bajbb Privacy Policy

This Privacy Policy ("Policy") describes how bajbb ("bajbb", "we", "us", or "our") collects, uses, stores, and discloses personal information obtained from users ("you" or "Player") of the bajbb website and platform located at bajbb.org (the "Platform"). bajbb takes its responsibilities under applicable data protection principles seriously and is committed to handling your personal data in a lawful, fair, and transparent manner.

By registering an account or using the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any aspect of this Policy, you should discontinue use of the Platform. This Policy forms part of bajbb's Terms and Conditions, which you accepted upon registration.

bajbb collects personal information that is necessary to operate the Platform safely and in compliance with our obligations. The categories of personal data we collect include:

• Identity data: your full name, date of birth, gender, and government-issued identification document number (required for age and identity verification).
• Contact data: your email address, mobile phone number, and residential address. For players in Bangladesh, this typically includes a Dhaka, Chittagong, Sylhet, Rajshahi, or other divisional address.
• Financial data: payment method details (such as bKash account number, Nagad mobile number, Rocket number, or masked card details), transaction history, deposit amounts, withdrawal requests, and account balance records.
• Technical data: IP address, device type, operating system, browser type, device identifiers, session duration, login timestamps, and approximate geographic location derived from network data.
• Gameplay and behavioural data: game history, betting patterns, session frequency, preferred game categories, bonus usage history, and responsible gaming self-assessment responses.

bajbb collects this information directly from you at the point of registration and subsequently through your ongoing use of the Platform. Some data — particularly technical data and gameplay data — is collected automatically through the Platform's systems as a standard function of operating a secure online service. We do not collect unnecessary data and do not ask for information that is not required for the purposes described in this Policy.

bajbb uses the personal data it collects for the following specific purposes:

• Account management and service delivery: to create and maintain your bajbb account, verify your identity and age, process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa and Mastercard, and provide access to all Platform features.
• Compliance and fraud prevention: to fulfil our obligations under applicable anti-money laundering (AML) and know-your-customer (KYC) requirements, to detect and prevent fraudulent activity, to investigate suspected violations of our Terms and Conditions, and to report to relevant authorities where legally required.
• Responsible gaming: to monitor gameplay patterns that may indicate problem gambling behaviour, to administer self-exclusion and deposit limit tools, and to contact players who have activated responsible gaming features on their account.
• Platform improvement and analytics: to analyse aggregated, anonymised gameplay and usage data to improve Platform performance, fix technical issues, and develop new features and game categories relevant to Bangladeshi players.
• Communications and support: to respond to your support requests, to notify you of changes to the Platform or these policies, and to send promotional communications where you have provided consent to receive them.

bajbb processes your personal data on the following legal bases:

• Contractual necessity: processing required to perform the contract between bajbb and you as a registered player, including account creation, transaction processing, and service delivery.
• Legal obligation: processing necessary to comply with applicable law, including AML, KYC, and other regulatory requirements that apply to online gaming platforms.
• Legitimate interests: processing carried out in bajbb's legitimate operational and security interests, including fraud detection, system security, responsible gaming monitoring, and Platform analytics — where these interests are not overridden by your privacy rights.
• Consent: where bajbb relies on your consent as the legal basis for processing — for example, for sending promotional emails or SMS messages — you have the right to withdraw that consent at any time by contacting bajbb support at [email protected].

bajbb does not sell your personal data to third parties. We may share your information only in the following circumstances:

• Service providers and technology partners: bajbb shares data with vetted third-party service providers who assist in Platform operations, including payment processors (bKash, Nagad, Rocket, Upay, and card networks), game content providers (such as Pragmatic Play, Evolution Gaming, Ezugi, and Spribe), identity verification services, and cloud hosting providers. These parties process data only as instructed by bajbb and under binding confidentiality obligations.
• Regulatory and law enforcement authorities: bajbb may disclose personal data to competent government bodies, financial intelligence units, or law enforcement agencies where required by applicable law or court order, including in relation to AML and counter-terrorism financing obligations.
• Business transfers: in the event of a merger, acquisition, or sale of all or part of bajbb's business, player data may be transferred to the acquiring entity as part of that transaction, subject to the same privacy protections described in this Policy.
• With your consent: bajbb may share your data with other parties where you have given explicit, informed consent to do so.

bajbb does not share personal data with advertisers, data brokers, or any entity for commercial marketing purposes without your prior explicit consent. bajbb will never share your bajbb account credentials, full payment details, or government ID document images with any unauthorised party under any circumstances.

