Privacy Policy —
bajl app Data Commitment

bajl app collects personal data through several distinct channels in the course of providing its platform services to players across Bangladesh — including Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, and Mymensingh. The categories of data we collect are set out below.

Registration Data

When you create a bajl app account, we collect the information you provide during the registration form, which includes:

• Full legal name
• Date of birth (used to verify the 18+ age requirement)
• Residential address (including division, district, and postal code in Bangladesh)
• Mobile phone number (used for account authentication and transaction notifications)
• Email address (used for account communications and password recovery)
• Chosen username and encrypted password

Identity Verification (KYC) Data

As part of our Know Your Customer process, bajl app may request and retain copies of government-issued identity documents such as your National Identity Card (NID), passport, or driving licence. This data is collected solely to verify your identity, confirm your age, and satisfy our anti-money laundering obligations.

Financial Transaction Data

bajl app records all deposit and withdrawal transactions processed through supported payment methods including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard. Transaction records include the payment method type, transaction reference number, amount in Bangladeshi Taka (৳), timestamp, and transaction status. Full account numbers and card numbers are not stored by bajl app.

Gameplay and Betting Data

bajl app maintains logs of all game sessions, bets placed, sports wagers, game outcomes, and account balance changes. This data is used for dispute resolution, responsible gaming monitoring, fraud detection, and regulatory compliance purposes.

Technical and Device Data

When you access bajl app, our servers automatically collect certain technical data including your IP address, browser type and version, operating system, device type, screen resolution, referring URL, session duration, and page interaction data. This information is used to maintain platform security, optimise user experience, and detect suspicious access patterns.

Customer Support Data

When you contact bajl app's support team via live chat or email, we retain records of the communication including its content, timestamps, and the resolution outcome. This enables us to provide consistent service and maintain an accurate history of player interactions.

Summary of Data Categories

bajl app processes personal data only for specific, legitimate purposes directly connected to the operation of our platform and fulfilment of our obligations to players. We do not process personal data for purposes incompatible with those stated below without first obtaining your explicit consent.

• Account management: Creating, maintaining, and securing your bajl app player account, including authentication, password recovery, and account status management.
• Identity and age verification: Confirming that you are at least 18 years of age and that the identity you have provided during registration is accurate and verifiable, in compliance with our responsible gaming policies.
• Payment processing: Facilitating deposits via bKash, Nagad, Rocket, and other supported channels, and processing withdrawal requests to your verified payment method, denominated in Bangladeshi Taka (৳).
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent transactions, account takeover attempts, multi-accounting, money laundering, and other prohibited conduct as defined in our Terms & Conditions.
• Responsible gaming compliance: Monitoring gameplay patterns to identify potential problem gambling behaviours, enforcing deposit limits and self-exclusion requests, and providing appropriate interventions where required.
• Platform improvement: Analysing aggregated, anonymised usage data to improve bajl app's game library, user interface, loading performance, and overall player experience across the Bangladesh market.
• Customer support: Responding to enquiries, resolving disputes, processing complaints, and maintaining accurate support records for each player account.
• Legal and compliance obligations: Retaining records as required by applicable anti-money laundering regulations, responding to lawful requests from competent authorities, and defending legal claims where necessary.
• Marketing communications (opt-in only): Sending promotional emails or SMS notifications about bajl app bonuses, new games, or seasonal offers — but only where you have explicitly opted in to receive such communications. You may withdraw marketing consent at any time from your account settings.

bajl app does not sell, rent, or disclose your personal data to unaffiliated third parties for their own commercial purposes. However, in order to operate the bajl app platform effectively, certain personal data is shared with carefully selected service providers and partners under strict contractual data processing agreements.

Payment Processing Partners

To facilitate deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, Mastercard, and supported bank channels, bajl app shares transaction-relevant data (such as your registered mobile number or bank account reference) with the respective payment gateway operators. These partners are contractually obligated to process your data only for payment execution purposes and may not use it for any other purpose.

Identity Verification Providers

bajl app may use third-party KYC verification services to validate identity documents submitted by players. These providers receive only the minimum data required to perform the verification check (name, document number, date of birth) and are prohibited from retaining or reusing your data beyond the scope of the verification task.

Game Content Providers

bajl app's casino and sports betting content is delivered in part by third-party game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive anonymised session identifiers and technical data necessary to deliver game content to your device. They do not receive personally identifiable information such as your name, address, or payment details.

Fraud Prevention and Integrity Services

bajl app participates in shared fraud prevention initiatives and may share anonymised risk signals with industry-recognised fraud and gaming integrity organisations. This sharing is conducted without disclosing your full identity and is limited to information directly relevant to fraud or integrity concerns.

Legal Disclosures

bajl app may disclose personal data to competent legal authorities, regulatory bodies, or law enforcement agencies where required to do so by applicable law, valid legal process, or court order. In such cases, bajl app will disclose only the minimum data necessary to satisfy the legal requirement and will notify the affected player where permitted by law.

bajl app uses cookies and similar client-side technologies (such as local storage and session tokens) to operate core platform functions, maintain session security, and gather anonymised performance data. This section explains what cookies bajl app uses and why.

Essential Cookies

These cookies are strictly necessary for the bajl app platform to function. They maintain your authenticated session, store your language preference, carry security tokens that prevent cross-site request forgery, and enable the platform to remember your account state between page loads. Essential cookies cannot be disabled without breaking platform functionality.

Analytics Cookies

bajl app uses first-party analytics cookies to collect aggregated, anonymised data on how players navigate the platform — which game categories are most visited, average session lengths, and page load performance metrics. This data is used exclusively to improve bajl app's performance and user experience. It is not linked to individually identifiable player profiles.

