baji taka Privacy Policy

baji taka collects personal information from you at various stages of your relationship with the platform — during registration, account verification, gameplay, financial transactions, and support interactions. The categories of data we collect are described below.

Registration Data

When you create a baji taka account, we collect the following information:

• Full legal name (as it appears on your official identity document)
• Date of birth (to verify that you meet the 18+ age requirement)
• Residential address in Bangladesh (city, district, and postal area)
• Mobile number registered to a Bangladeshi network (Grameenphone, Robi, Banglalink, Teletalk, or Airtel Bangladesh)
• Email address
• Preferred username and account password (stored in encrypted form — we never store plaintext passwords)

Identity Verification (KYC) Data

As part of our Know Your Customer (KYC) obligations, we may collect and process the following documentary information:

• Bangladesh National Identity Card (NID) — front and back image
• Passport bio-data page
• Driver's licence
• Proof of address — recent utility bill or bank statement issued within the last 90 days
• Proof of payment method ownership — for example, a screenshot or confirmation from bKash or Nagad confirming the account is registered in your name

KYC documents are processed for identity verification purposes only and are stored in a secure, access-controlled environment with strict internal access policies.

Financial Transaction Data

When you make deposits or request withdrawals, baji taka records the following transactional data:

• Payment method used (bKash, Nagad, Rocket, Upay, Visa, Mastercard, or bank transfer)
• Mobile wallet number or partial bank account details (last four digits only for card payments)
• Transaction reference numbers issued by the payment provider
• Deposit and withdrawal amounts in BDT, timestamps, and transaction status

baji taka does not store full card numbers. Payment card data is handled directly by PCI-DSS compliant payment processors, and only tokenised references are retained on our systems.

Technical and Usage Data

When you access baji taka, our servers and analytics systems automatically collect certain technical information:

• IP address and approximate geographic location (country and city level)
• Device type, operating system, and browser version
• Pages visited, session duration, navigation path, and feature usage patterns
• Game session data — games played, stakes, outcomes, and session timestamps
• Login history including timestamps and IP addresses

This technical data is used for platform security monitoring, fraud detection, performance optimisation, and aggregate analytics. It is not used to build advertising profiles.

Communications Data

When you contact our support team — via live chat, email, or any other channel — we retain a record of the communication, including the content of messages, timestamps, and the resolution provided. This data is used for quality assurance, dispute resolution, and improving our customer service operations.

baji taka processes your personal data only for legitimate, specified purposes. The following table summarises the primary uses of each category of data we collect, together with the legal basis under which that processing takes place.

Marketing Communications

baji taka may send you promotional emails and SMS notifications about new games, bonus offers, seasonal promotions (such as BPL, IPL, Eid, or Pohela Boishakh offers), and platform updates — but only if you have expressly opted in to receive such communications during registration or through your account settings. You may withdraw consent at any time by updating your notification preferences in your account dashboard or by contacting support at [email protected].

Players who have elected self-exclusion under our Responsible Gaming programme will have all marketing communications suppressed immediately and for the full duration of the exclusion period.

Automated Decision-Making

baji taka uses automated systems to monitor account activity for fraud indicators, bonus abuse patterns, and responsible gaming triggers. These systems may result in automated flags that lead to account restrictions or enhanced review. Where an automated process results in a significant decision affecting your account — such as a withdrawal hold or account suspension — you have the right to request human review of that decision by contacting our support team.

baji taka does not sell your personal data. We do not share your information with third parties for their own commercial purposes. Data is shared externally only in the limited circumstances described below.

Service Providers and Data Processors

We engage carefully selected third-party service providers to help deliver our platform and services. These providers act strictly as data processors under our instruction and are contractually prohibited from using your data for any purpose beyond the specific service they provide to baji taka. Categories of service provider include:

• Payment processors: bKash, Nagad, Rocket, Upay, Visa, Mastercard network processors, and partnered Bangladeshi banks. These providers receive only the transactional data necessary to process your deposit or withdrawal.
• Identity verification services: Third-party KYC providers that assist in verifying the authenticity of identity documents submitted by players.
• Game content providers: Studios such as Evolution Gaming, Pragmatic Play, PG Soft, Spribe, Ezugi, and others receive session-level data (player ID, stake amounts, game outcomes) necessary to deliver their game content. These providers do not receive your name, mobile number, or financial account details.
• Cloud infrastructure and hosting providers: Server and database infrastructure providers who store platform data in secure, access-controlled environments.
• Customer support platforms: Live chat and ticketing system providers used to deliver our 24/7 support service.

