bajji9 Privacy Policy

1. Data Controller & Scope

This Privacy Policy ("Policy") is issued by bajji9 ("the Platform", "we", "us", "our") and applies to all personal data collected from individuals ("you", "the User") who access or use any part of the bajji9 website at https://bajji9.net, including the account registration system, game lobby, sports betting interface, payment processing pages, customer support channels, and any related digital properties operated by bajji9.

bajji9 acts as the data controller in respect of the personal information it collects and processes in connection with the platform. As data controller, bajji9 determines the purposes and means by which personal data is processed and accepts the responsibilities that role carries under applicable data protection principles.

This Policy covers all data processing activities undertaken by bajji9 in connection with the services it provides to players based in Bangladesh and other jurisdictions where the platform operates. By registering an account on bajji9 or by continuing to use the platform after this Policy has been updated, you acknowledge that you have read and understood this Policy and that you consent to the collection and processing of your personal data as described herein.

This Policy should be read alongside bajji9's Terms & Conditions and Responsible Gaming Policy, both of which form part of the overall legal framework governing your relationship with the platform.

2. Information We Collect

bajji9 collects personal data through several distinct channels: directly from you when you register an account or interact with the platform; automatically through technical systems as you use the website; and in limited cases from third-party sources such as payment processors and identity verification services. The categories of data bajji9 collects are described below.

Registration & Account Data

When you create a bajji9 account, you provide the following information, which bajji9 stores and processes as part of your account record:

• Full legal name as it appears on your government-issued identification document.
• Date of birth — used to verify that you meet bajji9's 18+ age requirement.
• Residential address, including district, city, and postcode (e.g., Dhaka, Chittagong, Sylhet, Khulna, or other Bangladeshi cities).
• Email address — used for account communications, promotional messages (where opted in), and account recovery.
• Mobile phone number — used for account security notifications and payment verification via bKash, Nagad, or Rocket.
• Username and encrypted password credentials.

Identity Verification (KYC) Data

As part of bajji9's Know Your Customer (KYC) obligations, you may be required to submit one or more of the following documents:

• Bangladeshi National Identity Card (NID) — front and back scan or photograph.
• Valid passport bio-data page.
• Proof of residential address — utility bill, bank statement, or government correspondence dated within the past 90 days.
• Source-of-funds documentation — for accounts flagged under bajji9's anti-money-laundering screening procedures.

KYC documents are processed and stored securely and are used exclusively for identity verification, age confirmation, and fraud prevention purposes. bajji9 does not use KYC documents for marketing or profiling purposes.

Transaction & Payment Data

bajji9 records all financial transactions conducted through a player's account, including deposits via bKash, Nagad, Rocket, Upay, and supported Bangladeshi bank channels, as well as withdrawal requests and their processing status. Specific payment data such as bKash wallet numbers and bank account references are stored only to the extent necessary to process transactions and comply with anti-money-laundering record-keeping obligations. bajji9 does not store full card numbers for card-based payment methods; card transactions are tokenised by the payment processor.

Gameplay & Behavioural Data

bajji9 automatically records data about how you use the platform, including the games you play, bet amounts and outcomes, session duration, device type, IP address, browser type and version, and the pages you visit within the bajji9 site. This data is used for responsible gaming monitoring, fraud detection, platform optimisation, and statistical analysis.

3. How We Use Your Data

bajji9 processes your personal data only for the purposes described in this Policy and only where a lawful basis for that processing exists. The table below summarises the primary processing activities bajji9 undertakes, the data categories involved, and the lawful basis for each.

bajji9 does not use automated decision-making or profiling in a manner that produces legal or similarly significant effects on users, except where strictly required to fulfil its AML and responsible gaming obligations — in which case any automated flagging is reviewed by a human member of bajji9's compliance team before any account action is taken.

Where bajji9 relies on your consent as the lawful basis for processing — for example, to send you promotional emails about BPL season offers, Eid specials, or new game launches — you may withdraw that consent at any time by updating your communication preferences in your account settings or by contacting [email protected]. Withdrawal of consent does not affect the lawfulness of any processing conducted prior to that withdrawal.

