bajbip Privacy Policy & Data Protection
At bajbip, we take your privacy seriously. This Privacy Policy explains exactly what personal data we collect, why we collect it, how we use and protect it, and the rights you hold as a bajbip account holder based in Bangladesh. We are committed to handling your information with transparency and care.
How bajbip Protects Your Data
We believe privacy is a right, not a privilege. The following principles guide every decision we make about your personal data. They summarise this policy — but please read the full document below for complete details.
SSL-Encrypted Transmission
Every piece of data you transmit to bajbip — from registration details to payment information — is protected by industry-standard SSL/TLS encryption in transit. We do not accept unencrypted connections to any part of the bajbip platform.
We Never Sell Your Data
bajbip does not sell, rent, or trade your personal information to any third party for their own marketing or commercial purposes. Your data is used solely to operate your account, process transactions, and improve the bajbip platform experience.
Minimal Data Collection
We collect only the personal data that is strictly necessary to deliver our services, verify your identity, process payments, and comply with our legal obligations. We do not collect data speculatively or beyond what is needed for a defined purpose.
Defined Retention Periods
Your data is not stored indefinitely. bajbip applies documented retention schedules to all categories of personal data. Once the retention period expires and there is no legal obligation to retain data further, it is securely deleted or anonymised.
Your Rights Respected
You have the right to access, correct, and request deletion of your personal data held by bajbip. We honour these rights promptly and without unnecessary barriers. Submit any data rights request to [email protected].
Transparent Cookie Use
bajbip uses cookies and similar technologies only for session management, platform functionality, and aggregate analytics. We explain every category of cookie we use and give you meaningful control over non-essential tracking.
1. Information We Collect
bajbip collects personal data in three primary ways: information you provide directly when registering or using the platform, information generated automatically through your use of the platform, and information obtained from authorised third-party sources as part of our identity verification and fraud prevention processes.
Information You Provide Directly
When you create a bajbip account or interact with our services, we collect the following categories of personal data that you provide:
- Identity data: Full legal name, date of birth, national ID or passport number (collected during KYC verification).
- Contact data: Email address, mobile phone number, residential address (including city, district, and postcode within Bangladesh).
- Account credentials: Username and encrypted password. bajbip never stores your password in plain text.
- Financial data: Payment method details necessary to process deposits and withdrawals (e.g., bKash wallet number, Nagad account, bank card details). Full card numbers are never stored by bajbip directly; card data is handled by PCI-DSS compliant payment processors.
- KYC documents: Copies of government-issued identification, proof of address, and payment method verification documents submitted during the account verification process.
- Communication data: Records of your correspondence with bajbip's customer support team, including live chat transcripts and email exchanges.
- Responsible gaming data: Self-imposed deposit limits, time-out periods, and self-exclusion requests submitted via your account settings or customer support.
Information Collected Automatically
When you access or use the bajbip platform, certain data is collected automatically through technical systems and cookies:
- Device & technical data: IP address, device type, operating system, browser type and version, screen resolution, and language settings.
- Usage data: Pages visited, features accessed, games played, bets placed, session duration, clickstream data, and navigation patterns within the platform.
- Transaction data: Records of all deposits, withdrawals, bets, casino wagers, bonuses claimed, and balance history associated with your account.
- Location data: General geographic location derived from your IP address (country and region level only). bajbip does not collect precise GPS location data.
Information from Third Parties
bajbip may receive personal data about you from authorised third-party sources in the following circumstances:
- Identity verification and KYC service providers who assist in confirming the authenticity of documents you submit.
- Payment processors (such as bKash, Nagad, and card payment gateways) who share transaction confirmation data with bajbip to reconcile deposits and withdrawals.
- Fraud prevention and anti-money laundering (AML) screening services who provide risk signals based on publicly available or shared industry databases.
2. How We Use Your Data
bajbip processes your personal data only for specific, documented purposes and only where we have a lawful basis for doing so. The following table summarises the primary purposes for which we use your data and the corresponding lawful basis.
| Purpose | Data Categories Used | Lawful Basis |
|---|---|---|
| Account registration & management | Identity, contact, credentials | Contract performance |
| Processing deposits & withdrawals | Financial, transaction data | Contract performance |
| Identity verification (KYC) | Identity, KYC documents | Legal obligation |
| Fraud prevention & AML screening | Identity, financial, device data | Legal obligation / Legitimate interest |
| Delivering customer support | Identity, contact, communication data | Contract performance |
| Responsible gaming monitoring | Usage, transaction, RG data | Legal obligation / Legitimate interest |
| Platform analytics & improvement | Usage, device, technical data | Legitimate interest |
| Sending promotional communications | Contact, usage data | Consent (opt-in only) |
bajbip does not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects without human review. Where automated risk-scoring tools are used as part of fraud prevention, a qualified member of the bajbip compliance team reviews any outcome that would result in account restriction before that restriction is applied.
