bd baja Privacy Policy — Your Data, Protected

bd baja collects personal data only where it is necessary for the lawful operation of the platform, the fulfilment of our obligations to players, the prevention of fraud, and compliance with responsible gaming requirements. The categories of personal data we collect are described below.

1.1 Registration Data

When you create a bd baja account, we collect the personal information you provide during the registration process. This includes your full legal name, date of birth, email address, mobile phone number, and a username and password of your choice. This information is required to create and maintain your account and to verify that you meet our eligibility requirements, including the minimum age of 18 years.

1.2 Identity Verification (KYC) Data

As part of our Know Your Customer (KYC) process — which is conducted to comply with anti-money laundering best practices and responsible gaming obligations — we may request copies of identity documents such as your National Identity Card (NID), passport, or birth certificate, as well as proof of address documents such as a utility bill or bank statement, and proof of payment method ownership.

1.3 Financial and Transaction Data

bd baja records transactional data related to deposits, withdrawals, wagers, bonuses, and account balance movements. This includes the payment method used (e.g., bKash, Nagad, Rocket, Upay, Visa, Mastercard), transaction amounts in BDT, timestamps, and reference identifiers. We do not store full card numbers or mobile banking PINs — payment processing is handled by secure third-party payment partners.

1.4 Technical and Device Data

When you access bd baja, our servers automatically record certain technical information about your device and session. This includes your IP address, browser type and version, operating system, device type (desktop, mobile, or tablet), screen resolution, referring URL, pages visited within the platform, session duration, and click-path data. This information is used for platform security, fraud detection, performance optimisation, and aggregate analytics.

1.5 Behavioural and Gaming Data

We collect data about your activity on the bd baja platform, including game sessions played, bet amounts and frequencies, win and loss records, bonus usage, and feature interactions. This data is used to personalise your experience, to identify potential responsible gaming concerns, and to improve our product offering for the Bangladesh market.

1.6 Communications Data

If you contact our support team via live chat or email, we retain records of those communications including the content of messages, timestamps, and the resolution outcome. This allows us to maintain continuity of service and to improve our support quality over time.

bd baja processes your personal data for clearly defined and lawful purposes. We do not use your data in ways that are incompatible with the purpose for which it was originally collected. The primary purposes for which we use your personal data are as follows:

2.1 Marketing Communications

bd baja may send you promotional communications — including bonus offers, seasonal promotions tied to events such as Eid, Pohela Boishakh, BPL, or IPL cricket tournaments, and platform updates — via email or SMS, but only if you have explicitly opted in to receive such communications during registration or through your account settings. You may withdraw your consent and unsubscribe from marketing communications at any time by contacting our support team. Opting out of marketing will not affect the delivery of transactional or account-related communications that are necessary for the operation of your account.

2.2 Automated Decision-Making

bd baja uses automated processes to detect suspicious account activity, potential fraud, and responsible gaming indicators. Where an automated process triggers a flag on your account — for example, an unusual transaction pattern — a member of our compliance team will review the flag before any significant action (such as account suspension) is taken. You have the right to request human review of any automated decision that materially affects you.

In certain circumstances, bd baja shares limited personal data with trusted third-party service providers and partners who assist us in operating the platform. All such sharing is governed by data processing agreements that require third parties to maintain appropriate security standards and to use data only for the purposes specified by bd baja.

3.1 Payment Service Providers

To process deposits and withdrawals, bd baja shares transaction-relevant data with our approved payment service providers. This includes providers of bKash, Nagad, Rocket, and Upay integrations, as well as Visa and Mastercard processing partners. These providers receive only the information necessary to complete the specific transaction and are prohibited from using that data for any other purpose.

3.2 Game Technology Providers

bd baja's game library is powered by third-party game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, Spribe, and others. When you play a game hosted by a third-party studio, that provider's own systems may log game-session data (such as bet values, outcomes, and timestamps) in order to operate the game correctly and to audit results for fairness certification purposes. These providers do not receive your name, contact details, or payment information.

