baji8 Privacy Policy

1 Introduction

baji8 is committed to safeguarding the privacy and personal data of every player who uses our platform. We operate as an online entertainment and betting platform serving players primarily across Bangladesh, including Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar.

This Policy applies to all information collected through the baji8 website, mobile interface, customer support channels, payment processing interactions, and any other method by which you communicate or transact with us. It covers personal data submitted voluntarily (such as during registration) as well as data collected automatically through your use of the Platform.

We process personal data in accordance with internationally recognised data protection principles, including purpose limitation, data minimisation, accuracy, storage limitation, integrity, and confidentiality. Our security infrastructure is designed to prevent unauthorised access, disclosure, alteration, or destruction of your personal data at every stage of its lifecycle.

2 Data We Collect

baji8 collects personal information in two primary ways: information you provide directly to us, and information we collect automatically when you use the Platform. The categories of data we may collect include the following:

2.1 Information You Provide Directly

• Registration Data: Full legal name, date of birth, email address, mobile phone number, and chosen username and password when you create a baji8 account.
• Identity Verification (KYC) Data: Government-issued photo identification (National ID card, passport, or driving licence), proof of residential address (utility bill, bank statement), and proof of payment method ownership.
• Payment Data: Transaction records associated with deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, or City Bank. Note: baji8 does not store full card numbers or mobile banking PINs — payment processing is handled by certified third-party processors.
• Communications Data: Content of messages, complaints, feedback, or support requests you submit to our team via live chat or email.
• Responsible Gaming Data: Self-exclusion preferences, deposit limit elections, session time settings, and any documentation submitted in connection with a responsible gaming request.

2.2 Information Collected Automatically

• Device & Technical Data: IP address, browser type and version, operating system, device identifiers, screen resolution, and timezone setting.
• Usage Data: Pages visited on the baji8 Platform, time and duration of visits, games played, bet history, navigation paths, and feature interactions.
• Cookie & Tracking Data: Data collected via cookies, web beacons, local storage, and similar technologies. See Section 8 for full details on our cookie practices.
• Geolocation Data: Approximate geographic location derived from your IP address, used to apply region-appropriate settings and verify eligibility.

3 How We Use Your Data

baji8 uses the personal data we collect for clearly defined purposes. We do not use your data in ways that are incompatible with the purpose for which it was originally collected. The principal purposes for which we process personal data are:

• Account Management: To create, maintain, verify, and administer your baji8 account, including processing registration, managing login sessions, and applying responsible gaming settings you have selected.
• Service Delivery: To provide you with access to sports betting markets, live casino games, slots, and all other products and features available on the baji8 Platform.
• Payment Processing: To facilitate deposits and withdrawals in Bangladeshi Taka (BDT) via bKash, Nagad, Rocket, Upay, and other supported payment methods, and to maintain accurate financial records of all transactions.
• Identity Verification & Fraud Prevention: To comply with Know Your Customer (KYC) requirements, verify your age (21+ policy) and identity, and detect and prevent fraudulent activity, money laundering, and collusion.
• Customer Support: To respond to your queries, complaints, and feedback, and to improve the quality of our support services based on interaction history.
• Platform Security: To monitor for suspicious activity, protect against cyber threats, and maintain the integrity and availability of the baji8 Platform.
• Legal & Regulatory Compliance: To meet our obligations under applicable laws and internal policies, including retaining records as required for anti-money laundering compliance.
• Platform Improvement: To analyse usage patterns, diagnose technical issues, and improve the performance, content, and user experience of baji8.
• Promotions & Communications: To send you information about promotions, bonuses, and platform updates relevant to your account, where you have not opted out of such communications.

