Privacy Policy — bdbbaji
At bdbbaji, your privacy is a fundamental commitment, not an afterthought. This Privacy Policy explains in plain, formal terms exactly what personal data we collect, why we collect it, how it is used, who may access it, and what rights you hold as a data subject. We encourage every player to read this document carefully before registering or depositing.
Six Pillars of Privacy at bdbbaji
Before diving into the full legal text, these six principles summarise how bdbbaji approaches data protection every single day.
End-to-End Encryption
All data transmitted between your device and bdbbaji servers is protected by industry-standard SSL/TLS encryption. Your login credentials and payment details never travel over unencrypted connections.
Purpose-Limited Collection
bdbbaji only collects the personal data that is genuinely necessary to operate the platform, verify identity, process payments, and comply with anti-money laundering obligations. We do not collect data speculatively.
No Sale of Personal Data
bdbbaji does not sell, rent, or trade your personal information to any third party for marketing or commercial purposes. Your data belongs to you, and we treat it accordingly.
Transparent Processing
We tell you upfront what data we collect, why we collect it, and for how long we retain it. There are no hidden data pipelines or undisclosed processing activities behind the scenes at bdbbaji.
Your Rights, Respected
You have the right to access, correct, export, and in certain circumstances delete the personal data bdbbaji holds about you. We process all legitimate data subject requests promptly and without charge.
Secure Payment Handling
Payment transactions via bKash, Nagad, Rocket, and other supported methods are processed through secure, tokenised channels. bdbbaji does not store full payment card numbers or mobile banking PINs on our servers.
Information We Collect
Scope: This section describes every category of personal data bdbbaji may collect from you, either directly when you provide it during registration and use, or automatically as a result of your interaction with the Platform.
1.1 Information You Provide Directly
When you register an account, verify your identity, make a deposit or withdrawal, contact support, or participate in a promotion on bdbbaji, you may provide us with the following personal data:
| Data Category | Examples | When Collected |
|---|---|---|
| Identity Data | Full legal name, date of birth, gender, nationality | Registration & KYC verification |
| Contact Data | Email address, mobile number, residential address | Registration & profile updates |
| Identity Documents | National ID (NID) card, passport, driving licence images | KYC / withdrawal verification |
| Financial Data | bKash / Nagad / Rocket account numbers, bank account details, transaction references | Deposits & withdrawals |
| Communications Data | Live chat transcripts, support emails, feedback messages | Customer support interactions |
| Responsible Gaming Data | Self-exclusion requests, deposit limit settings, cool-off preferences | Responsible gaming tools |
1.2 Information Collected Automatically
When you access the bdbbaji Platform, our systems automatically collect certain technical data about your device and browsing behaviour. This data is necessary for us to deliver a stable, secure, and personalised service:
- Device and technical data: IP address, device type, operating system version, browser type and version, screen resolution, and device identifiers;
- Usage and behavioural data: Pages visited on bdbbaji, games launched, bet history, session duration, click-through patterns, and feature usage;
- Location data: Approximate geographic location derived from your IP address, used for fraud prevention and ensuring service availability in your region;
- Log data: Server access logs, error reports, and performance data generated automatically during your sessions on bdbbaji.
1.3 Information From Third Parties
In certain circumstances, bdbbaji may receive personal data about you from third-party sources. These include:
- Payment service providers (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, and others) who confirm transaction status and account ownership;
- Identity verification partners who assist us in confirming the authenticity of documents submitted during KYC;
- Fraud detection and risk management services that flag suspicious activity patterns associated with certain device fingerprints or IP addresses;
- Publicly available sources such as national identity databases, where permitted by applicable law, to verify information you have provided.
All third-party data sources used by bdbbaji are contractually required to handle personal data in a manner consistent with the protections described in this Privacy Policy.
