baje Privacy Policy

1 Introduction

This Privacy Policy ("Policy") describes how baje ("we", "us", "our"), operating through the website at baje.lat, collects, uses, discloses, and safeguards the personal data of individuals ("you", "your", "the User") who register for or use the baje platform, including its casino games, sportsbook, live dealer products, payment services, and customer support functions.

baje is committed to handling your personal data with transparency, integrity, and care. We recognise that users of an online gambling platform share particularly sensitive information — including financial data and identity documents — and we take that responsibility seriously. This Policy is written in plain, accessible English so that you understand exactly how your information is handled.

By registering a baje account or continuing to use the baje platform, you acknowledge that you have read and understood this Policy and that you consent to the collection and use of your personal data as described herein. If you do not agree with any part of this Policy, you should discontinue use of the platform and contact us to close your account.

This Policy should be read alongside the baje Terms & Conditions, which govern the overall legal relationship between you and baje.

2 Personal Data We Collect

baje collects personal data from you through several channels. The categories of data we collect are described in the table below:

2.1 Data You Provide Voluntarily

The majority of your personal data is provided directly by you when you register an account, complete identity verification, make a deposit, contact our support team, or update your profile settings. Providing accurate and current information is a condition of using the baje platform; deliberately providing false data is a breach of the baje Terms & Conditions.

2.2 Data Collected Automatically

When you access the baje website, certain Technical Data and Usage Data is collected automatically by our servers and analytics systems. This data is primarily used to ensure platform security, diagnose technical issues, detect fraudulent activity, and improve the overall user experience. Automatic data collection begins as soon as you load any page on baje.lat.

3 How We Use Your Personal Data

baje uses your personal data only for the purposes listed below. We do not use your data in ways that are incompatible with the purposes for which it was originally collected.

• Account creation and management: To register your account, verify your identity, and manage your ongoing relationship with the baje platform.
• Transaction processing: To facilitate deposits, withdrawals, and the crediting of winnings to your account via bKash, Nagad, Rocket, Upay, Visa, and Mastercard.
• Identity verification (KYC): To comply with our anti-money-laundering obligations and to verify that users meet the minimum age requirement of 18 years.
• Fraud prevention and security: To detect, investigate, and prevent suspicious activity, unauthorised account access, and any form of platform abuse or financial crime.
• Customer support: To respond to your enquiries, resolve account issues, and communicate updates relevant to your account or transactions.
• Platform improvement: To analyse usage patterns, identify technical issues, test new features, and continually improve the quality of the baje product.
• Responsible gaming: To monitor betting behaviour, identify indicators of problem gambling, and administer responsible gaming tools such as deposit limits and self-exclusion.
• Marketing communications: To send promotional offers, bonus notifications, and platform news to users who have opted in to receive such communications. You may opt out at any time.
• Legal and regulatory compliance: To fulfil any obligations imposed upon baje by applicable law, including responding to lawful requests from authorities.

4 Legal Basis for Processing

baje processes your personal data on one or more of the following legal bases, depending on the specific purpose of processing:

• Contractual necessity: Processing that is necessary to perform our contract with you — including operating your account, processing transactions, and providing platform services — is carried out on the basis that it is required to fulfil our contractual obligations to you.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and product analytics is carried out on the basis of baje's legitimate interest in operating a safe, secure, and well-functioning platform. We balance this against your privacy interests in each case.
• Legal obligation: Processing for KYC identity verification, anti-money-laundering checks, and any disclosures required by lawful authority is carried out on the basis of compliance with applicable legal obligations.
• Consent: Processing for direct marketing communications is carried out on the basis of your freely given consent. You may withdraw this consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

5 Data Sharing & Disclosure

5.1 Who We Share Your Data With

baje does not sell your personal data. We share personal data only with the following categories of third parties, and only to the extent necessary for the stated purpose:

• Payment service providers: bKash, Nagad, Rocket, Upay, and card processing partners receive the minimum data required to authorise and process your transactions. These providers operate under their own privacy policies and are independently responsible for data they hold.
• Identity verification providers: Third-party KYC and anti-money-laundering screening services receive copies of identity documents and personal details for the purpose of verifying your identity and screening against financial crime watchlists.
• Game content providers: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive technical session data (such as a pseudonymous player token and game session identifiers) to deliver their game content within the baje platform. These providers do not receive your full identity information.
• IT infrastructure and hosting providers: Cloud hosting and server infrastructure partners may process personal data as part of their service delivery. These partners are engaged under contractual arrangements that require them to handle data securely and only on baje's instruction.
• Fraud prevention and analytics services: Specialist fraud detection and platform analytics providers may receive Technical Data and Usage Data in aggregated or pseudonymised form to assist with security monitoring and product improvement.
• Law enforcement and regulatory authorities: baje may disclose personal data to competent authorities where required to do so by applicable law, by court order, or where disclosure is necessary to protect against fraud, money laundering, or other serious crime.

5.2 International Data Transfers

Some of the third-party providers listed above may be located outside Bangladesh. Where personal data is transferred internationally, baje takes reasonable steps to ensure that appropriate safeguards are in place, including contractual protections, to maintain a standard of data protection equivalent to that applied within our own systems.

6 Cookies & Tracking Technologies

6.1 What Are Cookies?

Cookies are small text files placed on your device by a website you visit. They are widely used to make websites function efficiently, remember your preferences, and provide analytical information to site operators. The baje platform uses cookies and similar tracking technologies (such as pixel tags and local storage objects) to deliver and improve its services.

6.2 Types of Cookies Used by baje

• Strictly necessary cookies: Required for the platform to function. These include session authentication cookies that keep you logged in during an active session. These cannot be disabled without breaking core platform functionality.
• Functional cookies: Used to remember your preferences such as language settings, preferred payment method, and display options. These improve your experience but are not essential.
• Analytics cookies: Used to collect aggregated, anonymised information about how users interact with the baje platform. This data informs product improvements and is not used to identify individual users.
• Security cookies: Used to detect and prevent fraudulent activity, bot traffic, and unauthorised access attempts. These are essential for platform security.

6.3 Managing Cookies

You can control non-essential cookies through your browser settings. Most modern browsers allow you to view, block, or delete cookies at any time. Please note that disabling certain cookies may affect the functionality of the baje platform, including your ability to stay logged in or access certain game types. Instructions for managing cookies in popular browsers are available through the relevant browser's help documentation.

7 Data Security

baje implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security measures include, but are not limited to:

• 256-bit SSL/TLS encryption for all data transmitted between your browser or app and our servers.
• Encrypted storage of account credentials; passwords are hashed using a one-way cryptographic function and are never stored or transmitted in plain text.
• Role-based access controls ensuring that only authorised personnel with a legitimate need can access personal data.
• Continuous security monitoring and intrusion detection systems on all production infrastructure.
• Regular security assessments and vulnerability testing of platform components.
• Physical and logical access controls on data storage environments.

Despite these measures, no online platform can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights or interests, baje will take prompt remedial action and notify affected users in accordance with applicable obligations.

You also play an important role in keeping your account secure. Use a strong, unique password for your baje account, enable any two-factor authentication options available, and contact [email protected] immediately if you suspect that your account has been compromised.

8 Data Retention

baje retains your personal data for as long as is necessary to fulfil the purposes described in this Policy, or as required by applicable legal and regulatory obligations. The following general retention periods apply:

• Account and identity data: Retained for the duration of your active account relationship with baje, and for a minimum of five (5) years following account closure to satisfy anti-money-laundering record-keeping requirements.
• Transaction records: Retained for a minimum of five (5) years from the date of the transaction, in accordance with financial record-keeping obligations.
• KYC verification documents: Retained for a minimum of five (5) years following the completion of the verification process, or five (5) years after account closure, whichever is later.
• Customer support communications: Retained for two (2) years from the date of the last interaction, unless the communication forms part of an ongoing dispute or investigation.
• Technical and usage data: Typically retained in identifiable form for up to twelve (12) months, after which it may be anonymised and retained for analytical purposes without time limit.
• Marketing consent records: Retained for as long as you have an active account and for one (1) year following account closure as evidence of consent.

