bbbaji Privacy Policy

1. Introduction

This Privacy Policy ("Policy") sets out the basis on which bbbaji ("we", "us", "our") collects, processes, stores, and shares personal data obtained from individuals ("you", "your", "Player") who visit, register on, or otherwise interact with the bbbaji platform accessible at bbbaji.net.

bbbaji is committed to handling your personal data responsibly, transparently, and in accordance with applicable data protection principles. By registering an account or using any service on the bbbaji platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.

2. Data Controller

For the purposes of applicable data protection law, bbbaji is the data controller in respect of personal data collected through the bbbaji platform. As data controller, bbbaji determines the purposes and means by which your personal data is processed.

All data-related enquiries, subject access requests, and complaints should be directed to the bbbaji data protection contact at [email protected]. We aim to respond to all data-related requests within thirty (30) calendar days of receipt.

3. Data We Collect

3.1 Information You Provide Directly

When you register an account, complete identity verification, make a deposit, or contact bbbaji support, you provide personal data that we collect and process. This includes:

• Identity data: Full legal name, date of birth, gender, and national identity card (NID) or passport number (collected during KYC verification).
• Contact data: Email address, mobile phone number, and city or district of residence within Bangladesh (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi).
• Account credentials: Username and hashed password. Passwords are never stored in plain text.
• Financial data: Mobile wallet identifiers (bKash, Nagad, Rocket, Upay account numbers) and transaction reference numbers. Full financial account credentials are never stored on bbbaji servers.
• Communications data: Messages, enquiries, and complaints submitted to the bbbaji support team via email or live chat.

3.2 Information Collected Automatically

When you access and use the bbbaji platform, certain technical and behavioural data is collected automatically by our systems:

• Device and technical data: IP address, device type, operating system, browser type and version, screen resolution, and time zone setting.
• Usage data: Pages visited, games played, bets placed, session duration, click-through paths, and feature interactions within the platform.
• Transaction data: Deposit and withdrawal history, amounts, timestamps, and payment method references.
• Log data: Server access logs, error logs, and security event logs, retained for the purposes of platform integrity, fraud detection, and dispute resolution.

3.3 Information from Third Parties

bbbaji may receive personal data about you from the following third-party sources:

• Payment processors: Transaction status confirmations and fraud screening results from bKash, Nagad, Rocket, Upay, and other Approved Payment Methods.
• KYC verification providers: Identity verification outcomes and document authenticity checks from third-party verification partners.
• Fraud prevention services: Risk scores and flagging alerts from independent fraud and anti-money-laundering screening services.

4. How We Use Your Data

bbbaji uses the personal data collected for the following defined purposes:

bbbaji does not use your personal data for unsolicited third-party marketing, profiling for credit decisions, sale to data brokers, or any purpose not listed in the table above. If we wish to process your data for a new purpose that is materially different from those listed, we will notify you and, where required, seek your explicit consent before doing so.

5. Legal Bases for Processing

bbbaji processes personal data on the following legal bases, depending on the purpose of processing:

• Contractual necessity: Processing required to perform the contract between bbbaji and the player — including account creation, deposit and withdrawal processing, and game participation.
• Legal obligation: Processing required to comply with applicable law, including anti-money-laundering regulations, age verification obligations, and responses to lawful regulatory requests.
• Legitimate interests: Processing carried out in furtherance of bbbaji's legitimate business interests — including fraud prevention, platform security, internal analytics, and responsible gaming monitoring — where those interests are not overridden by your rights and interests.
• Consent: Where processing is not covered by the above bases, bbbaji will seek your explicit consent. You may withdraw consent at any time by contacting [email protected], without affecting the lawfulness of processing that took place before withdrawal.

6. Data Sharing

6.1 Third-Party Service Providers

bbbaji shares personal data with carefully selected third-party service providers who support the operation of the platform. These providers act as data processors on bbbaji's behalf and are contractually prohibited from using your data for any purpose other than the specific service they provide to bbbaji. Categories of third-party processors include:

• Payment processing partners (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, and other Approved Payment Methods).
• KYC and identity verification service providers.
• Fraud screening and anti-money-laundering compliance services.
• Cloud hosting and data centre infrastructure providers.
• Customer support platform providers.
• Game software studios (e.g., Evolution Gaming, Pragmatic Play, Playtech, Ezugi) — limited to session and game integrity data only.

6.2 Regulatory and Law Enforcement Disclosures

bbbaji may disclose personal data to regulatory authorities, law enforcement agencies, or other government bodies where required to do so by applicable law, court order, or lawful regulatory direction. In such cases, bbbaji will disclose only the minimum data necessary to satisfy the lawful requirement and will, where legally permitted, notify the affected player.

6.3 Business Transfers

In the event that bbbaji undergoes a merger, acquisition, restructuring, or sale of assets, personal data held by bbbaji may form part of the transferred assets. In such an event, affected players will be notified by email prior to any transfer of their personal data to a new controller, and the acquiring entity will be bound by the terms of this Privacy Policy.

7. Cookies & Tracking Technologies

7.1 What Are Cookies

Cookies are small text files placed on your device by a website when you visit it. They allow the website to recognise your device on subsequent visits, remember your preferences, and maintain session state. bbbaji uses cookies and similar technologies (such as local storage and session tokens) solely for functional and analytical purposes.

