Privacy Policy — bajeev Data Practices

1 Data We Collect

When you interact with the bajeev platform — whether by browsing the website, creating an account, depositing funds, placing bets, or contacting our support team — we may collect various categories of personal data. This section details every category of data we collect and the source from which it is obtained.

1.1 Data You Provide Directly

The following data is collected directly from you during registration, verification, or your ongoing use of the bajeev platform:

• Identity Data: Full legal name, date of birth, gender, and nationality as provided during registration or KYC verification.
• Contact Data: Email address, mobile phone number, and residential address including district, division, and postcode within Bangladesh.
• Identity Documents: Copies of your National Identity Card (NID), passport, or other government-issued photo identification submitted for KYC purposes.
• Financial Data: bKash, Nagad, Rocket, or Upay mobile wallet account numbers; bank account details where bank transfers are used; transaction history including deposits, withdrawals, and wager amounts denominated in Bangladeshi Taka (৳).
• Account Credentials: Username and hashed password (passwords are never stored in plain text).
• Communications Data: Records of any messages you send to bajeev via live chat, email, or support ticket systems.

1.2 Data Collected Automatically

When you access the bajeev website or mobile interface, certain technical data is collected automatically by our servers and analytics systems:

• Device & Technical Data: IP address, device type, operating system, browser type and version, screen resolution, and mobile network operator.
• Usage Data: Pages visited, games played, bet amounts, session duration, click paths, and feature interactions within the platform.
• Location Data: General geographic location inferred from your IP address (country and division level only — bajeev does not collect precise GPS coordinates).
• Cookie & Tracking Data: Session identifiers, preference cookies, and anonymised analytics data. See Section 4 for full details.

1.3 Data Received from Third Parties

In certain circumstances, bajeev may receive personal data about you from third parties, including identity verification service providers who assist with KYC processing, payment processors facilitating bKash, Nagad, Rocket, and Upay transactions, and fraud prevention partners who flag potentially suspicious account activity. Such third-party data is handled with the same level of care as data you provide directly.

Data Category	Examples	Collection Source
Identity	Name, date of birth, NID number	You (registration & KYC)
Contact	Email, phone, address	You (registration)
Financial	bKash/Nagad number, transaction history	You & payment processors
Technical	IP address, device type, browser	Automatic (platform)
Usage	Games played, bet history, session time	Automatic (platform)
Communications	Support messages, chat logs	You (support interactions)

2 How We Use Your Data

bajeev processes personal data only where there is a clear and lawful basis for doing so. The following table sets out the primary purposes for which your data is used and the corresponding legal basis in each case.

2.1 Account Management & Service Delivery

Your identity and contact data are used to create and maintain your bajeev account, authenticate your login sessions, communicate account-related notifications (such as deposit confirmations, withdrawal processing updates, and security alerts), and ensure that the platform functions correctly on your device. This processing is necessary for the performance of the contract between you and bajeev.

2.2 Payment Processing

Financial data — including your bKash, Nagad, Rocket, or Upay account references and transaction records — is processed to facilitate deposits and withdrawals denominated in Bangladeshi Taka (৳), to detect and prevent payment fraud, and to maintain accurate financial records as required by our operational and compliance obligations. bajeev does not store complete payment credentials on our own servers; sensitive payment data is handled directly by our licensed payment processing partners.

2.3 Identity Verification (KYC & AML)

Identity documents and personal data submitted during the KYC process are used to verify that you are who you claim to be, that you meet the minimum age requirement of 18 years, and to fulfil our anti-money-laundering (AML) obligations. KYC verification data may be cross-referenced against third-party identity verification services. This processing is carried out on the basis of legal obligation.

2.4 Responsible Gaming

bajeev uses your betting history, session data, and account activity patterns to support our responsible gaming programme. This includes identifying signs of problem gambling behaviour, enforcing player-set deposit or loss limits, and applying self-exclusion requests. This processing reflects both our contractual obligations to you and our commitment to player welfare.

2.5 Platform Improvement & Analytics

Anonymised and aggregated usage data is analysed to understand how players navigate the platform, which games are most popular among users in Dhaka, Chittagong, Sylhet, and other Bangladeshi cities, and where the user experience can be improved. Where analytics involve any individually identifiable data, it is pseudonymised before processing. bajeev does not use your data for algorithmic profiling that produces legal or similarly significant effects.