At the end of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where data cannot be immediately deleted due to technical constraints, it is isolated from active processing until deletion is possible.

9 Your Data Rights

As a user of the baje platform, you have the following rights in relation to your personal data. To exercise any of these rights, please contact us at [email protected] with the subject line "Data Rights Request" and we will respond within a reasonable timeframe.

• Right of access: You have the right to request a copy of the personal data that baje holds about you, along with information about how it is used and with whom it is shared.
• Right to rectification: You have the right to request that inaccurate or incomplete personal data held by baje be corrected or completed without undue delay.
• Right to erasure: In certain circumstances — for example, where your data is no longer necessary for the purpose for which it was collected, or where you withdraw consent on which processing is based — you may request that baje delete your personal data. This right is subject to overriding legal obligations that may require us to retain certain data.
• Right to restrict processing: You may request that baje restrict the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or object to our processing on legitimate interest grounds, pending resolution of that objection.
• Right to data portability: Where processing is based on your consent or on contractual necessity and is carried out by automated means, you may request that baje provide your personal data in a structured, commonly used, machine-readable format.
• Right to withdraw consent: Where processing is based on your consent (such as for marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that occurred before the withdrawal.
• Right to object: You have the right to object to processing of your personal data that is carried out on the basis of legitimate interests, including profiling. baje will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.

10 Children's Privacy

The baje platform is strictly intended for adults aged 18 years and above. baje does not knowingly collect personal data from individuals under the age of 18. If you are under 18, you must not use the baje platform or provide any personal data through it.

If baje discovers or is informed that it has collected personal data from an individual who is under 18 years of age, that data will be deleted promptly and the associated account will be closed immediately. Any deposits made by an underage user will be returned and any winnings will be forfeited in line with the baje Terms & Conditions.

Parents and guardians who believe that their child may have registered an account or provided data through the baje platform are encouraged to contact the support team at [email protected] without delay so that the matter can be resolved quickly.

11 Third-Party Services & Links

The baje platform integrates game content from third-party providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. While these games are delivered within the baje interface, the game engines themselves are operated by the respective studios. baje is not responsible for the data practices of these third-party studios in respect of any data they independently collect through their game engines.

Payment processing for bKash, Nagad, Rocket, Upay, Visa, and Mastercard transactions is handled via the respective payment providers' own secure systems. When you initiate a payment, you are interacting with that provider's infrastructure. Please refer to the privacy policy of your payment provider for information about how they handle your financial data.

baje does not include links to external third-party websites on its platform other than as necessary for operational purposes. Where such links exist, baje is not responsible for the privacy practices or content of those external sites, and this Policy does not apply to them.

12 Changes to This Privacy Policy

baje reserves the right to update this Privacy Policy from time to time to reflect changes in our data practices, platform features, or applicable legal requirements. When material changes are made, we will notify registered users by sending a notice to the email address associated with their baje account at least seven (7) days before the updated Policy takes effect.

The most current version of this Privacy Policy will always be available at baje.lat/privacy-policy, and the effective date at the top of the document will be updated accordingly. We encourage you to review this Policy periodically. Your continued use of the baje platform after the effective date of any revised Policy constitutes your acceptance of the updated terms.

13 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way baje handles your personal data, please contact the baje support team. We are available 24 hours a day, 7 days a week, aligned to Bangladesh Standard Time (BST, UTC+6).

Email: [email protected]

When submitting a data rights request, please include your registered account username, the nature of your request, and any relevant details to help us locate and process your data accurately. baje will acknowledge your request promptly and aim to resolve it within a reasonable period.