baj888 Privacy Policy

This Privacy Policy ("Policy") sets out the basis on which baj888 ("baj888", "we", "us", "our") collects, processes, stores, and shares personal data obtained from users ("Player", "you", "your") who access or register on the baj888 platform at baj888.bio.

baj888 is committed to handling personal data responsibly and in line with internationally recognised data protection principles. We collect only the data that is necessary for the provision of our services, the processing of transactions, the verification of identity, and compliance with our anti-money laundering obligations.

By registering an account with baj888, making a deposit, or otherwise using any service on the platform, you acknowledge that you have read and understood this Privacy Policy and you consent to the processing of your personal data as described herein. If you do not agree with the terms of this Policy, you must not use the baj888 platform.

baj888 collects personal data through several channels: directly from you when you register an account, from your ongoing use of the platform, from payment processors when you make deposits or withdrawals, and from identity verification providers during the KYC process.

• National ID Card (NID) number and scanned copy, or passport details where NID is unavailable.
• Selfie photograph or live facial image used for identity matching during verification.
• Proof of address documents such as utility bills or bank statements dated within 90 days.
• Source of funds documentation where required by our internal risk assessment procedures.

• bKash, Nagad, Rocket, or Upay mobile wallet account reference numbers used for deposits and withdrawals.
• Bank account details where bank transfers are the chosen payment method.
• Transaction history including deposit amounts, withdrawal amounts, dates, and payment method references.
• Wagering history including bet amounts, game selections, outcomes, and bonus usage records.

• IP address and approximate geographic location at the time of login and during sessions.
• Device type, operating system version, browser type and version, and screen resolution.
• Session duration, pages visited, game sessions initiated, and navigation paths through the platform.
• Cookie identifiers and session tokens used to maintain your login state and preferences.
• Crash reports and error logs used to diagnose and resolve technical issues on the platform.

baj888 processes personal data only for specific, legitimate purposes. The primary purposes for which we use your data are described below alongside the lawful basis on which each processing activity rests.

• Account Operation: To create, maintain, and manage your baj888 account, authenticate your identity at login, and provide access to all platform features. Lawful basis: performance of contract.
• Payment Processing: To facilitate deposits and withdrawals via bKash, Nagad, Rocket, Upay, and supported bank channels. Lawful basis: performance of contract.
• Identity Verification (KYC): To verify that you meet the 21+ age requirement and to comply with our anti-money laundering and know-your-customer obligations. Lawful basis: legal obligation.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, account takeovers, bonus abuse, and money laundering on the platform. Lawful basis: legitimate interest.
• Customer Support: To respond to your enquiries, resolve disputes, and provide assistance when you contact us via email or live chat. Lawful basis: performance of contract.
• Responsible Gaming: To monitor betting patterns that may indicate problem gambling and to enforce self-exclusion, deposit limits, and cooling-off periods that you have requested. Lawful basis: legal obligation and legitimate interest.
• Platform Improvement: To analyse aggregate usage patterns, identify technical issues, and improve the performance and design of the baj888 platform. Lawful basis: legitimate interest.
• Marketing Communications: To send you promotional offers, bonus notifications, and seasonal campaigns where you have provided explicit consent. You may withdraw consent at any time. Lawful basis: consent.

baj888 does not sell your personal data. We share data only with the categories of third-party service providers listed below, and only to the extent strictly necessary for the purposes described.

Transaction data is shared with payment gateway providers and mobile financial service operators (including bKash, Nagad, Rocket, and Upay integrations) to process deposits and withdrawals on your behalf. These providers are contractually bound to use your data only for payment processing purposes.

Where baj888 engages third-party KYC technology providers to conduct identity verification, your NID or passport data and facial image may be processed by those providers under strict data processing agreements. Such providers operate under applicable data protection standards and are prohibited from retaining your data beyond the verification period.

Game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive limited session data necessary to deliver their games within the baj888 platform. These providers do not receive your full identity or financial records — only the data required to initialise and validate game sessions.

baj888 may disclose personal data to competent authorities where required to do so by law, court order, or as part of a legitimate investigation into financial crime or fraud. We will not disclose more data than is strictly required by the relevant legal obligation.

baj888 uses cookies and similar browser-based storage technologies to operate the platform effectively. The types of cookies we use are described below.

