bajicash
Privacy Policy

1. Information We Collect

bajicash collects personal data from you in several ways: directly when you provide it during registration or verification, automatically as you use the platform, and in certain cases from third-party sources such as payment processors or identity verification services. The categories of personal data we collect are described in detail below.

1.1 Registration & Account Data

When you create an account on bajicash, we collect the following information:

• Full legal name as it appears on your government-issued identification document.
• Date of birth — required to verify that you meet the 18+ age requirement.
• Mobile phone number — used for account security, two-factor authentication (2FA), and support communications.
• Email address — used for account notifications, transaction confirmations, and support correspondence.
• Residential address — collected during KYC verification, including district, city (e.g., Dhaka, Chittagong, Sylhet, Khulna), and postal code.
• Username and password — your chosen login credentials. Passwords are stored in hashed form and are never accessible in plain text by bajicash staff.

1.2 Identity Verification (KYC) Data

To comply with our Know Your Customer (KYC) obligations and to prevent fraud and underage gambling, bajicash may request and retain copies of the following documents:

• National Identity Card (NID) or passport — front and back.
• Recent utility bill or bank statement showing your registered address (dated within the last three months).
• Proof of ownership of the payment method used (e.g., a screenshot of your bKash or Nagad account showing your registered name and number).
• Selfie photograph with identity document, where enhanced verification is required.
• Source of funds documentation where required by our anti-money laundering (AML) screening processes.

All KYC documents submitted to bajicash are handled with strict confidentiality and are accessible only to authorised members of our compliance and security teams.

1.3 Financial Transaction Data

When you make deposits or withdrawals via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, or other accepted payment methods, bajicash records the following transactional data:

• Payment method type and the registered name/number associated with the payment account.
• Transaction amounts in Bangladeshi Taka (BDT).
• Transaction reference numbers and timestamps.
• Deposit and withdrawal history linked to your bajicash account.

bajicash does not store full payment card numbers, bKash PINs, Nagad PINs, or any other payment authentication credentials. These are processed directly by the relevant payment service provider under their own security protocols.

1.4 Platform Usage & Technical Data

As you use the bajicash platform, we automatically collect certain technical and behavioural data, including:

• IP address and approximate geographic location derived from IP.
• Device type, operating system, and browser version.
• Session duration, pages visited, and navigation patterns on the platform.
• Game activity logs — including games played, bet amounts, and session times — which are retained for responsible gaming monitoring and dispute resolution purposes.
• Login timestamps and failed login attempt records, retained for security monitoring.

1.5 Communications Data

When you contact bajicash's customer support team by email at support@bajicash or via live chat, we retain records of those communications — including the content of your messages and our responses — for a period of up to 36 months. These records are used to ensure continuity of support, to investigate complaints, and to improve our service quality.

2. How We Use Your Data

bajicash processes your personal data only for specific, legitimate purposes. We do not use your data in ways that are incompatible with the purpose for which it was originally collected. The primary purposes for which we use your personal data are set out below.

2.1 Marketing Communications

bajicash may send you promotional emails or SMS notifications about bonuses, new games, seasonal offers (such as Eid promotions, BPL cricket season offers, or Pohela Boishakh specials), and platform updates. We will only send you marketing communications if you have opted in to receive them. You may withdraw your consent and unsubscribe from marketing communications at any time by contacting our support team at support@bajicash. Withdrawing marketing consent does not affect your ability to use the bajicash platform.

2.2 Automated Decision-Making

bajicash's fraud detection and responsible gaming systems use automated analysis of account behaviour and transaction patterns to flag potentially suspicious activity or signs of problem gambling. Where an automated process results in a restriction or suspension of your account, you have the right to request a manual review of that decision by our compliance team. To request a review, contact support@bajicash with the subject line "Automated Decision Review Request".

3. Data Sharing & Disclosure

bajicash does not sell your personal data to third parties. We share personal data only in the limited circumstances described below, and only to the extent necessary for each specific purpose.

3.1 Payment Service Providers

To process your deposits and withdrawals, bajicash shares the minimum necessary transaction data with our payment partners, including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank. Each of these providers processes data under their own published privacy terms and is independently responsible for the security of data within their systems. bajicash does not retain your payment authentication credentials (PINs, OTPs).

3.2 Game Providers

Games on bajicash are provided by third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and others. These providers may receive anonymised or pseudonymised session data (such as game round IDs and bet outcomes) for the purposes of game delivery, fairness auditing, and technical support. Game providers do not receive your full personal profile, payment details, or KYC documents.

3.3 Legal and Regulatory Disclosure

bajicash may disclose your personal data to law enforcement agencies, financial intelligence units, or other governmental authorities where we are legally required to do so — for example, in connection with an AML investigation, a court order, or a lawful regulatory request. In such cases, bajicash will disclose only the data specifically required by the request and will, where legally permitted, notify the affected account holder.

3.4 Service Providers & Technology Partners

bajicash engages certain trusted third-party service providers to support our platform operations — including cloud hosting infrastructure, customer support tools, and security monitoring services. These providers access personal data only to the extent necessary to perform their contracted services and are bound by confidentiality and data protection obligations. bajicash does not permit service providers to use your data for their own marketing or commercial purposes.

