baji3 Privacy Policy
— Your Data, Your Rights

This Privacy Policy (the "Policy") explains how baji3 (the "Platform", "we", "us", or "our"), the operator of the online betting and casino services available at baji3.io, collects, processes, stores, and protects the personal data of individuals who visit or use the baji3 platform. This Policy applies to all services offered through baji3.io, including the cricket sportsbook, live casino, slots, Lucky Dice, Pirate Fishing, and any future products or features.

baji3 is committed to processing your personal data lawfully, fairly, and transparently. By registering an account, making a deposit, placing a bet, or otherwise using any part of the baji3 platform, you acknowledge that you have read and understood this Policy and that you consent to the data processing practices described herein. This Policy should be read alongside our Terms & Conditions and our Responsible Gaming page, both of which are incorporated by reference.

baji3 collects personal data from you through several routes: directly from you when you register or update your account, automatically as you use the platform, and in limited circumstances from third-party sources such as payment processors and identity verification partners. The categories of personal data we collect include:

baji3 uses the personal data we collect for the following specific purposes. We will never use your data for any purpose that is incompatible with the purpose for which it was originally collected, without first seeking your explicit consent.

1. Account Creation and Management: To create and maintain your baji3 account, authenticate your identity at login, manage your account preferences and settings, and communicate account-related notifications (password resets, security alerts, verification status updates).
2. Identity Verification (KYC): To verify that you are who you say you are, that you are at least 21 years of age, and that you are entitled to use the baji3 platform. KYC verification is mandatory before large withdrawals can be processed and may be triggered at any time at baji3's discretion.
3. Payment Processing: To process your deposit and withdrawal requests through your chosen payment method (bKash, Nagad, Rocket, Upay, bank transfer, or card). Financial data shared with payment processors is used solely for transaction execution and fraud prevention.
4. Service Delivery: To provide you with access to cricket betting, live casino, slots, Lucky Dice, Pirate Fishing, and all other baji3 products. Gaming data is used to calculate bet settlements, apply bonus wagering progress, and display your account history.
5. Fraud Prevention and Platform Integrity: To detect and prevent fraudulent activity, multi-accounting, bonus abuse, money laundering, and other conduct prohibited under our Terms & Conditions. Technical data (including IP address and device fingerprint) is used for this purpose.
6. Responsible Gaming Compliance: To monitor gaming patterns for indicators of problem gambling behaviour, to apply deposit limits and cooling-off periods requested by players, to support self-exclusion requests, and to comply with our responsible gaming obligations.
7. Customer Support: To respond to your queries, complaints, and requests submitted via live chat, email, or WhatsApp. Communications data is retained to provide context for ongoing support interactions and to train support staff.
8. Marketing Communications (Opted-In Players Only): To send promotional offers, bonus notifications, tournament invitations, and seasonal promotions (including Eid, Pohela Boishakh, BPL season offers, and IPL promotions) to players who have actively opted in to receive such communications.
9. Legal and Regulatory Compliance: To comply with applicable legal obligations, including financial record-keeping requirements, anti-money-laundering regulations, and any lawful requests from competent authorities.
10. Platform Improvement: To analyse aggregated, anonymised usage data for the purpose of improving platform performance, user experience, game selection, and promotional strategies. Individual player data is anonymised before use for analytics purposes.

baji3 processes your personal data on the basis of the following legal grounds, depending on the specific purpose of the processing activity:

• Contractual Necessity: Processing required to fulfil our obligations under the Terms & Conditions you accepted at registration — including account management, payment processing, game delivery, and customer support.
• Legal Obligation: Processing required to comply with applicable legal and regulatory requirements, including anti-money-laundering (AML) checks, age verification, financial record retention, and responses to lawful authority requests.
• Legitimate Interests: Processing carried out on the basis of baji3's legitimate business interests, where those interests are not overridden by your rights. This includes fraud prevention, platform security, and technical data analytics for service improvement.
• Consent: Processing based on your freely given, informed, and specific consent — principally, the sending of marketing and promotional communications. You may withdraw consent at any time without affecting the lawfulness of processing that occurred before withdrawal.

baji3 does not sell, rent, or lease your personal data to any third party for independent commercial use. We share personal data only where it is necessary to deliver the baji3 service, to comply with a legal obligation, or to protect the platform from fraud and abuse. The categories of recipients who may receive your personal data are as follows:

• Payment Processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard — as required to process your deposits and withdrawals. These providers operate under their own privacy policies and are independently responsible for their data practices.
• Identity Verification Partners: Third-party KYC providers who assist baji3 in verifying the identity and age of players. These providers are contractually bound to process your data only for the purpose of identity verification and to maintain appropriate security standards.
• Game Content Providers: Game studios and platform providers including Evolution Gaming, Ezugi, Pragmatic Play, NetEnt, Microgaming, and Spribe may receive session-level technical data (such as player session tokens) necessary for game delivery. These providers do not receive your full personal profile.
• Customer Support Infrastructure: Third-party live chat and customer relationship management (CRM) platforms that power the baji3 support experience. These providers are engaged as data processors and act solely under baji3's instructions.
• Legal and Regulatory Authorities: baji3 may disclose personal data to competent governmental or regulatory authorities, law enforcement agencies, or courts when required to do so by applicable law, valid legal process, or lawful authority request. We will notify affected players of such disclosures where legally permitted to do so.
• Business Successors: In the event of a merger, acquisition, restructuring, or sale of all or part of the baji3 business, your personal data may be transferred to the successor entity. You will be notified of any such transfer and of any changes to this Privacy Policy that result from it.

baji3 uses cookies and similar tracking technologies (including local storage and session storage) to operate the platform effectively, to remember your preferences, and to analyse usage patterns. The categories of cookies used on baji3.io are as follows:

• Strictly Necessary Cookies: These cookies are essential for the platform to function. They maintain your login session, remember your account settings, and enable core features such as the game lobby and account dashboard. These cookies cannot be disabled without breaking core platform functionality.
• Functional Cookies: These cookies remember your preferences — such as your preferred language setting, last-visited game category, and responsible gaming tool settings — to personalise your experience. They are set only after you have registered and logged in.
• Analytics Cookies: baji3 uses anonymised, aggregated analytics data to understand how players navigate the platform, which features are most used, and where technical issues occur. Analytics data is processed in aggregate and is not linked to individual player identities.
• Fraud Prevention Cookies: These cookies collect technical identifiers (such as device fingerprint data) to detect and prevent fraudulent login attempts, multi-accounting, and other prohibited conduct. They operate in the background and do not affect your user experience.

By continuing to use the baji3 platform after being presented with a cookie notice, you consent to the use of the cookie categories described above. You may manage your cookie preferences at any time through your browser settings. Note that disabling strictly necessary cookies will prevent you from accessing your baji3 account.

baji3 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. Our security framework includes the following measures:

• Encryption in Transit: All data transmitted between your device and baji3.io is encrypted using TLS 1.2 or TLS 1.3 protocols. Our SSL certificate is maintained and renewed proactively to prevent any lapse in protection.
• Encryption at Rest: Sensitive personal data stored in baji3's databases — including identity documents, payment account references, and password hashes — is encrypted at rest using AES-256 encryption.
• Password Security: Player passwords are never stored in plain text. Passwords are processed through a strong, industry-standard one-way hashing algorithm with individual salting before storage. baji3 staff cannot view your password; they can only reset it.
• Access Controls: Access to personal data within baji3's internal systems is strictly limited to staff members who have a legitimate operational need for that data. All internal access is logged and audited regularly.
• Penetration Testing: baji3's platform undergoes periodic security assessments and vulnerability testing to identify and remediate potential weaknesses before they can be exploited.
• Incident Response: baji3 maintains a documented data breach response procedure. In the event of a security incident affecting your personal data, we will notify you and the relevant authorities within the timeframes required by applicable law.

While baji3 takes every reasonable precaution to protect your data, no internet-based system can be guaranteed to be 100% secure. You are responsible for maintaining the security of your own login credentials and for notifying baji3 immediately if you suspect that your account has been compromised.

baji3 retains personal data only for as long as it is necessary to fulfil the purposes for which it was collected, or for as long as required by applicable legal or regulatory obligations. The following retention periods apply to the main categories of personal data we hold:

Upon expiry of the applicable retention period, personal data is either securely and permanently deleted or irreversibly anonymised so that it can no longer be associated with any individual. Anonymised, aggregated data may be retained indefinitely for statistical and analytical purposes.

