bd baazi Privacy Policy — Your Data, Your Rights

1 Data We Collect

bd baazi collects personal data through several channels: the registration form, the KYC (Know Your Customer) verification process, your ongoing use of Platform features, and automated technical systems. The following categories of personal data may be collected and processed:

1.1 Identity & Contact Data

When you register a bd baazi account, we collect your full legal name, date of birth, residential address (including district and division within Bangladesh), email address, and mobile phone number. This data is used to establish your identity, verify your eligibility to use the Platform, and communicate with you about your account.

1.2 Identity Verification (KYC) Documents

As part of our KYC obligations, we may collect copies of government-issued identity documents such as your National Identity Card (NID), passport, or driving licence. We may also collect proof of address documents such as utility bills or bank statements. These documents are processed and stored securely and are used exclusively for age and identity verification purposes.

1.3 Financial & Transaction Data

We collect records of all deposits, withdrawals, and in-platform transactions associated with your account. This includes transaction amounts in BDT (৳), payment method used (e.g., bKash account reference, Nagad transaction ID), timestamps, and transaction status. We do not store full card numbers, CVV codes, or mobile banking PINs — these are processed directly by our PCI-compliant payment partners.

1.4 Gameplay & Activity Data

bd baazi records your gameplay history, including games played, bet amounts, session durations, win/loss records, and bonus claims. This data is used for responsible gaming monitoring, fraud detection, dispute resolution, and to personalise your Platform experience where applicable.

1.5 Technical & Device Data

We automatically collect technical data when you access the Platform. This includes your IP address, browser type and version, operating system, device type (mobile or desktop), screen resolution, referring URL, and pages visited within bd baazi. This data is collected via server logs and cookies and is used for security monitoring, platform optimisation, and analytics.

2 How We Use Your Data

bd baazi processes your personal data only where a lawful basis exists for doing so. The primary lawful bases we rely on are: the performance of a contract (i.e., operating your player account), compliance with legal obligations (KYC, anti-money laundering), legitimate interests (fraud prevention, platform security), and in limited cases, your explicit consent (e.g., marketing communications where opted in).

2.1 Account Management & Service Delivery

Your identity and contact data are used to create and maintain your player account, authenticate your logins, process deposits and withdrawals, deliver customer support, and send you transactional communications such as deposit confirmations and withdrawal status updates. Without this data, bd baazi cannot provide its core services to you.

2.2 Legal & Regulatory Compliance

bd baazi processes identity, financial, and transaction data to comply with applicable anti-money laundering (AML) obligations, counter-terrorism financing (CTF) requirements, and age verification regulations. In certain circumstances, we may be required by law or competent authority to disclose player data — in such cases, we will comply with the legal obligation while notifying the affected player where permitted to do so.

2.3 Responsible Gaming Monitoring

Gameplay and session data is used by bd baazi's responsible gaming systems to identify patterns that may indicate problem gambling behaviour — such as rapid escalation in bet sizes, unusually long sessions, or repeated failed withdrawal requests. Where such patterns are detected, our team may proactively reach out to the player to offer support resources or apply protective account limits.

2.4 Fraud Detection & Platform Security

Technical and behavioural data — including IP addresses, device fingerprints, login patterns, and transaction history — is analysed by bd baazi's security systems to detect and prevent fraud, account takeover attempts, bonus abuse, and money laundering. Accounts flagged by these systems may be subject to additional manual review.

2.5 Platform Improvement & Analytics

Aggregated and anonymised usage data is used to analyse how players navigate the Platform, which games are most popular, where technical issues occur, and how registration and deposit flows can be improved. This analytics data does not identify you personally and is used solely to enhance the bd baazi experience for all players.

2.6 Marketing Communications

If you have opted in to receive promotional communications from bd baazi, we may use your email address and mobile number to send you information about new games, seasonal promotions (such as Eid or Pohela Boishakh offers), deposit bonuses, and tournament announcements. You may withdraw your consent to marketing communications at any time by contacting support or using the unsubscribe link included in every marketing email.

3 Data Sharing & Third Parties

bd baazi does not sell your personal data. We do not share your information with third-party advertisers, data brokers, or unaffiliated commercial entities. However, to operate the Platform effectively, we work with a limited number of trusted third-party service providers who may process your data on our behalf.

3.1 Payment Processing Partners

To facilitate deposits and withdrawals, bd baazi shares necessary transaction data with payment processors including bKash, Nagad, Rocket, Upay, and card network operators (Visa, Mastercard). These providers receive only the minimum data required to complete the transaction and are contractually bound to process your data in accordance with applicable data protection standards.

