1 Data We Collect
j baji collects personal data from you in a number of ways depending on how you interact with the Platform. We apply the principle of data minimisation — meaning we collect only what is necessary for the specific, legitimate purpose it serves. The categories of personal data we may collect are described below.
Registration Data
When you create a j baji account, we collect the information you provide directly in the registration form. This typically includes your full legal name, date of birth, country of residence (Bangladesh), mobile phone number, and the email address you associate with your account. This data is necessary to establish your identity, ensure you meet the 18+ age requirement, and communicate with you about your account.
Identity Verification (KYC) Data
To comply with our Know Your Customer obligations and to protect the platform against fraud and money laundering, we may request copies of the following documents at various points during your account lifecycle:
- Government-issued photo identification (National Identity Card, passport, or driving licence)
- Proof of residential address (recent utility bill, bank statement, or official government correspondence)
- Proof of payment method ownership (e.g., a screenshot or statement confirming your bKash or Nagad account is registered in your name)
These documents are stored securely and used only for verification purposes. They are not shared with any third party other than vetted identity-verification service providers operating under strict confidentiality agreements.
Transaction Data
We record details of every financial transaction you conduct on the Platform, including deposits, withdrawals, bonus credits, and wagers. Transaction records include the amount, currency (BDT), payment method used (bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, City Bank), date and time, and the transaction reference number issued by the payment processor. This data is required for account management, dispute resolution, and regulatory recordkeeping.
Gameplay & Betting Data
j baji logs your game activity on the Platform, including the games played, bet amounts, outcomes, session durations, and timestamps. This data serves multiple purposes: it enables us to provide accurate account statements, powers our responsible gaming monitoring systems (which detect patterns indicative of problem gambling), and helps us improve game offerings based on aggregated player behaviour.
Technical & Device Data
When you access j baji, our servers automatically collect certain technical information about your connection and device. This includes your IP address, browser type and version, operating system, device type (desktop, mobile, tablet), referring URL, and pages visited within the Platform. This data is used for security monitoring, fraud detection, and to optimise the Platform's performance across different devices and network conditions common in Bangladesh.
Communications Data
If you contact j baji's customer support team via email or live chat, we retain records of those communications — including your messages and our responses — to maintain service quality, train support staff, and reference previous interactions when resolving ongoing issues.
No Sensitive Categories: j baji does not intentionally collect special categories of sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data (beyond what you voluntarily disclose in a responsible gaming context), or biometric data. If you disclose sensitive information in a support communication, it will be handled with extra care and used only in the context in which it was shared.
2 How We Use Your Data
j baji uses your personal data for specific, clearly defined purposes. We do not use your data for purposes that are incompatible with those stated below. The primary purposes for which we process personal data are:
| Purpose | Legal Basis | Data Used |
|---|---|---|
| Account creation and management | Contractual necessity | Registration data, KYC documents |
| Processing deposits and withdrawals | Contractual necessity | Transaction data, payment method details |
| Age and identity verification | Legal obligation, contractual necessity | KYC documents, registration data |
| Responsible gaming monitoring | Legal obligation, legitimate interest | Gameplay data, transaction data |
| Fraud and money laundering prevention | Legal obligation, legitimate interest | All categories, technical data |
| Customer support | Contractual necessity | Communications data, account data |
| Platform security and integrity | Legitimate interest | Technical data, device data |
| Service improvement and analytics | Legitimate interest | Aggregated gameplay data (anonymised) |
| Sending account-related notifications | Contractual necessity | Contact details (phone, email) |
| Sending promotional communications | Consent (opt-in required) | Contact details, preferences |
j baji will never use your personal data to make fully automated decisions that produce significant legal or similarly significant effects on you without appropriate human oversight. Responsible gaming flags, for example, trigger a human review by our player welfare team before any account restriction is applied.
Marketing Communications
With your consent at registration, j baji may send you promotional messages about bonuses, seasonal offers (such as Eid or BPL cricket season promotions), and new game launches via SMS or email. You can withdraw this consent at any time by contacting [email protected] or adjusting your communication preferences within your account settings. Withdrawal of marketing consent does not affect the processing of data necessary for your account to function.
3 Data Sharing & Disclosure
j baji does not sell, rent, or trade your personal data to any third party for their own marketing or commercial purposes. Your data may be shared in the following limited and controlled circumstances:
Payment Processors
To process your deposits and withdrawals, j baji shares the minimum necessary transaction details with our payment processing partners — including bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, and City Bank. Each of these partners processes your data in accordance with their own privacy policies and applicable financial regulations. j baji is not responsible for the data practices of these independent payment services once data has been transmitted for the purpose of completing your transaction.