How We Use Your Data
bdbbaji processes your personal data only where we have a lawful basis for doing so. The primary lawful bases we rely upon are: (a) performance of the contract between you and bdbbaji; (b) compliance with legal obligations; (c) our legitimate interests in operating a safe, fair, and commercially viable gaming platform; and (d) your consent, where specifically sought.
The table below sets out the purposes for which bdbbaji uses your personal data and the corresponding lawful basis for each purpose:
| Purpose | Data Used | Lawful Basis |
|---|---|---|
| Account registration and management | Identity, contact data | Contract performance |
| Age and identity verification (KYC) | Identity documents, financial data | Legal obligation |
| Processing deposits and withdrawals | Financial data, identity data | Contract performance |
| Fraud prevention and anti-money laundering | All categories | Legal obligation & legitimate interests |
| Responsible gaming monitoring | Usage data, gaming history | Legal obligation & legitimate interests |
| Customer support delivery | Communications, identity data | Contract performance |
| Platform analytics and improvement | Usage and technical data | Legitimate interests |
| Promotional communications (opt-in) | Contact data, gaming preferences | Consent |
Marketing Communications
bdbbaji may send you promotional emails, SMS messages, or in-platform notifications about bonuses, new games, seasonal offers (such as Eid and Pohela Boishakh promotions), and platform updates. We will only do so if you have explicitly opted in to receive such communications during registration or through your account preferences. You may withdraw your consent to marketing communications at any time by updating your notification preferences in your account settings or by contacting [email protected]. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.
Data Sharing & Disclosure
Core Principle: bdbbaji does not sell, rent, or trade your personal data to any third party for their own commercial benefit. Sharing only occurs to the limited extent necessary to operate the Platform, comply with the law, or protect the security of our users.
bdbbaji may share your personal data with the following categories of recipients, always subject to strict data processing agreements and confidentiality obligations:
3.1 Service Providers and Technology Partners
We engage trusted third-party vendors who assist us in delivering the bdbbaji Platform and its associated services. These include:
- Game software providers (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) who supply the game engines and may process limited session data to ensure fair play and technical integrity;
- Payment processing partners (bKash, Nagad, Rocket, Upay, and banking partners) who process financial transactions on our behalf and require identity confirmation to meet their own KYC obligations;
- Identity verification and KYC providers who help us validate government-issued documents submitted by players;
- Cloud infrastructure and hosting providers who store platform data on servers protected by enterprise-grade physical and logical security controls;
- Analytics and performance monitoring tools that help us understand how players interact with bdbbaji and where the user experience can be improved.
All service providers are bound by contractual data processing agreements that prohibit them from using your data for any purpose other than the specific service they provide to bdbbaji, and require them to maintain data security standards consistent with those described in this Policy.
3.2 Legal and Regulatory Disclosures
bdbbaji may disclose your personal data to competent authorities, law enforcement agencies, courts, or regulatory bodies where we are required to do so by applicable law, court order, or mandatory regulatory request. Such disclosures may include:
- Disclosures required under anti-money laundering or counter-terrorism financing obligations;
- Responses to lawful requests from Bangladeshi law enforcement authorities;
- Disclosures necessary to enforce our Terms & Conditions or to protect the rights, property, or safety of bdbbaji, its players, or the public.
Where legally permissible, bdbbaji will notify you of any such disclosure request before complying. However, in cases where notification could compromise an investigation or is prohibited by law, we may not be able to inform you in advance.
3.3 Business Transfers
In the event that bdbbaji undergoes a merger, acquisition, restructuring, or sale of all or substantially all of its assets, your personal data may be transferred to the acquiring entity as part of that transaction. In such circumstances, bdbbaji will take reasonable steps to ensure that the receiving entity agrees to handle your personal data in a manner consistent with this Privacy Policy, and will provide notice of any material change in data controllership through a prominent notice on the Platform.
Cookies & Tracking Technologies
bdbbaji uses cookies and similar tracking technologies to operate the Platform effectively, remember your preferences, maintain your login session, and gather anonymised analytics data to improve the player experience. By continuing to use bdbbaji after being presented with our cookie notice, you consent to our use of cookies as described in this section.
