baj9 Privacy Policy

This Privacy Policy ("Policy") describes how baj9 ("we", "us", "our") collects, processes, stores, and protects personal data provided by users ("you", "your", "Player") when accessing or using the baj9 platform at https://baj9.app. This Policy forms part of our overall Terms & Conditions, which you should read alongside this document. By creating an account or using any part of the baj9 platform, you acknowledge that you have read and understood this Policy.

baj9 is committed to handling all personal data with care, in accordance with internationally recognised data protection principles including purpose limitation, data minimisation, accuracy, storage limitation, and integrity and confidentiality. We update this Policy whenever our data practices change and will notify registered players of material changes via their registered email address.

1. Information We Collect

baj9 collects personal data through several channels: directly from you during registration and account management, automatically when you interact with the platform, and from third-party identity verification and payment service providers. The following table summarises the categories of data we collect and the circumstances in which each category arises.

1.1 Data You Are Not Required to Provide

baj9 does not ask for or require sensitive personal data such as racial or ethnic origin, religious beliefs, political opinions, health data, or biometric identifiers. If you voluntarily include such information in correspondence with our support team, it will be treated with the highest level of confidentiality and will not be used for any purpose other than responding to your query.

1.2 Data from Third Parties

In certain circumstances, baj9 may receive personal data about you from third parties, including identity verification service providers used in our KYC process, payment processors such as bKash and Nagad, and fraud-detection and anti-money-laundering screening services. Data received from these sources is used solely for the purposes of verifying your identity, processing your transactions, and maintaining the security and integrity of the baj9 platform.

2. How We Use Your Data

baj9 uses the personal data we collect for the following specific and limited purposes:

• Account Creation and Management: To register your account, verify your identity, manage your profile, and administer your login credentials securely.
• Service Delivery: To allow you to access and use all baj9 gaming and sports betting features, including Andar Bahar, cricket betting, live casino games, and slot games.
• Payment Processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, and bank transfer, and to maintain accurate BDT transaction records for your account.
• Legal and Regulatory Compliance: To fulfil our Know Your Customer (KYC) and anti-money-laundering (AML) obligations, including verifying age (18+), identity, and the source of funds where required.
• Platform Security: To detect, investigate, and prevent fraudulent transactions, unauthorised access, multi-accounting, and other prohibited activities outlined in our Terms & Conditions.
• Responsible Gaming: To monitor gameplay patterns for indicators of problem gambling and to enforce self-exclusion, deposit limits, and cooling-off periods requested by players. See our Responsible Gaming page for full details.
• Customer Support: To respond to your queries, complaints, and dispute submissions, and to maintain records of those communications for quality and compliance purposes.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates — but only where you have provided explicit consent to receive such communications. You may withdraw consent at any time via your account settings or by emailing [email protected].
• Platform Improvement: To analyse anonymous usage data and identify technical issues, performance bottlenecks, and opportunities to improve the overall baj9 user experience.

3. Legal Basis for Processing

baj9 processes personal data on the following legal bases, each of which is applied only where appropriate to the specific processing activity in question:

• Contractual Necessity: Processing your identity data, contact data, and financial data is necessary for the performance of the contract between you and baj9 — that is, providing you with access to the platform and enabling you to deposit, play, and withdraw in BDT.
• Legal Obligation: Processing for KYC verification, AML screening, age verification (18+), and record-keeping is required by applicable regulations governing the operation of online gaming platforms and financial services.
• Legitimate Interests: Processing for fraud prevention, security monitoring, platform analytics, and the detection of prohibited activities is carried out on the basis of baj9's legitimate interests in maintaining a safe and fair gaming environment. These interests are balanced against and do not override your privacy interests.
• Consent: Processing for marketing communications and for optional cookies beyond strictly necessary functionality is carried out only where you have given explicit, freely given, specific, and informed consent. You may withdraw consent at any time without detriment to your account status.

4. Data Sharing & Disclosure

baj9 does not share your personal data with third parties except in the specific and limited circumstances described below. All third-party service providers with whom data is shared are contractually required to maintain appropriate data security standards and to use personal data only for the purposes for which it was shared.

4.1 Service Providers

baj9 engages trusted third-party technology and service providers to operate certain aspects of the platform, including payment processing (bKash, Nagad, Rocket, Upay, and bank transfer partners), identity verification services, cloud hosting and infrastructure providers, fraud detection systems, and customer support software platforms. These providers act as data processors on our behalf and are bound by strict data processing agreements.

4.2 Game Content Providers

The baj9 platform integrates games and live casino content from third-party providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive limited technical data (such as a pseudonymous player session identifier) required to load and run the game content. They do not receive your full personal identity or financial data.

4.3 Legal and Regulatory Disclosure

baj9 may disclose personal data to law enforcement agencies, regulatory bodies, courts, or other governmental authorities where required to do so by applicable law, court order, or regulatory instruction. We will notify you of such disclosure requests where legally permitted to do so.