7.2 Types of Cookies Used by bbbaji

• Strictly necessary cookies: Required for the platform to function. These include session authentication tokens, CSRF protection tokens, and load-balancing cookies. These cookies cannot be disabled without breaking core platform functionality.
• Functional cookies: Used to remember your preferences such as language settings, display preferences, and last-visited game category. These improve your experience on return visits.
• Analytical cookies: Used to collect aggregate, anonymised data about how players navigate and use the bbbaji platform. This data is used solely for internal product improvement. No personally identifiable information is included in analytical reports.

7.3 Third-Party and Advertising Cookies

bbbaji does not place third-party advertising cookies on your device. bbbaji does not participate in cross-site tracking networks or retargeting advertising programmes. The only third-party cookies that may be present are those set by embedded game providers (e.g., Evolution Gaming, Pragmatic Play) within their game iframes, which are subject to those providers' own privacy policies.

7.4 Managing Cookies

You may manage or disable cookies through your browser settings at any time. Please note that disabling strictly necessary cookies will prevent you from logging in and using the bbbaji platform. Disabling functional or analytical cookies will not affect your ability to play games or make transactions, but may reduce the quality of your experience.

8. Data Security

bbbaji implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• TLS/SSL encryption for all data transmitted between your device and the bbbaji platform.
• At-rest encryption for sensitive data stored in bbbaji databases, including identity documents and financial references.
• One-way cryptographic hashing (bcrypt) for all stored passwords.
• Role-based access controls ensuring that bbbaji staff can only access personal data necessary for their specific job function.
• Regular internal security audits and vulnerability assessments.
• Automated intrusion detection systems monitoring for unusual access patterns.
• Secure data centre infrastructure with physical access controls.

While bbbaji takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security against all threats. In the event of a data breach that is likely to result in a risk to your rights and freedoms, bbbaji will notify affected players without undue delay and will take all appropriate remedial action.

9. Data Retention

bbbaji retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law. The following retention periods apply as a general guide:

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Anonymised data that can no longer be linked to any identifiable individual is not subject to this Policy and may be retained for statistical and analytical purposes indefinitely.

10. Your Rights

As a player whose personal data is processed by bbbaji, you have the following rights in relation to that data. To exercise any of these rights, please contact [email protected] with the subject line "Data Subject Request — [Right Type]":

• Right of access: You may request a copy of the personal data bbbaji holds about you, together with information about how it is used and with whom it has been shared.
• Right to rectification: You may request the correction of any inaccurate or incomplete personal data bbbaji holds about you.
• Right to erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent and no other legal basis applies. This right is subject to bbbaji's legal obligation to retain certain data as set out in Section 9.
• Right to restriction of processing: You may request that bbbaji restricts the processing of your personal data in certain circumstances — for example, while a dispute about the accuracy of that data is being resolved.
• Right to data portability: You may request a copy of the personal data you provided to bbbaji in a structured, commonly used, machine-readable format.
• Right to object: You may object to the processing of your personal data where bbbaji relies on legitimate interests as the legal basis, including profiling for responsible gaming purposes.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

bbbaji will respond to all data subject requests within thirty (30) calendar days of receipt. In complex cases, this period may be extended by a further thirty (30) days, with notice provided to you. bbbaji will not charge a fee for exercising any of the above rights in ordinary circumstances.

11. Children's Privacy

The bbbaji platform is strictly for individuals aged 18 years or above. bbbaji does not knowingly collect, process, or retain personal data from individuals under the age of 18. If bbbaji discovers or is notified that personal data has been collected from a person under 18, that data will be deleted immediately, the associated account will be permanently closed, and any funds held in the account will be handled in accordance with the bbbaji Terms & Conditions.

If you believe that a person under the age of 18 has registered an account on bbbaji, please notify us immediately at [email protected].

12. Third-Party Links

The bbbaji platform may contain references to third-party services — for example, embedded game content from licensed providers such as Evolution Gaming, Pragmatic Play, Playtech, and Spribe. These third-party services operate under their own privacy policies, and bbbaji is not responsible for the data practices of those providers in relation to data processed within their own systems.

bbbaji does not include external links to unrelated third-party websites on the bbbaji platform. If you independently navigate to a third-party website, any personal data you provide to that site is governed by that site's own privacy policy and is outside bbbaji's control.

13. Policy Updates

bbbaji reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, operational requirements, or applicable legal obligations. The effective date at the top of this Policy will be updated whenever a revision is made.

Where changes are material — for example, a significant expansion of the categories of data collected or a new category of third-party sharing — bbbaji will notify registered players by email to their registered address at least fourteen (14) days before the revised Policy takes effect. For minor or clarificatory changes, the updated Policy will be published on this page without individual notification.

Your continued use of the bbbaji platform after the effective date of any revised Policy constitutes your acceptance of the updated terms. If you do not accept the revised Policy, you should cease using the platform and contact support to close your account.

14. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way bbbaji handles your personal data, please contact us using the details below:

• Email: [email protected] (plain text — not a clickable link)
• Subject line for data requests: "Data Subject Request — [Right Type]"
• Support hours: 24 hours a day, 7 days a week
• Time zone: Bangladesh Standard Time (BST, UTC+6)

We are committed to resolving all privacy-related enquiries fairly and promptly. If you are not satisfied with our response to a complaint, you may have the right to raise the matter with an applicable data protection supervisory authority in your jurisdiction.