bajli Privacy Policy

1. Introduction

bajli ("we", "us", "our") is committed to protecting the privacy and personal data of all users who access or register on the bajli platform at https://bajli.org. This Privacy Policy describes in clear and plain language the types of personal data bajli collects, the purposes for which that data is processed, the parties with whom it may be shared, and the rights available to you as a data subject.

By creating a bajli account or continuing to use the bajli platform, you acknowledge that you have read and understood this Privacy Policy. If you have any questions about how your personal data is handled, please contact bajli support at the details provided at the end of this document.

2. Information We Collect

bajli collects personal data from you in several ways: directly when you register and use your account, automatically when you interact with the platform, and in some cases from third-party payment providers who process your transactions. The categories of data collected are set out below.

1. Registration data: When you create a bajli account, we collect your full name, date of birth, mobile phone number, and the city or region you are based in (e.g., Dhaka, Chittagong, Sylhet). This data is required to verify your identity, ensure you meet the 21+ age requirement, and provide account access.
2. Identity verification (KYC) data: When you request a withdrawal or when bajli requires identity confirmation, we may request a copy of your National Identity Card (NID) or passport. This document is used solely for age and identity verification purposes and is stored securely with restricted access.
3. Financial transaction data: bajli records all deposit and withdrawal transactions associated with your account, including the transaction amount in BDT, the payment method used (bKash, Nagad, Rocket, Upay, or bank), the transaction reference number, and the date and time of each transaction. This data is required for account reconciliation, fraud prevention, and regulatory compliance.
4. Usage and behavioural data: When you use the bajli platform, we automatically collect data about your session activity, including the pages and games you visit, the time and duration of your sessions, game bets placed and outcomes, device type, operating system, browser type, and approximate IP-based location. This data is used to improve the platform experience, detect fraud, and fulfil responsible gaming obligations.
5. Communications data: If you contact bajli support, we retain a record of those communications — including the channel used (e.g. email), the content of messages, and the date and time of each exchange. This data is kept to ensure continuity of service, quality assurance, and to evidence the resolution of any disputes.

3. How We Use Your Information

bajli uses your personal data for the following specific purposes. We only process data that is necessary for the purpose stated, and we do not process personal data in ways that are incompatible with those purposes.

• To create and manage your bajli account, including verifying your identity and age (21+ requirement).
• To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, and Bangladesh bank accounts.
• To comply with legal obligations, including anti-money laundering (AML) checks, fraud detection, and requests from lawful authorities.
• To deliver responsible gaming tools such as deposit limits, time-outs, and self-exclusion features.
• To send important account and transactional SMS notifications to your registered mobile number.
• To personalise your platform experience based on your game preferences and activity history.
• To analyse platform performance, identify technical issues, and improve the quality of bajli's services.

Privacy at a Glance

The cards below highlight the six most important privacy commitments bajli makes to every registered player.

4. Legal Bases for Processing

bajli processes your personal data only where a valid legal basis exists. The legal bases on which bajli relies are as follows.

1. Contractual necessity: Most of the processing bajli performs — account management, transaction processing, identity verification — is necessary to fulfil the contractual relationship between bajli and you as a registered player.
2. Legal obligation: bajli is required by applicable law to retain certain data — including transaction records and KYC documentation — for specified minimum periods. We cannot waive these obligations even if you request deletion of that specific data.
3. Legitimate interests: bajli processes some data — such as usage patterns and session behaviour — on the basis of legitimate interests, specifically fraud prevention, responsible gaming monitoring, and platform security. Where we rely on legitimate interests, those interests do not override your rights as a data subject.
4. Consent: Where bajli processes data for optional purposes — such as sending promotional messages — we will only do so with your explicit, opt-in consent. You may withdraw consent at any time without affecting the lawfulness of any processing that occurred before your withdrawal.

5. Sharing Your Information

bajli does not share your personal data with third parties except in the limited circumstances listed below. All third parties with whom bajli shares data are required to handle that data in accordance with applicable privacy standards.

1. Payment providers: bajli shares the minimum transaction data necessary with payment providers — including bKash, Nagad, Rocket, Upay, and the relevant Bangladesh banks — to process your deposits and withdrawals. bajli does not share additional personal data beyond what is required to complete each transaction.
2. Game providers: Game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Spribe, and Ezugi may receive a session token and game-specific data to facilitate gameplay. They do not receive your name, NID, phone number, or payment details.
3. Legal and regulatory authorities: bajli will disclose personal data to law enforcement bodies, regulatory authorities, or courts when required to do so by a lawful order or legal obligation. bajli will notify you of such disclosure where it is legally permitted to do so.
4. Service providers acting on bajli's behalf: bajli may engage technical service providers — such as hosting infrastructure providers or fraud-detection systems — who process data on bajli's behalf under strict data processing agreements. These providers may not use your data for their own purposes.

