Baji Apps Privacy Policy — How We Handle Your Personal Data

Baji apps is committed to protecting the privacy of every player who uses the platform. This Privacy Policy explains in plain language what personal data baji apps collects, why it is collected, how it is used, who it may be shared with, and how long it is kept. It also explains the rights you have over your own data and how to exercise them.

This policy applies to all personal data collected through the baji apps website, the Android mobile application, customer support interactions, and any other channel through which you interact with the platform. It does not apply to third-party websites or services that may be linked from baji apps — those services operate under their own privacy policies.

Baji apps processes personal data in accordance with applicable data protection principles, including purpose limitation, data minimisation, accuracy, storage limitation, and security. We only collect what we need, we only use it for the purposes stated here, and we do not keep it longer than necessary.

Baji apps collects personal data in two ways: data you provide directly when registering or using the platform, and data collected automatically as you use the service.

Data you provide directly:

• Mobile phone number (used as your primary account identifier)
• Full name (required for identity verification and withdrawal processing)
• Date of birth (required to verify you are 18 or over)
• National ID or passport number (required for KYC verification above standard thresholds)
• Payment account details (mobile banking number for bKash, Nagad, or Rocket)
• Communications you send to the baji apps support team

Data collected automatically:

• Device type, operating system version, and app version
• IP address and approximate geographic location
• Session duration, pages visited, and features used within the app
• Transaction history including deposits, withdrawals, bets placed, and game results
• Login timestamps and authentication events

Baji apps uses the personal data it collects for the following purposes only. We do not use your data for any purpose not listed here without first obtaining your explicit consent.

• Account management: Creating and maintaining your baji apps account, processing logins, and managing account settings.
• Payment processing: Verifying and processing deposits and withdrawals through bKash, Nagad, and Rocket.
• Identity verification: Confirming your age and identity as required by our responsible gaming and anti-fraud policies.
• Customer support: Responding to your queries, resolving disputes, and providing assistance when you contact the support team.
• Fraud prevention and security: Detecting and preventing unauthorised access, bonus abuse, money laundering, and other prohibited activities.
• Platform improvement: Analysing usage patterns to improve the baji apps experience, fix bugs, and develop new features.
• Promotional communications: Sending you bonus offers, event notifications, and platform updates — only if you have opted in to receive them.
• Legal compliance: Meeting our obligations under applicable laws and regulations, including responding to lawful requests from authorities.

Baji apps processes your data on the legal bases of contractual necessity (to provide the service you signed up for), legitimate interests (fraud prevention and platform security), legal obligation (compliance with applicable laws), and consent (marketing communications).

Baji apps does not sell your personal data. We share data only in the limited circumstances described below, and only to the extent necessary for the stated purpose.

• Payment providers: Your mobile banking number and transaction details are shared with bKash, Nagad, or Rocket solely to process your deposits and withdrawals. These providers operate under their own privacy policies and security standards.
• Game providers: Third-party game studios that supply games on baji apps may receive anonymised session data to support game functionality and fairness auditing. They do not receive your name, contact details, or payment information.
• Identity verification services: Where KYC verification is required, your identity documents may be processed by a third-party verification provider. This data is used solely for verification and is not retained by the provider beyond the verification process.
• Legal and regulatory authorities: Baji apps will disclose personal data to law enforcement, regulatory bodies, or other authorities when required to do so by law, or when we have a good-faith belief that disclosure is necessary to prevent fraud, protect safety, or comply with a legal obligation.

The baji apps website uses cookies and similar tracking technologies to improve your browsing experience, keep you logged in, and understand how the platform is being used. The baji apps Android application does not use browser cookies but may use equivalent device-level identifiers for the same purposes.

Types of cookies used by baji apps:

• Essential cookies: Required for the platform to function. These include session cookies that keep you logged in and security cookies that protect against cross-site request forgery. These cannot be disabled.
• Functional cookies: Remember your preferences such as language settings and display options. Disabling these may affect your experience.
• Analytics cookies: Collect anonymised data about how users navigate the platform. This helps baji apps identify and fix usability issues. No personally identifiable information is included in analytics data.

