baje77 Privacy Policy

Section 1

Introduction

This Privacy Policy ("Policy") applies to all personal data collected, processed, and stored by baje77 ("we", "us", "our", "the Platform") in connection with your use of the baje77 website and its associated services, including sports betting, live casino, slots, and all other gaming products offered to players in Bangladesh.

This Policy should be read alongside the Terms & Conditions and the Responsible Gaming Policy, both of which form part of the overall agreement between baje77 and registered players. In the event of any conflict between this Policy and those documents on privacy-related matters, this Privacy Policy shall take precedence.

baje77 is committed to handling your personal data with transparency, integrity, and in accordance with applicable data protection principles. We only collect data that is necessary for the purposes described in this Policy, and we do not retain data for longer than is required to fulfil those purposes or comply with applicable legal obligations.

Section 2

Data Controller

baje77 acts as the data controller in respect of the personal data collected from players and users of the baje77 platform. As data controller, baje77 determines the purposes for which, and the means by which, personal data is processed. All questions, requests, and complaints relating to data privacy should be directed to the baje77 data protection contact listed in Section 15 of this Policy.

Where baje77 engages third-party service providers to process personal data on its behalf (for example, payment processors, identity verification providers, or fraud prevention services), those parties act as data processors and are bound by contractual obligations to process data only as instructed by baje77 and in a manner consistent with this Policy.

Section 3

Personal Data We Collect

baje77 collects the following categories of personal data from players and platform visitors. The specific data collected in each category depends on the nature of your interaction with the platform:

Section 4

How Personal Data Is Collected

baje77 collects personal data through several distinct channels, depending on the nature of your engagement with the platform:

• Direct Submission: Data you actively provide when creating an account, completing your profile, submitting identity verification documents, making deposits or withdrawals, contacting support, or responding to promotions.
• Automated Collection: Technical and usage data collected automatically via server logs, cookies, pixel tags, and similar tracking technologies each time you access the baje77 platform. See Section 10 for full details on cookies.
• Third-Party Sources: Identity and fraud-risk data received from payment processors (bKash, Nagad, Rocket, Upay), identity verification providers, and fraud prevention partners when you initiate a transaction or verification request. baje77 only receives data from third parties that have the lawful right to share that data.
• Public Sources: In limited circumstances related to fraud prevention or regulatory compliance, baje77 may consult publicly available sources such as sanctions lists or politically exposed persons (PEP) databases.

Section 5

Purposes of Processing Your Data

baje77 processes personal data for the following clearly defined purposes. We do not use your data for any purpose that is incompatible with those listed below without first obtaining your explicit consent:

• Account Management: Creating and maintaining your baje77 player account, authenticating your identity at login, and enabling access to platform features.
• Service Delivery: Processing your bets, game activity, deposits, and withdrawals; calculating and crediting winnings; and providing customer support.
• Identity Verification (KYC): Verifying your identity and age in accordance with anti-money laundering and responsible gaming obligations to ensure all players are aged 18 or above.
• Fraud Prevention and Security: Detecting, investigating, and preventing fraudulent activity, multi-accounting, money laundering, bonus abuse, and other prohibited conduct on the platform.
• Legal and Regulatory Compliance: Meeting baje77's obligations under applicable laws, including record-keeping requirements, responding to lawful requests from regulatory or law enforcement authorities, and enforcing our Terms & Conditions.
• Platform Improvement: Analysing aggregated usage data to improve platform performance, optimise game offerings, personalise your experience, and identify technical issues.
• Communications: Sending you transactional communications (account confirmations, withdrawal receipts, security alerts) and, where you have opted in, promotional communications about baje77 offers and events.
• Responsible Gaming: Monitoring your gambling patterns to identify potential signs of problem gambling and to facilitate the use of responsible gaming tools such as deposit limits and self-exclusion.

