bajbb Privacy Policy

This Privacy Policy ("Policy") describes how bajbb ("we", "us", "our", "the Platform") collects, processes, stores, and protects the personal information of individuals ("you", "the User", "the Player") who access or use the bajbb platform at bajbb.io, including any associated mobile interfaces, subdomains, or digital services operated by bajbb.

bajbb is committed to handling your personal data with integrity, transparency, and care. We recognise that players in Bangladesh trust us with sensitive personal and financial information, and we take that responsibility seriously. This Policy has been written in plain, accessible English so that you can clearly understand how your data is used and what choices you have.

This Policy applies to all personal data collected in connection with your use of the bajbb platform, including data collected during account registration, identity verification, financial transactions, customer support interactions, and general browsing of the site. It applies regardless of whether you are accessing bajbb from a desktop browser, mobile browser, or any other device.

By registering an account with bajbb or by continuing to use the Platform after this Policy has been updated, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not agree with this Policy, you should discontinue your use of the Platform immediately.

bajbb operates an online betting and casino entertainment platform primarily serving adult players located in Bangladesh. The Platform offers a comprehensive portfolio of gaming and wagering products including sports betting (cricket, football, kabaddi, and more), live casino games, slots, and crash games sourced from certified third-party providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi.

For the purposes of this Privacy Policy, bajbb acts as the data controller in respect of all personal data collected directly from users of the bajbb.io platform. As data controller, bajbb determines the purposes and means of processing your personal data and is responsible for ensuring that such processing complies with applicable data protection principles.

You can contact bajbb's data team at any time using the details provided in Section 15 of this Policy.

bajbb collects the following categories of personal data from users of the Platform:

bajbb collects your personal data through the following means:

• Direct submission: When you create an account, complete identity verification, make a deposit or withdrawal, contact our support team, or respond to a survey or promotion, you provide us with data directly.
• Automated technical collection: When you access the Platform, our servers automatically collect technical data such as your IP address, browser type, device identifiers, and session information. This occurs through standard web server logging and, where applicable, cookies and similar tracking technologies (see Section 8).
• Third-party payment providers: When you use bKash, Nagad, Rocket, Upay, Visa, or Mastercard to make a deposit or withdrawal, we receive transaction confirmation data from those payment providers. We do not receive your full payment credentials; we receive only the data necessary to confirm and reconcile the transaction.
• Identity verification partners: bajbb may use authorised third-party identity verification services to cross-check the identity documents you provide during KYC. These partners operate under strict data processing agreements and are prohibited from using your data for any purpose other than identity verification.
• Publicly available sources: In limited circumstances, bajbb may cross-reference information you have provided with publicly available records (such as electoral registers or company registries) for fraud prevention purposes.

bajbb uses the personal data it collects for the following specific purposes:

• Account creation and management: To register your account, verify your identity and age, maintain your account settings, and manage your ongoing relationship with the Platform.
• Transaction processing: To process deposits and withdrawals, reconcile payments, detect duplicate transactions, and maintain accurate financial records.
• Service delivery: To provide access to sports betting markets, casino games, slots, crash games, and all other products available on the bajbb platform.
• Customer support: To respond to your queries, handle complaints, investigate disputes, and provide technical assistance.
• Responsible gaming: To monitor your betting and gaming patterns for signs of problem gambling, to apply any deposit limits or self-exclusion measures you have requested, and to comply with our responsible gaming obligations.
• Fraud and security: To detect and prevent fraudulent activity, collusion, money laundering, bonus abuse, account takeover attempts, and other prohibited conduct.
• Legal compliance: To fulfil our obligations under applicable anti-money-laundering laws, data protection laws, and any other regulations applicable to the operation of an online gaming platform.
• Marketing communications: To send you promotional offers, bonus alerts, and event notifications — but only where you have explicitly opted in to receive such communications. You may opt out at any time by contacting support or updating your account preferences.
• Platform improvement: To analyse usage patterns, identify technical issues, and develop new features and products that improve the bajbb experience for all players.

bajbb processes your personal data under the following legal bases, depending on the nature of the processing activity:

• Contractual necessity: The majority of data processing by bajbb is necessary for the performance of the contract between you and bajbb — specifically, to operate your account and deliver the services you have registered to use. Without this processing, bajbb cannot provide its services to you.
• Legal obligation: bajbb is required by law to collect and retain certain data, particularly in connection with anti-money-laundering regulations, know-your-customer requirements, and financial record-keeping obligations. Processing for these purposes is mandatory and cannot be opted out of.
• Legitimate interests: bajbb relies on legitimate interests as a legal basis for certain processing activities, including fraud detection, platform security, internal analytics, and responsible gaming monitoring. In each case, bajbb has assessed that its legitimate interests are not overridden by your fundamental rights and freedoms.
• Consent: Where bajbb processes your data for optional purposes such as direct marketing communications or non-essential cookies, it does so only on the basis of your freely given, informed consent. You may withdraw your consent at any time without penalty.