Fraud Detection Tokens

To protect player accounts and detect suspicious access attempts, bajl app sets device fingerprint tokens that help identify whether a login attempt originates from a previously recognised device. These tokens do not track your activity outside of bajl app and are not used for advertising purposes.

No Third-Party Advertising Cookies

bajl app does not permit third-party advertising networks to place cookies on your device via the bajl app website. You will not be tracked across the web for the purpose of serving targeted advertisements based on your bajl app activity.

You may manage cookie preferences through your browser settings. Note that disabling essential cookies will prevent you from logging in and using the bajl app platform. For analytics cookies specifically, you may opt out via your Account Settings page.

bajl app retains personal data only for as long as it is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and compliance obligations. The retention periods below reflect bajl app's standard data lifecycle policy.

• Active account data: Retained for the full duration of your account's active status on the bajl app platform.
• Transaction records: Financial transaction logs are retained for a minimum of five years following the transaction date, in accordance with anti-money laundering record-keeping standards.
• KYC verification documents: Identity documents submitted for verification are retained for a minimum of five years from the date of submission or the date of account closure, whichever is later.
• Gameplay records: Bet histories and game session logs are retained for a minimum of three years to support dispute resolution and responsible gaming reviews.
• Support communications: Customer support records are retained for two years from the date of the final interaction in the relevant support thread.
• Closed account data: Following account closure, bajl app retains the minimum data required for legal compliance purposes for the applicable retention periods above, after which data is securely deleted or anonymised.

bajl app implements a layered security architecture to protect player data against unauthorised access, disclosure, alteration, and destruction. The following measures represent the core pillars of bajl app's data security programme.

Transport Security

All communications between your browser or device and the bajl app platform are encrypted using TLS 1.3. The bajl app website enforces HTTPS on all pages and uses HTTP Strict Transport Security (HSTS) to prevent protocol downgrade attacks. SSL certificate validity is monitored continuously.

Access Controls

Internal access to player data is governed by role-based access control (RBAC). Staff members have access only to the data categories required to perform their specific job function. All data access events are logged with timestamps and staff identifiers, and access logs are reviewed periodically by bajl app's security team.

Authentication Security

Player account passwords are stored as salted cryptographic hashes — bajl app staff cannot read or retrieve your password in plain text. bajl app strongly recommends enabling two-factor SMS authentication on your account, available in Account Settings. Multiple consecutive failed login attempts trigger temporary account lockout to prevent brute-force attacks.

Vulnerability Management

bajl app conducts periodic security assessments of its platform infrastructure. Known vulnerability patches are applied on an expedited basis. The platform's codebase undergoes regular review against established secure coding standards.

Incident Response

In the event of a data security incident that materially affects player personal data, bajl app will notify affected players via their registered email address within a reasonable timeframe and will take immediate steps to contain the incident, assess its scope, and remediate the underlying cause. bajl app maintains a documented incident response plan that is reviewed annually.

As a player on the bajl app platform, you hold a number of rights in relation to your personal data. bajl app is committed to honouring these rights promptly and transparently. The rights available to you are described below.

• Right to Access: You may request a copy of the personal data bajl app holds about you at any time. bajl app will provide a structured summary of your data within 14 calendar days of a valid access request.
• Right to Rectification: If any personal data bajl app holds about you is inaccurate or out of date, you have the right to request that it be corrected. Basic account details such as email address and phone number can be updated directly from your Account Settings page.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to bajl app's legal obligations to retain certain records (see Data Retention section above). Data that bajl app is legally required to retain cannot be deleted on request but will be securely disposed of once the applicable retention period expires.
• Right to Restrict Processing: In certain circumstances, you may request that bajl app restricts the processing of your data — for example, where you contest the accuracy of the data and bajl app is verifying it, or where you object to processing but require the data to be retained for legal purposes.
• Right to Data Portability: You may request a copy of your personal data in a commonly used, machine-readable format (such as CSV or JSON) to transfer to another service provider. This right applies to data that you provided to bajl app directly and that is processed on the basis of your consent or for the performance of a contract.
• Right to Withdraw Marketing Consent: Where you have opted in to receive promotional communications from bajl app, you may withdraw this consent at any time by updating your notification preferences in Account Settings or by contacting the support team. Withdrawal of marketing consent does not affect the lawfulness of processing that took place before withdrawal.
• Right to Lodge a Complaint: If you are not satisfied with bajl app's response to a privacy request or believe that your data has been mishandled, you have the right to raise the matter with bajl app's privacy team at the contact address below.

bajl app reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, platform features, applicable legal requirements, or operational structure. The current version of this Policy will always be accessible at bajl-app.com/privacy-policy.

Where a material change is made to this Policy — meaning a change that significantly affects how your personal data is collected or used — bajl app will notify registered players by sending an alert to the email address associated with their account at least 7 days before the change takes effect. Continued use of the bajl app platform following the effective date of any update constitutes acceptance of the revised Policy.

The "Last updated" date displayed at the top of this document reflects the most recent revision. Players are encouraged to review this Policy periodically, particularly when they have not accessed the platform for an extended period.

Contact Details

For all privacy-related enquiries, data access requests, or complaints, please contact the bajl app privacy team through one of the following channels:

• Live chat: Available 24/7 on the bajl app platform — the fastest route to support.
• Email: [email protected] — plain text, not a clickable link. Response time: within 2 hours on average (Bangladesh Standard Time, UTC+6).

This Privacy Policy should be read alongside bajl app's Terms & Conditions and Responsible Gaming policy, which together form the full framework governing your relationship with the bajl app platform.