• Strictly Necessary Cookies: These cookies are essential for the platform to function. They maintain your login session, store your language and currency preferences, and protect your account against cross-site request forgery. These cookies cannot be disabled while you are using the platform.
• Performance & Analytics Cookies: These cookies collect aggregate, anonymised information about how players navigate and use the baj888 platform. They help us identify pages that generate errors, understand which features are most used, and optimise overall platform performance. No personally identifiable information is included in these analytics reports.
• Functional Cookies: These cookies remember your preferences such as game display settings, notification preferences, and previously selected payment methods, so you do not need to re-enter them on each visit.

You may manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may limit the functionality of the baj888 platform. Clearing cookies will log you out of your current session and remove saved preferences.

baj888 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or contractual obligations.

• Active account data is retained for the lifetime of your account plus a period of five years following account closure, in line with standard anti-money laundering record-keeping requirements.
• KYC identity documents are retained for a minimum of five years from the date of submission, regardless of account status, to satisfy our compliance obligations.
• Transaction records including deposit and withdrawal histories are retained for a minimum of five years to support financial auditing and fraud investigation requirements.
• Marketing consent records are retained from the date of consent until you withdraw it, plus a short additional period to evidence the withdrawal.
• Technical logs and session data are retained for a maximum of 24 months, after which they are anonymised or securely deleted.
• Where you request account deletion and there is no outstanding legal obligation requiring retention, baj888 will securely delete or anonymise your personal data within 30 days of the request being confirmed.

All personal data stored by baj888 is held on secure servers protected by access controls, encryption at rest, and regular security audits. Access to personal data is restricted to baj888 personnel who require it to perform their job functions.

As a baj888 player, you hold a number of rights with respect to the personal data we hold about you. To exercise any of these rights, please contact our support team at [email protected] with your registered account details and the nature of your request.

• Right of Access: You may request a copy of all personal data baj888 holds about you. We will respond to verified requests within 30 days.
• Right to Rectification: If any of the personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected without undue delay.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected and where no overriding legal obligation requires its retention.
• Right to Restrict Processing: You may ask baj888 to pause the processing of your personal data in specific circumstances, for example while a rectification request is being reviewed.
• Right to Data Portability: You may request that baj888 provide you with your account data in a structured, commonly used, machine-readable format.
• Right to Withdraw Consent: Where processing is based on your consent (such as for marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.
• Right to Object: You may object to the processing of your personal data where baj888 relies on legitimate interest as the legal basis, subject to our being able to demonstrate overriding legitimate grounds.

baj888 implements a range of technical and organisational security measures to protect your personal data against accidental loss, unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption on all data in transit between your device and baj888 servers.
• Encryption at rest for stored personal data, KYC documents, and financial records.
• Role-based access controls ensuring that only authorised personnel can access personal data, limited strictly to what their job function requires.
• Regular third-party security assessments and penetration testing of the baj888 platform infrastructure.
• Multi-factor authentication requirements for all internal administrative access to systems holding personal data.
• Automatic session timeout mechanisms to reduce the risk of unauthorised access via unattended devices.

In the event of a personal data breach that poses a risk to affected players, baj888 will take immediate steps to contain the breach, assess its impact, and notify affected players and relevant authorities as required by applicable law. Notifications will be sent to the email address registered on your baj888 account without undue delay.

baj888 is strictly an adults-only platform. We do not knowingly collect personal data from any individual under the age of 21. Registration on the baj888 platform requires confirmation that you are at least 21 years of age, and we conduct age verification checks to enforce this requirement.

If baj888 becomes aware that personal data has been collected from a person under 21 years of age, we will immediately close the relevant account, void all associated transactions, and securely delete the data concerned. If you believe that a minor may have registered on the platform, please notify us immediately at [email protected].

baj888 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform functionality. The date of the most recent revision is displayed at the top of this page.

Where a change is material — meaning it significantly affects how we collect or use your personal data — we will notify you via the email address registered on your account at least 14 days before the change takes effect. Your continued use of the baj888 platform after the effective date of any revision constitutes your acceptance of the updated Policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data, please contact our dedicated privacy support team: