baje88 Privacy Policy

baje88 ("baje88", "we", "us", or "our") operates the online betting and casino platform accessible at https://baje88.app and its associated subdomains (the "Platform"). baje88 is committed to protecting the privacy and personal data of all individuals who interact with the Platform, including registered players, visitors, and prospective users.

This Privacy Policy sets out the categories of personal data we collect, the purposes and legal bases for which we process that data, who we share it with, how long we retain it, and the rights available to you as a data subject. This policy applies to all personal data collected through the Platform, whether submitted directly by you during registration or gathered automatically through your use of the Platform.

This Privacy Policy should be read together with the baje88 Terms & Conditions and Responsible Gaming Policy, both of which form part of your agreement with baje88.

If you have questions about this policy or wish to exercise any of your data subject rights, please contact us at [email protected] at any time.

baje88 collects the following categories of personal data in connection with your use of the Platform:

We do not knowingly collect sensitive personal data (such as racial or ethnic origin, political opinions, religious beliefs, or health data) unless it is voluntarily provided by you in the context of a responsible gaming self-assessment, in which case it is treated with the highest level of confidentiality.

baje88 collects personal data through the following methods:

• Direct submission: Data you provide when you register an account, complete identity verification, make a deposit or withdrawal, contact customer support, respond to a survey, or participate in a promotion.
• Automated collection: Data gathered automatically by our servers and analytics systems each time you visit or interact with the Platform, including IP addresses, device identifiers, and behavioural data such as game session activity.
• Cookies and similar technologies: Session cookies, persistent cookies, and local storage objects placed on your device to maintain login state, remember preferences, and measure platform performance. See Section 7 for full details.
• Third-party sources: Identity and fraud-risk data received from our KYC verification partners when you complete the document verification process. Payment confirmation data from your payment provider (e.g., bKash, Nagad, Rocket) confirming transaction status. We do not purchase data lists from data brokers.

baje88 processes your personal data for the following clearly defined purposes:

• Account creation and management: To register your account, maintain your player profile, and provide you with access to the Platform's features.
• Identity verification (KYC): To verify your age and identity in compliance with responsible gaming obligations, and to prevent fraudulent account creation.
• Payment processing: To process deposits and withdrawals via your chosen payment method, reconcile transactions, and maintain accurate financial records.
• Fraud and security monitoring: To detect and prevent fraudulent activity, money laundering, collusion, and other prohibited conduct outlined in the Terms & Conditions.
• Responsible gaming compliance: To monitor betting patterns that may indicate problem gambling behaviour, and to administer self-exclusion, deposit limits, and cooling-off periods.
• Customer support: To respond to your enquiries, resolve disputes, and handle complaints effectively.
• Legal and regulatory compliance: To meet obligations imposed by applicable laws, including record-keeping, responding to lawful requests from authorities, and maintaining audit trails.
• Platform improvement: To analyse aggregate, anonymised usage data to improve the performance, design, and content of the Platform.
• Direct marketing (with consent): To send you promotional offers, bonus notifications, and news about new games or features — but only where you have given explicit consent and have not subsequently opted out.

baje88 relies on the following legal bases to process your personal data, depending on the specific processing activity:

• Contractual necessity: Processing required to perform the contract between you and baje88 — including account registration, payment processing, and the provision of betting and gaming services.
• Legal obligation: Processing necessary to comply with applicable legal requirements, including identity verification, anti-money-laundering checks, and responses to lawful authority requests.
• Legitimate interests: Processing carried out for baje88's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and aggregate analytics — provided such interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing for direct marketing communications and non-essential cookies, where your freely given, specific, and informed consent has been obtained. You may withdraw this consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

baje88 does not sell, rent, or trade your personal data to any third party for commercial or advertising purposes. We share your data only in the following strictly limited circumstances:

• Payment processors: Your payment details are shared with the relevant payment service provider (e.g., bKash, Nagad, Rocket, Upay, Visa, Mastercard) solely for the purpose of processing your transaction. These providers process your data under their own privacy policies and applicable financial regulations.
• KYC and identity verification providers: Your identity documents and personal details may be shared with our third-party KYC partner to verify your age and identity. This partner is contractually bound to use your data only for verification purposes.
• Fraud prevention services: Technical data including IP addresses and device fingerprints may be shared with fraud detection services to identify and block suspicious activity on the Platform.
• Game content providers: When you play a game from a third-party studio (e.g., Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi), your player session data (such as player ID and bet amounts) is transmitted to that provider's systems to facilitate game play. These studios operate under their own data protection frameworks.
• Legal and regulatory authorities: We will disclose your personal data to law enforcement agencies, courts, regulators, or other public authorities where we are required to do so by applicable law or a valid legal order.
• Professional advisers: baje88 may share limited personal data with its legal counsel, auditors, or insurers where strictly necessary for professional advice or insurance purposes, subject to confidentiality obligations.

