baj Privacy Policy

Section 02

What Information We Collect

2.1 Information You Provide Directly

This includes information you provide directly when creating an account on baj or using our services:

• Full name and date of birth (for age verification — to confirm 21+)
• Mobile number and email address
• Password (stored in encrypted form — never stored in plain text)
• National ID card or other identity document details (when identity verification is required)
• Financial transaction details, such as bKash, Nagad, or Rocket account numbers

2.2 Automatically Collected Information

The following information may be collected automatically while you use the platform:

• IP address and Device ID
• Browser type, operating system, and screen resolution
• Session duration, page visit patterns, and navigation paths
• Cookie and local storage data
• Device location when using the mobile app (if permission has been granted)

2.3 Information Received from Third Parties

For the purpose of identity verification or fraud prevention, we may receive a limited amount of information from trusted verification service providers. Such information is protected in the same way.

Section 03

Purpose of Using Your Information

baj uses your personal information only for specific, lawful, and transparent purposes. No information is collected or used unnecessarily.

• Account Management: To handle registration, login, identity verification, and account security.
• Financial Transaction Processing: To complete deposits and withdrawals properly.
• Customer Service: To resolve your complaints or questions quickly and effectively.
• Platform Improvement: To monitor user experience and improve the quality of our services.
• Fraud Prevention: To detect unusual activity and protect account security.
• Sending Notifications: To inform you of important service updates, transaction confirmations, or security alerts.
• Responsible Gaming Tools: To effectively manage limit-setting and self-exclusion features.

We believe that building healthy and responsible habits is important for every user. To learn more, read our Responsible Gaming Guidelines.

Section 04

Information Storage and Security

4.1 Retention Period

We retain your information for as long as your account is active. Even after an account is closed, certain information may be kept for a defined period due to legal obligations or dispute resolution needs. Once that period has passed, the information is securely deleted or anonymised so that you can no longer be identified.

4.2 Technical Security Measures

The baj platform uses industry-standard security technologies:

• All data transmissions are secured through SSL/TLS encryption.
• Passwords are stored using strong hashing algorithms.
• An automated monitoring system is in place to detect suspicious login attempts.
• Server and database access is strictly controlled and regularly audited.
• Additional account security is ensured through OTP verification.

4.3 User Responsibilities

Alongside our technical safeguards, you also have certain responsibilities. Do not share your password or OTP with anyone. Avoid clicking on unfamiliar or suspicious links. If you believe your account has been accessed without authorisation, notify our support team immediately.

Section 05

Sharing Information with Third Parties

baj never sells your personal information or transfers it to third parties for commercial purposes. However, information may be shared in the following limited circumstances:

5.1 Service Provider Partners

Necessary information is shared with trusted partners for payment processing (bKash, Nagad, Rocket, and bank transfers), identity verification, and technology infrastructure management. These partners operate under strict confidentiality agreements and may only use the information for their designated tasks.

5.2 Legal Requirements

If we are required to comply with a valid order from a court or competent authority, we will provide the relevant information. In such cases, only the specific information requested will be disclosed.

5.3 Fraud Prevention and Security

If a user is found to be engaged in fraudulent activity or poses a threat to platform security, relevant information may be shared with the appropriate authorities or security specialists.

Section 06

Cookies and Tracking Technologies

baj uses cookies and similar tracking technologies to keep the website and app running properly.

6.1 Types of Cookies

• Essential Cookies: Required to maintain login sessions and ensure security — these cannot be disabled.
• Functional Cookies: Used to remember your preferences, language settings, and personalised services.
• Analytics Cookies: Used to understand website usage patterns — these can be disabled.

6.2 Cookie Controls

You can control or reject most cookies by changing your browser settings. However, disabling essential cookies may cause some platform features to not work correctly.

Section 07

User Rights

You have specific rights over your personal information. baj fully recognises these rights.

• Right to Know: You can find out what information we hold about you.
• Right to Correction: You can request that inaccurate or incomplete information be corrected.
• Right to Deletion: Subject to certain conditions, you can request that your information be deleted (where there is no legal obligation to retain it).
• Right to Object: You can object to the processing of your information in certain cases.
• Data Portability: You can request your information in a structured, readable format.

To exercise these rights, contact our customer service team. We will process your request in a timely manner. If you have general questions about this Policy, our Frequently Asked Questions page may also be helpful.

Section 08

Protection of Minors

All services on the baj platform are intended solely for persons aged 21 or older. We do not knowingly collect information from anyone under the age of 21. Age verification is in place at the time of registration, and any account that does not meet this requirement will be closed.

If a parent or guardian believes their child has accidentally registered on baj, please contact us immediately — we will arrange to delete the relevant account and information without delay.

Section 09

International Data Transfers

Our servers and infrastructure may be located in various countries. If information is transferred outside Bangladesh, it is done only under the necessary security measures to ensure your data remains protected. baj ensures that countries or services to which data is sent maintain an equivalent or higher level of privacy protection.

Section 10

Changes to This Policy

baj may update this Privacy Policy from time to time. If any significant changes are made, we will post a notice on the platform or inform you through your registered contact details. Continued use of the platform after such changes will be considered as your acceptance of the updated Policy.

We always recommend that you visit this page regularly. The date of any changes will be clearly stated at the top of the page under "Last Updated".