Privacy Policy — How bip baji Collects, Uses, and Protects Your Personal Data

1. Information We Collect

The categories of personal data bip baji collects from players and visitors, and the circumstances in which each category is gathered.

bip baji collects personal information through several channels: directly from you when you register and use the platform, automatically through your interactions with our website, and from third parties such as payment providers and identity verification services. The categories of data we collect are described below.

1.1 Registration and Account Data

When you create a bip baji account, we collect the information you provide during the registration process, which includes:

• Full legal name
• Date of birth (used to verify that you are aged 18 or above)
• Mobile phone number (used for account authentication and communication)
• Email address
• Username and password (passwords are stored in hashed form and never in plain text)
• Preferred currency (Bangladeshi Taka / BDT)
• City and district of residence (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi)

1.2 Identity Verification (KYC) Data

As part of our Know Your Customer (KYC) process — required before your first withdrawal and in other circumstances at our discretion — we may collect:

• Copies of government-issued photo identification (National ID Card, passport, or driving licence)
• Proof of address documents (utility bills, bank statements)
• Selfie or liveness-check photographs submitted for identity confirmation
• Source of funds declarations where required for compliance purposes

1.3 Financial Transaction Data

When you make deposits or request withdrawals, we collect details related to those transactions, including:

• Payment method type (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Visa, Mastercard)
• Transaction amounts in BDT
• Transaction timestamps and reference numbers
• Partial payment account identifiers (e.g., masked mobile numbers associated with bKash or Nagad accounts)

We do not store full card numbers. Card payment data is handled directly by PCI-DSS compliant payment processors.

1.4 Usage and Technical Data

When you browse or interact with the bip baji platform, we automatically collect certain technical data, including:

• IP address and approximate geolocation (country and city level)
• Device type, operating system, and browser version
• Pages visited, features accessed, and time spent on specific sections
• Game history — titles played, bet amounts, session durations, wins and losses
• Login timestamps and session activity logs
• Referral source (the URL or campaign from which you arrived at bip baji)

1.5 Communications Data

If you contact our support team by email or live chat, we retain a record of that correspondence, including the content of your messages, your account details, and the resolution outcome. This data is used to resolve disputes, improve our service, and train our support staff.

2. How We Use Your Information

The specific purposes for which bip baji processes the personal data it collects from players and visitors.

bip baji uses personal data collected from players for the following purposes. Each purpose is linked to a defined legal basis, which is explained in Section 3 of this policy.

3. Legal Basis for Processing

The lawful grounds on which bip baji relies to process your personal data for each category of use.

bip baji processes personal data only where it has a defined lawful basis for doing so. The following legal grounds apply to our data processing activities:

• Contractual necessity: Processing that is necessary to fulfil our contract with you as a registered player — including account creation, payment processing, and game access — is carried out on the basis of contractual necessity. Without this processing, we would be unable to provide the services you have signed up for.
• Legal obligation: Certain processing activities are required by applicable law. These include identity verification (KYC), transaction monitoring for anti-money-laundering compliance, and data retention obligations. We cannot waive these requirements at your request.
• Legitimate interests: Some processing is carried out on the basis of bip baji's legitimate business interests — for example, fraud detection, platform security, and aggregate analytics — provided these interests are not overridden by your fundamental rights and interests.
• Consent: Where processing is based on your consent — particularly in relation to marketing communications and non-essential cookies — you have the right to withdraw that consent at any time without affecting the lawfulness of processing that took place before withdrawal. To withdraw consent for marketing, contact [email protected] or use the unsubscribe link in any marketing email.

4. Sharing Your Information

The circumstances in which bip baji may share your personal data with third parties, and the protections that apply.

bip baji does not sell, rent, or trade personal data. We share your information only in the limited circumstances described below, and only with parties that are bound by appropriate data protection obligations.

4.1 Payment Providers

To process your deposits and withdrawals, we share the necessary transactional information with our payment processing partners, including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, and card network processors. These providers receive only the minimum data required to complete the relevant transaction and are bound by their own data protection and financial compliance obligations.

