Privacy Policy

1 Introduction

bbajje is Bangladesh's dedicated online cricket betting and casino platform, offering live sports wagering, a library of more than 2,000 certified casino games, and instant payment processing via bKash, Nagad, Rocket, Upay, and major bank transfers. As an online platform that processes financial transactions and verifies member identities, bbajje necessarily handles personal data as part of its day-to-day operations.

bbajje is committed to handling all personal data responsibly, transparently, and in accordance with applicable data protection principles. This Privacy Policy has been written in plain English so that every bbajje member — wherever they are located across Bangladesh, whether in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, or Mymensingh — can clearly understand how their information is treated.

This Policy should be read alongside the bbajje Terms and Conditions, which are available at https://bbajje.club/terms-conditions. In the event of any conflict between this Policy and the Terms and Conditions regarding data handling, this Privacy Policy takes precedence on matters of personal data.

2 Who We Are

For the purposes of this Privacy Policy, the data controller responsible for your personal information is bbajje, the operator of the online platform available at https://bbajje.club. bbajje is the entity that determines the purposes and means by which your personal data is processed.

If you have any questions, requests, or concerns about how your personal data is handled, you may contact our dedicated data privacy team using the contact details set out in Section 14 of this Policy. All privacy-related enquiries will be treated with confidentiality and responded to within a reasonable timeframe.

3 Data We Collect

bbajje collects personal data from members through several distinct channels: information you provide directly when registering or using the platform, information generated automatically by your use of the platform, and information received from trusted third-party service providers. The categories of data we collect are set out in the table below.

Category	Examples	Source
Identity Data	Full legal name, date of birth, National Identity Card (NID) number, passport number, selfie or photograph for KYC verification	Provided by you during registration and KYC verification
Contact Data	Email address, mobile phone number, residential address (including division, district, and upazila within Bangladesh)	Provided by you during registration or account updates
Financial Data	bKash account number, Nagad account number, Rocket number, Upay number, bank account details, transaction reference numbers, deposit and withdrawal history	Provided by you when making deposits or withdrawal requests; also received from payment processing partners
Account Activity Data	Login timestamps, session durations, bets placed, games played, bonus usage, betting history, account balance history, responsible gaming tool settings	Generated automatically by your use of the bbajje platform
Technical Data	IP address, device type, operating system, browser type and version, screen resolution, referring URL, pages visited, click-through patterns	Collected automatically via server logs and analytics tools when you access the bbajje website
Communications Data	Content of live chat conversations, support emails sent to [email protected], WhatsApp messages sent to our support number, any feedback or complaint submissions	Provided by you when contacting our customer support team
Verification Data	Results of identity verification checks, age verification outcomes, fraud screening scores, AML screening results	Received from our third-party KYC and fraud detection service providers after processing documents you submit

4 How We Use Your Data

bbajje uses the personal data it collects for the following specific and legitimate purposes:

• Account Management: To create, verify, manage, and maintain your bbajje member account, including processing your registration, resetting your password, and responding to account-related queries.
• Identity Verification (KYC): To verify that you are who you claim to be, that you are at least 18 years of age, and that you are eligible to use the bbajje platform in accordance with applicable requirements.
• Payment Processing: To process your deposit requests via bKash, Nagad, Rocket, Upay, or bank transfer, and to execute approved withdrawal requests to your registered payment account. Financial data is handled in partnership with certified payment processors.
• Service Delivery: To provide you with access to the full range of bbajje sports betting markets and casino games, to calculate and credit winnings to your account balance, and to apply bonuses and promotions in accordance with their applicable terms.
• Customer Support: To respond to your support requests, complaints, and enquiries via live chat, email, or WhatsApp, and to maintain records of communications for quality assurance and dispute resolution purposes.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, unauthorised account access, bonus abuse, money laundering, match fixing, and other prohibited conduct as defined in the bbajje Terms and Conditions.
• Responsible Gaming: To monitor account activity for indicators of problem gambling and to administer responsible gaming tools such as deposit limits, cooling-off periods, and self-exclusion requests that you set on your account.
• Legal & Regulatory Compliance: To comply with applicable anti-money-laundering obligations, to retain financial and identity records for the minimum periods required by law, and to respond to lawful requests from competent authorities.
• Platform Improvement: To analyse aggregated and anonymised usage patterns to improve the bbajje platform, fix technical issues, optimise page performance, and develop new features that better serve our members across Bangladesh.
• Marketing Communications (with consent): To send you promotional emails, SMS notifications, or platform notifications about new games, bonus offers, BPL season promotions, Eid specials, and other campaigns — but only where you have opted in to receive such communications. See Section 11 for full details.

