Privacy Policy
bajj365

1. Data We Collect

bajj365 collects personal data from you directly (when you register, deposit, or contact support), automatically (when you browse or interact with the platform), and from third parties (such as identity verification and payment processing partners). The categories of data we collect are described below.

1.1 Registration Data

When you create a bajj365 account, we collect:

• Full legal name as it appears on your national identification document;
• Date of birth (to verify you are 18 years of age or older);
• Residential address, including city and district (e.g., Dhaka, Chittagong, Sylhet, Khulna);
• Email address;
• Mobile phone number (used for account security and payment verification);
• Username and encrypted password hash (we never store your password in plain text).

1.2 Identity Verification Data

bajj365 is required to verify the identity of all players before processing withdrawals above a defined threshold and at other risk-based trigger points. To complete identity verification (KYC — Know Your Customer), we may collect:

• Scanned copy or photograph of a government-issued photo ID (National Identity Card, passport, or driving licence);
• Proof of residential address (utility bill, bank statement, or official correspondence dated within 90 days);
• Proof of payment method ownership (e.g., screenshot of bKash or Nagad account showing your registered mobile number);
• Source of funds declaration where required for high-value transactions.

1.3 Financial Transaction Data

When you make deposits or withdrawals, we collect:

• Transaction amounts in Bangladeshi Taka (৳);
• Payment method used (bKash, Nagad, Rocket, Upay, or bank transfer);
• Mobile number or bank account reference associated with the payment method;
• Transaction reference numbers and timestamps;
• Account balance history as required for regulatory record-keeping.

1.4 Gameplay and Betting Data

bajj365 records all gameplay and betting activity on your account, including:

• Bets placed, stake amounts, odds accepted, and settlement results across sports markets (cricket, football, kabaddi) and casino games (slots, live casino, instant games);
• Session duration, login and logout timestamps;
• Responsible gaming tool usage (deposit limits set, self-exclusion applications, reality check responses).

1.5 Technical and Usage Data

When you access bajj365, our servers automatically collect certain technical information:

• IP address and approximate geographic location derived from IP;
• Device type, operating system, and browser version;
• Pages visited, links clicked, and features accessed;
• Referring URL and search terms used to reach bajj365;
• Cookie identifiers and session tokens (see Section 5).

1.6 Communications Data

If you contact bajj365 support at support@bajj365 or interact with our live chat facility, we retain records of that correspondence including the content of your messages, the date and time of contact, and the resolution outcome. This data is used to improve service quality and to maintain an accurate record of commitments made to players.

2. How We Use Your Data

bajj365 uses your personal data for the following specific purposes:

Purpose	Data Categories Used
Creating and managing your player account	Registration data, identity verification data
Processing deposits and withdrawals in ৳	Financial transaction data, identity verification data
Verifying your age (18+) and identity (KYC)	Registration data, identity verification data
Detecting and preventing fraud, money laundering, and account abuse	All categories, particularly technical data and transaction data
Delivering and personalising the gaming and betting experience	Gameplay data, technical data
Sending transactional communications (deposit confirmations, withdrawal notices)	Registration data, financial data
Sending promotional communications (with your consent)	Registration data, gameplay data
Operating responsible gaming tools and monitoring for problem gambling indicators	Gameplay data, registration data
Responding to customer support queries	Communications data, registration data
Improving platform performance and user experience	Technical and usage data (aggregated and anonymised where possible)

bajj365 will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or unless required to do so by applicable law.

3. Legal Basis for Processing

bajj365 processes your personal data on the following legal grounds:

• Contractual necessity: Processing your registration data, financial transaction data, and gameplay data is necessary to perform the contract between you and bajj365 (i.e., to operate your account and deliver the Services you have requested);
• Legal obligation: bajj365 is required by applicable anti-money laundering, counter-terrorism financing, and know-your-customer regulations to collect and retain certain identity and transaction data;
• Legitimate interests: bajj365 processes technical and usage data on the basis of its legitimate interest in maintaining platform security, detecting fraud, improving user experience, and operating a commercially viable service — provided that this does not override your own interests or fundamental rights;
• Consent: Where bajj365 sends you marketing or promotional communications, it does so only with your prior consent, which you may withdraw at any time by contacting support@bajj365.