Section 6

Legal Basis for Processing

baje77 processes personal data on one or more of the following legal bases, depending on the specific purpose of processing:

• Contractual Necessity: Processing that is necessary to perform the contract between you and baje77, including account management, transaction processing, and service delivery.
• Legal Obligation: Processing required to comply with applicable legal requirements, including anti-money laundering regulations, age verification obligations, and responses to lawful authority requests.
• Legitimate Interests: Processing carried out for baje77's legitimate business interests, including fraud prevention, platform security, and service improvement, provided those interests are not overridden by your rights and interests.
• Consent: Processing based on your freely given, specific, and informed consent, such as the receipt of optional marketing communications. You may withdraw consent at any time by contacting our support team or updating your communication preferences in your account settings.

Section 7

Sharing of Personal Data

baje77 does not sell, rent, or trade your personal data to any third party for marketing or commercial purposes. Personal data may be shared with the following categories of recipients strictly as required to deliver the baje77 service or to comply with legal obligations:

• Payment Processors: Mobile financial service providers including bKash, Nagad, Rocket, and Upay, as well as bank partners such as Dutch-Bangla Bank and BRAC Bank, receive the minimum data necessary to process deposits and withdrawals on your behalf.
• Identity Verification Providers: Third-party KYC and age verification services receive identity documents and personal details to verify your eligibility to use the platform.
• Fraud Prevention Services: Anti-fraud and risk management providers may receive technical and transactional data to identify and prevent fraudulent activity across the platform.
• Game Content Providers: Game studios and content providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive limited session and gameplay data necessary to deliver and audit their games correctly. These providers do not receive your full identity or financial data.
• Legal and Regulatory Authorities: baje77 will disclose personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by law, court order, or other legal process, or where we believe disclosure is necessary to protect the rights, property, or safety of baje77, our players, or the public.
• Professional Advisers: Lawyers, auditors, and other professional advisers engaged by baje77 may access personal data as strictly necessary in the course of the professional services they provide.

All third-party recipients of personal data are required to handle that data in accordance with applicable data protection standards and are prohibited from using it for any purpose beyond that for which it was originally shared.

Section 8

Data Retention

baje77 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal or regulatory obligations. The following general retention periods apply:

• Active Accounts: Personal data associated with an active baje77 account is retained for the full duration of the account's active status.
• Closed Accounts: Following account closure, baje77 retains identity, financial, and transaction data for a minimum of five years in order to comply with anti-money laundering record-keeping requirements and to handle any post-closure disputes or regulatory inquiries.
• Support Communications: Records of support interactions, including chat transcripts and email correspondence, are retained for a period of three years from the date of the interaction.
• Technical and Usage Data: Server logs and session data are retained for a maximum of 13 months, after which they are deleted or anonymised for aggregate analytics purposes.
• Marketing Consent Records: Records of marketing consent are retained for as long as the consent remains active, plus an additional two years following withdrawal of consent.

When personal data is no longer required for the purpose for which it was collected and no legal retention obligation applies, baje77 will securely delete or irreversibly anonymise that data.

Section 9

Data Security

baje77 implements a comprehensive range of technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include, but are not limited to:

• SSL/TLS Encryption: All data transmitted between your device and the baje77 platform is encrypted using industry-standard SSL/TLS protocols, ensuring that data in transit cannot be intercepted by unauthorised parties.
• Data Encryption at Rest: Sensitive personal and financial data stored on baje77 servers is encrypted using strong encryption algorithms, so that even in the event of a server breach, raw data remains unreadable.
• Access Controls: Access to personal data is strictly limited to baje77 personnel and authorised third-party processors who require access to perform their specific job functions. All access is subject to role-based permissions and audit logging.
• Secure Infrastructure: baje77 operates on secure server infrastructure with firewall protection, intrusion detection systems, and regular security vulnerability assessments.
• Password Security: Account passwords are stored in hashed form. baje77 does not store plain-text passwords and cannot retrieve your password — only a reset can be performed.

While baje77 takes all reasonable steps to protect your personal data, no data transmission over the internet or electronic storage system can be guaranteed to be 100% secure. You are responsible for maintaining the confidentiality of your own login credentials and for ensuring that you access the platform from a secure device and network. If you suspect your account has been compromised, contact baje77 support immediately.

Section 10

Cookies and Tracking Technologies

baje77 uses cookies and similar tracking technologies (including pixel tags and session identifiers) to enhance platform functionality, remember your preferences, analyse usage patterns, and deliver a personalised experience. The following categories of cookies are used on the baje77 platform:

• Strictly Necessary Cookies: These cookies are essential for the platform to function correctly and cannot be disabled. They include session authentication cookies, security tokens, and load-balancing cookies. No personal data is stored in these cookies beyond what is technically necessary for the session.
• Functional Cookies: These cookies remember your preferences (such as language settings, bet slip state, and last-visited game category) to improve your experience across sessions.
• Analytics Cookies: baje77 uses anonymised analytics data to understand how users navigate the platform, which pages are most visited, and where technical issues occur. This data is aggregated and does not identify individual users.
• Performance Cookies: These cookies help baje77 monitor platform performance, identify slow-loading pages, and optimise server response times to maintain a smooth experience for all players.

You may control cookie preferences through your browser settings. Please be aware that disabling strictly necessary cookies will impair the functionality of the baje77 platform, and certain features may not operate correctly without them.

Section 11

Your Data Protection Rights

As a baje77 player, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact the baje77 support team using the details in Section 15. baje77 will respond to all valid rights requests within 30 days of receipt. In complex cases, this period may be extended by a further 30 days, in which case you will be notified of the extension and the reason for it.

Section 12

Protection of Minors

The baje77 platform is strictly intended for adults aged 18 and above. baje77 does not knowingly collect, process, or store personal data from any individual under the age of 18. Age verification is a mandatory step in the baje77 account registration and KYC process, and baje77 employs active measures to prevent underage access to the platform.

If baje77 becomes aware that personal data has been collected from a person under the age of 18, that account will be immediately suspended, any associated funds and wagers will be held pending investigation, and all personal data associated with the underage account will be securely deleted as soon as permitted by any applicable legal hold obligations.

If you are a parent or guardian and you believe that a minor in your care has created a baje77 account, please contact our support team immediately at [email protected] so that the matter can be resolved without delay.

Section 13

Third-Party Links and Services

The baje77 platform may contain references to third-party game providers and payment service partners whose services are integrated into the platform. While baje77 takes reasonable steps to ensure that all integrated partners maintain adequate data protection standards, baje77 is not responsible for the privacy practices of those third-party providers.

Each third-party service provider that processes personal data on baje77's behalf is governed by a data processing agreement that requires them to implement appropriate technical and organisational security measures and to process data only for the purposes instructed by baje77. However, baje77 cannot guarantee the security practices of independent third-party websites that may be referenced outside the baje77 platform. Players are advised to review the privacy policies of any third-party service they engage with independently.

Section 14

Changes to This Privacy Policy

baje77 reserves the right to update, revise, or replace this Privacy Policy at any time. When a material change is made to this Policy, the "Last Updated" date at the top of this page will be revised accordingly. For changes that significantly affect how personal data is processed or that reduce your privacy rights, baje77 will provide advance notice to registered players via email or a prominent notice on the platform prior to the changes taking effect.

Your continued use of the baje77 platform following the publication of a revised Privacy Policy constitutes your acceptance of that revision. If you do not agree to the revised Policy, you must cease using the platform and may contact support to request account closure in accordance with Section 12 of the baje77 Terms & Conditions.

Section 15

Contact Us About Privacy

If you have any questions about this Privacy Policy, wish to exercise any of your data protection rights, or want to raise a privacy-related complaint, please contact the baje77 data protection team using the details below. All contact details are provided as plain text only and are not clickable links.

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 inside the baje77 platform after login
• Support Hours: 24 hours per day, 7 days per week, Bangladesh Standard Time (BST, UTC+6)

baje77 aims to acknowledge all privacy-related requests and complaints within 24 hours of receipt and to provide a full written response within 30 days. Where a request is complex or high in volume, this period may be extended by a further 30 days with written notice provided to you.