Privacy Policy — How baji2222 Handles Your Data

When you create and use a baji2222 account, we collect a range of personal data necessary to deliver our services, verify your identity, process payments, and comply with applicable anti-money-laundering and responsible gaming obligations. The categories of personal data we collect are described below.

Registration Data: When you open an account on baji2222, we collect your full legal name, date of birth, email address, Bangladeshi mobile number, residential address (including city — whether Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, or Cox's Bazar), and your chosen username and password (stored in encrypted form — we never store plaintext passwords).

Identity Verification (KYC) Data: To comply with Know Your Customer obligations and to verify that all players are 18 years of age or older, we may collect copies of government-issued identity documents such as your National ID Card (NID), passport, or driver's licence. We may also collect a selfie or live facial verification image as part of the identity confirmation process.

Financial Data: We collect data relating to your deposits and withdrawals, including your bKash mobile wallet number, Nagad account details, Rocket account details, Upay account details, bank account numbers (for Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, and other supported banks), and masked Visa or Mastercard card details. Full card numbers are never stored on baji2222 servers — payment card data is handled exclusively by PCI-DSS-compliant third-party processors.

Transaction Data: We maintain records of every deposit, withdrawal, bonus credit, bonus debit, wager, game result, and account balance change associated with your account. These records are retained for audit, dispute resolution, and regulatory compliance purposes.

Technical & Device Data: When you access baji2222, our servers automatically collect your IP address, browser type and version, operating system, device type (mobile or desktop), device identifiers, time zone (Bangladesh Standard Time, UTC+6), referring URL, and session duration. This data is used for fraud detection, security monitoring, and service optimisation.

Behavioural Data: We collect data about how you interact with the baji2222 platform — including pages visited, games played, bet amounts, session frequency, promotional content clicked, and customer support interactions. This data is used to personalise your experience, identify responsible gaming concerns, and improve our platform.

Communications Data: If you contact us via live chat or email at support@baji2222, we retain records of those communications, including the content of messages and any attachments you send, for quality assurance, training, and dispute resolution purposes.

baji2222 uses the personal data we collect for the following specific purposes. We do not use your data for any purpose that is incompatible with the purpose for which it was originally collected without first obtaining your explicit consent.

Marketing Communications: We will only send you promotional emails, SMS notifications, or push notifications if you have explicitly opted in to receive them. You may withdraw your marketing consent at any time by updating your notification preferences in your account dashboard, or by contacting us at support@baji2222. Withdrawing marketing consent does not affect the lawfulness of prior processing and does not prevent us from sending you essential transactional or security communications related to your account.

baji2222 processes your personal data on one or more of the following legal bases, depending on the specific purpose:

• Contractual Necessity: Processing is necessary to perform the contract between you and baji2222 — specifically, to open your account, process payments, settle bets, and deliver customer support.
• Legal Obligation: Processing is necessary to comply with applicable legal and regulatory obligations, including identity verification (18+ enforcement), anti-money-laundering requirements, responsible gaming obligations, and the retention of financial records.
• Legitimate Interest: Processing is necessary for baji2222's legitimate business interests — including fraud prevention, security monitoring, platform analytics, and service improvement — where those interests are not overridden by your fundamental privacy rights.
• Consent: For non-essential processing — such as marketing communications, personalised game recommendations, and optional analytics cookies — we rely on your explicit, freely given, and withdrawable consent. You may withdraw consent at any time without detriment to your account.

Where our legal basis for processing changes materially, baji2222 will update this Privacy Policy and notify affected account holders accordingly.

baji2222 does not sell, rent, or trade your personal data to third parties for commercial or advertising purposes. We share your data only in the limited circumstances described below, and only to the minimum extent necessary for each purpose.

Payment Processors: We share necessary financial data with our payment processing partners — including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard — solely to process your deposit and withdrawal transactions. Each payment partner operates under its own privacy policy and data protection obligations.

Game Software Providers: To deliver casino game content, baji2222 integrates with licensed game studios including Pragmatic Play, Evolution Gaming, NetEnt, Play'n GO, Microgaming, Spribe, and Ezugi. These providers receive technical session data (such as a session token and account identifier) necessary to load and run their games. They do not receive your full personal profile or payment details.

Identity Verification Partners: baji2222 works with third-party KYC and identity verification service providers to validate the documents you submit during account verification. These providers process your identity documents under strict data processing agreements and are not permitted to use your data for any purpose other than identity verification on behalf of baji2222.

Legal and Regulatory Authorities: We may disclose your personal data to law enforcement agencies, financial intelligence units, courts, or other governmental authorities in Bangladesh or other applicable jurisdictions where we are legally required to do so — for example, in response to a court order, a lawful request from a regulatory body, or as part of an anti-money-laundering investigation.

Business Transfers: In the event of a merger, acquisition, restructuring, or sale of all or part of baji2222's business assets, your personal data may be transferred to the successor entity as part of that transaction. You will be notified in advance of any such transfer and of any material changes to how your data is handled as a result.

baji2222 uses cookies and similar tracking technologies (such as web storage tokens and session identifiers) to operate the platform, maintain your login session, remember your preferences, and collect analytics data to improve the service. The categories of cookies we use are as follows:

You can manage non-essential cookie preferences through your account settings at any time. Please note that disabling essential cookies will prevent core platform functionality — including account login, game loading, and payment processing — from working correctly.

