Privacy Policy — How bdbajer Protects Your Data

1 Introduction & Scope

This Privacy Policy ("Policy") is issued by bdbajer, the operator of the online casino and sports betting platform accessible at https://bdbajer.club (the "Platform"). It describes how we collect, receive, store, use, share, and otherwise process personal information about individuals who visit, register on, or otherwise interact with the Platform ("Players", "Users", "you").

This Policy applies to all personal data processing activities carried out by bdbajer in connection with the Platform, regardless of the device or method by which you access it. It covers data collected directly from you (e.g., during registration), data generated automatically through your use of the Platform (e.g., session logs, game history), and data received from third parties (e.g., identity verification partners).

This Policy should be read alongside our Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference. By creating a bdbajer account or continuing to use the Platform, you acknowledge that you have read and understood this Policy in full.

2 Information We Collect

bdbajer collects personal information through several channels. Below is a comprehensive breakdown of the categories of data we process and the contexts in which each category is collected.

2.1 Registration Data

When you create a bdbajer account, we collect the following information directly from you:

• Full legal name (as it appears on your National Identity Card or passport).
• Date of birth (for age verification — players must be 18 years or older).
• Residential address, including district, division, and postcode within Bangladesh.
• A valid mobile phone number registered in Bangladesh.
• A valid email address that you actively monitor.
• A username and password of your choosing (password is stored in hashed, salted form — never in plain text).

2.2 KYC Verification Documents

To comply with Know Your Customer (KYC) requirements and to verify that all players meet the 18+ age restriction, we may collect:

• A copy of your Bangladesh National Identity Card (NID) or valid passport.
• Proof of residential address dated within the past three months (e.g., a utility bill, bank statement, or government letter).
• A confirmation screenshot of the payment method used for deposits, where required to verify ownership (e.g., your bKash or Nagad account screen).
• A selfie photograph or video for liveness verification, where required by our KYC provider.

2.3 Financial & Transaction Data

When you make a deposit or withdrawal on the Platform, we record:

• The payment method used (e.g., bKash, Nagad, Rocket, Upay, Visa, Mastercard, or local bank name).
• The transaction amount in Bangladeshi Taka (BDT) and the transaction reference number.
• The date, time (Bangladesh Standard Time, UTC+6), and status of each transaction.
• Partial payment identifiers (e.g., the last four digits of a card number or a masked mobile wallet number) — full payment credentials are never stored on bdbajer servers.

2.4 Gaming Activity Data

We maintain a full record of your gaming activity on the Platform for fairness verification, dispute resolution, and responsible gaming monitoring purposes:

• Game session logs, including game type (baccarat, Hi-Lo, Monster Hi-Lo, slots, cricket betting), session start/end times, stake amounts, and outcomes.
• Betting history across all cricket markets (BPL, IPL, T20 World Cup, Bangladesh Tigers fixtures, and other covered events).
• Bonus and promotion redemption records, including wagering progress toward fulfilment.
• Balance history and account statement data.

2.5 Technical & Device Data

When you access the Platform, our servers automatically collect certain technical information:

• IP address and approximate geolocation derived from it.
• Device type, operating system, browser type and version.
• Referring URL and on-site navigation path (pages viewed, time spent, click events).
• Session identifiers and cookie data (see Section 6 for full cookie details).

2.6 Communications Data

If you contact our support team via email at [email protected], we retain a record of that correspondence — including your email address, the content of your messages, and any attachments — for customer service continuity and dispute resolution purposes.

3 How We Use Your Information

bdbajer uses the personal data collected from you for a defined set of purposes. We do not use your data for any purpose not described in this Policy. Our primary use cases are as follows:

• Account management: Creating and maintaining your bdbajer player account, verifying your identity and age, and processing account changes (password resets, contact detail updates, responsible gaming limit adjustments).
• Service delivery: Enabling you to play games, place bets on cricket markets (BPL, IPL, T20 World Cup, Bangladesh Tigers), make deposits via bKash / Nagad / Rocket / Upay and other supported payment methods, and process withdrawals to your registered payment accounts.
• KYC & regulatory compliance: Verifying that you meet the 18+ age requirement and confirming your identity in accordance with our anti-money laundering (AML) obligations.
• Responsible gaming: Monitoring gaming behaviour for signs of problem gambling, applying deposit limits and session reminders at your request, and enforcing self-exclusion periods.
• Fraud prevention & security: Detecting and investigating suspicious account activity, preventing bonus abuse and multi-accounting, and protecting the integrity of the Platform.
• Customer support: Responding to your enquiries, resolving disputes, and improving our support processes based on recurring issues.
• Platform analytics & improvement: Analysing aggregated, anonymised usage patterns to improve Platform performance, game selection, and user experience — particularly for players accessing bdbajer from Dhaka, Chittagong, Sylhet, Rajshahi, and other regions of Bangladesh.
• Promotional communications: Sending you bonus offers, seasonal promotions (e.g., Eid, Pohela Boishakh, BPL season), and platform updates via email — but only where you have opted in to receive such communications, or where we have a legitimate interest in keeping you informed about changes to services you actively use.

4 Legal Basis for Processing

Every processing activity carried out by bdbajer is grounded in one or more of the following legal bases:

• Contractual necessity: Processing required to enter into and perform the contract with you — including account creation, payment processing, game delivery, and withdrawal handling.
• Legal obligation: Processing required for bdbajer to comply with applicable laws, including KYC/AML identity verification, age verification, and financial record-keeping obligations.
• Legitimate interests: Processing that is necessary for bdbajer's legitimate business interests — including fraud prevention, platform security, responsible gaming monitoring, and service analytics — where those interests are not overridden by your fundamental privacy rights.
• Consent: Processing for which you have given explicit, freely given, and informed consent — primarily marketing communications and optional analytics features. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

Where consent is the legal basis for a processing activity, bdbajer will keep a timestamped record of that consent and the mechanism through which it was obtained. Withdrawal of consent is always available and will be actioned within five business days of your request.

5 Data Sharing & Third Parties

bdbajer does not sell, rent, or commercially transfer your personal data to any third party. We may share your data with carefully selected third-party service providers strictly for the purposes set out in this Policy. All third-party recipients are bound by data processing agreements that prohibit them from using your data for any purpose other than the specific service they provide to bdbajer.

5.1 Categories of Third-Party Recipients

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank, Visa, and Mastercard — to process deposits and withdrawals and confirm transaction legitimacy.
• KYC and identity verification providers: Third-party identity verification platforms that validate NID documents, passports, and address proofs submitted during the KYC process.
• Fraud prevention and AML services: Third-party risk intelligence providers used to screen transactions and accounts for patterns consistent with fraud, money laundering, or financial crime.
• Live game streaming providers: Evolution Gaming and Ezugi, whose live dealer studio platforms stream baccarat and other live casino games to bdbajer players. These providers receive only the minimum data required to authenticate your session.
• IT infrastructure and hosting providers: Data centre and cloud hosting providers on whose infrastructure the Platform is hosted. These providers operate under strict confidentiality obligations.
• Legal and regulatory authorities: Where required by applicable law, court order, or lawful request from a competent authority, we may disclose personal data to regulators, law enforcement agencies, or judicial bodies. bdbajer will notify you of such disclosure wherever legally permissible.

6 Cookies & Tracking Technologies

The bdbajer Platform uses cookies and similar tracking technologies (such as local storage tokens and session identifiers) to deliver a functional, personalised, and secure experience. This section explains which types of cookies we use and why.

6.1 Strictly Necessary Cookies

These cookies are essential to the operation of the Platform and cannot be disabled without significantly degrading functionality. They include session authentication tokens (which keep you logged in during a game session), anti-CSRF tokens (which protect form submissions from cross-site request forgery attacks), and load-balancing cookies (which route your requests to the correct server). No consent is required for strictly necessary cookies as they are integral to service delivery.

6.2 Performance & Analytics Cookies

These cookies collect aggregated, anonymised data about how users navigate the Platform — including which pages are visited most frequently, how long sessions last, and which game categories are accessed most often by players from cities such as Dhaka, Chittagong, and Sylhet. This data helps bdbajer improve the Platform's structure and game selection. These cookies do not track you across third-party websites.

6.3 Cookies We Do NOT Use

bdbajer does not deploy advertising cookies, retargeting cookies, social media tracking pixels, or any third-party cross-site tracking technology. We have no commercial advertising relationships with external ad networks that would require placing third-party tracking scripts on the Platform.

