bjbaj Privacy Policy — How We Protect Your Data

This Privacy Policy ("Policy") describes how bjbaj ("bjbaj", "we", "us", "our") collects, uses, stores, shares, and protects personal data provided by or collected from users ("you", "Player") of the bjbaj website at bjbaj.bet and all associated services (the "Platform"). This Policy forms part of the bjbaj Terms and Conditions and is incorporated by reference. By registering an account or continuing to use the Platform, you confirm that you have read and understood this Policy and consent to the processing of your personal data as described herein.

bjbaj serves players primarily based in Bangladesh. All personal data processed by bjbaj is handled with care, in accordance with the principles of transparency, purpose limitation, data minimisation, accuracy, storage limitation, integrity, and confidentiality. bjbaj does not sell, rent, or trade your personal data to third parties for their own marketing purposes under any circumstances.

bjbaj collects personal data in several categories depending on how you interact with the Platform. The types of information we may collect are described below:

bjbaj processes personal data only for specified, explicit, and legitimate purposes. The purposes for which we use your information include:

• Providing, operating, and maintaining the bjbaj Platform — including account creation, login authentication, deposits and withdrawals, game access, and player support.
• Verifying your identity and age to comply with the 21+ age policy and to complete KYC checks required for responsible gaming and anti-money laundering compliance.
• Processing deposits and withdrawals in BDT via bKash, Nagad, Rocket, Upay, and card payment networks, and maintaining accurate financial records for each transaction.
• Detecting, investigating, and preventing fraudulent activity, money laundering, multi-accounting, bonus abuse, and other prohibited conduct on the Platform.
• Delivering personalised gaming recommendations, bonus offers, and seasonal promotional communications relevant to Bangladesh players — including Eid, Pohela Boishakh, BPL, and T20 World Cup campaigns — subject to your communication preferences.
• Analysing aggregated, anonymised usage data to improve Platform performance, game selection, payment processing speed, and the overall experience for players in Bangladesh.

bjbaj does not use personal data for fully automated decision-making that produces legal or similarly significant effects without a human review step. Where automated tools are used for fraud detection or KYC screening, a human review is conducted before any account action is taken.

bjbaj processes personal data on the following legal bases: (a) Contract performance — processing necessary to deliver the Services you have registered for, including account management, payment processing, and game access; (b) Legal obligation — processing required to comply with applicable anti-money laundering laws, age verification requirements, and financial record-keeping obligations; (c) Legitimate interests — processing carried out for fraud prevention, Platform security, and business analytics, where those interests are not overridden by your data protection rights; and (d) Consent — where you have given explicit consent for a specific processing activity, such as receiving promotional communications, which you may withdraw at any time.

Where bjbaj relies on your consent as the legal basis for a processing activity, you have the right to withdraw that consent at any time by contacting support via live chat or adjusting your account notification settings. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

bjbaj does not sell, rent, or trade personal data. We share personal data only in the following limited circumstances:

• Payment processors: We share the minimum necessary payment and identity data with bKash, Nagad, Rocket, Upay, Visa, Mastercard, and their processing networks solely to execute deposit and withdrawal transactions on your behalf.
• Game providers: Aggregated, anonymised session data is shared with certified game providers including Pragmatic Play, Evolution Gaming, Spribe, and Ezugi for game integrity monitoring and RNG auditing. No individually identifiable personal data is disclosed to game providers.
• KYC and compliance partners: Where required for age verification and anti-money laundering compliance, identity documents and related data may be shared with accredited third-party KYC verification providers under strict data processing agreements.
• Legal and regulatory authorities: bjbaj may disclose personal data where required to do so by law, court order, or a lawful request from a competent regulatory or law enforcement authority. bjbaj will not disclose data beyond what is strictly required by the relevant legal obligation.

All third parties with whom bjbaj shares personal data are required to process that data only for the stated purpose, maintain appropriate security measures, and delete or return the data once the purpose has been fulfilled. bjbaj does not transfer personal data to jurisdictions that lack adequate data protection without implementing appropriate safeguards.

bjbaj implements technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Specific measures in place include SSL/TLS encryption on all web and API traffic, encrypted storage of sensitive account data, access controls limiting data access to authorised staff only, regular security reviews of the Platform infrastructure, and real-time intrusion detection monitoring.

