Privacy Policy
At b baje, your privacy is a priority we take seriously. This Privacy Policy explains exactly what personal data we collect, why we collect it, how it is used, who it may be shared with, and what rights you hold as a b baje account holder in Bangladesh.
Our Privacy Principles
Before diving into the full policy, here are the six core principles that shape how b baje handles every piece of data it processes about you.
Purpose Limitation
b baje collects personal data only for specific, explicit, and legitimate purposes. Data collected for KYC identity verification, for example, is not repurposed for marketing analytics without your separate consent. Each data category is tied to a defined use case documented in this policy.
Data Minimisation
We collect only the personal data that is strictly necessary for the purpose in question. b baje does not request or store data that goes beyond what is needed to operate your account, process transactions, verify your identity, and comply with applicable obligations.
Security by Design
b baje implements technical and organisational security measures — including SSL/TLS encryption in transit, AES-256 encryption at rest for sensitive fields, and access controls — to protect your data from unauthorised access, alteration, disclosure, or destruction at every layer of the platform.
Defined Retention Periods
Personal data is not kept longer than necessary. b baje applies defined retention schedules to each data category, balancing your privacy rights with legal obligations such as anti-money laundering record-keeping requirements. Once a retention period expires, data is securely deleted or anonymised.
Your Rights Are Real
b baje recognises and honours your right to access, correct, restrict, and request deletion of your personal data. These are not theoretical entitlements — they are operational rights you can exercise by contacting b baje support at any time. Requests are handled within thirty (30) days.
No Selling of Personal Data
b baje does not sell, rent, or auction your personal data to third parties under any circumstances. Where data is shared with service partners — such as payment processors or game providers — it is shared solely to deliver the service you use and under strict data processing agreements that bind those parties to equivalent privacy standards.
Data We Collect
b baje collects personal data across several categories depending on how you interact with the platform. The table below summarises what we collect, why, and the legal basis for processing each category.
| Data Category | Examples | Collection Purpose |
|---|---|---|
| Identity Data | Full legal name, date of birth, national ID number, passport number, photograph | KYC verification, age verification (18+ compliance), fraud prevention |
| Contact Data | Email address, mobile phone number, city of residence (e.g., Dhaka, Chittagong, Sylhet) | Account notifications, withdrawal OTPs, customer support communications |
| Financial Data | bKash / Nagad / Rocket / Upay mobile wallet numbers, bank account details, transaction history, BDT deposit and withdrawal amounts | Payment processing, withdrawal verification, AML monitoring |
| Technical Data | IP address, device type, browser type and version, operating system, session timestamps | Platform security, fraud detection, geographic access control |
| Usage Data | Games played, bets placed, session duration, pages visited, in-game actions, bonus offers claimed | Responsible gaming monitoring, platform improvement, personalisation |
| Communication Data | Live chat transcripts, support email correspondence, feedback submissions | Support quality assurance, dispute resolution, training |
| Marketing Preference Data | Email marketing opt-in status, promotional communication preferences | Sending promotional content only to players who have consented to receive it |
Data Collected Automatically
When you access b baje via a web browser or mobile device, certain technical data is collected automatically by our servers and analytics systems. This includes your IP address (used to detect geographic location and identify suspicious login patterns), your device fingerprint (browser type, screen resolution, and operating system), and session timestamps. This automatic collection happens whether or not you are logged into an account and is necessary to operate a secure online gambling platform.
Data You Provide Directly
Identity data, contact data, and financial data are collected directly from you at the time of account registration and during the KYC verification process. You may be asked to upload scanned or photographed copies of government-issued identity documents — such as a Bangladesh National ID Card (NID), passport, or driving licence — and a recent utility bill or bank statement for address verification. b baje stores these documents securely and uses them solely for verification purposes.