Marketing Communications
bajbip will only send you promotional emails, SMS messages, or push notifications if you have explicitly opted in to receive them during registration or via your account communication preferences. You may withdraw your consent to marketing communications at any time by updating your account preferences or by contacting [email protected]. Withdrawal of marketing consent does not affect the lawfulness of processing carried out before the withdrawal.
3. Data Sharing & Third Parties
bajbip does not sell, rent, or otherwise transfer your personal data to third parties for their own commercial purposes. We share your data only in the limited circumstances described below, and only to the minimum extent necessary for the stated purpose.
Service Providers
bajbip engages trusted third-party service providers who process personal data on our behalf under strict contractual obligations. These providers are permitted to use your data only for the specific services they supply to bajbip and may not use it for any other purpose. Categories of service providers we engage include:
- Payment processing partners (bKash, Nagad, Rocket, Upay, Visa and Mastercard processing networks) for the purpose of executing financial transactions.
- KYC and identity verification providers who assist bajbip in confirming the authenticity of player-submitted documents.
- Fraud prevention and AML screening services that help bajbip detect and prevent suspicious activity.
- Game content providers (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) who supply the casino and slot games available on the bajbip platform. These providers may collect session-level game data directly through their certified RNG software.
- Cloud infrastructure and data hosting providers who store platform data in secure, access-controlled environments.
- Customer support tooling providers whose platforms facilitate live chat and email support.
Legal & Regulatory Disclosures
bajbip may disclose your personal data to government authorities, law enforcement agencies, or regulatory bodies where required to do so by applicable law, court order, or regulatory directive. In such cases, bajbip will disclose only the minimum data required to satisfy the legal obligation and, where legally permitted, will notify you of the disclosure.
Business Transfers
In the event of a merger, acquisition, restructuring, or sale of assets involving bajbip, your personal data may be transferred to the acquiring entity as part of that transaction. In such circumstances, bajbip will take reasonable steps to ensure that the acquiring entity is bound by privacy obligations at least equivalent to those set out in this Privacy Policy, and will notify affected users as required.
4. Cookies & Tracking Technologies
bajbip uses cookies and similar tracking technologies (including local storage and session storage) to operate the platform, maintain your session, and gather aggregate analytics data about platform usage. Cookies are small text files placed on your device by your browser when you visit bajbip.net.
Categories of Cookies We Use
| Cookie Category | Purpose | Can Be Disabled? |
|---|---|---|
| Strictly Necessary | Session authentication, security tokens, load balancing. Required for the platform to function. | No — essential for operation |
| Functional | Remembering your language preference, display settings, and game lobby layout choices. | Yes — disabling may affect UX |
| Analytics | Aggregate, anonymised data on page visits, feature usage, and session duration used to improve the platform. | Yes — via account preferences |
| Fraud Prevention | Device fingerprinting and behavioural signals used to detect and prevent fraudulent account activity. | No — required for security |
bajbip does not use third-party advertising cookies or cross-site tracking pixels for behavioural advertising purposes. We do not participate in retargeting advertising networks.
Managing Cookies
You can manage cookie preferences for functional and analytics cookies through your bajbip account settings. You may also configure your browser to block or delete cookies; however, disabling strictly necessary cookies will prevent you from logging in and using the bajbip platform. Instructions for managing cookies in common browsers are available from the browser developer's support documentation.
5. Data Security Measures
bajbip implements a layered approach to data security, combining technical controls, procedural safeguards, and access governance to protect your personal data against unauthorised access, disclosure, alteration, or destruction.
Technical Controls
- TLS/SSL encryption on all data transmitted between your device and bajbip servers.
- AES-256 encryption at rest for sensitive stored data including KYC documents and payment records.
- Bcrypt password hashing — passwords are never stored in reversible form.
- Web application firewall (WAF) and DDoS protection on all public-facing platform endpoints.
- Intrusion detection systems that monitor for anomalous access patterns in real time.
- Regular penetration testing conducted by qualified third-party security professionals.
Access Controls
Access to personal data within bajbip's internal systems is restricted on a strict need-to-know basis. All staff members with access to personal data are bound by confidentiality obligations. Access privileges are reviewed regularly and revoked immediately upon staff departure. Privileged access to production systems requires multi-factor authentication.
Incident Response
In the unlikely event of a data security incident that affects your personal data, bajbip will assess the incident promptly and take immediate containment action. Affected users will be notified of any incident that poses a material risk to their rights or interests within a reasonable time frame, with guidance on protective steps they should take.
6. Data Retention Policy
bajbip retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. The following retention periods apply to the main categories of personal data we hold:
| Data Category | Retention Period | Reason for Retention |
|---|---|---|
| Account registration data | Duration of account + 5 years after closure | Legal obligation, dispute resolution |
| KYC documents | Duration of account + 5 years after closure | AML regulatory obligation |
| Financial transaction records | Duration of account + 7 years after closure | Financial record-keeping obligations |
| Betting & gaming history | Duration of account + 5 years after closure | Dispute resolution, responsible gaming |
| Customer support records | 3 years from last contact | Service quality, dispute resolution |
| Marketing consent records | Until consent is withdrawn + 2 years | Demonstrating lawful marketing basis |
| Analytics & usage logs | 13 months (rolling) | Platform improvement, fraud detection |
Upon the expiry of the applicable retention period, personal data is either securely deleted using industry-standard data destruction methods or irreversibly anonymised so that it can no longer be attributed to an identifiable individual. Anonymised aggregate data may be retained indefinitely for statistical analysis purposes.
7. Your Privacy Rights
As a bajbip account holder, you hold the following rights in respect of your personal data. bajbip is committed to honouring these rights promptly, transparently, and without unnecessary barriers.
- Right of Access: You have the right to request a copy of the personal data that bajbip holds about you. We will provide this in a clear, readable format within a reasonable time frame of receiving your request.
- Right to Rectification: If any personal data bajbip holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update most account details directly within your bajbip account settings. For KYC-related data corrections, contact support.
- Right to Erasure: You may request that bajbip delete your personal data where it is no longer necessary for the purpose it was collected, where you have withdrawn consent, or where you object to processing and there is no overriding legitimate interest. Note that erasure requests may be subject to overriding legal retention obligations — for example, financial transaction records required to be retained under AML regulations cannot be erased early.
- Right to Restriction of Processing: You may request that bajbip restrict the processing of your data in certain circumstances, such as while a dispute about data accuracy is being resolved.
- Right to Data Portability: Where processing is based on your consent or contract performance and is carried out by automated means, you may request a copy of your data in a structured, machine-readable format.
- Right to Object: You have the right to object to bajbip processing your data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, subject to bajbip demonstrating compelling overriding grounds.
- Right to Withdraw Consent: Where bajbip processes your data on the basis of your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
How to Exercise Your Rights
To exercise any of the above rights, please submit a written request to [email protected] with the subject line "Privacy Rights Request". To protect your data, we may need to verify your identity before processing the request. We will respond to all valid requests within 30 days. Complex or multiple requests may require up to 60 days, in which case we will inform you of the extension.
8. Policy Updates & Contact
bajbip reviews this Privacy Policy periodically and reserves the right to update or amend it at any time. When material changes are made to this Privacy Policy, we will update the "Last Updated" date at the top of this page and, where appropriate, notify registered account holders via email or an in-platform notification. Continued use of the bajbip platform following the publication of an updated Privacy Policy constitutes your acceptance of the changes.
We encourage you to review this page periodically to stay informed about how bajbip is protecting your personal data. The current version of this Privacy Policy will always be accessible at bajbip.net/privacy-policy.
Contacting bajbip About Privacy
If you have any questions, concerns, or complaints about this Privacy Policy or the way bajbip handles your personal data, please contact our support team at [email protected]. Please include "Privacy Enquiry" in the subject line so that your message is directed to the appropriate team promptly. The bajbip support team operates 24 hours a day, 7 days a week, and responds in English.
bajbip is committed to resolving all privacy-related concerns in good faith and within a reasonable time frame. If you are not satisfied with our response, you retain the right to escalate your concern through any applicable legal or regulatory channel available to you.
Questions About Your Privacy?
Our 24/7 English-language support team is ready to answer any questions about how bajbip handles your personal data. You can also review our full Terms & Conditions or explore the bajbip platform.
Visit Our FAQ Terms & Conditions Responsible Gaming Explore bajbip Casino18+ only. Please gamble responsibly. Gambling is for entertainment purposes only.