Privacy Policy — baji35 Data Protection Commitment

Our Commitment

Privacy at a Glance

These six principles summarise how baji35 approaches the privacy and security of every player's personal data. The full legal text follows below.

Minimal Data Collection

baji35 collects only the personal data that is strictly necessary to operate your account, verify your identity, process payments, and comply with applicable legal obligations. We do not harvest data beyond what serves a clear, documented purpose.

No Sale of Personal Data

baji35 does not sell, rent, or trade your personal information to third-party marketers or data brokers under any circumstances. Your data is used solely to provide and improve the baji35 service and to meet our legal and regulatory obligations.

SSL Encryption in Transit

All data transmitted between your device and the baji35 platform is protected by industry-standard TLS/SSL encryption. This applies to login sessions, payment processing, account updates, and all other interactions with baji35.net.

Your Right to Access & Delete

You may request a copy of the personal data baji35 holds about you at any time. You may also request the correction of inaccurate data or the deletion of your account and associated personal records, subject to our legal retention obligations.

Transparent Cookie Use

baji35 uses cookies and similar technologies to maintain login sessions, remember your preferences, and analyse platform performance. We do not use third-party advertising cookies or cross-site tracking cookies. You can manage your cookie preferences at any time.

Defined Retention Periods

baji35 retains personal data only for as long as necessary to fulfil the purpose for which it was collected. Account data is retained for a minimum of 5 years following account closure to satisfy anti-money-laundering record-keeping requirements applicable in Bangladesh.

Section 1

Information We Collect

baji35 collects personal information through account registration, identity verification, payment processing, and your ongoing use of the platform.

KYC required Mobile number verified Payment data secured

When you register an account on baji35, interact with our platform, or contact our support team, we collect a range of personal information. The categories of data we collect and the circumstances in which each category arises are described below.

Category	Examples	When Collected
Identity Data	Full legal name, date of birth, National ID number, passport number	Registration and KYC verification
Contact Data	Email address, mobile phone number, city/district of residence	Registration and account updates
Financial Data	bKash wallet number, Nagad number, Rocket number, Upay number, bank account details, transaction history	Deposits, withdrawals, and payment verification
Technical Data	IP address, device type, browser type and version, operating system, session tokens	Each platform visit and login session
Usage Data	Pages visited, games played, bets placed, session duration, click patterns	Ongoing use of the baji35 platform
Communication Data	Support chat transcripts, email correspondence, feedback submissions	When you contact baji35 support
Document Data	Copies of government-issued photo ID, selfie for liveness verification	KYC and age verification process

                Sensitive Data: baji35 does not intentionally collect sensitive personal data categories such as health records, religious beliefs, or political opinions. If any such information is incidentally disclosed in a support communication, it will not be stored, processed, or used beyond the immediate context of that communication.
              

We collect data directly from you (via registration forms, KYC submissions, and support contacts), automatically (via cookies and server logs as you use the platform), and in limited cases from third parties (such as identity verification service providers and payment processors) where necessary to complete KYC or fraud checks. We do not purchase personal data lists or collect data from social media platforms without your explicit consent.

Section 2

How We Use Your Information

Every use of your personal data by baji35 is tied to a specific lawful purpose. We do not process your data for any purpose incompatible with the reasons for which it was originally collected.

baji35 processes your personal information only where we have a lawful basis for doing so. The lawful bases we rely on are: (a) performance of a contract with you — i.e., operating your player account and delivering our services; (b) compliance with a legal obligation — e.g., anti-money-laundering record-keeping and age verification; (c) our legitimate interests — e.g., fraud prevention and platform security; and (d) your consent — e.g., receiving optional promotional communications from baji35.

1

Account Management: We use your identity and contact data to create and maintain your player account, authenticate your logins, enable password resets, and communicate account status updates to you.

2

Payment Processing: We use your financial data and identity documents to process deposits and withdrawals via bKash, Nagad, Rocket, Upay, SureCash, and supported bank channels. All transaction data is retained for a minimum of 5 years to meet anti-money-laundering obligations.