4 Legal Basis for Processing

baji8 processes personal data only where a valid legal basis exists. The legal bases we rely upon are as follows:

• Contractual Necessity: Processing that is required to fulfil our obligations under the Terms & Conditions you agreed to upon registration — including account management, service delivery, and payment processing.
• Legal Obligation: Processing that is necessary to comply with applicable laws, including KYC/AML obligations, age verification requirements, and record-keeping mandates.
• Legitimate Interests: Processing carried out in pursuit of baji8's legitimate business interests — such as fraud detection, platform security, and service improvement — where those interests are not overridden by your fundamental rights and freedoms.
• Consent: For processing activities where consent is the appropriate basis, such as sending optional marketing communications. You may withdraw consent at any time by contacting our support team or updating your account notification preferences.

5 Sharing Your Data

baji8 does not sell, rent, or trade your personal information to third parties for their own commercial or marketing purposes. We may share your data only in the following limited and controlled circumstances:

5.1 Service Providers

We engage trusted third-party service providers who process data on our behalf to deliver specific functions of the Platform. These include payment processing partners (such as bKash, Nagad, Rocket, and Upay gateway integrations), identity verification providers, customer support software vendors, and hosting and infrastructure providers. All such providers are contractually bound to handle your data securely and only for the purposes for which they were engaged.

5.2 Game and Content Providers

To deliver our casino games and slots, baji8 integrates with licensed game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. Certain technical data (such as session tokens and game round IDs) may be exchanged with these providers to facilitate gameplay. No sensitive personal or financial data is shared beyond what is technically necessary for game delivery.

5.3 Legal and Regulatory Disclosures

baji8 may disclose personal data to law enforcement authorities, regulatory bodies, or other government agencies where required to do so by applicable law, court order, or to protect the rights, property, or safety of baji8, its users, or the public.

5.4 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of assets involving baji8, personal data held by baji8 may be transferred to the relevant successor entity. We will provide notice of any such transfer and the applicable privacy terms before your data becomes subject to a materially different policy.

6 Data Retention

baji8 retains personal data for only as long as is necessary to fulfil the purpose for which it was collected, or for as long as required by law, whichever is the longer period. The general retention principles we apply are as follows:

• Active Accounts: Personal data associated with an active baji8 account is retained for the lifetime of the account plus a minimum post-closure period required for legal compliance.
• Closed Accounts: Following voluntary or involuntary account closure, baji8 retains transaction records, KYC documentation, and communication logs for a period sufficient to meet anti-money laundering record-keeping requirements.
• Marketing Data: Consent-based marketing preferences and related contact records are retained until you withdraw consent or request deletion, after which they are removed from our active marketing databases promptly.
• Technical Logs: Server access logs, IP records, and security event logs are retained for a shorter operational period sufficient for security monitoring purposes, after which they are deleted or anonymised.

Once the applicable retention period has expired, personal data is securely deleted, destroyed, or irreversibly anonymised so that it can no longer be associated with any individual.

7 Data Security

baji8 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. Our security practices include:

• Encryption in Transit: All data exchanged between your browser or device and the baji8 servers is encrypted using 256-bit TLS (Transport Layer Security) protocol, preventing interception during transmission.
• Encryption at Rest: Sensitive personal and financial data stored on our servers is encrypted at rest using industry-standard algorithms.
• Access Controls: Access to personal data within baji8 is restricted on a strict need-to-know basis. Staff with access to personal data are subject to confidentiality obligations and receive data protection training.
• Infrastructure Security: Our hosting infrastructure is protected by firewalls, intrusion detection systems, and regular vulnerability assessments.
• Payment Security: baji8 does not store raw card numbers, CVV codes, or mobile banking PINs. Payment data is handled directly by PCI-compliant payment processors.

While baji8 employs robust security measures, no method of electronic transmission or storage is entirely immune to risk. In the unlikely event of a data security incident affecting your personal data, we will notify affected users in accordance with applicable legal requirements and take prompt remedial action.

8 Cookies & Tracking Technologies

baji8 uses cookies and similar technologies on the Platform to deliver a better, more personalised experience. A cookie is a small text file placed on your device by a website server. It allows the website to remember certain information about your visit.

