bd baj Privacy Policy — Your Data, Protected

01 Overview

bd baj is committed to protecting the privacy of every player on the platform. We collect only the data we genuinely need to operate the platform, process payments, verify identities, and comply with legal obligations. We do not collect data for the sake of it, and we do not sell your personal information to advertisers or data brokers.

This Policy applies to all personal data collected through the bd baj website at bd-baj.vip, the bd baj mobile application, customer support communications, and any other interaction you have with bd baj as a registered or prospective player.

02 Data We Collect

bd baj collects personal data in several ways — directly from you when you register or interact with the platform, automatically through your use of the platform, and from third-party service providers where necessary. Here is a breakdown of the categories of data we collect:

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health information, except where directly relevant to responsible gaming assessments and only with your explicit consent.

03 How We Use Your Data

bd baj uses your personal data for specific, legitimate purposes. We do not use your data in ways that are incompatible with the purposes for which it was collected. The primary purposes for which we use your data are:

• Account Management: To create, maintain, and manage your bd baj account, including processing your registration and verifying your identity.
• Payment Processing: To process deposits and withdrawals via bKash and Nagad, and to maintain accurate financial records for your account.
• Identity Verification (KYC): To verify your identity and age in compliance with our legal obligations and to prevent fraud and money laundering.
• Platform Operation: To deliver the gaming services you use, including recording game outcomes, calculating winnings, and applying bonuses.
• Customer Support: To respond to your queries, resolve disputes, and provide assistance when you contact our support team.
• Security & Fraud Prevention: To detect, investigate, and prevent fraudulent activity, unauthorized account access, and other security threats.
• Responsible Gaming: To monitor gaming patterns and identify players who may be at risk of problem gambling, and to enforce responsible gaming tools you have activated.
• Legal Compliance: To comply with applicable laws, regulations, and requests from regulatory or law enforcement authorities.
• Platform Improvement: To analyze how players use bd baj and identify areas for improvement in the platform's performance, design, and game selection.
• Communications: To send you account-related notifications, security alerts, and — where you have opted in — promotional communications about bd baj offers and new games.

04 Legal Basis for Processing

bd baj processes your personal data on the following legal grounds:

• Contractual Necessity: Processing required to fulfill our obligations under the Terms and Conditions you agreed to when registering — including account management, payment processing, and delivering gaming services.
• Legal Obligation: Processing required to comply with applicable laws, including anti-money laundering regulations, age verification requirements, and responses to lawful requests from authorities.
• Legitimate Interests: Processing carried out for bd baj's legitimate business interests, such as fraud prevention, platform security, and improving our services — provided these interests are not overridden by your rights.
• Consent: Processing based on your explicit consent, such as receiving promotional emails or SMS notifications. You may withdraw consent at any time by updating your account preferences or contacting support.

05 Data Sharing

bd baj does not sell, rent, or trade your personal data to any third party for marketing or commercial purposes. We share your data only in the following limited circumstances:

• Payment Providers: We share necessary financial data with bKash and Nagad to process your deposits and withdrawals. These providers are bound by their own privacy policies and data protection obligations.
• Identity Verification Services: We may share identity documents with third-party KYC providers to verify your age and identity. These providers process data solely for verification purposes and are contractually prohibited from using it for any other purpose.
• Game Software Providers: Game providers may receive anonymized or pseudonymized gameplay data to ensure game integrity and resolve technical disputes. They do not receive your personally identifiable information.
• Legal & Regulatory Authorities: We may disclose your data to law enforcement agencies, regulatory bodies, or courts where required by law or in response to a valid legal request.
• Fraud Prevention Services: We may share data with fraud detection and prevention services to protect the platform and its players from financial crime.
• Business Transfers: In the event of a merger, acquisition, or sale of bd baj's business assets, your data may be transferred to the acquiring entity. You will be notified of any such transfer and your rights will be preserved.

06 Cookies & Tracking Technologies

bd baj uses cookies and similar tracking technologies to operate the platform, remember your preferences, and analyze how players use our services. A cookie is a small text file stored on your device when you visit a website.

We use the following types of cookies on bd baj:

• Essential Cookies: Required for the platform to function. These include session cookies that keep you logged in and security cookies that protect against cross-site request forgery. These cannot be disabled.
• Functional Cookies: Remember your preferences such as language settings, responsible gaming limits, and display options. Disabling these may affect your experience.
• Analytics Cookies: Help us understand how players navigate the platform — which pages are visited most, where players drop off, and how long sessions last. This data is aggregated and anonymized.
• Security Cookies: Used to detect and prevent fraudulent activity, including identifying unusual login patterns or suspicious device behavior.

