Privacy Policy — How bajee13 Handles Your Data

1 Data We Collect

bajee13 collects personal data only to the extent necessary to operate our platform, verify player identities, process payments, and maintain a safe gaming environment. We do not collect data speculatively or beyond what is required for a clearly defined operational or legal purpose. The categories of personal data we collect are set out below.

1.1 Registration Data

When you create a bajee13 account, we collect the information you provide directly during the registration process. This includes your full legal name, date of birth, residential address, email address, and your chosen username. This data is required to establish and maintain your account and to verify that you meet the eligibility criteria for using bajee13, including the minimum age requirement of 18 years.

1.2 Identity Verification (KYC) Data

As part of our Know Your Customer obligations, bajee13 may request copies of identity documents including a government-issued photo ID (National Identity Card, passport, or driving licence), a recent proof-of-address document (utility bill or bank statement issued within the past three months), and evidence of ownership of any payment method used on the platform. These documents are processed and stored securely in accordance with the data security measures described in Section 8 of this policy.

1.3 Financial Transaction Data

bajee13 records all deposit and withdrawal transactions associated with your account, including transaction amounts, timestamps, payment method identifiers (such as your bKash or Nagad mobile number), and transaction reference numbers. We do not store full payment account credentials — only the identifiers necessary to match transactions to your bajee13 account and to process withdrawals to the correct destination.

1.4 Gameplay and Betting Data

We record all gaming activity on your bajee13 account, including game sessions, bet amounts, game outcomes, bonus usage, and wagering history. This data is used to calculate your account balance accurately, to detect irregular patterns that may indicate fraud or bonus abuse, and to support responsible gaming monitoring under our obligations described in our Responsible Gaming policy.

1.5 Technical and Device Data

bajee13 automatically collects certain technical data when you access our platform. This includes your IP address, browser type and version, device type and operating system, screen resolution, time zone, referring URL, and pages visited within the bajee13 platform. This data is used for platform security, fraud detection, and analytics purposes, as described further in Section 5 (Cookies & Tracking).

1.6 Communications Data

If you contact bajee13's support team via live chat, email, or WhatsApp, we retain a record of that correspondence including the content of the messages, the date and time, and any attachments shared. This data is used to resolve your query, to train and quality-assure our support team, and to maintain an accurate record of your account interactions.

2 How We Use Your Data

bajee13 uses personal data for specific, clearly defined purposes. We do not use your data for purposes beyond those listed below without first obtaining your explicit consent or establishing a fresh lawful basis under applicable data protection law.

Where bajee13 uses your personal data for marketing communications — such as promotional emails or WhatsApp messages about bonuses, new games, or seasonal offers tied to events like BPL cricket or Eid promotions — we will only do so where you have provided explicit consent at the time of registration or subsequently through your account marketing preferences. You may withdraw this consent at any time by contacting our support team or updating your account settings.

3 Legal Basis for Processing

bajee13 processes personal data only where a valid legal basis exists. The legal bases on which we rely are as follows:

• Contractual necessity: Processing your registration data, KYC data, and financial transaction data is necessary to fulfil our contract with you — specifically, to create and maintain your bajee13 account, to verify your eligibility, and to process deposits and withdrawals on your behalf.
• Legal obligation: bajee13 is required by applicable law to conduct identity verification, to maintain transaction records, to report certain categories of financial activity, and to cooperate with law enforcement and regulatory investigations. Data processed for these purposes is retained as long as required by the applicable legal obligation.
• Legitimate interests: bajee13 processes technical and device data and gameplay pattern data on the basis of legitimate interests — specifically, our interest in maintaining the security and integrity of our platform, detecting and preventing fraud, and monitoring for responsible gaming indicators. We have assessed that these legitimate interests are not overridden by the privacy interests of our players.
• Consent: Where bajee13 processes your data for marketing communications or for optional features such as personalised game recommendations, we do so on the basis of your explicit consent. You may withdraw consent at any time without affecting the lawfulness of any processing carried out before withdrawal.

4 Data Sharing & Third Parties

bajee13 does not sell your personal data to third parties. We share personal data only in the limited circumstances described below, and only to the extent necessary for the stated purpose.

4.1 Payment Service Providers

To process your deposits and withdrawals, bajee13 shares relevant transaction data with your chosen payment service provider — bKash, Nagad, Rocket (Dutch-Bangla Bank), or Upay. The data shared is limited to what is required to authenticate and complete the transaction. Each payment provider operates under its own privacy policy and data protection terms, which we encourage you to review separately.

4.2 Game Studio Providers

bajee13 sources games from third-party studio providers including Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, and Spribe. When you play a game provided by one of these studios, certain session data (such as your player session token and game result data) is exchanged with the provider's systems for the purpose of rendering the game and recording the outcome. Game providers do not receive your full identity data or payment details.

