Privacy Policy — baje222

1. Data We Collect

baje222 collects personal data only to the extent necessary to operate a safe, fair, and legally compliant online casino and sports betting platform. The categories of personal data we process are described below.

1.1 Registration Data

When you create a baje222 account, we collect the information you provide directly during the registration process. This includes your full legal name, date of birth, residential address (city, district, and division within Bangladesh), email address, and the username and password you choose. Providing accurate registration data is a condition of using the platform; we reserve the right to suspend accounts where the information provided is found to be false or incomplete.

1.2 Identity Verification (KYC) Data

As part of our Know Your Customer (KYC) obligations, we may request and retain copies of identity documents to verify your identity and age. These may include your National ID Card (NID), passport, or driver's licence, together with a recent utility bill or bank statement as proof of address. KYC documents are processed securely and accessed only by authorised personnel for verification purposes.

1.3 Financial Data

We collect the payment account details you provide when making deposits or requesting withdrawals. For mobile wallet transactions (bKash, Nagad, Rocket, Upay), this includes your registered mobile number. For card transactions (Visa, Mastercard), we store only a masked card reference and the card issuer's name — full card numbers are never stored on baje222 servers. For bank transfers (Dutch-Bangla Bank and others), we may collect account holder name and account number to process your withdrawal.

1.4 Transactional Data

baje222 automatically records all financial transactions associated with your account, including deposits, withdrawals, bonus credits, wager amounts, winnings, and refunds. Each transaction record includes the date and time (Bangladesh Standard Time, BST UTC+6), the amount in Bangladeshi Taka (BDT ৳), the payment method used, and the transaction status. These records are retained for audit, fraud prevention, and dispute resolution purposes.

1.5 Usage & Technical Data

When you access baje222, our servers automatically collect certain technical data including your IP address, browser type and version, operating system, device type (desktop, mobile, or tablet), referring URL, pages visited, session duration, and in-game activity logs. This data is used to maintain platform security, optimise performance, and detect fraudulent or anomalous behaviour.

1.6 Communications Data

If you contact our support team via email or live chat, we retain a record of those communications including the content of your messages, the date and time of contact, and any resolution steps taken. This allows us to maintain service continuity and reference prior interactions when handling follow-up queries.

1.7 Responsible Gaming Data

If you use any of our responsible gaming tools — including deposit limits, session time limits, cooling-off periods, or self-exclusion — we record the details of those elections. This data is treated with the highest level of confidentiality and is used solely to honour your responsible gaming preferences and to inform our player welfare monitoring processes.

2. How We Use Your Data

baje222 processes personal data on the basis of contractual necessity, legitimate interests, and legal obligations. The table below summarises the primary purposes for which we use the data we collect.

Purpose	Data Categories Used	Legal Basis
Account creation and management	Registration data, KYC data	Contractual necessity
Processing deposits and withdrawals	Financial data, transactional data	Contractual necessity
Identity and age verification	KYC data, registration data	Legal obligation
Fraud prevention and AML compliance	Financial data, usage data, KYC data	Legal obligation / Legitimate interests
Customer support and dispute resolution	Communications data, transactional data	Contractual necessity
Responsible gaming compliance	Responsible gaming data, usage data	Legal obligation / Legitimate interests
Platform security and abuse prevention	Usage data, technical data	Legitimate interests
Promotional communications (with consent)	Registration data, usage data	Consent
Platform analytics and improvement	Usage data, technical data	Legitimate interests

baje222 will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or establishing a separate lawful basis for the new processing activity.

2.1 Marketing Communications

With your consent, baje222 may send you promotional emails or platform notifications about bonuses, seasonal offers (such as Eid promotions, Pohela Boishakh specials, or BPL-season reload bonuses), new game launches, and platform updates. You may withdraw your consent and opt out of marketing communications at any time by updating your notification preferences in your account settings or by contacting support at support@baje222. Opting out of marketing does not affect the delivery of essential transactional communications such as deposit confirmations, withdrawal notifications, and account security alerts.

3. Data Sharing & Disclosure

baje222 does not sell, rent, or trade your personal data to third parties for their own marketing purposes under any circumstances. We share personal data only where strictly necessary and on a need-to-know basis, as described below.

3.1 Payment Processing Partners

To facilitate deposits and withdrawals, baje222 shares the minimum necessary financial data with our payment processing partners, including bKash, Nagad, Rocket, Upay, Visa, Mastercard, and Dutch-Bangla Bank. Each payment partner operates under its own privacy policy and is responsible for the processing of data within its own systems. baje222 is not responsible for the data practices of third-party payment providers once data has been transmitted to them for transaction processing.

3.2 Game Content Providers

Game studios whose content is available on baje222 — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — may receive anonymised or pseudonymised session data for the purpose of game performance monitoring, RNG auditing, and RTP compliance. These providers do not receive personally identifiable information such as your name, address, or payment details.

3.3 Legal and Regulatory Disclosure

baje222 may disclose personal data to law enforcement agencies, regulatory bodies, or other competent authorities when required to do so by applicable law, court order, or enforceable governmental request. We will endeavour to notify you of any such disclosure where legally permissible to do so.

3.4 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or substantially all assets of baje222, your personal data may be transferred as part of that transaction. We will provide reasonable notice of any such transfer and ensure that the receiving entity is bound by data protection obligations no less protective than those described in this Privacy Policy.