Data from Third Parties
b baje may receive limited personal data from third-party sources where this is necessary to verify your identity or to detect fraudulent activity. Sources may include payment processors (bKash, Nagad, Rocket, Upay, and partner banks) who provide transaction confirmation data, and fraud prevention service providers who may cross-reference account details against known fraud databases. b baje does not purchase personal data from data brokers or marketing list providers.
Bangladesh Payment Data
When you deposit or withdraw via bKash, Nagad, Rocket, or Upay, b baje receives confirmation data from the mobile money provider including your wallet number and transaction reference. This data is used exclusively for payment matching, dispute resolution, and AML compliance — never for marketing.
ID Document Uploads
KYC document images (NID, passport, utility bills) are stored in an encrypted document vault with restricted internal access. Only trained compliance staff with a specific operational need can access these files. Documents are not shared with game providers or marketing partners.
Minors' Data
b baje does not knowingly collect personal data from persons under the age of 18. If we discover that an account belongs to an underage individual, the account will be closed immediately and any personal data associated with it will be deleted unless retention is required by law. 18+
How We Use Your Data
b baje uses personal data only where there is a clear, defined purpose and a valid legal basis for doing so. Below is a full account of every processing activity b baje conducts and the corresponding justification.
Account Administration and Service Delivery
The primary use of your personal data is to create and maintain your b baje account and to deliver the gambling and betting services you have signed up to use. This includes processing your deposits and withdrawals in BDT, crediting winnings to your account balance, applying bonuses you have opted into, and maintaining your transaction history. Without processing your data for this purpose, b baje cannot provide its core service.
Identity Verification and KYC Compliance
b baje processes your identity and financial data to verify that you are who you claim to be, that you are aged 18 or above, and that the payment methods you use belong to you. This processing is a legal obligation imposed on b baje as an operator of a financial-services-adjacent platform. KYC checks are conducted before the first withdrawal on every account and may be repeated at any time if account activity triggers an enhanced review.
Fraud Detection and Platform Security
b baje uses technical data, usage data, and identity data to detect and prevent fraudulent activity on the platform, including account takeover attempts, multi-account abuse, bonus fraud, collusion, and money laundering. This processing is necessary for b baje's legitimate interest in maintaining a fair and secure platform for all players, and in some cases is required by applicable anti-money laundering obligations.
Responsible Gaming Monitoring
b baje uses your usage data — including session duration, bet frequency, deposit patterns, and loss trajectories — to identify players who may be exhibiting signs of problem gambling. Where such indicators are identified, b baje's responsible gaming team may reach out to you proactively, apply cooling-off measures, or suggest the use of deposit limits or self-exclusion tools. This processing is conducted in your interest and reflects b baje's commitment to player wellbeing. Visit our Responsible Gaming page for full details.
Customer Support and Dispute Resolution
Communication data from live chat sessions and email correspondence is used to resolve your support queries, to investigate disputes about game outcomes or transaction processing, and to improve the quality of the b baje support experience. Support interactions are recorded and may be reviewed for training and quality assurance purposes.
Marketing Communications (Consent-Based Only)
If you have opted in to receive promotional communications from b baje, we use your contact data and marketing preference data to send you information about bonus offers, seasonal promotions (such as Eid and BPL cricket specials), and new game launches. You may withdraw your marketing consent at any time by updating your communication preferences in account settings or by contacting support. Withdrawal of marketing consent does not affect your right to continue using the platform.
Legal and Regulatory Compliance
b baje retains and processes certain personal data — particularly financial transaction records — to comply with applicable legal obligations including anti-money laundering (AML) record-keeping requirements. This processing is mandatory and cannot be overridden by a player data deletion request where the retention period under applicable law has not yet expired.
Opting Out of Marketing
You can stop receiving promotional emails and SMS from b baje at any time by logging into your account settings and updating your communication preferences, or by requesting opt-out via live chat support. Opting out takes effect within 48 hours.
Responsible Gaming Data Use
Usage data monitoring for responsible gaming purposes is always conducted in your interest. b baje does not use responsible gaming data to restrict your account without reasonable cause. Where interventions are applied, you will be notified and given the opportunity to discuss the decision with the support team.