4.3 KYC and Identity Verification Partners

bajee13 may use third-party identity verification services to assist with the processing of KYC documents. These partners are bound by confidentiality obligations and data processing agreements, and are permitted to use your identity data solely for the purpose of completing the verification task on our behalf.

4.4 Legal and Regulatory Authorities

bajee13 will disclose personal data to competent courts, law enforcement agencies, or regulatory bodies where required to do so by applicable law, court order, or regulatory directive. In such cases, we disclose only the minimum data necessary to satisfy the legal requirement.

4.5 Business Transfers

In the event that bajee13 is involved in a merger, acquisition, asset sale, or other business restructuring, your personal data may be transferred to the acquiring entity as part of that transaction. We will notify registered players via their registered email address prior to any such transfer, and the data will remain subject to the privacy protections set out in this policy.

5 Cookies & Tracking

bajee13 uses cookies and similar tracking technologies to operate the platform, maintain your session state, detect fraudulent activity, and gather anonymised analytics data to improve the user experience. The following categories of cookies are used on the bajee13 platform:

Essential and security cookies are strictly necessary for the platform to function and cannot be disabled without breaking core functionality. Analytics and preference cookies are set only where you have consented. You may manage your cookie preferences through your browser settings at any time. Please note that disabling cookies may affect the performance or availability of certain platform features.

6 Data Retention

bajee13 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or for as long as required by applicable legal obligations. The following general retention periods apply:

• Active account data (registration data, KYC documents, gameplay records, transaction history): Retained for the full duration of your account's active status plus a minimum of five (5) years following account closure, in compliance with financial record-keeping requirements.
• Customer support communications: Retained for three (3) years from the date of the last interaction, unless the communication relates to a dispute or legal claim, in which case it is retained until the matter is fully resolved.
• Technical and device data (IP logs, session logs): Retained for a maximum of twelve (12) months, after which they are automatically deleted or anonymised.
• Marketing consent records: Retained for three (3) years from the date consent was last confirmed or updated, as evidence of your consent to receive marketing communications.
• Closed or suspended accounts: Where an account was closed due to a breach of our Terms and Conditions, fraud, or money laundering concerns, associated data may be retained indefinitely to protect against future re-registration by the same individual.

Upon expiry of the applicable retention period, your personal data is securely deleted or irreversibly anonymised so that it can no longer be associated with you as an individual.

7 Your Privacy Rights

bajee13 recognises and respects your rights over your personal data. You may exercise any of the following rights at any time by contacting our support team via live chat or by emailing [email protected]:

• Right of access: You may request a copy of all personal data bajee13 holds about you. We will provide this within thirty (30) days of receiving a verified request.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it without undue delay.
• Right to erasure ("right to be forgotten"): You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent (for consent-based processing), or where there is no overriding legitimate interest or legal obligation requiring its retention.
• Right to restriction of processing: You may request that bajee13 restrict the processing of your data in certain circumstances — for example, while the accuracy of the data is contested, or while a legitimate interest objection is being assessed.
• Right to data portability: For data processed on the basis of consent or contractual necessity, you may request a copy of your data in a structured, commonly used, machine-readable format.
• Right to object: You have the right to object to the processing of your personal data where that processing is based on bajee13's legitimate interests. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw marketing consent: If you have consented to receive marketing communications from bajee13, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of any marketing sent before withdrawal.

bajee13 aims to respond to all data rights requests within thirty (30) days. Where a request is complex or where multiple requests are submitted simultaneously, this period may be extended by a further sixty (60) days, with notice provided to you explaining the reason for the extension.

8 Data Security

bajee13 implements a layered set of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security framework includes the following controls:

• SSL/TLS encryption: All data transmitted between your browser or device and the bajee13 platform is encrypted using industry-standard SSL/TLS protocols. This ensures that data in transit cannot be intercepted or read by unauthorised parties.
• Encrypted data storage: Sensitive personal data — including identity documents and financial identifiers — is stored in encrypted form at rest. Encryption keys are managed separately from the data they protect and are subject to strict access controls.
• Access controls: Access to personal data within bajee13's internal systems is restricted to personnel who have a genuine operational need. All internal access is logged and subject to regular review. Access rights are revoked immediately upon an employee's departure or change of role.
• Penetration testing and vulnerability management: bajee13 conducts regular security assessments, including penetration testing by qualified security professionals, to identify and remediate potential vulnerabilities before they can be exploited.
• Incident response: bajee13 maintains a documented data breach response procedure. In the event of a confirmed personal data breach that poses a risk to your rights and freedoms, we will notify affected players via their registered email address without undue delay, and in accordance with our obligations under applicable data protection law.

Despite the robust measures described above, no internet-based system can guarantee absolute security. bajee13 will always work to maintain best-practice security standards and will act promptly in response to any identified breach or vulnerability.