Legal and Regulatory Disclosure

baji taka may disclose personal data to competent authorities, law enforcement agencies, or regulatory bodies where we are legally required to do so, or where disclosure is necessary to:

• Comply with a binding legal obligation or court order
• Investigate, detect, or prevent fraud, money laundering, or other financial crimes
• Protect the rights, safety, or property of baji taka, its players, or third parties

Where legally permissible, baji taka will notify you of such a disclosure request before responding.

Business Transfers

In the event that baji taka undergoes a business restructuring, merger, acquisition, or asset sale, your personal data may be transferred to the acquiring entity as part of that transaction. In such circumstances, you will be notified via the email address registered on your account prior to the transfer taking effect, and the acquiring entity will be required to honour the commitments made in this Privacy Policy.

baji taka uses cookies and similar technologies (such as local storage tokens and session identifiers) to provide a functional, secure, and personalised experience on the platform. This section explains what cookies we use, why we use them, and how you can manage your preferences.

What Are Cookies?

Cookies are small text files placed on your device by a website when you visit it. They allow the website to recognise your device across pages and sessions, store your preferences, and collect basic usage statistics. Cookies do not contain executable code and cannot directly access other files or data on your device.

Categories of Cookies Used by baji taka

Managing Cookie Preferences

Essential and security cookies cannot be disabled, as they are strictly necessary for the platform to function correctly and to keep your account secure. Functional and analytics cookies may be managed through your browser settings. Most modern browsers allow you to view, block, or delete cookies via their privacy or settings menu. Note that disabling functional cookies may affect platform performance and personalisation features.

baji taka does not use cross-site tracking cookies, advertising network cookies, or cookies that build profiles of your browsing activity outside of the baji taka platform.

baji taka retains personal data for only as long as is necessary to fulfil the purposes described in this Privacy Policy, or as required by applicable legal, regulatory, accounting, or reporting obligations. The following retention periods apply as a general guide:

• Account registration and KYC data: Retained for the duration of your active account relationship with baji taka, plus a minimum of five years following account closure. This retention period exists to satisfy anti-money-laundering record-keeping obligations.
• Financial transaction records: Retained for a minimum of seven years from the date of each transaction, in accordance with financial record-keeping standards.
• Game session logs: Retained for a minimum of two years from the date of each session. Older session logs are anonymised and retained in aggregate form for platform analytics.
• Support communications: Retained for two years from the date of the last communication in each support ticket, unless the subject matter involves a dispute or legal claim, in which case the retention period extends to five years or until the matter is fully resolved.
• Marketing preferences and consent records: Retained for as long as your account is active, plus two years following closure, to allow us to demonstrate the basis on which we sent (or did not send) marketing communications.

Where data is no longer required and no legal obligation compels its retention, baji taka will securely delete or irreversibly anonymise it. Anonymised, aggregated data may be retained indefinitely for statistical and platform improvement purposes, as it no longer constitutes personal data in an identifiable form.

baji taka implements a layered set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. While no online platform can guarantee absolute security, we maintain the following safeguards as a baseline:

Technical Safeguards

• SSL/TLS Encryption: All data transmitted between your device and baji taka's servers is encrypted using industry-standard SSL/TLS protocols. The padlock symbol displayed in your browser confirms an active encrypted connection.
• Encrypted Password Storage: Account passwords are hashed using a strong, salted cryptographic algorithm. baji taka staff cannot view your password in plaintext under any circumstances.
• Tokenised Payment Data: Card payment details are handled exclusively by PCI-DSS compliant payment processors. baji taka stores only a tokenised reference, not full card numbers.
• Two-Factor Authentication (2FA): SMS-based 2FA is available to all account holders and is strongly recommended. Players with 2FA enabled receive an additional one-time passcode on their registered mobile number for each new login session.
• Intrusion Detection and Monitoring: baji taka operates 24/7 security monitoring on its server infrastructure to detect and respond to anomalous access patterns, denial-of-service attempts, and other threats.

