Privacy Policy – How bdbaje Protects Your Data

1Introduction and Scope

bdbaje ("we", "us", "our", or "the Platform") is committed to protecting the personal information of every player who accesses or uses the bdbaje website at https://bdbaje.bar. This Privacy Policy describes the types of personal data we collect, the purposes for which we process it, the parties with whom we may share it, and the rights available to you as a data subject.

This Privacy Policy applies to all users of the bdbaje Platform, including registered account holders, visitors browsing without an account, and any individual who communicates with our customer support team. By using the Platform in any capacity, you acknowledge that you have read and understood this policy and consent to the data practices described herein.

This policy should be read in conjunction with the bdbaje Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference.

2Information We Collect

bdbaje collects personal information through several channels. The categories of data we may collect include, but are not limited to, the following:

• Registration Data: When you create an account, we collect your full name, date of birth, email address, phone number, and any other information provided at sign-up;
• Identity Verification Data: To comply with our know-your-customer (KYC) obligations, we may collect copies of government-issued identity documents (e.g., National ID card, passport, or driving licence), proof of address, and in some cases a selfie or live photo for identity confirmation;
• Financial Data: Payment method details, transaction histories, deposit and withdrawal amounts, and the mobile financial service accounts (e.g., bKash, Nagad, Rocket) linked to your bdbaje account. We do not store full card numbers or sensitive payment credentials directly on our servers;
• Usage and Technical Data: IP address, device type, browser type, operating system, session duration, pages visited, game history, bet records, and interaction logs. This data is collected automatically when you use the Platform;
• Communication Data: Content of messages, emails, or live chat conversations between you and the bdbaje support team, including any attachments or documents you share during those interactions;
• Preference Data: Language preferences, notification settings, self-exclusion elections, deposit limit configurations, and other personalisation choices made within your account.

3How We Use Your Information

bdbaje processes personal data only for lawful, specified, and legitimate purposes. The primary purposes for which we use your information are:

• Account Management: To create, maintain, verify, and administer your bdbaje account and to authenticate your identity each time you log in;
• Transaction Processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, and other approved payment partners, and to maintain accurate financial records;
• Legal Compliance: To meet our obligations under applicable anti-money laundering (AML) laws, know-your-customer (KYC) regulations, and any other legal or regulatory requirements that apply to online gambling platforms operating in or serving customers in Bangladesh;
• Responsible Gaming: To monitor gameplay patterns for signs of problem gambling, to enforce self-exclusion requests, to apply deposit limits elected by players, and to ensure that only eligible adults aged 21 and above access our services;
• Customer Support: To respond to enquiries, resolve complaints, and provide assistance with account, payment, or gameplay issues;
• Platform Improvement: To analyse usage data, identify technical issues, improve game offerings, and optimise the overall user experience on the bdbaje Platform;
• Security and Fraud Prevention: To detect, investigate, and prevent fraudulent activity, money laundering, collusion, bot usage, and any other prohibited conduct described in our Terms & Conditions;
• Marketing Communications: Where you have provided explicit consent, to send you promotional offers, bonus notifications, and news about new games or features via email or SMS. You may withdraw consent at any time through your account settings.

4Legal Basis for Processing

bdbaje processes your personal data on one or more of the following legal bases, depending on the context and nature of the processing activity:

• Contractual Necessity: Processing is necessary to perform our contract with you — specifically to operate your account and deliver the services you have requested;
• Legal Obligation: Processing is required to comply with applicable laws, including AML obligations, age verification requirements, and record-keeping mandates;
• Legitimate Interests: Processing is necessary for our legitimate interests in operating a secure, fraud-free platform, provided those interests are not overridden by your fundamental rights;
• Consent: For optional processing activities such as direct marketing communications, we rely on your freely given, specific, and informed consent, which you may withdraw at any time without affecting the lawfulness of prior processing.

5Cookies and Tracking Technologies

bdbaje uses cookies and similar tracking technologies to enhance your experience on the Platform. Cookies are small text files placed on your device when you visit the site. We use the following categories of cookies:

• Essential Cookies: Strictly necessary for the Platform to function, including session management, login authentication, and security tokens. These cannot be disabled without affecting the usability of the site;
• Analytics Cookies: Used to collect anonymised usage statistics that help us understand how players navigate the Platform and where improvements can be made;
• Preference Cookies: Used to remember your account settings, language preferences, and display preferences between sessions;
• Marketing Cookies: Used, where consented to, to deliver relevant promotional content. You may opt out of marketing cookies via your browser settings or account preferences.