3.2 Identity Verification Providers

bd baazi uses third-party KYC and identity verification services to assist in validating the documents you submit during the account verification process. These providers may process your identity documents on our behalf under strict data processing agreements. They do not retain your documents beyond the period required to complete the verification check.

3.3 Game Content Providers

Games on the bd baazi Platform are provided by third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. When you play a game, basic session data (such as a player session token) is transmitted to the relevant studio's game server to enable gameplay. These studios do not receive your full identity or payment information — they receive only a pseudonymous session identifier.

3.4 Legal & Regulatory Disclosure

bd baazi may disclose your personal data to law enforcement agencies, financial intelligence units, or other competent authorities where we are legally obligated to do so — for example, in connection with an AML investigation, a court order, or a formal regulatory request. In all such cases, disclosures are made strictly within the scope required by the applicable legal obligation.

4 Cookies & Tracking Technologies

bd baazi uses cookies and similar technologies (such as local storage and session tokens) to operate core Platform functions, maintain your login session, and gather aggregated analytics data. The following categories of cookies are used on bd-baazi.ws:

4.1 Strictly Necessary Cookies

These cookies are essential for the Platform to function. They enable you to log in to your account, maintain your session while navigating between pages, and complete deposit transactions securely. Without these cookies, core Platform services cannot be delivered. These cookies do not require your consent as they are technically necessary for service delivery.

4.2 Analytics & Performance Cookies

bd baazi uses first-party analytics cookies to understand how players interact with the Platform — for example, which pages are visited most, where players drop off during the registration flow, and how long sessions typically last. This data is collected in aggregated, anonymised form and is used exclusively to improve Platform performance and user experience. We do not use third-party advertising analytics networks (such as Google Ads conversion tracking) on the Platform.

4.3 Security Cookies

Security cookies are used to detect and mitigate fraudulent access attempts, bot activity, and account takeover risks. These cookies may record information about your login patterns, device characteristics, and IP address for the purpose of authenticating that the person accessing an account is its legitimate owner.

4.4 Preference Cookies

Where available, preference cookies store your in-Platform settings such as your preferred game lobby view, notification preferences, and responsible gaming tool configurations. These cookies improve your experience by ensuring your settings are preserved between sessions.

Most web browsers allow you to control cookies through the browser settings. Please note that disabling strictly necessary cookies will impair your ability to use the bd baazi Platform. Instructions for managing cookies in popular browsers are available in your browser's help documentation.

5 Data Retention & Storage

bd baazi retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The retention periods applicable to the main categories of player data are summarised below.

5.1 Active Account Data

While your bd baazi account remains active, we retain all identity, financial, and gameplay data associated with your account. This data is necessary to operate your account, process transactions, resolve disputes, and comply with our ongoing AML monitoring obligations.

5.2 Post-Closure Retention

Following the closure of a player account — whether at the player's request or due to a breach of the Terms & Conditions — bd baazi retains account records, transaction history, and KYC documents for a minimum period of five years from the date of account closure. This retention period reflects our obligations under applicable anti-money laundering regulations and our legitimate interest in maintaining records sufficient to defend against legal claims.

5.3 Dormant Account Data

For accounts that have been dormant for twelve consecutive months with a zero balance, basic identity and contact records are retained for the five-year minimum period outlined above, while detailed gameplay and session logs may be anonymised after three years of inactivity.

5.4 Data Storage Location

bd baazi's player data is stored on secure servers. All data storage infrastructure used by bd baazi employs encryption at rest (AES-256 or equivalent), access controls, and regular security auditing. Where data is processed by third-party service providers (e.g., payment processors or KYC verification services), those providers are contractually required to maintain equivalent security standards.

6 Your Privacy Rights

As a bd baazi player, you hold several rights over your personal data. bd baazi is committed to honouring these rights promptly and transparently. To exercise any of the rights listed below, please contact our support team via the 24/7 live chat function or by emailing [email protected] (plain text — not a clickable link). We will acknowledge your request within five business days and aim to fulfil it within 30 calendar days.

6.1 Right of Access

You have the right to request a copy of the personal data that bd baazi holds about you. Upon a verified request, we will provide a summary of your data in a readable format, including the categories of data held, the purposes for which it is processed, and any third parties to whom it has been disclosed.

6.2 Right to Rectification

If any personal data bd baazi holds about you is inaccurate or incomplete, you have the right to request that it be corrected. Most contact and preference data can be updated directly within your account settings. For identity data (such as your registered name or date of birth), a correction request must be submitted to our support team and will require documentary evidence of the correct information.

