baj99 Privacy Policy

This Privacy Policy ("Policy") describes how baj99 ("we", "us", "our", "Platform") collects, uses, stores, and discloses personal information about users ("you", "User", "Player") of the baj99 website located at https://baj99.vip and all associated services. This Policy forms part of the baj99 Terms and Conditions, which govern your use of the platform.

By registering an account on baj99 or continuing to use the platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any aspect of this Policy, you should discontinue use of the platform immediately and contact our support team to close your account.

baj99 collects personal information in three primary ways: information you provide directly when registering or using the platform, information generated automatically through your use of the platform, and information received from third-party service providers involved in payment processing or identity verification.

Information You Provide Directly

When you register for a baj99 account, interact with our support team, or use any feature of the platform, you may provide the following categories of personal information:

• Identity information: full legal name, date of birth, and a copy of a government-issued identity document (National ID card or passport) required for KYC verification.
• Contact information: mobile phone number registered in Bangladesh, and optionally an email address for account notifications and correspondence.
• Account credentials: username and password (passwords are stored in hashed, non-reversible form and are never visible to baj99 staff).
• Support correspondence: messages sent to our support team via live chat or email, including any attachments or screenshots you provide.
• Responsible gaming preferences: deposit limits, loss limits, time-out settings, and self-exclusion requests as configured by you on the platform.

Information Collected Automatically

When you access or use the baj99 platform, certain technical and behavioural data is collected automatically by our systems. This data is used primarily for platform security, fraud prevention, and service improvement:

• Device and connection data: IP address, device type, operating system version, browser type and version, and mobile network identifier.
• Usage data: pages visited, features used, betting and gaming activity logs, session duration, and navigation patterns within the platform.
• Transaction logs: records of all deposits, withdrawals, bonus credits, and bet placements associated with your account, including timestamps and amounts.
• Cookie and tracking data: information collected via session cookies, persistent cookies, and similar tracking technologies as described in Section 7 of this Policy.

Information from Third Parties

baj99 may receive personal data about you from third-party service providers who assist in operating the platform. This includes identity verification providers who confirm your KYC documentation, payment processors (bKash, Nagad, Rocket, Upay, and banking partners) who confirm transaction status, and fraud detection services that flag unusual account activity patterns. Data received from these providers is used solely for the purpose for which it was shared and is handled under equivalent data protection standards.

The table below sets out the primary purposes for which baj99 processes personal data, along with the category of data used for each purpose:

baj99 processes personal data only where a valid legal basis exists for doing so. The legal bases on which baj99 relies include the following:

• Contractual necessity: Processing required to fulfil our contractual obligations to you under the Terms and Conditions — including account management, transaction processing, and delivering the gaming services you have requested.
• Legal obligation: Processing required to comply with applicable laws and regulatory requirements, including anti-money laundering (AML) obligations, know-your-customer (KYC) regulations, and responsible gaming requirements.
• Legitimate interests: Processing for purposes of fraud prevention, platform security, service improvement, and internal analytics — where these interests are not overridden by your privacy rights.
• Consent: Processing for direct marketing, personalised promotions, and non-essential cookies — where you have given explicit consent. You may withdraw consent at any time by contacting support or updating your account preferences.

baj99 does not sell, rent, or trade your personal data to any third party for their independent marketing or commercial purposes. Personal data is shared with third parties only in the limited circumstances described below.

Service Providers

baj99 engages trusted third-party service providers who process personal data on our behalf solely for the purpose of delivering services to the platform. These providers are bound by data processing agreements that require them to process personal data only as instructed by baj99 and to maintain appropriate security standards. Current categories of service providers include:

• Payment processors: bKash, Nagad, Rocket, Upay, and banking partners who process deposit and withdrawal transactions. These providers receive only the transaction data necessary to execute the payment.
• Identity verification providers: Companies that verify identity documents and confirm that players meet the age and eligibility requirements set out in the Terms and Conditions.
• Fraud and security services: Technology providers who analyse account and transaction data patterns to detect fraudulent activity, money laundering, or violations of platform rules.
• IT and infrastructure providers: Cloud hosting and platform infrastructure providers who store and process platform data as part of the technical operation of the service.

Legal and Regulatory Disclosures

baj99 may disclose personal data to law enforcement agencies, regulatory authorities, or other government bodies where required to do so by applicable law, court order, or binding regulatory direction. In such circumstances, baj99 will disclose only the minimum personal data necessary to satisfy the legal requirement and will, where legally permitted, notify the affected account holder of the disclosure.

baj99 treats payment and financial data with the highest level of care. When you make a deposit or request a withdrawal through bKash, Nagad, Rocket, Upay, or a bank transfer, the following data handling principles apply:

• Payment credentials (mobile banking PINs, card numbers, bank account numbers) are never stored by baj99. These are entered directly into the relevant payment provider's secure interface and are processed exclusively by that provider.
• Transaction records (amounts, timestamps, payment method type, and transaction reference numbers) are retained in baj99's system for a minimum of 5 years to satisfy financial record-keeping and anti-money laundering obligations.
• The mobile number used for mobile banking transactions must match the mobile number registered on your baj99 account. This matching requirement is a security control designed to prevent unauthorised withdrawals.