You can manage or disable non-essential cookies at any time through your browser settings. Note that disabling strictly necessary cookies may prevent you from logging in or accessing game sessions. For guidance on managing cookies in your specific browser, refer to your browser's help documentation.

7 Data Security Measures

bdbajer implements a multi-layered security architecture to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. Our security programme includes the following controls:

• Encryption in transit: All data transmitted between your browser or mobile device and the bdbajer Platform is encrypted using TLS 1.2 or TLS 1.3 (256-bit encryption). The Platform enforces HTTPS on all pages and rejects unencrypted HTTP connections.
• Encryption at rest: Sensitive fields in our databases — including KYC document data, payment identifiers, and NID numbers — are encrypted at rest using AES-256 encryption. Passwords are never stored in plain text; they are hashed using bcrypt with a unique salt per account.
• Access controls: Access to personal data is restricted to bdbajer personnel who have a specific operational need to access it. All internal access is logged and auditable. Staff with data access undergo regular security training.
• Network security: The Platform sits behind a Web Application Firewall (WAF) that filters malicious traffic, DDoS protection infrastructure, and intrusion detection systems that alert our security team to anomalous access patterns in real time.
• PCI-DSS compliant payment handling: Payment card and mobile wallet data is tokenised by our PCI-DSS Level 1 compliant payment processors. Full card or wallet numbers are never transmitted to or stored on bdbajer's own servers.
• Regular security audits: bdbajer commissions periodic third-party security assessments of the Platform infrastructure and codebase to identify and remediate vulnerabilities before they can be exploited.

8 Data Retention

bdbajer retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. The following retention schedules apply:

When the applicable retention period expires, personal data is securely deleted from our active systems or anonymised so that it can no longer be associated with any identifiable individual. Where data must be retained beyond the standard period due to an ongoing legal dispute or regulatory investigation, this will be documented internally and the extended retention period will apply only to the specific data subject to the hold.

9 Your Privacy Rights

As a player on the bdbajer Platform, you have the following rights in relation to your personal data. These rights can be exercised at any time by contacting [email protected] with the subject line "Data Subject Request — [Right Type]":

• Right of access: You have the right to request a copy of all personal data that bdbajer holds about you, along with information about how it is processed. We will provide this in a structured, readable format within 30 days of receiving your request.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Minor corrections (e.g., email address updates) can be made directly from your account settings.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where you object to processing on legitimate interest grounds. Note that some data may be retained for legal or regulatory reasons even after an erasure request.
• Right to restriction: You may request that we temporarily stop processing your personal data while a dispute over accuracy or a legitimate interest objection is being resolved.
• Right to data portability: Where processing is based on consent or contractual necessity, you may request that your personal data be provided to you in a machine-readable format (e.g., JSON or CSV) so that you can transfer it to another service provider if you wish.
• Right to object: You have the right to object to processing based on legitimate interests (including profiling for responsible gaming monitoring) at any time. We will cease that processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where we process data on the basis of your consent (e.g., marketing emails), you may withdraw that consent at any time without affecting the lawfulness of processing that took place before withdrawal.

10 Contact & Data Enquiries

If you have any questions, concerns, or requests regarding this Privacy Policy or the way bdbajer processes your personal data, please contact our support team using the details below. We are committed to addressing all privacy-related enquiries promptly and transparently.

10.1 Support Contact

All data subject requests and privacy enquiries should be directed to our support team by email. Please include "Privacy Policy Enquiry" or "Data Subject Request" in your subject line so your message is routed to the correct team member without delay.

• Email: [email protected]
• Support Hours: 24 hours a day, 7 days a week — Bangladesh Standard Time (BST, UTC+6)
• Response Target: Within 2 business days for general enquiries; within 30 calendar days for formal data subject requests

10.2 Complaints

If you believe bdbajer has not handled your personal data in accordance with this Policy or applicable data protection principles, we encourage you to contact us directly in the first instance so that we can investigate and attempt to resolve your concern. We take all privacy complaints seriously and will provide a substantive written response to every formal complaint received.

Where you remain unsatisfied after engaging with our support team, you may escalate your concern to the relevant data protection authority or regulatory body in your jurisdiction. bdbajer will cooperate fully with any such regulatory enquiry.