Privacy Policy — bajiaid

bajiaid collects personal data from you in several ways — directly when you register or interact with the Platform, automatically as you use our services, and from third-party sources where permitted. The categories of information we collect are set out below.

We do not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data, or health information. If you voluntarily disclose such information to our support team (for example, citing a health condition in a responsible gaming request), we will handle it with heightened care and will not use it for any purpose beyond fulfilling your immediate request.

We do not knowingly collect personal data from individuals under the age of 18. If we become aware that a registered account belongs to a person under 18, we will immediately close the account and delete all associated personal data in accordance with our account closure procedures.

bajiaid uses your personal data only for the purposes described below. We do not use your data for automated decision-making that produces legal or similarly significant effects without providing you with the opportunity to seek human review.

• Account Management: To create, maintain, and manage your registered account on bajiaid, including verifying your identity, processing your login, and enabling you to access all Platform features available to registered players.
• Transaction Processing: To process your deposits and withdrawals via your chosen Bangladeshi payment method (bKash, Nagad, Rocket, Upay, or linked bank account), reconcile your account balance, and maintain accurate financial records.
• KYC and Identity Verification: To verify your age, identity, and place of residence in compliance with our anti-money laundering obligations and responsible gaming commitments. This includes cross-referencing documents you submit against third-party verification databases where appropriate.
• Service Delivery: To provide access to casino games, sports betting markets, live dealer tables, and all other features of the Platform. This includes personalising your gaming experience based on your preferences and activity history.
• Security and Fraud Prevention: To detect, investigate, and prevent fraudulent activity, money laundering, bonus abuse, unauthorised account access, and any other prohibited conduct as defined in our Terms & Conditions.
• Customer Support: To respond to your queries, complaints, and support requests, and to maintain records of those interactions for quality assurance and training purposes.
• Responsible Gaming: To monitor your gambling activity for signs of problem gambling behaviour and, where necessary, to proactively offer responsible gaming tools such as deposit limits, session reminders, or self-exclusion. Full details are available on our Responsible Gaming page.
• Legal and Regulatory Compliance: To comply with applicable laws, respond to lawful requests from government authorities, fulfil financial reporting obligations, and enforce our Terms & Conditions.
• Marketing and Promotions: To send you promotional offers, bonus notifications, and relevant casino or sports betting updates — but only where you have opted in to receive such communications. You may withdraw your marketing consent at any time.
• Platform Improvement: To analyse aggregated usage data in order to improve the performance, reliability, and content of the Platform, develop new features, and fix technical issues.

We apply the principle of purpose limitation: if we intend to use your data for a materially different purpose than those listed above, we will notify you and, where required by applicable law, obtain your prior consent before proceeding.

bajiaid processes your personal data on the following legal grounds, depending on the purpose for which the data is used:

• Contractual Necessity: The majority of data processing at bajiaid is necessary for the performance of the contract between you and us — namely, the Terms & Conditions governing your use of the Platform. This includes processing your registration data, managing your account, processing transactions, and delivering gaming services.
• Legal Obligation: Certain processing activities are required by law, including KYC identity verification, anti-money laundering checks, financial record-keeping, and compliance with law enforcement requests. We are required to process this data regardless of your preferences.
• Legitimate Interests: We process some data on the basis of our legitimate business interests, where those interests are not overridden by your fundamental rights and freedoms. This includes fraud prevention, platform security monitoring, responsible gaming oversight, and aggregated analytics for product improvement.
• Consent: Where we rely on consent — primarily for optional marketing communications and the use of non-essential cookies — you are free to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal. Withdrawing marketing consent will not affect your ability to use the Platform.

Where processing is based on legitimate interests, you have the right to object to that processing. Please contact our support team at support@bajiaid to raise such an objection, and we will assess it on a case-by-case basis.

bajiaid does not sell your personal data to third parties. We share your data only in the specific, limited circumstances described below, and only to the extent necessary for the relevant purpose.