You can manage cookie preferences through your browser settings. Note that disabling essential cookies will prevent you from logging in to baji apps. Baji apps does not use advertising or tracking cookies that follow you across other websites.

Baji apps retains your personal data for as long as your account is active and for a defined period after account closure. Retention periods are determined by the type of data and the legal or operational reason for keeping it.

• Account data (name, mobile number, date of birth): Retained for the duration of your account and for up to five years after closure for compliance purposes.
• Transaction records (deposits, withdrawals, bets): Retained for a minimum of five years to meet financial record-keeping obligations.
• Identity verification documents: Retained for the period required by applicable KYC regulations, typically five years from the date of verification.
• Support communications: Retained for two years from the date of the last interaction, or longer if the communication relates to an ongoing dispute.
• Device and session data: Retained for 12 months on a rolling basis for security and fraud prevention purposes.

When data reaches the end of its retention period, it is securely deleted or anonymised so that it can no longer be linked to you as an individual. You can request early deletion of data that is not subject to a legal retention requirement by contacting the support team.

Baji apps implements technical and organisational security measures designed to protect your personal data against unauthorised access, loss, alteration, or disclosure. These measures include:

• TLS encryption for all data transmitted between your device and the baji apps servers.
• Encryption at rest for all stored personal data and payment records.
• Access controls that restrict which staff members can view personal data, based on their role and the minimum necessary access principle.
• Regular security reviews and vulnerability assessments of the platform infrastructure.
• Two-factor authentication options for player accounts to reduce the risk of unauthorised login.

While baji apps takes security seriously and invests in robust protections, no system is completely immune to risk. In the event of a data breach that is likely to affect your rights or interests, baji apps will notify affected players as quickly as possible and take immediate steps to contain and remediate the breach.

As a baji apps player, you have the following rights over your personal data. To exercise any of these rights, contact the support team using the details in Section 11. We will respond to all valid requests within a reasonable timeframe.

• Right of access: You can request a copy of all personal data baji apps holds about you, including what it is, where it came from, and how it is being used.
• Right to rectification: If any of your personal data is inaccurate or incomplete, you can request that it be corrected. For account details, many fields can be updated directly from your account settings.
• Right to erasure: You can request deletion of your personal data where it is no longer necessary for the purpose it was collected, subject to any legal retention obligations.
• Right to restrict processing: In certain circumstances, you can request that baji apps stops actively processing your data while retaining it — for example, while a dispute is being resolved.
• Right to data portability: You can request your personal data in a structured, machine-readable format so that you can transfer it to another service if you choose.
• Right to object to marketing: You can opt out of promotional communications at any time, either through your account settings or by contacting support. Opting out of marketing does not affect service-related communications.

Baji apps will not charge a fee for handling data rights requests unless a request is manifestly unfounded or excessive. In such cases, we will explain the reason for any charge before proceeding.

Baji apps is strictly for adults aged 18 and over. The platform does not knowingly collect personal data from individuals under the age of 18. Age verification is a mandatory step in the registration and withdrawal process.

If baji apps becomes aware that personal data has been collected from a minor, that data will be deleted immediately and the associated account will be closed. If you believe that a minor has registered on baji apps, please contact the support team immediately so that the account can be reviewed and closed.

Baji apps may update this Privacy Policy from time to time to reflect changes in the platform, applicable laws, or our data practices. When changes are made, the "Last Updated" date at the top of this page will be revised accordingly.

For significant changes that materially affect how your data is used, baji apps will notify registered players via their account contact details before the changes take effect. Minor clarifications or administrative updates may be made without individual notification.

Your continued use of baji apps after any changes to this Privacy Policy constitutes your acceptance of the updated policy. If you do not agree with any changes, you should stop using the platform and contact support to close your account.

If you have any questions about this Privacy Policy, want to exercise your data rights, or need to report a privacy concern, please contact the baji apps support team. We are available 24 hours a day, 7 days a week.

When contacting us about a data rights request, please include your registered mobile number and a brief description of your request. This helps us locate your account and process your request as efficiently as possible. We aim to respond to all privacy-related queries within 72 hours.