5 Data Sharing & Third Parties

bbajje does not sell, rent, or trade your personal data to any third party. Data sharing is limited strictly to the following categories of trusted service partners, each of whom is bound by contractual data protection obligations:

• Payment Processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard — solely to execute financial transactions you initiate.
• KYC & Identity Verification Providers: Certified third-party services that process identity documents and selfies to confirm your age and identity as part of our verification obligations.
• Fraud Detection & AML Screening Services: Automated platforms that screen account activity for indicators of money laundering, bonus abuse, and suspicious behaviour, enabling bbajje to fulfil its anti-money-laundering obligations.
• Game Software Providers: Casino game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive your session data (anonymised player ID, stake amounts, and game results) solely to run the games you play. They do not receive your name, contact details, or financial information.
• Hosting & Infrastructure Providers: Cloud hosting and content delivery providers who store and serve the bbajje platform. These providers have no independent right to use or process your data beyond what is needed to provide the hosting service.
• Legal & Regulatory Authorities: Where required by law, court order, or a legitimate and lawful request from a competent authority, bbajje may disclose personal data to relevant government bodies, financial intelligence units, or law enforcement agencies.

6 Data Retention

bbajje retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or for as long as is required by applicable legal and regulatory obligations. The key retention periods applied by bbajje are as follows:

• Active Account Data: Retained for the full duration of your membership with bbajje and for a minimum of five years after the date of account closure.
• KYC & Identity Documents: Retained for a minimum of five years from the date of submission, in line with standard anti-money-laundering record-keeping requirements.
• Financial Transaction Records: Retained for a minimum of five years from the date of each transaction, to satisfy financial record-keeping obligations.
• Customer Support Communications: Retained for a minimum of two years from the date of the final communication in each support thread, for dispute resolution and quality assurance purposes.
• Technical & Log Data: Retained for up to twelve months from the date of collection, after which it is automatically purged or anonymised.
• Marketing Consent Records: Retained for as long as your marketing preferences are active, plus two years thereafter as evidence of consent.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be associated with any individual. If you request early deletion of your data and there is no legal obligation preventing deletion, bbajje will action that request within 30 days.

7 Security Measures

bbajje employs a multi-layered security framework to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our key technical and organisational security measures include:

• SSL/TLS Encryption: All data transmitted between your browser or mobile device and the bbajje platform is encrypted using industry-standard SSL/TLS protocols. This applies to account login, payment processing, and all other platform interactions.
• Password Hashing: Member passwords are never stored in plain text. They are processed using a modern cryptographic hashing algorithm with unique per-account salts, so that even in the event of a data breach, plain-text passwords cannot be extracted.
• Payment Tokenisation: bbajje does not store raw payment credentials such as bKash PINs, Nagad PINs, or bank card numbers on its servers. Payment data is tokenised by our certified payment partners before being passed to our platform.
• Access Controls: Access to personal data within the bbajje organisation is strictly limited to personnel who require it to perform their specific job functions. Access is governed by role-based permissions and is subject to regular review.
• Intrusion Detection & Monitoring: bbajje employs automated monitoring tools that continuously scan for unusual activity patterns, potential intrusion attempts, and suspicious access to member account data.
• Regular Security Audits: The bbajje platform undergoes periodic security assessments and vulnerability testing to identify and remediate potential weaknesses before they can be exploited.

Despite these measures, no online platform can guarantee absolute security against all possible threats. If you become aware of any security vulnerability on the bbajje platform, or if you suspect that your account has been accessed without authorisation, please contact our support team immediately at [email protected].

8 Cookies & Tracking Technologies

bbajje uses cookies and similar tracking technologies on its platform for the following specific purposes:

• Essential Cookies: These cookies are strictly necessary for the platform to function. They maintain your login session so that you do not need to re-enter your credentials on every page, and they preserve your account preferences and responsible gaming settings across sessions. Without these cookies, the bbajje platform cannot operate correctly.
• Performance & Analytics Cookies: These cookies collect anonymised information about how members use the bbajje platform — for example, which pages are visited most frequently, how long sessions last, and where technical errors occur. This data is used solely to improve platform performance and user experience. Individual members cannot be identified from this data.
• Functional Cookies: These cookies remember your language and display preferences, your last visited game category, and similar convenience settings so that the platform feels familiar each time you return.

bbajje does not use third-party advertising cookies, retargeting pixels, or any tracking technologies that share your browsing behaviour with external advertising networks. You may manage cookie preferences through your browser settings. Please note that disabling essential cookies may prevent certain features of the bbajje platform from functioning correctly.