As a baji3 player whose personal data is processed by baji3, you hold the following rights in relation to your personal data. baji3 will respond to all valid requests within 30 calendar days of receipt, unless the request is complex or numerous, in which case we will notify you of the extended timeframe.

• Right of Access: You have the right to request a copy of all personal data baji3 holds about you. We will provide this in a structured, commonly used, and machine-readable format (JSON or CSV) free of charge for the first request per calendar year.
• Right to Rectification: You have the right to request correction of any personal data baji3 holds about you that is inaccurate, incomplete, or out of date. You may update some data directly in your account settings; other corrections (such as legal name changes) require supporting documentation.
• Right to Erasure ("Right to Be Forgotten"): You have the right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (and there is no other legal basis for processing), or where baji3 has processed your data unlawfully. This right is subject to legal retention obligations — we cannot delete financial records that we are legally required to retain.
• Right to Restriction of Processing: You have the right to request that baji3 restrict the processing of your personal data in certain circumstances — for example, while a dispute about the accuracy of your data is being resolved.
• Right to Data Portability: You have the right to receive personal data you have provided to baji3 in a structured, machine-readable format and to transmit that data to another service provider, where technically feasible.
• Right to Object: You have the right to object to baji3 processing your personal data on the basis of legitimate interests. You also have an unconditional right to object to processing for direct marketing purposes at any time.
• Right to Withdraw Consent: Where baji3 processes your data on the basis of your consent (principally, marketing communications), you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that occurred before withdrawal.

To exercise any of the above rights, please contact the baji3 Data Support team via live chat (available 24/7) or by emailing [email protected] with the subject line "Data Rights Request". We may ask you to verify your identity before processing your request to protect against unauthorised access to your data.

The baji3 platform is strictly intended for adults aged 21 years and above. baji3 does not knowingly collect, process, or store personal data relating to individuals under the age of 21. Registration by, or on behalf of, any individual under 21 years of age is strictly prohibited under our Terms & Conditions.

Where baji3 discovers or has reasonable grounds to believe that personal data has been collected from an individual who is under the age of 21, we will immediately suspend the relevant account, delete the personal data in question (subject to any mandatory legal retention obligations), and refund any deposits made. Any winnings associated with an underage account will be voided.

If you are a parent or guardian and you believe that a person under 21 in your care has created a baji3 account without your knowledge, please contact our support team immediately via live chat or by emailing [email protected]. We will investigate the matter promptly and take appropriate action.

baji3 primarily processes and stores personal data within infrastructure located in or serving the Bangladesh region and neighbouring South Asian jurisdictions. However, some of our third-party service providers — including game content providers such as Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, and Spribe — may process certain session -level data on infrastructure located outside Bangladesh.

Where personal data is transferred internationally, baji3 takes steps to ensure that appropriate safeguards are in place to protect your data to a standard equivalent to the protections described in this Policy. These safeguards may include contractual clauses that impose data protection obligations on the recipient, or reliance on the recipient's own certified security and privacy frameworks.

baji3 reserves the right to update or amend this Privacy Policy at any time. Changes may be made to reflect updates in applicable law, changes to our data processing practices, the introduction of new platform features, or feedback from our player community. The "Last Updated" date at the top of this document will always reflect the date of the most recent revision.

Where a change to this Policy is material — meaning it significantly affects your rights or the way we process your personal data — baji3 will notify registered players via their registered contact method (mobile number or email address) at least 14 days before the change takes effect. Continued use of the baji3 platform after the effective date of any updated Policy constitutes your acceptance of the revised terms.

We encourage you to review this Privacy Policy periodically. Previous versions of the Policy are available on request by contacting our support team.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way baji3 processes your personal data, please reach out to us through any of the following channels. All privacy-related enquiries are handled by our dedicated Data Support team and will be acknowledged within 2 business days (Bangladesh Standard Time, UTC+6).

• Live Chat: Available 24 hours a day, 7 days a week, directly within the baji3 platform.
• Email: [email protected] — please use the subject line "Privacy Enquiry" or "Data Rights Request" for fastest routing.
• WhatsApp Support: Available from 8 AM to Midnight (Bangladesh Standard Time, UTC+6).
• Postal Address: baji3 Data Support Team, serving players across Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar — Bangladesh.