4.4 Business Transfer

In the event of a merger, acquisition, or sale of all or a substantial part of baj9's business assets, personal data held by baj9 may form part of the transferred assets. You will be notified via your registered email address before your data is transferred and becomes subject to a different privacy policy.

5. Cookies & Tracking Technologies

baj9 uses cookies and similar technologies (such as local storage and session tokens) on the baj9 website. Cookies are small text files placed on your device that help the platform remember your preferences and deliver a consistent, secure experience.

5.1 Types of Cookies We Use

5.2 Managing Cookies

You can control and delete cookies through your web browser settings at any time. Please note that disabling strictly necessary cookies will prevent you from logging into your baj9 account. Disabling analytics cookies will not affect your ability to use the platform but will limit our ability to improve the service based on usage patterns. baj9 does not use cookies for third-party advertising or behavioural profiling.

6. Data Retention

baj9 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Active account data (identity, contact, financial): Retained for the duration of your account's active status plus a minimum of five (5) years following account closure, to comply with AML and financial record-keeping obligations.
• KYC verification documents: Retained for five (5) years from the date of submission or account closure, whichever is later, in accordance with applicable AML regulations.
• Transaction records: Retained for a minimum of five (5) years from the date of the transaction, as required for financial compliance and dispute resolution.
• Customer support communications: Retained for three (3) years from the date of the last communication in a support thread, unless related to an unresolved legal dispute.
• Analytics and usage data: Retained in anonymised or aggregated form for up to two (2) years, after which it is deleted or further anonymised such that it can no longer be linked to any individual.
• Marketing consent records: Retained for the duration of your account plus three (3) years to demonstrate regulatory compliance with consent obligations.

When the applicable retention period expires, baj9 will securely delete or anonymise your personal data in accordance with our internal data disposal procedures. Where deletion is not immediately possible due to technical constraints (e.g., backup systems), data is quarantined from active use pending scheduled deletion.

7. Your Privacy Rights

As a baj9 player, you hold the following rights with respect to your personal data. To exercise any of these rights, submit a written request to [email protected] from your registered email address. baj9 will acknowledge your request within two (2) business days and provide a full response within thirty (30) calendar days. In complex cases, this period may be extended by a further thirty days, of which you will be notified.

• Right of Access: You have the right to request a copy of all personal data baj9 holds about you, together with information about how that data is being used.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data held in your baj9 account. Minor corrections (e.g., email address, phone number) can be made directly in your account settings.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected. This right is subject to baj9's legal obligations to retain certain data for AML and financial compliance — we will inform you of any data that cannot be deleted and explain the legal basis for retention.
• Right to Restrict Processing: You may request that baj9 restricts the processing of your personal data in certain circumstances, such as while a rectification request is being resolved or while you contest the legal basis for a particular processing activity.
• Right to Data Portability: You may request that baj9 provides your personal data in a commonly used, machine-readable format so that you can transfer it to another service provider.
• Right to Object: You have the right to object to processing based on legitimate interests at any time. baj9 will cease that processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing emails), you may withdraw consent at any time via your account settings or by emailing [email protected]. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

8. Data Security

baj9 takes the security of your personal data seriously and implements a comprehensive set of technical and organisational measures to protect against unauthorised access, accidental loss, destruction, or disclosure. Our security programme includes the following key controls:

• Transport Encryption: All data exchanged between your device and baj9 servers is encrypted in transit using 256-bit SSL/TLS encryption. This applies to all pages of the baj9 website, including account login, payment processing, and document uploads.
• Data at Rest Encryption: Personal data and sensitive financial records stored on baj9 servers are encrypted at rest using AES-256 encryption, ensuring that data remains protected even in the event of a physical security incident.
• Access Controls: Access to personal data within baj9's internal systems is restricted on a strict need-to-know basis. All staff who handle player data undergo privacy and data security training and are bound by confidentiality obligations.
• Penetration Testing and Audits: The baj9 platform undergoes regular security assessments and penetration testing by independent third-party security professionals to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: baj9 maintains a documented data breach response procedure. In the event of a confirmed data breach that poses a risk to your rights and freedoms, baj9 will notify affected players via their registered email address within 72 hours of becoming aware of the breach, and will take all reasonable steps to contain and remediate the incident.
• Payment Security: baj9 does not store full payment card details on its own servers. All card payment data is tokenised and processed by PCI-DSS compliant payment processors. Mobile financial service transactions via bKash, Nagad, and Rocket are processed through those providers' own secure systems.

baj9 does not guarantee that the platform will be free from every conceivable security threat — no digital platform can make such a guarantee. However, we commit to maintaining security standards consistent with industry best practice and to responding promptly and transparently to any security incident that affects your personal data.

This Privacy Policy, together with the Terms & Conditions and the Responsible Gaming Policy, forms the complete framework governing your relationship with baj9. If you have any questions, concerns, or requests relating to this Policy or to how baj9 handles your personal data, please contact us at [email protected].