Most web browsers also allow you to control cookies through the browser settings menu. Clearing your cookies will log you out of your baji2222 session and may reset your saved preferences.

baji2222 retains your personal data for as long as is necessary to fulfil the purposes described in this Privacy Policy, or for as long as we are legally obliged to retain it, whichever is longer. The table below outlines our standard retention periods by data category:

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised in accordance with our data destruction procedures. Anonymised aggregate data (where it is no longer possible to identify you from the data) may be retained indefinitely for statistical and research purposes.

As a baji2222 account holder, you hold a number of rights over your personal data. baji2222 is committed to honouring these rights promptly and without unnecessary friction. Your rights are as follows:

To exercise any of the rights above, please contact us at support@baji2222 with the subject line "Privacy Rights Request". We will acknowledge your request within 72 hours and fulfil it within 30 days. In cases of particular complexity, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it.

Identity verification will be required before any rights request is actioned, to protect your data from being disclosed to or modified by an unauthorised party.

baji2222 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our key security measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your browser or app and baji2222's servers is encrypted using industry-standard 256-bit SSL/TLS protocol. This applies to all pages — account login, deposits, withdrawals, game play, and support interactions.
• Encrypted Password Storage: Account passwords are never stored in plaintext. We use strong one-way cryptographic hashing with salt to store credentials, meaning that even in the unlikely event of a data breach, your password cannot be recovered from stored data.
• Two-Factor Authentication (2FA): All account holders are strongly encouraged to activate SMS-based two-factor authentication. 2FA adds a second verification layer, ensuring that access to your account requires both your password and a time-sensitive code sent to your Bangladeshi mobile number.
• Access Controls: Access to personal data within baji2222's organisation is strictly limited to staff members who require it to perform their job functions. All staff with data access are bound by confidentiality obligations and undergo regular data protection training.
• Penetration Testing & Security Audits: baji2222's platform infrastructure is subject to regular third-party security assessments, vulnerability scans, and penetration testing exercises to identify and remediate security weaknesses before they can be exploited.
• Fraud Monitoring: Our automated security systems monitor account activity around the clock for patterns consistent with fraud, account takeover, bonus abuse, and money laundering. Suspicious activity triggers immediate review and, where necessary, account restriction pending investigation.

Despite these measures, no online platform can guarantee absolute security. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, baji2222 will notify you without undue delay and take all necessary steps to mitigate the impact of the breach.

The baji2222 platform integrates with third-party services — including payment processors, game software providers, and identity verification partners — as described in Section 4 of this Privacy Policy. Each of these third-party services operates under its own privacy policy and data protection framework.

baji2222 does not control and is not responsible for the privacy practices of third-party providers. We select our partners carefully and require all data processors to operate under data processing agreements that mandate compliance with applicable data protection standards. However, once data is transferred to a third-party processor for its specific purpose, that provider's own privacy policy governs how it handles that data.

We recommend reviewing the privacy policies of payment providers you use — such as bKash, Nagad, and Rocket — as their handling of your mobile wallet data is governed by their own terms, not by this Privacy Policy.

Game content on baji2222 is delivered via iFrames from licensed provider platforms (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, etc.). When you load a game, a session token is passed to the provider's platform to authenticate your session. The provider may collect technical data about your gaming session as part of operating the game. This data is governed by the provider's own privacy documentation.

baji2222 reviews and updates this Privacy Policy periodically to reflect changes in our data processing practices, updates to applicable law, or enhancements to the platform. When we make material changes to this Privacy Policy, we will:

• Update the "Last Updated" date at the top of this page.
• Notify registered account holders via email to the address associated with their baji2222 account, where the change is material and affects their rights.
• Display a notice on the baji2222 platform for at least 14 days following a material update.

Non-material changes — such as minor corrections, clarifications, or formatting updates that do not affect how your data is processed — may be made without individual notification. The current version of this Privacy Policy is always available at baji2222/privacy-policy and represents the complete and current statement of our privacy practices.

Your continued use of the baji2222 platform following the publication of an updated Privacy Policy constitutes your acknowledgement of the changes. If you object to any amendment, you have the right to close your account and request deletion of your personal data (subject to applicable legal retention requirements) by contacting us at support@baji2222.

If you have any questions, concerns, or requests relating to this Privacy Policy or to how baji2222 handles your personal data, please contact us using the details below. All privacy-related correspondence is handled in English and managed by our data protection team.

• Email: support@baji2222 — use the subject line "Privacy Enquiry" or "Privacy Rights Request" for fastest routing to the correct team.
• Live Chat: Available 24 hours a day, 7 days a week, directly from within your baji2222 account dashboard. For general privacy questions and urgent account data concerns.

We aim to acknowledge all privacy-related enquiries within 72 hours of receipt (Bangladesh Standard Time, UTC+6) and to provide a substantive response within 30 calendar days. Complex requests — particularly those involving data subject access, erasure of large data sets, or cross-provider data tracing — may take the full 30-day period.

baji2222 takes all privacy concerns seriously. If you are unsatisfied with how we have handled your enquiry or privacy rights request, you have the right to escalate your complaint to the relevant data protection authority or supervisory body in your jurisdiction.