8.1 Types of Cookies We Use

8.2 Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to refuse new cookies, delete existing cookies, and set preferences on a per-site basis. Please note that disabling strictly necessary cookies may impair the functionality of the baji8 Platform, including the ability to log into your account or complete transactions.

baji8 does not use third-party advertising cookies or retargeting pixels that track your behaviour across external websites.

9 Your Data Rights

As a user of baji8, you hold the following rights in relation to the personal data we hold about you. We are committed to honouring these rights promptly and transparently:

• Right of Access: You have the right to request a copy of the personal data baji8 holds about you, along with information about how it is being used and with whom it has been shared.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it without undue delay.
• Right to Erasure ("Right to be Forgotten"): You may request the deletion of your personal data in circumstances where it is no longer necessary for the purpose for which it was collected, where consent has been withdrawn, or where processing is unlawful. Note that certain data may need to be retained to meet legal obligations even after a deletion request.
• Right to Restriction: You may request that baji8 temporarily restrict the processing of your personal data — for example, while the accuracy of data is being verified or a legitimate interest objection is being assessed.
• Right to Data Portability: Where processing is based on consent or contractual necessity, you may request a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to the processing of your personal data where that processing is based on baji8's legitimate interests. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where baji8 processes your data on the basis of consent (such as for marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact the baji8 support team. We will acknowledge your request within 24 hours and aim to resolve it within 30 days. We may need to verify your identity before processing the request to ensure we do not disclose data to an unauthorised individual.

10 Children's Privacy

The baji8 Platform is strictly intended for adults aged 21 years and above. We do not knowingly collect, process, or store personal data from individuals under the age of 21. Age verification checks are applied during the registration process to enforce this requirement.

If baji8 becomes aware that personal data has been collected from a minor, we will take immediate steps to delete such data and close the associated account. If you believe that a minor has registered on the Platform or that we may hold personal data relating to a minor, please contact us immediately at [email protected] (plain text — not a clickable link).

11 International Data Transfers

baji8 primarily serves players based in Bangladesh. However, as an online platform operating with cloud-based infrastructure and international technology partners, your personal data may be processed in countries outside Bangladesh in the course of delivering our services.

Where personal data is transferred internationally — for example, to servers operated by our infrastructure or software vendors — baji8 ensures that appropriate safeguards are in place to protect that data to a standard consistent with this Privacy Policy. Such safeguards may include contractual data processing agreements with the relevant recipients.

baji8 does not transfer personal data to jurisdictions that do not provide an adequate level of data protection without first establishing appropriate contractual or technical safeguards.

12 Third-Party Links

The baji8 Platform may contain references to third-party services, game providers, or technology partners. This Privacy Policy applies solely to data collected and processed by baji8. It does not extend to any third-party websites, applications, or services that may be referenced within the Platform.

baji8 has no control over the privacy practices of third-party entities and accepts no responsibility for the content, security, or data handling practices of any external party. We recommend that you review the privacy policies of any third-party service you interact with independently.

13 Changes to This Privacy Policy

baji8 reserves the right to update, modify, or replace this Privacy Policy at any time. When material changes are made, we will notify registered users by displaying a prominent notice on the Platform or by sending a notification to your registered email address or mobile number, prior to the changes taking effect.

The effective date displayed at the top of this Policy will be updated each time a revision is published. We encourage you to review this Policy periodically to remain informed about how baji8 protects your personal information. Your continued use of the Platform following the publication of a revised Policy constitutes your acknowledgement of the updated terms.

14 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way baji8 handles your personal data, please reach out to our support team through the following channels:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24 hours a day, 7 days a week via the baji8 Platform
• Response Time: All privacy-related enquiries are acknowledged within 24 hours (Bangladesh Standard Time, BST UTC+6)

We are committed to resolving all privacy-related concerns in a fair, transparent, and timely manner. If you feel that your data rights have not been adequately addressed after contacting us, you may escalate the matter through appropriate legal channels available in your jurisdiction.