Privacy Policy — How bajiap Collects, Uses, and Protects Your Personal Data

bajiap ("we", "us", "our", or "the Platform") is committed to protecting the privacy and personal data of every individual who interacts with our services. This Privacy Policy sets out, in clear and transparent terms, what personal information we collect from players and visitors, the purposes for which that information is used, how it is stored and protected, and the rights available to you as a data subject.

bajiap operates as Bangladesh's premier online betting and casino platform, providing cricket betting, live casino games, slots, and a range of other entertainment products to players aged 18 and above across Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, Cox's Bazar, and throughout Bangladesh. Given the nature of our services, the responsible and lawful handling of personal data is not merely a legal obligation — it is a core value that underpins the trust our players place in us.

This Privacy Policy applies to all personal data collected through the bajiap website at bajiap.net, through our mobile-optimised platform, through communications sent to or received from our customer support team, and through any other channel by which you interact with bajiap. It does not apply to third-party websites or services that may be linked to or from our platform.

If you have questions about this policy or about how bajiap handles your personal data, please contact our support team at [email protected]. Our support team is available 24 hours a day, 7 days a week, Bangladesh Standard Time (UTC+6).

bajiap collects personal data that is necessary and proportionate to the delivery of our services and to our compliance obligations. The categories of personal data we collect include the following:

bajiap does not collect sensitive personal data categories such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, biometric data, or health data beyond the minimum age-related verification data required for responsible gaming compliance.

bajiap collects personal data through the following primary channels:

1. Direct Registration: When you create a bajiap account, you provide identity and contact information directly. This includes your name, mobile number, date of birth, and preferred payment method details. Mobile OTP verification is performed at this stage to confirm your contact number and establish the authenticity of your account.
2. Deposits and Withdrawals: Each time you make a financial transaction via bKash, Nagad, Rocket, Upay, Visa, Mastercard, or a Bangladeshi bank transfer, transaction metadata is captured by our payment processing systems. We do not store full payment credentials — only the reference identifiers and amounts necessary for transaction reconciliation.
3. Platform Usage: As you browse and interact with the bajiap platform, our systems automatically collect technical and usage data including your IP address, device identifiers, browser characteristics, and in-session behaviour. This data is collected through server logs, analytics tools, and session-tracking technologies.
4. Identity Verification (KYC): For withdrawal requests above specified thresholds, or at bajiap's reasonable discretion, we may request copies of government-issued identity documents (e.g., National ID card or passport) and proof of payment method ownership. These documents are processed through secure channels and are used solely for verification purposes.
5. Customer Support Interactions: Any communication you initiate with the bajiap support team — whether via live chat or email — is recorded and stored as part of your account history. These records support service continuity, quality monitoring, and dispute resolution.
6. Cookies and Tracking Technologies: bajiap uses cookies and similar tracking tools to collect technical and usage data during your browsing sessions. For full details, see Section 8 (Cookies & Tracking) of this policy.

bajiap processes your personal data only for lawful, specified, and legitimate purposes. The primary purposes for which we use your data are as follows:

1. Account Administration: To create, maintain, and manage your bajiap player account, including processing your registration, verifying your identity, and ensuring the accuracy of your profile information.
2. Service Delivery: To process deposits and withdrawals via your chosen payment methods (bKash, Nagad, Rocket, Upay, bank transfer, or card), to credit and debit your account balance accurately, and to settle bets and distribute winnings.
3. Responsible Gaming Compliance: To monitor your gaming activity for signs of problematic behaviour, to enforce deposit limits and self-exclusion requests, and to fulfil our obligations under responsible gaming best practices. This includes the use of transaction and behaviour data to identify at-risk players proactively.
4. Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, money laundering, account takeover, bonus abuse, and other prohibited conduct. Technical data such as IP addresses and device fingerprints play a key role in this function.
5. Legal and Regulatory Compliance: To comply with applicable legal obligations, including responding to lawful requests from competent authorities, maintaining required records of financial transactions, and fulfilling our anti-money laundering (AML) and know-your-customer (KYC) obligations.
6. Customer Support: To respond to your queries, resolve disputes, process complaints, and maintain a record of all support interactions for quality assurance purposes.
7. Platform Improvement and Analytics: To analyse aggregate and anonymised usage patterns for the purpose of improving the bajiap platform, enhancing the user experience, and developing new features. Where analytics data is used for these purposes, it is processed in aggregated or pseudonymised form wherever possible.
8. Marketing Communications: To send you promotional communications about bajiap offers, bonuses, and seasonal promotions — but only where you have provided consent or where such communication is permitted under applicable law. You may opt out of marketing communications at any time by contacting [email protected].

bajiap does not sell, rent, or trade your personal data to any third party for marketing or commercial purposes. Your data is shared only in the following strictly limited circumstances:

1. Payment Service Providers: To process deposits and withdrawals, bajiap shares the minimum necessary financial transaction data with our payment partners, including bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, BRAC Bank, and City Bank. These providers are contractually bound to process your data only for the purpose of completing the specific transaction requested.
2. Identity Verification Partners: Where KYC verification is required, bajiap may use trusted third-party identity verification services to validate the documents you provide. These partners process identity data under strict data processing agreements and are prohibited from using it for any other purpose.
3. Technology and Hosting Providers: bajiap's platform infrastructure relies on secure third-party hosting and technology providers. These providers may process technical data on our behalf as part of their service delivery. All such providers are subject to data processing agreements that restrict their use of your data to the provision of the contracted services.
4. Game Content Providers: When you play games provided by third-party studios — including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi — the minimum data necessary to operate the game session (such as session tokens and bet values) may be shared with those providers. These providers operate their own privacy frameworks in accordance with their licensing obligations.
5. Legal and Regulatory Disclosures: bajiap may disclose personal data to law enforcement agencies, courts, or other competent authorities where required by law, where necessary to protect the safety of users or the public, or where compelled by a valid legal order. We will seek to notify you of any such disclosure where legally permitted to do so.
6. Business Transfers: In the event of a merger, acquisition, restructuring, or sale of all or part of bajiap's business, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and of any material change to how your data is handled as a result.

The security of your personal and financial data is a primary operational priority at bajiap. We implement a comprehensive, multi-layered security framework to safeguard your information against unauthorised access, loss, alteration, or disclosure.

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the bajiap platform is encrypted using 256-bit Transport Layer Security (TLS), the same standard employed by leading Bangladeshi financial institutions including Dutch-Bangla Bank and BRAC Bank.
• Encrypted Data Storage: Sensitive personal data stored in bajiap's systems — including identity documents, payment identifiers, and account credentials — is encrypted at rest using industry-standard encryption algorithms.
• Access Controls: Access to personal data within bajiap's internal systems is strictly limited to authorised personnel whose roles require it. All internal access is logged, monitored, and subject to periodic review.
• Two-Factor Authentication: bajiap supports OTP-based two-factor authentication for player account logins, providing an additional layer of protection against unauthorised account access.
• Fraud Detection Systems: Our automated fraud detection infrastructure monitors account activity in real time, flagging anomalous patterns such as unusual login locations, atypical transaction volumes, and suspected account-sharing behaviour for immediate human review.
• Segregated Player Funds: Player account balances are held in accounts that are maintained separately from bajiap's operational capital, protecting player funds in the event of any business disruption.
• Security Incident Response: bajiap maintains a documented security incident response procedure. In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify affected players promptly and take all reasonable steps to contain and remediate the incident.

While bajiap takes every reasonable precaution to protect your data, no online platform can guarantee absolute security. You are also responsible for maintaining the security of your account credentials and for notifying us immediately at [email protected] if you suspect any unauthorised access to your account.

bajiap retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, including legal, regulatory, and responsible gaming compliance obligations. The following general retention principles apply:

1. Active Accounts: For as long as your bajiap account remains active, we retain all personal, financial, and transactional data associated with your account. This data is necessary for the ongoing provision of our services, for customer support, and for responsible gaming monitoring.
2. Closed Accounts: Following the closure of a player account — whether by the player voluntarily, by bajiap for cause, or through a self-exclusion request — bajiap retains core account and transaction records for a period of at least five (5) years. This retention period supports our legal obligations, enables the resolution of any disputes that may arise after closure, and satisfies applicable anti-money laundering record-keeping requirements.
3. Identity Verification Documents: KYC documents (identity cards, proof of payment method ownership) are retained for a minimum of five (5) years from the date of submission, or longer where required by applicable law or regulation.
4. Support Communications: Customer support correspondence — including live chat transcripts and email exchanges — is retained for a period of three (3) years from the date of each interaction, unless a longer period is required for ongoing dispute resolution or legal proceedings.
5. Technical and Usage Data: Anonymised or pseudonymised technical and usage data collected for analytics and platform improvement purposes may be retained for longer periods, as the re-identification risk associated with properly anonymised data is negligible.
6. Marketing Consent Records: Records of your consent to receive marketing communications (or withdrawal of such consent) are retained for as long as necessary to demonstrate compliance with your preferences, and for a reasonable period thereafter.

When personal data is no longer required for any of the above purposes, bajiap will securely delete or irreversibly anonymise it in accordance with our internal data lifecycle management procedures.

bajiap uses cookies and similar client-side tracking technologies to enhance your experience on our platform, to maintain session security, and to gather anonymised analytics data that helps us improve our services. The following categories of cookies are used:

bajiap does not use third-party advertising cookies or tracking pixels that share your behaviour with external advertising networks. You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will impair your ability to log in and use the bajiap platform.