Types of Cookies We Use
| Cookie Type | Purpose | Duration |
|---|---|---|
| Strictly Necessary | Maintain login sessions, enable core platform functionality, prevent CSRF attacks | Session / up to 24 hours |
| Functional | Remember language preference, game display settings, responsible gaming limits | Up to 12 months |
| Analytics | Measure page views, game popularity, navigation patterns — data is anonymised and aggregated | Up to 24 months |
| Fraud Prevention | Device fingerprinting to detect multi-accounting and suspicious access patterns | Up to 12 months |
Managing Your Cookie Preferences
Strictly necessary cookies cannot be disabled as they are essential to the operation of the Platform. For all other cookie categories, you may update your preferences at any time through your browser settings or through the privacy preference controls in your bdbbaji account settings. Please note that disabling functional or analytics cookies may affect the quality of your experience on the Platform.
Most modern browsers — including Chrome, Firefox, Safari, and Edge — provide built-in tools to view, manage, and delete cookies stored by websites. Consult your browser's help documentation for instructions specific to your device. On mobile browsers on Android and iOS devices, similar cookie management tools are available in the browser's privacy settings menu.
Data Security & Retention
bdbbaji implements a layered set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:
- Transport Layer Security (TLS): All data in transit between your browser or device and bdbbaji servers is encrypted using TLS 1.2 or higher;
- Data-at-rest encryption: Sensitive personal data stored on bdbbaji servers — including identity documents and financial account references — is encrypted at rest using AES-256 or equivalent standard encryption;
- Access controls: Access to personal data within bdbbaji's internal systems is restricted on a need-to-know basis. Staff members who handle player data are subject to confidentiality obligations and receive regular training on data protection best practices;
- Intrusion detection and monitoring: bdbbaji operates continuous network monitoring and intrusion detection systems to identify and respond to potential security threats in real time;
- Penetration testing: Our platform undergoes periodic independent security assessments to identify and remediate vulnerabilities before they can be exploited.
Despite these measures, no online system can guarantee absolute security. In the event of a personal data breach that poses a significant risk to your rights or freedoms, bdbbaji will notify affected players without undue delay and will take all reasonable steps to contain and remediate the breach.
Data Retention Periods
bdbbaji retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. Key retention periods are as follows:
- Active account data (identity, contact, financial): Retained for the duration of your account and for a minimum of 5 years following account closure, in compliance with anti-money laundering record-keeping requirements;
- KYC and identity verification documents: Retained for a minimum of 5 years from the date of submission or from the date of account closure, whichever is later;
- Transaction records: Retained for a minimum of 5 years from the date of each transaction;
- Customer support communications: Retained for 2 years from the date of the most recent interaction;
- Analytics and log data: Retained for up to 24 months in anonymised or aggregated form after which it is securely deleted or further anonymised;
- Marketing preferences: Retained until you withdraw consent, at which point your marketing data is removed from active mailing lists within 10 business days.
Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised in a manner that prevents reconstruction of the original data.
Your Rights as a Data Subject
How to Exercise Your Rights: To submit a data subject request, contact bdbbaji's support team by emailing [email protected] with the subject line "Data Subject Request — [Your Request Type]". We will acknowledge your request within 3 business days and provide a full response within 30 calendar days.
As a player of bdbbaji, you have the following rights with respect to your personal data. These rights are available to all players regardless of their location, and we are committed to honouring them in full:
- Right of Access: You have the right to request a copy of all personal data bdbbaji holds about you, along with information about how it is being used, who it has been shared with, and for how long it will be retained. We provide this information free of charge in a structured, machine-readable format upon request.
- Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it promptly. You may also update certain information directly through your account profile page without needing to contact support.
- Right to Erasure ("Right to Be Forgotten"): In certain circumstances — for example, if your data is no longer necessary for the purpose for which it was collected, or if you withdraw consent — you may request that bdbbaji delete your personal data. Please note that this right is subject to legal retention obligations; we cannot delete data that we are legally required to retain for anti-money laundering or tax compliance purposes.