4.2 Identity Verification Services

We use authorised third-party identity verification providers to carry out KYC checks on player accounts. Your identity documents and verification data are transmitted securely to these providers for the sole purpose of confirming your identity and age. These providers are contractually prohibited from using your data for any other purpose.

4.3 Game Providers

To enable gameplay on our platform, technical session data (such as player session tokens, game round identifiers, and bet amounts) is shared with our game content providers, including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. This data does not include your full name, address, or payment details unless strictly necessary for dispute resolution.

4.4 Legal and Regulatory Authorities

bip baji will disclose personal data to law enforcement agencies, regulatory bodies, financial intelligence units, or courts when required to do so by applicable law or a valid legal order. We may also voluntarily disclose data where we have a good-faith belief that disclosure is necessary to prevent fraud, money laundering, or harm to others.

4.5 Business Transfers

In the event that bip baji is involved in a merger, acquisition, or sale of all or part of its assets, player data held at the time of the transaction may form part of the transferred assets. In such circumstances, we will take reasonable steps to ensure that the acquiring entity is bound by privacy obligations at least as protective as those described in this policy, and we will notify affected players in advance where practicable.

5. Cookies and Tracking Technologies

What cookies bip baji uses, why we use them, and how you can control your preferences.

bip baji uses cookies and similar tracking technologies (including web beacons and local storage) to operate the platform, remember your preferences, analyse usage patterns, and deliver relevant promotional content. The table below describes the categories of cookies we use.

5.1 Managing Cookie Preferences

You can manage or disable non-essential cookies at any time through your browser settings. Most modern browsers — including Chrome, Firefox, Edge, and Safari — allow you to view, block, or delete cookies. Please note that disabling strictly necessary cookies will affect the functionality of the bip baji platform and may prevent you from logging in or completing transactions. Disabling analytics or marketing cookies will not affect your ability to play or make deposits and withdrawals.

6. Data Retention

How long bip baji retains your personal data and the criteria used to determine appropriate retention periods.

bip baji retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention guidelines apply:

• Active account data: Retained for the lifetime of your bip baji account, plus a period of up to 7 years following account closure, in order to comply with anti-money-laundering record-keeping requirements and to resolve any post-closure disputes.
• KYC and identity documents: Retained for a minimum of 5 years following the completion of the verification process, as required by financial compliance regulations. Copies of identity documents are stored in encrypted form.
• Transaction records: Retained for a minimum of 7 years from the date of each transaction, in accordance with standard financial record-keeping obligations.
• Support correspondence: Retained for up to 3 years from the date of the last communication, or longer if the correspondence relates to an unresolved dispute or legal proceeding.
• Marketing opt-in records: Retained for the duration of your account plus 3 years, to demonstrate compliance with consent requirements.
• Analytics data: Aggregated and anonymised analytics data may be retained indefinitely, as it no longer constitutes personal data once identifiers have been removed.

When data is no longer required for any legitimate retention purpose, it is securely deleted or anonymised using industry-standard data destruction methods. You may request deletion of your personal data in accordance with the rights described in Section 7 below, subject to the mandatory retention obligations described here.

7. Your Privacy Rights

The rights you have over your personal data held by bip baji and how to exercise them.

As a bip baji player, you have a number of rights in relation to the personal data we hold about you. bip baji is committed to honouring these rights promptly and transparently. To exercise any of the rights listed below, please contact [email protected] with the subject line "Data Subject Request", including your full name, registered email address, and a clear description of your request.