4. Cookies & Tracking Technologies

bajji9 uses cookies and similar tracking technologies (including local storage objects and session tokens) on its website. Cookies are small text files placed on your device that help bajji9 deliver a consistent, secure, and personalised experience to every player. The categories of cookies bajji9 uses are described below.

Strictly Necessary Cookies

These cookies are essential for the bajji9 website to function correctly. They enable core platform capabilities such as maintaining your logged-in session, preserving your game state across page loads, and processing secure payment transactions. Strictly necessary cookies cannot be disabled without breaking core platform functionality. No consent is required for their placement.

Functional Cookies

Functional cookies allow bajji9 to remember your preferences — such as your chosen language setting, last-visited game category, and responsible gaming limit settings — and to provide enhanced features based on your usage patterns. These cookies are retained for the duration of your active session and, in some cases, for up to 30 days after your last login to restore your preferences on your next visit.

Analytics Cookies

bajji9 uses analytics cookies to understand how players interact with the platform — which game categories are most popular, where users experience friction in the deposit flow, and how navigation patterns change following a platform update. Analytics data is aggregated and does not identify individual users. bajji9 uses industry-standard analytics tools for this purpose; the data collected by these tools is processed in accordance with their respective data processing agreements with bajji9.

Security Cookies

Security cookies help bajji9 detect and prevent fraudulent activity, including bot-driven login attempts, credential stuffing attacks, and unusual account access patterns. These cookies are strictly necessary for platform security and are placed without requiring user consent.

5. Data Sharing & Third Parties

bajji9 does not sell, rent, or otherwise commercially transfer your personal data to third-party advertisers, data brokers, or marketing networks under any circumstances. bajji9 shares personal data with third parties only in the limited circumstances described below, and only to the extent strictly necessary for the stated purpose.

Payment Processing Partners

bajji9 shares transaction-relevant data (including your account reference, transaction amount in ৳ Taka, and payment channel identifier) with its payment processing partners — including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank — as required to execute deposit and withdrawal transactions on your behalf. These partners process your payment data under their own privacy policies and are independently responsible for compliance with applicable financial data protection regulations.

Identity Verification Providers

Where bajji9 engages a third-party identity verification service to assist with KYC document review, your submitted identity documents may be shared with that provider for the sole purpose of verification. bajji9 ensures that any such provider operates under a contractual obligation to process your KYC data exclusively for verification purposes and to maintain security standards no lower than those bajji9 applies to its own data processing operations.

Game Software Providers

bajji9's game library is powered by third-party game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. When you play a game provided by one of these studios, technical gameplay data (such as session token, game round identifier, bet amount, and outcome) is transmitted to the relevant game server to render the game and record the result. Game providers receive only the technical data required to deliver the game and do not receive your full personal profile.

Legal & Regulatory Disclosure

bajji9 may disclose personal data to law enforcement agencies, regulatory bodies, financial intelligence units, or other government authorities where it is legally required to do so — for example, in response to a valid court order, a statutory disclosure obligation under applicable anti-money-laundering legislation, or an official investigation into fraud or financial crime. bajji9 will disclose only the data specifically required by the relevant legal instrument and will, where permitted by law, notify the affected account holder of such a disclosure.

6. Data Retention & Security

Retention Periods

bajji9 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention principles apply:

• Active account data — retained for the lifetime of your bajji9 account and for a period of five years following voluntary account closure, in accordance with standard financial record-keeping requirements.
• KYC and identity documents — retained for a minimum of five years following the conclusion of the account relationship, as required under applicable anti-money-laundering regulations.
• Transaction records — retained for five years from the date of each transaction.
• Gameplay and session logs — retained for up to two years from the date of the session, after which they are aggregated and anonymised for statistical purposes.
• Customer support communications — retained for three years from the date of the last communication in the relevant support thread.
• Marketing consent records — retained for the duration of your consent and for one year following its withdrawal, to demonstrate compliance with consent obligations.

