baji22 Privacy Policy

baji22 ("we", "us", "our") is an online casino and sports betting platform accessible at baji22.vip, operating primarily for the Bangladesh market and delivering its services in the English language. We are firmly committed to protecting the privacy and personal data of every individual who interacts with our platform, whether as a registered user or as a visitor browsing the site without an account.

This Privacy Policy sets out, in formal and precise terms, the categories of personal data we collect, the lawful bases upon which we process that data, the purposes for which it is used, the circumstances under which it may be shared with third parties, and the rights available to you regarding your own information. This document should be read in conjunction with the baji22 Terms & Conditions, which are incorporated by reference.

When we refer to "personal data" in this policy, we mean any information that identifies, or could reasonably be used to identify, a specific individual — including name, date of birth, contact details, financial identifiers, device information, and gameplay records. We treat all such information with the highest degree of care and apply appropriate technical and organisational safeguards to protect it at every stage of processing.

This policy applies to all users of the baji22 platform regardless of the device or method used to access the service, including desktop browsers, mobile browsers, and any dedicated application. It covers data collected both during the registration process and throughout the ongoing lifecycle of your baji22 account.

baji22 collects personal data across several categories. The specific data points collected depend on the nature of your interaction with the platform. The table below provides a structured overview of the categories of data we collect and the context in which each category is gathered.

We do not knowingly collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data (beyond responsible gaming disclosures made voluntarily by the user), or biometric identification data. If you voluntarily disclose such information in the course of a support interaction, it will be used solely for the purpose of resolving your query and will not be processed for any other purpose.

baji22 collects personal data through the following primary mechanisms:

• Direct Submission: Information you provide actively when completing the registration form, submitting identity verification documents, initiating a deposit or withdrawal, or communicating with the baji22 support team via live chat or email.
• Automated Technical Collection: Information collected automatically when you access the baji22 platform, including IP address, device identifiers, browser fingerprint data, session timestamps, and page navigation patterns. This data is captured via server logs, cookies, and analytics tools as described in Section 7.
• Payment Processors: When you make a deposit or withdrawal via bKash, Nagad, Rocket, Upay, Visa, or Mastercard, the relevant payment processor may share transaction confirmation data with baji22 to facilitate account crediting and withdrawal processing. baji22 does not receive or store full payment credentials — only the minimum transaction identifiers necessary to match a payment to your account.
• Identity Verification Providers: Where baji22 uses a third-party KYC or identity verification service to validate your identity documents, that provider may share the outcome of the verification process — and in some cases a structured data extract from your identity document — with baji22 for account compliance purposes.
• Third-Party Game Providers: Game providers such as Evolution Gaming, Pragmatic Play, Ezugi, NetEnt, Microgaming, and Spribe may share gameplay session data with baji22 for the purposes of dispute resolution, responsible gaming monitoring, and regulatory compliance. baji22 does not receive player data from these providers for marketing purposes.

baji22 processes personal data for the following clearly defined and lawful purposes. We do not process personal data for any purpose that is incompatible with those listed here without first obtaining your consent or establishing a new lawful basis.

• Account Creation and Management: To register your account, maintain your account profile, authenticate your identity at login, and manage your account settings and preferences.
• Service Delivery: To provide access to the baji22 gaming platform, process bets and game rounds, settle winnings, apply bonus credits, and deliver the core service for which you registered.
• Payment Processing: To process deposits and withdrawals via your chosen payment method, reconcile transaction records, and resolve payment disputes or errors.
• Identity and Age Verification: To verify that you are at least 18 years of age and that the identity you have registered with is genuine, in accordance with our regulatory and responsible gaming obligations.
• Anti-Money Laundering and Fraud Prevention: To monitor account activity for patterns consistent with money laundering, financial fraud, or the use of stolen payment credentials, and to report suspicious activity to relevant authorities as required by applicable law.
• Responsible Gaming: To monitor gameplay patterns for signs of problem gambling behaviour, enforce self-exclusion requests, apply deposit limits set by the user, and proactively reach out to users who may benefit from responsible gaming support.
• Customer Support: To respond to enquiries, resolve disputes, investigate complaints, and maintain records of support interactions for quality assurance and training purposes.
• Legal and Regulatory Compliance: To fulfil obligations imposed on baji22 by applicable law, including requirements to retain transaction records, respond to lawful requests from authorities, and maintain KYC documentation.
• Platform Improvement and Analytics: To analyse aggregated, anonymised usage data to understand how users interact with the baji22 platform and to improve game selection, interface design, and feature availability.
• Marketing Communications (with consent): To send you promotional offers, bonus notifications, and seasonal campaigns (such as Eid, BPL, or IPL promotions) where you have given explicit consent to receive such communications. You may withdraw this consent at any time.