Data Sharing & Third Parties
b baje does not sell your personal data. However, operating the platform requires sharing limited data with trusted service providers and, in specific circumstances, with authorities. Every sharing relationship is governed by a data processing agreement.
Payment Processing Partners
To process deposits and withdrawals in BDT, b baje shares the minimum necessary financial data with your chosen payment provider — bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, or BRAC Bank. The data shared is limited to what the payment provider requires to complete the transaction. These providers operate under their own privacy policies and regulatory frameworks. b baje is not responsible for how payment providers process data on their end, though we select only established, regulated providers.
Game Software Providers
Games on the b baje platform are supplied by third-party studios including Pragmatic Play, Evolution Gaming, Spribe, Ezugi, NetEnt, and Microgaming. To display and operate these games within your b baje session, limited technical session data (such as a session token and your account's currency denomination) is passed to the game provider's servers. Your full name, NID number, and payment details are never shared with game providers.
Identity Verification and KYC Service Providers
b baje uses third-party KYC verification technology providers to automate parts of the identity document check process. These providers receive identity document images and personal details solely for the purpose of verifying their authenticity and confirming your identity. All KYC service providers are contractually bound to process data only for this purpose and to maintain security standards equivalent to those applied by b baje.
Fraud Prevention and Security Providers
b baje works with fraud detection and cybersecurity service providers to monitor platform activity for suspicious patterns. These providers may process technical data including IP addresses and device fingerprints. No financial data or identity document data is shared with fraud prevention providers beyond what is strictly necessary for the detection service.
Legal and Regulatory Authorities
b baje will disclose personal data to law enforcement agencies, financial intelligence authorities, or courts where required to do so by applicable law or by a valid legal order. b baje will take reasonable steps to notify affected players of such disclosures unless prohibited from doing so by law. b baje does not voluntarily share player data with government bodies beyond what is legally required.
International Data Transfers
Some of b baje's technology partners — including game software providers and cloud infrastructure providers — are based outside Bangladesh. Where personal data is transferred internationally, b baje ensures that appropriate data transfer safeguards are in place, such as standard contractual clauses or equivalent mechanisms, to ensure that your data receives a level of protection equivalent to that which it receives within Bangladesh.
Data Processing Agreements
Every third party that processes personal data on b baje's behalf is required to sign a data processing agreement before receiving any data. These agreements mandate confidentiality, restrict secondary use, and require security standards equivalent to those b baje applies internally.
We Never Sell Your Data
b baje does not and will not sell, rent, exchange, or otherwise commercially transfer your personal data to any third party for that party's own marketing or commercial purposes. This is a firm policy commitment, not merely a legal technicality.
Game Providers
Pragmatic Play, Evolution Gaming, Spribe, Ezugi, NetEnt, and Microgaming receive only the session data required to run a game instance. They do not receive your NID, phone number, BDT balance, or transaction history.
Data Retention
b baje does not retain personal data indefinitely. The table below sets out the retention periods applied to each data category and the reason those periods are applied.
| Data Category | Retention Period | Reason |
|---|---|---|
| Identity & KYC Documents | 5 years after account closure | AML and KYC legal record-keeping obligations |
| Financial Transaction Records | 5 years after account closure | AML compliance and financial audit trail requirements |
| Account Profile Data | Duration of account + 2 years post-closure | Account reactivation requests, dispute resolution |
| Usage / Game History | Duration of account + 1 year post-closure | Dispute resolution, responsible gaming review |
| Support Communications | 3 years from date of interaction | Quality assurance, legal dispute evidence |
| Marketing Preference Records | Until consent is withdrawn + 1 year | Proof of consent for regulatory purposes |
| Technical / Log Data | 13 months from collection | Security monitoring, fraud pattern analysis |
Upon expiry of the applicable retention period, personal data is either securely deleted from b baje's systems or irreversibly anonymised so that it can no longer be associated with any identifiable individual. Anonymised, aggregated data (such as platform-wide statistical reports) may be retained indefinitely as it no longer constitutes personal data.