4. Data Sharing & Disclosure

bajj365 does not sell or rent your personal data to any third party. We share your data only in the following limited circumstances:

4.1 Payment Service Providers

To process your deposits and withdrawals, bajj365 shares the minimum necessary financial data with payment service providers including bKash, Nagad, Rocket, Upay, and participating Bangladeshi banks (including Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, and Sonali Bank). These providers are contractually bound to use your data only to process the specific transaction requested and are not permitted to use it for any other purpose.

4.2 Identity Verification Partners

bajj365 may use third-party identity verification service providers to assist with KYC compliance. These providers receive only the identity documents and data strictly required to complete the verification check. They are bound by confidentiality obligations and data processing agreements.

4.3 Game Content Providers

Game studios whose titles are available on bajj365 — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — may receive a pseudonymised player identifier and gameplay session data for the purpose of delivering their game content and for their own game performance analytics. These providers do not receive your name, address, or payment details.

4.4 Legal and Regulatory Authorities

bajj365 may disclose your personal data to law enforcement agencies, regulatory bodies, or courts where it is required to do so by applicable law, legal process, or where disclosure is necessary to protect the rights, property, or safety of bajj365, its players, or the public.

4.5 Business Transfers

In the event that bajj365 undergoes a merger, acquisition, or sale of all or part of its business assets, your personal data may be transferred to the successor entity as part of that transaction. bajj365 will endeavour to provide you with reasonable advance notice of any such transfer and will ensure that the successor entity is bound by privacy obligations no less protective than those set out in this Policy.

5. Cookies & Tracking

bajj365 uses cookies and similar tracking technologies to ensure the platform functions correctly, to remember your preferences, and to analyse how the platform is used so we can improve it. A cookie is a small text file placed on your device by your web browser when you visit bajj365.

5.1 Types of Cookies Used

Cookie Type	Purpose	Duration
Strictly Necessary	Enable core platform functions: login session management, account security tokens, payment flow state	Session / up to 24 hours
Functional	Remember your language preference (English), display settings, and responsible gaming tool configurations	Up to 12 months
Analytics	Measure page views, session duration, navigation paths, and feature usage to improve platform performance (data is aggregated and pseudonymised)	Up to 24 months
Security	Detect and prevent fraudulent login attempts, bot activity, and account takeover attempts	Up to 90 days

5.2 Managing Cookies

You can control which non-essential cookies bajj365 places on your device through your browser settings. Most modern browsers allow you to block or delete cookies. Please note that blocking strictly necessary cookies will prevent bajj365 from functioning correctly and may prevent you from logging in to your account. Instructions for managing cookies in common browsers are available in each browser's help documentation.

6. Data Retention

bajj365 retains your personal data for as long as is necessary to fulfil the purposes described in this Policy, or as required by applicable law. The following retention periods apply:

• Active account data (registration, gameplay, transaction history): Retained for the duration of your active account relationship with bajj365;
• Closed account data: Retained for a minimum of 5 years following account closure, as required by anti-money laundering regulations applicable to financial service providers operating in the Bangladesh market;
• Identity verification documents: Retained for a minimum of 5 years following the completion of the relevant verification check, or longer if required by law;
• Customer support communications: Retained for 3 years from the date of the interaction;
• Technical and usage logs: Retained for up to 12 months, after which they are aggregated and anonymised or deleted;
• Self-exclusion records: Retained indefinitely to prevent re-registration during an active exclusion period, and for a minimum of 7 years following the expiry of a time-limited exclusion.

Upon expiry of the applicable retention period, bajj365 will securely delete or irreversibly anonymise your personal data. Where anonymisation is used, the resulting data cannot be re-linked to you and is not subject to this Policy.

