baj88 Privacy Policy
At baj88, your privacy matters. This Privacy Policy explains exactly what personal data we collect from players in Bangladesh, why we collect it, how we use and protect it, and the rights you hold over your own information on the baj88.io platform.
How baj88 Handles Your Personal Data
This Privacy Policy ("Policy") describes how baj88 ("we", "us", "our") collects, processes, stores, and protects the personal information of players ("you", "your") who access and use the baj88.io platform and its associated services. By registering an account, making a deposit, or otherwise using any feature of the baj88 platform, you acknowledge that you have read and understood this Policy and that you consent to the processing of your personal data in the manner described herein.
baj88 takes the security and confidentiality of your personal information seriously. We implement industry-standard technical and organisational measures — including 128-bit SSL encryption, OTP-based two-factor authentication, and strict internal access controls — to ensure that your data is handled safely at every stage of its lifecycle on the baj88 platform.
SSL-Encrypted Platform
All data transmitted between your browser and baj88.io is protected by 128-bit SSL encryption, ensuring that your personal details, payment information, and account credentials cannot be intercepted by unauthorised third parties.
No Sale of Personal Data
baj88 does not sell, rent, or trade your personal information to third parties for marketing or commercial purposes. Your data is used exclusively to operate and improve the baj88 platform and to fulfil our legal obligations.
KYC Data Protection
Identity documents submitted for KYC verification — including national ID cards, passports, and proof of address — are stored securely with restricted internal access and are used solely for the purpose of verifying your identity and complying with anti-money laundering obligations.
Payment Data Security
baj88 does not store full payment credentials for methods such as bKash, Nagad, Rocket, or Upay beyond what is necessary to process your transaction. Payment processing is handled by trusted third-party providers operating their own PCI-compliant security environments.
You Control Your Data
Registered baj88 players have the right to access, correct, and request deletion of their personal data, subject to our legal retention obligations. Submit a data request at any time by contacting the baj88 support team at [email protected].
Defined Retention Periods
baj88 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. Account data is typically retained for a minimum of five years following account closure for compliance and audit purposes.
1 Information We Collect
baj88 collects personal data from you in order to provide a fully functional, secure, and personalised gaming experience. The categories of personal information we collect include the following:
1.1 Registration and Account Data
When you create a baj88 account, we collect the information you provide during the registration process, including your full legal name, date of birth, residential address in Bangladesh (including city — whether Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, or elsewhere), a valid mobile number registered with a Bangladeshi network operator, and a valid email address.
1.2 Identity Verification (KYC) Data
To comply with our identity verification obligations and to process withdrawals, we may collect copies of government-issued identification documents such as your National Identity Card (NID), passport, or driving licence, along with supplementary documents confirming your address, such as a utility bill or recent bank statement.
1.3 Financial and Transaction Data
We collect details of all financial transactions conducted through your baj88 account, including deposit amounts, withdrawal requests, payment methods used (such as bKash, Nagad, Rocket, Upay, Visa, Mastercard, or Bangladeshi bank transfer), transaction reference numbers, and timestamps. We do not store full card numbers or mobile banking PINs.
1.4 Betting and Gaming Activity Data
We maintain records of all bets placed, games played, stakes wagered, winnings received, bonuses claimed, and all other gaming activity conducted through your baj88 account. This data is used for account management, dispute resolution, responsible gaming monitoring, and fraud prevention purposes.
1.5 Technical and Device Data
When you access baj88.io, we automatically collect certain technical data about your device and connection, including your IP address, browser type and version, operating system, device type (desktop, mobile, tablet), screen resolution, time zone, and referring URL. This information is collected passively and is used for security monitoring, fraud detection, and platform optimisation.