6.3 Right to Erasure

You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (for consent-based processing), or where you object to processing based on legitimate interests. Please note that bd baazi is not able to delete data where retention is required by legal obligation (for example, AML record-keeping requirements). In such cases, we will explain the specific legal basis for continued retention.

6.4 Right to Data Portability

You have the right to receive a copy of the personal data you have provided to bd baazi in a structured, commonly used, machine-readable format (such as CSV or JSON), and to request that this data be transmitted directly to another controller where technically feasible.

6.5 Right to Object to Marketing

Where you have opted in to receive marketing communications from bd baazi, you may withdraw that consent and object to further marketing at any time. Opt-out requests are processed within 48 hours and you will receive a confirmation once your marketing preferences have been updated.

6.6 Right to Lodge a Complaint

If you believe that bd baazi has processed your personal data in a manner that does not comply with applicable data protection obligations, you have the right to lodge a complaint with our data protection team by contacting support. We treat all privacy complaints seriously and will investigate and respond within the timeframes stated above.

7 Data Security Measures

bd baazi implements a layered approach to data security, combining technical controls, organisational procedures, and contractual safeguards to protect your personal information against unauthorised access, accidental loss, destruction, or disclosure.

7.1 Technical Safeguards

• TLS/SSL Encryption: All data in transit between your browser and bd baazi servers is encrypted using TLS 1.2 or TLS 1.3. Our SSL certificate is maintained and renewed on a regular schedule.
• Encryption at Rest: Sensitive data stored in bd baazi databases — including identity documents and financial records — is encrypted at rest using AES-256 encryption or equivalent.
• Access Controls: Internal access to player data is restricted on a strict need-to-know basis. Only authorised personnel with a legitimate operational requirement can access personal data, and all internal access is logged and auditable.
• Two-Factor Authentication: bd baazi supports two-factor authentication (2FA) on player accounts to reduce the risk of unauthorised access. Players are strongly encouraged to enable 2FA in their account security settings.
• Intrusion Detection: bd baazi employs real-time intrusion detection and monitoring systems that flag and respond to anomalous access patterns on our infrastructure.

7.2 Organisational Safeguards

bd baazi staff who handle personal data receive regular training on data protection obligations and security best practices. Personnel are bound by confidentiality obligations and are subject to disciplinary action in the event of a data protection breach caused by negligence or wilful misconduct.

7.3 Data Breach Response

In the event of a personal data breach that is likely to result in a risk to your rights and interests, bd baazi will notify affected players without undue delay — and in any case within 72 hours of becoming aware of the breach — providing a description of the nature of the breach, the categories of data affected, the likely consequences, and the measures taken or proposed to address the breach.

7.4 Player Responsibilities

While bd baazi takes extensive measures to protect your data on our end, you also play an important role in keeping your account secure. You are responsible for maintaining the confidentiality of your password, enabling 2FA, using a secure and private network when accessing your account, and notifying bd baazi immediately if you suspect unauthorised access. bd baazi cannot be held liable for security incidents that result from a player's failure to follow reasonable personal security practices.

8 Policy Updates & Contact

bd baazi reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, applicable law, or Platform features. When material changes are made to this policy, we will notify registered players via the email address on file or by displaying a prominent notice on the Platform. The "Effective Date" at the top of this policy will be updated to reflect the date of the most recent revision.

Your continued use of the bd baazi Platform following the publication of a revised Privacy Policy constitutes your acknowledgement of the updated terms. If you object to any changes, you should discontinue use of the Platform and contact our support team to request account closure and data deletion in accordance with Section 6.3 above.

8.1 Contact for Privacy Matters

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by bd baazi, please contact our support team through one of the following channels:

• Live Chat: Available 24/7 directly within the bd baazi Platform — the fastest way to reach our team.
• Email: [email protected] (plain text — not a clickable link). Please include "Privacy Request" in your subject line along with your registered username to help us locate your account promptly.
• Support Hours: 24 hours a day, 7 days a week, Bangladesh Standard Time (BST, UTC+6).

All privacy-related requests are handled by our dedicated support team. We are committed to responding to all verified data subject requests within 30 calendar days of receipt. For complex requests, we may extend this period by an additional 30 days where necessary, in which case we will inform you of the extension and the reason for it within the initial 30-day period.

8.2 Children & Minors

bd baazi is strictly an adults-only platform. We do not knowingly collect personal data from persons under the age of 18. If we become aware that a minor has registered an account or provided personal data to the Platform, we will immediately suspend the account, delete the associated personal data (subject to any legal retention obligations), and return any deposited funds to the original payment source. If you believe a minor has used the Platform, please contact our support team immediately.