Each processing activity carried out by baji22 is grounded in one of the following lawful bases:

• Contractual Necessity: Processing that is necessary to perform the contract between you and baji22 — specifically, the delivery of gaming and betting services, payment processing, and account management. Without this processing, baji22 cannot provide its service.
• Legal Obligation: Processing required by applicable law, including anti-money laundering (AML) regulations, age verification obligations, fraud prevention requirements, and obligations to respond to lawful requests from law enforcement or financial intelligence bodies.
• Legitimate Interests: Processing that serves baji22's legitimate business interests, provided those interests are not overridden by your rights and interests. This includes fraud detection, platform security, responsible gaming monitoring, and aggregated analytics for service improvement.
• Consent: Processing carried out on the basis of your freely given, informed, and specific consent — in particular, the sending of marketing communications and the use of non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

baji22 does not sell personal data. We share personal data with third parties only in the limited circumstances described below, and only to the extent necessary for the stated purpose.

• Payment Service Providers: We share transaction-relevant data with bKash, Nagad, Rocket, Upay, Visa, and Mastercard to initiate, confirm, and reconcile deposits and withdrawals. Each payment provider processes data in accordance with its own privacy policy and applicable financial regulations.
• Identity Verification Providers: Where a third-party KYC provider is engaged to verify your identity or age, we share the relevant identity document data and personal details with that provider solely for verification purposes.
• Game Providers: We share the minimum necessary session data with game providers (including Evolution Gaming, Pragmatic Play, Ezugi, NetEnt, Microgaming, and Spribe) to enable gameplay, settle rounds, and resolve disputes. These providers are contractually bound to handle shared data in accordance with applicable data protection standards.
• Technology and Infrastructure Partners: We engage third-party providers for hosting, cloud infrastructure, data storage, customer support tooling, and cybersecurity services. These partners process data on baji22's behalf and are bound by data processing agreements that restrict their use of personal data to the purposes specified by baji22.
• Legal and Regulatory Authorities: We may be required to disclose personal data — including identity records, transaction histories, and gameplay data — to law enforcement agencies, financial intelligence units, or regulatory bodies when compelled to do so by a valid legal order or where disclosure is otherwise required by applicable law. baji22 will endeavour to notify affected users of such disclosures where permitted by law.
• Professional Advisors: In limited circumstances, personal data may be shared with our legal advisors, auditors, or compliance consultants, subject to binding confidentiality obligations.

All third parties with whom baji22 shares personal data are required to implement appropriate technical and organisational measures to protect that data. baji22 does not permit third-party service providers to use shared personal data for their own independent purposes.

baji22 uses cookies and similar tracking technologies to operate the platform, personalise your experience, and — with your consent — to analyse usage patterns and deliver relevant content. The following categories of cookies are used on the baji22 platform:

• Strictly Necessary Cookies: These cookies are essential for the platform to function. They enable core features such as user authentication, session management, and security. Strictly necessary cookies cannot be disabled without rendering the platform unusable, and no consent is required for their placement.
• Functional Cookies: These cookies remember your preferences — such as language settings, preferred game categories, and responsible gaming limit configurations — so that you do not need to re-enter them on each visit. Functional cookies do not track you across other websites.
• Analytics Cookies: With your consent, baji22 uses analytics tools to collect aggregated, pseudonymised data about how users navigate the platform. This information helps us understand which features are most used, where users encounter difficulties, and how to improve the overall experience. Analytics data is not used to identify individual users.
• Marketing Cookies: Where you have given consent, marketing cookies may be used to deliver promotional content that is relevant to your gaming preferences. You may withdraw consent to marketing cookies at any time via your browser settings, which will prevent future placement of these cookies without affecting cookies already stored.

