Privacy Policy — bajii365

bajii365 collects personal information from players in Bangladesh at various points during the account lifecycle — from initial registration through to ongoing account activity. The categories of personal data we collect are as follows:

Identity & Contact Information: When you register an account on bajii365, we collect your full legal name, date of birth, residential address (including district, division, and postal code within Bangladesh), email address, and the mobile number linked to your preferred payment method (bKash, Nagad, Rocket, or Upay). This information is used to verify your identity, comply with age-restriction obligations, and communicate with you about your account.

KYC Verification Documents: To comply with our Know Your Customer (KYC) obligations and to prevent underage gambling, bajii365 may request copies of government-issued photo identification (such as a National ID card, passport, or driving licence) and proof of address. These documents are processed securely and retained for the period set out in Section 5 of this Policy.

Financial Data: We collect records of all deposits, withdrawals, and wager transactions processed through your bajii365 account. This includes the payment method used, the transaction amount in BDT, the transaction reference number, and the timestamp. We do not store full payment card numbers or mobile wallet PINs — these are handled directly by your payment provider.

Technical & Usage Data: When you access bajii365, our servers automatically record certain technical information including your IP address, browser type and version, operating system, device type (mobile or desktop), referring URL, pages visited within the Platform, session duration, and clickstream data. This information helps us maintain platform security, diagnose technical issues, and improve the user experience.

Communications Data: If you contact bajii365 support via live chat or email, we retain records of those communications including the content of your messages, the date and time of contact, and the resolution outcome. These records are used for quality assurance, staff training, and dispute resolution.

Responsible Gaming Data: If you make use of bajii365's responsible gaming tools — such as setting deposit limits, activating a time-out period, or requesting self-exclusion — we retain records of those actions and their effective dates to ensure they are enforced correctly and consistently.

bajii365 uses the personal data it collects for specific, legitimate purposes. We do not process personal data in ways that are incompatible with the purposes for which it was originally collected. The primary purposes for which we use your data are set out in the table below:

Marketing Communications: bajii365 will only send you promotional emails, SMS notifications, or in-platform messages if you have provided explicit consent to receive marketing communications at the time of registration or through your account notification settings. You may withdraw this consent at any time without affecting your ability to use the Platform. Withdrawal of marketing consent does not affect the lawfulness of any processing carried out prior to the withdrawal.

bajii365 does not sell, rent, lease, or otherwise trade your personal data to third parties for commercial purposes. However, in order to operate the Platform and fulfil our legal obligations, we share data with a limited number of trusted categories of third party, described below:

Payment Processors: To process your deposits and withdrawals, bajii365 shares the minimum necessary financial and identity data with the relevant payment provider — bKash, Nagad, Rocket, Upay, Visa, or Mastercard. Each payment partner operates under its own privacy policy and data security standards. bajii365 selects payment partners who maintain data protection standards consistent with our own.

Game Software Providers: bajii365's casino games and sports data feeds are powered by third-party providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive anonymised or pseudonymised session data (such as game round IDs and wager amounts) necessary to operate the games and validate results. They do not receive your full name, address, or payment details.

Identity Verification Services: To conduct KYC checks efficiently and securely, bajii365 may use third-party identity verification platforms that cross-reference the documents you submit against official databases. These services are bound by strict confidentiality obligations and process data solely for the purpose of identity verification.

Legal & Regulatory Authorities: bajii365 may be required by applicable law, court order, or regulatory direction to disclose personal data to relevant authorities. In such circumstances, bajii365 will disclose only the minimum data legally required and will, where legally permissible, notify the affected player of the disclosure.

Fraud Prevention Networks: To protect the Platform and its players from fraud, bajii365 participates in industry fraud-prevention information sharing. This may involve checking account data against shared databases of known fraudulent actors. No marketing use is made of data shared in this context.

bajii365 uses cookies and similar tracking technologies (such as web beacons and local storage) to operate the Platform efficiently, maintain your session when you are logged in, personalise your experience, and gather analytical data about how the Platform is used. Cookies are small text files placed on your device by your web browser when you visit bajii365.

The cookies used on bajii365 fall into the following categories:

• Strictly Necessary Cookies: These cookies are essential for the Platform to function. They manage your login session, maintain your game state, and process transactions. Without these cookies, the Platform cannot operate correctly. They cannot be disabled.
• Performance & Analytics Cookies: These cookies collect anonymised information about how players use bajii365 — which pages are visited most, which games are played, and where errors occur. This data is used to improve the Platform. No personally identifiable information is collected in this category.
• Functionality Cookies: These cookies remember your preferences, such as your language setting, preferred payment method, and display configuration. They are not strictly necessary but improve your experience on return visits.
• Marketing & Retargeting Cookies: These cookies are only placed if you have consented to receive personalised promotional content. They allow bajii365 to deliver relevant offers based on your game activity and preferences. You may opt out of this category at any time via your account settings.

Managing Cookies: Most browsers allow you to block or delete cookies through their settings. Please be aware that disabling strictly necessary cookies will impair your ability to log in and use the Platform. Disabling performance or marketing cookies will not affect your core experience on bajii365.

bajii365 retains personal data only for as long as is necessary for the purposes described in this Policy, or as required by applicable law and regulatory obligations. The retention periods for each category of data are set out below:

Once the applicable retention period expires, personal data is securely deleted or irreversibly anonymised so that it can no longer be associated with an identifiable individual.

bajii365 implements a layered approach to data security, combining technical controls, operational procedures, and staff training to protect your personal information from unauthorised access, disclosure, alteration, or destruction.

Technical Controls: All data in transit between your browser or app and our servers is encrypted using TLS 1.3 with 256-bit AES encryption. Data at rest is encrypted using AES-256. Our infrastructure is hosted behind enterprise-grade firewalls with intrusion detection and prevention systems active at all times. Regular vulnerability scans and penetration tests are conducted by independent security specialists.

Access Controls: Access to personal data within bajii365 is granted on a strict need-to-know basis. Staff accounts are protected by multi-factor authentication, and access logs are reviewed regularly by the security team. No bajii365 employee is authorised to access your full payment credentials or National ID document without a logged, justified reason.

Incident Response: bajii365 maintains a documented data breach response procedure. In the event of a security incident that is likely to result in a risk to your rights or freedoms, we will notify affected players without undue delay and take immediate remedial action to contain the incident.

Your Role in Security: While bajii365 takes extensive measures to protect your data, you also play a role in keeping your account secure. You should choose a strong, unique password for your bajii365 account, never share your login credentials with anyone, and contact our support team immediately at support@bajii365 if you suspect unauthorised access to your account.

As a player on bajii365, you hold a number of rights in relation to your personal data. bajii365 is committed to facilitating the exercise of these rights promptly and without unnecessary obstruction. Your rights are as follows:

• Right of Access: You have the right to request a copy of all personal data that bajii365 holds about you. We will provide this in a structured, commonly used format within 30 days of receiving a verified request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update most account details directly through your Account Settings page; for KYC document corrections, please contact support.
• Right to Erasure: You may request that bajii365 delete your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where the data has been processed unlawfully. Please note that this right is subject to overriding legal retention obligations — for example, transaction records required for AML compliance cannot be deleted on request alone.
• Right to Restriction of Processing: In certain circumstances (for example, while the accuracy of your data is being verified), you may request that bajii365 restrict the processing of your data to storage only.
• Right to Data Portability: Where processing is based on your consent or on a contract with you, you have the right to receive your personal data in a structured, machine-readable format that can be transferred to another service provider.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes at any time. You also have the right to object to processing based on legitimate interests, though this right may be overridden where bajii365 can demonstrate compelling legitimate grounds.
• Right to Withdraw Consent: Where processing is based on your consent — for example, consent to receive marketing communications — you may withdraw that consent at any time without penalty. Withdrawal does not affect the lawfulness of processing conducted before the withdrawal.

To exercise any of the rights listed above, please contact the bajii365 data team via 24/7 live chat or by emailing support@bajii365. We will acknowledge your request within 5 business days and aim to complete it within 30 days. Complex requests may take up to 90 days, in which case we will notify you of the extended timeframe and the reason for the delay.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way bajii365 handles your personal data, please get in touch with our support team using the contact details below. We take all privacy-related enquiries seriously and will respond in English within the timeframes stated in Section 7.

Email: support@bajii365 — Please include "Privacy Query" in your subject line to ensure your message is routed to the correct team member.

Live Chat: Available 24/7 directly within the bajii365 platform. Our English-language support agents are available around the clock and are the fastest way to raise an urgent data protection concern.

Response Times: General privacy enquiries are typically answered within 24 hours. Formal data subject requests (access, erasure, portability) are acknowledged within 5 business days and completed within 30 days.

Policy Updates: bajii365 reviews this Privacy Policy periodically and updates it when there are material changes to how we process personal data, changes to applicable law or regulatory guidance, or the introduction of new data processing activities. When a material update is made, registered players will be notified via a platform message on next login. The "Last Updated" date at the top of this Policy will always reflect the date of the most recent revision. Continued use of bajii365 following notification of a policy update constitutes acceptance of the revised policy.