biji baji Privacy
Policy

When you register an account, complete the biji baji Login process, make a deposit, place a bet, or contact our support team, biji baji may collect the following categories of personal data:

biji baji does not intentionally collect sensitive categories of personal data (such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data) and requests that Account Holders refrain from including such information in any communications sent to the support team.

If you are a visitor to biji baji who has not yet registered an account, biji baji may still collect Technical Data (IP address, browser type, session data) through standard server logging and first-party analytics in order to monitor platform performance, detect fraudulent access attempts, and improve the user experience.

biji baji processes personal data collected from Account Holders and platform visitors for the following clearly defined purposes:

• Account Registration & Verification: To create and maintain your biji baji account, verify your identity (KYC), confirm you meet the 18+ age requirement, and enable the biji baji Login process securely.
• Service Delivery: To facilitate sports betting (including BPL, T20, IPL, and Bangladesh Tigers markets), casino gaming (live dealer tables, slots, fishing games), and all associated platform features.
• Payment Processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, Visa, and Mastercard, and to maintain accurate transaction records denominated in BDT.
• Bonus & Promotions Administration: To determine eligibility for welcome bonuses (up to ৳20,000), seasonal promotions (BPL, Eid, Pohela Boishakh offers), and loyalty rewards, and to track wagering requirements.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, bonus abuse, money laundering, and unauthorised account access. IP addresses and device fingerprints are used as part of biji baji's real-time risk monitoring system.
• Responsible Gaming Compliance: To monitor account activity for indicators of problem gambling, enforce self-exclusion periods and deposit limits, and proactively reach out to Account Holders who may need support — consistent with the commitments described on the Responsible Gaming page.
• Legal & Regulatory Compliance: To fulfil any legal obligations applicable to biji baji's operations, including record-keeping, responding to lawful requests from competent authorities, and enforcing the Terms & Conditions.
• Customer Support: To respond to enquiries, complaints, and account-related requests submitted to [email protected], and to maintain a record of communications for quality assurance and dispute resolution purposes.
• Platform Improvement & Analytics: To analyse aggregated, anonymised usage data in order to improve platform performance, game selection, payment options, and the overall user experience for Account Holders based in Dhaka, Chittagong, Sylhet, Khulna, and across Bangladesh.
• Marketing Communications: To send promotional emails or SMS notifications about new bonuses, seasonal offers, and platform updates — but only where you have explicitly opted in to receive such communications. You may withdraw marketing consent at any time by contacting [email protected].

biji baji will never use your personal data to make automated decisions that produce significant legal effects without human review. All account suspension and fraud investigation decisions involve review by a qualified member of the biji baji compliance team.

biji baji may share your personal data with the following categories of third parties under the conditions described below:

• Payment Service Providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank, Visa, and Mastercard processing partners receive the minimum financial data required to execute deposit and withdrawal transactions. These providers operate under their own privacy policies and PCI-DSS compliance frameworks.
• Game Content Providers: Certified game studios including Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, Play'n GO, Spribe, and Red Tiger may receive a session token and anonymised player identifier to authenticate gameplay sessions. No directly identifying personal data (name, NID, phone number) is transmitted to game studios.
• KYC & Identity Verification Partners: Third-party identity verification services may process document scans and identity data on biji baji's behalf to fulfil KYC obligations. These partners are bound by data processing agreements and are permitted to use your data solely for verification purposes.
• Platform Analytics & Security Vendors: First-party analytics tools and fraud prevention systems may process Technical Data (IP address, device identifiers, session logs) to support platform security and performance monitoring. These tools are configured to respect user privacy and do not share data with advertising networks.
• Legal Authorities: biji baji will disclose personal data to law enforcement agencies, courts, or regulatory bodies when legally required to do so by a valid court order, subpoena, or statutory obligation. biji baji will, where legally permissible, notify affected Account Holders of such disclosures.
• Business Successors: In the event of a merger, acquisition, or sale of all or substantially all of biji baji's assets, Account Holder data may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy. Affected Account Holders will be notified of any such transfer in advance.

All third parties with whom biji baji shares personal data are required to handle that data in accordance with applicable data protection standards and are contractually prohibited from using it for any purpose beyond that for which it was disclosed.

Cookies are small data files placed on your device when you visit a website. biji baji uses the following categories of cookies for the purposes described below:

You may control cookie preferences through your browser settings. Most modern browsers allow you to block or delete cookies at any time. Please note that blocking Strictly Necessary cookies will prevent the biji baji Login process from functioning correctly and will impair your ability to use the platform. Blocking Functional or Analytics cookies will not prevent you from accessing or using biji baji but may affect certain personalisation features.

biji baji does not use cookies to build advertising profiles or to track your activity on third-party websites. The platform does not participate in cross-site data broker networks.

