baji bip Privacy Policy

baji bip collects personal data from players through several channels: directly via account registration and KYC submission, automatically through your use of the platform, and from third-party service providers involved in payment processing and fraud prevention. We collect only the data that is necessary for the purposes described in this Privacy Policy.

Registration and Account Data: When you create a baji bip account, we collect your full legal name, date of birth, residential address, email address, and mobile phone number. This data is mandatory — without it, we cannot create or maintain a player account.

Identity Verification (KYC) Data: As part of our Know Your Customer process, we may collect copies of government-issued identity documents such as your Bangladesh National Identity Card (NID), passport, or driving licence. We may also collect proof of address documents such as utility bills or bank statements, and proof of payment method ownership for bKash, Nagad, Rocket, or Upay accounts.

Financial Transaction Data: baji bip records all deposits, withdrawals, and game wagering transactions associated with your account. This includes transaction amounts, timestamps, payment method references (e.g., the last four digits of a mobile account or a transaction ID), and wallet balances. Full payment account numbers, PINs, and OTPs are never stored by baji bip.

Technical and Device Data: When you access the baji bip platform from any device, we automatically collect certain technical data including your IP address, device type, operating system, browser type and version, screen resolution, and session timestamps. This data is used for security monitoring, fraud detection, and platform optimisation.

Behavioural and Usage Data: We collect data about how you interact with the baji bip platform — including which games you play, how long your sessions last, which markets you bet on, and which features you use. This data is used for responsible gaming monitoring, personalised experience delivery, and internal analytics.

Communication Data: If you contact baji bip's customer support team via email or live chat, we retain records of that correspondence. This includes the content of your messages, timestamps, and the resolution outcome. These records are retained for quality assurance, dispute resolution, and regulatory compliance purposes.

baji bip does not sell, rent, or trade your personal data with any third party for their own commercial or marketing purposes. We share your data only in the limited circumstances described below, and only to the extent necessary for the specific purpose in each case.

Payment Service Providers: To process your deposits and withdrawals via bKash, Nagad, Rocket, and Upay, we share the minimum necessary transaction data with those payment providers. Each provider operates under their own privacy policy and is independently responsible for data they hold. baji bip shares only what is required to initiate and confirm the transaction.

KYC and Identity Verification Partners: baji bip may engage third-party KYC service providers to assist with identity verification and document authentication. These partners process your identity documents on our behalf under strict data processing agreements and are not permitted to use your data for any other purpose.

Game Studio Providers: Live casino games and certain slot titles are delivered by third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. In the course of delivering these games, limited session and wager data may be transmitted to the game server operated by the studio. baji bip does not transmit identity or payment data to game studios.

Legal and Regulatory Disclosure: baji bip may disclose personal data to law enforcement authorities, financial intelligence units, or other regulatory bodies in Bangladesh where required by applicable law, court order, or regulatory directive. We will notify affected players of such disclosures where legally permitted to do so.

Business Transfers: In the event of a merger, acquisition, or transfer of all or substantially all of baji bip's assets, player data may be transferred to the acquiring entity as part of that transaction. Players will be notified of any such transfer and their rights in connection with it via the registered email address on their account.

baji bip implements a comprehensive set of technical and organisational security measures to protect your personal data from unauthorised access, accidental loss, destruction, or disclosure. These measures are reviewed and updated on a regular basis to reflect the current threat landscape.

Technical Security Measures: All data in transit between your device and the baji bip platform is protected by 256-bit SSL/TLS encryption. Data at rest — including player records, KYC documents, and transaction logs — is stored in encrypted form on access-controlled servers. Access to production databases containing personal data is restricted to a small number of authorised personnel and is logged for audit purposes.

Access Controls: Internal access to personal data is granted on a strict need-to-know basis using role-based access control (RBAC). All staff with access to personal data are trained on data protection requirements and bound by confidentiality obligations. Access logs are reviewed regularly for anomalies.

Incident Response: In the event of a data security incident that poses a risk to your personal data, baji bip will act promptly to contain the incident, assess its scope, and notify affected players at the registered email address within the timeframe required by applicable data protection standards. We will also notify relevant authorities as required by applicable law.

Data Retention: baji bip retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account and registration data: Retained for the duration of the active account plus 5 years after account closure, as required for AML and regulatory compliance.
• KYC documents: Retained for 5 years from the date of account closure or the date of the last transaction, whichever is later.
• Transaction records: Retained for 5 years from the date of the transaction.
• Technical and device data: Retained for up to 12 months from the date of collection, unless required for an ongoing investigation.
• Support correspondence: Retained for 3 years from the date of the most recent message in the thread.
• Marketing consent records: Retained until consent is withdrawn, plus 1 year after withdrawal as a compliance record.

When personal data reaches the end of its retention period and is no longer required for any legitimate purpose, it is securely deleted or anonymised in accordance with our internal data disposal procedures.