Privacy Policy — How bajy Protects Your Data

1 Information We Collect

When you register for and use a bajy account, we collect a range of personal information necessary to operate the platform safely, verify your identity, process financial transactions, and comply with our legal obligations. The categories of information we collect are set out below.

1.1 Registration Information

When you create a bajy account, you are required to provide the following information:

• Full legal name (as it appears on your government-issued ID)
• Date of birth (for age verification — bajy is strictly 18+)
• Email address
• Mobile phone number
• Preferred payment method (e.g., bKash number, Nagad number, bank account details)
• Username and password (password is stored in encrypted form and is never visible to bajy staff)

1.2 Identity Verification Documents

Before processing your first withdrawal, bajy requires you to complete identity verification (KYC). At this stage, we may collect:

• A copy of your National Identity Card (NID) issued by the Government of Bangladesh
• Alternatively, a copy of a valid passport or driver's licence
• A selfie or photograph for facial matching purposes, where required

These documents are stored securely and used only for identity verification and anti-money-laundering (AML) compliance purposes.

1.3 Transaction & Activity Data

bajy automatically records data related to your use of the platform, including:

• Deposit and withdrawal amounts, dates, times, and payment method references
• Bets placed, games played, wager amounts, and game outcomes
• Bonus claims, wagering progress, and promotion participation history
• Account login history including timestamps and IP addresses

1.4 Technical & Device Data

When you access bajy, our servers automatically collect certain technical information including your IP address, browser type and version, operating system, device type (mobile or desktop), screen resolution, referring URL, and session duration. This data is used for security monitoring, fraud prevention, and platform optimisation.

1.5 Customer Support Communications

When you contact bajy's support team via live chat, email, or any other channel, we retain a record of the conversation. This includes the content of messages you send and any attachments or screenshots you share. These records are used to resolve your enquiry, train our support team, and maintain a history of your account interactions.

2 How We Use Your Information

bajy uses the personal information we collect for the following specific purposes. We will not use your information for any purpose that is incompatible with these stated uses without first obtaining your consent or as otherwise required by law.

Where bajy relies on your consent as the legal basis for processing (for example, to send you promotional emails about new games or seasonal offers), you may withdraw that consent at any time by contacting our support team or adjusting your notification preferences within your bajy account settings.

3 Sharing Your Information

bajy does not sell your personal data. We share your information only in the limited circumstances described below, and only to the extent necessary for each purpose.

3.1 Payment Service Providers

To process your deposits and withdrawals, bajy shares the minimum necessary payment information with our certified payment partners: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, and Islami Bank. These partners process your payment data under their own privacy policies and security standards. bajy does not receive or store your mobile banking PINs or full bank account passwords.

3.2 Identity Verification Partners

bajy may use third-party KYC (Know Your Customer) service providers to assist in verifying the identity documents you submit. These providers access only the data required for verification and are contractually prohibited from using your data for any other purpose.

3.3 Game Software Providers

The games available on bajy are supplied by independent game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive anonymised or pseudonymised gameplay data (such as bet IDs and round outcomes) for the purpose of game auditing, RNG certification, and technical support. They do not receive your name, contact details, or financial information.

3.4 Law Enforcement & Regulatory Authorities

bajy may be required to disclose your personal data to law enforcement agencies, financial intelligence units, or regulatory authorities where we receive a lawful request to do so or where we are otherwise required by applicable law. bajy will notify you of any such disclosure where we are legally permitted to do so.

3.5 Business Transfers

In the event that bajy undergoes a merger, acquisition, or sale of all or a substantial part of its assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and any material change to this Privacy Policy that results from it.

4 Cookies & Tracking Technologies

bajy uses cookies and similar tracking technologies to ensure the platform functions correctly, to maintain your logged-in session, and to gather anonymised analytics data that helps us understand how players use the site and where improvements can be made.

4.1 Types of Cookies We Use

4.2 Third-Party Cookies

bajy does not deploy third-party advertising cookies, social media tracking pixels, or retargeting cookies on the bajy platform. Any analytics tools used by bajy are configured to anonymise IP addresses and do not build individual user profiles for advertising purposes.

4.3 Managing Cookies

You can control cookie settings through your web browser's privacy settings. Please note that disabling essential cookies will prevent certain bajy platform features from working correctly, including the ability to stay logged in to your account. Disabling analytics or preference cookies will not affect your ability to use core platform features.

