baje Privacy Policy

1 Introduction

This Privacy Policy ("Policy") describes how baje ("baje", "we", "us", or "the Company"), the operator of the online gaming platform accessible at https://baje.vu (the "Platform"), collects, uses, stores, shares, and protects the personal data of individuals who register an account, visit the Platform, or otherwise interact with our services.

We are committed to handling your personal data with transparency, integrity, and care. This Policy has been written in plain English so that every player based in Bangladesh — and anywhere else in the world — can clearly understand how their information is managed.

By creating a baje account or continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy. This Policy forms part of the baje Terms & Conditions and should be read alongside that document. In the event of any conflict between this Policy and the Terms & Conditions, this Policy shall govern with respect to data protection matters.

2 Data We Collect

baje collects personal data through three primary channels: information you provide directly during registration and account use, data generated automatically as you interact with the Platform, and information received from verified third-party sources where necessary for identity or payment verification.

2.1 Information You Provide Directly

• Account Registration Data: Full legal name, date of birth, email address, mobile phone number, and residential address (including city, district, and postal code).
• Identity Verification (KYC) Documents: National Identity Card (NID), passport, driving licence, and proof of address documents submitted to satisfy our Know Your Customer obligations.
• Payment Information: Mobile wallet numbers (bKash, Nagad, Rocket, Upay), bank account details (Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank), and card details (Visa, Mastercard) used for deposit and withdrawal transactions. Full card numbers are not stored by baje — card processing is handled by PCI-DSS compliant payment processors.
• Support Communications: The content of any messages, emails, or live chat conversations you send to the baje support team, including any attachments you submit.
• Responsible Gaming Preferences: Self-imposed deposit limits, loss limits, cooling-off periods, and self-exclusion requests you set through your account.

2.2 Data Generated Automatically

• Device & Technical Data: IP address, browser type and version, operating system, device type, screen resolution, and time zone setting.
• Usage Data: Pages visited, games played, time spent on page, search queries, click paths, session duration, and features accessed within the Platform.
• Transaction Logs: A complete record of deposits, withdrawals, bonus claims, wagers placed, and game outcomes associated with your account.
• Cookie & Tracking Data: Data collected through cookies and similar tracking technologies as described in Section 5 of this Policy.

2.3 Data from Third Parties

• Identity Verification Agencies: Where permitted, baje may verify identity data against third-party databases to confirm the authenticity of documents submitted during KYC.
• Payment Processors: Transaction confirmation data (e.g., payment reference numbers, transaction status) returned by bKash, Nagad, and other payment partners following a deposit or withdrawal.
• Fraud & Risk Screening Services: Data from fraud detection providers used to assess whether account activity is consistent with legitimate player behaviour.

Data Category	Examples	Source
Identity Data	Name, date of birth, NID number	Provided by player
Contact Data	Email address, mobile number, address	Provided by player
Financial Data	bKash number, bank account, card type	Provided by player / payment processor
Transaction Data	Deposits, withdrawals, bets, winnings	Generated on Platform
Technical Data	IP address, browser, device type	Automatically collected
Usage Data	Pages visited, games played, session length	Automatically collected
KYC Documents	NID scan, passport copy, utility bill	Provided by player
Marketing Preferences	Opt-in/opt-out status, communication channel	Provided by player

3 How We Use Your Data

baje processes personal data only for specific, legitimate purposes. We do not use your data in ways that are incompatible with the purposes for which it was originally collected. The primary purposes for which we process personal data are:

• Account Management: Creating and maintaining your baje player account, verifying your identity at registration and during ongoing account reviews, and managing your account preferences and settings.
• Service Delivery: Processing deposits and withdrawals, crediting winnings, applying bonuses, and delivering the full range of gaming products available on the Platform including cricket betting, live casino, and slots.
• Identity Verification (KYC): Verifying that you are who you say you are, confirming that you meet the 21+ age requirement, and ensuring that all payment methods are held in your own name.
• Fraud Prevention & Security: Detecting, investigating, and preventing fraudulent activity, money laundering, collusion, bonus abuse, and other conduct that violates our Terms & Conditions or applicable law.
• Responsible Gaming: Monitoring account activity to identify potential signs of problem gambling, enforcing deposit limits and self-exclusion requests, and making proactive responsible gaming interventions where appropriate.
• Customer Support: Responding to your enquiries, resolving disputes, processing complaints, and providing technical assistance through our 24/7 support team.
• Legal & Regulatory Compliance: Maintaining records required by law, responding to lawful requests from competent authorities, and fulfilling our obligations under applicable anti-money laundering and data protection frameworks.
• Platform Improvement: Analysing aggregated usage data to understand how players interact with the Platform, identify technical issues, and develop new features and product improvements.
• Marketing Communications (with consent only): Sending promotional emails, SMS notifications, and in-platform messages about bonuses, tournaments, new game launches, and seasonal offers to players who have opted in to receive marketing communications.