3

Identity and Age Verification: We use your identity documents and KYC data to confirm that you are who you say you are and that you meet the minimum age requirement of 18 years. This processing is mandatory — accounts that cannot be verified will be suspended pending successful verification.

4

Fraud Prevention and Security: We use technical data (IP address, device fingerprint, login history) and usage data (betting patterns, deposit velocity) to detect and investigate potentially fraudulent activity, bonus abuse, multi-accounting, and other security threats to the platform.

5

Responsible Gaming: We use your usage data and account activity to identify signs of potentially harmful gambling behaviour. This may include monitoring session length, deposit frequency, and loss patterns. Where concerning patterns are detected, our responsible gaming team may reach out to offer support tools such as deposit limits or voluntary self-exclusion.

6

Customer Support: We use your contact data and communication data to respond to your support requests, investigate complaints, and improve our support processes.

7

Platform Improvement: We use anonymised and aggregated usage data to understand how players interact with baji35, which features are most used, and where technical or user experience issues arise. This data does not identify you personally.

8

Marketing Communications (with consent): Where you have opted in to receive marketing communications from baji35, we may use your contact data to send you promotional offers, bonus notifications, and news about new games or features. You may withdraw this consent at any time by contacting support or updating your account preferences.

Section 3

Sharing & Disclosure of Data

baji35 does not sell your personal data. Sharing is limited to trusted service partners who support our operations and to authorities where legally required.

All third-party service providers who receive baji35 player data are bound by strict data processing agreements and are prohibited from using that data for any purpose other than the contracted service.

baji35 does not sell, rent, or trade your personal data to third parties. We share personal data only in the limited circumstances described below, and only to the extent necessary for the relevant purpose.

Payment Processors: To complete your deposit and withdrawal transactions, we share the minimum necessary financial and identity data with our payment partners, which include mobile financial service providers (bKash, Nagad, Rocket, Upay, SureCash) and partner banks (Dutch-Bangla Bank, City Bank, BRAC Bank, Sonali Bank, Islami Bank). These providers are independently regulated and are contractually required to protect your data in accordance with their own privacy obligations.

Identity Verification Providers: We work with third-party KYC and identity verification specialists to authenticate the documents you submit during account verification. These providers process your identity documents and liveness data solely for the purpose of completing your verification and are prohibited from retaining or using that data beyond the scope of this service.

Game Content Providers: When you play games on baji35 powered by third-party studios — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — a limited technical dataset (typically a session token and wallet balance) is shared with the relevant studio's game server to enable gameplay. These providers do not receive your full identity data or payment details.

Fraud and Security Partners: We may share technical data (IP addresses, device identifiers, transaction patterns) with specialist fraud prevention services to detect and prevent financial crime, bonus abuse, and platform manipulation. Data shared for this purpose is used solely for security analysis.

Legal and Regulatory Disclosures: baji35 will disclose personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by law, pursuant to a valid legal order, or where we reasonably believe disclosure is necessary to prevent imminent harm, financial crime, or a serious security threat. We will notify affected players of such disclosures where we are legally permitted to do so.

                International Transfers: Some of our game content providers and technical infrastructure partners operate servers outside Bangladesh. Where your data is transferred internationally for these purposes, we ensure that appropriate safeguards are in place, including standard contractual clauses or equivalent data transfer protections. We do not transfer your financial or identity documents outside Bangladesh without your explicit consent, except where required by law.
              

Section 4

Cookies & Tracking Technologies

baji35 uses cookies to keep you logged in, remember your preferences, and measure platform performance. We do not use advertising cookies or third-party cross-site trackers.

Managed in account settings Analytics only

Like most web platforms, baji35 uses cookies — small text files stored on your device — and similar technologies such as local storage and session tokens. The table below describes the categories of cookies we use and their purpose.

