bjbaj Privacy Policy

1 About This Policy

This Privacy Policy ("Policy") is published by bjbaj Entertainment Ltd. ("bjbaj", "we", "us", "our") and describes how we collect, process, store, share, and protect the personal data of individuals ("you", "Player", "User") who visit or register on the bjbaj platform at https://bjbaj.io.

bjbaj is committed to handling personal data responsibly and in accordance with applicable data protection principles. This Policy applies to all personal data collected through the bjbaj website, mobile-optimised interface, customer support communications, and any other interaction you have with bjbaj as an organisation.

This Policy should be read alongside the bjbaj Terms & Conditions. Terms not defined here carry the meanings given to them in the Terms & Conditions.

2 Data We Collect

bjbaj collects personal data from you directly when you register, interact with the platform, contact support, or use our products, as well as automatically through technical systems when you browse the site. The categories of data we collect are set out below.

2.1 Registration Data

When you create a bjbaj account, we collect:

• Full legal name
• Date of birth (to verify you are 21 years of age or older)
• Username and hashed password
• Email address and/or mobile phone number
• Residential address (city and district within Bangladesh)
• Preferred currency (BDT)

2.2 Identity Verification (KYC) Data

Before processing any withdrawal, bjbaj is required to verify your identity. As part of this process we may collect:

• National Identification (NID) card number and a copy of the document
• Passport or other government-issued photo ID
• Selfie or live photograph for biometric comparison purposes
• Proof of payment method ownership (e.g., screenshot of bKash or Nagad account registration)

2.3 Financial Transaction Data

For every deposit and withdrawal processed through the bjbaj platform, we record:

• Transaction amount in BDT (৳)
• Payment method used (bKash, Nagad, Rocket, Upay, Visa, Mastercard)
• Mobile wallet reference numbers or card last-four digits (we do not store full card numbers)
• Transaction date, time (Bangladesh Standard Time, UTC+6), and status

2.4 Gameplay & Betting Data

We maintain records of your activity on the platform including:

• Wagers placed, games played, and sports markets accessed
• Bet amounts, outcomes, and winnings
• Bonus activations and wagering progress
• Session duration and game preferences

2.5 Technical & Device Data

When you access bjbaj we automatically collect certain technical data, including:

• IP address and approximate geographic location (country/city level)
• Browser type and version
• Device type, operating system, and screen resolution
• Pages visited, time on page, and navigation path
• Referral source (if you arrived via a link)

2.6 Communications Data

If you contact bjbaj customer support via email or live chat, we retain records of the correspondence including your name, contact details, the content of the communication, and the outcome of any support request.

3 How We Use Your Data

bjbaj uses the personal data we collect exclusively for the following purposes:

Where bjbaj wishes to use your data for any purpose not listed above, we will seek your explicit consent before doing so.

4 Legal Basis for Processing

bjbaj relies on the following legal bases to process your personal data:

• Contract performance: Processing necessary to deliver the services you have signed up for, including account management, payment processing, and game delivery.
• Legal obligation: Processing required to comply with applicable anti-money laundering regulations, age verification requirements, and any lawful requests from regulatory or law enforcement authorities.
• Legitimate interests: Processing necessary to protect the security and integrity of the platform, prevent fraud, improve our services, and conduct internal analytics — provided these interests are not overridden by your privacy rights.
• Consent: Where we send you optional marketing communications or use non-essential cookies, we rely on your freely given, informed consent. You may withdraw this consent at any time by contacting [email protected].

5 Data Sharing

5.1 Service Providers

bjbaj engages trusted third-party service providers who process personal data on our behalf under strictly defined data processing agreements. These include payment processors (bKash, Nagad, Rocket, Upay, Visa, Mastercard), KYC and identity verification providers, game software providers (such as Evolution Gaming, Pragmatic Play, and JILI), and cloud infrastructure and security vendors. Each provider is permitted to use your data only for the specific service they deliver to bjbaj and is contractually prohibited from using it for their own commercial purposes.

5.2 Legal & Regulatory Disclosure

bjbaj may disclose personal data to competent regulatory authorities, law enforcement agencies, or courts where we are legally required to do so, or where such disclosure is necessary to protect the rights, property, or safety of bjbaj, its players, or the public. We will notify you of any such disclosure where permitted by law.

5.3 No Sale of Personal Data

bjbaj does not and will not sell, rent, lease, or otherwise trade your personal data to any third party for commercial or marketing purposes. This prohibition applies unconditionally and regardless of the commercial value of the data involved.

5.4 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of bjbaj Entertainment Ltd.'s business, personal data held about registered players may be transferred to the acquiring entity as part of the transaction. In such circumstances, bjbaj will provide advance notice and ensure the receiving entity is bound by privacy obligations at least as protective as those in this Policy.

