bd bajer Privacy Policy

bd bajer collects personal data only to the extent necessary to provide you with a safe, compliant, and enjoyable betting and casino experience. We collect information in three main ways: directly from you when you register or interact with our platform, automatically through your use of the site, and from trusted third-party sources as part of our identity and payment verification processes.

The following table sets out the categories of personal data we collect, the specific data points within each category, and the primary reason we collect them:

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or biometric data beyond what is contained in a standard government-issued identity document. We do not collect data from individuals we know to be under 18 years of age; if we discover that such data has been collected, we will delete it promptly and close the associated account.

bd bajer processes your personal data for a range of purposes that are directly connected to the operation of our sports betting and casino platform and the delivery of a safe, high-quality service to players across Bangladesh. We do not use your data for any purpose that is incompatible with the reasons for which it was originally collected.

• Account management: To create, maintain, and administer your bd bajer account, including processing your registration, verifying your identity, and managing your login credentials.
• Payment processing: To facilitate deposits and withdrawals via bKash, Nagad, Rocket, Upay, and supported Bangladeshi banks, and to verify that payment accounts are registered in your name.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, multiple account creation, money laundering, and other prohibited conduct. This includes automated monitoring of transaction patterns and betting behaviour.
• Regulatory compliance: To fulfil our obligations under applicable anti-money laundering (AML) and know-your-customer (KYC) requirements, and to respond to lawful requests from law enforcement or regulatory bodies.
• Customer support: To respond to your enquiries, resolve disputes about bet settlements, investigate payment issues, and maintain records of our communications for quality and audit purposes.
• Responsible gaming: To monitor your betting behaviour for signs of problem gambling, to apply deposit limits or time-out periods at your request, and to enforce self-exclusion where requested or required.
• Personalisation: To tailor the sports markets, casino game recommendations, and promotional offers presented to you based on your platform activity and stated preferences.
• Marketing communications: To send you promotional messages about bd bajer offers, seasonal bonuses (e.g., Pohela Boishakh, Eid, T20 World Cup), and new platform features — but only where you have opted in to receive such communications. You may opt out at any time.
• Platform improvement: To analyse aggregated, anonymised usage data in order to improve the reliability, performance, and range of services available on the bd bajer platform.

We apply data minimisation principles throughout our operations: we collect only what we need, use it only for specified purposes, and retain it only for as long as necessary. Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of any processing carried out before the withdrawal.

Every instance of personal data processing at bd bajer is carried out on the basis of one or more recognised legal grounds. We do not process your data arbitrarily or without a defined justification. The primary legal bases on which bd bajer relies are as follows:

• Contractual necessity: Processing your identity data, contact data, and financial data is necessary to enter into and perform the contract we have with you when you open a bd bajer account. Without this processing, we cannot create your account, accept your bets, process your deposits, or pay out your winnings.
• Legal obligation: Certain processing activities — particularly KYC verification, AML transaction monitoring, and the retention of financial records — are required by applicable law. bd bajer must carry out this processing regardless of your preferences in order to comply with its legal obligations.
• Legitimate interests: bd bajer has a legitimate interest in detecting and preventing fraud, protecting the integrity of its platform, and improving the services it offers. Where we rely on legitimate interests, we have assessed that our interests do not override your fundamental privacy rights.
• Consent: For non-essential marketing communications and optional personalisation features, we rely on your freely given, specific, and informed consent. You may withdraw consent at any time by contacting our support team or updating your account communication preferences.

bd bajer does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We share your data only where it is necessary to deliver the services you have contracted for, to comply with legal obligations, or to protect the legitimate interests of bd bajer and its users. The following categories of third parties may receive your personal data:

• Payment service providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank, Visa, and Mastercard receive the minimum data necessary to process your financial transactions — typically your wallet number or card details and the transaction amount. These providers operate under their own privacy policies and are subject to applicable financial regulation.
• Identity verification providers: Third-party KYC and document verification services may process copies of your identity documents for the purpose of confirming your age, identity, and address. These providers are contractually obligated to process your data only for the purpose of verification and to maintain appropriate security standards.
• Game technology providers: Casino game suppliers including Evolution Gaming, Pragmatic Play, Ezugi, NetEnt, Microgaming, and Spribe may receive session-level technical data necessary to deliver their games within the bd bajer platform. They do not receive your full identity profile.
• Analytics and security providers: Aggregated and pseudonymised technical data may be shared with analytics and cybersecurity service providers to help bd bajer monitor platform performance, detect fraud, and prevent attacks. These providers act as data processors under bd bajer's instructions.
• Law enforcement and regulatory bodies: bd bajer will disclose personal data to law enforcement agencies, financial intelligence units, or regulatory authorities where required to do so by applicable law, or where disclosure is necessary to protect against fraud, money laundering, or other serious criminal activity.
• Corporate transactions: In the event of a merger, acquisition, or sale of all or a substantial part of bd bajer's assets, your personal data may be transferred to the acquiring entity. In such cases, bd bajer will notify users in advance and ensure that the receiving entity is bound by privacy obligations at least as protective as those set out in this policy.

All third-party data processors engaged by bd bajer are required to process your data only in accordance with our written instructions, to implement appropriate technical and organisational security measures, and to notify bd bajer promptly in the event of a data breach affecting your information.

bd bajer uses cookies and similar tracking technologies on our platform to ensure the site functions correctly, to remember your preferences, to keep your session secure, and to gather anonymised analytics data that helps us improve the platform. A cookie is a small text file placed on your device when you visit a website. The following categories of cookies are used on bd bajer:

bd bajer does not use third-party advertising cookies or cross-site tracking pixels. We do not share cookie-derived data with advertising networks or data brokers.

