bcbaji Privacy Policy

Information We Collect

When you register and use the bcbaji platform, we collect a range of personal data that is necessary to operate the service safely, legally, and in a way that delivers a quality experience for every player in Bangladesh. The categories of data we collect are described below.

A. Registration and Identity Data

• Full legal name as it appears on your national identity documents.
• Date of birth — collected to verify that you meet the 18+ age requirement.
• Email address — used as your primary login identifier and for account communications.
• Mobile phone number — used for account verification and transaction confirmation.
• Residential address — including city (e.g., Dhaka, Chittagong, Sylhet, Khulna) and postal code, used for identity verification and fraud prevention.

B. Financial and Transaction Data

• bKash, Nagad, Rocket, and Upay mobile wallet numbers used for deposits and withdrawals.
• Bank account details (Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank) where bank transfers are used.
• Transaction history including deposit amounts (in BDT ৳), withdrawal requests, dates, and payment method used.
• Bonus redemption records and wagering activity associated with promotional offers.

C. Account Activity and Gaming Data

• Bet history, game session logs, wager amounts, game types played (slots, live casino, cricket betting, etc.), and win/loss records.
• Responsible gaming preferences including deposit limits, session time limits, and self-exclusion status.
• Customer support communications — emails and messages sent to [email protected].

D. Technical and Device Data

• IP address and approximate geolocation data derived from IP.
• Device type, operating system, browser type and version.
• Session timestamps, login history, and pages visited within bcbaji.
• Cookie identifiers and similar tracking technology data (see Section 5 for full details).

E. Identity Verification (KYC) Documents

When we request identity verification, you may be asked to submit copies of documents such as your Bangladesh National Identity Card (NID), passport, or driving licence, and a recent utility bill or bank statement confirming your residential address. These documents are processed solely for the purpose of verifying your identity and age, and are handled with the highest level of security.

How We Use Your Data

bcbaji uses the personal data we collect for specific, clearly defined purposes. We do not use your data for purposes beyond those described below, and we do not sell your personal information to third parties for their own marketing use.

Where bcbaji sends you promotional communications about bonuses, new games, or seasonal offers (such as Eid or BPL cricket promotions), this is done only where you have opted in to receive such communications during registration or through your account settings. You may withdraw consent for marketing communications at any time by contacting [email protected].

Legal Basis for Processing

bcbaji processes your personal data on the basis of one or more of the following legal grounds, depending on the specific processing activity involved:

• Contract performance: Processing necessary to provide you with the bcbaji service — including account creation, transaction processing, and customer support — is carried out because it is required to perform the contract between you and bcbaji.
• Legal obligation: Certain processing activities — including identity verification (KYC), anti-money-laundering (AML) checks, and responsible gaming monitoring — are carried out because bcbaji is legally required to do so under applicable law.
• Legitimate interests: bcbaji processes certain data (such as technical and device data for fraud prevention, and anonymised analytics for platform improvement) where we have a legitimate interest in doing so, and where that interest is not overridden by your privacy rights.
• Consent: Where bcbaji sends you optional marketing communications or places non-essential cookies on your device, we do so on the basis of your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

Data Sharing & Disclosure

bcbaji does not sell, rent, or trade your personal data to any third party for their own commercial purposes. We may share your data with carefully selected third parties only in the circumstances described below.

• Payment processors: Your financial transaction data is shared with bKash, Nagad, Rocket, Upay, and partner banks (Dutch-Bangla, BRAC, City Bank, etc.) solely for the purpose of processing deposits and withdrawals. These parties process your data as independent data controllers subject to their own privacy policies and regulatory obligations.
• Identity verification providers: Third-party KYC and identity verification service providers may process copies of your identity documents on behalf of bcbaji, strictly for the purpose of age and identity verification. These providers are bound by data processing agreements and may not use your data for any other purpose.
• Game software providers: Game providers such as Pragmatic Play, Evolution Gaming, Spribe, Ezugi, NetEnt, and Microgaming may receive certain session-level technical data (such as session token and game result data) in order to deliver their games on the bcbaji platform. They do not receive your name, financial data, or contact details unless expressly required to resolve a game dispute.
• Fraud prevention and AML: Where required by law or where we have a reasonable suspicion of fraudulent or illegal activity, bcbaji may share relevant account and transaction data with law enforcement agencies, financial intelligence units, or regulatory authorities.
• Legal and regulatory compliance: bcbaji may disclose personal data where required by a valid court order, regulatory direction, or other legally binding obligation. In such cases, we will disclose only the minimum data necessary to comply with the specific legal requirement.
• Business continuity: In the event of a merger, acquisition, or transfer of bcbaji's business assets, player data may be transferred to the successor entity, subject to equivalent data protection standards. Players will be notified of any such transfer.

Cookies and Tracking Technologies

bcbaji uses cookies and similar tracking technologies on the bcbaji.net website to enable core platform functionality, improve user experience, and (where you have consented) to measure platform performance. The following table describes the categories of cookies in use.

You may manage your cookie preferences at any time through your browser settings. Disabling strictly necessary cookies will prevent bcbaji from functioning correctly, including maintaining your login session. Disabling analytics or marketing cookies will not affect your ability to use the core platform.

Most modern browsers allow you to view, manage, block, and delete cookies through the browser's settings menu. For detailed instructions specific to your browser, refer to your browser provider's support documentation. Note that bcbaji does not respond to browser-level "Do Not Track" (DNT) signals as there is no universally accepted standard for implementing such signals.