4. Cookies & Tracking

baje222 uses cookies and similar tracking technologies to operate core platform features, analyse usage patterns, and deliver a personalised experience. A cookie is a small text file placed on your device by the baje222 server when you visit the platform.

4.1 Types of Cookies We Use

• Strictly Necessary Cookies: Required for the platform to function. These include session management cookies that keep you logged in during your visit and security tokens that protect your account from cross-site request forgery. These cookies cannot be disabled without impairing core functionality.
• Functional Cookies: Remember your preferences such as language settings, preferred deposit method, and responsible gaming tool configurations, so you do not need to re-enter them on each visit.
• Analytics Cookies: Collect anonymised data about how players navigate baje222, which pages are most visited, and where users encounter friction. This data is used solely to improve the platform experience and is not linked to personally identifiable information.
• Marketing Cookies: Used to measure the effectiveness of our promotional campaigns and to limit the frequency of promotional messages shown to you. These cookies are only placed with your consent.

4.2 Managing Cookies

You can control and manage cookies through your browser settings. Most modern browsers allow you to block or delete cookies, restrict cookies to specific sites, or receive a notification when a cookie is set. Please note that disabling strictly necessary cookies will affect your ability to log in and use core platform features on baje222. Browser-level cookie controls vary by browser; consult your browser's help documentation for specific instructions.

5. Data Retention

baje222 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, to comply with our legal and regulatory obligations, and to resolve any outstanding disputes or enforce our agreements.

• Account and registration data is retained for the lifetime of the account and for a period of five (5) years following permanent account closure.
• KYC and identity verification documents are retained for a minimum of five (5) years from the date of submission, in accordance with applicable anti-money laundering record-keeping requirements.
• Transactional and financial records are retained for a minimum of seven (7) years to comply with financial record-keeping obligations.
• Customer support communications are retained for three (3) years from the date of the interaction.
• Usage and technical data is typically retained for thirteen (13) months in an identifiable form, after which it is aggregated or anonymised.
• Responsible gaming records are retained for five (5) years to support any future welfare interventions or self-exclusion reinstatement requests.

When the applicable retention period expires, personal data is securely deleted or irreversibly anonymised in accordance with our internal data destruction procedures.

6. Security Measures

baje222 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction.

6.1 Technical Safeguards

All data transmitted between your device and baje222 servers is encrypted in transit using TLS (Transport Layer Security) with a minimum of 128-bit encryption. Sensitive data at rest, including KYC documents and financial records, is encrypted using industry-standard AES-256 encryption. Access to production databases containing personal data is restricted to authorised personnel only and is protected by multi-factor authentication. baje222 conducts periodic security assessments and vulnerability scans to identify and remediate potential weaknesses in our infrastructure.

6.2 Organisational Safeguards

Access to personal data is granted on a strict need-to-know basis. All staff who handle personal data undergo data protection training upon onboarding and periodically thereafter. Our data processing agreements with third-party service providers require them to implement security measures consistent with or exceeding those described in this section.

6.3 Data Breach Response

In the event of a personal data breach that poses a risk to the rights and freedoms of affected players, baje222 will assess the breach promptly and notify affected individuals without undue delay. Notifications will be sent to the email address registered on your baje222 account and will include a description of the nature of the breach, the categories of data affected, and the steps we are taking to mitigate the impact.

7. Your Privacy Rights

As a player on baje222, you hold a number of rights in relation to your personal data. We are committed to honouring these rights promptly and transparently.

• Right of Access: You may request a copy of the personal data we hold about you at any time. We will respond to verified access requests within a reasonable timeframe.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update basic account details directly from your profile settings; for KYC-linked data corrections, please contact support.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal and regulatory retention obligations. Certain data — particularly financial and KYC records — must be retained for defined statutory periods and cannot be erased on request during those periods.
• Right to Restrict Processing: You may request that we restrict the processing of your personal data in certain circumstances, such as while a data accuracy dispute is being resolved.
• Right to Data Portability: Where processing is based on your consent or contractual necessity and is carried out by automated means, you may request that your data be provided to you in a structured, commonly used, machine-readable format.
• Right to Withdraw Consent: Where processing is based on your consent (for example, marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
• Right to Object: You may object to the processing of your personal data where it is based on our legitimate interests. We will honour your objection unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.

To exercise any of the above rights, please contact our Data Protection Officer at support@baje222 with the subject line "Privacy Rights Request". We may ask you to verify your identity before acting on your request.

8. Contact & DPO

baje222 has appointed a Data Protection Officer (DPO) to oversee our data protection compliance programme and to serve as the primary point of contact for all privacy-related queries and rights requests. If you have any questions, concerns, or complaints regarding this Privacy Policy or the processing of your personal data, please reach out using the contact details below.

Data Protection Officer
baje222
Email: support@baje222
Response target: within 5 business days (Bangladesh Standard Time, BST UTC+6)

If you are not satisfied with our response to a privacy complaint, you have the right to escalate the matter to the relevant data protection authority or competent court in your jurisdiction. baje222 is committed to cooperating with any lawful investigation or inquiry arising from a player privacy complaint.

8.1 Policy Updates

baje222 reviews and updates this Privacy Policy periodically to reflect changes in our data processing practices, applicable laws, or platform features. When a material change is made, we will notify registered players by email or via a prominent notice on the platform at least seven (7) days before the change takes effect. The effective date at the top of this policy will always reflect the date of the most recent revision. We encourage you to review this page periodically.