bdbaju Privacy Policy

1.1 Who Is Responsible for Your Data

For the purposes of this Privacy Policy, the data controller responsible for your personal data is bdbaju, operating the platform accessible at https://bdbaju.app. The data controller is the entity that determines the purposes and means of processing personal data collected through the platform.

If you have any questions, requests, or concerns regarding the processing of your personal data by bdbaju, you may contact our dedicated privacy support channel at any time:

• Email: [email protected]
• Available: 24 hours a day, 7 days a week
• Response time: Within 72 hours for privacy-related requests

2.1 Registration Data

When you create a bdbaju account, we collect the personal information you provide during the registration process. This registration data is necessary to establish your account, verify your identity, and enable you to access the platform's services. The data collected at registration includes:

• Full legal name as it appears on your government-issued identification document
• Date of birth to verify that you meet the 21+ age requirement
• Mobile phone number registered in Bangladesh, used for account communications and transaction notifications
• Email address (where provided) for account correspondence
• Residential address for address verification purposes
• Username and password (password stored as a salted cryptographic hash — never in plain text)

2.2 Identity Verification (KYC) Data

As part of our Know Your Customer (KYC) obligations, bdbaju may collect and process copies of identity documents to verify your identity and confirm that you meet eligibility requirements. KYC documents collected may include:

• Scanned copy or photograph of your National Identity Card (NID)
• Scanned copy or photograph of your passport (bio-data page)
• Proof of residential address such as a utility bill or bank statement dated within 90 days
• Confirmation of ownership of the mobile financial service account (bKash, Nagad, Rocket, or Upay) used for transactions
• Source of funds declaration where required by our internal risk thresholds

KYC documents are processed with strict access controls and are used solely for identity verification, fraud prevention, and compliance purposes. They are not shared with third parties for marketing purposes under any circumstances.

2.3 Transaction & Financial Data

When you make a deposit or withdrawal on bdbaju using bKash, Nagad, Rocket, or Upay, we collect transactional data necessary to process and record the transaction. This includes the transaction reference number, the amount in Bangladeshi Taka (BDT), the timestamp, the mobile wallet number used, and the transaction outcome. We do not store full mobile banking PINs or passwords — payment authentication is handled directly by the respective mobile financial service provider.

2.4 Usage & Behavioural Data

bdbaju automatically collects certain technical and behavioural data when you access and use the platform. This data helps us improve the platform experience, detect fraud, and ensure service stability. Automatically collected data includes:

• IP address and approximate geolocation (country and city level)
• Device type, operating system, and browser version
• Pages visited, features accessed, and session duration
• Betting and gaming activity including wagers placed, games played, and results
• Login timestamps and session activity logs
• Referral source (how you arrived at bdbaju.app)

2.5 Communications Data

If you contact bdbaju's customer support team via email, live chat, or any other channel, we retain records of those communications including the content of messages and any attachments you provide. These records are kept for quality assurance, dispute resolution, and training purposes for a period of up to 3 years from the date of the communication.

3.1 Purposes of Processing

bdbaju processes your personal data only for specific, legitimate purposes. The table below summarises the key processing activities, the data categories involved, and the legal basis for each:

3.2 Marketing Communications

bdbaju may send you promotional communications about new games, seasonal offers (such as Eid promotions, BPL special bonuses, or Pohela Boishakh campaigns), and platform updates — but only where you have provided your express consent at the time of registration or subsequently opted in through your account settings.

You may withdraw your consent to receive marketing communications at any time by contacting [email protected] or by updating your notification preferences in your account dashboard. Withdrawal of marketing consent does not affect the lawfulness of processing carried out before the withdrawal, nor does it affect your ability to use the platform.

4.1 Third-Party Recipients

bdbaju does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data only in the following limited circumstances, and only to the extent necessary for the stated purpose:

• Payment service providers: bKash, Nagad, Rocket, and Upay receive transaction data necessary to process your deposit and withdrawal requests. Their handling of your data is governed by their respective privacy policies.
• Game providers: Third-party game studios including Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, Habanero, and Ezugi may receive anonymised session and wagering data necessary to deliver their games and settle game results.
• Fraud prevention and identity verification services: Specialist third-party providers assist bdbaju in verifying identities and detecting fraudulent activity. These providers process data solely as data processors acting on bdbaju's instructions.
• Analytics providers: Anonymised, aggregated usage data may be shared with analytics services to help us understand platform usage patterns and improve our service.
• Legal and regulatory authorities: Where required by applicable law, court order, or the lawful request of a competent authority, bdbaju will disclose personal data to the relevant body. We will notify you of such disclosure where we are legally permitted to do so.

