Privacy Policy — baji66

baji66 collects personal data through the following channels:

• Direct submission: Information you provide when registering an account, completing KYC verification, making a deposit or withdrawal request, or contacting our support team.
• Automated collection: Technical data such as IP address, device identifiers, browser type, and session data collected automatically when you access the platform through cookies, log files, and similar tracking technologies.
• Third-party sources: Identity verification agencies, fraud prevention services, and payment processors may share data with baji66 as part of account verification workflows. baji66 only receives data from third parties where you have consented to that sharing or where it is required by applicable regulations.

baji66 processes personal data on the following legal bases:

• Contractual necessity: Processing required to fulfil our obligations to you under the Terms and Conditions — including account management, payment processing, and service delivery.
• Legitimate interests: Processing carried out for fraud prevention, platform security, responsible gaming monitoring, and internal analytics, where our legitimate interests do not override your fundamental rights.
• Legal obligation: Processing required to comply with anti-money laundering (AML) regulations, KYC requirements, and other applicable legal or regulatory mandates.
• Consent: Where we have specifically requested and obtained your consent for a defined processing activity, such as sending promotional communications. You may withdraw consent at any time by contacting [email protected].

The personal data baji66 collects is used exclusively for the following purposes:

• Creating, maintaining, and managing your player account.
• Processing deposits and withdrawals through supported payment channels including bKash, Nagad, Rocket, and Upay.
• Conducting identity verification and age checks as required for responsible gaming compliance. Players must be 21 years or older to use the platform.
• Detecting, investigating, and preventing fraudulent activity, money laundering, and other forms of abuse.
• Providing customer support and resolving disputes or complaints.
• Administering bonuses, promotions, and loyalty programmes, where applicable.
• Monitoring gaming behaviour to identify potential problem gambling indicators and applying responsible gaming interventions where appropriate.
• Improving the platform's features, performance, and user experience through aggregated, anonymised analytics.
• Sending service-related communications such as security alerts, account notifications, and transaction confirmations. These communications are non-optional as they are necessary for account operation.
• Sending optional promotional communications where you have given explicit consent. You may opt out of marketing messages at any time.

baji66 does not sell personal data. We may share your data with the following categories of third parties only where strictly necessary:

• Payment processors: bKash, Nagad, Rocket, Upay, and other supported payment service providers receive the transaction data necessary to execute deposits and withdrawals on your behalf.
• Identity verification providers: Specialist KYC and AML screening services that help us verify player identities and comply with anti-fraud obligations.
• Game content providers: Studios such as Pragmatic Play, Evolution Gaming, Ezugi, and Microgaming operate their own game engines. Interaction data (session data, bet results) is shared with these providers as part of game delivery. Their own privacy policies govern data they collect independently.
• IT and security service providers: Cloud infrastructure, cybersecurity monitoring, and analytics platforms that support platform operations under strict data-processing agreements.
• Legal and regulatory authorities: Where required by applicable law, court order, or legitimate regulatory investigation, baji66 may disclose personal data to law enforcement or other competent authorities.

All third-party processors engaged by baji66 are required to handle data in accordance with applicable data protection standards and are prohibited from using player data for their own commercial purposes.

baji66 uses cookies and similar technologies to operate and improve the platform. The types of cookies we use include:

• Essential cookies: Required for the platform to function. They maintain your session, remember your login state, and ensure secure navigation. These cannot be disabled without impairing your use of the site.
• Analytics cookies: Collect anonymised data about how players navigate the platform. This information helps us identify performance issues and improve the user experience.
• Security cookies: Help us detect and prevent fraudulent activity and unauthorised access attempts.

You may manage cookie preferences through your browser settings. Disabling essential cookies may limit your ability to use certain platform features. baji66 does not use third-party advertising cookies or cross-site tracking technologies.

baji66 retains personal data for the duration of the active account relationship and for a defined period thereafter, in accordance with the following principles:

• Account and identity data is retained for a minimum of five (5) years following account closure to comply with AML and financial record-keeping obligations.
• Transaction records are retained for a minimum of five (5) years following the date of each transaction.
• Support communications and dispute records are retained for three (3) years from the date of resolution.
• Technical log data (IP addresses, session logs) is retained for up to twelve (12) months for security and fraud investigation purposes.
• Marketing consent records are retained for as long as the consent is active, plus one (1) year following withdrawal of consent.

Following the expiry of applicable retention periods, personal data is securely deleted or anonymised so that it can no longer be linked to an individual.

As a user of the baji66 platform, you have the following rights with respect to your personal data:

• Right of access: Request a copy of the personal data baji66 holds about you.
• Right to rectification: Request correction of inaccurate or incomplete personal data.
• Right to erasure: Request deletion of your personal data, subject to any overriding legal retention obligations.
• Right to restriction: Request that baji66 restrict processing of your data in certain circumstances (e.g., while a dispute is under investigation).
• Right to data portability: Request a structured, machine-readable copy of the personal data you have provided to baji66.
• Right to object: Object to processing based on legitimate interests, including direct marketing.
• Right to withdraw consent: Where processing is based on your consent, withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

To exercise any of these rights, submit a written request to [email protected]. We will respond within 30 calendar days. We may ask you to verify your identity before processing data rights requests to protect your account security.

The baji66 platform is strictly for adults aged 21 years and above. We do not knowingly collect or process personal data from individuals under the age of 21. If we become aware that a minor has registered an account or submitted personal data, we will immediately close the account and delete all associated data without retention.

If you are a parent or guardian and believe your child has accessed or registered on the baji66 platform, please contact us immediately at [email protected] so we can take appropriate action.

baji66 implements a layered security framework to protect personal data from unauthorised access, disclosure, alteration, or destruction. Key measures include:

• SSL/TLS encryption for all data in transit between your device and our servers.
• Encryption of sensitive data fields (passwords, payment identifiers) at rest using industry-standard algorithms.
• Role-based access controls limiting employee access to personal data on a strict need-to-know basis.
• Regular internal security audits and vulnerability assessments of platform infrastructure.
• Intrusion detection systems monitoring for unusual access patterns or potential data breaches in real time.
• Staff data-handling training and confidentiality obligations for all personnel with access to player data.

In the event of a data security incident that poses a risk to your rights, baji66 will notify affected users without undue delay and take all necessary steps to contain and remediate the incident.

baji66 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, applicable laws, or platform operations. When material changes are made, we will update the "Last updated" date at the top of this page and, where appropriate, notify registered players via email or an in-platform notification.

Your continued use of the baji66 platform following the publication of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree to the revised Policy, you should cease using the platform and may request account closure by contacting [email protected].