5 Data Security

bajy takes the security of your personal data seriously and has implemented a range of technical and organisational measures to protect your information against unauthorised access, accidental loss, alteration, or disclosure.

• Encryption in transit: All data transmitted between your browser or app and the bajy platform is encrypted using 256-bit SSL/TLS protocols.
• Encryption at rest: Sensitive personal data stored on bajy's servers — including identity documents and financial records — is encrypted at rest using industry-standard algorithms.
• Password security: Account passwords are stored as salted cryptographic hashes. bajy staff cannot view your password in plain text under any circumstances.
• Access controls: Access to personal data is restricted to bajy staff who genuinely need it to perform their role. Access rights are reviewed regularly and revoked when no longer required.
• Intrusion detection: bajy employs automated security monitoring systems that detect and alert on unusual access patterns, potential brute-force attacks, and other suspicious activity.
• Regular audits: bajy's data security practices are reviewed on a regular basis. Any identified vulnerabilities are remediated promptly according to a risk-based prioritisation process.

Despite these measures, no online platform can guarantee absolute security. In the event of a data breach that is likely to affect your rights or interests, bajy will notify you as promptly as possible with details of what occurred, what data was involved, and what steps are being taken.

6 Data Retention

bajy retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, to comply with our legal obligations, and to resolve any disputes or enforce our agreements. The following general retention periods apply:

When your personal data is no longer required for the purposes listed above, bajy will securely delete or anonymise it. Where deletion is not technically immediately feasible (for example, data stored in backup archives), the data will be isolated from active processing until it can be permanently deleted.

7 Your Privacy Rights

bajy respects your rights over your personal data. As a bajy player, you have the following rights with respect to the personal information we hold about you:

7.1 Right of Access

You have the right to request a copy of the personal data bajy holds about you. Upon receiving a verified access request, bajy will provide you with a summary of your data within a reasonable timeframe. To submit a data access request, contact us via live chat or at [email protected] with the subject line "Data Access Request".

7.2 Right to Rectification

If any personal data bajy holds about you is inaccurate or incomplete, you have the right to request that we correct or update it. For most account details — such as your email address or phone number — you can update these directly within your bajy account settings. For changes to your legal name or date of birth, you will need to contact support and provide supporting documentation.

7.3 Right to Erasure

You may request that bajy delete your personal data in certain circumstances, for example if you close your account and the data is no longer required for the purposes for which it was collected. Please note that bajy may be legally required to retain certain categories of data (such as transaction records and KYC documents) for specified periods even after you close your account, as described in Section 6.

7.4 Right to Restrict Processing

In certain circumstances — for example, if you contest the accuracy of data we hold, or if you have objected to processing and a determination is pending — you may request that bajy restricts further processing of your personal data while the matter is resolved.

7.5 Right to Object

Where bajy processes your personal data on the basis of legitimate interest (for example, platform analytics), you have the right to object to that processing. bajy will cease the relevant processing unless we can demonstrate compelling legitimate grounds that override your interests, or unless the processing is necessary for the establishment, exercise, or defence of legal claims.

7.6 Right to Withdraw Consent

Where bajy relies on your consent as the legal basis for processing your data — for example, to send you promotional emails — you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that occurred before the withdrawal.

To exercise any of the rights described above, please contact bajy's support team via live chat (available 24/7) or by emailing [email protected]. We will respond to all legitimate privacy requests within a reasonable timeframe and at no charge to you.

8 Changes to This Policy

bajy may update this Privacy Policy from time to time to reflect changes in our data practices, the services we offer, or applicable legal requirements. When we make changes to this policy, we will update the "Last Updated" date at the top of this page and, where the changes are material, we will notify active bajy account holders by email.

We encourage you to review this Privacy Policy periodically to stay informed about how bajy collects, uses, and protects your personal information. Your continued use of the bajy platform after any changes to this policy constitutes your acceptance of the updated terms.

If you have any questions, concerns, or complaints about this Privacy Policy or about how bajy handles your personal data, please contact us at any time:

• Email: [email protected]
• Live Chat: Available 24/7 inside the bajy platform
• WhatsApp Support: Available 09:00 – 24:00 BST (UTC+6)

bajy is committed to resolving all privacy-related enquiries promptly and in good faith. If you are not satisfied with our response to a complaint, you may have the right to escalate the matter to a relevant data protection authority.