bajji Privacy Policy — Your Data, Protected

bajji ("bajji", "we", "us", "our") operates the online gaming platform available at bajji.club and through the bajji mobile application. bajji is the data controller responsible for the personal data collected through the platform. This means bajji determines the purposes and means of processing your personal data.

This Privacy Policy applies to all personal data collected by bajji in connection with your use of the bajji website, mobile application, customer support channels, and any other bajji services. It applies to all registered players and to visitors who browse the bajji platform without registering.

bajji collects personal data in three ways: data you provide directly, data collected automatically when you use the platform, and data received from third parties such as payment providers. Here is a full breakdown of what bajji collects and why.

bajji does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health data, except where required by law (for example, health-related information provided in connection with a responsible gaming self-exclusion request).

bajji uses your personal data only for legitimate purposes directly related to operating the platform and serving you as a player. We do not use your data for purposes that are incompatible with the reasons it was originally collected. Here is exactly how bajji uses your data:

• Account management: To create, maintain, and manage your bajji account, including verifying your identity and age during registration and ongoing KYC checks.
• Payment processing: To process deposits and withdrawals through bKash, Nagad, and Rocket, and to maintain accurate financial records of all transactions on your account.
• Platform operation: To deliver the games and services available on bajji, to personalise your experience, and to remember your preferences and settings.
• Security and fraud prevention: To detect, investigate, and prevent fraudulent activity, money laundering, bonus abuse, and other illegal or prohibited conduct on the bajji platform.
• Legal compliance: To comply with applicable laws and regulations, including anti-money laundering (AML) obligations, know-your-customer (KYC) requirements, and any requests from regulatory authorities.
• Customer support: To respond to your queries, resolve disputes, and provide assistance when you contact bajji support.
• Responsible gaming: To monitor your gaming activity for signs of problem gambling and to apply any responsible gaming limits or restrictions you have set on your account.
• Marketing communications: To send you promotional offers, bonus notifications, and platform updates — but only where you have opted in to receive such communications. You can opt out at any time through your account settings.
• Platform improvement: To analyse usage patterns, identify technical issues, and improve the bajji platform based on aggregated, anonymised data.

bajji processes your personal data on one or more of the following legal bases, depending on the specific purpose of the processing:

• Contract performance: Processing that is necessary to provide the bajji service to you under the Terms and Conditions you agreed to when registering your account. This includes account management, payment processing, and game delivery.
• Legal obligation: Processing that bajji is required to carry out under applicable law, including AML compliance, KYC verification, and responding to lawful requests from regulatory or law enforcement authorities.
• Legitimate interests: Processing that is necessary for bajji's legitimate business interests, provided those interests are not overridden by your rights and interests. This includes fraud prevention, platform security, and platform improvement through anonymised analytics.
• Consent: Processing based on your explicit consent, such as sending marketing communications. Where bajji relies on consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

bajji does not sell your personal data to any third party. Full stop. bajji shares your data only in the following limited circumstances, and only to the extent necessary for the stated purpose:

• Payment processors: bajji shares financial data with bKash, Nagad, and Rocket to process your deposits and withdrawals. These providers are bound by their own privacy policies and applicable financial regulations.
• Identity verification providers: bajji uses accredited third-party KYC service providers to verify your identity and age. These providers process your identity documents securely and are contractually prohibited from using your data for any other purpose.
• Game providers: Some games on bajji are provided by third-party game studios. These providers may receive limited technical data (such as session tokens) necessary to deliver the game. They do not receive your personal identity or financial data.
• IT and infrastructure providers: bajji uses cloud hosting and IT service providers to operate the platform. These providers act as data processors under bajji's instructions and are contractually bound to protect your data.
• Regulatory and law enforcement authorities: bajji will disclose your personal data to regulatory bodies, law enforcement agencies, or courts where required to do so by applicable law or a valid legal order.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of bajji's business, your personal data may be transferred to the acquiring entity. bajji will notify you of any such transfer and the acquiring entity will be bound by this Privacy Policy.

bajji uses cookies and similar tracking technologies on the bajji website and mobile application. Cookies are small text files stored on your device that help bajji recognise you, remember your preferences, and understand how you use the platform.

bajji uses the following categories of cookies:

• Essential cookies: These are strictly necessary for the bajji platform to function. They enable core features such as account login, session management, and security. You cannot opt out of essential cookies without disabling the platform entirely.
• Functional cookies: These remember your preferences and settings — such as your preferred language, display settings, and responsible gaming limits — so you don't have to re-enter them every time you visit bajji.
• Analytics cookies: These help bajji understand how players use the platform by collecting anonymised data about page visits, session duration, and feature usage. This data is used to improve the bajji experience. bajji uses aggregated, anonymised analytics data only.
• Marketing cookies: These are used to deliver relevant promotional content to you based on your activity on bajji. Marketing cookies are only placed with your consent. You can withdraw consent at any time through your browser settings or by contacting bajji support.

You can manage your cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of the bajji platform. For detailed information on the specific cookies bajji uses, contact bajji support.

bajji retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply:

• Account data: Retained for the duration of your account and for 5 years after account closure, in accordance with anti-money laundering regulations that require financial records to be kept for a minimum of 5 years.
• Transaction records: Retained for 7 years from the date of the transaction, as required by applicable financial regulations.
• KYC documents: Retained for 5 years after account closure or the completion of the business relationship, whichever is later.
• Support communications: Retained for 3 years from the date of the communication, to allow bajji to reference previous interactions in the event of a dispute.
• Marketing data: Retained until you withdraw consent or opt out of marketing communications, after which it is deleted within 30 days.
• Technical and usage data: Retained in anonymised, aggregated form for up to 2 years for platform analytics purposes.

When personal data is no longer required, bajji securely deletes or anonymises it so that it can no longer be associated with you as an individual.

bajji implements robust technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the bajji platform.
• Encryption at rest for all sensitive personal and financial data stored on bajji's servers.
• Access controls: bajji staff access to personal data is strictly limited on a need-to-know basis. All staff with access to personal data are trained in data protection and bound by confidentiality obligations.
• Two-factor authentication (2FA) available for all bajji player accounts to add an additional layer of security beyond your password.
• Regular security audits and penetration testing conducted by independent third-party security specialists.
• Incident response procedures: In the event of a data breach that poses a risk to your rights and freedoms, bajji will notify affected players and relevant authorities within the timeframe required by applicable law.

bajji respects your rights over your personal data. You can exercise any of the following rights at any time by contacting bajji support at [email protected]. bajji will respond to all valid requests within 30 days.

The bajji platform is strictly for adults aged 18 and over. bajji does not knowingly collect personal data from anyone under the age of 18. If bajji becomes aware that personal data has been collected from a minor, that data will be deleted immediately and the associated account will be closed.

If you are a parent or guardian and believe that your child has registered on bajji or provided personal data to bajji, please contact bajji support at [email protected] immediately. bajji will investigate and take appropriate action within 24 hours of receiving your report.

bajji uses age verification checks during registration and reserves the right to request proof of age at any time. Accounts where age cannot be verified will be suspended until verification is completed.

bajji reviews and updates this Privacy Policy periodically to reflect changes in our services, applicable laws, or industry best practices. The effective date at the top of this page always reflects the date of the most recent update.

When bajji makes material changes to this Privacy Policy — changes that significantly affect how we collect, use, or share your personal data — we will notify you by email to your registered address and by displaying a prominent notice on the bajji platform. We will give you reasonable advance notice before material changes take effect.

Your continued use of the bajji platform after the effective date of an updated Privacy Policy constitutes your acceptance of the updated policy. If you do not agree with the updated policy, you should stop using bajji and contact support to close your account.

If you have any questions, concerns, or requests relating to this Privacy Policy or bajji's handling of your personal data, please contact the bajji privacy team using the details below. bajji is committed to responding to all privacy-related enquiries within 24 hours.

• Email: [email protected] — use the subject line "Privacy Request" for the fastest routing.
• Live chat: Available directly on the bajji platform. Start a chat and select "Privacy and Data" from the topic menu.
• Response time: bajji acknowledges all privacy requests within 24 hours and provides a full response within 30 days. Complex requests may take longer, in which case bajji will notify you of the extended timeline.

If you are not satisfied with bajji's response to a privacy request, you have the right to escalate the matter to bajji's compliance team by requesting escalation through the support channel. bajji takes all privacy complaints seriously and will review escalated complaints at the senior management level.