Cookie Type	Purpose	Duration	Deletable?
Essential	Maintain your logged-in session, load balancing, security tokens (CSRF protection)	Session / up to 30 days	No — required for the platform to function
Preference	Remember your display preferences, language setting, and last-visited game category	Up to 12 months	Yes — via browser settings
Analytics	Measure page views, session duration, error rates, and feature usage (aggregated, anonymised)	Up to 24 months	Yes — via account privacy settings
Fraud Detection	Device fingerprinting tokens used to detect multi-accounting and suspicious login patterns	Up to 12 months	No — required for platform security

baji35 does not use advertising cookies, retargeting pixels, or any third-party tracking technologies that follow your browsing activity across other websites. Our analytics data is processed in aggregate and does not identify you personally.

You can control non-essential cookies through your web browser settings. Most browsers allow you to view, block, or delete individual cookies. Please note that blocking essential cookies will prevent certain core platform functions — including maintaining your login session — from working correctly. Detailed instructions for managing cookies in the most common browsers are available from the browser developer's support documentation.

Section 5

Data Security & Retention

baji35 uses layered technical and organisational security measures to protect your data at rest and in transit. Personal data is retained only as long as legally required.

TLS 1.3 in transit Encrypted at rest 5-year AML retention

baji35 takes the security of your personal data seriously and implements a range of technical and organisational safeguards proportionate to the sensitivity of the data concerned and the risks involved in its processing.

1

Encryption in Transit: All communications between your browser or app and baji35 servers are encrypted using TLS 1.2 or higher. This protects your login credentials, payment details, and personal information from interception during transmission.

2

Encryption at Rest: Personal data stored in baji35 databases, including identity documents and financial records, is encrypted at rest using AES-256 or equivalent standards. Encryption keys are managed separately from the encrypted data and are rotated on a regular schedule.

3

Access Controls: Access to player personal data within baji35 is restricted on a strict need-to-know basis. Staff members are granted access only to the data categories necessary for their specific role. Access rights are reviewed regularly, and all internal data access is logged and auditable.

4

Account Security: baji35 requires all players to set a strong password at registration. We strongly recommend enabling any available two-factor authentication options. You are responsible for keeping your login credentials confidential and for logging out of your account when using shared or public devices.

5

Incident Response: In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, baji35 will notify affected players without undue delay and will take all reasonably practicable steps to contain and remediate the breach. We will also report the incident to relevant authorities where required by applicable law.

Data Retention: baji35 retains your personal data for the following periods:

Account and transaction data: Retained for a minimum of 5 years from the date of the last transaction or account closure, whichever is later, to meet anti-money-laundering record-keeping obligations.
KYC documents: Retained for a minimum of 5 years following account closure.
Support communications: Retained for 2 years from the date of the communication, unless related to an ongoing dispute or legal matter.
Analytics data: Anonymised and aggregated after 24 months; the anonymised dataset may be retained indefinitely for platform improvement purposes.
Marketing consent records: Retained for 3 years from the date consent was last confirmed or withdrawn.

After the applicable retention period expires, personal data is securely deleted or irreversibly anonymised. Deletion requests submitted by players may be fulfilled earlier than the above periods where no overriding legal retention obligation applies.

Section 6

Your Privacy Rights

You have meaningful rights over the personal data baji35 holds about you. Requests are handled within 30 days and are free of charge in most circumstances.

Submit privacy requests to: [email protected] with the subject line "Privacy Request — [Your Request Type]".

As a player on the baji35 platform, you hold the following rights in relation to your personal data. To exercise any of these rights, contact our support team at [email protected]. We will respond to all verified requests within 30 days. We may ask you to confirm your identity before processing a privacy rights request.

1

Right to Access: You may request a copy of the personal data baji35 holds about you. We will provide this in a structured, commonly used format. One copy per request is provided free of charge; additional copies may incur a reasonable administrative fee.