5.1 How bdbaju Uses Cookies

bdbaju uses cookies and similar tracking technologies (including local storage and session tokens) to operate the platform effectively and provide you with a personalised experience. Cookies are small text files stored on your device by your browser when you visit the platform. The categories of cookies we use are as follows:

• Essential cookies: Strictly necessary for the platform to function. These include session authentication tokens that keep you logged in, security cookies that prevent cross-site request forgery, and load-balancing cookies. You cannot opt out of essential cookies without losing access to the platform.
• Functional cookies: Remember your preferences such as language settings, odds format, and display preferences to personalise your experience on return visits.
• Analytics cookies: Collect anonymised data about how you navigate and interact with the platform. This data is used solely to improve platform design, performance, and content relevance.
• Responsible gaming cookies: Store session duration and activity data to power the in-session reality check and session limit tools available to Members.

You may configure your browser to block or delete cookies, but doing so may impair the functionality of the bdbaju platform. Essential cookies cannot be disabled without affecting your ability to use the service.

6.1 Retention Periods

bdbaju retains personal data for as long as is necessary to fulfil the purposes described in this Privacy Policy, to comply with applicable legal and regulatory obligations, and to resolve disputes or enforce our agreements. Typical retention periods are as follows:

• Account and registration data: Retained for the duration of your active membership and for a minimum of 5 years following account closure, in accordance with anti-money-laundering record-keeping requirements.
• KYC documents: Retained for a minimum of 5 years from the date of collection or the date of account closure, whichever is later.
• Transaction records: Retained for a minimum of 5 years from the date of each transaction.
• Customer support communications: Retained for up to 3 years from the date of the communication.
• Usage and analytics data: Retained in anonymised or aggregated form indefinitely for statistical and platform improvement purposes. Individually identifiable usage data is deleted or anonymised within 24 months of collection.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be attributed to any individual.

7.1 Rights Available to Members

As a bdbaju Member, you hold the following rights with respect to your personal data. To exercise any of these rights, please submit a written request to [email protected] from the email address associated with your account, clearly identifying which right you wish to exercise:

• Right of access: You have the right to request a copy of the personal data bdbaju holds about you, along with information about how it is being used.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated.
• Right to erasure: In certain circumstances, you have the right to request the deletion of your personal data. This right is subject to limitations where data must be retained to comply with legal obligations, resolve disputes, or enforce our Terms and Conditions.
• Right to restriction of processing: You may request that we limit the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data while we verify it.
• Right to object: You have the right to object to the processing of your personal data for direct marketing purposes at any time, with no need to provide justification.
• Right to data portability: Where technically feasible, you may request a copy of your personal data in a structured, commonly used, machine-readable format.

8.1 Security Measures

bdbaju takes the security of your personal data seriously and implements a range of technical and organisational measures designed to protect your information against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmissions between your device and our servers
• Encryption of sensitive data at rest using industry-standard algorithms
• Strict role-based access controls ensuring that only authorised personnel can access personal data, and only to the extent necessary for their specific job function
• Regular security audits and penetration testing of platform infrastructure
• Automatic session timeout after a period of inactivity to reduce the risk of unauthorised account access
• Multi-factor authentication options available to Members to add an additional layer of security to their accounts
• Secure, firewalled data storage with continuous monitoring for anomalous access patterns

Despite these measures, no method of transmission over the internet or method of electronic storage is 100% secure. While bdbaju strives to apply commercially acceptable means to protect your personal data, we cannot guarantee its absolute security. In the event of a data breach that is likely to result in a risk to your rights or freedoms, bdbaju will notify affected Members without undue delay.

9.1 21+ Platform

bdbaju is strictly a platform for adults aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. If you are under 21, you are not permitted to register an account, and you must not attempt to use the platform. If a parent or guardian becomes aware that their child under the age of 21 has provided personal data to bdbaju, they should contact us immediately at [email protected] so that the account can be closed and the data deleted without delay.

10.1 Policy Updates

bdbaju reserves the right to update or amend this Privacy Policy at any time. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify active Members via the contact details held on their account. The most current version of the Privacy Policy will always be accessible at https://bdbaju.app/privacy-policy.

Your continued use of the bdbaju platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree to the revised policy, you should discontinue use of the platform and close your account by contacting [email protected].

11.1 How to Reach Us

For all privacy-related queries, data access requests, or complaints regarding how bdbaju handles your personal data, please contact us using the details below. All contact must be made in writing — no telephone or clickable link contact is provided in line with platform policy.

• Privacy enquiries email: [email protected]
• Support availability: 24/7 including Bangladesh public holidays
• Privacy request response time: Within 72 hours for acknowledgement; within 30 days for full resolution
• Communication language: English

When submitting a privacy request, please include your registered username, a clear description of your request, and — where relevant — the specific data categories or processing activities your request concerns. This will allow our team to handle your request as quickly and accurately as possible.