2.6 Marketing Communications

Where you have explicitly opted in to receive promotional communications, bajeev may use your contact data to send you information about new games, seasonal promotions (such as Eid and Pohela Boishakh offers), and cricket betting markets. You may opt out of marketing communications at any time by contacting [email protected] or using the unsubscribe link in any marketing email. Opting out of marketing does not affect your ability to use the platform or receive transactional notifications.

3 Data Sharing & Disclosure

bajeev does not sell your personal data to third parties. We share data only in the limited circumstances described below, and only to the extent necessary for the stated purpose.

3.1 Service Providers

We engage carefully selected third-party service providers to support platform operations. These providers are permitted to process your data only in accordance with our documented instructions and are contractually bound to maintain appropriate technical and organisational security measures. Categories of service provider include:

• Payment processing partners (bKash, Nagad, Rocket, Upay, and banking partners including Dutch-Bangla Bank, BRAC Bank, City Bank)
• Identity verification and KYC service providers
• Fraud detection and anti-money-laundering screening tools
• Cloud infrastructure and hosting providers
• Customer support platform operators
• Anonymised analytics platforms

3.2 Game Providers

To facilitate gameplay, limited technical data (such as a pseudonymous player session token and bet amount) is transmitted to third-party game providers including Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, and Spribe. This data transfer is the minimum necessary to deliver the game session and record the outcome. Game providers are not permitted to use this data for their own marketing or profiling purposes in connection with your bajeev account.

3.3 Legal & Regulatory Disclosure

bajeev may disclose your personal data to law enforcement agencies, regulatory authorities, or other competent bodies where required by applicable law or court order, or where disclosure is necessary to protect the rights, property, or safety of bajeev, its users, or the public. Where legally permissible, we will notify you of such a disclosure request before complying.

3.4 Business Transfers

In the event of a merger, acquisition, asset sale, or restructuring affecting bajeev, your personal data may be transferred to the acquiring or successor entity as part of that transaction. In such a case, bajeev will endeavour to ensure that your data continues to be handled in accordance with the commitments set out in this Privacy Policy, and we will notify affected users prior to any such transfer where practically possible.

4 Cookies & Tracking Technologies

The bajeev website uses cookies and similar technologies (such as local storage and session tokens) to operate the platform effectively and deliver a personalised experience. This section explains what cookies we use, why we use them, and how you can manage your preferences.

4.1 What Are Cookies?

Cookies are small text files placed on your device by a website when you visit it. They allow the website to recognise your device on subsequent visits and recall certain information about your preferences or session state. bajeev uses both session cookies (which expire when you close your browser) and persistent cookies (which remain on your device for a defined period).

4.2 Categories of Cookies We Use

Cookie Type	Purpose	Can Be Disabled?
Essential / Functional	Maintain your login session, remember language preference, enable secure access to account features	No — required for platform operation
Performance / Analytics	Collect anonymised data on page views, navigation paths, and feature usage to improve the platform	Yes — opt out via account settings
Responsible Gaming	Store your active session time and display responsible gaming alerts based on time-on-site	No — required for player protection
Fraud Prevention	Fingerprint device characteristics to detect and prevent account takeover and fraudulent transactions	No — required for security

4.3 Managing Cookies

You may configure your browser to refuse all or certain categories of cookies, or to alert you when cookies are being set. Please note that disabling essential cookies will impair your ability to log in and use core platform features. Instructions for managing cookies are available in your browser's help documentation. bajeev does not use third-party advertising cookies or retargeting pixels.

5 Data Retention

bajeev retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or to comply with applicable legal, regulatory, or operational requirements. The following retention periods apply as a general guide:

Data Category	Retention Period	Basis
Account & Identity Data	Duration of account + 5 years after closure	Legal obligation (AML compliance)
KYC Documents	Duration of account + 5 years after closure	Legal obligation (identity verification records)
Financial Transaction Records	Duration of account + 7 years after closure	Legal obligation (financial record-keeping)
Betting & Gaming History	Duration of account + 3 years after closure	Contractual & responsible gaming obligations
Support Communications	3 years from last interaction	Legitimate interest (dispute resolution)
Analytics Data (anonymised)	26 months on a rolling basis	Legitimate interest (platform improvement)
Marketing Preferences	Until opt-out + 1 year	Consent

Following the expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where data cannot immediately be deleted due to backup schedules or technical constraints, it will be isolated from active processing until deletion is completed.

