baj9 Privacy Policy
At baj9, protecting your personal information is a responsibility we take seriously. This Privacy Policy sets out in clear, formal terms exactly what data we collect from users of our Bangladesh online casino and sports betting platform, how we use it, who we share it with, and the rights you hold over your own information.
How baj9 Protects Your Data
These six principles summarise the way baj9 approaches data privacy. The full legal detail follows in the policy sections below.
Minimal Data Collection
baj9 collects only the personal data that is strictly necessary to provide our services, verify your identity, process transactions, and comply with applicable legal and regulatory obligations. We do not collect data speculatively.
256-bit SSL Encryption
All data transmitted between your device and the baj9 Platform is protected using 256-bit SSL encryption — the same standard used by leading financial institutions and mobile banking services such as bKash and Nagad.
No Unauthorised Sharing
baj9 will never sell, rent, or trade your personal information to third parties for their own marketing purposes. Data is shared only with trusted service partners who are contractually bound to protect it.
Your Rights, Your Control
You have the right to access, correct, port, or request deletion of your personal data at any time. Our support team is available 24/7 to assist with all data rights requests, which we aim to process within 30 days.
Transparent Cookie Use
baj9 uses cookies and similar tracking technologies solely to improve platform performance, remember your preferences, and deliver a personalised gaming experience. We do not use third-party advertising cookies that track you across unrelated websites.
Defined Retention Periods
baj9 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. When data is no longer needed, it is securely deleted or anonymised in accordance with our retention schedule.
1 Introduction
This Privacy Policy ("Policy") is issued by baj9 ("we", "us", "our", or "the Platform") and applies to all personal data collected from users ("you", "your") who access, register on, or interact with the baj9 online casino and sports betting platform at baj9.io and any associated subdomains, mobile interfaces, and applications (collectively, "the Platform").
baj9 is committed to protecting the privacy and security of your personal information. We process your personal data only for clearly defined, legitimate purposes, and we implement robust technical and organisational measures to keep your data safe at all times. This Policy explains in plain and formal terms how we handle your information from the moment you first visit the Platform through to the conclusion of your relationship with us.
By accessing or using the baj9 Platform, registering an account, making a deposit, or placing a wager, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you should discontinue use of the Platform immediately.
2 Personal Data We Collect
baj9 collects personal data from you in two principal ways: directly, when you provide it to us, and automatically, when you interact with the Platform. The categories of personal data we collect are set out below.
2.1 Data You Provide Directly
| Category | Examples | When Collected |
|---|---|---|
| Identity Data | Full name, date of birth, gender, nationality | Account registration; KYC verification |
| Contact Data | Email address, mobile phone number | Account registration; support enquiries |
| Address Data | Residential address (district, division, postal code) | KYC verification; withdrawal processing |
| Identity Documents | National ID card number, passport number, driving licence number; document scans | KYC / age verification |
| Financial Data | bKash / Nagad / Rocket / Upay account numbers; transaction reference IDs | Deposits; withdrawals; anti-money-laundering checks |
| Account Credentials | Username; hashed and salted password | Account registration |
| Communications Data | Live chat transcripts; support emails; feedback submissions | Whenever you contact baj9 support |
2.2 Data Collected Automatically
When you access the baj9 Platform, our systems automatically collect certain technical data about your device and browsing behaviour. This includes:
- Device & Technical Data: IP address, device type (mobile, desktop, tablet), operating system, browser type and version, screen resolution, and device identifiers.
- Usage Data: Pages and game categories visited, links clicked, session duration, games played, wagers placed, and features used.
- Location Data: General geographic location inferred from your IP address (country and city level). baj9 does not access precise GPS location data.
- Log Data: Server logs including timestamps, request types, referring URLs, and error logs.
- Cookie Data: Data collected via cookies and similar tracking technologies as described in Section 6 of this Policy.
2.3 Data from Third Parties
In certain circumstances, baj9 may receive personal data about you from third-party sources, including:
- KYC and identity verification service providers who assist in validating the documents you submit.
- Mobile financial service providers (bKash, Nagad, Rocket, Upay) who confirm the status of payment transactions.
