Privacy Policy
Your Data & Your Rights

a baji collects personal information only where there is a clear, legitimate purpose for doing so. The categories of information we collect fall into three broad groups: information you provide directly, information generated automatically by your use of the platform, and information received from trusted third-party partners involved in payment processing or identity verification.

Information you provide directly:

• Account registration data: Your full name, date of birth, Bangladesh mobile number, email address, and a username and password of your choosing.
• Identity verification (KYC) documents: A copy of your National Identity Card (NID), passport, or other government-issued photo ID, submitted during the mandatory KYC process prior to your first withdrawal.
• Payment information: Your bKash or Nagad mobile number, Rocket account number, or bank account details (account name and number only) as needed to process deposits and withdrawals. a baji does not store full card numbers, CVV codes, or mobile banking PINs.
• Communications: Records of your interactions with our 24/7 customer support team, including chat transcripts, emails to [email protected], and any documents or screenshots you submit as part of a support request or dispute.
• Responsible gaming submissions: If you submit a self-exclusion request, deposit limit request, or time-out application, those records are retained as required by our responsible gaming obligations.

Information collected automatically:

• Device & technical data: IP address, device type, operating system, browser type and version, screen resolution, and time zone (Bangladesh Standard Time, UTC+6).
• Usage data: Pages visited, games played, session duration, betting history, deposit and withdrawal timestamps, and in-platform navigation patterns.
• Cookie and session data: Session identifiers, authentication tokens, and platform-preference cookies. See the Cookies section for full details.

Information from third-party partners:

• Transaction confirmation data from bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, and other payment processors — limited to transaction reference numbers, amounts, and timestamps.
• Identity verification results from KYC service providers, where a third-party provider is used to assist in document authentication.
• Fraud and risk signals from payment networks, where required to protect platform integrity and prevent financial crime.

a baji uses the personal information we collect for clearly defined purposes. We do not use your data for purposes beyond those described in this Privacy Policy without first obtaining your consent or notifying you of the change. The primary purposes for which we process your data are as follows:

Where we rely on your consent for a specific processing activity — such as sending promotional offers about upcoming BPL season bonuses, Eid cashback promotions, or new game launches — you may withdraw that consent at any time by contacting our support team or using the unsubscribe option included in every marketing communication. Withdrawal of consent does not affect any processing that occurred prior to the withdrawal.

a baji does not sell, rent, or trade your personal data to any third party. We share your information only in the specific, limited circumstances described below, and only with parties who are contractually required to handle it in a manner consistent with this Privacy Policy.

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, Visa, and Mastercard receive the minimum data necessary to process your financial transactions. Each of these providers operates under their own privacy and data security frameworks.
• KYC and identity verification providers: Where a third-party service is engaged to assist with document verification, we share the identity documents you submit solely for the purpose of confirming your identity. These providers are bound by strict confidentiality obligations.
• Game providers: Technical session data may be shared with game providers (such as Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, and Spribe) to the extent required for game delivery, fair-play certification, and dispute resolution. These providers do not receive your full personal profile.
• Fraud prevention and security services: Anonymised or pseudonymised data may be shared with fraud-detection platforms to identify and prevent financial crime, account takeovers, and bonus abuse. Such sharing is always in aggregate or pseudonymised form where feasible.
• Legal and regulatory authorities: We will disclose personal data to law enforcement, regulatory bodies, or courts when required by applicable law, valid legal process, or to protect the rights and safety of a baji, its players, or the public. We notify affected players of such disclosures where legally permitted to do so.

All third-party service providers engaged by a baji are assessed for data security standards before engagement and are required to sign data processing agreements that restrict their use of your data to the specific purpose for which it was shared.

The a baji platform uses cookies and similar technologies to operate correctly, remember your preferences, and maintain the security of your session. Cookies are small text files stored on your device when you visit the platform. They do not contain executable code and cannot access other files on your device.

Types of cookies used by a baji:

• Strictly necessary cookies: These are essential for the platform to function. They maintain your login session, ensure secure communication between your browser and our servers, and prevent cross-site request forgery. These cookies cannot be disabled without breaking core platform functionality.
• Functional cookies: These remember your platform preferences — such as your preferred language (English), display settings, and recently viewed game categories — so you do not have to re-configure them on each visit.
• Analytics cookies: We use anonymised, first-party analytics to understand how players navigate the platform — which pages are visited most, where players encounter difficulty, and how session flows can be improved. This data is aggregated and not linked to individual player identities.

