dhaka baji Privacy Policy

1. Information We Collect

dhaka baji collects personal information through several channels: directly from you when you register an account or contact support, automatically as you interact with the platform, and from third-party service providers such as payment processors where permitted. We collect only the information that is necessary to provide you with a safe, functional, and compliant gambling experience.

1.1 Information You Provide Directly

When you create a dhaka baji account or engage with our services, you may provide the following categories of personal information:

Data Category	Specific Data Points	Collected At
Identity Data	Full legal name, date of birth, nationality, NID / passport number	Registration & KYC verification
Contact Data	Email address, mobile number (Bangladesh), residential address	Registration
Financial Data	bKash / Nagad / Rocket / Upay mobile number, bank account details (for bank transfers), transaction history	Deposit / withdrawal requests
Verification Documents	Scanned copies of NID, passport, driving licence, utility bill or bank statement for address proof	KYC process
Support Communications	Chat transcripts, email correspondence, complaint records	When contacting support

1.2 Information Collected Automatically

When you access the dhaka baji platform, our systems automatically record certain technical information required to deliver and secure the service. This includes:

• IP address and approximate geolocation (city/region level);
• Device type, operating system, browser type and version;
• Session timestamps, pages visited, features accessed, and duration of visit;
• Game activity data including bets placed, games played, win/loss records, and wager amounts;
• Referral source (how you arrived at dhaka-baji.club);
• Cookie identifiers and similar tracking tokens (see Section 4).

This automatically collected data is used primarily for platform security, fraud detection, responsible gaming monitoring, and service improvement. It is not used to build advertising profiles.

1.3 Information From Third Parties

In certain circumstances, dhaka baji may receive information about you from third-party sources, including:

• Payment processors (e.g., bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank): transaction confirmation data to verify deposits and withdrawals;
• Identity verification services: results of automated document checks conducted as part of the KYC process;
• Fraud prevention databases: flags indicating known fraudulent activity or self-exclusion registrations from third-party responsible gaming programmes.

2. How We Use Your Data

dhaka baji processes your personal data only where we have a lawful basis for doing so. The lawful bases we rely upon are: the performance of our contract with you, compliance with legal obligations, our legitimate interests in operating a secure and fair platform, and (for marketing communications) your explicit consent.

The following table summarises the primary purposes for which we use your personal data and the lawful basis for each:

Purpose	Data Used	Lawful Basis
Account creation and management	Identity, contact data	Contractual necessity
Processing deposits and withdrawals	Financial data, identity data	Contractual necessity
KYC and age verification	Identity data, verification documents	Legal obligation
Fraud prevention and anti-money laundering checks	Identity, financial, technical data	Legal obligation & legitimate interests
Responsible gaming monitoring	Game activity, financial data	Legal obligation & legitimate interests
Customer support	Contact data, support communications	Contractual necessity
Platform analytics and improvement	Technical data, game activity	Legitimate interests
Sending promotional offers and bonuses	Contact data, game activity	Consent
Legal compliance and regulatory reporting	All categories as required	Legal obligation

dhaka baji does not use your personal data for automated decision-making that produces legal or similarly significant effects without human review. If automated processes flag your account for review (for example, due to suspected fraudulent activity), a qualified member of the dhaka baji compliance team will review the case before any consequential action is taken.

3. Data Sharing & Disclosure

dhaka baji does not sell, rent, or otherwise commercialise your personal data. We share your information only in the specific, limited circumstances described below.

3.1 Service Providers and Processors

We engage carefully selected third-party service providers to assist in operating the platform. These providers act strictly as data processors on our behalf and are contractually prohibited from using your data for any purpose beyond providing their specific service to dhaka baji. Categories of processors include:

• Payment processors: bKash, Nagad, Rocket, Upay, BRAC Bank, City Bank, Dutch-Bangla Bank, Islami Bank Bangladesh, Sonali Bank — for processing financial transactions;
• Identity verification providers: for automated KYC document checks;
• Cloud hosting and infrastructure providers: for secure data storage and platform delivery;
• Customer support platform providers: for managing live chat and email support queues;
• Analytics providers: for aggregated, anonymised platform usage analytics.