4. Cookies & Tracking Technologies

bajicash uses cookies and similar browser-based storage technologies to support the operation of our platform. A cookie is a small text file placed on your device by a website you visit. The cookies used by bajicash fall into the following categories:

bajicash does not deploy third-party advertising cookies, retargeting pixels, or social media tracking scripts. You can manage or delete cookies through your browser's settings at any time. Please note that disabling strictly necessary cookies will affect your ability to log in and use the bajicash platform.

5. Data Retention & Storage

bajicash retains personal data for as long as is necessary to fulfil the purposes for which it was collected, to comply with applicable legal obligations, and to resolve any disputes or enforce our agreements. The general retention periods we apply are as follows:

• Active account data (registration details, KYC documents, transaction history): retained for the lifetime of the account plus a minimum of five (5) years following account closure, in line with standard AML record-keeping obligations.
• Game activity logs and bet records: retained for a minimum of three (3) years from the date of the activity, used for dispute resolution, responsible gaming audits, and regulatory reporting.
• Customer support communications: retained for up to three (3) years from the date of the last interaction.
• Marketing opt-in records: retained for the duration of your consent, and for up to two (2) years after withdrawal of consent as evidence of your previous opt-in status.
• Technical and security logs (IP records, login attempts): retained for up to twelve (12) months from the date of the event.

When the applicable retention period expires and there is no overriding legal basis to retain the data further, bajicash securely deletes or anonymises the relevant records so that they can no longer be attributed to an identifiable individual.

5.1 Data Storage Location

bajicash stores personal data on secure servers. All data storage infrastructure is protected by access controls, encryption at rest, and regular security audits. bajicash does not transfer your personal data to countries or territories that do not provide an adequate level of data protection without first implementing appropriate safeguards such as contractual data protection clauses.

6. Security Measures

The security of your personal data is a top priority at bajicash. We implement a combination of technical, organisational, and procedural controls to protect your data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security measures include:

• SSL/TLS encryption on all data transmitted between your browser or mobile device and the bajicash platform.
• Encryption at rest for sensitive stored data including KYC documents and hashed password credentials.
• Role-based access controls ensuring that only authorised staff with a legitimate business need can access personal data, and only to the extent required for their role.
• Two-factor authentication (2FA) available for all player accounts and mandatory for internal staff systems.
• Regular penetration testing and vulnerability assessments conducted by qualified security professionals.
• Intrusion detection systems that monitor platform traffic for anomalous patterns indicative of attack or unauthorised access.
• Incident response procedures that include breach notification protocols. In the event of a data breach that is likely to result in a risk to your rights and freedoms, bajicash will notify affected players without undue delay.

7. Your Privacy Rights

As a bajicash player, you hold a number of rights in relation to the personal data we hold about you. bajicash is committed to honouring these rights promptly and transparently. Your rights are summarised below.

7.1 Right of Access

You have the right to request a copy of the personal data bajicash holds about you. Upon receiving a verified access request, we will provide you with a summary of your data in a readable format within a reasonable timeframe — typically within 30 days.

7.2 Right to Rectification

If any personal data bajicash holds about you is inaccurate or incomplete, you have the right to request that it be corrected. For account details such as your registered email address or phone number, you may be able to update these directly within your account settings. For KYC data and identity documents, please contact our support team.

7.3 Right to Erasure

You may request the deletion of your personal data held by bajicash. However, this right is not absolute — we may be required to retain certain data to comply with legal obligations (for example, AML record-keeping requirements). Where we are legally obliged to retain data, we will explain this to you clearly at the time of your request. Data that is not subject to a legal retention requirement will be deleted promptly following a verified erasure request.

7.4 Right to Withdraw Consent

Where bajicash processes your data based on your consent (for example, for marketing communications), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that took place before the withdrawal. To withdraw consent for marketing, contact support@bajicash with the subject line "Withdraw Marketing Consent".

7.5 Right to Object to Processing

You have the right to object to bajicash processing your personal data on the basis of legitimate interest, including profiling for responsible gaming monitoring purposes. Upon receiving a valid objection, bajicash will cease the relevant processing unless we can demonstrate compelling legitimate grounds that override your interests.

7.6 How to Exercise Your Rights

To exercise any of the rights described above, please send a written request to support@bajicash with the subject line "Privacy Rights Request". For the protection of your data, we will verify your identity before processing any access, rectification, or erasure request. We aim to respond to all privacy rights requests within 30 calendar days of receipt.

8. Policy Updates & Contact

bajicash reviews and updates this Privacy Policy periodically to reflect changes in our data processing practices, applicable law, or regulatory guidance. The "Last Updated" date at the top of this page indicates when the most recent revision was made. We will notify registered players of material changes to this Privacy Policy by sending a notification to their registered email address prior to the changes taking effect. Continued use of the bajicash platform following notification of a material change constitutes your acceptance of the updated Privacy Policy.

Minor or non-material updates — such as corrections to formatting, clarifications of existing language, or updates to contact details — may be made without prior notice to players. We therefore recommend reviewing this page periodically.

8.1 Contact Us About Privacy

If you have any questions, concerns, or complaints about how bajicash handles your personal data, or if you wish to exercise any of your privacy rights, please contact our dedicated privacy support team using the details below. Our team is available 24/7 at Bangladesh Standard Time (UTC+6) and will respond to all privacy-related enquiries within one business day.