Where a player submits a data deletion request before the end of the applicable retention period, b baje will delete all data that is not subject to a mandatory legal retention obligation and will inform the player of any categories that must be retained and the reason for that retention. In such cases, the retained data will be isolated from active processing and used only for the permitted legal purpose.
Why 5 Years for KYC?
The five-year post-closure retention period for KYC and financial records reflects standard AML (anti-money laundering) record-keeping requirements applicable to online financial platforms operating in the Bangladesh market. b baje is required to maintain these records even after an account is closed.
Requesting Early Deletion
You may request deletion of personal data not covered by a mandatory legal retention obligation by contacting b baje support. Requests are reviewed within 30 days. Where deletion is not possible for legal reasons, b baje will explain which data categories are affected and why.
Data Security Measures
b baje applies multiple layers of technical and organisational security to protect your personal data from unauthorised access, loss, alteration, or disclosure.
SSL / TLS Encryption
All data transmitted between your device and b baje servers is protected by SSL/TLS encryption, ensuring that your login credentials, payment details, and personal data cannot be intercepted in transit.
Encryption at Rest
Sensitive personal data fields stored in b baje's databases — including KYC document content, payment method identifiers, and authentication credentials — are encrypted at rest using AES-256 encryption.
Access Controls
Access to personal data within b baje's internal systems is restricted on a need-to-know basis. Staff with access to sensitive data categories undergo background checks and are bound by confidentiality obligations.
Penetration Testing
b baje conducts regular third-party security assessments and penetration tests to identify and remediate vulnerabilities in its platform infrastructure before they can be exploited by malicious actors.
Data Breach Response
In the event of a personal data breach that poses a risk to your rights and freedoms, b baje will notify affected players without undue delay and in any case within seventy-two (72) hours of becoming aware of the breach. The notification will describe the nature of the breach, the categories and approximate number of records affected, the likely consequences, and the measures b baje has taken or proposes to take to address the breach.
Your Own Security Responsibilities
While b baje maintains strong platform-side security, the security of your account also depends on actions you take. b baje strongly recommends using a unique, strong password for your account, enabling SMS OTP two-factor authentication via account settings, never sharing your login credentials with anyone, and logging out of your account when using shared or public devices. b baje cannot be held responsible for account breaches that result from a player's failure to follow these basic security practices.
Your Privacy Rights
As a b baje account holder, you hold a defined set of privacy rights with respect to the personal data we process about you. These rights are operational — you can exercise them by contacting b baje support at any time.
Right of Access
You have the right to request a copy of all personal data b baje holds about you. Upon a verified access request, b baje will provide a structured summary of your data within thirty (30) days, free of charge for reasonable requests.
Right to Rectification
If any personal data b baje holds about you is inaccurate or incomplete, you have the right to request correction. For identity data, correction may require you to submit updated verification documents to confirm the change.
Right to Erasure
You may request that b baje delete your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where processing is unlawful. This right is subject to mandatory legal retention obligations — see the Data Retention section above for details of which categories must be kept and for how long.
Right to Restrict Processing
You have the right to request that b baje restrict processing of your personal data in certain circumstances — for example, while the accuracy of data you have contested is being verified, or where you have objected to processing pending a determination of whether b baje's legitimate interests override your own.
Right to Data Portability
Where processing is based on your consent or on the performance of a contract, and is carried out by automated means, you have the right to receive a copy of the personal data you have provided to b baje in a structured, commonly used, machine-readable format (such as JSON or CSV).
Right to Object
You have the right to object to b baje processing your personal data on the basis of legitimate interests, including profiling for responsible gaming purposes. You also have an absolute right to object to processing of your data for direct marketing purposes at any time, without the need to provide a reason.
Rights Related to Automated Decision-Making
b baje does not make solely automated decisions that produce significant effects on you without human review. Where automated systems are used to flag accounts for action (e.g., a fraud detection flag), a trained b baje staff member reviews the flag before any consequential action is taken. You may request information about any automated processing that affects your account.
How to Exercise Your Rights
To exercise any of the rights listed above, contact b baje support via live chat (available 24/7 on Bangladesh Standard Time) or by emailing [email protected]. Please include your full name, registered email address, and a description of the right you wish to exercise. b baje may ask you to verify your identity before acting on your request to protect against fraudulent or unauthorised data access requests.
b baje will respond to all privacy rights requests within thirty (30) days of receipt of a verified request. If the complexity or volume of requests requires additional time, b baje will inform you of the extension and the reason within the initial thirty-day window.
30-Day Response Commitment
b baje commits to responding to all verified privacy rights requests within thirty (30) calendar days. For complex requests, this period may be extended by a further thirty days with notification and explanation provided to you within the initial thirty-day window.
No Fee for Standard Requests
Standard privacy rights requests — including access requests, rectification requests, and deletion requests — are handled free of charge. Where requests are manifestly unfounded, repetitive, or excessive, b baje reserves the right to charge a reasonable administrative fee or decline to act, with written reasons provided.
Contact for Privacy Matters
For all data protection and privacy enquiries, contact b baje's support team. Email: [email protected]. Support is available 24/7 on Bangladesh Standard Time (UTC+6).
Policy Updates & Contact
Changes to This Privacy Policy
b baje reviews and updates this Privacy Policy periodically to reflect changes in the platform's data processing activities, changes in applicable law, or changes in industry best practices. When material changes are made to this policy, b baje will notify registered account holders via email to their registered address and/or via a prominent notice on the platform at least fourteen (14) days before the updated policy takes effect.
The "Effective Date" shown at the top of this page and in the hero section above indicates the date from which the current version of the policy applies. If you continue to use the b baje platform after the effective date of a revised policy, you are deemed to have accepted the revised terms. If you do not agree to a revised policy, you should close your account before the revised policy's effective date.
Previous Versions
Previous versions of this Privacy Policy are archived and available on request by contacting b baje support. This allows you to review what policy applied at any particular point in time, which may be relevant for dispute resolution or legal purposes.
Governing Law
This Privacy Policy is governed by and construed in accordance with applicable law. Any disputes arising under or in connection with this Privacy Policy that cannot be resolved through b baje's standard support escalation process shall be subject to the exclusive jurisdiction of the competent courts in the applicable territory.
Contact b baje
If you have questions about this Privacy Policy, wish to exercise a privacy right, or wish to raise a concern about how b baje handles your personal data, please contact the b baje support team:
- Live Chat: Available 24/7 via the b baje platform, Bangladesh Standard Time (UTC+6)
- Email: [email protected] (plain text — not a clickable link)
- Response Time: Within 24 hours for general queries; within 30 days for formal privacy rights requests
b baje is committed to resolving privacy concerns fairly and transparently. If you are not satisfied with b baje's response to a privacy concern, you retain the right to escalate the matter to the relevant data protection authority in your jurisdiction.
Policy Change Notifications
When b baje makes material changes to this Privacy Policy, registered players will receive an email notification at least 14 days before the new version takes effect. Check your registered email inbox and ensure b baje support emails are not filtered to spam.
Authoritative Version
This Privacy Policy is published in English. In the event of any inconsistency between versions published in different languages, the English version shall be the authoritative and governing version for all interpretive and legal purposes.
Explore b baje With Confidence
Now that you understand exactly how b baje collects, uses, and protects your personal data, you can play with full confidence. Browse our casino games, live cricket betting, and slots — all with secure bKash and Nagad payment support in BDT.
Gambling involves financial risk. Play with money you can afford to lose. For adults aged 18 and above only. 18+