stored on your device by your browser when you visit a website. The cookies used by bgbaji fall into the following categories:

Cookie Type	Purpose	Consent Required
Strictly Necessary	Maintain your login session, keep your game in progress, prevent cross-site request forgery	No — essential for platform operation
Functional	Remember your language preference, display settings, and recent game history	No — necessary for service functionality
Analytics	Understand how players navigate the platform; identify pages and features that require improvement (data aggregated and anonymised where possible)	Yes — consent-based
Marketing	Measure the effectiveness of promotional campaigns and display relevant bgbaji offers to you on the platform	Yes — consent-based

5.1 Managing Your Cookie Preferences

You can manage your cookie preferences at any time through your browser settings. Most modern browsers allow you to view, block, or delete cookies stored on your device. Please note that disabling strictly necessary or functional cookies may impair certain features of the bgbaji platform, including the ability to maintain a logged-in session or resume an interrupted game.

5.2 Third-Party Cookies

Some game studio providers embedded within the bgbaji platform may set their own cookies to maintain game session state. bgbaji does not control the cookie practices of third-party game providers and recommends reviewing their individual privacy notices for further information.

Section 6

Data Security and Retention

6.1 Security Measures

bgbaji implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS encryption on all pages and data transmissions across the bgbaji.com domain
• Encrypted storage of account passwords using industry-standard hashing algorithms — bgbaji staff cannot view your password in plain text
• Access controls ensuring that personal data is accessible only to bgbaji personnel who have a legitimate operational need
• Regular internal security reviews and vulnerability assessments
• Secure data centres with physical access controls for servers storing player data

6.2 Data Breach Response

In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of affected players, bgbaji will take immediate steps to contain the breach and assess its scope. Where required, affected players will be notified of the breach and provided with guidance on protective actions they should take. bgbaji maintains an internal incident response procedure for handling data security events.

6.3 Data Retention Periods

bgbaji retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The general retention guidelines applied by bgbaji are as follows:

• Active account data: Retained for the duration of your account relationship with bgbaji plus a minimum period following account closure as required by AML and financial record-keeping obligations
• KYC documents: Retained for a minimum of five years from the date of verification, in line with standard AML compliance requirements
• Transaction records: Retained for a minimum of five years from the date of each transaction
• Support communications: Retained for up to three years from the date of the last interaction, or longer where relevant to an unresolved dispute
• Marketing consent records: Retained for as long as you remain subscribed, plus a reasonable period thereafter to evidence the consent history

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be linked to an identifiable individual.

Section 7

Your Privacy Rights

bgbaji is committed to respecting and facilitating the exercise of your rights in relation to your personal data. The following rights are available to you as a bgbaji player:

7.1 Right of Access

You have the right to request a copy of the personal data that bgbaji holds about you. Upon receipt of a valid access request, bgbaji will provide you with a summary of the data held, the purposes for which it is processed, and the categories of recipients with whom it has been shared. bgbaji aims to respond to access requests within 30 days.

7.2 Right to Rectification

If any of the personal data bgbaji holds about you is inaccurate or incomplete, you have the right to request that it be corrected. For most registration data, you can update your information directly within your bgbaji account settings. For KYC-verified data, corrections may require resubmission of documentary evidence.

7.3 Right to Erasure

You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where you object to processing based on legitimate interests and that objection is upheld. Please note that bgbaji may be required by law to retain certain categories of data (particularly KYC and transaction records) beyond the point of an erasure request, in which case the relevant data will be retained only for the legally required period.

7.4 Right to Restriction and Objection

You have the right to request that bgbaji restricts the processing of your data in certain circumstances — for example, where the accuracy of the data is contested. You also have the right to object to processing based on legitimate interests, including direct marketing. Where you object to marketing, bgbaji will cease using your data for that purpose immediately.

7.5 Right to Data Portability

Where processing is based on your consent or on contractual necessity, and is carried out by automated means, you have the right to receive a copy of your personal data in a structured, commonly used, and machine-readable format, and to request that it be transmitted to another service provider where technically feasible.

Section 8

Contact and Data Enquiries

If you have any questions, concerns, or complaints regarding how bgbaji handles your personal data, or if you wish to exercise any of the rights described in Section 7, please contact our team using the details below. bgbaji takes all privacy enquiries seriously and will provide a substantive response within 30 calendar days of receipt.

8.1 Support Contact

The primary channel for all privacy-related enquiries is bgbaji's 24/7 live chat service, available directly on the bgbaji.com platform with an average response time of 2–5 minutes. For written enquiries, you may contact us at:

• Email: [email protected]
• Languages: English and Bengali
• Response time (email): Within 24 hours on business days

8.2 Updates to This Policy

bgbaji reviews and updates this Privacy Policy periodically to reflect changes in our data practices, legal obligations, or the services we offer. Where a material change is made, registered players will be notified via the email address on their account prior to the change taking effect. The effective date at the top of this Policy reflects the date of the most recent update. Continued use of the bgbaji platform following the publication of any revised Privacy Policy constitutes your acknowledgement of the updated version.

The most current version of this Privacy Policy is always available at https://bgbaji.com/privacy-policy. We encourage you to review this page periodically to stay informed about how bgbaji protects your information.