baji1 Privacy Policy – How We Collect, Use, and Protect Your Personal Data

1. Introduction

baji1 ("we", "us", "our") is committed to protecting the privacy of everyone who uses the baji1 platform, accessible at baji1.io. This Privacy Policy sets out in plain language how baji1 collects, uses, stores, shares, and protects personal data in connection with the operation of our online betting and casino service, which is offered primarily to players in Bangladesh.

This policy is incorporated by reference into the baji1 Terms and Conditions. By creating a baji1 account or by continuing to use the platform after any update to this policy, you confirm that you have read and understood how your personal data will be processed as described herein. If you do not agree with this policy, you must discontinue use of the platform and may request account closure by contacting [email protected].

This Privacy Policy applies to all personal data collected through the baji1 website, any mobile-optimised version of the site, and all related services and communications. It does not apply to the privacy practices of third-party websites or services that may be linked from the baji1 platform — you should consult the privacy policies of those third parties independently.

2. Data Controller

For the purposes of this Privacy Policy, baji1 acts as the data controller with respect to personal data collected from players who access the platform. As data controller, baji1 determines the purposes and means of processing your personal data and is responsible for ensuring that such processing is conducted lawfully, fairly, and transparently.

If you have any questions about this policy or wish to exercise any of the data rights described in Section 10, please contact us at: [email protected]. Our support team is available 24 hours a day, seven days a week, and will direct your query to the appropriate data privacy contact within our organisation.

3. Data We Collect

baji1 collects personal data in several ways: directly from you when you register or use the platform, automatically through your use of the site, and from third-party verification and payment partners where necessary. The categories of data we collect are described below.

3.1 Registration and Identity Data

• Full legal name as it appears on your government-issued identity document
• Date of birth (collected for mandatory age verification — players must be 21 or older)
• Residential address, including city, district, and postal code
• Mobile phone number registered in Bangladesh
• Email address
• Username chosen at the point of registration
• Government-issued identity document number (National ID, passport, or birth certificate), collected during KYC verification

3.2 Financial and Transaction Data

• Mobile money account identifiers (bKash, Nagad, Rocket, Upay) used for deposits and withdrawals — note: we receive only the account reference, never your mobile money PIN
• Bank account details where bank transfer is used as a payment method
• Card type (Visa, Mastercard) and the last four digits of the card number where card payments are used
• Transaction history: deposit amounts, withdrawal amounts, dates, and reference numbers
• Wallet balance history within your baji1 account

3.3 Betting and Gaming Activity Data

• Records of all bets placed, including the event, market, stake amount, odds, and outcome
• Casino game session records, including game titles, session durations, and round outcomes
• Bonus offers claimed and the status of associated wagering requirements
• Responsible gaming preferences set on your account, including any deposit limits or self-exclusion periods

3.4 Technical and Usage Data

• IP address and approximate geographic location derived from IP data
• Device type, operating system, and browser version
• Pages visited on the baji1 platform, clickstream data, and session duration
• Referral source (how you arrived at the baji1 website)
• Cookie identifiers and similar tracking technologies (see Section 6)

3.5 Communications Data

• Records of communications between you and the baji1 support team via email or live chat
• Complaints, feedback, and dispute records
• Responses to surveys or promotional competitions you choose to participate in

4. How We Use Your Data

baji1 uses the personal data it collects for the following specific purposes:

Purpose	Data Used	Legal Basis
Creating and managing your baji1 account	Registration and identity data	Contract performance
Age and identity verification (KYC)	Identity data, document data	Legal obligation
Processing deposits and withdrawals	Financial and transaction data	Contract performance
Fraud prevention and anti-money laundering checks	Identity, financial, and usage data	Legal obligation / Legitimate interest
Providing customer support	Communications and account data	Contract performance
Delivering promotional bonuses and offers	Account and transaction data	Contract performance / Consent
Responsible gaming monitoring and interventions	Gaming activity and account data	Legal obligation / Legitimate interest
Platform analytics and product improvement	Technical and usage data	Legitimate interest
Sending marketing communications (where consented)	Contact data, preferences	Consent
Complying with legal and regulatory obligations	All relevant categories	Legal obligation

5. Legal Basis for Processing

baji1 processes your personal data only where a valid legal basis exists. The primary legal bases we rely on are as follows:

• Contract Performance: Processing that is necessary to provide the baji1 service you have contracted for when opening an account, including account management, payment processing, and game delivery.
• Legal Obligation: Processing required to comply with applicable laws, including anti-money-laundering legislation, age verification requirements, and record-keeping obligations.
• Legitimate Interests: Processing carried out for baji1's legitimate business interests where those interests are not overridden by your fundamental rights — for example, fraud prevention, platform security, and analytical improvements to our service.
• Consent: Processing that relies on your freely given, specific, and informed consent — principally the sending of direct marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

6. Cookies and Tracking Technologies

baji1 uses cookies and similar tracking technologies to enable the platform to function correctly, to remember your preferences, to analyse how the site is used, and — where you have consented — to deliver relevant promotional content. The categories of cookies used on the baji1 platform are described below:

• Essential Cookies: Required for the platform to operate. These include session authentication cookies that keep you logged in during your visit and security cookies that protect against cross-site request forgery. These cookies cannot be disabled without preventing access to core platform features.
• Functional Cookies: Used to remember your language preferences, display settings, and previously selected game categories to personalise your experience on return visits.
• Analytics Cookies: Used to collect anonymised data about how visitors interact with the baji1 platform — including pages visited, time spent, and errors encountered — to help us improve the product. Analytics data is aggregated and not linked to individually identifiable players.
• Marketing Cookies: Used only where you have provided consent, to track your engagement with promotional materials and to help baji1 understand which offers are most relevant to different player segments. You may withdraw consent for marketing cookies at any time.

You can manage your cookie preferences through your browser settings. Please note that disabling essential cookies will prevent you from accessing your baji1 account. Most modern browsers provide options to block or delete cookies — consult your browser's help documentation for instructions specific to your browser.

7. Third-Party Data Sharing

baji1 does not sell, rent, or trade your personal data. We share personal data with third parties only in the following limited circumstances:

• Payment Processors: We share the minimum necessary financial data with payment partners including mobile money operators (bKash, Nagad, Rocket, Upay) and card payment networks (Visa, Mastercard) to process your deposits and withdrawals. These parties act as independent data controllers for the payment transaction itself.
• Identity Verification Providers: We use third-party KYC services to verify the identity and age of account holders. These providers receive copies of the identity documents you submit and return a verification result to baji1. They are contractually prohibited from using your data for any other purpose.
• Fraud Prevention and Compliance Services: We may share data with fraud prevention, anti-money-laundering screening, and compliance technology providers to fulfil our legal obligations and to protect players and the platform from fraudulent activity.
• Game Providers: When you launch a game on the baji1 platform, a session token and your account identifier may be passed to the game provider (for example, Evolution Gaming, Pragmatic Play, Spribe, Ezugi, Microgaming, or NetEnt) to enable the game session. Game providers do not receive your full registration data.
• Legal and Regulatory Authorities: We may disclose personal data to law enforcement, regulatory bodies, or courts where we are legally required to do so, or where disclosure is necessary to protect the rights, property, or safety of baji1, its players, or the public.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of the baji1 business, your personal data may be transferred to the acquiring entity, subject to the same level of protection as described in this policy.

All third-party service providers who process personal data on baji1's behalf are required to enter into data processing agreements that obligate them to handle your data in accordance with applicable privacy standards and to implement appropriate technical and organisational security measures.

8. Data Retention

baji1 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The general retention principles we apply are as follows:

• Account and Identity Data: Retained for the duration of your account relationship with baji1, and for a minimum of five years following the permanent closure of your account, in accordance with anti-money-laundering record-keeping requirements.
• Transaction and Financial Data: Retained for a minimum of five years from the date of each transaction, consistent with financial record-keeping obligations.
• Gaming Activity Records: Retained for a minimum of three years from the date of each gaming session or bet settlement.
• Customer Support Communications: Retained for two years from the date of the last communication in each support thread, or longer where the communication relates to an unresolved dispute.
• Marketing Consent Records: Retained for the duration of your consent and for three years following withdrawal of consent, to demonstrate compliance.
• Technical and Usage Data: Retained in aggregate, anonymised form for up to two years for platform analytics purposes. Individually identifiable technical data is retained for a shorter period consistent with its operational purpose.

When the applicable retention period has expired and there is no other lawful basis for continued retention, baji1 will securely delete or anonymise your personal data.

9. Data Security

baji1 implements a comprehensive range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security practices include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers
• Encryption of sensitive data fields at rest within our database systems
• Strict access controls ensuring that only authorised personnel with a specific operational need can access personal data
• Regular internal security audits and penetration testing of platform infrastructure
• Two-factor authentication options available to all account holders to protect against unauthorised account access
• Incident response procedures that include prompt notification to affected players in the event of a data breach that poses a risk to their rights and interests

Despite these measures, no data transmission over the internet or electronic storage system can be guaranteed to be 100% secure. baji1 takes all reasonable precautions but cannot provide an absolute guarantee of security. You also have a role to play in keeping your account secure — please refer to Section 5 of the baji1 Terms and Conditions for your account security responsibilities.

