bajiraja Privacy Policy

Data We Collect

When you register for, access, or use the bajiraja platform, we collect a range of personal data that is necessary to operate the service, comply with legal obligations, and deliver a safe, personalised experience. The categories of data we collect are set out below.

1.1 Registration & Identity Data

When you create a bajiraja account, we collect your full legal name, date of birth, email address, mobile phone number, and a chosen username. This information is used to establish your identity, prevent duplicate registrations, and communicate with you about your account.

1.2 Know Your Customer (KYC) Data

To comply with anti-money laundering obligations and to verify that you meet the 18+ age requirement, we may ask you to submit one or more of the following documents: a copy of your Bangladesh National Identity Card (NID), passport, or driving licence; a recent utility bill or bank statement showing your residential address; and a selfie holding your identity document. KYC documents are stored securely and used exclusively for identity verification purposes.

1.3 Financial & Payment Data

When you make a deposit or withdrawal, bajiraja records the transaction amount, date, time, payment method type (e.g., bKash, Nagad, Rocket, Upay, bank transfer), and the masked identifier of your payment account (e.g., the last four digits of your mobile number). bajiraja does not store your full mobile banking credentials, PIN, or one-time passwords. Payment processing is handled directly by the respective payment provider under their own security protocols.

1.4 Usage & Behavioural Data

We automatically collect data about how you interact with bajiraja, including: pages and game screens visited, games played and betting history, session duration and timestamps, search queries within the platform, and in-game actions. This data helps us improve the platform, detect problem gambling patterns, and identify suspicious behaviour.

1.5 Technical & Device Data

We collect technical information from the device and software you use to access bajiraja, including: IP address, browser type and version, operating system, device model, screen resolution, time zone (Bangladesh Standard Time, UTC+6), and referral URL. This data is used for security, fraud prevention, and ensuring platform compatibility.

1.6 Communications Data

If you contact bajiraja through live chat, email, or any other support channel, we retain a record of that communication, including its content, date, and the identity of the support agent who assisted you. These records are kept for quality assurance, dispute resolution, and regulatory purposes.

How We Use Your Data

bajiraja processes your personal data only for the purposes described in this Privacy Policy and only where we have a lawful basis for doing so. The table below summarises our primary processing activities and the corresponding lawful basis.

2.1 Marketing Communications

Where you have given explicit consent, bajiraja may send you promotional messages about bonuses, new games, tournaments, and seasonal offers (including Eid, Pohela Boishakh, and BPL-season promotions) via SMS, email, or in-app notification. You may withdraw your marketing consent at any time by visiting the Notification Settings section of your account or by contacting our support team. Withdrawal of marketing consent does not affect the lawfulness of processing carried out prior to withdrawal, nor does it affect your ability to continue using bajiraja.

2.2 Automated Decision-Making

bajiraja uses automated systems to detect fraud, verify payment transactions, and monitor for responsible gambling risk indicators. In certain circumstances, these systems may result in automated decisions that affect your account — for example, temporarily freezing a transaction pending manual review. Where an automated decision has a significant legal or similarly significant effect on you, you have the right to request human review of that decision by contacting our support team.

Data Sharing & Third Parties

bajiraja does not sell your personal data. We may share your data with third parties only in the limited circumstances described below, and only to the extent necessary for the stated purpose.

3.1 Payment Providers

To process deposits and withdrawals, we share transaction-relevant data with your chosen payment provider (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, or Sonali Bank). Each provider operates under its own privacy policy and security framework. bajiraja is not responsible for the data practices of third-party payment providers once data has been transmitted to them.

3.2 Game & Technology Providers

bajiraja integrates games and platform components supplied by third-party providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive pseudonymised player identifiers and game session data to ensure fair game operation, resolve disputes, and calculate jackpot pools. They do not receive your full name, NID, or payment credentials.

3.3 Identity Verification Partners

To fulfil our KYC obligations, bajiraja may work with accredited identity verification service providers. These partners receive copies of the identity documents you submit and process them solely for the purpose of identity verification. All verification partners are bound by strict data processing agreements.

3.4 Legal & Regulatory Authorities

We may disclose your personal data to law enforcement agencies, financial intelligence units, or other competent authorities when required to do so by applicable law, court order, or regulatory direction. bajiraja will not notify you of such disclosures where doing so would prejudice a legal investigation.

3.5 Business Transfers

In the event that bajiraja undergoes a merger, acquisition, or sale of all or substantially all of its assets, player data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer via the email address registered to your account at least 30 days before the transfer takes effect, and you will retain the right to request deletion of your data prior to the transfer.

Cookies & Tracking

bajiraja uses cookies and similar tracking technologies (such as local storage objects and pixel tags) to operate core platform functionality, remember your preferences, analyse usage patterns, and — where you have consented — deliver relevant promotional content. The following cookie categories are used on the bajiraja platform.

4.1 Managing Cookies

You can manage cookie preferences through the Privacy Settings section of your bajiraja account. You may also configure your browser to block or delete cookies; however, disabling strictly necessary cookies will prevent you from logging in and using key platform features. Browser-level cookie management instructions are available in the help documentation of all major browsers (Chrome, Firefox, Samsung Internet, Opera Mini).

4.2 Third-Party Tracking

bajiraja does not permit third-party advertising networks to place tracking cookies on the platform for cross-site advertising purposes. Any analytics tools we employ are configured to anonymise IP addresses and process data in aggregate form wherever technically feasible.

Data Security

bajiraja takes the security of your personal data seriously and maintains a comprehensive set of technical and organisational measures designed to protect your data against unauthorised access, accidental loss, destruction, or disclosure.

5.1 Technical Measures

All data transmitted between your device and the bajiraja platform is encrypted using 256-bit SSL/TLS technology. Sensitive data at rest — including KYC documents and financial records — is encrypted using AES-256. Our infrastructure is hosted on hardened servers with restricted physical and logical access. We conduct regular vulnerability assessments and penetration testing to identify and remediate security weaknesses.

5.2 Access Controls

Access to personal data within bajiraja is restricted on a strict need-to-know basis. Employees and contractors who handle personal data are subject to confidentiality obligations and receive regular data protection training. All internal access to player data is logged and subject to periodic audit review.

5.3 Data Breach Response

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, bajiraja will notify affected players without undue delay and no later than 72 hours after becoming aware of the breach. The notification will describe the nature of the breach, the categories of data affected, the likely consequences, and the steps bajiraja has taken or proposes to take to address the breach.

Data Retention

bajiraja retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, to comply with legal and regulatory obligations, and to resolve disputes or enforce agreements. The retention periods below apply to the main categories of player data.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with any individual. Where data is anonymised rather than deleted, it may be retained indefinitely for statistical and analytical purposes.

Your Privacy Rights

As a player on bajiraja, you have the following rights in relation to your personal data. These rights may be subject to certain limitations where our legal obligations require us to retain or process data in a specific way.

To exercise any of the above rights, please contact the bajiraja Data Protection team by sending a written request to support@bajiraja. We will acknowledge your request within 5 business days and aim to resolve it within 30 calendar days. In complex cases, this period may be extended by a further 60 days, in which case we will notify you of the extension and the reason for it.

bajiraja will not charge a fee for processing a data rights request unless the request is manifestly unfounded or excessive, in which case we reserve the right to charge a reasonable administrative fee or refuse to act on the request.

Policy Updates & Contact

8.1 Changes to This Policy

bajiraja reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, legal requirements, or platform features. When material changes are made, we will publish the revised Policy on this page with an updated effective date and, where the changes are significant, notify registered players by email or in-app notification at least 14 days before the changes take effect. Your continued use of bajiraja after the effective date of a revised Policy constitutes your acceptance of the updated terms.

8.2 Children's Privacy

bajiraja is strictly for adults aged 18 and above. We do not knowingly collect personal data from individuals under the age of 18. If we become aware that a minor has provided personal data to us, we will delete that data immediately and close the associated account. If you believe a minor has registered on bajiraja, please contact our support team without delay.

8.3 Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise your data rights, or wish to raise a complaint about how bajiraja has handled your personal data, please contact us at:

Data Protection Team — bajiraja
Email: support@bajiraja
Response time: within 5 business days

We take all privacy complaints seriously and will investigate every submission thoroughly. If you are not satisfied with our response to your complaint, you retain the right to escalate the matter to the relevant data protection authority.