3.2 Legal and Regulatory Disclosure

dhaka baji may disclose personal data to competent authorities, courts, or regulators where we are required to do so by applicable law, court order, or regulatory directive. In such cases, we will disclose only the minimum information required to satisfy the legal obligation and will, where legally permitted to do so, notify you of the disclosure.

3.3 Business Transfers

In the event that dhaka baji undergoes a merger, acquisition, or sale of all or substantially all of its assets, player data held at the time of the transaction may be transferred to the successor entity. We will notify affected players of any such transfer and the privacy practices of the acquiring entity before the transfer takes effect, where practicable.

3.4 No Cross-Border Transfers Without Safeguards

Where your data is processed by service providers located outside Bangladesh, dhaka baji ensures that appropriate contractual safeguards are in place to protect your data to a standard equivalent to that applicable within Bangladesh. We do not transfer personal data to parties in jurisdictions that do not provide an adequate level of data protection without first implementing appropriate contractual protections.

4. Cookies & Tracking

dhaka baji uses cookies and similar technologies (such as local storage tokens and session identifiers) to operate the platform, maintain your login session, remember your preferences, and monitor platform performance. This section explains the types of cookies we use and your choices regarding them.

4.1 Types of Cookies Used

Cookie Type	Purpose	Duration
Strictly Necessary	Enable core platform functions: login session maintenance, bet slip storage, security token validation. Cannot be disabled without breaking the platform.	Session / up to 24 hours
Functional	Remember your language preference, display settings, and last-visited game categories to personalise your experience.	Up to 90 days
Analytics	Collect anonymised data on page visits, feature usage, and error rates to help us improve the platform.	Up to 12 months
Marketing	Track whether promotional emails or in-platform banners were viewed or clicked, to measure campaign effectiveness. Used only with your consent.	Up to 30 days

4.2 Managing Your Cookie Preferences

You can control cookies through your web browser settings. Most modern browsers allow you to view, delete, and block cookies from specific sites. Please note that disabling strictly necessary cookies will impair your ability to use the dhaka baji platform, as session management and security functions depend on them.

To manage cookies in your browser, refer to the help documentation for your specific browser (Chrome, Firefox, Safari, Edge, or Opera). dhaka baji does not use any third-party advertising network cookies or cross-site tracking pixels.

5. Data Security

dhaka baji implements a multi-layered security framework to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security measures include, but are not limited to:

• Transport security: All data exchanged between your browser or app and our servers is encrypted using TLS 1.2 or higher (256-bit SSL). Our site is served exclusively over HTTPS;
• At-rest encryption: Sensitive data including identity documents, financial records, and password hashes is encrypted at rest using AES-256 encryption;
• Access controls: Access to player data is restricted on a strict need-to-know basis. All internal access is logged and subject to regular audit;
• Password security: Player passwords are never stored in plain text. They are processed using a one-way cryptographic hash function with a unique per-account salt;
• Intrusion detection: Our infrastructure is monitored 24/7 by automated systems designed to detect and respond to unusual access patterns, injection attempts, and denial-of-service activity;
• Regular security assessments: We conduct periodic internal security reviews and work with external partners to identify and remediate vulnerabilities before they can be exploited.

Despite these measures, no platform can guarantee absolute security. In the unlikely event of a data breach that is likely to result in a risk to your rights and freedoms, dhaka baji will notify affected players without undue delay and will take all reasonable steps to contain and remediate the breach. You can assist in protecting your account by using a strong, unique password, enabling any available two-factor authentication options, and never sharing your login credentials with anyone.