6 Security Measures

bajeev takes the security of your personal data seriously and implements a layered set of technical and organisational measures designed to protect your information against unauthorised access, accidental loss, alteration, or disclosure.

6.1 Technical Safeguards

• 256-bit SSL/TLS Encryption: All data in transit between your device and bajeev servers is encrypted using industry-standard SSL/TLS protocols. The padlock icon in your browser confirms that your connection is secure.
• Encryption at Rest: Sensitive data categories — including KYC documents, payment account references, and identity records — are encrypted at rest using AES-256 encryption.
• Password Hashing: User passwords are never stored in plain text. bajeev uses a strong adaptive hashing algorithm (bcrypt) with per-account salting to store password credentials securely.
• Access Controls: Access to personal data within bajeev's internal systems is restricted on a strict need-to-know basis using role-based access controls. Access logs are maintained and reviewed regularly.
• Penetration Testing: bajeev's platform undergoes regular third-party security assessments to identify and remediate potential vulnerabilities before they can be exploited.

6.2 Organisational Safeguards

All bajeev team members who handle personal data are subject to confidentiality obligations and receive regular training on data protection best practices. Third-party service providers are assessed for their security posture before being onboarded and are contractually required to maintain appropriate safeguards throughout the duration of their engagement.

6.3 Data Breach Response

In the unlikely event of a personal data breach that poses a risk to the rights and freedoms of affected users, bajeev will notify affected players without undue delay and will take immediate steps to contain the breach and mitigate its impact. bajeev maintains a documented incident response plan that is reviewed and tested on a regular basis.

7 Your Rights & Choices

As a user of the bajeev platform, you hold a number of rights with respect to the personal data we hold about you. bajeev is committed to honouring these rights in a timely and transparent manner. To exercise any of the rights described below, please contact our support team at [email protected] with the subject line "Data Rights Request" and include sufficient information to allow us to verify your identity before processing the request.

7.1 Right of Access

You have the right to request a copy of the personal data that bajeev holds about you, along with information about the purposes for which it is processed, the categories of data involved, and the recipients to whom it has been disclosed. We will respond to access requests within 30 days of receipt.

7.2 Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. For basic account data (such as your email address or contact number), you may be able to update this directly through your account settings. For identity and KYC data, corrections must be submitted via the support team along with supporting documentation.

7.3 Right to Erasure

You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (in cases where consent was the legal basis), or where you believe the data has been processed unlawfully. Please note that bajeev is required by law to retain certain categories of data (particularly KYC and financial records) for specified minimum periods even after account closure. In such cases, we will delete all data that is not subject to a legal retention obligation and will explain which data must be retained and why.

7.4 Right to Restrict Processing

In certain circumstances — for example, while a data accuracy dispute is being resolved — you may request that bajeev restrict its processing of your personal data to storage only, temporarily pausing any active use of the data while the issue is investigated.

7.5 Right to Object

You have the right to object to processing of your personal data that is carried out on the basis of legitimate interests, including any profiling conducted for that purpose. You also have an unconditional right to object to the use of your data for direct marketing at any time. Upon receipt of a valid objection, bajeev will cease the processing activity in question unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.

7.6 Right to Data Portability

Where processing is based on your consent or on the performance of a contract, and the processing is carried out by automated means, you may request a structured, commonly used, machine-readable copy of your personal data so that it can be transferred to another service provider. We will provide this data in CSV or JSON format within 30 days of a valid portability request.

8 Contact & Policy Updates

8.1 How to Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way in which bajeev handles your personal data, please contact our support team using the details below. All privacy-related enquiries are handled confidentially and with priority.

Email (plain text — not a clickable link): [email protected]

Subject line for data rights requests: "Data Rights Request — [Your Username]"

We aim to respond to all privacy enquiries within 5 business days and to resolve data rights requests within 30 calendar days. Bangladesh Standard Time (BST, UTC+6) applies to all response timeframes.

8.2 Changes to This Privacy Policy

bajeev reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, platform features, or applicable legal requirements. When material changes are made, we will notify registered users via the email address associated with their account at least 14 days before the updated policy takes effect. The "Effective" date displayed at the top of this page will be updated to reflect the date on which the current version came into force.

Your continued use of the bajeev platform following notification of a policy update constitutes your acceptance of the revised Privacy Policy. If you do not agree with the revised terms, you should close your account and cease using the platform before the effective date of the changes.