Privacy Policy — bajie88 Data Protection Commitment

1. Information We Collect

bajie88 collects personal data from players in Bangladesh through several channels: directly when you register and use your account, automatically through your use of the platform, and occasionally from third-party verification and payment service providers. The categories of data we collect are described in full below.

1.1 Account Registration Data

When you create a bajie88 account, we collect the following information directly from you:

• Full legal name as it appears on your government-issued identity document;
• Date of birth (used to verify that you are 18 years of age or older);
• Email address and mobile phone number registered in Bangladesh;
• Residential address, including city and division;
• Chosen username and an encrypted record of your password (we never store passwords in plain text);
• Preferred currency (Bangladeshi Taka, ৳).

1.2 Identity Verification (KYC) Data

To comply with Know Your Customer (KYC) and anti-money laundering (AML) obligations, bajie88 may request and retain copies of:

• National Identity Card (NID) issued by the Bangladesh Election Commission;
• Passport or driving licence;
• Proof of address: utility bills, bank statements, or mobile banking statements from bKash, Nagad, or Rocket dated within 90 days;
• Payment method verification: screenshots or records confirming that a bKash, Nagad, Rocket, or bank account used for deposits is registered in your own name.

KYC documents are stored securely and are accessible only to authorised bajie88 compliance personnel. They are not used for any purpose other than identity verification, fraud prevention, and regulatory compliance.

1.3 Financial Transaction Data

bajie88 records all financial transactions associated with your account, including:

• Deposit amounts, dates, times, and the payment method used (e.g., bKash, Nagad, Rocket, Dutch-Bangla Bank);
• Withdrawal requests, amounts, processing status, and destination payment method;
• Bonus credits and wagering activity linked to promotional offers;
• Account balance history.

Financial transaction records are retained for a minimum of 5 years from the date of each transaction in accordance with internationally recognised AML record-keeping standards.

1.4 Gaming Activity Data

bajie88 logs detailed records of your gaming activity on the platform, including the games you play (slots, live casino tables, cricket betting markets, jackpot games), wager amounts, session start and end times, game outcomes, and any self-imposed responsible gaming limits you have set. This data is used to provide accurate account statements, resolve disputes, power responsible gaming monitoring, and personalise your experience on the platform.

1.5 Technical and Device Data

When you access bajie88, our servers automatically log certain technical information:

• Your IP address and approximate geographical location (country and city level);
• Device type, operating system, and browser version;
• Pages visited, time spent on each page, and navigation path through the site;
• Referring URL (the site or search engine that directed you to bajie88);
• Session identifiers and authentication tokens.

Technical data is used for platform security, fraud detection, performance optimisation, and aggregate analytics. It is not used to build individual marketing profiles without your explicit consent.

1.6 Communications Data

bajie88 retains records of all communications between you and our support team, including live chat transcripts, emails sent to support@bajie88, and any formal dispute correspondence. These records are kept for a minimum of 2 years and are used to ensure service quality, resolve ongoing disputes, and train support staff.

2. How We Use Your Data

bajie88 processes your personal data for specific, clearly defined purposes. We do not use your data in ways that are incompatible with the purpose for which it was originally collected. The following describes the legal basis and operational purpose for each category of processing we carry out.

2.1 Contract Performance

The primary legal basis for processing most of your account data is contract performance — meaning that processing is necessary to deliver the services you signed up for when creating your bajie88 account. This includes processing your deposits, processing withdrawals, recording your wagers and game outcomes, applying bonus credits to your account, and providing 24/7 English-language support.

2.2 Legal and Regulatory Obligations

bajie88 processes identity verification data, financial transaction records, and communications data because we are required to do so under internationally recognised AML and KYC standards. This processing is not discretionary — it is a legal obligation that bajie88 must fulfil regardless of individual player preferences. Players who do not wish to submit KYC documentation cannot maintain a verified bajie88 account with active withdrawal privileges.

2.3 Legitimate Interests

bajie88 relies on legitimate interests as a legal basis for the following processing activities:

• Fraud detection and platform security: Monitoring account activity, IP addresses, and transaction patterns to identify and prevent fraudulent behaviour, bonus abuse, money laundering, and unauthorised account access;
• Responsible gaming monitoring: Analysing gaming session data to identify patterns associated with problem gambling and to trigger interventions such as deposit limit suggestions or self-exclusion prompts;
• Platform improvement: Using aggregate, anonymised analytics data to improve the bajie88 website performance, game selection, and user experience for players across Bangladesh;
• Dispute resolution: Retaining gaming logs and communication records to resolve disputes accurately and fairly.