• Payment Processors: We share the financial data necessary to process your deposits and withdrawals with our approved payment partners, including mobile wallet operators (bKash, Nagad, Rocket, Upay) and banking partners (Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank). These partners process your payment data under their own privacy policies and are bound by contractual data protection obligations.
• Identity Verification Providers: To fulfil our KYC obligations, we may share identity documents and personal details with third-party identity verification services. These providers are engaged solely for verification purposes and are prohibited from using your data for any other purpose.
• Game Providers: When you play a game supplied by a third-party provider (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Ezugi), the minimum data necessary to initiate and record your game session is shared with that provider. Game providers act as data processors on our behalf and are bound by data processing agreements.
• Fraud Prevention and Security Services: We may share data with specialist fraud detection and cybersecurity providers to identify and prevent prohibited conduct on the Platform. These providers process data strictly on our instructions.
• Legal and Regulatory Authorities: We will disclose personal data to government bodies, law enforcement agencies, regulatory authorities, or courts where we are required to do so by applicable law, court order, or regulatory direction. We will notify you of any such disclosure where we are legally permitted to do so.
• Corporate Transactions: In the event of a merger, acquisition, or sale of all or part of bajiaid's business, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and of any resulting change to this Privacy Policy.

bajiaid uses cookies and similar tracking technologies to operate and improve the Platform. A cookie is a small text file stored on your device when you visit a website. We use the following categories of cookies:

In addition to cookies, we may use web beacons, pixel tags, and local storage objects for similar purposes. These technologies work alongside cookies to give us a picture of how the Platform is used.

You can manage or delete cookies at any time through your browser settings. Most modern browsers allow you to block third-party cookies, delete existing cookies, and set preferences for future cookies. Please note that disabling cookies beyond the strictly necessary category may affect the functionality and personalisation of your bajiaid experience.

We do not use cookies or tracking technologies to build advertising profiles for sale to third-party advertisers, and we do not participate in cross-site behavioural advertising networks.

bajiaid retains your personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Active Account Data: Identity, contact, and account activity data is retained for the full duration of your account being active on the Platform.
• Financial Transaction Records: Records of all deposits, withdrawals, and gaming transactions are retained for a minimum of five years from the date of the transaction, in line with standard financial record-keeping obligations.
• KYC Documentation: Identity verification documents (copies of national ID, passport, proof of address) are retained for a minimum of five years following account closure, as required under anti-money laundering regulations.
• Customer Support Records: Records of support interactions are retained for three years from the date of the interaction, to allow for quality review and dispute resolution.
• Marketing Data: If you opt in to marketing communications, your contact details and preferences are retained until you withdraw consent or request deletion, plus a short additional period for administrative processing.
• Closed Account Data: Following account closure, a core set of identity and transaction data is retained for up to five years to meet legal obligations. Non-essential data (browsing preferences, non-required session logs) is deleted within 90 days of account closure.

When personal data is no longer required and its retention period has expired, bajiaid will securely delete or anonymise the data using industry-standard data destruction methods. Anonymised, aggregated data (from which no individual can be identified) may be retained indefinitely for statistical and product improvement purposes.

As a registered player on bajiaid, you hold the following rights in relation to your personal data. You may exercise any of these rights by contacting our support team at support@bajiaid. We will respond to all valid requests within 30 days.

• Right of Access: You have the right to request a copy of the personal data we hold about you, along with information about how it is being used and with whom it has been shared.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it without undue delay.
• Right to Erasure ("Right to Be Forgotten"): You may request that we delete your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose for which it was collected, or where you have withdrawn consent and there is no overriding legal basis for continued processing. Please note that this right is not absolute: we may be required to retain certain data to fulfil legal obligations (see Section 6).
• Right to Restrict Processing: In certain circumstances (for example, where you contest the accuracy of your data while we verify it), you may request that we temporarily suspend active processing of your data.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing carried out on the basis of our legitimate interests. You also have an unconditional right to object to the use of your data for direct marketing purposes at any time.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing that occurred before withdrawal.

