bajee Privacy Policy

This Privacy Policy ("Policy") is issued by bajee ("we", "us", "our", or "the Company") and applies to all personal data collected, processed, stored, and transmitted in connection with your use of the bajee platform, including the website bajee.lat, any associated mobile application, and any communication channels operated by bajee such as live chat or email support.

This Policy covers:

• Registered players who hold a bajee account;
• Visitors who browse bajee.lat without registering;
• Individuals who contact bajee support via email or live chat;
• Any person who interacts with bajee through any digital channel operated by the Company.

By using bajee in any capacity, you acknowledge that you have read this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you must discontinue use of the bajee platform immediately.

This Policy should be read in conjunction with the bajee Terms & Conditions and the Responsible Gaming Policy, both of which are incorporated herein by reference.

bajee collects personal data through several distinct channels. The categories of data collected, and the circumstances in which they are collected, are set out below.

2.1 Data You Provide Directly

When you register a bajee account, make a deposit, submit a withdrawal request, contact support, or participate in a promotion, you may provide us with the following categories of personal data:

2.2 Data Collected Automatically

When you access bajee.lat, our systems automatically collect certain technical and behavioural data. This data is collected via server logs, cookies, and similar tracking technologies:

• Device Data: Device type, operating system, browser type and version, screen resolution;
• Network Data: IP address, approximate geographic location derived from IP address, internet service provider;
• Usage Data: Pages visited, time spent on each page, navigation paths, search queries, links clicked;
• Session Data: Login timestamps, session duration, logout timestamps;
• Betting & Gaming Data: Bet history, game history, wager amounts, win/loss records, bonus usage history.

2.3 Data From Third Parties

bajee may receive personal data about you from third-party sources in limited circumstances, including:

• Payment processors such as bKash, Nagad, Rocket, and Upay, who may share transaction confirmation data with bajee;
• Identity verification and KYC service providers, who may confirm or supplement identity information you have provided;
• Fraud prevention databases and anti-money-laundering screening services;
• Self-exclusion registers and responsible gaming databases, to verify that you are not subject to an active exclusion.

bajee uses the personal data it collects for the following purposes. We will not use your data for any purpose that is incompatible with the purposes listed below without first obtaining your explicit consent.

3.1 Marketing Communications

bajee will only send you direct marketing communications (promotional emails, bonus alerts, seasonal offers) if you have actively opted in to receive them during registration or via your account settings. You may withdraw your consent to receive marketing communications at any time by updating your notification preferences in your bajee account dashboard or by contacting [email protected]. Withdrawing marketing consent does not affect your ability to use the bajee platform or receive transactional communications (such as deposit confirmations and withdrawal notifications).

bajee processes your personal data on one or more of the following legal bases, depending on the specific processing activity involved:

• Contractual Necessity: Processing is necessary to perform the contract between bajee and the Player — specifically, to operate your account, process transactions, and deliver the bajee service as described in the Terms & Conditions;
• Legal Obligation: Processing is necessary to comply with applicable legal obligations, including anti-money-laundering regulations, KYC requirements, and responsible gaming mandates;
• Legitimate Interests: Processing is necessary for bajee's legitimate business interests, including fraud prevention, platform security, and service improvement, where those interests are not overridden by your data protection rights;
• Consent: Where bajee relies on your consent as the legal basis for processing (for example, for direct marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

bajee does not sell, rent, or trade your personal data to third parties. bajee may share your personal data with third parties only in the following limited circumstances:

5.1 Service Providers

bajee engages trusted third-party service providers to assist in the operation of the bajee platform. These providers process personal data on bajee's behalf and are contractually bound to use that data only for the specific purposes for which it was shared and to maintain appropriate data security standards. Categories of service providers include:

• Payment processing providers (bKash, Nagad, Rocket, Upay, Visa, Mastercard acquiring banks);
• Identity verification and KYC service providers;
• Fraud detection and anti-money-laundering screening providers;
• Cloud hosting and infrastructure providers;
• Customer support platform providers;
• Email and push notification delivery providers;
• Game software providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi) who operate their own platforms within the bajee environment.

