bbajie Privacy Policy

1. Data We Collect

When you register for and use the bbajie platform, we collect certain categories of personal data. This section describes each category, the specific data points it contains, and the reason we collect them. We do not collect any category of personal data for which we cannot identify a clear, legitimate operational purpose.

1.1 Registration Data

When you create a bbajie account, we collect:

• Full legal name (as it appears on your Bangladesh National ID or passport)
• Date of birth (for age verification — players must be 18 or older)
• Residential address in Bangladesh (city, district, and postal area)
• Email address
• Bangladesh mobile number (used for account security and linked to your payment method)
• Username chosen at registration

1.2 Identity Verification (KYC) Data

Before processing any withdrawal, bbajie requires you to complete a Know Your Customer (KYC) verification process. For this purpose, we collect:

• A copy of your Bangladesh National Identity Card (NID), valid passport, or driving licence
• A recent proof-of-address document (utility bill, bank statement) where address verification is required
• A selfie photograph or live- image verification in cases where document authenticity cannot be confirmed automatically

KYC documents are processed securely and retained only for as long as required to satisfy our verification obligations and applicable regulatory guidelines. They are never used for any purpose other than identity and age verification.

1.3 Financial Transaction Data

To facilitate deposits and withdrawals, we collect and record:

• Payment method type (bKash, Nagad, Rocket, Upay, bank transfer, Visa, Mastercard)
• Mobile wallet number or bank account details associated with each transaction
• Transaction amounts in Bangladeshi Taka (৳)
• Transaction timestamps and reference numbers
• Deposit and withdrawal history linked to your account

1.4 Gaming Activity Data

bbajie records your activity on the platform in order to maintain accurate account balances, resolve disputes, and fulfil our responsible gaming obligations:

• Games played, bets placed, and wagers settled (sport, game title, stake, outcome)
• Session start and end times
• Bonus usage and wagering requirement progress
• Responsible gaming tool settings (deposit limits, session limits, self-exclusion status)

1.5 Technical and Device Data

When you visit or use the bbajie platform, our servers automatically record certain technical information:

• IP address at the time of access
• Browser type and version
• Operating system and device type
• Pages visited and navigation path on the platform
• Session duration and clickstream data

This technical data is used for security monitoring, fraud prevention, and platform performance optimisation. It is not used to build individual marketing profiles without your consent.

Data Category	Examples	Primary Purpose
Registration Data	Name, email, mobile number, address	Account creation & communication
KYC / Identity Data	NID scan, passport copy, selfie	Age & identity verification
Financial Data	bKash number, transaction history, amounts	Payment processing & AML compliance
Gaming Activity	Bets placed, game sessions, outcomes	Account balance, disputes, responsible gaming
Technical Data	IP address, browser type, device info	Security monitoring & fraud prevention

2. How We Use Your Data

bbajie processes personal data only where we have a lawful basis for doing so. The lawful bases we rely on are: (a) the performance of a contract with you (operating your account and delivering the services you have requested); (b) compliance with a legal obligation (KYC, anti-money-laundering, responsible gaming requirements); (c) our legitimate interests (fraud prevention, platform security, service improvement); and (d) your consent (where you have opted in to receive marketing communications).

2.1 Account Management

We use your registration and KYC data to create, maintain, and administer your bbajie account. This includes verifying your identity and age before your first withdrawal, updating your account balance following deposits, withdrawals, and settled wagers, and communicating important account notifications such as security alerts, withdrawal confirmations, and policy updates to your registered email address or mobile number.

2.2 Payment Processing

Your financial transaction data is used to process deposit requests via bKash, Nagad, Rocket, Upay, and bank transfer channels, to execute approved withdrawal requests to your registered payment method, and to maintain an auditable ledger of all financial activity on your account. Financial records are retained for a minimum period required by applicable financial regulations and anti-money-laundering best practices.

2.3 Fraud Prevention & Security

Technical and device data, alongside transaction patterns and gaming activity logs, are analysed by bbajie's security systems to detect and prevent fraudulent account activity, bonus abuse, money laundering, underage access attempts, and the use of automated betting tools. Where suspicious activity is flagged, bbajie may temporarily restrict account access while an investigation is conducted.

2.4 Responsible Gaming Compliance

bbajie is committed to promoting responsible gambling among players in Bangladesh. We use gaming activity data and account behaviour patterns to identify players who may be displaying signs of problem gambling. Where such indicators are present, bbajie may proactively reach out to the player with information about available support tools, or apply account-level limits in accordance with our Responsible Gaming policy. Visit our Responsible Gaming page for full details of available tools.