Data Retention

bcbaji retains personal data only for as long as is necessary for the purposes for which it was collected, or for as long as is required by applicable law. The following retention periods apply:

• Active account data: All personal data associated with an active bcbaji account is retained for the duration of the account relationship plus a minimum post-closure period (see below).
• Post-closure retention (standard): Following voluntary account closure, bcbaji retains core identity and transaction records for a period of five (5) years from the date of closure. This retention period reflects our obligations under anti-money-laundering regulations and the need to resolve any post-closure disputes.
• KYC documents: Copies of identity verification documents are retained for a minimum of five (5) years from the date of verification or account closure, whichever is later.
• Financial transaction records: Detailed records of all deposits and withdrawals (including bKash, Nagad, and bank transfer records) are retained for five (5) years in line with financial record-keeping obligations.
• Customer support records: Communications sent to [email protected] are retained for two (2) years from the date of the last communication in a given support thread, or for the duration of the account relationship, whichever is longer.
• Self-exclusion records: Records of self-exclusion requests are retained for a minimum of seven (7) years to prevent a previously self-excluded player from inadvertently re-registering.
• Marketing consent records: Records of your consent to receive marketing communications are retained for the duration of the consent period plus two (2) years to demonstrate compliance.

When data is no longer required for retention purposes, bcbaji securely deletes or anonymises it so that it can no longer be associated with any individual player.

Your Privacy Rights

As a bcbaji player, you have a number of rights in relation to your personal data. bcbaji is committed to honouring these rights promptly and transparently. To exercise any of the rights described below, please contact [email protected] with the subject line "Privacy Rights Request", including your registered email address and the specific right you wish to exercise.

• Right to access: You have the right to request a copy of the personal data that bcbaji holds about you, including your registration details, transaction history, and KYC verification status. bcbaji will respond to access requests within 30 days of receipt.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update basic account details directly through your account settings, or by contacting support.
• Right to erasure ("right to be forgotten"): You may request that bcbaji delete your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose for which it was collected, or where you have withdrawn consent and no other legal basis for processing exists. Note that this right is subject to our legal retention obligations described in Section 6.
• Right to restriction of processing: In certain circumstances (for example, while a dispute is being investigated), you may request that bcbaji restrict how your data is used without deleting it outright.
• Right to data portability: Where processing is based on your consent or on contract performance, and is carried out by automated means, you have the right to receive a copy of your data in a structured, commonly used, machine-readable format.
• Right to object: You have the right to object to processing based on bcbaji's legitimate interests. bcbaji will stop the relevant processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing emails), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of any processing carried out before the withdrawal.

Data Security

bcbaji takes the security of your personal data seriously and implements a layered set of technical and organisational measures to protect it against unauthorised access, loss, alteration, or disclosure. Key security measures include:

• SSL/TLS encryption: All data transmitted between your device and bcbaji.net is encrypted using 256-bit SSL/TLS protocols. Look for the padlock icon in your browser address bar when using bcbaji — this confirms that your connection is encrypted.
• Password hashing: Your bcbaji account password is never stored in plain text. Passwords are hashed using a strong one-way cryptographic algorithm, meaning that even bcbaji staff cannot read your password.
• Access controls: Access to personal data within bcbaji's systems is restricted to staff members who genuinely need it to perform their role. Access is granted on a least-privilege basis and is reviewed regularly.
• Two-factor verification: bcbaji uses OTP-based verification for high-sensitivity account actions including password resets, large withdrawal requests, and KYC document uploads.
• KYC document security: Identity documents submitted for KYC verification are stored in encrypted, access-controlled storage systems. Documents are not accessible to general customer support staff and are reviewed only by trained verification personnel.
• Incident response: bcbaji maintains a documented data breach response procedure. In the event of a security incident that affects your personal data, we will notify affected players and relevant authorities in accordance with our legal obligations and within the timeframes required by applicable law.

Third-Party Services

The bcbaji platform integrates third-party game software from providers including Pragmatic Play, Evolution Gaming, Spribe, Ezugi, NetEnt, and Microgaming. These providers deliver their games through secure APIs and may collect limited technical session data (such as session tokens and game result confirmations) directly within the game environment. bcbaji does not control the data practices of these game providers and recommends that you review the privacy policies of any game provider whose software you use extensively.

Payment services provided by bKash, Nagad, Rocket, Upay, and partner banks operate under their own privacy policies and are regulated independently. When you initiate a deposit or withdrawal through these channels, the transaction is governed in part by the terms and privacy policy of the relevant payment provider.

bcbaji.net does not contain links to external third-party websites for general browsing purposes. All links on bcbaji.net point to internal pages within the bcbaji platform. As a result, the risk of your data being inadvertently transmitted to an external site through navigation on bcbaji is minimal.

Policy Updates

bcbaji may update this Privacy Policy periodically to reflect changes in our data processing practices, changes in applicable law, or improvements to our platform. When we make material changes to this Policy, we will notify registered players by email to the address associated with their bcbaji account, and the updated Policy will be published on bcbaji.net with a revised effective date at the top of the document.

Minor or non-material changes (such as correcting typographical errors or clarifying existing language without changing the substance of the Policy) may be made without individual notification, though the updated version will always be accessible on this page.

Your continued use of the bcbaji platform after the effective date of any updated Privacy Policy constitutes your acknowledgement of the updated terms. If you do not agree with any changes to this Policy, you should cease using bcbaji and contact [email protected] to request account closure in accordance with Section 8 of the Terms and Conditions.