6 Cookies & Tracking Technologies

6.1 What Are Cookies

Cookies are small text files placed on your device when you visit a website. bjbaj uses cookies and similar tracking technologies (such as local storage objects and session tokens) to operate the platform, remember your preferences, and gather anonymous analytics about how players use the site.

6.2 Types of Cookies We Use

• Strictly necessary cookies: Required for the platform to function. These include session authentication tokens and security cookies. They cannot be disabled without breaking core site functionality.
• Functional cookies: Remember your language preference, display settings, and last-visited game category to provide a more personalised experience.
• Analytics cookies: Collect anonymised data about page visits, session duration, and navigation paths to help us understand how players interact with bjbaj and to prioritise platform improvements.
• Security cookies: Help detect and prevent fraudulent login attempts, bot traffic, and other abuse of the platform.

6.3 Cookie Management

You may manage or delete cookies through your browser settings at any time. Please note that disabling strictly necessary cookies will impair your ability to use the bjbaj platform. Disabling functional or analytics cookies will not affect core platform functionality but may reduce the quality of your experience.

7 Data Security

bjbaj employs a layered approach to data security designed to protect your personal information against unauthorised access, disclosure, alteration, or destruction. Our security measures include:

• 256-bit SSL/TLS encryption on all data transmitted between your browser and bjbaj's servers.
• Encrypted storage of sensitive fields including passwords (hashed with a modern algorithm), KYC document images, and financial identifiers.
• Role-based access controls that restrict employee access to personal data strictly to those with a legitimate operational need.
• Regular security assessments including vulnerability scanning and infrastructure hardening reviews.
• Fraud detection systems that monitor for unusual login patterns, suspicious transaction activity, and other indicators of account compromise.

While bjbaj takes all reasonable precautions to protect your data, no internet-based platform can guarantee absolute security. If you have reason to believe your bjbaj account has been compromised, contact us immediately at [email protected].

8 Data Retention

bjbaj retains personal data for as long as is necessary to fulfil the purposes described in this Policy, subject to the following principles:

• Active accounts: Personal data is retained for the full duration of your account relationship with bjbaj and for a minimum period of five (5) years following account closure, to satisfy legal, regulatory, and audit obligations.
• KYC documents: Identity and verification documents are retained for a minimum of five (5) years from the date of collection, in line with anti-money laundering record-keeping requirements.
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction.
• Customer support communications: Retained for three (3) years from the date of last contact, or longer if the communication relates to an unresolved dispute or legal matter.
• Technical and device data: Anonymised and aggregated after thirteen (13) months, following which individual-level identifiers are deleted.

When data is no longer required, it is securely deleted or irreversibly anonymised so that it can no longer be associated with any individual.

9 Your Rights

As a registered player on the bjbaj platform, you hold the following rights in relation to your personal data. To exercise any of these rights, contact us at [email protected] with the subject line "Data Rights Request". We will respond within thirty (30) days.

10 Children & Minors

The bjbaj platform is strictly for adults aged 21 and above. We do not knowingly collect personal data from individuals under the age of 21. If you are a parent or guardian and believe that a minor has registered an account with bjbaj without your knowledge, please contact us immediately at [email protected]. Upon verification, we will close the account, delete all associated personal data, and reverse any financial transactions to the extent possible.

bjbaj employs age-gate mechanisms at registration and conducts age verification as part of the KYC process. Any account found to have been registered by a person under 21 years of age will be closed immediately, and all funds — including any claimed bonus amounts — will be forfeited in accordance with the bjbaj Terms & Conditions.

11 Third-Party Links

The bjbaj platform may from time to time display informational references to third-party services such as payment providers (bKash, Nagad, Rocket) or game studios (Evolution Gaming, Pragmatic Play, JILI). Where the bjbaj platform links to or integrates content from third-party providers, please be aware that those third parties operate their own privacy policies independently of bjbaj.

bjbaj is not responsible for the privacy practices, security standards, or data handling procedures of any third-party organisation. We encourage you to review the privacy policies of any third-party services you use in connection with your bjbaj account, particularly your chosen mobile wallet or banking provider.

12 Policy Updates

bjbaj reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, service offerings, or applicable legal requirements. Where updates are material, we will notify registered players via email or on-platform notification at least seven (7) days before the changes take effect.

The Effective Date displayed at the top of this document reflects the date on which the current version came into force. We recommend reviewing this Policy periodically. The most current version is always accessible at https://bjbaj.io/privacy-policy. Continued use of the bjbaj platform after a Policy update constitutes your acceptance of the revised terms.

13 Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a concern about how bjbaj has handled your personal information, please contact our data support team:

Email: [email protected]

Please use the subject line "Privacy Enquiry" or "Data Rights Request" so we can direct your message to the appropriate team member. We will acknowledge your contact within forty-eight (48) hours and provide a substantive response within thirty (30) calendar days.

If you are not satisfied with our response to a privacy complaint, you have the right to escalate the matter to the relevant data protection or consumer protection authority in your jurisdiction.