r baji Privacy Policy

r baji collects personal information in several ways: directly from you when you register and use the platform, automatically through your interaction with the r baji website, and from third-party sources where permitted by law and necessary for identity verification or fraud prevention.

Information You Provide Directly:

• Registration Data: Full legal name, date of birth, residential address in Bangladesh, mobile phone number, and email address provided at the time of account creation.
• Identity Verification (KYC) Documents: National Identity Card (NID), valid passport, or driver's licence issued by the Government of Bangladesh. These are collected to verify your age and identity in compliance with responsible gaming and AML requirements.
• Financial Information: bKash account numbers, Nagad account numbers, Rocket (DBBL) numbers, bank account details, or card information used for deposits and withdrawals. Payment credentials are processed through secure payment gateways and are not stored in full on r baji's own servers.
• Communications: Any messages, emails, or chat records you send to r baji's support team, including the content of support requests, complaints, and feedback.
• Responsible Gaming Preferences: Deposit limits, cooling-off periods, and self-exclusion requests you submit through your account settings or via the support team.

Information Collected Automatically:

• Device and Technical Data: IP address, browser type and version, operating system, device model, screen resolution, and time zone (Bangladesh Standard Time, UTC+6).
• Usage Data: Pages visited on r baji, games played, bets placed, session duration, click patterns, and navigation paths within the platform.
• Transaction Logs: A complete record of all deposits, withdrawals, bonuses claimed, and wagering activity conducted through your r baji account.
• Cookies and Similar Technologies: Session identifiers, preference tokens, and analytics data collected via cookies. See the Cookies section below for full details.

Information from Third Parties:

• Identity verification data from third-party KYC service providers used to confirm the authenticity of documents submitted during account verification.
• Fraud prevention data from third-party risk and compliance services used to detect and prevent money laundering, bonus abuse, or account takeover attempts.
• Payment confirmation data from mobile financial service providers (bKash, Nagad, Rocket) confirming the status of transactions associated with your r baji account.

r baji processes your personal data only for specific, legitimate purposes. We do not use your data in ways that are incompatible with the purposes for which it was collected. The following sets out the primary purposes for which r baji processes personal information:

• Account Management: To create, maintain, and administer your r baji account, including processing your registration, verifying your identity, and managing your account settings and preferences.
• Service Delivery: To provide access to r baji's gaming and sports betting services, process your deposits and withdrawals via bKash, Nagad, Rocket, or bank transfer, credit bonuses to your account, and settle bets and game outcomes.
• Identity and Age Verification: To confirm that you are aged 18 or over and that your identity matches the registration details provided, in accordance with our responsible gaming obligations and AML compliance requirements applicable to Bangladesh.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, unauthorised account access, money laundering, bonus abuse, and other forms of platform misuse. This includes automated risk-scoring of transactions and login events.
• Legal and Regulatory Compliance: To fulfil our obligations under applicable laws and regulations, respond to lawful requests from competent authorities, and maintain financial records for the periods required by law.
• Customer Support: To respond to your enquiries, resolve disputes, process complaints, and provide assistance with deposits, withdrawals, bonuses, and technical issues.
• Platform Improvement: To analyse aggregate usage patterns on r baji, identify technical issues, improve game performance, and develop new features — using anonymised or pseudonymised data wherever possible.
• Responsible Gaming: To monitor your wagering patterns for indicators of problem gambling and, where appropriate, reach out proactively with responsible gaming information or apply account-level protections such as cooling-off periods.
• Promotional Communications: To send you information about r baji promotions, seasonal offers (including Eid, Pohela Boishakh, and BPL tournament specials), and platform updates — but only where you have not opted out of such communications. You may unsubscribe at any time by contacting r baji support.

r baji does not sell or rent your personal data to any third party. We share your information only in the limited circumstances described below, and only to the extent necessary for the stated purpose.

Service Providers: r baji works with carefully selected third-party service providers who process personal data on our behalf and under our instruction. These include:

• KYC and identity verification providers who process your NID or passport details to confirm your identity and age.
• Payment processing partners, including the technical infrastructure supporting bKash, Nagad, Rocket, Upay, and card payment integrations. These partners receive only the minimum data required to process the specific transaction.
• Game studios and content providers — including Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, and Spribe — who may receive a pseudonymous player identifier to deliver game content and record game results. These providers do not receive your full name, contact details, or financial data.
• Fraud detection and risk management services that analyse transaction and behavioural data to identify suspicious activity on the r baji platform.
• Cloud infrastructure and data hosting providers that store r baji's platform data in secure, access-controlled environments.

All third-party service providers engaged by r baji are bound by data processing agreements that prohibit the use of your personal data for any purpose other than delivering the contracted service to r baji.

Legal Disclosure: r baji may disclose personal data to law enforcement, regulatory authorities, or courts where we are legally required to do so, or where disclosure is necessary to protect the rights, property, or safety of r baji, its players, or third parties. We will notify affected users of such disclosures where we are legally permitted to do so.