2.5 Platform Improvement

Aggregated, anonymised usage data helps us understand how players navigate the bbajie platform, which games are most popular among our Bangladesh audience, and where the user experience can be improved. This analysis does not involve processing individually identifiable data and does not result in decisions that affect your account.

2.6 Marketing Communications

Where you have explicitly opted in to receive promotional communications, bbajie may use your email address and mobile number to send information about new games, seasonal promotions (such as Eid, Pohela Boishakh, or BPL-season offers), and platform updates. You may withdraw your marketing consent at any time by contacting [email protected] or by using the unsubscribe option included in every promotional message. Withdrawal of marketing consent does not affect your right to continue using the platform.

3. Data Sharing & Third Parties

bbajie does not sell, rent, or otherwise transfer your personal data to third parties for their own commercial purposes. We share personal data only in the limited circumstances described below, and only to the minimum extent necessary for the stated purpose.

3.1 Payment Processors

To process your deposits and withdrawals, bbajie shares relevant financial data with the payment service providers you select — including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard. These providers process your data solely to execute the specific transaction you have requested and are bound by their own privacy and data security obligations. bbajie is not responsible for the privacy practices of third-party payment processors once data leaves our systems.

3.2 Identity Verification Partners

bbajie may engage specialist third-party KYC service providers to assist with the verification of identity documents submitted by players. These providers act as data processors on behalf of bbajie and are contractually prohibited from using your identity data for any purpose other than completing the verification request we have initiated.

3.3 Game Technology Providers

The bbajie platform integrates games developed and operated by third-party game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive limited session data (such as a session token and account reference) necessary to deliver the game to your device. They do not receive your full personal profile, payment details, or KYC documents.

3.4 Legal & Regulatory Disclosure

bbajie may be required to disclose personal data to government authorities, law enforcement agencies, or regulatory bodies in Bangladesh where required by applicable law, court order, or official regulatory request. In such cases, bbajie will disclose only the specific data requested and will notify the affected user where legally permitted to do so.

3.5 Business Transfers

In the event that bbajie undergoes a merger, acquisition, or sale of all or substantially all of its assets, personal data held by bbajie may be transferred to the acquiring entity as part of that transaction. Affected users will be notified of any such transfer and of any material change to the way their data is processed, prior to the transfer taking effect where practicable.

4. Cookies & Tracking Technologies

bbajie uses cookies and similar tracking technologies on its website and mobile platform. A cookie is a small text file placed on your device by our web server when you visit the platform. Cookies allow the platform to recognise your device across sessions, maintain your login state, and remember your preferences.

4.1 Categories of Cookies We Use

• Strictly Necessary Cookies: Required for the platform to function. These include session authentication cookies that keep you logged in during an active session and security cookies that help detect fraudulent access attempts. These cannot be disabled without breaking core platform functionality.
• Functional Cookies: Store your preferences such as language settings, preferred game categories, and responsible gaming tool configurations so that your experience is consistent across visits.
• Analytics Cookies: Used to collect anonymised, aggregated data about how players navigate the platform. This data helps us understand which pages perform well and where the user experience can be improved. We do not use analytics cookies to identify you individually.
• Security & Fraud Detection Cookies: Help bbajie identify unusual access patterns, detect the use of automated tools, and verify that account logins are consistent with expected device and location behaviour.

4.2 Managing Cookies

You can control and manage cookies through your browser settings. Most modern browsers allow you to view, delete, and block cookies from specific websites. Please note that disabling strictly necessary cookies will prevent you from logging in to your bbajie account and will significantly impair the functionality of the platform. Disabling functional or analytics cookies will not prevent you from accessing the platform, but may result in a less personalised experience.

4.3 No Third-Party Advertising Cookies

bbajie does not place third-party advertising cookies or cross-site tracking cookies on players' devices. We do not participate in advertising networks that track your behaviour across unrelated websites to serve you targeted advertisements.

5. Data Security & Retention

bbajie implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. Our security infrastructure includes 256-bit SSL/TLS encryption for all data transmitted between your device and our servers, encrypted storage of sensitive personal and financial data at rest, role-based access controls that restrict internal access to personal data to authorised personnel only, and regular security audits and vulnerability assessments of our platform infrastructure.

5.1 Data Breach Response

In the unlikely event of a personal data breach that poses a risk to your rights and freedoms, bbajie will notify affected users as promptly as practicable via the email address registered on their account. The notification will describe the nature of the breach, the categories of data affected, the steps bbajie has taken to contain and remedy the breach, and any actions we recommend you take to protect yourself.

5.2 Data Retention Periods

bbajie retains personal data only for as long as is necessary for the purpose for which it was collected, or as required by applicable law and regulatory guidelines. The following general retention periods apply:

• Account and registration data: Retained for the duration of the account relationship and for a minimum of five (5) years following account closure, in accordance with standard financial record-keeping requirements.
• KYC / identity verification documents: Retained for a minimum of five (5) years from the date of verification or account closure, whichever is later.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction.
• Gaming activity logs: Retained for a minimum of three (3) years from the date of each session or transaction.
• Technical and device data: Retained for up to twelve (12) months from the date of collection, unless retained longer for an active fraud investigation.
• Marketing consent records: Retained for the duration of your opt-in consent and for one (1) year following withdrawal of consent, as evidence of the consent transaction.

When data reaches the end of its applicable retention period, it is securely deleted or anonymised in accordance with our internal data disposal procedures.

6. Your Privacy Rights

As a bbajie player, you have a number of rights with respect to your personal data. bbajie is committed to honouring these rights in a timely and transparent manner. To exercise any of the rights described below, please contact our data support team at [email protected], clearly stating the right you wish to exercise and the data to which your request relates.

6.1 Right of Access

You have the right to request a copy of all personal data that bbajie holds about you. We will provide this information in a clear, structured format within a reasonable timeframe from receipt of your verified request. We may need to confirm your identity before processing an access request to prevent unauthorised disclosure.

6.2 Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. For account details such as your email address, mobile number, and residential address, you may also update this information directly via your account settings. Changes to your registered legal name or date of birth require documentary evidence and must be submitted via [email protected].

6.3 Right to Erasure

You may request that bbajie delete your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent and no other lawful basis for processing exists, or where the data has been processed unlawfully. Please note that this right is not absolute — bbajie may be required to retain certain data (such as transaction records and KYC documents) for the legally mandated retention periods described in Section 5.2, even following an erasure request.

6.4 Right to Restrict Processing

In certain circumstances, you may request that bbajie restrict the processing of your personal data — for example, while a rectification request is being assessed, or where you have objected to processing and we are considering that objection. Where processing is restricted, we will continue to store your data but will not actively process it until the restriction is lifted.

6.5 Right to Data Portability

Where processing is based on your consent or the performance of a contract and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format, and to transmit it to another service provider where technically feasible. To submit a portability request, contact [email protected].

6.6 Right to Object to Marketing

You have the absolute right to object to the processing of your personal data for direct marketing purposes at any time. Upon receipt of such an objection, bbajie will cease all marketing communications to you immediately. This will not affect your ability to continue using the bbajie platform.

7. Children's Privacy

The bbajie platform is strictly intended for adults aged 18 years and older. bbajie does not knowingly collect personal data from individuals under the age of 18. The registration process includes a mandatory date-of-birth field, and bbajie's KYC process is specifically designed to identify and reject applications from underage individuals.

If bbajie discovers that personal data has been collected from a person under the age of 18, that account will be suspended immediately, all associated data will be securely deleted (or held only to the extent required for legal purposes such as documenting the underage access event), and any deposits made will be returned to the originating payment method where technically feasible.

If you are a parent or guardian and believe that your child has registered an account on the bbajie platform, please contact us immediately at [email protected] so that we can take prompt corrective action. We encourage households with minors to use appropriate internet filtering and parental control software to prevent access to online gambling platforms.

8. Policy Updates & Contact

bbajie reserves the right to update or modify this Privacy Policy at any time. Where a change is material — meaning it substantially alters the way we collect, use, or share your personal data — we will notify registered users via the email address associated with their account at least fourteen (14) days before the change takes effect. Non-material changes (such as grammatical corrections, clarifications, or restructuring with no change in substance) may be made without prior notice. The effective date at the top of this document will always reflect the date of the most recent update.

Continued use of the bbajie platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with any change, you should close your account before the new policy takes effect and request the return of your remaining balance via [email protected].

8.1 Contact for Privacy Matters

For any questions, concerns, or requests relating to this Privacy Policy or the way bbajie handles your personal data, please contact our support team using the details below. All privacy-related enquiries are handled in strict confidence.

• General Support & Privacy Enquiries: [email protected]
• Responsible Gaming Data Queries: [email protected]
• Support Hours: 24 hours a day, 7 days a week — English and Bengali