2.4 Marketing Communications (Consent-Based)

bajie88 sends promotional emails, SMS messages, and in-platform notifications about bonuses, new game launches, seasonal promotions (including Eid, Pohela Boishakh, BPL season offers), and other platform news only to players who have explicitly consented to receive such communications. Consent is collected at account registration and can be withdrawn at any time by contacting support@bajie88 or updating preferences in your account dashboard. bajie88 does not send unsolicited marketing to players who have opted out.

3. Data Sharing & Third Parties

bajie88 does not sell your personal data to third parties. We share personal data only where necessary to operate the platform, fulfil legal obligations, or protect the security of our players and systems. The categories of third parties with whom we may share data are described below.

3.1 Payment Processing Partners

To process deposits and withdrawals in Bangladeshi Taka (৳), bajie88 shares the minimum necessary financial data with payment processing partners including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank. Data shared is limited to the transaction amount, your registered account identifier, and the payment method reference required to complete the transfer. These partners are independently regulated financial institutions and are bound by their own data protection obligations.

3.2 Identity Verification Services

bajie88 may use third-party KYC verification service providers to assist with automated document verification and age-checking processes. Any KYC service provider engaged by bajie88 is required to process data only on bajie88's instructions, to maintain appropriate security standards, and to delete or return data once the verification task is complete.

3.3 Game Content Providers

The games available on bajie88 are developed and operated by licensed third-party game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, PG Soft, Spribe, and Ezugi. When you play a game provided by one of these studios, certain session data (such as game identifier, wager amount, and outcome) may be transmitted to the game provider's servers to render the game and return results. Game providers do not receive your personally identifiable account data (name, address, NID) — only the anonymised session identifiers necessary to run the game.

3.4 Legal Authorities

bajie88 may disclose personal data to law enforcement agencies, financial intelligence units, courts, or other governmental authorities if we are legally required to do so by a valid court order, subpoena, or regulatory instruction. bajie88 will, where legally permitted, notify the affected player of any such disclosure request before complying. In urgent cases involving suspected fraud, money laundering, or imminent harm, bajie88 may disclose data without prior notice to the player.

3.5 No Sale or Rental of Data

bajie88 does not sell, rent, lease, or otherwise transfer your personal data to third-party marketing companies, data aggregators, or advertising networks for their independent commercial purposes. Any data sharing arrangement outside of the categories described in this section requires your explicit prior consent.

4. Cookies & Tracking Technologies

bajie88 uses cookies and similar tracking technologies to maintain your login session, remember your platform preferences, detect fraudulent access patterns, and gather aggregate analytics data about how players use the site. This section explains the types of cookies we use and how you can manage them.

4.1 Types of Cookies Used

4.2 Managing Your Cookie Preferences

You can manage cookie settings through your web browser. Most modern browsers (Chrome, Firefox, Safari, Samsung Internet on Android) allow you to view, delete, and block cookies from specific sites. Please note that disabling strictly necessary cookies will prevent you from logging into your bajie88 account and using core platform features. Disabling analytics or functional cookies will not affect your ability to play games or make transactions.

bajie88 does not currently use third-party advertising cookies or cross-site tracking cookies. If this changes in the future, this section of the Privacy Policy will be updated and players will be notified via the platform.

5. Data Retention & Storage

bajie88 retains personal data only for as long as it is necessary to fulfil the purposes described in this Privacy Policy, or for as long as applicable legal and regulatory obligations require. The following retention periods apply as a general guide.

5.1 Data Storage Location

bajie88 stores player data on secure servers. All data is encrypted at rest using AES-256 encryption and in transit using TLS 1.2 or higher. Access to production data is restricted to authorised bajie88 personnel who require access as part of their role, and all access is logged and audited.

5.2 Data Deletion Requests

If you request deletion of your personal data (see Section 6 — Your Privacy Rights), bajie88 will action your request within 30 days where no legal retention obligation prevents deletion. Where data must be retained for legal reasons (for example, AML transaction records), bajie88 will inform you of the specific retention obligation and the date on which the data will be deleted once that obligation expires.

6. Your Privacy Rights

bajie88 respects your rights over the personal data we hold about you. Regardless of your location within Bangladesh, you are entitled to exercise the following rights in relation to your bajie88 account data.