Business Transfers: In the event of a merger, acquisition, or transfer of all or part of r baji's business, personal data held by r baji may be transferred as part of that transaction. In such circumstances, r baji will take reasonable steps to ensure that the receiving entity continues to honour the commitments made in this Privacy Policy.

No Sale of Data: r baji does not sell, lease, trade, or otherwise transfer your personally identifiable information to third parties for their own commercial or marketing purposes under any circumstances.

r baji uses cookies and similar lightweight tracking technologies to operate the platform correctly, maintain session security, and understand how players interact with the site in aggregate. This section explains what cookies we use and why.

r baji does not deploy third-party advertising cookies, behavioural tracking pixels, or social media tracking scripts on the platform. The analytics data collected is anonymised before analysis and is not linked back to individual player identities.

Managing Cookies: You can control or disable cookies through your browser settings at any time. Please note that disabling strictly necessary cookies will prevent you from logging into your r baji account and using core platform features. Disabling functional or analytics cookies will not affect your ability to play games or place bets, but may reduce the personalisation of your experience.

r baji takes the security of your personal data seriously and implements technical and organisational measures appropriate to the risk associated with processing player data on an online gaming platform. Our security framework includes the following safeguards:

• Encryption in Transit: All data transmitted between your device and r baji's servers is protected by TLS 1.2 or higher, ensuring that your personal information and payment details cannot be intercepted during transmission.
• Encryption at Rest: Personal data and financial records stored on r baji's servers are encrypted using AES-256, preventing unauthorised access in the event of a physical or logical breach of our infrastructure.
• Access Controls: Access to personal data within r baji's systems is restricted on a strict need-to-know basis. Staff members access only the data required to perform their specific job functions, and all access is logged and audited regularly.
• Two-Factor Authentication: r baji encourages all players to enable 2FA on their accounts for an additional layer of protection against unauthorised login attempts. Internal staff accounts with access to player data require 2FA as a mandatory control.
• Intrusion Detection: r baji's platform infrastructure is monitored continuously for anomalous activity, including automated login attempts, unusual transaction patterns, and potential data exfiltration indicators.
• Vendor Security Assessment: All third-party service providers with access to r baji player data are assessed for their security practices before onboarding and are required to maintain security standards commensurate with their access level.

Despite these measures, no online platform can guarantee absolute security. In the event of a data breach that is likely to result in significant risk to affected players, r baji will take prompt steps to contain the breach, assess its scope, and notify affected individuals as soon as reasonably practicable.

You also play an important role in protecting your own data. r baji recommends using a strong, unique password for your account, enabling 2FA, and never sharing your login credentials with any third party. If you suspect your r baji account has been compromised, contact our support team at [email protected] immediately.

r baji retains your personal data for as long as is necessary to fulfil the purposes described in this Privacy Policy, or as required by applicable legal, regulatory, financial, or compliance obligations. The following general retention periods apply:

When the applicable retention period has expired, r baji will securely delete or anonymise your personal data so that it can no longer be associated with you as an individual. Where deletion is not immediately technically feasible (for example, data held in encrypted backups), we will isolate the data from further processing until deletion is possible.

If you request deletion of your account, r baji will process the closure and begin the data deletion process in accordance with the retention schedule above. Some data categories must be retained for the minimum periods described, regardless of your account closure request, due to our legal and regulatory obligations.

As a registered r baji player, you have a number of rights with respect to the personal data we hold about you. r baji is committed to facilitating the exercise of these rights promptly and without unnecessary friction. All rights requests should be submitted to [email protected] and will be responded to within 30 calendar days of receipt.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a concern about how r baji handles your personal information, please contact our support and data team using the details below.

All privacy-related enquiries are handled by r baji's designated data privacy team. We aim to acknowledge all privacy requests within 3 business days and to provide a full response within 30 calendar days. For complex requests, we may extend this period by up to a further 30 days, in which case we will notify you of the extension and the reason for it.

• Email (Privacy Enquiries): [email protected] — use the subject line "Privacy Request" for fastest routing.
• General Support: Available 24 hours a day, 7 days a week via live chat on the r baji platform, including all Bangladesh public holidays.
• Response Language: Privacy responses are provided in English. Bangladesh Standard Time (BST, UTC+6) is the operating time zone for our support team.

r baji takes all privacy complaints seriously. If you are not satisfied with our response to a privacy concern, you have the right to escalate the matter to the competent data protection authority or seek independent legal advice. r baji will cooperate fully with any regulatory investigation into our data processing practices.

Policy Updates: r baji may revise this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or platform features. The updated policy will be published on the r baji website with the revised effective date. We encourage you to review this page periodically. Material changes will be communicated to registered players via the platform or by email to your registered address where practicable.