Privacy Policy — bajijili

1. Information We Collect

bajijili collects personal data through multiple touchpoints across the Platform lifecycle — from the initial registration process through to ongoing account activity and customer support interactions. The categories of personal data we collect are described below.

1.1 Registration Data

When you create an account on bajijili, we collect the information you provide directly, including your full legal name, date of birth, mobile number, residential address (including city, district, and postal code), and your chosen account username. This data is collected to verify your identity, confirm your eligibility to use the Platform, and comply with age verification requirements.

1.2 Identity Verification (KYC) Data

As part of our Know Your Customer (KYC) process, you may be required to submit copies of government-issued identity documents such as your National Identity Card (NID), passport, or driving licence. We may also request a recent utility bill or bank statement as proof of address, and documentation confirming ownership of your payment method. This data is collected to fulfil our legal obligations and to protect the Platform against fraud and money laundering.

1.3 Financial Transaction Data

We collect records of all financial transactions carried out through your bajijili account. This includes deposit amounts, withdrawal requests, the payment method used (for example, bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, or City Bank), transaction reference numbers, timestamps, and transaction outcomes. This data is retained for financial compliance, dispute resolution, and fraud prevention purposes.

1.4 Gameplay and Betting Activity

We automatically record your betting and gaming activity on the Platform, including the games played, bet amounts, outcomes, session durations, and game preferences. This data is used to maintain accurate account records, calculate and pay winnings, and support responsible gaming monitoring tools.

1.5 Technical and Device Data

When you access bajijili, we automatically collect technical information about the device and network connection you use. This includes your IP address, browser type and version, operating system, device identifiers, mobile network operator, screen resolution, and referring URL. This data is used for security monitoring, fraud detection, and to optimise Platform performance for Bangladeshi users.

1.6 Communications Data

If you contact bajijili's support team — whether by email, live chat, or any other channel — we retain records of those communications, including the content of messages and the date and time of contact. This enables us to provide consistent support, track open issues, and improve our service quality over time.

2. How We Use Your Data

bajijili processes personal data only where there is a lawful basis for doing so. The primary bases on which we rely are: performance of the contract between you and bajijili (i.e., operating your account and delivering the services you have signed up for), compliance with applicable legal obligations, and our legitimate interests in operating a safe, fair, and commercially sustainable platform.

3. Data Sharing & Disclosure

bajijili does not sell personal data to third parties. We may, however, share specific categories of personal data with carefully selected third parties where it is necessary to operate the Platform, comply with legal obligations, or protect the interests of the Platform and its users.

• Game Software Providers: Providers such as Pragmatic Play, Evolution Gaming, Spribe, Ezugi, and Microgaming may receive pseudonymous player identifiers and session data necessary to deliver their games through the bajijili Platform. These providers are bound by confidentiality obligations and are not permitted to use this data for their own marketing purposes.
• Payment Service Providers: When you make a deposit or request a withdrawal via bKash, Nagad, Rocket, Upay, or a bank transfer, the relevant payment provider will receive the transaction data necessary to process your payment. Each provider operates its own privacy policy governing that data.
• Identity Verification Services: Third-party KYC and anti-money-laundering (AML) verification services may process your identity documents to assist bajijili in meeting its compliance obligations. These services operate under strict data processing agreements.
• Legal and Regulatory Disclosure: bajijili may disclose personal data to competent authorities, law enforcement bodies, or courts where we are required to do so by applicable law, court order, or regulatory mandate. In such cases, we will disclose only the minimum data required to satisfy the legal obligation.
• Business Transfers: In the event of a merger, acquisition, restructuring, or sale of all or part of bajijili's business, personal data held by the Platform may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and of any material changes to how your data is handled as a result.

In all cases where personal data is shared with a third-party processor, bajijili requires that such parties implement appropriate technical and organisational security measures and process the data only in accordance with our documented instructions.

4. Cookies & Tracking Technologies

bajijili uses cookies and similar tracking technologies to operate the Platform effectively, maintain your login session, remember your preferences, and gather aggregated analytics data that helps us improve the user experience for players across Bangladesh.

The cookies we use fall into the following categories:

• Strictly Necessary Cookies: These are essential to the operation of the Platform. They maintain your authenticated session, store your language and currency preferences (BDT), and enable secure navigation between pages. These cookies cannot be disabled without impairing the functionality of your account.
• Performance and Analytics Cookies: These cookies collect anonymised data about how visitors use the bajijili Platform — including which pages are visited most frequently, session durations, and error events. This data is used solely to improve Platform performance and is not linked to identifiable individuals.
• Functional Cookies: These cookies remember choices you have made, such as preferred deposit method or game category, so that we can deliver a more personalised experience on your next visit without requiring you to repeat your selections.
• Security Cookies: bajijili uses security-specific cookies to detect and prevent fraudulent login attempts, session hijacking, and cross-site request forgery. These are non-optional and are active for all sessions.