Organisational Safeguards

• Access to personal data is restricted on a strict need-to-know basis. Only those staff members whose role requires access to specific data categories are granted the relevant system permissions.
• All baji taka staff who handle personal data receive privacy and data security training as part of their onboarding process and on an ongoing annual basis.
• Third-party service providers are subject to data processing agreements that mandate appropriate security standards and restrict data use to the specified service purpose.
• Internal data access is logged and audited periodically to detect and investigate any inappropriate access.

Your Role in Account Security

A significant element of account security is within your control. baji taka strongly recommends the following practices:

• Use a strong, unique password for your baji taka account — do not reuse passwords from other platforms.
• Enable SMS two-factor authentication in your account security settings.
• Never share your login credentials with any other person, and be aware that baji taka staff will never ask for your password.
• Log out of your account on shared or public devices after each session.
• Report any suspicious account activity immediately to [email protected].

As a baji taka account holder, you hold the following rights in relation to your personal data. These rights may be exercised at any time by contacting our support team via live chat or by emailing [email protected]. We aim to acknowledge all privacy rights requests within two business days and to resolve them within 14 business days of receiving all necessary information.

Right of Access

You have the right to request a copy of the personal data that baji taka holds about you. Upon a verified access request, we will provide a structured summary of your data, the purposes for which it is processed, the categories of recipients with whom it has been shared, and the applicable retention periods.

Right to Rectification

If any personal data held by baji taka is inaccurate or incomplete, you have the right to request correction. Minor corrections (such as a misspelled city or an outdated phone number) can be made directly through your account settings. Corrections to core identity fields (name, date of birth) require verification via updated KYC documentation.

Right to Erasure

You may request the deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purposes for which it was collected, or where you withdraw consent and no other legal basis applies. Note that the right to erasure is not absolute: baji taka may be required to retain certain data for the minimum periods described in Section 05 to comply with anti-money-laundering, financial record-keeping, and dispute resolution obligations.

Right to Restrict Processing

You have the right to request that baji taka restricts processing of your personal data in specific circumstances, such as while the accuracy of the data is being verified following a rectification request, or while an objection to processing is being assessed.

Right to Data Portability

Where baji taka processes your personal data by automated means on the basis of your consent or for the performance of a contract, you may request that we provide your data in a structured, commonly used, and machine-readable format so that you may transfer it to another service provider.

Right to Object to Marketing

You have an absolute right to object to the processing of your personal data for direct marketing purposes at any time. Following receipt of an objection, baji taka will immediately cease sending marketing communications and update your preferences accordingly. This does not affect the lawfulness of marketing communications sent before your objection was received.

Right to Withdraw Consent

Where baji taka processes your data on the basis of your consent (such as for marketing communications), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that took place prior to withdrawal.

Updates to This Privacy Policy

baji taka reserves the right to update or revise this Privacy Policy at any time. Changes may be made to reflect updates to our data processing practices, new features or services introduced on the platform, changes in applicable law or regulation, or feedback from players and regulators.

When material changes are made to this Privacy Policy, baji taka will publish a notice on the website and, where appropriate, send a notification to registered players via their registered email address. The "Effective Date" displayed at the top of this page will be updated to reflect the date on which the revised policy takes effect. We encourage you to review this Privacy Policy periodically to stay informed of how we protect your data.

Continued use of the baji taka platform following publication of a revised Privacy Policy constitutes your acknowledgement of and agreement to the updated terms. If you do not agree with the changes, you should discontinue use of the platform and request account closure.

How to Contact Us

For any questions, concerns, or requests relating to your privacy and personal data, please contact the baji taka data support team using the following channels:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 from within your baji taka account dashboard
• Support Hours: 24/7 — Bangladesh Standard Time (BST, UTC+6 )

We aim to respond to all privacy-related enquiries within two business days. For formal data rights requests (access, erasure, portability), please include your registered account username and a brief description of your request in your initial message to help us process it efficiently.