- Fraud detection and anti-money-laundering screening services that cross-reference your data against sanctions lists and fraud databases.
- Publicly available sources such as electoral registers and commercial databases, where relevant for identity verification.
3 How We Use Your Personal Data
baj9 uses the personal data we collect for the specific purposes listed below. We will not use your data for any purpose that is incompatible with those for which it was originally collected without first obtaining your consent or otherwise satisfying a valid legal basis for the new processing activity.
- Account Creation & Management: To register your account, verify your identity, manage your profile, and maintain your account in good standing on the baj9 Platform.
- Service Delivery: To enable you to access and participate in casino games (slots, live dealer, table games), sports betting markets (cricket BPL, T20 World Cup, IPL, football), and all other Platform features.
- Payment Processing: To process deposits and withdrawals via bKash, Nagad, Rocket, and Upay in Bangladeshi Taka (BDT), and to maintain accurate financial records of all transactions on your account.
- KYC & Age Verification: To verify that you are at least 21 years of age and to confirm your identity as required for responsible gaming compliance and anti-money-laundering obligations.
- Security & Fraud Prevention: To detect, investigate, and prevent fraudulent transactions, multiple account creation, bonus abuse, collusion, and other prohibited activities as defined in our Terms & Conditions.
- Customer Support: To respond to your enquiries, resolve disputes, and provide technical assistance via live chat, email, and WhatsApp.
- Legal & Regulatory Compliance: To comply with applicable laws, regulations, and lawful requests from competent authorities, including anti-money-laundering (AML) obligations.
- Platform Improvement: To analyse usage patterns and technical performance data in order to improve the Platform's design, functionality, game catalogue, and user experience.
- Responsible Gaming: To monitor gaming behaviour for indicators of problem gambling, to administer responsible gaming tools (deposit limits, cooling-off periods, self-exclusion), and to communicate relevant support resources to at-risk users.
- Marketing Communications: To send you promotional offers, bonus notifications, and tournament announcements by email or in-platform notification — but only where you have given explicit consent to receive such communications. You may withdraw consent at any time.
4 Legal Basis for Processing
baj9 processes your personal data only where a valid legal basis exists. The primary legal bases on which we rely are as follows:
- Contractual Necessity: The processing is necessary to perform the contract between you and baj9 — that is, to provide the gaming and betting services you have registered to use, to process your deposits and withdrawals, and to manage your account.
- Legal Obligation: The processing is necessary for baj9 to comply with applicable legal and regulatory obligations, including KYC/AML requirements, age verification obligations, and lawful orders from competent authorities.
- Legitimate Interests: The processing is necessary for baj9's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and service improvement — provided that such interests are not overridden by your fundamental rights and interests.
- Consent: For certain processing activities — in particular, the sending of direct marketing communications and the use of non-essential cookies — baj9 relies on your explicit, freely given, and informed consent. You have the right to withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
5 Data Sharing & Disclosure
5.1 Trusted Service Partners
baj9 may share your personal data with carefully selected third-party service providers who assist in the operation of the Platform. These providers are contractually required to process your data only on our documented instructions and to implement appropriate security measures. Categories of third-party recipients include:
- KYC & Identity Verification Providers: Third-party services that verify the authenticity of identity documents you submit during the account verification process.
- Payment Service Providers: Mobile financial services (bKash, Nagad, Rocket, Upay) and payment gateway operators who process your deposits and withdrawals in BDT.
- Game Content Providers: Licensed game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi, who may receive a pseudonymous player identifier and session data in order to power their games on the Platform. These providers do not receive your full personal profile.
- IT Infrastructure Providers: Cloud hosting, database management, and content delivery network (CDN) providers who store and transmit Platform data on our behalf.
- Customer Support Tools: Live chat and helpdesk platform providers who facilitate communication between you and the baj9 support team.
- Fraud & AML Screening Services: Third-party providers who screen user data against sanctions lists, politically exposed persons (PEP) registers, and fraud databases.
5.2 Legal Disclosures
baj9 may disclose your personal data to law enforcement agencies, regulatory authorities, courts, or other competent public bodies where we are legally required to do so, or where such disclosure is necessary to protect the rights, property, or safety of baj9, its users, or the public.