As a data subject, you have a number of rights in relation to the personal data that bajiap holds about you. bajiap is committed to facilitating the exercise of these rights in a timely, transparent, and accessible manner. Your rights include the following:

1. Right of Access: You have the right to request a copy of the personal data that bajiap holds about you, together with information about how it is used and with whom it is shared. Requests will be responded to within a reasonable timeframe.
2. Right to Rectification: If any personal data held by bajiap about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. You may update basic contact information directly from your account dashboard; for changes to identity documents or date of birth, please contact our support team.
3. Right to Erasure: In certain circumstances, you have the right to request the deletion of your personal data. Please note that this right is subject to bajiap's legal obligations — data that must be retained for regulatory compliance, AML obligations, or ongoing dispute resolution cannot be erased on request. We will inform you of any applicable limitations when we receive your request.
4. Right to Restriction: You may request that bajiap restrict the processing of your personal data in certain circumstances — for example, where you contest the accuracy of the data, or where you have objected to processing pending verification of legitimate grounds.
5. Right to Data Portability: Where technically feasible and applicable, you have the right to receive personal data that you have provided to bajiap in a structured, commonly used, machine-readable format, and to request that it be transmitted to another service provider.
6. Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to other forms of processing based on legitimate interests, subject to bajiap's ability to demonstrate overriding grounds.
7. Right to Withdraw Consent: Where processing is based on your consent (for example, marketing communications), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to the withdrawal.

To exercise any of the above rights, please contact the bajiap support team at [email protected]. Please include your registered username and a clear description of the right you wish to exercise. We will acknowledge your request promptly and respond in full within a reasonable period.

bajiap operates exclusively for adults. The platform is strictly prohibited for individuals under 18 years of age. This is a non-negotiable policy enforced through mobile OTP verification at registration and, where required, through documentary identity verification.

If you are a parent or guardian and believe that a minor in your care has created a bajiap account, please contact us immediately at [email protected]. We treat all such reports with the highest priority and will act swiftly to investigate and resolve the matter. We also encourage parents and guardians to make use of internet filtering and parental control tools to restrict minors' access to online gambling platforms.

bajiap's primary operations are focused on serving players in Bangladesh. However, some of our technology infrastructure and third-party service providers may process data in locations outside Bangladesh. Where such international transfers of personal data occur, bajiap ensures that appropriate safeguards are in place to protect your data to a standard at least equivalent to the protections described in this Privacy Policy.

1. Contractual Safeguards: All third-party providers that process personal data on bajiap's behalf — including payment processors, identity verification partners, and hosting providers — are bound by contractual data processing agreements that impose strict obligations regarding data security, purpose limitation, and confidentiality.
2. Transfer Minimisation: bajiap applies a data minimisation principle to international transfers — only the minimum personal data required for the specific service function is shared with overseas processors, and only for that defined purpose.
3. Security Standards: All international data transfers are conducted over encrypted channels. bajiap does not permit any third-party processor to store personal data in an unencrypted format, regardless of their geographic location.

If you have questions about the countries in which bajiap's service providers operate, or about the safeguards applied to international transfers, please contact us at [email protected].

The bajiap platform may, from time to time, contain references to or integrations with third-party services — including game content providers such as Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi. While these providers deliver game content within the bajiap environment, they operate their own privacy practices and data frameworks.

bajiap is not responsible for the privacy practices, content, or data handling of any third-party service or website. We strongly encourage you to review the privacy policies of any third-party provider whose services you access through or in connection with the bajiap platform. This Privacy Policy applies solely to data collected and processed directly by bajiap.

bajiap reserves the right to update or revise this Privacy Policy at any time. Changes may be made in response to updates in applicable law, changes in our data processing activities, improvements to our security practices, or enhancements to our player protection framework.

1. Notification of Changes: Where changes to this Privacy Policy are material — meaning they significantly affect your rights or how your data is used — bajiap will provide advance notice by displaying a prominent notice on the platform and, where appropriate, by sending a notification to your registered mobile number.
2. Effective Date: The revised Privacy Policy will take effect on the date indicated by the "Last Updated" notice at the top of this page. Continued use of the bajiap platform following the effective date of any update constitutes your acceptance of the revised policy.
3. Version History: Significant revisions to this Privacy Policy are documented internally by bajiap. If you wish to understand what has changed between versions, please contact our support team and we will provide a summary of material amendments.
4. Your Responsibility: We encourage you to review this Privacy Policy periodically to remain informed about how bajiap protects your personal data. The most current version of this policy will always be accessible at bajiap.net/privacy-policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way bajiap handles your personal data, please do not hesitate to get in touch with our support team. We are committed to responding to all privacy-related enquiries promptly and transparently.

• Email: [email protected] — plain text, not a clickable link
• Live Chat: Available on the bajiap platform after logging in to your player account
• Availability: 24 hours a day, 7 days a week — Bangladesh Standard Time (UTC+6)
• Response Time: Privacy-related email enquiries are typically acknowledged within 24 hours and resolved within 5 business days

When contacting us about a privacy matter, please include your registered username and a concise description of your query or concern to help us locate your account records and respond as efficiently as possible.