• Right of access: You have the right to request a copy of the personal data we hold about you. We will provide this information in a structured, readable format within a reasonable timeframe following verification of your identity.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may also update certain account details directly through your account settings.
• Right to erasure: You may request that we delete your personal data where it is no longer necessary for the purposes it was collected, where you have withdrawn your consent (and no other legal basis applies), or where the data has been processed unlawfully. This right is subject to overriding legal retention obligations — for example, we cannot erase transaction records that are required for financial compliance purposes.
• Right to restriction of processing: You may request that we restrict the processing of your personal data in certain circumstances — for example, while a rectification request is being assessed, or where you have objected to processing and a determination is pending.
• Right to data portability: Where processing is based on your consent or a contract, and is carried out by automated means, you have the right to receive your personal data in a structured, machine-readable format and to request that it be transferred to another service provider where technically feasible.
• Right to object: You have the right to object to processing carried out on the basis of legitimate interests, including profiling. You also have the absolute right to object to processing for direct marketing purposes at any time, without providing a reason.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

8. Data Security

The technical and organisational measures bip baji employs to keep your personal data safe.

bip baji implements a range of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include, but are not limited to:

• SSL/TLS encryption: All data transmitted between your browser or app and our servers is encrypted using industry-standard SSL/TLS protocols. Look for the padlock icon in your browser's address bar when using bip baji.
• Password hashing: Account passwords are never stored in plain text. We use strong cryptographic hashing algorithms to store password data, ensuring that even in the event of a data breach, your actual password cannot be recovered from stored records.
• Access controls: Access to personal data within bip baji's internal systems is restricted on a strict need-to-know basis. Staff members are granted access only to the data categories required to perform their specific role. All access is logged and audited.
• Two-factor authentication (2FA): bip baji strongly encourages all players to enable two-factor authentication on their account. 2FA adds an additional layer of protection by requiring a one-time code — sent to your registered mobile number — in addition to your password at login.
• Penetration testing and vulnerability management: The bip baji platform undergoes periodic security assessments to identify and remediate vulnerabilities. Our development team follows secure coding practices and applies security patches promptly.
• Data breach response: In the unlikely event of a data breach that poses a risk to your rights and freedoms, bip baji will notify affected players without undue delay and take all necessary steps to contain the breach and prevent recurrence.

While bip baji takes every reasonable precaution to protect your data, no online platform can guarantee absolute security. You are encouraged to use a strong, unique password for your bip baji account and to notify our support team immediately if you suspect any unauthorised access.

9. Third-Party Services

How bip baji's use of third-party technology providers affects your data, and the limits of our responsibility.

The bip baji platform integrates services and content provided by third parties, including game studios, payment gateways, and analytics tools. While bip baji carefully selects its service providers and requires them to maintain appropriate data protection standards, we are not responsible for the privacy practices of third-party organisations acting as independent data controllers in their own right.

Third-party providers whose services are integrated into the bip baji platform include:

• Game content providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These studios may collect technical session data within their game interfaces to ensure fair play and resolve disputes. Their data practices are governed by their own privacy policies.
• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Visa, and Mastercard. Financial transaction data processed by these providers is governed by their respective privacy and security policies.
• Analytics providers: We use analytics tools to understand how players interact with the platform. Where possible, data shared with these providers is anonymised or pseudonymised.

The bip baji website does not contain links to external third-party websites. However, if you access third-party payment portals or game content directly through a provider's interface, you will be subject to that provider's terms and privacy policy from the point at which you leave the bip baji platform environment.

10. Updates to This Policy

How and when bip baji may revise this Privacy Policy, and how you will be informed of material changes.

bip baji may update this Privacy Policy from time to time to reflect changes in our data collection and processing practices, changes in applicable law or regulatory guidance, or improvements to the platform that affect how personal data is handled. When material changes are made, we will notify registered players through one or more of the following channels:

• A prominent notice on the bip baji platform homepage or login page.
• An email notification sent to the address associated with your registered account.
• An in-account notification within your player portal.

The revised policy will display an updated "Last Updated" date at the top of this page. For minor changes — such as corrections of typographical errors or clarifications that do not alter the substance of our data practices — we may update the policy without providing advance notice, though the "Last Updated" date will always reflect the most recent revision.

Continued use of the bip baji platform following the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the revised policy, you may request voluntary account closure as described in our Terms & Conditions.

11. Contact Us About Privacy

How to reach bip baji's support team with privacy-related questions, data subject requests, or complaints.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a concern about how bip baji handles your personal data, please contact us using the details below. All privacy-related enquiries are handled with strict confidentiality.