1.6 Communications Data
If you contact the baj88 support team by email or through any messaging channel, we retain records of those communications, including the content of your messages and any attachments, for the purpose of resolving your query, training, and quality assurance.
| Data Category | Examples | Primary Purpose |
|---|---|---|
| Registration Data | Name, DOB, address, email, mobile number | Account creation and management |
| KYC Documents | NID, passport, proof of address | Identity verification, AML compliance |
| Financial Data | Deposit/withdrawal history, payment method details | Transaction processing, fraud prevention |
| Gaming Activity | Bets placed, games played, bonus usage | Account management, responsible gaming |
| Technical Data | IP address, device type, browser info | Security monitoring, platform analytics |
| Communications | Support messages, email correspondence | Customer service, dispute resolution |
2 How We Collect Your Data
baj88 collects your personal data through the following means:
- Directly from you: When you register an account, complete KYC verification, make a deposit, place a bet, contact support, or respond to a promotional offer on the baj88 platform.
- Automatically: Through cookies, server logs, and similar tracking technologies when you browse baj88.io. See Section 8 for full details on our cookie practices.
- From payment providers: When you make a deposit or request a withdrawal, our payment partners (such as bKash, Nagad, Rocket, and Upay) may share transaction confirmation data with us to reconcile your account balance.
- From fraud prevention and identity verification services: We may use third-party services to verify the authenticity of KYC documents or to screen transactions against known fraud indicators or sanctions lists.
- From publicly available sources: In certain circumstances, baj88 may supplement your profile data with information from publicly accessible records for the purpose of identity verification or fraud prevention.
3 How We Use Your Data
baj88 uses the personal data it collects for the following purposes:
- Account management: To create, maintain, and manage your baj88 account, process your login, and apply your account settings and preferences.
- Transaction processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, Mastercard, and Bangladeshi bank transfers, and to maintain accurate financial records of all transactions.
- Identity verification: To verify your identity in accordance with our KYC obligations and to confirm that you meet the minimum age requirement of 21 years or older before allowing withdrawal activity.
- Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, multi-accounting, bonus abuse, money laundering, and other prohibited conduct as defined in the baj88 Terms & Conditions.
- Responsible gaming: To monitor your gaming activity for signs of problem gambling behaviour, to apply the responsible gaming tools you have requested (such as deposit limits or cooling-off periods), and to proactively reach out where our systems detect patterns of concern.
- Customer support: To respond to your enquiries, resolve disputes, and provide assistance through the baj88 support team.
- Legal compliance: To fulfil our obligations under applicable anti-money laundering, counter-terrorism financing, and data protection laws, and to respond to lawful requests from regulatory or law enforcement authorities.
- Platform improvement: To analyse aggregate usage data and improve the performance, design, and content of baj88.io, including personalising game recommendations and promotional offers where you have consented to receive them.
- Marketing communications: To send you information about bonuses, promotions, and new features on baj88 by email or SMS, where you have opted in to receive such communications. You may opt out at any time by contacting support.
4 Legal Basis for Processing
baj88 processes your personal data on the following legal grounds:
- Contractual necessity: Processing that is necessary to perform the contract between you and baj88 — for example, creating your account, processing deposits and withdrawals, and settling bets.
- Legal obligation: Processing that is required to comply with applicable laws, including anti-money laundering regulations, identity verification requirements, and responses to lawful regulatory or law enforcement requests.
- Legitimate interests: Processing carried out for purposes that represent a legitimate interest of baj88, such as fraud prevention, platform security, responsible gaming monitoring, and internal analytics, where those interests are not overridden by your rights and interests.
- Consent: Processing for optional purposes where you have provided your explicit consent, such as receiving marketing emails or SMS communications about promotions. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.
5 Data Sharing and Disclosure
baj88 does not sell your personal data to third parties. We share your personal information only in the following limited circumstances:
5.1 Payment Processors
To process your deposits and withdrawals, we share necessary transaction data with payment service providers including bKash, Nagad, Rocket, Upay, Visa, Mastercard, and participating Bangladeshi banking institutions. These providers are authorised to use your data only for the purpose of completing the relevant transaction.