- Right to Restrict Processing: You may request that we temporarily suspend the processing of your personal data in certain situations, such as while a dispute about the accuracy of your data is being resolved.
- Right to Data Portability: Where processing is based on your consent or on contract performance, you have the right to receive your personal data in a structured, commonly used, machine-readable format and to request that it be transmitted directly to another data controller where technically feasible.
- Right to Object: You have the right to object at any time to the processing of your personal data for direct marketing purposes, including profiling carried out for marketing purposes. You may also object to processing carried out on the basis of legitimate interests, though such objections are subject to balancing against bdbbaji's legitimate operational needs.
- Right to Withdraw Consent: Where bdbbaji processes your personal data on the basis of your consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.
bdbbaji will not charge you for exercising any of the rights listed above. We may, however, charge a reasonable administrative fee or decline to act on a request that is manifestly unfounded, excessive, or repetitive in nature. In all such cases we will explain our reasoning in writing.
Third-Party Services & Links
The bdbbaji Platform integrates a number of third-party services to provide you with a complete gaming experience. These include game content provided by studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi, as well as payment processing infrastructure provided by bKash, Nagad, Rocket, Upay, and partner banks including Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, and Sonali Bank.
Each of these third-party service providers operates under their own privacy policies and data handling practices, which are independent of bdbbaji's. When you interact directly with a third-party payment gateway or a game session powered by a third-party studio, your data may be processed by that provider in accordance with their own terms. bdbbaji recommends that you review the privacy policies of key service providers you interact with, particularly those related to your chosen payment method.
Game Provider Data Practices
Game providers integrated into bdbbaji may collect limited technical and gameplay data — such as session identifiers, bet amounts, and round outcomes — to ensure the integrity and fairness of their games. This data is used solely for the purpose of delivering the game service and resolving disputes, and is subject to confidentiality obligations in our contracts with each provider. Game providers do not receive your full name, payment account details, or National ID information through the bdbbaji integration.
No Responsibility for External Sites
From time to time, bdbbaji may reference or display content that originates from external sources. bdbbaji has no control over the data collection or privacy practices of any external website or service not owned and operated by bdbbaji. We accept no responsibility or liability for the privacy practices, content, or security of any third-party website. This Privacy Policy applies solely to data collected and processed by bdbbaji in connection with your use of the bdbbaji Platform at https://bdbbaji.net.
Policy Updates & Contact
bdbbaji reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or the services we offer. When we make material changes to this Policy, we will:
- Update the "Last updated" date displayed at the top of this page;
- Display a prominent notice on the bdbbaji Platform informing active players that the Privacy Policy has been updated;
- Where the changes are particularly significant, send a notification to the email address registered to your account.
Your continued use of bdbbaji following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with the changes, you should stop using the Platform and contact us to request account closure and data handling instructions.
We encourage all players to check this page periodically — especially before making a new deposit or participating in a new promotion — to remain fully informed about how bdbbaji manages your personal data.
Contacting bdbbaji About Privacy
If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data bdbbaji holds about you, please contact our support team using the details below. Our team is based in Bangladesh and operates on Bangladesh Standard Time (BST, UTC+6).
- Support Email: [email protected] (plain text — not a clickable link)
- Response time: Data subject requests acknowledged within 3 business days; full response within 30 calendar days
- Live Chat: Available 24/7 via the bdbbaji Platform for general privacy enquiries
- Language: Support available in English and Bengali
For formal legal notices or data subject requests, please include "Privacy — Formal Request" in the subject line of your email to ensure your message is routed directly to the appropriate team member without delay.
Have More Questions About Privacy?
Our support team is available around the clock to address any privacy concerns. You can also review our full Terms & Conditions, explore responsible gaming tools, or head straight to the bdbbaji Casino lobby.