You can manage cookie preferences through your browser settings. Note that disabling essential cookies will prevent you from using the bd baj platform. For more information on managing cookies, refer to your browser's help documentation.

07 Data Retention

bd baj retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by law. The following retention periods apply:

• Account Data: Retained for the duration of your account and for 5 years following account closure, in compliance with anti-money laundering regulations.
• Financial Transaction Records: Retained for a minimum of 5 years from the date of the transaction, as required by financial regulations.
• KYC Documents: Retained for 5 years following account closure or the completion of the last transaction, whichever is later.
• Gaming History: Retained for 3 years from the date of each gaming session, then anonymized or deleted.
• Customer Support Records: Retained for 2 years from the date of the last interaction, unless the matter relates to an ongoing dispute or legal proceeding.
• Technical & Log Data: Retained for 12 months, then automatically deleted or anonymized.

When data is no longer required, bd baj securely deletes or anonymizes it so that it can no longer be linked to you as an individual.

08 Data Security

bd baj implements robust technical and organizational measures to protect your personal data against unauthorized access, loss, alteration, or disclosure. Our security infrastructure includes:

• 256-bit SSL Encryption: All data transmitted between your device and bd baj servers is encrypted using industry-standard SSL/TLS technology.
• Encrypted Data Storage: Sensitive data including payment information and identity documents is stored in encrypted form on secure servers.
• Access Controls: Access to personal data within bd baj is restricted to staff who need it to perform their job functions. All staff with data access are subject to confidentiality obligations.
• Two-Factor Authentication: bd baj supports two-factor authentication for player accounts to reduce the risk of unauthorized access.
• Regular Security Audits: Our platform undergoes regular security assessments and penetration testing to identify and address vulnerabilities.
• Incident Response: In the event of a data breach that poses a risk to your rights, bd baj will notify affected players and relevant authorities within the timeframes required by applicable law.

09 Your Rights

As a bd baj player, you have the following rights regarding your personal data. To exercise any of these rights, contact our support team at [email protected]. We will respond within 30 days of receiving your request.

• Right of Access: You have the right to request a copy of the personal data bd baj holds about you, along with information about how it is being used.
• Right to Rectification: If any of your personal data is inaccurate or incomplete, you have the right to request that it be corrected. You can update most account information directly through your account settings.
• Right to Erasure: You have the right to request deletion of your personal data in certain circumstances — for example, if the data is no longer necessary for the purpose it was collected. Note that we may be required to retain certain data for legal compliance reasons.
• Right to Restrict Processing: You have the right to request that we limit how we use your data in certain circumstances, such as while a dispute about its accuracy is being resolved.
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transfer it to another service provider where technically feasible.
• Right to Object: You have the right to object to processing based on legitimate interests, including profiling. You also have the right to opt out of direct marketing communications at any time.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

10 Minors

bd baj is strictly an 18+ platform. We do not knowingly collect personal data from individuals under the age of 18. If you are under 18, you must not register an account or use any bd baj services.

If bd baj becomes aware that personal data has been collected from a person under 18, we will immediately delete that data and close the associated account. If you believe a minor has registered on bd baj, please contact us at [email protected] so we can investigate and take appropriate action.

Parents and guardians are encouraged to use parental control tools to prevent minors from accessing online gaming platforms. For more information on our age verification process, visit our Responsible Gaming page.

11 Changes to This Policy

bd baj may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or platform features. When we make changes, the "Last Updated" date at the top of this page will be revised accordingly.

For significant changes that materially affect how we use your personal data, bd baj will notify registered players via email or an in-platform notification at least 14 days before the changes take effect. Your continued use of bd baj after the effective date of any changes constitutes your acceptance of the updated Policy.

We recommend reviewing this Policy periodically. The most current version is always available at bd-baj.vip/privacy-policy.

12 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or how bd baj handles your personal data, please get in touch with us through any of the following channels:

• Email: [email protected] — use subject line "Privacy Query" for fastest routing.
• Live Chat: Available 24/7 on every page of the bd baj platform. Average response time under 3 minutes.
• FAQ: Visit our FAQ page for answers to common privacy and account questions.

For data rights requests specifically — such as access, deletion, or portability — email us with the subject line "Data Rights Request" and include your registered mobile number so we can verify your identity before processing.