5.2 Identity Verification Providers
We may share your KYC documents with third-party identity verification services to authenticate your identity documents and confirm your eligibility to use the baj88 platform. These providers are contractually obligated to maintain the confidentiality and security of the data shared with them.
5.3 Game and Technology Providers
baj88 integrates games from third-party providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive anonymised or pseudonymised data in connection with game sessions, such as a session token or player tier, but do not receive your full personally identifiable account data.
5.4 Legal and Regulatory Authorities
baj88 may disclose your personal data to law enforcement agencies, regulatory bodies, or courts of competent jurisdiction where we are required to do so by law, or where such disclosure is necessary to protect the legal rights, safety, or property of baj88 or its users.
5.5 Business Transfers
In the event that baj88 undergoes a merger, acquisition, or sale of its operational assets, your personal data may be transferred to the acquiring entity as part of that transaction. In such circumstances, baj88 will notify affected players and ensure that the receiving entity is bound by data protection obligations no less stringent than those in this Policy.
No Third-Party Marketing Sharing
baj88 does not share, sell, rent, or otherwise transfer your personal data to third-party advertisers, data brokers, or marketing agencies for the purpose of targeting you with advertising on third-party platforms or websites.
6 Data Retention
baj88 retains your personal data for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following retention periods apply:
| Data Type | Retention Period | Reason |
|---|---|---|
| Account registration data | 5 years after account closure | Legal and regulatory compliance |
| KYC documents | 5 years after account closure | AML and identity verification obligations |
| Financial transaction records | 5 years after each transaction | Financial audit and legal compliance |
| Betting and gaming history | 5 years after account closure | Dispute resolution, responsible gaming |
| Support communications | 3 years after resolution | Quality assurance, dispute reference |
| Technical and device logs | 12 months from collection | Security monitoring, fraud detection |
| Marketing preferences | Until opt-out or account closure | Consent management |
Following the expiry of the applicable retention period, your personal data will be securely deleted or anonymised so that it can no longer be associated with your identity.
7 Data Security
baj88 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security measures include:
- 128-bit SSL/TLS encryption on all data transmitted between your device and baj88.io, ensuring that your login credentials, personal information, and payment data cannot be intercepted in transit.
- OTP-based two-factor authentication (2FA) available to all registered baj88 players, providing an additional layer of protection against unauthorised account access.
- Strict internal access controls ensuring that your personal data is accessible only to baj88 staff members who require it to perform their authorised job functions. All staff with access to personal data are subject to confidentiality obligations.
- Encrypted storage of sensitive data at rest, including KYC documents and financial transaction records, in secure server environments.
- Regular security audits and vulnerability assessments of the baj88 platform infrastructure to identify and remediate potential security risks.
- Intrusion detection and monitoring systems operating continuously to detect and respond to any unauthorised access attempts or anomalous account activity.
In the event of a personal data breach that is likely to result in a risk to your rights or interests, baj88 will notify affected players without undue delay and will take all reasonable steps to contain and remediate the breach.
8 Cookies and Tracking Technologies
baj88.io uses cookies and similar tracking technologies to enhance your browsing experience, maintain your session, and gather analytics data about how the platform is used. By continuing to use baj88.io, you consent to the use of cookies in accordance with this Policy.
8.1 Types of Cookies We Use
- Essential cookies: Required for the basic functioning of baj88.io, including maintaining your login session, remembering your language preferences, and ensuring the security of your account. These cookies cannot be disabled without affecting the functionality of the platform.
- Analytics cookies: Used to collect aggregated, anonymised data about how players interact with baj88.io — such as which pages are visited most frequently and how long users spend on each section — to help us improve the platform.
- Functional cookies: Used to remember your preferences and personalise your experience, such as retaining your preferred sport category (e.g., cricket or esports) or your most recently viewed game section.
- Marketing cookies: Used to track the effectiveness of promotional campaigns directed at Bangladeshi players and to ensure that promotional content shown to you is relevant to your stated interests, where you have consented to receive marketing communications from baj88.