All payment transactions on the bajbb Platform — including bKash deposits, Nagad withdrawals, Rocket transfers, Upay payments, and Visa or Mastercard card transactions — are processed through secure, encrypted payment gateways. bajbb does not store full card numbers, card verification values (CVV), or mobile financial service PINs on its own servers. Payment credentials are handled directly by the respective payment processor under their own security standards.

bajbb retains transaction records — including amounts, timestamps, payment method type (but not full credentials), and transaction status — as required for financial compliance, dispute resolution, and audit purposes. These records are retained for the minimum period required under applicable law or bajbb's internal compliance policies, whichever is longer.

bajbb uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files stored on your device that help bajbb recognise returning users, maintain session security, and analyse Platform usage. The types of cookies bajbb uses include:

• Strictly necessary cookies: required for the Platform to function — these include session authentication cookies that keep you logged in and security tokens that protect your account from unauthorised access. These cannot be disabled without disabling the Platform itself.
• Analytics cookies: used to collect anonymised information about how players use the Platform — including which pages are visited most frequently, session lengths, and entry/exit points. This data helps bajbb improve the Platform experience.
• Preference cookies: store your Platform settings and preferences — such as language preference, display settings, and game category preferences — so they are retained between sessions.

You can manage cookie preferences through your device's browser settings. Please be aware that disabling certain cookies may affect the functionality of the Platform. bajbb does not use third-party advertising cookies or allow external ad networks to place tracking cookies on the Platform.

bajbb retains personal data for as long as necessary to fulfil the purposes for which it was collected, including for the duration of your account registration and for any additional period required by applicable law. Specifically: account and identity data is retained for the life of the account plus a minimum of five years following account closure, in accordance with standard AML record-keeping obligations; transaction records are retained for a minimum of five years from the date of the transaction; gameplay and session data is retained for analytics and dispute resolution purposes for up to two years.

When personal data is no longer required for any of the above purposes and no legal retention obligation applies, bajbb will securely delete or anonymise that data. If you request deletion of your account, bajbb will delete or anonymise your personal data subject to any overriding legal retention requirements. You may submit a deletion request by contacting bajbb support at [email protected].

bajbb implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include: SSL/TLS encryption for all data transmitted between your device and bajbb's servers; encrypted storage of sensitive personal data at rest; access controls limiting data access to authorised personnel on a need-to-know basis; regular security assessments and vulnerability testing; and secure session management with automatic timeout on inactivity .

While bajbb takes data security seriously and applies industry-standard protections, no online service can guarantee absolute security against all possible threats. bajbb encourages players to take personal responsibility for their account security by using a strong, unique password, enabling any available two-factor authentication, and never sharing login credentials with any third party. If you suspect your account has been compromised, contact bajbb support immediately at [email protected].

Depending on the laws applicable in your jurisdiction, you may have the following rights in relation to your personal data held by bajbb:

• Right of access: you may request a copy of the personal data bajbb holds about you, along with information about how it is used and shared.
• Right of rectification: if any personal data bajbb holds about you is inaccurate or incomplete, you may request that it be corrected or updated.
• Right of erasure: you may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to bajbb's legal retention obligations.
• Right to object or restrict processing: you may object to certain processing activities or request that bajbb restrict processing of your data in defined circumstances, such as while a dispute regarding data accuracy is under review.
• Right to withdraw consent: where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, please contact bajbb's support team in writing at [email protected]. bajbb will respond to all verified data rights requests within a reasonable period and in accordance with applicable law. bajbb may need to verify your identity before processing a data rights request to protect against unauthorised requests.

The bajbb Platform is strictly intended for adults aged 21 and above. bajbb does not knowingly collect personal data from any person under the age of 21. If bajbb becomes aware that personal data has been collected from a minor, it will take immediate steps to delete that data and close the associated account. If you believe a minor has registered an account on bajbb, please notify us immediately at [email protected]. Parents and guardians in Bangladesh are encouraged to use device parental controls and to discuss responsible internet use with young people in their care.

The bajbb Platform does not contain links to external third-party websites. bajbb is a self-contained platform and all navigation links direct users to pages within bajbb.org only. bajbb bears no responsibility for the privacy practices or content of any external websites that players may independently access. This Policy applies exclusively to data collected through the bajbb Platform at bajbb.org.

bajbb may update this Privacy Policy from time to time to reflect changes in applicable law, Platform features, or our data handling practices. When material changes are made, the effective date at the top of this page will be updated. Where reasonably practicable, bajbb will also notify registered players of significant changes via the contact details on their account. Your continued use of the Platform following any update to this Policy constitutes acceptance of the revised Policy. Players who do not agree with any update should discontinue use of the Platform and may request account closure by contacting [email protected].

If you have any questions about this Privacy Policy, wish to exercise a data rights request, or have a concern about how bajbb handles your personal data, please contact the bajbb support team in writing at [email protected]. Please include your registered account username and a clear description of your query or request so that bajbb can respond promptly and accurately. bajbb aims to acknowledge all privacy-related correspondence within 5 business days (Bangladesh Standard Time, UTC+6) and to resolve requests within 30 days unless a longer period is permitted by applicable law.