Identity Verification Partners
Where j baji engages a third-party identity verification or KYC service provider to assist with document authentication, your KYC documents and personal details may be shared with that provider under a strict data processing agreement. These providers are permitted to use your data only for the verification purpose and are contractually prohibited from any secondary use.
Fraud Prevention and Security
j baji may share data with fraud detection platforms, cybersecurity services, and related partners to identify and prevent fraudulent activity, multi-accounting, bonus abuse, and money laundering. Information shared in this context is limited to what is necessary for the specific investigation.
Legal Requirements
j baji may disclose your personal data to law enforcement agencies, regulatory bodies, or courts when required to do so by applicable law, court order, or other binding legal process. In such cases, j baji will disclose only the data specifically required and, where legally permitted, will endeavour to notify you of such a request before disclosure.
Business Transfers
In the event that j baji's business or any part thereof is sold, merged, or transferred to another entity, player data held by j baji may be included in the assets transferred. In such circumstances, j baji will take reasonable steps to ensure the receiving entity maintains data protection standards equivalent to those described in this Policy, and will provide advance notice to affected players where practicable.
No Cross-Border Transfers for Marketing: j baji does not transfer your personal data to overseas companies for marketing or profiling purposes. Any cross-border data transfer that occurs — for example, when processing an international card payment via Visa or Mastercard — is strictly for the purpose of completing your requested transaction and is governed by the relevant payment scheme's data protection framework.
4 Cookies & Tracking Technologies
j baji uses cookies and similar client-side technologies (such as local storage and session tokens) on its Platform. This section explains what these technologies are, which types j baji deploys, and how you can manage them.
What Are Cookies?
A cookie is a small text file that a website places on your device when you visit. Cookies allow the site to remember your actions and preferences over a period of time, so that the experience can be personalised and functionally consistent across multiple visits or browser sessions.
Types of Cookies j baji Uses
- Strictly Necessary Cookies: These are essential for the Platform to function. They enable you to log in and maintain a session, navigate between pages without losing your place, and complete transactions securely. These cookies cannot be disabled without severely impacting your ability to use j baji.
- Functional Cookies: These remember your preferences — such as your display language (English), preferred payment method, and whether you have previously dismissed certain notices — to provide a more personalised experience during subsequent visits.
- Analytics Cookies: j baji uses anonymised analytics data to understand how players navigate the Platform, which pages are most visited, and where users encounter difficulty. This data is aggregated and does not identify individual players. Analytics insights are used exclusively for Platform improvement.
- Security Cookies: These assist with fraud detection and the authentication process, helping j baji identify suspicious login attempts and protect account integrity.
j baji does NOT use third-party advertising cookies, cross-site tracking cookies, or behavioural profiling cookies that would allow external advertising networks to build a profile of your browsing activity outside the j baji Platform.
Managing Cookies
You can control and manage cookies through your browser settings. Most modern browsers allow you to view, delete, and block cookies on a site-by-site basis. Please be aware that disabling strictly necessary cookies will prevent you from logging in and using core Platform features. For guidance on managing cookies in your specific browser, refer to the browser's own help documentation.
5 Data Retention
j baji retains your personal data only for as long as is necessary for the purpose for which it was collected, or as required by applicable legal, regulatory, or responsible gaming obligations. The general retention principles applied by j baji are as follows:
- Active account data: Retained for the full duration your account remains open and active on the Platform.
- Post-closure account data: Following account closure — whether voluntary or due to a breach of Terms — j baji retains your account record, transaction history, and KYC documents for a minimum period of five (5) years. This retention period reflects responsible gaming best practices (particularly to enforce self-exclusion requests) and supports our ability to respond to legal and regulatory enquiries.
- Communications data: Support tickets and chat logs are retained for up to three (3) years from the date of the last interaction, after which they are securely deleted or anonymised.
- Technical and device logs: IP address logs and session data are retained for up to twelve (12) months, after which they are purged from active systems.
- Marketing consent records: Records of your marketing consent (or withdrawal thereof) are retained for the lifetime of your account plus five (5) years, to demonstrate compliance with consent obligations.
Once the applicable retention period expires, personal data is either securely and irreversibly deleted from j baji systems, or anonymised in a manner that makes re-identification impossible, and retained in aggregate form for statistical and analytical purposes only.