3.3 Analytics and Technology Partners

bd baja uses third-party analytics and infrastructure providers to maintain platform performance and security. These providers process aggregated or pseudonymised technical and behavioural data to generate insights about platform usage. They do not have access to data that directly identifies you by name or contact details.

3.4 Legal and Regulatory Disclosure

bd baja may be required to disclose personal data to law enforcement agencies, financial intelligence units, or other regulatory bodies where we are compelled to do so by applicable law, court order, or regulatory instruction. Where legally permissible, we will notify you of any such disclosure. We will always challenge overly broad or disproportionate disclosure requests.

3.5 Business Transfers

In the event of a merger, acquisition, or sale of all or part of bd baja's business, player data may be transferred to the acquiring entity as part of that transaction. You will be notified in advance of any such transfer, and the acquiring entity will be required to honour the commitments set out in this Privacy Policy.

bd baja uses cookies and similar tracking technologies to ensure the platform functions correctly, to remember your preferences, and to gather aggregate data about how players interact with the site. A cookie is a small text file placed on your device by your browser when you visit a website. Cookies are not viruses and cannot execute code.

4.1 Types of Cookies We Use

4.2 Managing Cookies

You can manage or delete cookies through your browser settings at any time. Please note that disabling strictly necessary cookies will prevent you from logging in to your bd baja account, as session tokens are required for secure authentication. Analytics and functional cookies can be disabled without affecting your ability to use the core platform features. Specific instructions for managing cookies vary by browser — consult your browser's help documentation for guidance.

4.3 No Cross-Site Tracking

bd baja does not deploy third-party advertising cookies, cross-site tracking pixels, or retargeting scripts that follow you across external websites. Our cookie use is limited to the bd-baja.com domain and is restricted to the purposes listed in the table above.

bd baja retains personal data only for as long as it is necessary for the purpose for which it was collected, or as required by applicable legal or regulatory obligations. The following retention periods apply as a general guide:

• Active account data: Retained for the lifetime of your account plus a minimum of five years following permanent account closure, in accordance with anti-money laundering record-keeping requirements.
• KYC and identity verification documents: Retained for a minimum of five years from the date of the most recent transaction associated with the verified account.
• Transaction records: Retained for a minimum of five years from the date of each transaction to satisfy financial record-keeping obligations.
• Customer support communications: Retained for three years from the date of the communication, unless the content is relevant to an ongoing investigation or dispute.
• Marketing consent records: Retained for as long as consent is active, plus three years after withdrawal of consent as evidence of compliance.
• Technical log data (IP addresses, session logs): Retained for up to 12 months for security and fraud investigation purposes.

Following the expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with any identifiable individual. Anonymised aggregate data may be retained indefinitely for statistical and business analysis purposes.

bd baja takes the security of your personal data extremely seriously. We implement a layered security architecture designed to protect your information against unauthorised access, disclosure, alteration, and destruction. Our security measures include, but are not limited to, the following:

• Transport Layer Security (TLS): All data transmitted between your browser and bd baja's servers is encrypted using industry-standard 256-bit TLS encryption, preventing interception during transit.
• Data encryption at rest: Sensitive data stored in our databases — including personal identifiers, KYC documents, and financial records — is encrypted at rest using AES-256 encryption.
• Access controls: Access to personal data is restricted to authorised bd baja personnel on a strict need-to-know basis. All internal access is authenticated, logged, and subject to regular audit review.
• Intrusion detection and monitoring: Our infrastructure is monitored continuously for unusual access patterns, denial-of-service attempts, and other security threats. Automated alerts trigger immediate investigation when anomalies are detected.
• Regular security assessments: bd baja conducts periodic security assessments and vulnerability scans of its platform infrastructure to identify and remediate weaknesses before they can be exploited.
• Employee training: All staff with access to personal data receive regular data protection and security awareness training.