bajiaid takes the security of your personal data seriously and implements a range of technical and organisational measures to protect it against unauthorised access, alteration, disclosure, or destruction. Our security framework includes:

• Transport Layer Encryption: All data transmitted between your device and our servers is protected by 256-bit SSL/TLS encryption. This ensures that your login credentials, payment details, and personal information cannot be intercepted in transit.
• Data-at-Rest Encryption: Sensitive data stored on our servers — including identity documents, financial records, and account credentials — is encrypted at rest using industry-standard encryption algorithms.
• Access Controls: Access to personal data within bajiaid's internal systems is restricted on a strict need-to-know basis. Staff access is governed by role-based access controls, and all access events are logged and periodically audited.
• Password Security: Account passwords are stored as salted cryptographic hashes. bajiaid staff cannot view your plain-text password. If you forget your password, it must be reset rather than retrieved.
• Intrusion Detection: Our infrastructure is monitored continuously by automated intrusion detection systems designed to identify and respond to suspicious activity in real time.
• Penetration Testing: We conduct periodic security assessments, including penetration testing, to identify and remediate vulnerabilities before they can be exploited.
• Staff Training: All bajiaid staff who handle personal data receive regular data protection training and are bound by confidentiality obligations.

Whilst we employ robust security measures, no online platform can guarantee absolute security against all possible threats. You also play a role in keeping your account secure: use a strong, unique password, do not share your login credentials, and contact our support team immediately if you suspect your account has been compromised.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, bajiaid will take prompt remedial action and will notify affected players in accordance with our incident response procedures.

The bajiaid Platform integrates with a number of third-party services to deliver its full range of features. Each of these integrations involves a limited and controlled sharing of data as described below:

• Game Providers: Casino and sports game content is supplied by providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. When you launch a game, your session data (player ID, game session token, stake and result data) is transmitted to the relevant provider to operate the game. These providers maintain their own privacy policies and are subject to data processing agreements with bajiaid.
• Payment Partners: Mobile wallet operators and banking partners receive the transaction data necessary to process your deposit or withdrawal request. These partners are independently regulated financial service providers operating under their own data protection frameworks.
• Analytics Providers: We use analytics tools to understand Platform usage patterns. These tools receive anonymised or pseudonymised data only — they do not receive your name, contact details, or financial information.
• Customer Support Infrastructure: Our live chat and ticketing system is operated via a third-party support platform. Support interaction data is stored on that platform's secure servers in accordance with a data processing agreement.

bajiaid is not responsible for the privacy practices of third-party websites or services that are not under our direct control. If you navigate to a third-party site from a link on the Platform (for example, a game provider's website), that site's own privacy policy will apply to any data you provide there.

Updates to This Policy: bajiaid may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or the services we offer. When a material change is made, we will notify registered players via email or an in-platform notification at least 14 days before the change takes effect. The "Effective Date" at the top of this policy will be updated accordingly. Your continued use of the Platform after the effective date of a revised policy constitutes your acceptance of the updated terms.

Previous Versions: If you would like to review a previous version of this Privacy Policy, please contact our support team and we will provide the most recent prior version on request.

Children's Privacy: bajiaid is strictly an adults-only platform. 18+ We do not knowingly collect personal data from individuals under the age of 18. If a parent or guardian believes that their child has provided personal information to bajiaid, please contact us immediately at support@bajiaid and we will take prompt action to delete that data and close the relevant account.

Complaints: If you believe that bajiaid has not handled your personal data in accordance with this Privacy Policy, we encourage you to raise your concern directly with our support team in the first instance. We are committed to resolving all data privacy complaints fairly and promptly. If you are not satisfied with our response, you may escalate your complaint to the relevant data protection authority in your jurisdiction.

Contact Details: For all data protection enquiries, including exercising your rights, raising a complaint, or requesting a copy of this policy in an alternative format, please contact our dedicated support team:

• Email: support@bajiaid
• Support availability: 24 hours a day, 7 days a week, 365 days a year
• Response time: Within 30 days for formal data rights requests; within 24 hours for general privacy queries