bdbajj Privacy Policy

bdbajj is Bangladesh's premier online gaming and sports betting platform, providing cricket betting, live casino, slot games, fishing games, and sports wagering to adult players across Bangladesh. To deliver these services, bdbajj must collect and process certain personal data from its registered users.

We take privacy seriously. This Policy is designed to be transparent — not to bury important information in dense legal text, but to give you a clear and honest account of our data practices. If at any point something is unclear, please contact our support team at [email protected].

This Policy applies to all personal data collected through the bdbajj website, mobile-browser platform, customer support channels, and any other service operated under the bdbajj brand. It does not apply to third-party websites or services that may be referenced within the platform.

bdbajj collects personal data in several ways: directly from you when you register or use the platform, automatically as you interact with the website, and from third-party verification and payment providers. The categories of data we collect include:

We do not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health data unless specifically required for responsible gaming compliance (for example, self-exclusion requests). Where such data is collected for that purpose, it is handled with heightened care and stored separately.

bdbajj uses the personal data it collects for the following purposes. We only process your data where we have a valid legal basis for doing so, as described in Section 4 of this Policy.

• Account creation and management: To register your account, verify your identity, maintain your account settings, and manage your ongoing relationship with bdbajj.
• Service delivery: To process bets, settle winnings, credit bonuses, facilitate deposits and withdrawals, and provide access to all platform features.
• Identity and age verification: To confirm that you meet the 18+ age requirement and that the identity details you have provided are accurate, in compliance with our responsible gaming obligations.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, money laundering, bonus abuse, and other prohibited activities that could harm players or the integrity of the platform.
• Customer support: To respond to your enquiries, resolve disputes, process complaints, and provide technical assistance.
• Legal and regulatory compliance: To meet our obligations under applicable anti-money laundering (AML), know-your-customer (KYC), and data protection requirements.
• Platform improvement: To analyse aggregate usage data, identify technical issues, and continuously improve the performance, design, and game offering of bdbajj.
• Marketing communications: To send you promotional offers, bonus notifications, and news about new games — but only where you have opted in to receive such communications. You may opt out at any time.
• Responsible gaming: To monitor betting patterns that may indicate problem gambling and to administer self-exclusion, deposit limit, and time-out requests in accordance with our Responsible Gaming policy.

bdbajj does not use your personal data to make fully automated decisions that produce significant legal effects on you without human review. Where automated processing is used (for example, to flag unusual betting activity), a member of our compliance team reviews the outcome before any account action is taken.

Every instance of data processing at bdbajj is grounded in at least one of the following legal bases:

• Contractual necessity: Processing required to deliver the services you have signed up for — including account management, bet processing, and payment handling. Without this processing, bdbajj cannot provide its services to you.
• Legal obligation: Processing required to comply with applicable laws, including anti-money laundering regulations, know-your-customer requirements, and record-keeping obligations.
• Legitimate interests: Processing carried out for bdbajj's legitimate business interests, such as fraud prevention, platform security, and service improvement, where those interests are not overridden by your privacy rights.
• Consent: Processing for purposes where we have obtained your explicit prior consent, such as sending marketing emails or promotional SMS messages. You have the right to withdraw consent at any time without affecting the lawfulness of prior processing.

Where consent is the legal basis for any specific processing activity, we will record when and how that consent was given and will make it straightforward for you to withdraw it at any time via your account settings or by contacting support.

bdbajj does not sell your personal data to third parties. However, we do share data with a limited set of trusted partners and service providers who assist us in operating the platform. All third-party recipients are bound by strict data protection obligations and may only use your data for the specific purpose for which it was shared.

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, and Sonali Bank receive transactional data necessary to process your deposits and withdrawals. These providers operate under their own privacy frameworks and regulatory obligations.
• Identity verification providers: Third-party KYC and age verification services receive identity document data and personal details for the purpose of verifying your eligibility to use the platform.
• Game content providers: Studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive session tokens and anonymised player identifiers necessary to deliver their games. They do not receive your full personal profile.
• Analytics and technology providers: Aggregated, anonymised usage data may be shared with technology partners who help us maintain platform infrastructure and analyse performance. No personally identifiable information is included in these data sets.
• Law enforcement and regulatory authorities: bdbajj will disclose personal data to law enforcement agencies, financial intelligence units, or regulatory bodies where required to do so by applicable law, court order, or legitimate legal process.

Beyond the categories listed above, bdbajj will not share your personal data with any other third party without first obtaining your explicit consent, except where disclosure is necessary to protect the rights, property, or safety of bdbajj, its players, or the public.

bdbajj takes the security of payment-related data with the highest degree of seriousness. The following specific measures apply to financial data processed through the platform:

• bdbajj does not store full mobile banking PINs, full card numbers, or complete bank account credentials on its own servers.
• Payment transactions are routed through the secure infrastructure of the relevant payment provider (bKash, Nagad, Rocket, Upay, or the relevant bank). bdbajj receives only a transaction reference, amount, and status confirmation.
• All payment data transmitted between your device and the bdbajj platform is encrypted using 256-bit SSL/TLS protocols.
• Internal access to transactional records is restricted to authorised finance and compliance staff on a strictly need-to-know basis, with full audit logging of all access events.
• In the event of a suspected payment fraud or unauthorised transaction, bdbajj will suspend the affected account and initiate an investigation within 24 hours of the incident being reported.

bdbajj uses cookies and similar technologies (including local storage and session tokens) to ensure the platform functions correctly and to improve your experience. The types of cookies used on the bdbajj platform are as follows:

• Strictly necessary cookies: These cookies are essential for the platform to operate. They maintain your logged-in session, remember your language preference, and handle security tokens. The platform cannot function without them and they cannot be disabled.
• Performance and analytics cookies: These cookies collect anonymised information about how players use the platform — which pages are visited most, how long sessions last, and where errors occur. This data is used solely to improve the platform. No personally identifiable information is contained in these cookies.
• Functional cookies: These cookies remember your preferences, such as game display settings, notification preferences, and previously entered (non-sensitive) form data, to provide a more personalised experience.
• Third-party game provider cookies: Game studios integrated into the bdbajj platform may set their own session cookies to deliver game content correctly. These cookies are governed by the respective studio's privacy policy and expire at the end of your gaming session.

bdbajj does not use advertising or retargeting cookies to build behavioural profiles for external ad networks. You may manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies may prevent you from accessing certain features of the platform.

bdbajj retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply:

• Active account data: Retained for the duration of your active relationship with bdbajj. Your data remains on file while your account is open and in good standing.
• Transaction and betting records: Retained for a minimum of five (5) years from the date of each transaction, in accordance with anti-money laundering record-keeping requirements.
• Identity verification documents: Retained for a minimum of five (5) years following account closure or the last verified transaction, whichever is later.
• Customer support records: Live chat transcripts and email correspondence are retained for a maximum of two (2) years from the date of the interaction.
• Closed accounts: Following account closure, bdbajj retains a limited set of records (identity, transaction history, and compliance notes) for the minimum period required by law. Non-essential data is deleted or anonymised within ninety (90) days of closure.
• Self-excluded accounts: Where a Player has applied for self-exclusion, bdbajj retains sufficient identifying data to enforce the exclusion and prevent re-registration. This data is held for the duration of the self-exclusion period and for five (5) years thereafter.

When personal data is no longer required, it is securely deleted or irreversibly anonymised in accordance with bdbajj's internal data disposal procedures.

bdbajj implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. Key security measures in place include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the bdbajj platform.
• Encrypted storage of passwords using industry-standard one-way hashing algorithms. Plain-text passwords are never stored.
• Role-based access controls ensuring that staff members can only access the personal data necessary for their specific job function.
• Comprehensive audit logs recording all internal access to personally identifiable records, reviewed regularly by the compliance team.
• Regular security assessments and vulnerability testing of the platform infrastructure.
• Two-factor authentication available to all registered players as an optional additional layer of account security.
• Automated detection systems that flag unusual login activity, such as sign-ins from new devices or unrecognised geographic locations, with immediate email alerts sent to the registered account holder.

Despite these measures, no online platform can guarantee absolute security against all possible threats. In the event of a data breach that is likely to result in a risk to your rights or freedoms, bdbajj will notify affected players promptly and take all reasonable steps to contain and remediate the incident.

As a user of bdbajj, you hold meaningful rights over your personal data. bdbajj is committed to honouring these rights promptly and without unnecessary obstacles. You may exercise any of the following rights by contacting [email protected]:

• Right of access: You may request a copy of the personal data bdbajj holds about you at any time. We will provide this within thirty (30) days of receiving a valid request.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you may request that it be corrected. Corrections to identity data may require re-submission of verification documents.
• Right to erasure: You may request that bdbajj delete your personal data where it is no longer necessary for the purpose it was collected, or where you withdraw consent and no other legal basis for retention exists. Note that certain data may be retained to comply with legal obligations even after an erasure request.
• Right to restriction: You may request that bdbajj restrict the processing of your data in certain circumstances — for example, while you contest the accuracy of the data we hold.
• Right to data portability: You may request a copy of your personal data in a structured, commonly used, machine-readable format where technically feasible and where processing is based on consent or contract.
• Right to object: You may object to the processing of your personal data where bdbajj relies on legitimate interests as its legal basis. bdbajj will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where bdbajj processes your data based on your consent (such as for marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

All data rights requests will be acknowledged within 48 hours and responded to in full within 30 days. Where a request is complex or involves a large volume of data, bdbajj may extend this period by a further 60 days, with prior notification to the requesting player.

bdbajj is strictly an adults-only platform. The platform is not directed at, and does not knowingly collect personal data from, any person under the age of 18. Age verification checks are conducted as part of the registration process, and bdbajj reserves the right to request additional proof of age at any time.

If bdbajj becomes aware that personal data has been collected from a person under the age of 18, that account will be immediately suspended, all funds held in the account will be reviewed in line with our Terms & Conditions, and the data will be deleted as soon as practicable. If you believe that a minor has registered on bdbajj, please contact [email protected] immediately.

The bdbajj platform may contain references to third-party services, including payment provider platforms and game studio portals. bdbajj is not responsible for the privacy practices of any third-party website or service, and this Privacy Policy does not extend to any external site that you may access from the bdbajj platform.

When you interact with a third-party payment provider such as bKash or Nagad, your data is subject to that provider's own privacy policy and terms of service. bdbajj encourages you to review the privacy policies of any third-party services you use in connection with your bdbajj account.

bdbajj reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform functionality. When material changes are made, we will notify registered players via email and by posting a prominent notice on the bdbajj platform. The date of the most recent revision is always displayed at the top of this page.

Your continued use of bdbajj following notification of any changes to this Policy constitutes your acceptance of the revised terms. If you do not agree with any changes, you must stop using the platform and may request account closure by contacting [email protected].

If you have any questions, concerns, or requests relating to this Privacy Policy or the way bdbajj handles your personal data, please reach out to our support team using the contact details below. All data-related correspondence must be submitted in English.

This Privacy Policy was last reviewed and updated on 1 January 2026. bdbajj thanks you for taking the time to understand how we protect your data. Your trust is important to us, and we are committed to handling your personal information with care, transparency, and integrity.