8.2 Managing Cookies
You can control and manage cookies through your browser settings. Most modern browsers allow you to refuse all cookies, accept only certain types, or delete existing cookies. Please note that disabling essential cookies may prevent you from logging into your baj88 account or using certain features of the platform. Disabling analytics or marketing cookies will not affect your ability to place bets or manage your account.
9 Your Privacy Rights
As a registered player on the baj88 platform, you hold the following rights in relation to your personal data. To exercise any of these rights, contact the baj88 support team at [email protected] with a clear description of your request:
Right of Access
Request a copy of the personal data baj88 holds about you, along with information on how it is being used and with whom it has been shared.
Right to Rectification
Request correction of any inaccurate or incomplete personal data held in your baj88 account. You may also update certain details directly via the account settings page.
Right to Erasure
Request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to our legal retention obligations outlined in Section 6.
Right to Restriction
Request that baj88 restrict the processing of your personal data in certain circumstances, such as while a data accuracy dispute is being resolved.
Right to Portability
Request a copy of your personal data in a structured, machine-readable format so that you may transfer it to another service provider where technically feasible.
Right to Object
Object to the processing of your personal data for direct marketing purposes or where processing is based on baj88's legitimate interests and you believe your rights override those interests.
baj88 will respond to all data rights requests within 30 days of receipt. In complex cases, we may extend this period by a further 60 days, in which case we will notify you of the extension and the reason for the delay. Please note that some requests may be subject to identity verification before they can be processed, to ensure that personal data is not disclosed to an unauthorised party.
10 Children and Minors
The baj88 platform is strictly intended for use by adults aged 21 years or older. baj88 does not knowingly collect personal data from individuals under the age of 21. If baj88 becomes aware that personal data has been collected from a person under the age of 21, that account will be immediately suspended, the data will be deleted, and any associated balance will be forfeited in accordance with the baj88 Terms & Conditions.
If you are a parent or guardian and believe that a person under the age of 21 in your care has registered an account on baj88.io, please contact us immediately at [email protected] so that we can take prompt action to close the account and delete the associated data.
11 Third-Party Services and External Links
The baj88 platform integrates third-party game content from providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. When you play games provided by these studios, those providers operate their own game servers and may collect limited technical data (such as session tokens) necessary for game delivery. baj88 is not responsible for the privacy practices of third-party game providers, and we encourage you to review their individual privacy policies where available.
baj88 also uses third-party payment processors — including bKash, Nagad, Rocket, Upay, Visa, and Mastercard — to facilitate deposits and withdrawals. These processors are independent data controllers in respect of the transaction data they handle, and their processing is governed by their own privacy policies and terms of service. baj88 does not have access to your full payment credentials held by these providers.
baj88.io does not contain links to external third-party websites for advertising or referral purposes. Any links visible on the baj88 platform direct users to pages within baj88.io itself.
12 Changes to This Privacy Policy
baj88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform features. When material changes are made, baj88 will notify registered players by email to their registered email address and will display a prominent notice on the baj88.io platform at least 14 days before the revised Policy takes effect.
The "Last Updated" date at the top of this Policy reflects the date on which the most recent version came into effect. Your continued use of the baj88 platform after the revised Policy takes effect constitutes your acceptance of the updated terms. We encourage you to review this Policy periodically to stay informed about how baj88 protects your personal information.
13 Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or baj88's handling of your personal data, please contact the baj88 support team through the following channel:
- Email: (plain text — not a clickable link)
- Availability: 24 hours a day, 7 days a week, in English
- Response Time: Within 30 days for formal data rights requests; within 24 hours for general privacy enquiries (Bangladesh Standard Time, UTC+6)
When submitting a data rights request, please include your full registered name, account email address, and a clear description of your request so that we can process it efficiently. We may ask you to verify your identity before fulfilling any data access, correction, or deletion request.
Questions About Your Privacy?
Our support team is available 24/7 in English to help with data requests and account queries. You can also explore our FAQ or review our full Terms & Conditions.