5. Data Retention & Storage

bajijili retains personal data for as long as is necessary to fulfil the purposes for which it was collected, including satisfying legal, regulatory, and financial reporting requirements. The following general retention guidelines apply:

• Active Account Data: Retained for the full duration of your registered account. This includes registration data, gameplay history, and transaction records.
• KYC and Identity Documents: Retained for a minimum of five (5) years following account closure, in accordance with standard anti-money-laundering record-keeping requirements.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, for financial audit and regulatory compliance purposes.
• Support and Communications Records: Retained for two (2) years following resolution of the relevant support interaction or complaint.
• Technical and Device Logs: Retained for up to ninety (90) days for security monitoring purposes, after which they are anonymised or deleted.

Following the expiry of the applicable retention period, personal data is either securely deleted or anonymised so that it can no longer be attributed to any identifiable individual. Anonymised, aggregated data may be retained indefinitely for statistical analysis and Platform improvement purposes.

All personal data is stored on servers protected by industry-standard physical and logical security controls. bajijili does not transfer personal data to jurisdictions that do not maintain adequate data protection standards without first implementing appropriate contractual safeguards.

6. Your Privacy Rights

As a player on bajijili, you have the following rights with respect to your personal data. To exercise any of these rights, please contact our support team at support@bajijili with your registered account details and a clear description of your request. We will respond within a reasonable period, and in any case within thirty (30) calendar days of receipt.

• Right of Access: You have the right to request a copy of the personal data that bajijili holds about you, along with information about the purposes for which it is processed and the categories of recipients to whom it has been disclosed.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or supplement it without undue delay.
• Right to Erasure: In certain circumstances, you have the right to request that bajijili delete the personal data it holds about you. This right is subject to our overriding legal obligations — for example, we cannot erase financial transaction records that we are required to retain for regulatory compliance.
• Right to Restriction: You may request that bajijili restrict the processing of your personal data in specific circumstances, such as while a dispute about the accuracy of the data is being resolved.
• Right to Data Portability: Where processing is based on your consent or on a contractual basis and is carried out by automated means, you may request that we provide your personal data to you in a structured, commonly used, and machine-readable format.
• Right to Withdraw Consent: Where we rely on your consent as the legal basis for processing (for example, for marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

7. Data Security Measures

bajijili implements a layered approach to data security, combining technical controls, organisational procedures, and continuous monitoring to protect personal data against unauthorised access, disclosure, alteration, or destruction.

• All data in transit is protected by 256-bit SSL/TLS encryption. This applies to all connections between your browser or mobile device and the bajijili Platform, including during login, deposit, withdrawal, and account management sessions.
• Sensitive data stored at rest — including identity documents, payment data, and account credentials — is encrypted using industry-standard encryption algorithms. Passwords are stored as one-way cryptographic hashes and are never stored in plaintext.
• Access to personal data within bajijili's internal systems is restricted on a strict need-to-know basis. Access controls are reviewed regularly and any access by staff members is logged for audit purposes.
• bajijili maintains an incident response plan to detect, contain, and respond to data security breaches in a timely manner. In the event of a breach that poses a risk to affected players, we will notify impacted users as quickly as practicable.
• We strongly encourage all players to enable two-factor authentication (2FA) on their bajijili account for an additional layer of login security. Players are also advised to use unique, strong passwords and to avoid sharing account credentials with any third party.

8. Policy Updates & Contact

bajijili reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable legal requirements, or the operational structure of the Platform. When we make material changes to this Policy, we will update the "Last Updated" date at the top of this page and, where appropriate, notify registered players via the contact details held on their account.

We encourage you to review this Privacy Policy periodically to stay informed about how bajijili handles your personal data. Your continued use of the Platform after any update to this Policy constitutes your acknowledgement of the changes.

If you have any questions, concerns, or requests relating to this Privacy Policy or to bajijili's handling of your personal data, please contact our support team. Our dedicated privacy team monitors incoming requests and will respond within 30 calendar days of receipt. Support is available 24/7 in English across Bangladesh Standard Time (BST, UTC+6).

18+ Responsible Gaming Reminder: bajijili is an adults-only platform. Players must be 18 years of age or older to register and use this service. If you have concerns about your gambling behaviour, visit our Responsible Gaming page or contact our support team.