Your Privacy Matters at bitbaji

1. Data Controller & Scope

bitbaji acts as the data controller in respect of all personal information collected from players and visitors to the platform. As data controller, bitbaji is responsible for determining the purposes and means of processing your personal data and for ensuring that such processing is carried out lawfully, fairly, and transparently.

This Privacy Policy applies to all users of the bitbaji website and any related mobile-optimised interfaces, regardless of how you access the platform — whether via a desktop browser in Dhaka, a mobile device in Chittagong, or any other access method from anywhere in Bangladesh. It covers data collected during the registration process, during active use of the platform (including game play, deposits, withdrawals, and support interactions), and during any period of account dormancy.

This policy should be read alongside the Terms & Conditions and the Responsible Gaming Policy, both of which form part of the broader agreement between you and bitbaji. In the event of any conflict between this Privacy Policy and the Terms & Conditions in relation to data protection matters, this Privacy Policy takes precedence.

bitbaji reserves the right to update this Privacy Policy from time to time. Any material changes will be communicated via a notice on the platform before taking effect. Continued use of bitbaji after the effective date of any revised policy constitutes acceptance of the updated terms.

2. Personal Data We Collect

bitbaji collects personal data through multiple touchpoints across the player lifecycle. The categories of data we collect, and the contexts in which they are gathered, are described in the table below.

2.1 Data You Provide Directly

The majority of personal data we hold is provided directly by you when you register an account, complete identity verification, make a deposit or withdrawal, contact our support team, or participate in a promotion. You are not obligated to provide any data beyond what is strictly necessary to use the platform, but certain data — such as your name, date of birth, and mobile number — is mandatory for account creation and regulatory compliance purposes.

2.2 Data Collected Automatically

When you access bitbaji, our systems automatically collect technical and usage data via server logs, cookies, and similar tracking technologies. This data is collected regardless of whether you are logged in and is used primarily for security monitoring, fraud prevention, and platform performance optimisation. See Section 5 for a full explanation of our cookie practices.

2.3 Data from Third Parties

In limited circumstances, bitbaji may receive data about you from third parties. This includes identity verification data returned by our KYC service providers, transaction confirmation data from payment processors such as bKash and Nagad, and fraud-risk signals from third-party security services. We only use such third-party data where it is necessary to fulfil a legitimate platform function or a legal obligation.

3. How We Use Your Data

bitbaji processes your personal data for the following specific purposes. For each purpose, we identify the lawful basis on which the processing rests.

• Account Creation and Management: To register your account, verify your identity, and maintain your player profile throughout your relationship with bitbaji. Lawful basis: contractual necessity.
• Processing Deposits and Withdrawals: To facilitate BDT transactions via bKash, Nagad, Rocket, Upay, Visa, and Mastercard and to maintain accurate financial records. Lawful basis: contractual necessity and legal obligation.
• Game Delivery and Platform Operation: To provide access to casino games, sports betting markets, and all other platform features in a stable, fair, and personalised manner. Lawful basis: contractual necessity.
• Regulatory Compliance and Anti-Money Laundering (AML): To perform Know Your Customer (KYC) checks, monitor transactions for suspicious activity, and meet any applicable reporting obligations. Lawful basis: legal obligation.
• Responsible Gaming Enforcement: To apply self-exclusion requests, deposit limits, and cooling-off periods as requested by players or triggered by platform safeguards. Lawful basis: legal obligation and legitimate interest.
• Security and Fraud Prevention: To detect, investigate, and prevent fraudulent activity, account takeover attempts, bonus abuse, and other policy violations. Lawful basis: legitimate interest.
• Customer Support: To respond to your enquiries, resolve disputes, and maintain records of support interactions for quality assurance purposes. Lawful basis: contractual necessity and legitimate interest.
• Marketing and Promotions: To send you information about bonuses, seasonal promotions (such as Eid offers or BPL cricket specials), and new features — but only where you have provided explicit consent to receive such communications. Lawful basis: consent. You may withdraw consent at any time by contacting support.
• Platform Analytics and Improvement: To analyse usage patterns, identify technical issues, and improve the performance and content of bitbaji for the benefit of all players. Lawful basis: legitimate interest.

bitbaji does not use your personal data for automated decision-making that produces legal or similarly significant effects, except where required for fraud prevention or responsible gaming enforcement, in which case you have the right to request human review of any automated decision that affects you.

4. Data Sharing & Third Parties

bitbaji does not sell your personal data to any third party under any circumstances. We share data only where it is necessary to operate the platform, comply with a legal obligation, or protect the safety of our players and the integrity of the platform.

4.1 Service Providers

We share data with carefully selected third-party service providers who assist in operating bitbaji. These include payment processors (bKash, Nagad, Rocket, Upay, Visa, Mastercard), KYC and identity verification providers, cloud hosting and infrastructure providers, game software suppliers (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi), and customer support tools. All service providers are bound by strict data processing agreements that limit their use of your data to the specific service they provide.

4.2 Legal and Regulatory Disclosures

bitbaji may disclose personal data to regulatory bodies, law enforcement agencies, or courts where we are legally required to do so — for example, in response to a lawful order, to comply with anti-money-laundering obligations, or to assist in the investigation of fraud or other criminal activity. In such cases, we will disclose only the minimum data necessary to satisfy the legal requirement.

