baj888 Privacy Policy

Introduction

baj888 ("we", "us", "our", "the Platform") operates the online casino and sports betting service available at https://baj888.club, serving players primarily across Bangladesh, including Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar. This Privacy Policy describes our practices with respect to the collection, use, storage, sharing, and protection of personal data relating to users of the baj888 Platform ("you", "the Player", "the User").

baj888 is committed to handling your personal data with care, transparency, and respect. We collect only the data that is necessary to provide and improve our services, comply with applicable verification and anti-money-laundering obligations, and ensure a safe gaming environment for all players on the Platform. We do not sell personal data to third parties for their own marketing purposes.

This Privacy Policy should be read alongside the baj888 Terms & Conditions and the Responsible Gaming Policy, both of which form part of the overall agreement between you and baj888.

Personal Data We Collect

Depending on how you interact with the baj888 Platform, we may collect the following categories of personal data:

2.1 Identity and Registration Data

• Full legal name as it appears on your government-issued identity document
• Date of birth (for age verification — baj888 is strictly 18+ only)
• Nationality and country of residence
• A copy of your national ID card, passport, or Bangladesh driving licence when required for verification
• Your chosen username on the baj888 Platform

2.2 Contact Data

• Email address registered to your baj888 account
• Mobile phone number registered in Bangladesh (used for account security and payment verification)
• Correspondence records when you contact baj888 support via email or live chat

2.3 Financial Data

• bKash, Nagad, Rocket, or Upay mobile money account numbers used for deposits and withdrawals
• Bank account details for players using Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, or other approved Bangladeshi banks
• Transaction history including deposit amounts, withdrawal requests, and account balance records
• Records of any bonuses credited to or wagering requirements fulfilled on your account

2.4 Technical and Usage Data

• IP address and approximate geolocation derived from that IP
• Device type, operating system, browser type and version
• Session timestamps, pages visited, games played, and betting history
• Cookies and similar tracking technologies (see Section 7)
• Referral source data indicating how you arrived at the baj888 Platform

2.5 Responsible Gaming Data

• Any deposit limits, session time limits, cool-off periods, or self-exclusion requests you have applied to your account
• Communications relating to responsible gaming interventions initiated by baj888 or requested by you

How We Collect Your Data

baj888 collects personal data through the following means:

• Direct provision: Data you submit when registering an account, completing identity verification, making a deposit or withdrawal, contacting support, or responding to surveys.
• Automated collection: Data collected automatically as you navigate the baj888 Platform, including through cookies, web server logs, and analytics tools (see Section 7).
• Payment providers: Transaction confirmation data received from bKash, Nagad, Rocket, Upay, and our banking partners when processing deposits and withdrawals.
• Identity verification partners: Where baj888 uses a third-party identity verification service to confirm the authenticity of documents you submit, that service may return verification status data to us.
• Fraud and risk detection systems: Automated systems that analyse usage patterns to detect unusual activity, bonus abuse, or potential account compromise.

Legal Basis for Processing

baj888 processes your personal data on one or more of the following legal bases:

Where baj888 relies on your consent as the legal basis for processing, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

How We Use Your Personal Data

baj888 uses the personal data we collect for the following purposes:

• Account management: Creating, maintaining, and securing your baj888 account; processing login and authentication requests; applying account-level settings including responsible gaming controls.
• Payment processing: Verifying and processing deposits via bKash, Nagad, Rocket, Upay, and bank transfer; processing withdrawal requests; maintaining accurate financial records.
• Identity and age verification: Confirming that you meet the minimum age requirement of 18 years and that your identity matches the details provided at registration.
• Legal and regulatory compliance: Meeting anti-money-laundering obligations; retaining records as required by applicable law; responding to lawful requests from competent authorities.
• Responsible gaming: Monitoring play patterns for indicators of problem gambling; enforcing deposit limits, self-exclusion requests, and cool-off periods; conducting outreach where intervention thresholds are met.
• Customer support: Responding to enquiries, complaints, and disputes submitted to [email protected]; maintaining records of support interactions.
• Fraud and security: Detecting and preventing unauthorised access, account takeover attempts, bonus abuse, collusion, and money laundering activity.
• Platform improvement: Analysing aggregated usage data to improve game selection, platform performance, and user experience for players across Bangladesh.
• Marketing communications: Sending promotional emails or notifications about bonuses, new games, and seasonal offers — only where you have opted in to receive such communications. You may opt out at any time.

Data Sharing and Disclosure

baj888 does not sell, rent, or trade your personal data to third parties for marketing purposes. We may share your personal data only in the following limited circumstances:

6.1 Service Providers

baj888 works with carefully selected third-party service providers who process personal data on our behalf under strict data processing agreements. These include payment processors (bKash, Nagad, Rocket, Upay), identity verification services, fraud detection providers, IT hosting and infrastructure providers, and customer support platform operators. All such providers are contractually bound to process data only as instructed by baj888 and to maintain appropriate security standards.