You can control cookie behaviour through your browser settings. Most modern browsers allow you to view, delete, and block cookies on a site-by-site basis. Please note that disabling strictly necessary cookies will prevent you from logging in to your a baji account and using core platform features. Disabling functional or analytics cookies will not affect your ability to play games or make transactions.

a baji employs a layered security architecture to protect your personal data against unauthorised access, accidental loss, disclosure, or destruction. Key security measures in place include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and a baji servers.
• Password hashing using industry-standard one-way algorithms — a baji staff cannot read your password in plain text.
• Two-factor authentication (2FA) available to all players, delivering a one-time PIN to your registered Bangladesh mobile number.
• Access controls: Internal access to personal data is restricted to staff who require it to perform their specific job functions. All access is logged and audited.
• Regular security assessments of our platform infrastructure, including penetration testing and vulnerability scanning.
• Incident response procedures: In the event of a data breach that poses a risk to your rights and freedoms, a baji will notify affected players and take immediate remedial action.

Data Retention:

We retain your personal data for as long as your a baji account remains active, and for a defined period thereafter in order to comply with legal, regulatory, and audit obligations. The following general retention periods apply:

Once the applicable retention period has passed and there is no longer a legal or legitimate business reason to retain the data, a baji will securely delete or anonymise it. Anonymised data that can no longer be linked back to any individual may be retained indefinitely for statistical and platform improvement purposes.

As an a baji player, you hold a number of rights in relation to the personal data we hold about you. We are committed to honouring these rights promptly and without undue complication. The following rights apply to all players:

• Right of access: You may request a copy of the personal data a baji holds about you at any time. We will provide this within a reasonable timeframe following identity verification.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. For account details, many fields can be updated directly by contacting our support team.
• Right to erasure: You may request that we delete your personal data. Where we are legally required to retain certain data (such as transaction records for financial compliance), we will explain which data must be retained and for how long.
• Right to restrict processing: In certain circumstances, you may request that we limit how we use your data while a dispute or query is being resolved.
• Right to withdraw consent: Where processing is based on your consent (such as receiving promotional communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.
• Right to object: You have the right to object to processing carried out on the basis of legitimate interest, including profiling carried out for fraud prevention purposes, subject to our overriding legal and security obligations.

To exercise any of these rights, contact our support team at [email protected]. We will acknowledge your request within 3 business days and aim to fulfil it within 30 calendar days. Complex or high-volume requests may take longer, in which case we will notify you of the extended timeline and reason.

a baji takes the protection of minors seriously and implements age verification controls as part of the account registration and KYC process. If we become aware that personal data has been collected from a person under the age of 18, we will take the following immediate steps:

• Suspend the account immediately pending investigation.
• Permanently delete all personal data associated with the underage account from our active systems.
• Reverse any deposits made and refuse any withdrawal requests, with funds handled in accordance with our responsible gaming and refund procedures.
• Notify the relevant support team and flag the case for compliance review.

If you are a parent or guardian and believe that a person under the age of 18 in your care has registered an account with a baji, please contact us immediately at [email protected]. We will investigate and act promptly. We also recommend the use of parental control software to restrict access to gambling websites on shared or family devices.

a baji does not direct any marketing communications, advertisements, or promotional materials at individuals who are known to be under the age of 18. Our responsible gaming framework includes controls specifically designed to prevent underage gambling, and we are committed to continuously reviewing and strengthening those controls.

a baji reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable legal requirements, or platform features. When we make a material change to this policy — one that meaningfully affects how we collect or use your personal data — we will notify you via your registered email address and post a prominent notice on the platform for a minimum of 14 days before the change takes effect.

The "Last Updated" date displayed at the top of this page indicates when the most recent revision was made. We encourage you to review this Privacy Policy periodically to stay informed about how your data is being handled. Your continued use of the a baji platform following a policy update constitutes your acceptance of the revised Privacy Policy.

For minor changes — such as clarifications, corrections of typographical errors, or changes that do not affect how your data is used — we may update the policy without a formal notification, though the "Last Updated" date will always reflect the most recent revision.

Contact Our Privacy Team:

For any questions, concerns, or requests relating to this Privacy Policy or the personal data a baji holds about you, please contact our customer support team:

• Email: [email protected]
• Support hours: 24 hours a day, 7 days a week
• Support languages: English and Bengali
• Response time: We aim to acknowledge all privacy-related enquiries within 3 business days (Bangladesh Standard Time, UTC+6).