5.3 Business Transfers
In the event of a merger, acquisition, restructuring, or sale of all or part of baj9's business assets, your personal data may be transferred to the successor entity as part of that transaction. You will be notified of any such transfer and of any material change to how your data is processed as a result.
6 Cookies & Tracking Technologies
6.1 What Are Cookies?
Cookies are small text files placed on your device by websites you visit. They are widely used to make websites function correctly, to remember user preferences, and to provide analytical information to site operators. baj9 uses cookies and similar technologies (such as local storage and session tokens) on the Platform.
6.2 Types of Cookies We Use
| Cookie Type | Purpose | Duration |
|---|---|---|
| Strictly Necessary | Enable core Platform functionality — logging in, maintaining your session, processing transactions, and ensuring security. Cannot be disabled. | Session / up to 24 hours |
| Functional | Remember your language preference, game display settings, and other personalisation choices to improve your experience. | Up to 12 months |
| Analytical / Performance | Collect aggregated, anonymised data about how users navigate and interact with the Platform, enabling baj9 to identify issues and improve performance. | Up to 24 months |
| Responsible Gaming | Store your responsible gaming settings (deposit limits, session reminders) locally to ensure they are applied consistently across sessions. | Up to 12 months |
baj9 does not use third-party advertising cookies or cross-site tracking cookies. You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will impair your ability to use the Platform.
7 Data Security
baj9 implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our key security controls include:
- 256-bit SSL/TLS Encryption: All data in transit between your device and baj9's servers is encrypted using industry-standard 256-bit SSL/TLS protocols — the same standard employed by major Bangladeshi mobile banking platforms including bKash and Nagad.
- Encryption at Rest: Sensitive personal and financial data stored on baj9's servers is encrypted at rest using AES-256 encryption.
- Access Controls: Access to personal data is strictly limited to authorised baj9 personnel and trusted service partners who require it to perform their designated functions. All access is logged and audited.
- Password Security: User passwords are stored exclusively in hashed and salted form. baj9 does not store passwords in plaintext and cannot retrieve your password — only reset it.
- Two-Factor Authentication (2FA): baj9 strongly encourages all users to enable 2FA on their accounts. 2FA adds a second layer of protection by requiring a one-time verification code in addition to your password.
- Regular Security Audits: baj9's platform and infrastructure undergo periodic security assessments to identify and remediate potential vulnerabilities.
- Incident Response: In the event of a data security incident that materially affects your personal data, baj9 will notify affected users promptly and take immediate steps to contain, investigate, and remediate the incident.
8 Data Retention
baj9 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, subject to any longer retention period required or permitted by applicable law.
| Data Category | Retention Period | Rationale |
|---|---|---|
| Account & Identity Data | Duration of active account + 5 years post-closure | Contractual record-keeping; AML compliance |
| KYC Documents | Duration of active account + 5 years post-closure | Regulatory and AML obligations |
| Financial Transaction Records | 7 years from transaction date | Financial record-keeping obligations |
| Communications & Support Records | 3 years from last interaction | Dispute resolution; service quality |
| Usage & Analytics Data | Up to 24 months (aggregated/anonymised) | Platform improvement; performance analysis |
| Marketing Consent Records | Until consent is withdrawn + 3 years | Proof of consent; compliance |
Following the expiry of the applicable retention period, personal data is securely deleted or permanently anonymised so that it can no longer be attributed to any identifiable individual. Anonymised, aggregated data may be retained indefinitely for statistical and analytical purposes.
9 Your Data Rights
As a user of the baj9 Platform, you hold the following rights in respect of your personal data. To exercise any of these rights, please contact our Data Privacy team using the contact details in Section 14. baj9 will respond to all verified data rights requests within 30 calendar days.
Right of Access
You have the right to request a copy of all personal data baj9 holds about you, along with information about how it is being used and with whom it has been shared.
Right to Rectification
You have the right to request correction of any inaccurate or incomplete personal data baj9 holds about you. You may update most profile information directly from your account settings.