You may manage your cookie preferences through your browser's settings panel. Most modern browsers allow you to block or delete cookies selectively. Please note that blocking strictly necessary cookies will impair your ability to use the baji22 platform. For further guidance on managing cookies, refer to your browser's official documentation.

baji22 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal, regulatory, or compliance obligations. The following retention principles apply:

• Active Accounts: Personal data associated with an active baji22 account is retained for the duration of the account's active status and for a defined period following account closure, to enable dispute resolution and comply with financial record-keeping requirements.
• Financial Transaction Records: Records of deposits, withdrawals, and associated payment data are retained for a minimum of five years following the date of the transaction, in accordance with anti-money laundering record-keeping obligations.
• Identity Verification Documents: KYC documentation — including copies of government-issued identity documents — is retained for a minimum of five years following account closure or the date of the last transaction, whichever is later.
• Support Communications: Records of live chat sessions, email correspondence, and support tickets are retained for a period of two years following the closure of the relevant support case.
• Marketing Consent Records: Records of the consent you gave (or withdrew) in relation to marketing communications are retained for as long as necessary to demonstrate compliance with consent obligations.
• Anonymised Analytics Data: Aggregated, anonymised usage data derived from analytics cookies is retained indefinitely in its anonymised form, as it no longer constitutes personal data.

Upon expiry of the applicable retention period, personal data is securely deleted or permanently anonymised in a manner that prevents re-identification. Where deletion is not technically possible due to backup or archival system constraints, baji22 will isolate the data and prevent any further active processing until deletion can be carried out.

baji22 implements a multi-layered security framework to protect personal data against unauthorised access, disclosure, alteration, or destruction. The key technical and organisational measures in place include:

• Transport Layer Encryption: All data transmitted between your device and the baji22 platform is encrypted using 256-bit SSL/TLS protocols, preventing interception by third parties during transmission.
• Password Hashing: Account passwords are never stored in plain text. baji22 uses industry-standard cryptographic hashing algorithms with salting to store password credentials in a form that cannot be reversed to recover the original password.
• Access Controls: Internal access to personal data is restricted on a strict need-to-know basis. baji22 employees and contractors are granted access only to the data necessary to perform their specific role. Access privileges are reviewed regularly and revoked immediately upon departure from the organisation.
• Intrusion Detection and Prevention: baji22's infrastructure is monitored continuously for signs of unauthorised access, anomalous activity, and potential security breaches. Automated intrusion detection systems alert the security team to potential threats in real time.
• Data Breach Response: baji22 maintains a documented incident response plan for data breach scenarios. In the event of a breach that poses a risk to affected individuals, baji22 will notify the relevant parties in accordance with applicable law and as promptly as circumstances allow.
• Third-Party Security Assessments: Key third-party partners and service providers who process personal data on baji22's behalf are subject to security assessments and contractual obligations requiring them to maintain appropriate data protection standards.

As a user of the baji22 platform, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact the baji22 support team via live chat or by email at [email protected]. baji22 will respond to all data rights requests within a reasonable timeframe and at no charge for standard requests.