2

Right to Rectification: If any of the personal data we hold about you is inaccurate or incomplete, you may request that we correct or update it. Minor profile details (such as contact number or email) can be updated directly through your account settings without contacting support.

3

Right to Erasure ("Right to Be Forgotten"): You may request the deletion of your personal data and baji35 account. We will fulfil such requests where no overriding legal retention obligation prevents deletion. Note that AML regulations require us to retain transaction and identity records for a minimum of 5 years regardless of an erasure request.

4

Right to Restrict Processing: You may request that we limit the ways in which we process your personal data while a dispute or investigation is ongoing, or where you contest the accuracy of the data we hold.

5

Right to Data Portability: Where your data is processed on the basis of your consent or a contract, you may request that we provide your personal data in a machine-readable format so that you can transfer it to another service provider.

6

Right to Object: You may object at any time to baji35 processing your personal data for direct marketing purposes. Upon receiving such an objection, we will immediately cease sending marketing communications to you. You may also object to processing based on our legitimate interests, in which case we will assess whether our interests override your objection.

7

Right to Withdraw Consent: Where we process your data based on your consent (such as for marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that occurred before the withdrawal.

Section 7

Third-Party Services & Links

baji35 integrates with selected third-party providers to deliver games and payment processing. Each provider operates under their own privacy framework.

The baji35 platform integrates with a number of third-party service providers whose technologies are essential to delivering our services. These include game content studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi), payment processors (bKash, Nagad, Rocket, Upay, SureCash, Dutch-Bangla Bank, City Bank, BRAC Bank, Sonali Bank, Islami Bank), and identity verification providers.

Each of these providers operates under their own privacy policies and data protection frameworks, and baji35 is not responsible for the privacy practices of these third parties beyond the contractual data processing obligations we impose on them. We recommend reviewing the privacy documentation of any payment provider you use to understand how they handle your financial and personal data.

baji35 does not embed third-party advertising networks, social media tracking pixels, or affiliate tracking technologies on the main platform pages that are accessible to logged-in players. If baji35.net contains any links to third-party informational resources (for example, responsible gaming organisations), those external sites are governed entirely by their own privacy policies, and baji35 accepts no responsibility for their content or data practices.

                Game Providers and Player Data: When you launch a game hosted by a third-party studio such as Pragmatic Play or Evolution Gaming, your game session is managed on that studio's server infrastructure. The data exchanged for this purpose is limited to session tokens, wallet balance, and game result data. baji35 does not share your name, email address, or payment details with game studios for the purpose of running game sessions.
              

Section 8

Changes to This Policy

baji35 may update this Privacy Policy from time to time. Material changes will be communicated to registered players via their account email before the change takes effect.

7-day advance notice for material changes

baji35 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. The date of the most recent revision is always displayed at the top of this page.

For material changes — that is, changes that significantly affect the way we collect, use, or share your personal data — baji35 will notify all registered players via the email address on file at least 7 days before the change takes effect. Minor clarifications, corrections of typographical errors, or changes that do not materially affect your privacy rights may be made without prior notice.

Your continued use of the baji35 platform following the effective date of any updated Privacy Policy constitutes your acceptance of the revised policy. If you do not agree with a material change to this policy, you should close your account and request deletion of your personal data before the change takes effect by contacting our support team at [email protected].

We encourage you to review this page periodically so that you remain informed about how baji35 protects your personal information. The governing language of this Privacy Policy is English. In the event of any dispute concerning the interpretation of this policy, the English-language version shall prevail.

If you have any questions about this Privacy Policy or about how baji35 handles your personal data, please contact our support team at [email protected]. We aim to respond to all privacy enquiries within 5 Bangladesh Standard Time (BST, UTC+6) business days.

baji35 Privacy Policy

Privacy at a Glance

Information We Collect

How We Use Your Information

Cookies & Tracking Technologies

Data Security & Retention

Your Privacy Rights

Third-Party Services & Links

Changes to This Policy

Ready to Play on a Platform You Can Trust?