You can manage cookie preferences through your browser's built-in controls. Disabling essential cookies may impair your ability to use certain features of the bdbaje Platform.

6Sharing of Personal Data

bdbaje does not sell, rent, or trade your personal information to any third party for their own commercial purposes. We may, however, share your data with carefully selected third parties in the following limited circumstances:

• Payment Service Providers: We share necessary transaction data with bKash, Nagad, Rocket, Upay, and other approved payment processors to complete deposits and withdrawals;
• Identity Verification Partners: We may share identity documents and related data with licensed KYC and AML service providers for the purpose of verifying your identity;
• Game Technology Providers: Data required to deliver game services may be processed by our game suppliers, including Pragmatic Play, Evolution Gaming, Ezugi, Spribe, and Microgaming, under strict data processing agreements;
• Legal and Regulatory Authorities: We may disclose personal data to law enforcement agencies, regulatory bodies, or courts where we are required to do so by applicable law or a valid legal order;
• Fraud Prevention Services: We may share data with specialist fraud detection providers to protect the Platform and its users from financial crime.

All third parties with whom we share personal data are contractually obligated to process that data only for the specified purpose and to maintain adequate security standards.

7Data Retention

bdbaje retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. Our general retention guidelines are as follows:

• Active Account Data: Retained for the lifetime of your account plus a minimum of five (5) years following account closure, to comply with financial record-keeping obligations;
• Transaction Records: Retained for a minimum of five (5) years from the date of the transaction;
• KYC Documentation: Retained for a minimum of five (5) years from account closure or the date of the last transaction, whichever is later;
• Support Correspondence: Retained for three (3) years from the date of the last communication, unless the subject matter requires longer retention;
• Marketing Consent Records: Retained for the duration of the consent period and for a reasonable period thereafter to demonstrate compliance.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to any identifiable individual.

8Data Security

bdbaje implements industry-standard technical and organisational measures to protect your personal information against unauthorised access, disclosure, alteration, or destruction. These measures include:

• Transport Layer Security (TLS / SSL) encryption for all data transmitted between your device and our servers;
• Encryption of sensitive data fields at rest within our database systems;
• Strict access controls ensuring that personal data is accessible only to authorised personnel on a need-to-know basis;
• Regular internal security reviews, penetration testing, and vulnerability assessments;
• Multi-factor authentication requirements for administrative access to systems that hold personal data.

While we take every reasonable precaution, no data transmission over the internet or electronic storage system can be guaranteed as completely secure. If you believe your account has been compromised, you must contact our support team immediately at [email protected].

9Your Rights as a Data Subject

As a user of the bdbaje Platform, you have the following rights with respect to your personal data. To exercise any of these rights, please contact us at [email protected]:

We will respond to all valid data subject requests within 30 days of receipt. Where a request is complex or we receive a high volume of requests, we may extend this period by a further 60 days, in which case we will notify you of the extension and the reason for it.

10Children and Minors

The bdbaje Platform is strictly intended for adults aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. If we become aware that a minor has registered an account or submitted personal data, we will suspend the account immediately, delete the associated data, and return any deposited funds where technically possible.

If you believe that a person under the age of 21 has provided personal data to bdbaje, please contact us promptly at [email protected] so that we can take appropriate remedial action.

11Links to Third-Party Services

The bdbaje Platform may reference the names of third-party payment providers and game suppliers in an informational context. bdbaje is not responsible for the privacy practices of any third-party service, and this Privacy Policy applies solely to data processed by bdbaje in connection with your use of the Platform. We encourage you to review the privacy policies of any third-party services you use independently.

12Changes to This Privacy Policy

bdbaje reserves the right to update or revise this Privacy Policy at any time. When material changes are made, we will notify registered users by posting a prominent notice on the Platform or by sending an email to the address associated with your account. The "Last Updated" date at the top of this policy will be revised accordingly.

Your continued use of the Platform following any such notification constitutes acceptance of the updated Privacy Policy. If you do not agree with the revised terms, you must cease using the Platform and close your account.

13Contact and Data Enquiries

If you have any questions, concerns, or requests regarding this Privacy Policy or the way in which bdbaje handles your personal data, please contact our support team using the details below. We aim to acknowledge all privacy-related enquiries within 48 hours.

Email: [email protected]
Platform: https://bdbaje.bar
Response Time: Within 48 hours of receipt