bajieok Privacy Policy

1. Information We Collect

1.1 Information You Provide Directly

When you create a bajieok account, complete KYC verification, make a deposit or withdrawal, contact support, or participate in a promotion, you provide us with personal information. The categories of data collected in this manner include:

Data Category	Examples	Collected When
Identity Data	Full legal name, date of birth , gender, NID or passport number	Registration, KYC verification
Contact Data	Mobile number, email address, residential address (city, district)	Registration, account updates
Financial Data	bKash / Nagad / Rocket / Upay account number, transaction reference IDs	Deposit and withdrawal requests
Verification Documents	NID scan, passport biographical page, driving licence image	KYC identity verification
Communications Data	Live chat transcripts, support email content, dispute correspondence	Support interactions

1.2 Information Collected Automatically

When you access bajieok.net, our servers and platform systems automatically collect certain technical and behavioural data. This data is collected without you actively supplying it and includes:

• Device and browser data: IP address, device type (mobile, desktop, tablet), operating system, browser type and version, screen resolution.
• Session data: Pages visited on bajieok.net, time spent on each page, navigation path, feature interactions, game sessions started and completed.
• Transaction logs: Deposit and withdrawal timestamps, bet placement records, game round results (for dispute resolution and fraud detection purposes).
• Login records: Timestamp and IP address of each successful login and failed login attempt on your bajieok account.

1.3 Information from Third-Party Payment Providers

When you make a deposit or withdrawal via bKash, Nagad, Rocket, or Upay, bajieok receives a transaction confirmation from the relevant MFS gateway. This confirmation includes a transaction reference number, the registered mobile number associated with the MFS account, and the amount transferred. bajieok does not receive your full MFS PIN or full account credentials — payment authorisation occurs entirely within the MFS provider's own app environment.

2. How We Use Your Data

2.1 Core Service Delivery

The primary purpose for which bajieok processes your personal data is the delivery of our betting and casino services. Specifically, your data is used to:

• Create, maintain, and secure your bajieok account.
• Process deposits and withdrawals via your registered MFS payment method.
• Verify your identity and age (18+ compliance) as required before processing your first withdrawal.
• Settle bets and attribute winnings to the correct account.
• Provide customer support and resolve account queries or disputes.
• Apply self-exclusion or responsible gaming restrictions you have requested.

2.2 Safety, Security, and Fraud Prevention

bajieok processes certain personal and technical data specifically to maintain platform integrity and protect both individual players and the broader bajieok community. This includes:

• Detecting and investigating suspected fraud, money laundering, or other financial crime.
• Identifying duplicate accounts and enforcing the one-account-per-player policy.
• Monitoring betting patterns to detect prohibited activities such as arbitrage or bot usage.
• Analysing login records to identify and block unauthorised account access attempts.

2.3 Legal and Compliance Obligations

bajieok may be required to process and retain certain personal data to comply with applicable legal obligations. This includes retaining transaction records for financial audit purposes, responding to valid legal requests from law enforcement or regulatory authorities, and maintaining age verification records as evidence of 18+ compliance checks.

2.4 Platform Improvement and Analytics

Aggregated, anonymised session and behavioural data is used by bajieok's internal product team to understand how players use bajieok.net, identify pages or features that are underperforming, and prioritise platform improvements. This analytics activity does not involve processing data that is personally identifiable at the individual player level.

2.5 Promotions and Communications

If you have opted in to promotional communications during registration or via your account settings, bajieok may use your email address or mobile number to send information about new games, seasonal bonuses (such as Eid, BPL, or IPL promotions), and platform updates. You may opt out of promotional communications at any time by updating your notification preferences in your account settings or by contacting support. Opting out of promotions does not affect essential account-related communications such as deposit confirmations and withdrawal notifications.

3. Data Sharing and Disclosure

3.1 We Do Not Sell Your Data

bajieok does not sell, rent, or trade your personal data to any third party for their own marketing or commercial purposes. Your data is shared externally only in the limited circumstances described in this section.

3.2 Service Providers

bajieok engages trusted third-party service providers to support the operation of the platform. These providers may process personal data on bajieok's behalf as part of their contracted services. Categories of service providers engaged include:

• KYC and identity verification providers: To process NID and passport verification for age and identity checks.
• Payment gateway operators: bKash, Nagad, Rocket, and Upay — solely for processing transactions you initiate.
• Game studios: Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, Spribe — game providers receive only the technical session data necessary to serve the game. They do not receive your full profile or financial data.
• IT infrastructure and hosting providers: Secure server and cloud infrastructure used to host bajieok.net and its databases.
• Fraud detection services: Technical risk-scoring tools that help identify anomalous account behaviour.

All third-party service providers engaged by bajieok are contractually required to handle personal data securely, to use it only for the purposes for which it was shared, and to maintain confidentiality obligations consistent with this Privacy Policy.

3.3 Legal Disclosure

bajieok may disclose personal data to law enforcement authorities, regulators, or other governmental bodies where we are legally compelled to do so by a valid court order, subpoena, regulatory demand, or other binding legal instrument. Where permitted by law, bajieok will endeavour to notify the affected player of any such disclosure request before complying.

3.4 Business Transfers

In the event that bajieok undergoes a merger, acquisition, restructuring, or sale of all or part of its assets, personal data held by bajieok may be transferred to the acquiring entity as part of that transaction. In such circumstances, bajieok will take reasonable steps to ensure that the acquiring entity honours the privacy commitments described in this Policy in respect of the transferred data.

4. Cookies and Tracking Technologies

4.1 What Are Cookies

Cookies are small text files placed on your device by a website when you visit it. bajieok uses cookies and similar technologies (such as local storage and session tokens) to ensure the platform functions correctly, to maintain your login session, and to understand how players interact with the site.

4.2 Types of Cookies Used by bajieok

Cookie Type	Purpose	Duration
Essential cookies	Maintain your login session, prevent CSRF attacks, enable MFS payment handoffs. Required for the platform to function — cannot be disabled.	Session / 24 hours
Functional cookies	Remember your language preference, display settings, and responsible gaming notification dismissals.	30 days
Analytics cookies	Collect anonymised, aggregated data about page visits and navigation paths to help improve the platform. No personally identifiable data is extracted from these cookies.	90 days
Security cookies	Flag suspicious login attempts, detect bot activity, and support rate-limiting of failed authentication requests.	Session

4.3 Managing Cookies

You can control non-essential cookies through your browser settings. Most modern browsers allow you to block or delete cookies, or to receive a notification before a cookie is set. Please note that disabling essential cookies will prevent bajieok.net from functioning correctly — you will not be able to log in or place bets without essential session cookies active. Instructions for managing cookies in common browsers can be found in the help documentation of your specific browser.

4.4 No Cross-Site Tracking

bajieok does not use third-party advertising cookies or cross-site tracking pixels. The cookies placed by bajieok.net are first-party cookies — they are scoped to bajieok.net and are not used to track your activity across other websites or apps.

5. Data Security and Storage

5.1 Technical Security Measures

bajieok implements a range of technical security measures to protect the personal data we hold against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• TLS 1.2 / 1.3 encryption for all data transmitted between your device and bajieok.net.
• Password hashing using a cryptographically strong one-way hashing algorithm — bajieok never stores passwords in plain text.
• MFS payment account numbers are stored in a tokenised format — full account numbers are not held in bajieok's primary application database.
• Role-based access control (RBAC) limiting which bajieok staff can access which categories of personal data.
• Regular security assessments of the bajieok platform infrastructure.
• Two-factor authentication (2FA) available to players and enforced for bajieok administrative accounts.

5.2 Where Data Is Stored

Personal data collected by bajieok is stored on secure servers. bajieok takes reasonable steps to ensure that data transferred to or accessible by third-party service providers (as described in Section 3) is subject to equivalent security standards.

5.3 Data Breach Response

In the event of a personal data breach that poses a risk to the rights and freedoms of affected players, bajieok will take immediate steps to contain the breach, assess its scope and impact, and notify affected players as promptly as reasonably practicable. Notification will be provided via the email address registered on your bajieok account and will include a description of what data was affected, what steps bajieok is taking in response, and what steps you can take to protect yourself.

6. Your Privacy Rights

6.1 Right of Access

You have the right to request a copy of the personal data that bajieok holds about you. To submit a data access request, contact bajieok support via live chat or email at [email protected]. bajieok will respond to verified data access requests within a reasonable timeframe, typically within 30 calendar days of receipt.

6.2 Right to Correction

If any personal data that bajieok holds about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. For basic profile information (mobile number, email address), updates can be made directly through your bajieok account settings. For identity data collected during KYC (legal name, date of birth), corrections require re-submission of supporting documentation to the support team.

6.3 Right to Erasure

You may request that bajieok delete the personal data it holds about you. bajieok will fulfil erasure requests where there is no overriding legal obligation to retain the data. Please note that bajieok is required to retain certain records — including transaction logs and KYC documentation — for compliance and audit purposes for a defined retention period (see Section 7). Data subject to a legal retention requirement cannot be deleted before that period expires, even on request.

6.4 Right to Restrict Processing

You have the right to request that bajieok restrict the processing of your personal data in certain circumstances — for example, where you dispute the accuracy of data being processed while bajieok investigates the discrepancy, or where you have objected to processing and bajieok is determining whether there is an overriding legitimate reason to continue.

6.5 Right to Withdraw Consent

Where bajieok processes your personal data on the basis of your consent (for example, processing your data for promotional communications), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of any processing that occurred before the withdrawal. To withdraw consent for promotional communications, update your notification preferences in your bajieok account settings or contact support.

6.6 Exercising Your Rights

To exercise any of the rights described in this section, contact bajieok's support team via live chat on bajieok.net. You may be required to verify your identity before bajieok can process your request, to ensure that personal data is not disclosed or altered at the request of an unauthorised party. bajieok does not charge a fee for genuine first-time privacy rights requests.

7. Data Retention

7.1 Retention Periods

bajieok retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or audit obligations. The following retention periods apply as a general guide:

Data Category	Retention Period	Basis
Account registration data	Duration of account plus 5 years after closure	Legal / audit obligation
KYC verification documents	Duration of account plus 5 years after closure	Age verification compliance
Transaction records	7 years from transaction date	Financial record-keeping obligation
Support communications	3 years from last interaction	Dispute resolution / legal defence
Session / analytics logs	12 months (anonymised after 30 days)	Platform improvement, fraud detection
Promotional communications consent	Until consent is withdrawn or account is closed	Consent record

7.2 Post-Retention Deletion

On expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with bajieok's internal data lifecycle management procedures. Anonymised data — where all identifying fields have been irreversibly removed — may be retained indefinitely for aggregated statistical purposes without affecting your privacy rights.

7.3 Self-Excluded Accounts

Where a player has self-excluded their bajieok account, the account record and associated data are retained for the duration of the self-exclusion period to prevent the player from registering a new account. On expiry of a time-limited self-exclusion period, the player may request reactivation, and the retained data is used to restore the account. For permanent self-exclusion, the account and its data are subject to the standard post-closure retention schedule described in Section 7.1.

8. Policy Updates and Contact

8.1 Updates to This Privacy Policy

bajieok reviews this Privacy Policy periodically and may update it to reflect changes in our data practices, the services we offer, or applicable legal requirements. When material changes are made, registered players will be notified via their registered email address or via an on-platform notification at least seven (7) days before the revised Policy takes effect. The "Last updated" date at the top of this Policy will always reflect the date of the most recent revision. We encourage you to review this Policy periodically to stay informed about how bajieok protects your data.

8.2 Contacting bajieok About Privacy

If you have any question about this Privacy Policy, wish to exercise a privacy right, or want to report a concern about how bajieok handles your personal data, please contact the bajieok support team using the following channel:

• Live Chat: Available 24/7 on bajieok.net — average response time 2–5 minutes.
• Email: [email protected] (plain text — not a clickable link).

bajieok is committed to responding to all privacy-related enquiries promptly and to treating your concerns with appropriate seriousness and care.

8.3 Minors and Privacy

bajieok is strictly an 18+ platform. We do not knowingly collect personal data from individuals under the age of 18. If we become aware that a registered account belongs to a person under 18, we will immediately suspend the account, initiate a review of any data collected, and take steps to delete personal data associated with the underage user beyond what is required for our legal obligations. If you believe that a person under the age of 18 has registered an account on bajieok.net, please notify support immediately.