bajbb does not sell, rent, or trade your personal data to any third party. We share your data only in the following specific and limited circumstances:

• Game providers: When you play casino games or slots from third-party providers (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Ezugi), your account identifier and game session data are shared with the relevant provider to enable gameplay. These providers operate under contractual data processing agreements with bajbb and are not permitted to use your data for any purpose beyond providing the game service.
• Payment service providers: Transaction data is shared with bKash, Nagad, Rocket, Upay, Visa, Mastercard, and their underlying processing networks as necessary to complete your requested deposits and withdrawals.
• Identity verification services: Where third-party KYC verification tools are used, your identity documents may be shared with those authorised partners solely for the purpose of verifying your identity.
• Analytics and infrastructure providers: bajbb uses trusted technology service providers for server hosting, platform analytics, and related operational functions. These providers act as data processors under bajbb's instruction and are bound by strict contractual obligations regarding data confidentiality and security.
• Legal and regulatory authorities: bajbb may disclose your personal data to law enforcement agencies, financial intelligence units, or regulatory bodies where required to do so by law, or where such disclosure is necessary to prevent or report suspected criminal activity including fraud or money laundering.
• Business transfers: In the event that bajbb is involved in a merger, acquisition, or sale of all or substantially all of its assets, your personal data may be transferred as part of that transaction. You will be notified of any such transfer and given an opportunity to opt out where legally feasible.

bajbb uses cookies and similar tracking technologies on its platform to enhance your experience, maintain your session state, and gather anonymised analytical data. A cookie is a small text file placed on your device by a web server. Cookies cannot execute code or deliver viruses; they are used solely as identifiers.

bajbb uses the following categories of cookies:

• Strictly necessary cookies: These cookies are essential for the Platform to function. They maintain your login session, remember your account preferences, and enable secure transactions. These cookies cannot be disabled without significantly impairing your ability to use the Platform.
• Performance and analytics cookies: These cookies collect anonymised information about how users interact with the Platform, such as which pages are most visited and how long sessions last. This data is used to improve the performance and usability of bajbb. These cookies are activated only with your consent.
• Functional cookies: These cookies allow the Platform to remember choices you have made (such as your preferred language or last-visited game category) to provide a more personalised experience.

You can manage or disable non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the Platform. For detailed instructions on managing cookies in your specific browser, consult your browser's help documentation.

bajbb retains your personal data only for as long as is necessary for the purposes outlined in this Policy, or as required by applicable law. The following retention guidelines apply:

• Active account data: Personal data associated with your bajbb account is retained for the duration of your account's active status and for a period of five (5) years following account closure, in accordance with standard anti-money-laundering and financial record-keeping requirements.
• Transaction records: Financial transaction records, including deposit and withdrawal history, are retained for a minimum of seven (7) years from the date of each transaction to satisfy applicable financial compliance obligations.
• Identity documents: Copies of identity documents submitted for KYC verification are retained for the same period as the associated account data — five years post-closure — and are then securely deleted.
• Support communications: Customer support transcripts and correspondence are retained for three (3) years from the date of the interaction to support dispute resolution and quality assurance purposes.
• Marketing data: Where you have opted in to marketing communications, your marketing preferences and associated contact details are retained until you opt out. Upon opt-out, your marketing data is removed from our active communications lists within 10 business days.
• Anonymised analytics data: Usage and analytics data that has been irreversibly anonymised (i.e., it can no longer be linked to you as an individual) may be retained indefinitely for statistical and business planning purposes.

When a retention period expires, bajbb will securely delete or irreversibly anonymise the relevant data in accordance with its internal data disposal procedures. Secure deletion means that data is overwritten or destroyed in a manner that prevents recovery.

bajbb respects and upholds the personal data rights of all users. You are entitled to exercise the following rights in relation to the personal data bajbb holds about you:

• Right of access: You may request a copy of all personal data bajbb holds about you (commonly known as a Subject Access Request or SAR). We will respond to verified access requests within 30 days.
• Right to rectification: If you believe that any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Minor corrections (such as a misspelled name or incorrect phone number) can be handled directly through your account settings or by contacting support.
• Right to erasure: In certain circumstances, you have the right to request that bajbb delete the personal data it holds about you (the "right to be forgotten"). This right applies where the data is no longer necessary for the purpose for which it was collected, where you withdraw consent (for consent-based processing), or where you object to processing based on legitimate interests and there are no overriding legitimate grounds. This right is subject to exceptions where retention is required by law.
• Right to restriction: You may request that bajbb restricts its processing of your data in certain situations — for example, while the accuracy of data you have contested is being verified, or where you have objected to processing and bajbb is assessing whether its legitimate interests override your rights.
• Right to data portability: Where processing is based on your consent or the performance of a contract and is carried out by automated means, you have the right to receive a structured, machine-readable copy of your personal data for transfer to another service provider.
• Right to object: You have the right to object at any time to bajbb processing your personal data for direct marketing purposes. Upon receiving such an objection, bajbb will cease direct marketing processing without requiring justification from you.
• Right to withdraw consent: Where bajbb's processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that took place before the withdrawal.

bajbb implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security framework includes:

• TLS/SSL encryption: All data transmitted between your browser or device and bajbb's servers is encrypted using Transport Layer Security (TLS) protocols, preventing interception by third parties during transmission.
• AES-256 encryption at rest: Sensitive data stored on bajbb's servers — including identity documents, financial records, and authentication credentials — is encrypted at rest using the AES-256 standard.
• Access controls: bajbb operates a strict need-to-know access policy. Only personnel who require access to specific categories of personal data to perform their job functions are granted such access. Access rights are reviewed regularly and revoked immediately upon termination of employment or change of role.
• Two-factor authentication: bajbb's internal administrative systems require two-factor authentication for all staff with access to user data, significantly reducing the risk of unauthorised access through credential compromise.
• Regular security audits: bajbb engages independent security professionals to conduct periodic penetration testing and vulnerability assessments of its platform infrastructure. Identified vulnerabilities are remediated according to risk priority.
• Incident response plan: bajbb maintains a documented data breach response plan that defines the steps to be taken in the event of a security incident, including immediate containment, root cause analysis, regulatory notification (where applicable), and affected user notification.

While bajbb takes all reasonable precautions to secure your personal data, no internet-based service can guarantee absolute security. You are responsible for maintaining the confidentiality of your own account credentials. If you suspect that your account has been compromised, you should contact bajbb support immediately.

bajbb is strictly an adults-only platform. The Platform is not directed at, and does not knowingly collect personal data from, individuals under the age of 21. bajbb enforces mandatory age verification during account registration and applies additional checks where the Platform has reason to believe that an account holder may be under 21.

If bajbb discovers or is notified that it has inadvertently collected personal data from a person under the age of 21, it will immediately suspend the relevant account, delete all associated personal data, and void any transactions or balances connected to that account.

Parents and guardians who believe that a minor under their care has registered an account with bajbb should contact our support team immediately at [email protected]. We will act promptly to investigate and, where confirmed, close the account and delete the minor's data without delay.

The bajbb platform may contain links to third-party websites or services, such as the websites of game providers or payment partners. These third-party sites operate independently of bajbb and have their own privacy policies, which we encourage you to read before providing any personal data to those sites.

bajbb is not responsible for the privacy practices, content, or data security of any third-party website or service linked from the Platform. The presence of a link to a third-party site does not constitute an endorsement of that site's privacy practices by bajbb. You access such third-party sites entirely at your own risk.

bajbb reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or the services we offer . When we make material changes to this Policy, we will notify registered users by email (where you have provided a valid email address) and by placing a prominent notice on the Platform for a period of not less than 30 days prior to the changes taking effect.

The "Last Updated" date at the top of this page reflects the date on which the most recent version of the Policy came into force. We encourage you to review this Policy periodically to stay informed about how bajbb protects your personal data. Your continued use of the Platform following the effective date of any updated Policy constitutes your acceptance of the revised terms.

Where a proposed change to this Policy would materially reduce your privacy rights or significantly alter how bajbb uses your personal data, we will seek your explicit consent before applying the change to your account where consent-based processing is the applicable legal basis.

If you have any questions, concerns, or requests relating to this Privacy Policy or bajbb's handling of your personal data, you are welcome to contact our data team using the following details:

If you are not satisfied with bajbb's response to a data privacy concern, or if you believe that bajbb has processed your personal data in a manner inconsistent with this Policy or applicable law, you have the right to escalate your complaint to the relevant data protection authority in your jurisdiction. bajbb takes all formal complaints seriously and commits to cooperating fully with any regulatory investigation.

We value your trust and will always endeavour to resolve data privacy concerns promptly, transparently, and fairly. Your confidence in the bajbb platform depends on knowing that your personal data is in safe hands, and we are committed to maintaining that confidence at every level of our operations.