Privacy Policy — How baje vip Handles Your Personal Data

1 Information We Collect

baje vip collects personal information from you in the ordinary course of operating a regulated online gaming platform. The categories of information we collect, and the circumstances in which we collect them, are described in full below. We collect only what is genuinely necessary to operate the platform safely, process payments reliably, comply with our legal obligations, and deliver a high-quality experience to every player in Bangladesh.

1.1 Information You Provide Directly

When you register an account on baje vip or interact with our platform in any way, you may provide the following categories of personal data:

• Identity data: Full legal name, date of birth, gender, and a copy of a government-issued identity document (Bangladesh National ID card or passport) submitted during Know Your Customer (KYC) verification.
• Contact data: Email address, Bangladesh mobile phone number, and residential address.
• Account credentials: Username and encrypted password (we never store passwords in plain text).
• Payment data: Mobile banking account identifiers (e.g., bKash number, Nagad number, Rocket number), bank account references, and transaction references. Full payment instrument numbers are not stored on baje vip servers.
• Support communications: The content of any messages, complaints, or enquiries you submit to our support team via email at [email protected] or through any in-platform messaging tool.
• Responsible gaming declarations: Any self-imposed deposit limits, loss limits, or self-exclusion requests you submit through your account settings.

1.2 Information Collected Automatically

When you access the baje vip platform, our systems automatically record certain technical information about your visit. This information is necessary for platform security, fraud prevention, and service performance:

1.3 Information from Third Parties

In certain circumstances, baje vip may receive personal data about you from third parties, including:

• Payment service providers (such as bKash, Nagad, or Rocket) confirming the status of deposit or withdrawal transactions.
• Identity verification and fraud-screening services that cross-reference the documents you submit during KYC.
• Publicly available sources, such as sanction screening databases, to ensure compliance with applicable financial crime prevention obligations.

In each case, baje vip uses third-party data only for the specific purpose for which it was obtained and handles it in accordance with this Privacy Policy.

2 How We Use Your Information

baje vip uses the personal data we collect for a defined and limited set of purposes. We do not use your data for any purpose that is incompatible with the reason it was collected. The table below summarises the primary purposes for which we process your personal information, together with the legal basis for each processing activity.

2.1 Marketing Communications

baje vip will only send you promotional emails, SMS notifications, or in-platform messages about bonuses, special offers, and seasonal promotions (such as BPL match-day specials or Eid reload bonuses) if you have explicitly opted in to marketing communications during registration or subsequently via your account settings. You may withdraw your marketing consent at any time by updating your notification preferences in your account dashboard or by contacting [email protected]. Withdrawal of marketing consent does not affect the lawfulness of processing carried out prior to withdrawal, nor does it affect the delivery of transactional communications necessary to operate your account.

2.2 Automated Decision-Making

baje vip uses automated systems to detect fraud, identify unusual betting patterns, and flag accounts for responsible gaming review. These automated processes may result in temporary account restrictions pending manual review. Where an automated decision has a significant effect on your account, you have the right to request human review of that decision. Please contact [email protected] to exercise this right.

3 Sharing and Disclosure of Data

baje vip does not sell, rent, or otherwise commercially transfer your personal data to any third party. We share personal data only in the limited circumstances described in this section, and only to the extent necessary to fulfil the stated purpose.

3.1 Service Providers and Data Processors

baje vip engages a small number of carefully selected third-party service providers who process personal data on our behalf and under our documented instruction. These providers are contractually bound to process your data only as directed by baje vip and to maintain appropriate technical and organisational security measures. Categories of service providers include:

• Payment processors: Providers such as bKash, Nagad, Rocket, and Upay who facilitate deposit and withdrawal transactions on the platform.
• Identity verification providers: Third-party KYC and AML screening services used to verify your identity documents and screen your details against sanctions and politically exposed persons (PEP) databases.
• Cloud infrastructure providers: Hosting and database services that store platform data in secure, access-controlled environments.
• Game software providers: Licensed game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi, whose platforms integrate with baje vip. These providers receive only the minimum data required to run their game software securely (such as a session token and your currency preference) and are not permitted to use your data for their own marketing purposes.
• Analytics providers: Anonymised and aggregated usage analytics tools that help us understand platform performance and improve the user experience.

3.2 Legal and Regulatory Disclosures

baje vip may disclose your personal data to law enforcement agencies, financial intelligence units, courts, or other competent authorities where we are required to do so by applicable law, court order, or other valid legal process. In such cases, we will disclose only the minimum data required to satisfy the legal obligation and will, where permitted by law, notify you of the disclosure request.

3.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of baje vip's business, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified via the email address registered on your account in advance of any such transfer that would materially change how your data is handled, and you will be given the opportunity to close your account if you do not wish your data to be transferred.

4 Cookies and Tracking Technologies

baje vip uses cookies and similar technologies (such as local storage and session tokens) to operate the platform, maintain your logged-in session, remember your preferences, and analyse how the platform is used. This section explains the types of cookies we use and how you can manage them.

4.1 Types of Cookies We Use

4.2 Managing Your Cookie Preferences

Strictly necessary cookies cannot be disabled as they are essential to the operation of your account session. All other cookie categories — functional, analytics, and security-enhancement cookies — can be managed via the cookie preference centre accessible in your account settings. You may also control cookies at the browser level through your browser's privacy settings; however, disabling certain cookies may impair the functionality of the baje vip platform.

Please note that baje vip does not use third-party advertising cookies or behavioural profiling cookies for the purpose of serving targeted advertisements on external websites. Our analytics are internal and used exclusively to improve the baje vip experience.

5 Data Security Measures

baje vip treats the security of your personal data as a fundamental operational priority. We maintain a comprehensive suite of technical and organisational security controls designed to protect your data against unauthorised access, accidental loss, alteration, or destruction. Key measures include:

• Transport layer encryption: All data transmitted between your browser or mobile device and baje vip servers is protected by TLS 1.2 or higher (256-bit SSL). The padlock symbol in your browser confirms this encryption is active.
• Password hashing: Passwords are never stored in plain text. We use industry-standard cryptographic hashing algorithms with salt to store password credentials securely.
• Access controls: Access to personal data within baje vip's internal systems is strictly role-based. Only staff members whose job function requires access to specific data categories are granted that access, and all access is logged and auditable.
• Two-factor authentication: Players are strongly encouraged to enable SMS-based two-factor authentication (2FA) on their accounts. Internal staff accounts with access to player data require 2FA as a mandatory control.
• Penetration testing: baje vip's platform undergoes regular independent security assessments to identify and remediate vulnerabilities before they can be exploited.
• Incident response: In the unlikely event of a data breach that poses a risk to your rights or interests, baje vip will notify affected players promptly via the email address registered on their account, and will take immediate remediation steps.

6 Data Retention and Deletion

baje vip retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or for as long as required by applicable law and regulation. The following retention periods apply:

When a retention period expires, personal data is either securely deleted (using cryptographic erasure or physical destruction of storage media, as appropriate) or permanently anonymised so that it can no longer be associated with any identifiable individual.

6.1 Requests for Early Deletion

If you close your account and wish to request deletion of your personal data ahead of the standard retention schedule, you may submit a deletion request to [email protected]. Please note that baje vip is legally required to retain certain categories of data (particularly KYC documents and financial transaction records) for the periods specified above, regardless of a deletion request. We will inform you clearly of which data we are legally obliged to retain and for how long, and will delete all other data as promptly as possible.

7 Your Data Rights

As a player registered on the baje vip platform, you have a number of rights with respect to your personal data. baje vip is committed to honouring these rights in a timely and transparent manner. Your rights include the following:

• Right of access: You may request a copy of all personal data baje vip holds about you at any time. We will provide this in a structured, commonly used format within 30 calendar days of a verified request.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. For most account details, you can update information directly in your account profile; for KYC documents, please contact support.
• Right to erasure: Subject to our legal retention obligations (see Section 6), you may request deletion of your personal data. We will comply with verified erasure requests for all data categories not subject to mandatory retention.
• Right to restrict processing: You may request that we temporarily restrict the processing of your personal data in certain circumstances — for example, while a rectification request is being resolved.
• Right to object: You may object at any time to processing carried out on the basis of baje vip's legitimate interests (such as analytics or fraud prevention). We will cease that processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw marketing consent: You may withdraw consent to receive marketing communications at any time, with no effect on your account status or access to platform features.
• Right to human review of automated decisions: Where an automated decision has had a significant effect on your account, you may request that the decision be reviewed by a member of the baje vip team.
• Right to data portability: You may request a machine-readable export of the personal data you provided to baje vip during the operation of your account, for the purpose of transferring it to another service provider.

7.1 How to Exercise Your Rights

To exercise any of the rights listed above, please send a written request to [email protected]. For security purposes, we will ask you to verify your identity before processing any data rights request. Requests are handled free of charge. We will respond within 30 calendar days; in complex cases, this period may be extended by a further 30 days, and you will be notified of any extension within the initial 30-day period.

8 Contact and Data Queries

If you have any questions about this Privacy Policy, about the personal data baje vip holds on your account, or about the way we process your information, please do not hesitate to contact our support team. We take all privacy enquiries seriously and will respond promptly and thoroughly.

Email: [email protected]
Support hours: 24 hours a day, 7 days a week, Bangladesh Standard Time (BST, UTC+6)

For formal data rights requests (access, erasure, portability, restriction), please use the subject line "Data Rights Request" when contacting us, and include your registered username and the specific right you wish to exercise. This helps us route your request to the correct team immediately and minimises processing time.

8.1 Changes to This Privacy Policy

baje vip reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, platform features, or applicable law. When material changes are made, we will notify registered players by email at least 14 calendar days before the updated policy takes effect. The "Last Updated" date at the top of this page will always reflect the date of the most recent revision. Continued use of the baje vip platform after the effective date of any update constitutes acceptance of the revised policy.

We encourage you to review this page periodically so you are always informed about how your personal data is handled. Previous versions of this Privacy Policy are available on request by contacting [email protected].