All third parties with whom baje88 shares personal data are required to maintain the confidentiality of that data and to process it only for the specified purpose. baje88 conducts due diligence on its data processors and requires appropriate contractual safeguards to be in place.

baje88 uses cookies and similar browser-based storage technologies to operate the Platform effectively and to understand how it is used. The cookies we deploy fall into the following categories:

baje88 does not use third-party behavioural advertising cookies or cross-site tracking technologies. You may manage or delete cookies through your browser settings at any time; however, disabling strictly necessary cookies will prevent you from accessing your baje88 account.

baje88 implements a multi-layered security framework to protect your personal data from unauthorised access, accidental loss, destruction, or disclosure. Our security measures include, but are not limited to:

• SSL/TLS encryption: All data transmitted between your device and baje88 servers is encrypted using industry-standard Transport Layer Security (TLS). HTTP connections are automatically redirected to HTTPS.
• Data encryption at rest: Sensitive data stored in our databases — including identity documents, financial records, and authentication credentials — is encrypted using AES-256 encryption.
• Access controls: Access to personal data within baje88's systems is restricted to authorised personnel on a strict need-to-know basis. All access events are logged and subject to periodic audit.
• Penetration testing: baje88 engages independent security specialists to conduct regular penetration tests and vulnerability assessments of the Platform and underlying infrastructure.
• Incident response: baje88 maintains a documented data breach response procedure. In the event of a security incident that may affect your personal data, baje88 will notify affected players at their registered email address without undue delay.

While baje88 takes all reasonable technical and organisational measures to protect your data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your own account credentials and for ensuring that your device is adequately secured.

baje88 retains personal data for the minimum period necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by applicable legal, regulatory, tax, or audit obligations. The following general retention periods apply:

• Account and identity data: Retained for the duration of your account and for a period of five (5) years following permanent account closure, to satisfy potential legal and regulatory record-keeping requirements.
• Financial transaction records: Retained for a minimum of five (5) years from the date of the transaction, in accordance with financial record-keeping obligations.
• KYC documents: Retained for five (5) years following submission or account closure, whichever is later.
• Support correspondence: Retained for two (2) years from the date of the final message in the correspondence thread.
• Analytics data: Stored in anonymised, aggregated form with no fixed deletion timeline. Individually identifiable analytics data is anonymised within 90 days of collection.
• Marketing consent records: Retained for the duration of your consent and for one (1) year following withdrawal of consent, as evidence that communications were sent on a lawful basis.

When personal data is no longer required, baje88 deletes it securely or anonymises it so that it can no longer be associated with any individual. Requests for early deletion are handled in accordance with Section 10 (Your Rights).

Subject to applicable law, you hold the following rights in relation to your personal data held by baje88. To exercise any of these rights, please submit a written request to [email protected] with the subject line "Data Subject Request" and include your registered account username and a brief description of the right you wish to exercise.

• Right of access: You have the right to request a copy of all personal data baje88 holds about you, together with information about how it is processed.
• Right to rectification: You have the right to request correction of any inaccurate or incomplete personal data held about you.
• Right to erasure ("right to be forgotten"): You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (and no other legal basis applies), or where you object to processing and there are no overriding legitimate grounds. Note that erasure requests may be declined where retention is required by law.
• Right to data portability: Where processing is based on consent or contract, you may request a copy of your personal data in a structured, machine-readable format (e.g., CSV).
• Right to restriction: You may request that baje88 restrict processing of your data in certain circumstances, for example while the accuracy of data is being contested.
• Right to object: You have the right to object to processing carried out on the basis of legitimate interests or for direct marketing purposes. Where an objection to direct marketing is received, processing for that purpose will cease immediately.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that occurred prior to withdrawal.

baje88 will respond to all data subject requests within 30 calendar days of receipt. In complex cases, this period may be extended by a further 60 days, in which case you will be notified of the extension and the reason for it within the initial 30-day period.

The baje88 Platform is intended exclusively for individuals aged 18 years and over. baje88 does not knowingly collect personal data from anyone under the age of 18. If you believe that a person under 18 has provided personal data to baje88 — for example by creating a fraudulent account — please contact us immediately at [email protected]. Upon confirmation, baje88 will delete the personal data of the underage individual and permanently close the associated account.

baje88 employs age verification controls at the point of registration and during the KYC process to minimise the risk of underage access. Any account for which age cannot be conclusively verified will be suspended pending resolution.

baje88 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or Platform features. Where changes are material, baje88 will notify registered players via their registered email address at least 7 days before the revised policy takes effect.

The effective date and last updated date displayed at the top of this document will be revised each time a new version is published. It is your responsibility to review this policy periodically. Continued use of the Platform following the effective date of any revision constitutes acceptance of the updated policy.

Prior versions of this Privacy Policy may be requested by contacting us at [email protected].

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data baje88 holds about you, please contact our support team using the details below. All communications are handled in English and responded to within the timeframes stated in this policy.

• Email: [email protected] (plain text — not a clickable link)
• Subject line for data requests: "Data Subject Request"
• Subject line for privacy complaints: "Privacy Complaint"
• Support availability: 24 hours a day, 7 days a week, including Bangladeshi public holidays (BST, UTC+6)
• Response time: General enquiries within 24 hours; data subject requests within 30 calendar days

For questions about responsible gaming tools, self-exclusion, or deposit limits, please visit our Responsible Gaming page. For questions about the rules governing your use of the Platform, please refer to our Terms & Conditions.