6.1 Right of Access

You may request a copy of all personal data that bajie88 holds about you. This includes your account registration data, KYC records, financial transaction history, gaming activity logs, and any support communications. Access requests will be fulfilled within 30 days of receipt and will be provided in a readable English-language format.

6.2 Right to Rectification

If you believe that any personal data bajie88 holds about you is inaccurate or incomplete, you may request that we correct it. Corrections to identity data (name, date of birth) may require you to submit updated Verification Documents to confirm the accuracy of the corrected information.

6.3 Right to Erasure

You may request that bajie88 deletes your personal data. Erasure requests will be processed within 30 days except where data must be retained to comply with a legal obligation (such as AML record-keeping), to resolve an open dispute, or to enforce bajie88's Terms & Conditions. Where full erasure is not possible, bajie88 will delete all data that can lawfully be deleted and explain why any remaining data must be retained.

6.4 Right to Object to Marketing

You may withdraw your consent to receive marketing communications from bajie88 at any time by emailing support@bajie88 with the subject line "Unsubscribe" or by updating your preferences in your account dashboard. Opt-out requests are processed within 48 hours and do not affect your ability to use the platform.

6.5 Right to Data Portability

You may request that bajie88 provides your personal data in a structured, machine-readable format (such as CSV or JSON) so that you can transfer it to another service provider. Data portability requests apply to data that you provided directly (account registration data and transaction records) and are fulfilled within 30 days.

6.6 How to Exercise Your Rights

All privacy rights requests must be submitted in English by email to support@bajie88 with the subject line beginning "Privacy Request:". bajie88 may request additional identity verification before fulfilling a request to prevent fraudulent access to another player's data. We will acknowledge all requests within 5 business days and provide a full response within 30 calendar days.

7. Data Security Measures

bajie88 implements a comprehensive set of technical and organisational security measures to protect your personal data from unauthorised access, accidental loss, destruction, or disclosure. Our security programme is reviewed and updated regularly to address new and emerging threats relevant to the online gaming industry.

7.1 Technical Security Controls

• Encryption in transit: All data transmitted between your device and bajie88 servers is encrypted using TLS 1.2 or TLS 1.3. We do not support older, insecure protocol versions (SSL 3.0, TLS 1.0, TLS 1.1).
• Encryption at rest: All personal data stored on bajie88 servers is encrypted at rest using AES-256 encryption. Database backups are also encrypted.
• Password security: Player passwords are hashed using a cryptographically strong hashing algorithm (bcrypt) with a unique salt per account. bajie88 never stores plain-text passwords and is never able to retrieve your password — only reset it.
• Two-factor authentication: bajie88 supports optional two-factor authentication (2FA) via SMS OTP for players in Bangladesh who wish to add an extra layer of security to their account login.
• Session management: Active sessions automatically expire after a period of inactivity. Each login session is assigned a unique, cryptographically random session token that is invalidated upon logout.
• Intrusion detection: bajie88 operates continuous network intrusion detection and automated alerting systems that flag unusual traffic patterns or access attempts for immediate human review.

7.2 Organisational Security Controls

• Access to player data is restricted to bajie88 personnel who require it to perform their designated role. All access is role-based and logged.
• All personnel with access to player data are trained in data protection principles and are bound by confidentiality obligations.
• bajie88 conducts periodic internal security reviews and engages third-party security specialists for penetration testing of the platform.
• In the event of a data security incident that affects player data, bajie88 will notify affected players via their registered email address without undue delay, describing the nature of the incident and the steps taken to contain it.

7.3 Your Responsibilities

Platform security is a shared responsibility. bajie88 cannot protect your account if your login credentials are compromised on your side. You are responsible for: choosing a strong, unique password; not sharing your username or password with any third party; logging out of your bajie88 account on shared or public devices; and notifying bajie88 support immediately if you suspect unauthorised access to your account. bajie88 will never ask you to share your password through any channel.

8. Contact & Privacy Requests

If you have any questions about this Privacy Policy, wish to exercise any of your data rights described in Section 6, or wish to raise a concern about the way bajie88 handles your personal data, please contact the bajie88 data team using the details below.

8.1 Policy Updates

bajie88 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. When material changes are made, bajie88 will notify active account holders via their registered email address and will update the "Effective Date" at the top of this page. Continued use of the bajie88 platform after the updated Privacy Policy takes effect constitutes your acceptance of the revised terms. We encourage you to review this page periodically to stay informed about how we protect your data.