10. Your Data Rights

As a baji1 account holder, you have the following rights with respect to your personal data. To exercise any of these rights, please submit a written request to [email protected], clearly identifying yourself and specifying the right you wish to exercise. We will acknowledge your request within two business days and provide a substantive response within fourteen business days.

10.1 Right of Access

You have the right to request a copy of all personal data that baji1 holds about you, together with information about how it is being processed. We will provide this in a clear, readable format at no charge for standard requests.

10.2 Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it without undue delay. Please note that changes to identity data may require re-verification via our KYC process.

10.3 Right to Erasure

You may request that baji1 delete your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent and no other legal basis exists, or where the data has been unlawfully processed. This right is subject to our legal retention obligations — we cannot delete data that we are legally required to retain.

10.4 Right to Restrict Processing

You may ask baji1 to restrict the processing of your personal data in certain circumstances — for example, while we are verifying the accuracy of data you have contested, or where processing is unlawful but you prefer restriction to deletion.

10.5 Right to Data Portability

Where processing is based on your consent or on contract performance, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format, and to transmit that data to another controller where technically feasible.

10.6 Right to Object

You have the right to object to processing of your personal data where that processing is based on baji1's legitimate interests. You also have an absolute right to object to processing of your personal data for direct marketing purposes at any time.

10.7 Right to Withdraw Consent

Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal. Withdrawal of consent for marketing communications will be processed within 48 hours of your request.

11. Children's Privacy

The baji1 platform is strictly intended for adults aged 21 years and older. baji1 does not knowingly collect personal data from individuals under the age of 21. If baji1 becomes aware that personal data has been collected from a person under the minimum age, that data will be deleted immediately and the associated account will be closed. If you believe that a minor has created a baji1 account, please report this to [email protected] so that we can take prompt action.

12. Marketing Communications

baji1 may send promotional emails, SMS notifications, or on-platform messages to players who have provided explicit consent to receive marketing communications. These communications may include information about new games, seasonal promotions, bonus offers, cricket betting events (including BPL, IPL, and T20 World Cup), and casino tournaments.

You may opt out of marketing communications at any time by:

• Clicking the "unsubscribe" link included at the bottom of every marketing email
• Contacting support at [email protected] with the subject line "Marketing Opt-Out"
• Adjusting your notification preferences within your baji1 account settings

Opting out of marketing communications will not affect transactional messages — you will continue to receive account-related notifications such as deposit confirmations, withdrawal status updates, password reset emails, and security alerts, as these are necessary for the operation of your account.

13. Cross-Border Data Transfers

Some of baji1's service partners — including game providers such as Evolution Gaming, Pragmatic Play, Spribe, and NetEnt — are based outside Bangladesh and process data on servers located in other countries. Where personal data is transferred internationally in connection with the delivery of baji1 services, baji1 takes reasonable steps to ensure that the receiving party applies security and privacy standards that are consistent with the protections described in this policy. Such measures may include contractual data protection clauses and vendor security assessments.

baji1 does not transfer personal data internationally for purposes unrelated to the delivery of its core service, and does not transfer personal data to parties in jurisdictions that do not provide an adequate level of data protection without implementing appropriate safeguards.

14. Changes to This Privacy Policy

baji1 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or operational requirements. When material changes are made, we will notify registered account holders by email to the address on record and will publish the updated policy on this page with a revised "Last Updated" date. We encourage you to review this page periodically to stay informed about how baji1 protects your data.

Your continued use of the baji1 platform following the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with the changes, you should stop using the platform and contact [email protected] to request account closure.

15. Contact and Complaints

If you have any questions, concerns, or complaints about how baji1 handles your personal data, we encourage you to contact us in the first instance so that we can work to resolve the matter directly:

• Privacy Enquiries Email: [email protected] (mark subject line "Privacy Enquiry")
• Support Hours: 24 hours a day, 7 days a week, including public holidays
• Response Target: Within 2 business hours for urgent data security concerns; within 14 business days for standard privacy requests
• Languages: English and Bengali

baji1 takes all privacy complaints seriously. Upon receipt of a complaint, we will acknowledge it within two business days and provide a substantive response within fourteen business days. Where a complaint is complex, we will keep you informed of progress and provide a final response as promptly as possible.