5.2 Legal Disclosures

bajee may disclose your personal data to law enforcement agencies, regulatory bodies, courts, or other government authorities where required to do so by applicable law, court order, or regulatory requirement. bajee will, where legally permitted to do so, notify you of such a disclosure request prior to complying with it.

5.3 Business Transfers

In the event that bajee undergoes a merger, acquisition, restructuring, or sale of all or part of its business assets, your personal data may be transferred as part of that transaction. bajee will take reasonable steps to ensure that any acquiring entity is bound by data protection obligations at least equivalent to those set out in this Policy, and will notify you of any such transfer.

bajee uses cookies and similar tracking technologies on bajee.lat to operate the platform, remember your preferences, analyse usage patterns, and detect fraud. A cookie is a small text file placed on your device by a website. Cookies do not contain executable code and cannot access other data stored on your device.

6.1 Types of Cookies Used by bajee

6.2 Managing Cookies

You may control the use of non-essential cookies through your browser settings. Most modern browsers allow you to block, delete, or receive notifications about cookies. Please note that disabling certain cookies may affect the functionality of the bajee platform — for example, disabling functional cookies may mean that your game preferences are not saved between sessions. Essential and security cookies cannot be disabled as they are required for the platform to operate securely.

bajee retains personal data for as long as is necessary to fulfil the purposes for which it was collected, as described in this Policy, and to comply with applicable legal, regulatory, and audit obligations. The following general retention guidelines apply:

• Account Data: Retained for the duration of the active account relationship plus a minimum of five (5) years following account closure, to meet anti-money-laundering record-keeping obligations;
• Transaction Data: Retained for a minimum of seven (7) years following the date of the transaction, in accordance with financial record-keeping requirements;
• KYC & Verification Documents: Retained for a minimum of five (5) years following the completion of the verification process, or longer if required by applicable law;
• Support Communications: Retained for a period of three (3) years following the resolution of the relevant support interaction, for quality assurance and dispute resolution purposes;
• Marketing Consent Records: Retained for the duration of the account relationship and for three (3) years following any withdrawal of consent, to evidence compliance with marketing consent obligations;
• Technical & Usage Data (Logs): Retained for a period of twelve (12) months, after which aggregate anonymised data may be retained indefinitely for platform analytics purposes.

When personal data is no longer required for the purpose for which it was collected and the applicable retention period has expired, bajee will securely delete or anonymise that data using industry-standard data disposal methods.

bajee implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include, but are not limited to:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and bajee.lat is encrypted using 256-bit SSL/TLS technology, ensuring that your personal and financial data cannot be intercepted in transit;
• Data Encryption at Rest: Sensitive personal data stored in bajee's databases — including identity documents, financial data, and password hashes — is encrypted at rest using AES-256 encryption;
• Access Controls: Access to personal data within bajee's systems is restricted on a strict need-to-know basis. All bajee staff with access to personal data undergo background checks and are bound by confidentiality obligations;
• Two-Factor Authentication (2FA): bajee supports and encourages the use of two-factor authentication for player accounts to provide an additional layer of protection against unauthorised access;
• Intrusion Detection: bajee's infrastructure is monitored continuously for signs of unauthorised access, unusual traffic patterns, and potential security incidents;
• Regular Security Audits: bajee conducts regular security assessments, penetration testing, and vulnerability scans of its platform and infrastructure.

Despite these measures, no data transmission over the internet or electronic storage system is 100% secure. In the unlikely event of a personal data breach that poses a risk to your rights and freedoms, bajee will notify affected players without undue delay and will take all reasonable steps to contain and remediate the breach.

bajee respects your rights in relation to the personal data we hold about you. Depending on your jurisdiction, you may have some or all of the following rights:

• Right of Access: You have the right to request a copy of the personal data bajee holds about you. bajee will provide this information within 30 days of receiving a verified request;
• Right to Rectification: You have the right to request the correction of any inaccurate or incomplete personal data bajee holds about you. You may update certain account details directly from your bajee account dashboard;
• Right to Erasure ("Right to Be Forgotten"): You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to any overriding legal retention obligations;
• Right to Restriction of Processing: You may request that bajee restrict the processing of your personal data in certain circumstances, for example where you contest the accuracy of the data or where you have objected to processing;
• Right to Data Portability: You have the right to receive a copy of the personal data you have provided to bajee in a structured, machine-readable format, and to request that this data be transferred directly to another service provider where technically feasible;
• Right to Object: You have the right to object to processing based on bajee's legitimate interests, and to withdraw consent for processing based on consent at any time;
• Right to Non-Discrimination: bajee will not discriminate against you for exercising any of the rights described in this section.

To exercise any of the above rights, please submit a written request to bajee support at [email protected], clearly identifying yourself and the specific right you wish to exercise. bajee will acknowledge your request within 72 hours and aim to respond substantively within 30 calendar days. bajee reserves the right to verify your identity before processing any data rights request.

bajee is operated as an offshore platform and its infrastructure, including servers and data processing systems, may be located in jurisdictions outside Bangladesh. By using the bajee platform, you acknowledge that your personal data may be transferred to, stored in, and processed in countries that may not have data protection laws equivalent to those of your home jurisdiction.

Where bajee transfers personal data internationally, it takes the following steps to ensure that your data remains protected to a standard equivalent to that described in this Policy:

• Entering into data processing agreements with all third-party processors that include binding data protection obligations;
• Using recognised data transfer mechanisms where applicable, including standard contractual clauses or equivalent safeguards;
• Applying the same technical and organisational security measures described in Section 8 of this Policy, regardless of where data is stored or processed.

bajee's payment processing partners (bKash, Nagad, Rocket, Upay) operate primarily within Bangladesh and are subject to the regulatory oversight of the Bangladesh Bank and relevant Bangladeshi financial authorities. Data shared with these partners for transaction processing purposes is subject to those partners' own privacy policies and regulatory obligations in addition to this bajee Privacy Policy.

The bajee platform is strictly for adults aged 21 and above. bajee does not knowingly collect personal data from individuals under the age of 21. If bajee becomes aware that it has inadvertently collected personal data from a person under 21, it will delete that data immediately and close the associated account.

bajee is strongly committed to preventing underage gambling and actively participates in industry-wide responsible gaming initiatives. Our age verification procedures are designed to catch attempts by minors to register and to flag accounts where age verification documents are inconsistent with the registered date of birth.

The bajee platform may contain references to third-party game providers and payment processors whose own privacy policies apply to data collected through their interfaces. bajee is not responsible for the privacy practices of third-party game providers or payment processors operating within the bajee environment. We recommend that you review the privacy policies of any third-party service you interact with through the bajee platform.

bajee does not include outbound links to external websites for commercial or advertising purposes. Any third-party content embedded within the bajee platform (such as game interfaces supplied by Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Ezugi) is subject to those providers' own data collection practices within the scope of their games. bajee requires all game providers operating on its platform to maintain data protection standards consistent with this Policy as a condition of their integration agreement.

bajee reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the structure of the bajee platform. When we make material changes to this Policy, we will notify registered players by email and by posting a prominent notice on bajee.lat. The "Last Updated" date at the top of this document will always reflect the date of the most recent revision.

Your continued use of the bajee platform following the effective date of any revised Privacy Policy constitutes your acceptance of the updated Policy. If you do not agree to the revised Policy, you must cease using the bajee platform and may close your account by contacting support. We encourage you to review this Policy periodically to stay informed about how bajee protects your personal data.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data bajee holds about you, please contact the bajee data support team using the details below. All contact information is provided as plain text only; please copy the email address manually rather than clicking a link.

• Email: [email protected]
• Subject Line (for data requests): "Privacy Request — [Your Username]"
• Response Time: Acknowledgement within 72 hours; full response within 30 calendar days
• Support Hours: 24 hours a day, 7 days a week, 365 days a year
• Language: English
• Timezone: Bangladesh Standard Time (BST, UTC+6)