6. Cookies and Tracking Technologies

bajli uses cookies and similar tracking technologies to ensure the platform functions correctly, to maintain your login session, and to gather anonymised analytical data about how the platform is used. bajli does not use advertising cookies or place third-party tracking pixels on the platform.

1. Essential cookies: These cookies are strictly necessary for the bajli platform to function. They enable your login session to persist, keep your game state between pages, and ensure security features operate correctly. You cannot opt out of essential cookies without also being unable to use the platform.
2. Analytical cookies: bajli uses anonymised analytical cookies to understand aggregate patterns of platform use — such as which sections are most visited and how long sessions typically last. This data does not identify you personally and is used only to improve the platform.
3. Cookie management: You may manage or delete cookies through your browser settings at any time. Note that disabling essential cookies will prevent you from logging in or using core bajli features. Disabling analytical cookies will not affect your ability to use the platform.

bajli does not use fingerprinting, supercookies, or any persistent cross-site tracking mechanism beyond standard browser cookies. All cookies set by bajli expire at the end of your session or within 12 months at the latest.

7. Data Retention

bajli retains personal data only for as long as is necessary for the purpose for which it was collected, or as required by applicable law. The following retention periods apply.

1. Active account data: Registration data, KYC documents, and transaction records are retained for the lifetime of your account and for a minimum of five years after account closure, as required for AML compliance and audit purposes.
2. Communications and support records: Records of support communications are retained for two years from the date of each exchange to support quality assurance and dispute resolution.
3. Usage and analytical data: Anonymised analytical data about platform usage is retained indefinitely in aggregate form as it does not constitute personal data. Session logs containing identifiable information are retained for 90 days and then permanently deleted.

8. Your Rights

As a user of the bajli platform, you have the following rights in relation to the personal data bajli holds about you. To exercise any of these rights, contact bajli support using the details at the end of this document. bajli will respond to all valid requests within 30 days.

1. Right of access: You may request a copy of all personal data bajli holds about you. bajli will provide this in a clear, readable format within 30 days of your request.
2. Right to rectification: If any personal data bajli holds about you is inaccurate or incomplete, you may request that it be corrected. bajli will update inaccurate data promptly upon verification of the correct information.
3. Right to erasure: You may request deletion of your personal data. bajli will honour erasure requests where there is no overriding legal obligation to retain the data. Data subject to mandatory legal retention periods (such as AML transaction records) cannot be deleted before those periods expire.
4. Right to restrict processing: You may ask bajli to restrict the processing of your personal data in certain circumstances — for example, if you contest the accuracy of data bajli holds or if you object to processing based on legitimate interests. bajli will consider all restriction requests fairly and respond within 30 days.
5. Right to withdraw consent: Where bajli processes your data based on your consent (for example, to send promotional messages), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that occurred before the withdrawal.

9. Security Measures

bajli takes the security of your personal data seriously and implements appropriate technical and organisational measures to protect it against unauthorised access, disclosure, alteration, or destruction. These measures include SSL encryption for all data transmitted between your device and bajli's servers, restricted access controls so that only authorised bajli personnel may access personal data, regular security reviews of platform infrastructure, and secure storage of KYC documents with access logging.

While bajli takes all reasonable steps to protect your personal data, no system is entirely immune to security risks. In the event of a data breach that is likely to result in a risk to your rights and freedoms, bajli will notify affected users promptly and take immediate remedial steps to contain the breach and prevent further harm.

10. Children's Privacy

bajli is strictly an adult platform. The bajli service is not directed at, and is not intended to be used by, any person under the age of 21. bajli does not knowingly collect personal data from any person under 21. If bajli becomes aware that personal data has been collected from a person under 21, that data will be deleted immediately and the associated account will be closed.

11. Third-Party Links and Game Providers

The bajli platform integrates games provided by third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. When you launch a game, your session data is passed to the relevant studio's game server to enable gameplay. bajli has no control over the privacy practices of these game studios beyond the data-sharing limitations described in Section 5 of this policy. bajli recommends that players review the privacy policies of individual game providers if they have concerns about how game-level data is handled by those studios directly.

12. Changes to This Privacy Policy

bajli may update this Privacy Policy from time to time to reflect changes in the way personal data is processed, changes in applicable law, or improvements to the bajli service. When material changes are made, bajli will notify registered users via their registered contact method or by displaying a prominent notice on the platform. The effective date at the top of this document will be updated to reflect the date of the latest revision.

Your continued use of bajli after the effective date of any revised Privacy Policy constitutes your acceptance of the updated policy. If you do not accept the revised policy, you should stop using the bajli platform and may request account closure in accordance with the Terms and Conditions.

13. Contact Us

If you have any questions about this Privacy Policy, wish to exercise your data rights, or want to raise a concern about how bajli handles your personal data, please contact the bajli support team. All privacy-related enquiries are handled during Bangladesh Standard Time (BST, UTC+6) business hours.

Email: [email protected]