4.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of bitbaji's business, player data may be transferred to the successor entity as part of the transaction. You will be notified of any such transfer via a prominent notice on the platform prior to your data being transferred, and the acquiring entity will be required to honour the terms of this Privacy Policy.

4.4 No Cross-Border Transfers Without Safeguards

Where data is transferred to service providers located outside Bangladesh, bitbaji ensures that appropriate safeguards are in place — such as contractual data protection clauses — to ensure your data receives a level of protection consistent with this Privacy Policy.

5. Cookies & Tracking Technologies

bitbaji uses cookies and similar tracking technologies to deliver a functional, personalised, and secure experience on the platform. A cookie is a small text file stored on your device when you visit a website. The cookies used by bitbaji fall into the following categories:

• Strictly Necessary Cookies: These cookies are essential for the platform to function. They enable session management, keep you logged in as you navigate the site, and support security features such as OTP login protection. These cookies cannot be disabled without rendering the platform non-functional.
• Performance and Analytics Cookies: These cookies collect anonymised data about how players use bitbaji — which pages are visited most frequently, how long sessions last, and where technical errors occur. This data helps us continuously improve the platform. No personally identifiable information is collected by these cookies.
• Functional Cookies: These cookies remember your preferences, such as your preferred language settings and your last-used deposit method, so that you do not have to re-enter this information on every visit.
• Marketing and Targeting Cookies: Where you have given consent, these cookies allow us to show you relevant promotional content related to bitbaji's offerings — such as new game launches, cricket season specials, or seasonal bonus promotions. You may withdraw consent for marketing cookies at any time.

You can manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will affect your ability to use the platform. For performance and marketing cookies, you may opt out without affecting your core gameplay experience. Detailed cookie management instructions are available in the Help section of most modern browsers.

6. Data Retention & Storage

bitbaji retains your personal data for as long as your account remains active and for such further period as is necessary to comply with our legal and regulatory obligations. The table below summarises our standard retention periods by data category.

At the end of the applicable retention period, your data is securely deleted or anonymised so that it can no longer be linked to you as an individual. Where anonymised data is retained for statistical analysis, it is no longer considered personal data and falls outside the scope of this Privacy Policy.

7. Your Rights Over Your Data

As a player on bitbaji, you have a number of rights in relation to your personal data. bitbaji is committed to upholding these rights and will respond to any valid request within a reasonable timeframe. Your rights include:

• Right of Access: You have the right to request a copy of the personal data we hold about you, along with information about how it is processed. Submit your request to support@bitbaji with the subject line "Data Access Request".
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update many details directly via your account settings panel.
• Right to Erasure: In certain circumstances, you have the right to request the deletion of your personal data. Please note that this right is subject to overriding legal obligations — for example, we are required to retain financial transaction records for seven years regardless of an erasure request.
• Right to Restriction of Processing: You may request that we restrict the processing of your data in certain circumstances — for example, while a dispute about data accuracy is being resolved.
• Right to Data Portability: Where processing is based on your consent or on a contract, you have the right to receive a copy of your data in a structured, machine-readable format.
• Right to Object: You have the right to object to processing that is based on our legitimate interests, including direct marketing. Where you object to marketing, we will cease processing your data for that purpose immediately.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

To exercise any of the above rights, please contact our support team at support@bitbaji. We may need to verify your identity before processing a request. We will not charge a fee for responding to a data rights request unless the request is manifestly unfounded or excessive, in which case we reserve the right to charge a reasonable fee or decline to act.

8. Data Security Measures

bitbaji takes the security of your personal data extremely seriously and implements a multi-layered set of technical and organisational security measures to protect your information against unauthorised access, accidental loss, alteration, or disclosure.

8.1 Encryption

All data transmitted between your device and bitbaji is protected using TLS (Transport Layer Security) encryption, indicated by the padlock icon in your browser's address bar. Sensitive data at rest — including financial records and identity documents — is encrypted using AES-256 standard encryption within our secure data storage environment.

8.2 Access Controls

Access to personal data within bitbaji's internal systems is restricted on a strict need-to-know basis. Staff members are granted access only to the data categories required to fulfil their specific job functions. All internal access is logged and audited regularly. Privileged access credentials are subject to multi-factor authentication and are rotated on a scheduled basis.

8.3 OTP-Based Login Protection

Every new device login on bitbaji triggers an OTP (one-time password) verification sent to your registered mobile number. This ensures that even if your account credentials are compromised, an attacker cannot access your account from an unrecognised device without also having physical possession of your registered mobile phone.

8.4 Security Monitoring

bitbaji operates continuous security monitoring systems that detect and alert on anomalous activity patterns — including unusual login locations, atypical transaction volumes, and signs of automated account access. Where a potential security incident is detected, affected accounts are placed under temporary review while the situation is assessed.

8.5 Data Breach Response

In the unlikely event of a personal data breach that poses a risk to players, bitbaji will notify affected users without undue delay and will take immediate steps to contain the breach and mitigate its impact. We will provide clear information about what data was involved, what steps we have taken, and what actions you should consider taking to protect yourself.

Despite these robust measures, no online platform can guarantee absolute security. You can help protect your account by using a strong, unique password, by keeping your registered mobile number up to date, and by contacting support@bitbaji immediately if you suspect any unauthorised access to your account.