Privacy Policy for baaji888

baaji888 collects personal data from players through several channels: directly when you register or use the Platform, automatically when you navigate the site, and occasionally from trusted third-party service providers. Below is a detailed breakdown of the categories of information we may hold about you.

You are not obligated to provide all requested information, but failure to supply certain data — particularly identity and contact details — may limit your ability to use core platform features, including withdrawals and bonus claims.

baaji888 processes your personal data only where we have a legitimate purpose and a valid legal basis for doing so. The table below maps each primary use of your data to the corresponding legal basis.

baaji888 will never use your personal data for purposes that are incompatible with those listed above without first informing you and, where required, obtaining your consent. If you have concerns about any specific processing activity, please contact us at support@baaji888.

baaji888 does not sell your personal data. We may, however, share specific categories of data with carefully selected third parties where it is necessary to deliver our services or fulfil legal requirements. Every third party with whom we share data is bound by confidentiality obligations and is permitted to use that data only for the specified purpose.

• Payment Processors: We share the minimum financial information required to process your transactions with our payment partners, including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, and Mastercard. These providers operate under their own privacy and security frameworks and are independently regulated.
• Game Providers: Your gameplay session data (game ID, bet size, outcome) is shared with our certified game providers — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, Habanero, SmartSoft, and Big Time Gaming — solely to facilitate game delivery, resolve technical disputes, and maintain RNG certification records.
• Identity Verification Services: We work with KYC service providers to verify the authenticity of identity documents you submit. These providers process identity data under strict contractual and technical safeguards.
• Analytics Providers: Anonymised and aggregated usage data may be shared with analytics platforms to help us understand how players navigate the site and identify areas for improvement. No personally identifiable information is included in these data transfers.
• Legal & Regulatory Authorities: We will disclose your personal data to law enforcement agencies, financial intelligence units, or other competent authorities when required to do so by applicable law, court order, or where we believe disclosure is necessary to protect the safety of any person or to prevent financial crime.
• Business Transfers: In the event of a merger, acquisition, restructuring, or sale of some or all of baaji888's business assets, your personal data may be transferred to the acquiring entity. We will notify affected players in advance of any such transfer where reasonably practicable.

baaji888 uses cookies and similar technologies (such as local storage and session tokens) to operate the Platform reliably, remember your preferences, analyse site traffic, and deliver relevant content. Below is an overview of the cookie categories we use.

You can manage your cookie preferences at any time through your browser settings. Most browsers allow you to block or delete cookies; however, disabling essential cookies will impair or prevent your ability to log in and use the Platform. Please consult your browser's help documentation for guidance on cookie management.

baaji888 retains your personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable record-keeping obligations. The following retention periods apply as a general guide:

• Active Account Data: Retained for the full duration of your account's active status plus a period of 5 years following account closure, to support dispute resolution, financial audit, and fraud prevention purposes.
• Transaction Records: Deposit and withdrawal records, including associated payment provider references and amounts in BDT, are retained for a minimum of 5 years from the date of the transaction.
• KYC Documents: Identity documents submitted for age and identity verification are retained for 5 years following account closure. Documents are stored in encrypted form with access restricted to authorised personnel only.
• Customer Support Communications: Email and live chat records are retained for 3 years following the date of the last interaction in a given support thread.
• Marketing Consent Records: Records of your consent to or withdrawal from marketing communications are retained for the duration of your account and for 2 years thereafter, to demonstrate compliance.
• Technical / Log Data: Server logs and IP address records are typically retained for 12 months for security monitoring and fraud detection purposes, after which they are anonymised or deleted.

Upon expiry of the applicable retention period, your data is either securely deleted from our systems or anonymised so that it can no longer be attributed to you. Where data is anonymised rather than deleted, it may be retained indefinitely for statistical and analytical purposes without further notice.

As a player on baaji888, you have a number of rights in relation to your personal data. These rights are outlined below. To exercise any of them, please contact our support team at support@baaji888 with the subject line "Privacy Rights Request" and your registered email address for identity verification.

We aim to respond to all privacy rights requests within 30 calendar days of receipt. In complex cases, this period may be extended by a further 30 days, in which case we will notify you of the extension and the reason for it. We will not charge a fee for exercising your rights unless a request is manifestly unfounded or excessive, in which case a reasonable administrative fee may apply.

baaji888 takes the security of your personal data seriously and has implemented a multi-layered approach to protect it from unauthorised access, accidental loss, misuse, alteration, or disclosure. Our key security measures include the following:

• Transport Layer Security (TLS/SSL): All data transmitted between your device and our servers is encrypted using TLS 1.2 or higher. This ensures that your login credentials, payment details, and personal data cannot be intercepted in transit.
• Encryption at Rest: Sensitive data stored on our servers — including identity documents, financial records, and authentication credentials — is encrypted at rest using industry-standard symmetric encryption protocols.
• Access Controls: Access to systems that hold player personal data is restricted to authorised personnel only, on a strict need-to-know basis. All internal access is logged and subject to periodic review.
• Two-Factor Authentication (2FA): Players are encouraged to enable 2FA on their accounts for an additional layer of login security. baaji888 staff accounts with access to player data are required to use 2FA.
• Intrusion Detection & Monitoring: Our infrastructure is continuously monitored for unusual access patterns, suspicious activity, and potential security incidents. Automated alerts are in place to flag and contain threats in real time.
• Penetration Testing: The Platform undergoes periodic security assessments conducted by independent security specialists to identify and address potential vulnerabilities before they can be exploited.
• Staff Training: All baaji888 employees who handle player data receive mandatory training on data protection obligations, phishing awareness, and secure data handling procedures.

Despite these measures, no internet-based system is entirely immune to security risks. In the unlikely event of a data breach that affects your personal data, baaji888 will notify affected players without undue delay, providing details of the nature of the breach, the categories of data affected, and the steps we are taking to mitigate any harm.

baaji888 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. When we make changes, we will update the "Effective Date" at the top of this document.

For material changes — those that significantly affect how we process your personal data or alter your rights — we will provide advance notice by sending an email to the address registered on your account and/or displaying a prominent notice on the Platform for a reasonable period prior to the change taking effect. We encourage you to review this page periodically to stay informed of how baaji888 handles your data.

Your continued use of the Platform following the effective date of any revised Privacy Policy constitutes your acknowledgement of the changes. If you do not agree with the revised policy, you should stop using the Platform and contact support to request account closure and the return of any real-money balance held on your account.

For any questions about this Privacy Policy, how baaji888 handles your personal data, or to exercise any of your privacy rights, please contact our dedicated privacy team at: support@baaji888. Support is available 8 am – 10 pm BST (UTC+6), every day.

This Privacy Policy was last reviewed and updated on 1 January 2026.