Right to Erasure
You have the right to request deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose it was collected, or where you have withdrawn consent.
Right to Restriction
You have the right to request that baj9 restricts the processing of your personal data in certain circumstances, such as while a dispute about its accuracy is being resolved.
Right to Portability
You have the right to receive a copy of the personal data you provided to baj9 in a structured, commonly used, machine-readable format, and to have that data transmitted to another controller where technically feasible.
Right to Withdraw Consent
Where baj9 relies on consent as the legal basis for processing, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of prior processing.
Please note that certain rights are subject to conditions and exceptions. For example, the right to erasure does not apply where baj9 is required to retain your data to comply with a legal obligation (such as AML record-keeping requirements). Where a limitation applies, baj9 will explain this clearly when responding to your request.
10 Children & Minors
The baj9 Platform is strictly intended for adults aged 21 years and above. baj9 does not knowingly collect personal data from individuals under the age of 21. If you are under 21, you must not register an account, access the Platform, or provide any personal information to baj9.
If baj9 becomes aware that personal data has been collected from a person under the age of 21, we will take immediate steps to delete that data, close the associated account, and return any deposited funds to the originating payment method. No winnings will be paid in such circumstances.
Parents and guardians who believe that their child may have accessed the baj9 Platform or provided personal data to us are encouraged to contact our support team immediately at [email protected]. We will investigate and take appropriate action without delay.
11 International Data Transfers
baj9 primarily stores and processes personal data within server infrastructure that serves the South Asian region. However, some of our trusted service partners — including game studio providers (such as Pragmatic Play, Evolution Gaming, and Microgaming) and certain IT infrastructure providers — may process data in jurisdictions outside Bangladesh.
Where personal data is transferred internationally, baj9 takes appropriate steps to ensure that adequate protections are in place. These steps may include contractual clauses that impose obligations on the recipient equivalent to those baj9 applies to the data itself, or reliance on the recipient's adherence to internationally recognised data protection frameworks.
By using the baj9 Platform, you acknowledge and consent to the transfer of your personal data to third-party service providers located in other jurisdictions where necessary for the delivery of services described in this Policy, subject to the safeguards described above.
12 Third-Party Links
The baj9 Platform does not contain links to external third-party websites for commercial or general browsing purposes. However, game content embedded on the Platform is provided by licensed third-party game studios (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) through integrated APIs. These studios operate under their own privacy policies, which govern the pseudonymous session data they receive when you play their games.
baj9 is not responsible for the privacy practices of third-party game studios. We encourage you to review the privacy policies of any third-party provider whose services you access through the Platform. The integration of game content from these studios does not constitute an endorsement of their independent privacy practices.
13 Updates to This Privacy Policy
baj9 reserves the right to amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, our business operations, or our data processing practices. When material changes are made, baj9 will notify registered users via email or prominent in-platform notification at least 14 days prior to the changes taking effect.
The date of the most recent revision is displayed at the top of this Policy as the "Last updated" date. We encourage you to review this Policy periodically to stay informed about how baj9 protects your personal data. Your continued use of the Platform following the effective date of any updated Policy constitutes your acceptance of the revised terms.
Where changes to this Policy require fresh consent from you — for example, where we propose to use your personal data for a new purpose that is materially different from the original purpose — baj9 will seek that consent separately before the new processing activity commences.
14 Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy or the way baj9 processes your personal data, please contact our Data Privacy team using the details below. We are committed to resolving all privacy-related enquiries promptly and transparently.
Email: [email protected]
Response Time: Within 30 calendar days of receiving a verified request.
Live Support: 24/7 via in-platform live chat — Bangladesh Standard Time (BST, UTC+6).
WhatsApp: +880 1700 000000
When submitting a data rights request, please include your registered username, the email address associated with your baj9 account, and a clear description of your request. baj9 may need to verify your identity before processing certain requests in order to protect the security of your account.
Ready to Experience Bangladesh's Leading Casino?
Now that you know how baj9 protects your data, explore our 500+ games, live cricket betting markets, and instant BDT payment options. Responsible gaming starts with a platform you can trust.