You may manage optional cookies through your browser settings at any time. Please note that disabling functional cookies may affect your experience on the platform — for example, your preferred market settings may not be saved between sessions. Disabling strictly necessary or security cookies may prevent you from logging in or using the cashier.

bd bajer retains your personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal or regulatory obligations. When the retention period for a category of data expires, that data is securely deleted or anonymised so that it can no longer be linked to you as an individual.

The following general retention periods apply to the main categories of personal data held by bd bajer:

• Account and identity data: Retained for the lifetime of your account, plus a minimum of five years following account closure, to comply with AML record-keeping obligations.
• Financial transaction records: Retained for a minimum of seven years following the transaction date, in accordance with standard financial record-keeping requirements.
• KYC documents: Retained for five years following the completion of the verification process, or for five years after account closure, whichever is later.
• Betting and gaming history: Retained for three years following account closure, or longer if required for the resolution of an active dispute or investigation.
• Customer support communications: Retained for two years following the closure of the relevant support ticket or dispute.
• Technical and analytics data: Retained in aggregated, anonymised form indefinitely for platform improvement purposes. Identifiable technical logs (e.g., IP address logs) are retained for 12 months and then deleted.
• Marketing consent records: Retained for the duration of your consent, plus two years following withdrawal of consent, as evidence of the consent given.

All personal data held by bd bajer is stored on servers located in secure data centres. Data at rest is encrypted using AES-256 encryption. Access to personal data is restricted to bd bajer employees and contractors who have a specific operational need to access it, and all such access is logged and audited.

Where personal data is transferred to or accessed by third-party service providers located outside Bangladesh, bd bajer takes contractual steps to ensure that the data receives a level of protection equivalent to that described in this Privacy Policy.

bd bajer respects your rights in relation to the personal data we hold about you. Subject to applicable law and certain limitations tied to our legal and regulatory obligations, you have the following rights:

• Right of access: You have the right to request a copy of the personal data bd bajer holds about you. We will provide this information within a reasonable timeframe following receipt of a verified request.
• Right to rectification: If any of the personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. You may update basic contact details directly through your account settings; for corrections to identity documents or other sensitive data, please contact support.
• Right to erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent (and there is no other legal basis for processing), or where the data has been unlawfully processed. Please note that we may be unable to erase certain data that we are legally required to retain, such as financial transaction records.
• Right to restriction: You may request that we restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data you have disputed is being verified, or pending the outcome of an objection you have raised.
• Right to data portability: Where processing is based on your consent or on a contract, and is carried out by automated means, you may request a copy of your personal data in a structured, commonly used, and machine-readable format.
• Right to object: You have the right to object to the processing of your personal data where bd bajer relies on legitimate interests as the legal basis. You also have an unconditional right to object to processing for direct marketing purposes at any time.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, please contact bd bajer's support team via on-site live chat or by writing to [email protected] (plain text — not a clickable link). We may ask you to provide proof of identity before processing a request, to ensure that personal data is not disclosed to, or altered by, an unauthorised person. We aim to respond to all valid requests within 30 days.

The security of your personal data is a core operational priority for bd bajer. We implement a layered set of technical, organisational, and procedural controls designed to protect your data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Key security measures in place include:

• 256-bit SSL/TLS encryption: All data transmitted between your device and the bd bajer platform is encrypted using industry-standard Transport Layer Security (TLS 1.2 or higher). This applies to every page on the platform, including the login screen, cashier, and game lobbies.
• AES-256 encryption at rest: Personal data and financial records stored in our databases are encrypted at rest using AES-256 encryption. Encryption keys are managed separately from the encrypted data and are rotated on a scheduled basis.
• Password security: User passwords are never stored in plain text. They are hashed using a strong, salted cryptographic algorithm. bd bajer staff cannot view your password; if you forget it, it must be reset rather than retrieved.
• Two-factor authentication (2FA): OTP-based two-factor authentication is available for all bd bajer accounts and is strongly recommended. When enabled, a one-time passcode is sent to your registered mobile number each time you log in from an unrecognised device.
• Access controls: Access to personal data within bd bajer's internal systems is restricted on a need-to-know basis. Role-based access controls ensure that employees can only access the data categories required for their specific job function. All data access events are logged.
• Intrusion detection and monitoring: bd bajer operates a 24/7 security operations function that monitors the platform for signs of intrusion, anomalous access patterns, and data exfiltration attempts. Automated alerts are triggered by unusual activity and reviewed by the security team.
• Vulnerability management: bd bajer conducts periodic security assessments and penetration testing of its platform. Identified vulnerabilities are prioritised and remediated according to their severity. Critical patches are applied on an emergency basis outside the standard release cycle.

While bd bajer implements robust security controls, no online platform can guarantee absolute security against all threats. You also play an important role in keeping your account secure: use a strong, unique password, enable two-factor authentication, never share your login credentials, and contact support immediately if you suspect unauthorised access to your account.

bd bajer may update this Privacy Policy from time to time to reflect changes in our data processing practices, changes in applicable law, or improvements to the clarity and completeness of our disclosures. When changes are made, the "Last updated" date at the top of this page will be revised to reflect the date of the most recent version.

For material changes — those that significantly affect your rights, the categories of data we collect, or the purposes for which we use your data — bd bajer will take additional steps to inform you. This may include displaying a prominent notice when you next log in to your account, or sending a notification to your registered email address or mobile number.

Your continued use of the bd bajer platform following the publication of a revised Privacy Policy constitutes your acknowledgement of the changes. If you do not agree with the revised policy, you should discontinue use of the platform and contact support to arrange account closure and any applicable data erasure.

We encourage you to review this Privacy Policy periodically so that you remain informed about how bd bajer is protecting your personal data. If you have questions about any aspect of this policy — including how a specific category of your data is processed, stored, or shared — please contact our support team at any time.