4 Legal Basis for Processing

baje processes personal data on one or more of the following legal grounds depending on the nature of the processing activity:

• Performance of a Contract: Processing is necessary to perform the contract we have with you — specifically, to operate your baje account, process your transactions, and deliver gaming services. This is the primary legal basis for most of our core data processing activities.
• Legal Obligation: Processing is required to comply with applicable legal requirements, including KYC and anti-money laundering obligations, record-keeping duties, and responses to lawful regulatory or law enforcement requests.
• Legitimate Interests: Processing is necessary for baje's legitimate interests in preventing fraud, ensuring platform security, maintaining responsible gaming standards, and improving our services — provided these interests are not overridden by your privacy rights.
• Consent: Where we rely on your consent as the basis for processing (most notably for sending marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal. To withdraw marketing consent, contact [email protected] or use the unsubscribe mechanism in any marketing email.

5 Cookies & Tracking Technologies

baje uses cookies and similar technologies (including web beacons and local storage objects) on the Platform to improve your experience, maintain your session, and gather analytical data about how the Platform is used. The types of cookies deployed on the baje Platform are as follows:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication cookies that keep you logged in while you navigate between pages, and security cookies that help detect fraudulent activity. These cookies cannot be disabled without impairing Platform functionality.
• Functional Cookies: Remember your preferences such as language settings, game display preferences, and responsible gaming notification dismissals so that you do not need to reconfigure them on each visit.
• Analytical Cookies: Used to collect anonymous, aggregated data about how players navigate the Platform — including which pages are visited most frequently, where users exit, and how long typical sessions last. This data is used solely to improve the Platform and is not linked to individual player identities.
• Marketing Cookies: Used with your consent to track whether you arrived at baje via a specific promotional link or referral source, enabling us to assess the effectiveness of our marketing campaigns. No behavioural advertising data is sold or shared with third-party advertising networks.

6 Data Sharing & Third Parties

baje does not sell, rent, or otherwise transfer your personal data to third parties for their independent use. We share personal data with third parties only in the following limited circumstances:

• Payment Processing Partners: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard receive the minimum transaction data necessary to process your deposits and withdrawals. These partners operate under their own privacy and security standards and are independently regulated.
• Identity Verification Providers: Third-party KYC and document verification services receive copies of identity documents you submit for the sole purpose of completing verification checks. These providers are contractually prohibited from using your data for any other purpose.
• Game Content Providers: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive your player session identifier (not your full personal data) to enable game launch and result processing. Game providers are bound by strict data processing agreements.
• Fraud Detection & Security Services: Risk management and fraud screening providers receive technical data (IP address, device fingerprint, transaction patterns) to assess the legitimacy of account activity. No unnecessary personal data is shared.
• Legal & Regulatory Authorities: baje may be required to disclose personal data in response to a lawful court order, regulatory enquiry, or law enforcement request. We will notify you of such disclosures where we are legally permitted to do so.
• Business Successors: In the event of a merger, acquisition, or sale of all or part of baje's business, personal data may be transferred to the acquiring entity, subject to equivalent privacy protections. Affected players will be notified in advance of any such transfer.

7 International Data Transfers

baje operates a globally distributed technical infrastructure. As a result, your personal data may be processed on servers located outside Bangladesh. Where personal data is transferred to jurisdictions that may not offer the same level of data protection as Bangladesh, baje ensures that appropriate safeguards are in place to protect your information, including:

• Contractual data processing agreements incorporating standard data protection clauses with all third-party processors located outside Bangladesh.
• Technical security measures — including encryption in transit and at rest — applied uniformly regardless of the server location at which data is processed or stored.
• Vendor due diligence assessments conducted prior to engaging any new data processor operating internationally.

By using the baje Platform, you acknowledge and consent to the transfer of your personal data to international service providers where necessary for the delivery of baje's services, subject to the safeguards described above.

8 Data Retention

baje retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. Our standard retention periods are as follows:

Data Category	Retention Period	Reason
Account Registration Data	Duration of account + 5 years post-closure	Legal compliance, dispute resolution
KYC Identity Documents	Duration of account + 5 years post-closure	Anti-money laundering obligations
Transaction Records	7 years from transaction date	Financial record-keeping requirements
Game Activity Logs	3 years from date of activity	Dispute resolution, responsible gaming
Support Communications	3 years from date of interaction	Service quality, complaint records
Marketing Preferences	Until consent is withdrawn + 1 year	Consent record compliance
Technical & Usage Data	13 months from collection date	Platform analytics and security monitoring
Self-Exclusion Records	Duration of exclusion + 5 years	Responsible gaming enforcement

At the end of the applicable retention period, personal data is either securely deleted from all baje systems or, where deletion is not technically feasible due to backup architecture, anonymised such that it can no longer be linked to any identifiable individual.