Despite these measures, no method of internet transmission and no method of electronic storage is 100% secure. bjbaj cannot guarantee the absolute security of your data. In the event of a data breach that is likely to result in a risk to your rights and freedoms, bjbaj will take prompt remedial action and notify affected Players as required.

bjbaj retains personal data for as long as necessary to fulfil the purposes set out in this Policy, or as long as required by applicable legal and regulatory obligations. In practice: account and identity data is retained for the duration of your account and for a minimum of five (5) years after account closure to meet financial record-keeping and anti-money laundering requirements; transaction records are retained for a minimum of five (5) years; gaming activity logs are retained for a minimum of two (2) years; and support communications are retained for a minimum of two (2) years.

When personal data is no longer required, bjbaj will securely delete or anonymise it. Where immediate deletion is not possible — for example, because data is stored in backup archives — bjbaj will ensure it is securely isolated and protected from further processing until deletion can be carried out.

bjbaj uses the following categories of cookies and similar technologies: (a) Strictly necessary cookies — required for the Platform to function, including session management, authentication tokens, and security cookies; these cannot be disabled without breaking Platform functionality. (b) Functional cookies — used to remember your preferences such as language settings and recently viewed games. (c) Analytics cookies — used to collect anonymised data about how Players interact with the Platform, including pages visited, session duration, and navigation patterns, to help us continually improve the experience for Bangladesh players.

bjbaj does not use advertising cookies, cross-site tracking pixels, or social media tracking scripts. You may manage cookie preferences through your browser or device settings; however, disabling strictly necessary cookies will prevent you from logging in or using the Platform. Most modern Android and iOS browsers provide options to clear site data, block third-party cookies, and manage permissions in the browser's privacy settings.

bjbaj recognises that you hold rights over your personal data. The following rights are available to you as a bjbaj Player, and may be exercised at any time by contacting our support team:

To exercise any of the rights listed above, please contact bjbaj's support team via live chat on the Platform or by email at [email protected]. bjbaj will respond to all data rights requests within a reasonable timeframe. We may need to verify your identity before processing a request to ensure we do not disclose or modify data belonging to another person.

The bjbaj Platform is strictly intended for adults aged 21 and above. bjbaj does not knowingly collect, process, or retain personal data relating to any person under the age of 21. If bjbaj discovers that personal data belonging to a person under 21 has been collected — whether through misrepresentation during registration or any other means — bjbaj will immediately close the account, void any associated transactions, and securely delete the personal data. If you are a parent or guardian and believe that a person under 21 in your care has registered on bjbaj without your knowledge, please contact support immediately via live chat so that we can take swift action.

The bjbaj Platform integrates games and content delivered by certified third-party providers including Pragmatic Play, Evolution Gaming, NetEnt, Spribe, and Ezugi. When you launch a game hosted by a third-party provider, your session data — including game identifier, session token, and bet history for that session — is transmitted to that provider's platform solely to render the game. bjbaj is not responsible for the privacy practices of third-party game providers. Each provider operates under its own privacy policy and data processing agreements with bjbaj. bjbaj selects only providers who meet recognised industry data security standards and who are contractually bound to process player session data only for the purpose of delivering the game.

bjbaj reserves the right to update or amend this Privacy Policy at any time. When we make material changes to this Policy, we will publish the updated version on this page and revise the effective date shown above. Where a change materially affects how we use your personal data, we will provide notice via the Platform — for example, via a notification on your next login — in addition to publishing the updated Policy.

Your continued use of the bjbaj Platform following any update to this Policy constitutes your acceptance of the revised Policy. We encourage you to review this page periodically to remain informed about how bjbaj collects, uses, and protects your personal data. If you do not agree with the revised Policy, you must cease using the Platform and may request account closure by contacting support.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way bjbaj handles your personal data, please contact our support team via live chat on the Platform, available 24 hours a day, 7 days a week. Our team aims to acknowledge all privacy-related enquiries within one business day and to resolve them within five business days.

You may also reach bjbaj in writing at [email protected]. Please include your registered mobile number and a clear description of your privacy request so that we can verify your identity and process your request efficiently. bjbaj does not accept service of legal process by email; formal legal correspondence should be directed through the appropriate channels.