When personal data is no longer required under the above retention schedule, bajji9 securely deletes or irreversibly anonymises it using industry-standard data destruction methods.

Security Measures

bajji9 applies a layered set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the bajji9 platform — every page, every transaction, every login.
• Encryption at rest for sensitive data fields including passwords (hashed using industry-standard bcrypt or equivalent), KYC document files, and payment references.
• Role-based access controls ensuring that bajji9 staff can access personal data only to the extent required for their specific job function.
• Regular internal security audits and penetration testing of the bajji9 platform infrastructure.
• Incident response procedures that include prompt notification to affected users in the event of a data breach that is likely to result in a risk to their rights and freedoms.
• Two-factor authentication (2FA) options for player accounts to reduce the risk of unauthorised access via compromised credentials.

7. Your Rights Over Your Data

As a bajji9 account holder, you have a set of rights in relation to the personal data bajji9 holds about you. bajji9 is committed to facilitating the exercise of these rights promptly and without undue friction. Your rights are described below.

Right of Access

You have the right to request a copy of the personal data bajji9 holds about you. Upon receipt of a verified access request, bajji9 will provide you with a structured summary of your account data, transaction history, and any other personal data held in your name, within 30 calendar days.

Right to Rectification

If any personal data bajji9 holds about you is inaccurate or incomplete, you have the right to request its correction. For basic account details such as your registered address or contact number, you may update this information directly through your account settings. For data that cannot be self-corrected — such as your registered name or date of birth — please contact [email protected] with supporting documentation.

Right to Erasure

You have the right to request the deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose for which it was collected and no overriding legal obligation requires bajji9 to retain it. Please note that bajji9's AML and KYC record-keeping obligations under applicable financial regulations mean that certain categories of data (particularly transaction records and identity verification documents) must be retained for the legally mandated period regardless of an erasure request.

Right to Restriction of Processing

You have the right to request that bajji9 restrict the processing of your personal data in specific circumstances, such as where you contest the accuracy of the data or where you have objected to processing based on legitimate interests and that objection is pending review.

Right to Data Portability

Where bajji9 processes your data on the basis of your consent or on the basis of a contract with you, and that processing is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format, and to request that bajji9 transmit that data directly to another data controller where technically feasible.

Right to Object

You have the right to object to bajji9's processing of your personal data where that processing is based on bajji9's legitimate interests. bajji9 will cease that processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or where the processing is required for the establishment, exercise, or defence of legal claims. You have an unconditional right to object to the use of your data for direct marketing purposes, which can be exercised at any time via your account settings or by contacting [email protected].

How to Exercise Your Rights

To exercise any of the rights described above, please contact bajji9's data team at [email protected] with the subject line "Data Rights Request" and a clear description of the right you wish to exercise. bajji9 will verify your identity before processing any data rights request to ensure that personal data is not disclosed to, modified by, or deleted at the request of, an unauthorised third party. bajji9 will respond to all verified data rights requests within 30 calendar days of receipt.

8. Contact & Privacy Queries

If you have any questions, concerns, or complaints about this Privacy Policy or about the way bajji9 handles your personal data, please contact the bajji9 data team using the details below. bajji9's support team is available in English around the clock to respond to privacy-related queries.

bajji9 takes all privacy complaints seriously. If you submit a complaint, bajji9 will acknowledge receipt within two business days, investigate the matter thoroughly, and provide you with a written response detailing the outcome of the investigation and any remedial action taken.

If you are not satisfied with bajji9's response to your privacy complaint, you may have the right to refer the matter to the relevant data protection supervisory authority in your jurisdiction. bajji9 encourages users to contact it directly in the first instance, as the majority of privacy concerns can be resolved at this stage without formal escalation.

bajji9 reserves the right to update this Privacy Policy from time to time to reflect changes in its data processing practices, applicable law, or platform functionality. Where material changes are made, bajji9 will notify registered users via the email address associated with their account and will update the "Last Updated" date at the top of this page. Continued use of the bajji9 platform following the publication of an updated Privacy Policy constitutes acceptance of the revised terms.