9 Your Rights

As a bbajje member, you have the following rights in relation to your personal data. To exercise any of these rights, please contact our support team using the details in Section 14. bbajje will respond to all valid requests within 30 days.

• Right of Access: You have the right to request a copy of the personal data bbajje holds about you, along with information about how it is used and with whom it has been shared.
• Right to Rectification: If any personal data held by bbajje is inaccurate or incomplete, you have the right to request that it be corrected or updated.
• Right to Erasure: You may request that bbajje delete your personal data where it is no longer necessary for the purpose for which it was collected, subject to any overriding legal retention obligations (see Section 6). Requests for erasure will be processed within 30 days where legally permitted.
• Right to Restriction: You may request that bbajje temporarily restrict the processing of your personal data while a dispute or correction request is being resolved.
• Right to Data Portability: You may request a copy of the personal data you have provided to bbajje in a structured, machine-readable format so that it can be transferred to another service provider of your choice.
• Right to Object: You may object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing carried out on the basis of our legitimate interests, subject to bbajje demonstrating compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (for example, marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing that took place before the withdrawal.

10 Minors & Age Verification

bbajje operates a strict 18+ policy. The platform is intended exclusively for adult users who are 18 years of age or older. bbajje does not knowingly collect personal data from any individual under the age of 18. As part of the KYC verification process, all members are required to provide documentary proof of age before withdrawals are permitted and before certain account features are fully unlocked.

If bbajje becomes aware that a member account has been registered by or is being used by an individual under the age of 18, the account will be immediately suspended, all personal data associated with the account will be handled in accordance with our deletion obligations, and deposited funds will be returned to the verified payment source after an appropriate investigation is completed.

Parents and guardians who are concerned that a minor may be accessing the bbajje platform are encouraged to use reputable parental control software and to contact our support team immediately at [email protected] so that appropriate action can be taken.

11 Marketing Communications

bbajje may send you promotional communications — including emails, SMS messages, and in-platform notifications — about bonus offers, new games, BPL season promotions, Eid specials, Pohela Boishakh campaigns, and other platform news. These communications will only be sent where you have actively opted in to receive them at the time of registration or through your account settings.

You may withdraw your consent to receive marketing communications at any time by:

• Updating your notification preferences in your bbajje account settings.
• Clicking the unsubscribe link included in any marketing email sent by bbajje.
• Contacting the bbajje support team at [email protected] with a clear request to be removed from all marketing lists.

Please allow up to five business days for your opt-out preference to take effect across all communication channels. Please note that withdrawing consent for marketing communications does not affect essential transactional communications — for example, deposit confirmations, withdrawal notifications, and security alerts — which bbajje must send to you as part of operating your account.

12 International Data Transfers

In order to operate the bbajje platform and deliver services to members across Bangladesh, some personal data may be transferred to, stored on, or processed by systems located outside of Bangladesh. This may occur when data is processed by our game software providers, KYC verification partners, or cloud infrastructure providers whose servers are located in other countries.

Where such international data transfers occur, bbajje takes reasonable steps to ensure that adequate protections are in place for your personal data, including entering into contractual data protection agreements with receiving parties that require them to handle your data to an equivalent standard to that described in this Privacy Policy.

13 Changes to This Policy

bbajje reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, platform features, or applicable legal requirements. The current version of the Privacy Policy will always be available at https://bbajje.club/privacy-policy and will carry the date on which it was last updated.

Where changes to this Policy are material — meaning they significantly affect how we collect, use, or share your personal data — bbajje will notify registered members via the email address on their account prior to the changes taking effect. For minor clarifications or non-material updates, a notice on the platform may be used in lieu of individual notification.

Your continued use of the bbajje platform after any updated Privacy Policy has been published constitutes your acceptance of the revised Policy. If you do not agree with any change, you must cease using the platform and contact our support team to request account closure.

14 Contact Us

If you have any questions, requests, or concerns regarding this Privacy Policy or the way in which bbajje handles your personal data, please contact our support and privacy team through any of the following channels:

• Email: [email protected]
• Live Chat: Available 24 hours a day, 7 days a week, directly on the bbajje website at https://bbajje.club
• WhatsApp: +880 1700 000000
• Time Zone: Bangladesh Standard Time (BST, UTC+6)

All privacy-related requests — including data access, rectification, erasure, and portability requests — should be submitted via email to [email protected] with the subject line "Privacy Request". Please include your registered account username and a clear description of your request. bbajje will acknowledge all privacy requests within 48 hours and provide a full response within 30 days.