7. Your Privacy Rights

As a player on bajj365, you have the following rights in relation to your personal data. To exercise any of these rights, please contact support@bajj365 with the subject line "Data Rights Request" and include your registered email address and a description of your request. bajj365 will respond within 30 days.

• Right of Access: You have the right to request a copy of all personal data bajj365 holds about you, together with information about how it is being used.
• Right to Rectification: If any of the personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it without undue delay.
• Right to Erasure ("Right to Be Forgotten"): You may request that bajj365 delete your personal data where it is no longer necessary for the purposes for which it was collected, or where you withdraw the consent on which processing is based. This right is subject to limitations where retention is required by applicable law (e.g., anti-money laundering record-keeping obligations).
• Right to Restrict Processing: You have the right to request that bajj365 restricts its processing of your data in certain circumstances, such as while the accuracy of data is contested or while an objection is being considered.
• Right to Data Portability: You may request that bajj365 provides your personal data in a structured, commonly used, machine-readable format so that you can transfer it to another service provider.
• Right to Object: You have the right to object to bajj365 processing your personal data on the basis of legitimate interests. You may also withdraw consent to marketing communications at any time.
• Right to Withdraw Consent: Where bajj365 processes your data on the basis of your consent (e.g., marketing emails), you may withdraw that consent at any time by contacting support@bajj365. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

8. Data Security

bajj365 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. Our security programme includes:

• Encryption in transit: All data transmitted between your device and bajj365 servers is encrypted using TLS 1.2 or higher (256-bit SSL);
• Encryption at rest: Sensitive personal data stored on bajj365 servers — including identity documents and financial records — is encrypted at rest using AES-256;
• Password security: User passwords are never stored in plain text. bajj365 stores only a salted cryptographic hash of your password;
• Access controls: Access to player data by bajj365 staff is restricted on a strict need-to-know basis, enforced through role-based access control and multi-factor authentication for all administrative systems;
• Fraud detection systems: bajj365 operates automated systems that monitor for unusual account activity, irregular betting patterns, and signs of account takeover in real time;
• Regular security reviews: bajj365 conducts periodic reviews of its data security practices and vulnerability assessments of its platform infrastructure.

While bajj365 takes all reasonable steps to protect your data, no internet-based system can be guaranteed to be completely secure. If you become aware of any security vulnerability or suspect that your account has been accessed without your authorisation, please notify us immediately at support@bajj365.

9. Third-Party Services

bajj365's platform integrates with a number of third-party service providers to deliver core functionality. Each integration is governed by a data processing agreement that restricts the third party's use of your data to the specific service they provide to bajj365.

Third-party service categories and their data access are summarised below:

• Payment processors (bKash, Nagad, Rocket, Upay, Bangladeshi banks): Receive transaction-level financial data only, strictly for payment execution;
• Game content providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi): Receive pseudonymised session identifiers and gameplay parameters required to deliver game functionality;
• Identity verification services: Receive identity document images and registration data strictly for the purpose of KYC checks;
• Platform analytics tools: Receive aggregated, pseudonymised usage data to help bajj365 understand how players navigate and use the platform — these tools are configured to prevent the identification of individual users from the data they receive;
• Email delivery services: Receive your email address and the content of transactional or promotional emails on behalf of bajj365, solely for the purpose of delivering those communications to your inbox.

bajj365 does not permit any third-party service provider to use your data for their own independent marketing, profiling, or commercial purposes. If you have questions about a specific third-party integration, please contact support@bajj365.

10. Changes to This Policy

bajj365 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform functionality. When we make material changes to this Policy, we will notify registered players by email to the address on file and by displaying a prominent notice on the bajj365 platform for a minimum of 14 days prior to the changes taking effect.

The "Effective" date at the top of this Policy indicates when the current version came into force. We encourage you to review this Policy periodically to stay informed about how bajj365 protects your personal data. Your continued use of bajj365 following the effective date of any updated Policy constitutes your acceptance of the revised terms.

If you do not agree with any material change to this Policy, you must stop using bajj365 and may request account closure by contacting support@bajj365. bajj365 will process your closure request in accordance with the data retention obligations described in Section 6.