baje99 Privacy Policy

1 Data Controller

baje99 acts as the data controller in respect of the personal data of all registered players and site visitors. As data controller, baje99 determines the purposes and means by which personal data is processed. For all data protection inquiries, players may contact us at [email protected]. All privacy-related requests will be acknowledged within 5 business days and resolved within 30 calendar days of receipt.

2 Data We Collect

baje99 collects personal data across several categories, depending on how you interact with the platform:

We do not collect sensitive personal data categories such as racial or ethnic origin, political opinions, religious beliefs, biometric data, or health data, except where expressly required for age-verification or responsible gaming purposes.

3 How We Collect Your Data

baje99 collects personal data through the following channels:

• Direct interactions: Data you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting support, or participating in promotions.
• Automated technologies: When you visit baje99.bio, we may automatically collect technical data using cookies, server logs, and similar tracking technologies. This includes your IP address, browser fingerprint, and session behaviour.
• Third-party sources: We may receive data about you from identity verification providers, fraud detection services, and payment processors when you transact on the platform.
• Public sources: In certain fraud-prevention contexts, baje99 may cross-reference information against publicly available records or commercially available risk databases.

4 How We Use Your Data

baje99 processes your personal data for the following specific purposes:

• To create and manage your player account and verify your identity in accordance with KYC obligations.
• To process deposits, withdrawals, and all related financial transactions via your chosen payment method, including bKash, Nagad, Rocket, Upay, Visa, and Mastercard.
• To detect, investigate, and prevent fraud, money laundering, underage gambling, and other prohibited activities.
• To comply with applicable anti-money laundering (AML), responsible gaming, and data retention legal obligations.
• To personalise your gaming experience, including recommending games, tailoring promotional offers, and adapting interface settings based on your usage patterns.
• To communicate with you about your account, transactions, security alerts, and, where you have consented, promotional offers and newsletters.
• To analyse platform usage in aggregate form to improve service quality, game performance, and customer support response times.
• To enforce our Terms & Conditions and resolve any disputes or complaints you raise with our support team.

5 Cookies & Tracking Technologies

baje99 uses cookies and similar client-side technologies to operate and improve the platform. The categories of cookies we use are:

• Strictly necessary cookies: Required for the platform to function. These include session management, authentication tokens, and security cookies. They cannot be disabled without breaking core platform functionality.
• Analytics cookies: Used to measure how players navigate the platform, which games are most popular, and where technical errors occur. Data is processed in pseudonymised, aggregate form.
• Preference cookies: Store your language, interface, and notification preferences so you do not need to set them each session.
• Marketing cookies: Used, with your consent, to track promotional interactions and measure the effectiveness of our campaigns. You may withdraw consent for marketing cookies at any time via your account preferences.

You may manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of specific platform features.

6 Data Sharing & Third Parties

baje99 does not sell your personal data. We may share your data with the following categories of trusted third parties, strictly on a need-to-know basis and under binding contractual data protection obligations:

• Payment processors: bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, and City Bank — to process deposits and withdrawals on your behalf.
• Identity verification providers: Third-party KYC and document verification services used to verify your identity and age in compliance with our legal obligations.
• Fraud and risk management services: Providers who help us detect and prevent fraudulent activity, account takeover attempts, and multi-accounting.
• Game and technology providers: Licensed game studios such as Pragmatic Play, Evolution Gaming, Spribe, and Ezugi may receive pseudonymised session and bet data for game operation and audit purposes.
• Legal and regulatory authorities: Where required by applicable law or a valid legal order, baje99 may disclose personal data to law enforcement, financial intelligence units, or regulatory bodies.
• Professional advisors: Legal counsel, auditors, and accountants bound by professional confidentiality obligations, where necessary to operate the business.

7 International Data Transfers

baje99 is an internationally operated platform. Some of our third-party service providers are located outside Bangladesh. Where personal data is transferred internationally, baje99 ensures that appropriate safeguards are in place — such as standard contractual clauses or equivalent data protection measures — to protect your data to a standard equivalent to the protections described in this Policy. By using the baje99 platform, you acknowledge and consent to the potential transfer of your data to jurisdictions outside your country of residence, subject to these safeguards.

8 Data Retention

baje99 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal obligations. Our standard retention schedules are as follows:

• Account and identity data: Retained for the lifetime of the account and for a minimum of 5 years following account closure, in accordance with AML record-keeping obligations.
• Transaction and financial data: Retained for a minimum of 5 years following each transaction for audit and legal compliance purposes.
• KYC documents: Retained for a minimum of 5 years following submission, or longer if required by a regulatory investigation or legal hold.
• Technical and usage data: Retained for up to 24 months in identifiable form, after which it is anonymised or deleted.
• Marketing data: Retained until you withdraw consent or request deletion, whichever is earlier.
• Support correspondence: Retained for up to 3 years following the resolution of the relevant matter.

When data reaches the end of its retention period, it is securely deleted or anonymised using industry-standard data destruction methods.

9 Data Security

baje99 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Key security measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and our servers.
• AES-256 encryption for sensitive data stored at rest, including KYC documents and financial records.
• One-way cryptographic hashing (bcrypt) for all account passwords — passwords are never stored in recoverable form.
• Multi-factor authentication (MFA) available to all players and mandatory for administrative access to platform systems.
• Regular third-party penetration testing and vulnerability assessments of platform infrastructure.
• Role-based access controls ensuring that employees and contractors can only access personal data that is necessary for their specific function.
• Incident response procedures with defined timelines for breach notification to affected players and, where required, regulatory authorities.

While baje99 applies industry-leading security practices, no digital platform can guarantee absolute security. Players are encouraged to use strong, unique passwords and to enable SMS OTP two-factor authentication on their accounts.

10 Your Data Rights

As a baje99 player, you have the following rights in relation to your personal data. To exercise any of these rights, contact our support team at [email protected]:

We will respond to all verified data rights requests within 30 calendar days. In complex cases we may extend this by a further 60 days, in which case we will inform you of the extension and the reasons for it within the initial 30-day period.

11 Marketing Communications

baje99 may send you promotional emails, SMS messages, and in-platform notifications about bonuses, new games, sports betting markets, and seasonal offers — for example, campaigns around Eid, BPL season, or the T20 World Cup — where you have given your explicit consent to receive such communications at the time of registration or subsequently through your account settings.

You may opt out of marketing communications at any time by updating your notification preferences in your account settings, by clicking the unsubscribe link present in all marketing emails, or by contacting customer support directly. Opting out of marketing communications does not affect the delivery of transactional messages such as deposit confirmations, withdrawal notifications, or security alerts, which are sent on the basis of contract performance and cannot be disabled while your account is active.

12 Children's Privacy

The baje99 platform is strictly restricted to individuals aged 21 and above. We do not knowingly collect, process, or retain personal data from minors. During the registration process, all applicants are required to confirm their age and, where our age-verification systems flag a concern, we require documentary proof of age before permitting account activation. If baje99 becomes aware that personal data has been collected from a person under the age of 21, we will immediately suspend the account, delete the associated data, and, where applicable, report the matter to the relevant authorities.

If you believe your child or a minor in your care has created a baje99 account, please contact us immediately at [email protected] so we can take prompt action.

13 Changes to This Policy

baje99 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or operational requirements. Where changes are material, we will notify registered players via the email address on their account and display a prominent notice on the platform at least 14 days before the revised Policy takes effect. The date of the most recent revision is displayed at the top of this page. Continued use of the baje99 platform after the effective date of any revised Policy constitutes your acceptance of the updated terms.

14 Contact & Data Inquiries

For any questions, concerns, or requests relating to this Privacy Policy or to the personal data baje99 holds about you, please reach out to our dedicated privacy support team:

• Email: [email protected]
• Response channel: Live chat (24/7) via the in-platform support widget
• Expected response time: Within 24 hours for email; typically within 2 hours via live chat

All privacy requests must be submitted by the registered account holder and may require identity verification before we action the request, to ensure we release or modify data only to the correct individual.