All financial data transmitted between your device and baj99's servers is encrypted using SSL/TLS protocols. baj99 does not store full payment account numbers and relies exclusively on tokenised references provided by payment processors for reconciliation purposes.

baj99 uses cookies and similar tracking technologies to operate the platform effectively, maintain session security, and understand how users interact with the service. A cookie is a small data file placed on your device by the platform when you visit it. Cookies do not contain payment credentials or passwords.

Types of Cookies We Use

baj99 uses three categories of cookies on the platform:

• Strictly necessary cookies: These are essential for the platform to function. They maintain your login session, remember your language preference, and ensure secure navigation between pages. These cookies cannot be disabled without breaking core platform functionality.
• Performance and analytics cookies: These cookies collect aggregated, anonymised data about how users interact with the platform — such as which pages are visited most frequently and where users encounter errors. This data is used to improve the platform experience.
• Marketing and personalisation cookies (with consent only): If you have consented to receive personalised promotions, these cookies help us show you relevant offers based on your gaming preferences and activity history. You may withdraw this consent at any time.

You can manage cookie preferences through your device's browser settings. Note that disabling strictly necessary cookies will affect your ability to log in and use core platform features. Disabling performance or marketing cookies will not affect your ability to place bets or access games.

baj99 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply:

• Active account data (identity information, contact details, gaming preferences): retained for the duration of the account relationship plus a minimum of 5 years following account closure, to meet legal and regulatory obligations.
• Transaction records: retained for a minimum of 5 years from the date of the transaction in accordance with financial record-keeping requirements.
• Support correspondence and dispute records: retained for a minimum of 3 years from the date of the final communication, to enable resolution of any follow-up queries or disputes.

When personal data is no longer required and there is no legal basis for continued retention, baj99 securely deletes or anonymises the data so that it can no longer be associated with you as an individual. Anonymised, aggregated data (from which you cannot be identified) may be retained indefinitely for statistical and platform improvement purposes.

As a user of the baj99 platform, you have the following rights in relation to your personal data. To exercise any of these rights, please contact the baj99 support team using the contact details in the footer of this website:

• Right of access: You may request a copy of all personal data that baj99 holds about you. We will respond to verified access requests within 30 days.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Minor corrections (such as updating a mobile number) can be made directly through your account settings.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to overriding legal retention obligations. Note that transaction records and KYC data must be retained for minimum statutory periods even after account closure.
• Right to restrict processing: In certain circumstances (for example, where you contest the accuracy of data we hold), you may request that processing of your personal data be restricted while the matter is investigated.
• Right to object: You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, though baj99 may be able to demonstrate compelling grounds to continue.
• Right to withdraw consent: Where processing is based on your consent (such as marketing communications or non-essential cookies), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

baj99 will respond to all valid data rights requests within 30 calendar days of receipt. In complex cases, this period may be extended by a further 30 days, in which case you will be notified of the extension and the reason for it. There is no charge for exercising your rights, though baj99 may charge a reasonable fee for manifestly unfounded or excessive requests.

baj99 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These include:

• SSL/TLS encryption for all data transmitted between your device and our servers, ensuring that data in transit cannot be intercepted or read by unauthorised parties.
• Password hashing using industry-standard one-way cryptographic algorithms. baj99 staff cannot view your password in plain text at any time.
• OTP-based two-factor authentication for logins from new or unrecognised devices, reducing the risk of account takeover even where login credentials have been compromised.
• Role-based access controls limiting which baj99 staff members can access personal data, with access granted only to those with a documented need to do so for their job function.

Despite these measures, no internet-based platform can guarantee absolute security. In the event of a personal data breach that poses a risk to your rights and freedoms, baj99 will notify affected users as soon as reasonably practicable and will take immediate steps to contain and remediate the breach.

The baj99 platform is strictly intended for adults aged 21 years and above. baj99 does not knowingly collect personal data from individuals under the age of 21. Age verification is conducted as part of the KYC process for all new accounts. If baj99 discovers that personal data has been collected from a person under the age of 21, that data will be immediately and permanently deleted, the associated account will be suspended, and any funds held in that account will be dealt with in accordance with applicable procedures.

baj99 may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or the features and services offered on the platform. When material changes are made — meaning changes that significantly affect how we collect or use your personal data — baj99 will notify registered users via their registered mobile number or email address at least 7 days before the changes take effect.

Minor updates — such as clarifications of existing language, corrections of typographical errors, or additions that expand your rights rather than restrict them — may be made without prior notice. The date at the top of this page always reflects the date of the most recent revision. Continued use of the platform after the effective date of any change constitutes acceptance of the updated Policy.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a concern about how baj99 handles your personal data, please contact our support team using the email address displayed in the footer of this website. Our support team is available 24 hours a day, 7 days a week, and handles all data-related enquiries in strict confidence.

When submitting a data rights request, please include your full name, registered mobile number, and a clear description of your request. This information enables our team to locate your account and respond accurately. We may require identity verification before processing your request to protect the security of your personal data.