6.1 Your Responsibility

While bd baja implements robust technical safeguards, the security of your account also depends on the steps you take. You are responsible for keeping your login credentials confidential, using a strong and unique password, logging out of your account when using shared devices, and notifying our support team immediately if you suspect unauthorised access to your account. bd baja will never ask you for your password via email, live chat, or any other communication channel.

6.2 Data Breach Response

In the unlikely event of a personal data breach that poses a risk to your rights and freedoms, bd baja will take immediate steps to contain the breach, assess its scope and impact, and notify affected players without undue delay. We will provide clear information about what data was affected, what steps we have taken, and what you can do to protect yourself.

bd baja respects your rights over your personal data. As a player on the bd baja platform, you are entitled to exercise the following rights in relation to the personal data we hold about you. To exercise any of these rights, contact our support team via live chat or at the email address listed in Section 8.

7.1 Right of Access

You have the right to request a copy of all personal data that bd baja holds about you. We will provide this information in a clear, structured format within 30 days of receiving your verified request. This is sometimes called a "subject access request" or SAR.

7.2 Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. Please note that certain information — such as your registered name and date of birth — can only be updated upon submission of supporting identity documents.

7.3 Right to Erasure

You may request that bd baja delete your personal data ("right to be forgotten"). This right applies where the data is no longer necessary for the purpose for which it was collected, where you withdraw consent (and no other legal basis exists), or where the data has been unlawfully processed. Please note that this right is not absolute — we are required to retain certain data for legal and regulatory compliance purposes (see Section 5), and erasure requests will be assessed on a case-by-case basis. We will respond to all erasure requests within 30 days.

7.4 Right to Data Portability

Where bd baja processes your personal data on the basis of consent or contractual necessity, you have the right to receive your data in a structured, commonly used, machine-readable format, and to transmit that data to another service provider where technically feasible.

7.5 Right to Restrict Processing

You may request that bd baja restricts the processing of your personal data in certain circumstances — for example, while the accuracy of data is being contested, or where you have objected to processing and a determination is pending. During a restriction period, we will continue to store your data but will not process it further except with your consent or for legal claims.

7.6 Right to Object

You have the right to object to the processing of your personal data where that processing is based on our legitimate interests. You also have the absolute right to object to the use of your data for direct marketing purposes, including profiling related to direct marketing. We will honour objections to marketing immediately upon receipt.

7.7 Right to Withdraw Consent

Where bd baja processes your personal data on the basis of your consent (for example, for marketing communications), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to the withdrawal.

If you have any questions about this Privacy Policy, wish to exercise any of your privacy rights, or want to raise a concern about how bd baja handles your personal data, please get in touch using the contact details below.

Our support team is available 24 hours a day, 7 days a week, with an average live chat response time of 2–5 minutes. For formal privacy rights requests or data protection queries, written communication via email is preferred so that we can maintain a clear record of your request.

• Live Chat: Available directly on the bd baja platform — look for the live chat widget on any page.
• Email (plain text — not a link): [email protected]
• Response time for privacy requests: Within 30 calendar days of receipt.
• Support hours: 24/7, all times Bangladesh Standard Time (BST, UTC+6).

8.1 Changes to This Privacy Policy

bd baja reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or platform features. The effective date at the top of this document will be updated whenever a material change is made. Where changes are significant, we will notify active players via email or a prominent notice on the platform. Your continued use of bd baja following the publication of an updated Privacy Policy constitutes your acknowledgement of the changes. We encourage you to review this page periodically to stay informed about how we protect your data.

8.2 Governing Privacy Law

This Privacy Policy is governed by the laws applicable to bd baja's operating jurisdiction. bd baja is committed to handling personal data in accordance with internationally recognised privacy principles, including those reflected in GDPR, regardless of the specific legal framework that directly applies. If you believe that bd baja has not handled your personal data in accordance with this policy, you have the right to raise a formal complaint by contacting our support team in the first instance. If your concern is not resolved to your satisfaction, you may seek independent legal or regulatory recourse.