The security of your personal data is a top operational priority for biji baji. The following technical and organisational measures are in place to protect Account Holder data at all times:

• SSL/TLS Encryption in Transit: All data exchanged between your browser or device and biji baji's servers is encrypted using TLS 1.2 or higher. The biji baji platform enforces HTTPS across all pages, including the biji baji Login page, deposit and withdrawal pages, and account settings.
• Encryption at Rest: Sensitive personal data stored in biji baji's database — including identity documents, contact details, and account credentials — is encrypted at rest using AES-256 encryption. biji baji Login passwords are stored as salted cryptographic hashes and are never stored or transmitted in plain text.
• Access Controls: Access to personal data within biji baji's internal systems is restricted on a strict need-to-know basis. Staff members are granted the minimum level of data access required to perform their specific role. All internal data access is logged and subject to periodic audit.
• PCI-DSS Compliant Payment Processing: Full payment credentials (bKash wallet numbers, card numbers) are never stored on biji baji's own servers. Payment processing is handled by PCI-DSS-certified third-party gateway partners who are contractually bound to maintain equivalent security standards.
• Two-Factor Authentication (2FA): Account Holders are encouraged to enable 2FA on their biji baji account to add an additional layer of protection to the biji baji Login process. 2FA via OTP to your registered Bangladesh mobile number is available from the account security settings.
• Fraud Detection Systems: biji baji operates real-time automated fraud detection systems that monitor login patterns, transaction behaviour, and account activity for anomalies. Suspicious activity triggers automated alerts for review by the compliance team.
• Regular Security Reviews: biji baji's platform infrastructure undergoes periodic security assessments to identify and remediate potential vulnerabilities. Critical security patches are applied on an expedited basis.

Despite biji baji's best efforts, no online platform can guarantee absolute security. If you become aware of any security vulnerability or suspect that your biji baji account has been compromised, please contact [email protected] immediately so that biji baji can take prompt protective action.

biji baji retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or for as long as is required to comply with applicable legal, regulatory, and compliance obligations. The following retention periods apply as a general guide:

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised in accordance with biji baji's internal data lifecycle management procedures. Account Holders who request deletion of their data prior to the expiry of any mandatory retention period will be informed of which data categories must be retained and for how long, and the reason for that requirement.

In the event that biji baji is subject to legal proceedings, a regulatory investigation, or a dispute involving an Account Holder, relevant data may be retained beyond the standard retention periods until the matter is fully resolved.

As an Account Holder on biji baji, you hold the following rights in relation to your personal data:

• Right of Access: You have the right to request a copy of the personal data that biji baji holds about you, including your account registration details, transaction history, betting records, and KYC information. biji baji will provide this in a structured, commonly used, machine-readable format where technically feasible.
• Right to Rectification: If any personal data biji baji holds about you is inaccurate or incomplete, you have the right to request that it be corrected. Updates to your registered email, mobile number, or address should be submitted to [email protected] along with supporting documentation where applicable.
• Right to Erasure ("Right to Be Forgotten"): You may request the deletion of your personal data where it is no longer required for the purposes for which it was collected, where you withdraw consent, or where you object to its processing and there is no overriding legitimate interest. Erasure requests will be fulfilled in full for data categories not subject to mandatory retention obligations, and partially fulfilled for those that are — with a clear explanation of what has been retained and why.
• Right to Restriction of Processing: You may request that biji baji temporarily suspend the processing of your personal data while a rectification or objection request is being assessed. During a restriction period, biji baji will continue to store your data but will not actively process it beyond what is strictly necessary.
• Right to Object to Processing: Where biji baji processes your personal data on the basis of legitimate interest (e.g., for marketing communications or certain analytics activities), you have the right to object to that processing at any time. Objecting to marketing processing will result in your removal from all biji baji promotional mailing and SMS lists immediately.
• Right to Data Portability: You may request a machine-readable export of the personal data you have provided to biji baji — such as your account details, betting history, and transaction records — so that you can transfer it to another platform of your choice.
• Right to Withdraw Consent: Where biji baji processes your data on the basis of your consent (e.g., marketing communications, optional analytics), you may withdraw that consent at any time without affecting the lawfulness of processing that took place before withdrawal.

biji baji will not charge a fee for handling data rights requests unless they are manifestly unfounded or excessive. In such exceptional cases, biji baji will notify you of the applicable fee before proceeding.

Please note that exercising certain rights — such as requesting erasure of your account data while you have an active balance or pending bets — may require that all open positions be settled and all withdrawable funds be returned to your nominated payment method before the deletion can be executed.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a concern about how biji baji has handled your personal data, please contact the biji baji support team:

• Email: [email protected] (plain text — not a clickable link)
• Response Time: biji baji acknowledges privacy-related enquiries within 5 business days (Bangladesh Standard Time, UTC+6) and resolves them within 30 calendar days.
• Language: All privacy correspondence should be submitted in English for the fastest possible resolution.

If you are not satisfied with biji baji's response to your privacy complaint, you have the right to escalate the matter to the relevant data protection authority in your jurisdiction. biji baji is committed to cooperating fully with any such authority in the resolution of a complaint.

biji baji reserves the right to amend this Privacy Policy at any time. Material changes — such as new categories of data being collected, new third-party sharing arrangements, or changes to retention periods — will be communicated to Account Holders via the registered email address on file at least 14 days before taking effect. The "Last Updated" date at the top of this Policy will be revised accordingly. Continued use of biji baji after the effective date of any amendment constitutes acceptance of the revised Privacy Policy.

This Privacy Policy should be read alongside the biji baji Terms & Conditions and the Responsible Gaming policy, both of which form part of the complete agreement between biji baji and each Account Holder.