• Right of Access: You have the right to request a copy of all personal data baji22 holds about you. We will provide this in a structured, readable format.
• Right to Rectification: If any personal data held by baji22 is inaccurate or incomplete, you have the right to request that it be corrected or updated. You may update certain details — such as your email address or phone number — directly through your account settings panel.
• Right to Erasure: You have the right to request the deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose it was collected, or where you withdraw consent and no other lawful basis for processing exists. Please note that baji22 may be required to retain certain data for legal and regulatory compliance purposes even following a deletion request.
• Right to Restriction: You have the right to request that baji22 restricts the processing of your personal data in specific circumstances, such as while a rectification request is being investigated.
• Right to Data Portability: Where processing is carried out on the basis of consent or contractual necessity and by automated means, you have the right to receive your personal data in a machine-readable format suitable for transfer to another service provider.
• Right to Object: You have the right to object to processing carried out on the basis of legitimate interests or for direct marketing purposes. baji22 will cease processing for marketing purposes immediately upon receipt of such an objection.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

baji22 is an adults-only platform. We do not knowingly collect, process, or retain personal data relating to any individual under the age of 18. Registration is strictly prohibited for persons below this age threshold, and baji22 employs active age verification procedures to enforce this policy.

If baji22 discovers — whether through its own verification processes or as a result of a report from a third party — that an account has been registered by or on behalf of a minor, the account will be closed immediately. All funds held within the account, including any winnings, will be handled in accordance with applicable law and our regulatory obligations. Where required, the matter may be referred to relevant child protection authorities.

Parents and guardians who are concerned that a minor in their household may have accessed the baji22 platform are encouraged to contact our support team via live chat immediately so that appropriate action can be taken without delay. We recommend the use of parental control software at the household level to prevent minors from accessing gambling websites.

baji22 operates primarily for the Bangladesh market, and the majority of personal data processed through the platform relates to users based in Bangladesh. However, due to the global nature of cloud infrastructure and the international footprint of certain third-party service providers — including game studios and payment technology partners — personal data may in some instances be processed on servers located outside of Bangladesh.

Where personal data is transferred to a jurisdiction outside of Bangladesh, baji22 ensures that appropriate safeguards are in place to protect that data to a standard equivalent to its protection within Bangladesh. These safeguards may include:

• Contractual clauses requiring the recipient to process personal data only in accordance with baji22's instructions and to apply equivalent data protection standards.
• Binding corporate rules where data is transferred within a group of companies that has adopted a shared, enforceable data protection framework.
• Reliance on the adequacy of the data protection laws of the recipient jurisdiction, where such adequacy has been formally established.

If you have any concerns about the international transfer of your personal data, or wish to obtain further details about the safeguards in place for a specific transfer, please contact the baji22 support team.

baji22 reserves the right to update, amend, or replace this Privacy Policy at any time. The most current version will always be published at baji22.vip/privacy-policy, and the "Last Updated" date at the top of the document will reflect the date of the most recent revision. We encourage you to review this policy periodically to stay informed about how we handle your personal data.

For material changes — those that significantly alter the nature of the data we collect, the purposes for which we process it, or the rights available to you — baji22 will make reasonable efforts to provide advance notice to registered users via the contact details associated with their account. Where required by applicable law, we will seek fresh consent before applying material changes to any processing that is currently based on your consent.

Your continued use of the baji22 platform following the publication of an amended Privacy Policy constitutes your acknowledgment of the updated terms. If you do not agree with any amendment, you should cease using the platform and contact our support team to close your account and request deletion of your personal data, subject to our legal retention obligations.

If you have any questions, concerns, or complaints regarding this Privacy Policy, or wish to exercise any of the data rights described in Section 10, please contact the baji22 privacy and compliance team using the following channels:

• Live Chat: Available within the baji22 platform following login, 24 hours a day, 7 days a week. This is the fastest route for urgent data privacy queries. Average response time is 2–5 minutes.
• Email: [email protected] — for formal data access requests, deletion requests, or complaints, please use the subject line "Privacy Request" or "Data Complaint" so that your message is directed to the appropriate team without delay.

baji22 is committed to responding to all privacy-related enquiries within a reasonable timeframe. For formal data rights requests, we aim to acknowledge receipt within 5 business days and to provide a substantive response within 30 calendar days. For complex requests that require additional investigation, we will notify you of the extended timeframe and the reason for the delay.

If you are not satisfied with baji22's response to a privacy complaint, you retain the right to escalate the matter to the relevant data protection or consumer protection authority in your jurisdiction.