9 Your Rights

As a baje player, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact the baje support team at [email protected] with your registered account email address and a clear description of your request. We will respond within 30 calendar days of receiving a verified request.

• Right of Access: You may request a copy of all personal data that baje holds about you. We will provide this in a structured, commonly used, and machine-readable format where technically feasible.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected without undue delay. For minor corrections (e.g., phone number updates), you may make changes directly through your account settings.
• Right to Erasure ("Right to be Forgotten"): You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where you object to processing and there are no overriding legitimate grounds. Note that certain data (e.g., KYC and transaction records) must be retained for legal and regulatory reasons and cannot be deleted upon request alone.
• Right to Restrict Processing: You may request that baje restrict the processing of your personal data in certain circumstances — for example, while you contest the accuracy of data held, or pending the outcome of an objection to processing.
• Right to Data Portability: Where processing is based on your consent or on the performance of a contract, and is carried out by automated means, you may request that your personal data be provided to you in a portable format so that it can be transferred to another service provider.
• Right to Object: You may object to the processing of your personal data where baje is relying on legitimate interests as the legal basis for processing. baje will cease processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to Withdraw Consent: Where processing is based on your consent (most notably for marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that took place before withdrawal.

10 Children & Minors

The baje Platform is strictly intended for adults aged 21 years and over. baje does not knowingly collect, process, or store personal data relating to individuals under the age of 21. If we discover or are notified that personal data belonging to an individual under 21 has been collected, we will take immediate steps to close the relevant account and delete the associated data.

Parents and guardians who believe their child may have registered a baje account are urged to contact the support team immediately at [email protected]. All such reports are treated as high priority and will be actioned within 24 hours.

baje employs age verification checks at the point of registration and during the KYC process to minimise the risk of underage access. These checks include date-of-birth verification, document-based identity confirmation, and ongoing monitoring of account behaviour for indicators of underage use.

11 Security Measures

baje implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Key security controls include:

• Transport Layer Security (TLS/SSL): All data transmitted between your browser or app and baje's servers is encrypted using TLS 1.2 or higher with 256-bit encryption. Any connection attempt using outdated protocols is rejected.
• Data Encryption at Rest: Sensitive personal data and financial records stored on baje's servers are encrypted at rest using AES-256 encryption standards.
• Access Controls: Access to systems containing personal data is restricted on a strict need-to-know basis. All staff with access to player data are subject to confidentiality obligations and receive data protection training.
• Multi-Factor Authentication: Administrative access to baje's internal systems requires multi-factor authentication. Players are strongly encouraged to enable two-factor authentication (2FA) on their own accounts.
• Intrusion Detection & Monitoring: baje operates continuous real-time monitoring of its infrastructure for anomalous activity, unauthorised access attempts, and potential data breaches.
• Regular Security Audits: baje's platform undergoes periodic security assessments by independent third-party specialists to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: In the event of a personal data breach that poses a risk to player rights, baje will notify affected players without undue delay in accordance with applicable law and will take immediate steps to contain and remediate the incident.

While baje takes all reasonable precautions to protect your personal data, no digital system is entirely immune to security risks. Players are encouraged to use strong, unique passwords for their baje account, to enable 2FA, and to contact the support team immediately if they suspect any unauthorised access to their account.

12 Changes to This Privacy Policy

baje reserves the right to update, amend, or replace this Privacy Policy at any time to reflect changes in our data processing practices, evolving legal obligations, new platform features, or other operational requirements. The "Effective Date" at the top of this document will be updated whenever a revised version of the Policy is published.

Where changes are material — meaning they meaningfully affect how we collect or use your personal data, or how you can exercise your rights — baje will make reasonable efforts to notify registered players in advance via email to the address held on your account, or through an in-platform notification visible upon your next login.

For minor updates such as typographical corrections, clarifications, or editorial improvements that do not change the substance of the Policy, baje is not obligated to provide advance notice beyond updating the Effective Date. The most current version of this Policy is always accessible at https://baje.vu/privacy-policy.

Your continued use of the baje Platform following the publication of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with any changes made to this Policy, you should cease using the Platform and contact the support team to request account closure.

13 Contact & Complaints

If you have any questions, concerns, or complaints about this Privacy Policy or the way baje handles your personal data, please contact our support team in the first instance. We are committed to resolving all privacy-related enquiries promptly and fairly.

Contact Details:

• Email: [email protected] (plain text — not a clickable link)
• Response Time: Under 5 minutes via live chat; within 24 hours for email enquiries
• Support Hours: 24 hours a day, 7 days a week
• Timezone: Bangladesh Standard Time (BST, UTC+6)

If you are not satisfied with our response to your privacy complaint, or if you believe that baje is processing your personal data in a manner that is inconsistent with applicable data protection law, you may escalate your complaint to the relevant data protection authority in your jurisdiction. baje will cooperate fully with any such authority in the investigation of a complaint.