6 Your Rights
As a j baji player, you have the following rights in relation to your personal data. To exercise any of these rights, submit a written request to [email protected] from the email address registered to your account. j baji will acknowledge your request within 5 business days and provide a substantive response within 30 days.
- Right of Access: You have the right to request a copy of the personal data j baji holds about you, together with information about how it is used and with whom it has been shared.
- Right to Rectification: If any of the personal data j baji holds about you is inaccurate or incomplete, you have the right to request that it be corrected or completed without undue delay.
- Right to Erasure ("Right to Be Forgotten"): In certain circumstances, you have the right to request that j baji delete your personal data. This right is not absolute — it does not apply where j baji is required to retain data for legal, regulatory, or responsible gaming reasons (for example, to honour a self-exclusion request or respond to a law enforcement enquiry).
- Right to Restriction of Processing: You may request that j baji restrict processing of your data in certain situations — for example, while the accuracy of data you have contested is being verified.
- Right to Data Portability: Where processing is based on your consent or on a contract, you have the right to receive your personal data in a structured, commonly used, machine-readable format, and to have it transmitted to another service provider where technically feasible.
- Right to Object: You have the right to object to processing of your personal data where j baji relies on legitimate interest as the legal basis. j baji will cease processing unless it can demonstrate compelling legitimate grounds that override your interests, or where processing is necessary for the establishment or defence of legal claims.
- Right to Withdraw Consent: Where processing is based on your consent (such as marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that took place prior to withdrawal.
Identity Verification for Requests: To protect the security of your data, j baji may ask you to verify your identity before processing a rights request. This is to ensure that data is not disclosed to, or deleted at the request of, an unauthorised person. Verification will typically involve confirming details held on your registered account.
7 Data Security
j baji takes the security of your personal data seriously and has implemented a range of technical and organisational measures designed to protect it against unauthorised access, accidental loss, alteration, or disclosure. Key security measures in place include:
- SSL/TLS Encryption: All data in transit between your browser or mobile device and j baji servers is encrypted using SSL/TLS protocols. Look for the padlock icon in your browser's address bar when accessing j-baji.club.
- Encrypted Data at Rest: Sensitive personal data and financial records stored in j baji's databases are encrypted at rest, meaning that even in the event of an unauthorised server-level access, the data remains protected.
- Access Controls: Access to personal data within j baji's internal systems is restricted on a strict need-to-know basis. Staff who do not require access to player data in order to perform their role are not granted it. All internal access is logged and regularly audited.
- Password Security: Passwords stored in j baji's system are never held in plain text. They are processed using industry-standard one-way cryptographic hashing with appropriate salting to prevent rainbow-table attacks.
- Fraud Monitoring Systems: j baji operates real-time fraud detection systems that monitor for unusual account activity, suspicious login patterns, and anomalous transaction behaviour. Alerts generated by these systems are reviewed by our security team.
- Vendor Due Diligence: Third-party service providers who process personal data on j baji's behalf are subject to due diligence assessments and are contractually required to implement security standards commensurate with those applied by j baji itself.
Despite these measures, no security system is impenetrable. In the event of a data breach that is likely to result in a risk to your rights and freedoms, j baji will take prompt steps to contain the breach, assess its scope and impact, and notify affected players as required. You are also encouraged to play your part in account security by using a unique, strong password for your j baji account and never sharing your login credentials with anyone.
8 Contact & Data Protection Officer
If you have any questions, concerns, or complaints about this Privacy Policy or about how j baji handles your personal data, please contact us in the first instance by writing to our support team. We are committed to resolving privacy concerns promptly and transparently.
Contact channel: Email [email protected] with the subject line "Privacy Enquiry" or "Data Rights Request". Include the name and mobile number registered to your j baji account so we can locate your record efficiently.
Response time: j baji's support team operates between 07:00 and 23:00 Bangladesh Standard Time (BST, UTC+6) every day. We aim to acknowledge all privacy-related correspondence within 5 business days and to provide a substantive response within 30 calendar days of receipt.
j baji reviews and updates this Privacy Policy periodically to reflect changes in our data practices, Platform functionality, and applicable legal requirements. When material changes are made, we will update the "Last Updated" date at the top of this page and, where the changes materially affect your rights or our obligations, notify registered players via their registered contact details. We encourage you to review this Policy from time to time to stay informed about how j baji protects your information.
Policy Updates: Continued use of the j baji Platform following the publication of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with a revised Policy, you should discontinue use of the Platform and contact [email protected] to close your account and request deletion of your data to the extent permitted by law.