6.2 Game Content Providers

When you play games powered by Pragmatic Play, NetEnt, Microgaming, Evolution Gaming, Ezugi, or Spribe, limited technical data (such as your session token and game history) is exchanged with those providers to facilitate gameplay and resolve disputes. These providers do not receive your identity documents or payment account details.

6.3 Legal and Regulatory Disclosure

baj888 may disclose personal data to competent authorities, financial intelligence units, or law enforcement agencies where required to do so by applicable law, court order, or in connection with the investigation of suspected fraud, money laundering, or other criminal activity.

6.4 Business Transfers

In the event of a merger, acquisition, or sale of all or a material portion of baj888's business assets, personal data held by baj888 may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy.

Cookies and Tracking Technologies

The baj888 Platform uses cookies and similar technologies to deliver, secure, and improve the service. Cookies are small data files placed on your device when you visit a website. baj888 uses the following categories of cookies:

You may manage or withdraw consent for non-essential cookies through your browser settings at any time. Please note that disabling strictly necessary cookies may prevent certain features of the baj888 Platform from functioning correctly.

Data Retention

baj888 retains personal data for only as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention periods apply:

• Account and identity data: Retained for the duration of the active account relationship, plus a minimum of five (5) years following account closure, to satisfy anti-money-laundering record-keeping requirements.
• Financial transaction records: Retained for a minimum of seven (7) years from the date of each transaction.
• Support communications: Retained for three (3) years from the date of the last interaction, or longer if related to an open dispute or legal matter.
• Technical and usage logs: Retained for up to twelve (12) months in standard form; aggregated and anonymised data may be retained indefinitely for analytical purposes.
• Responsible gaming records: Self-exclusion records are retained for the duration of the exclusion period plus five (5) years to prevent re-registration.

When personal data is no longer required, baj888 securely deletes or anonymises it in a manner that prevents recovery or reconstruction.

Your Privacy Rights

As a baj888 Player, you have the following rights in relation to your personal data. To exercise any of these rights, please submit a written request to [email protected]. baj888 will respond within 30 days of receiving a valid request.

Please note that some rights are subject to legal limitations. For example, baj888 cannot delete financial transaction records that are required to be retained under anti-money-laundering regulations, even if you request erasure. baj888 will explain any applicable limitations when responding to your request.

Data Security

baj888 employs a layered approach to data security, combining technical, organisational, and procedural controls to protect personal data against unauthorised access, disclosure, alteration, or destruction. Key security measures include:

• 256-bit SSL/TLS encryption applied to all data transmitted between your device and baj888 servers, ensuring that your login credentials, payment details, and personal information cannot be intercepted in transit.
• Encrypted data storage for sensitive fields including identity documents, payment account references, and account passwords (stored as salted hashes — baj888 never stores plaintext passwords).
• Access controls limiting access to personal data to authorised baj888 personnel who require it for their specific role. All staff with access to personal data undergo data protection training.
• Regular security assessments including vulnerability scanning and review of access logs to detect and remediate potential weaknesses in the Platform's security architecture.
• Incident response procedures to contain, investigate, and notify affected parties in the event of a confirmed data security incident within a reasonable timeframe.

Third-Party Links

The baj888 Platform may occasionally reference or display content from third-party game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. While baj888 exercises care in selecting its technology partners, we are not responsible for the privacy practices of those third parties. Any personal data you provide directly to a third-party service is subject to that party's own privacy policy. baj888 does not control the data practices of external game studios or payment infrastructure providers beyond the contractual obligations we impose on them as described in Section 6.

Children's Privacy

The baj888 Platform is strictly intended for adults aged 18 and above. baj888 does not knowingly collect personal data from any person under the age of 18. If we become aware that personal data has been collected from a person under the minimum age, we will immediately close the associated account, void all balances and transactions, and securely delete the personal data in question. If you believe that a minor has registered or is using a baj888 account, please notify us immediately at [email protected].

baj888 employs active age verification at registration and may conduct additional checks at any point during the account lifecycle to enforce this requirement. The protection of minors is a non-negotiable policy at baj888.

Changes to This Privacy Policy

baj888 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or the services we provide. When material changes are made, we will publish the revised Policy on this page with an updated effective date. Where practicable, we will also notify registered Players via the email address associated with their account.

Your continued use of the baj888 Platform following the publication of a revised Privacy Policy constitutes your acceptance of the updated terms. We encourage you to review this page periodically to stay informed about how baj888 protects your personal data. If you have any concerns about a change to this Policy, please contact [email protected] before continuing to use the Platform.

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way in which baj888 handles your personal data, please contact our support team using the details below:

• Email: [email protected] (plain text — not a clickable link)
• Support Hours: 24 hours a day, 7 days a week, on Bangladesh Standard Time (BST, UTC+6)
• Response Time: Privacy requests acknowledged within 48 hours; full response provided within 30 days

All data subject access requests and erasure requests must be submitted in writing via email and include sufficient information to verify your identity before baj888 can action the request. This verification step is required to protect your data from unauthorised third-party requests.