6. Data Retention

dhaka baji retains your personal data only for as long as is necessary to fulfil the purposes set out in this Privacy Policy or as required by applicable law. The following retention periods apply as a general guide:

Data Category	Retention Period	Reason
Account and identity data	Duration of account + 5 years post-closure	Legal and regulatory compliance, anti-money laundering obligations
Financial transaction records	7 years from transaction date	Financial record-keeping obligations
KYC verification documents	5 years from account closure	Regulatory requirements
Customer support correspondence	3 years from last interaction	Dispute resolution, service improvement
Game activity logs	3 years from account closure	Responsible gaming monitoring, dispute resolution
Marketing consent records	3 years from consent withdrawal	Evidence of lawful processing
Technical and analytics data	12 months rolling	Platform improvement and security monitoring

When data reaches the end of its retention period, it is securely deleted or anonymised such that it can no longer be linked back to an individual player. Self-exclusion records are retained indefinitely to prevent circumvention of responsible gaming measures; only the minimum data necessary to enforce the exclusion is kept beyond the standard retention period.

7. Your Privacy Rights

As a player on the dhaka baji platform, you have a number of rights with respect to your personal data. We are committed to honouring these rights promptly and transparently. To exercise any of the rights described below, please contact our support team via live chat or by email at [email protected]. We will respond to all verified requests within 30 days of receipt.

7.1 Right of Access

You have the right to request a copy of the personal data that dhaka baji holds about you, together with information about how that data is being processed. We will provide this in a structured, commonly used, machine-readable format where technically feasible.

7.2 Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. You may update certain account details (such as your contact email or address) directly through the account settings panel. For corrections to identity or KYC data, please contact support with supporting documentation.

7.3 Right to Erasure

You may request that dhaka baji delete your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (where consent was the sole lawful basis), or where you object to processing and there are no overriding legitimate grounds. Please note that this right is not absolute — we may retain certain data where required by law or to establish, exercise, or defend legal claims. Where we are unable to comply fully with an erasure request, we will explain the specific reasons.

7.4 Right to Restriction of Processing

You may request that we restrict the processing of your personal data in certain circumstances — for example, while a dispute regarding its accuracy is resolved, or pending an objection to processing. Where processing is restricted, we will continue to store your data but will not process it further without your consent, except for storage, legal claims, or protection of the rights of others.

7.5 Right to Object to Marketing

You have the right to withdraw consent to receiving marketing communications from dhaka baji at any time. You can do this by clicking the unsubscribe link in any marketing email, by adjusting your notification preferences in your account settings, or by contacting support directly. Withdrawal of marketing consent will not affect any other aspect of your account or access to the platform.

7.6 Right to Data Portability

Where you have provided data to dhaka baji under a contract or on the basis of consent, you have the right to receive that data in a portable format (e.g., CSV or JSON) to transfer to another service provider, where technically feasible.

8. Policy Updates & Contact

dhaka baji reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. When we make material changes, we will notify registered players by email and/or through a prominent notice on the platform at least 14 days before the changes take effect. The date of the most recent update is always indicated at the top of this document.

We encourage you to review this Privacy Policy periodically. Your continued use of the dhaka baji platform following the effective date of any update constitutes your acceptance of the revised policy. If you do not agree with the changes, you should discontinue use of the platform and request account closure before the updated policy takes effect.

8.1 Contact Our Data Team

If you have any questions, concerns, or requests relating to this Privacy Policy or the way dhaka baji handles your personal data, please reach out to us through any of the following channels:

• Email: [email protected] — please include "Privacy Request" in the subject line;
• Live Chat: Available 24 hours a day, 7 days a week, directly through the dhaka baji platform;
• Operating Hours: All times are Bangladesh Standard Time (BST, UTC+6).

We aim to acknowledge all privacy-related enquiries within 24 hours and to provide a full response within 30 days. For complex requests, we may extend this period by up to an additional 60 days, in which case we will notify you of the extension and the reason for it within the initial 30-day window.