bajili Privacy Policy

bajili is committed to handling personal data responsibly. This policy applies to all registered account holders, visitors to the bajili website, and anyone who contacts bajili support. It covers data collected through the bajili website, progressive web app, and any associated digital communications including email and in- platform notifications.

bajili may update this Privacy Policy from time to time to reflect changes in data handling practices, applicable law, or platform features. When material changes are made, registered account holders will be notified via in-platform message or the email address associated with their account. The date shown at the top of this page indicates when the current version came into effect. Continued use of the bajili platform following any update constitutes acceptance of the revised policy.

When you create a bajili account, we collect the personal information you provide during the registration process. This includes your full legal name, date of birth, residential address in Bangladesh (including city — Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, or Cox's Bazar), a valid Bangladeshi mobile phone number, and the email address you choose to associate with your account. This information is required to create and maintain your account, verify your identity, and process financial transactions.

As part of bajili's Know Your Customer (KYC) process, you may be asked to submit additional identity documents. These may include a scanned copy or photograph of your National Identity Card (NID), passport, or driving licence; a recent utility bill or bank statement confirming your address; and a selfie photograph holding your identity document. This data is processed solely for the purposes of verifying your identity, preventing fraud, and satisfying applicable anti-money laundering obligations.

bajili records all deposit and withdrawal transactions made through your account. This includes the payment method used (such as bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, or Sonali Bank), the transaction amount in Bangladeshi Taka (BDT), the date and time of each transaction, and the transaction reference number issued by your payment provider. bajili does not store your full mobile banking PIN, card number, or bank account password — only the reference data necessary to reconcile and support your transactions.

bajili maintains a complete record of your betting and gaming history on the platform. This includes all sports bets placed (including cricket BPL, T20 World Cup, IPL, and football markets), live casino game sessions, slot game sessions, crash game rounds, and any other product interactions. This data is used to manage your account, resolve disputes, calculate and pay winnings, and support responsible gaming monitoring.

When you access the bajili platform, our servers automatically collect certain technical information about your device and connection. This includes your IP address, device type and operating system, browser type and version, screen resolution, and the pages you visit within the bajili platform. bajili uses this data to maintain platform security, detect suspicious login activity, and improve the overall user experience.

If you contact bajili's customer support team by email or through the in-platform support chat, we retain records of that correspondence. This includes the content of your messages, the date and time of contact, and the resolution provided. These records are kept to maintain a consistent support history, train our support team, and resolve any disputes that may arise.

To process your deposits and withdrawals, bajili must share necessary transaction data with your chosen payment provider — such as bKash, Nagad, Rocket, or Upay. This data sharing is limited strictly to what is required to complete the transaction. bajili does not share your account password, betting history, or any data beyond what the payment network requires for transaction processing.

bajili integrates games developed by third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. When you play a game provided by one of these studios, a session token and anonymised player identifier may be shared with the game provider's servers to load and operate the game. bajili does not share your full name, financial details, or identity documents with game studios.

bajili may be required by law, court order, or regulatory authority to disclose certain personal data. In such circumstances bajili will comply with its legal obligations. Where permitted, bajili will notify the affected account holder of the disclosure request. bajili will never voluntarily disclose personal data to any government body or third party without a valid legal basis for doing so.

bajili implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures include:

• SSL/TLS encryption on all data transmitted between your device and bajili's servers.
• Encrypted storage of sensitive account data, including KYC documents, at rest using industry-standard encryption protocols.
• Access controls that restrict internal access to personal data on a strict need-to-know basis among bajili staff.
• Two-factor authentication options available to all account holders for login security.
• Continuous security monitoring of the bajili platform for unusual login activity, attempted breaches, and suspicious transactions.
• Regular security reviews of bajili's infrastructure and data handling procedures.

Despite these measures, no digital platform can guarantee absolute security against all possible threats. If you suspect that your bajili account has been compromised, you should change your password immediately and contact bajili support at [email protected] without delay.

bajili retains personal data only for as long as necessary for the purpose for which it was collected, or as required by applicable law. The following general retention periods apply:

• Active account data — retained for the full duration of your account's active status on the bajili platform.
• Transaction records — retained for a minimum of five years following the date of the transaction, in compliance with financial record-keeping obligations.
• KYC and identity documents — retained for a minimum of five years following account closure or the completion of the business relationship.
• Customer support communications — retained for two years from the date of the final communication in a given support thread.
• Technical and device data (logs) — retained for up to twelve months, after which they are securely deleted or anonymised.

When personal data is no longer required and its retention period has elapsed, bajili will securely delete or anonymise that data so that it can no longer be associated with any individual account holder.

With your consent, bajili may send you promotional communications about new games, special offers, deposit bonuses, and seasonal promotions relevant to players in Bangladesh — including events tied to BPL season, Pohela Boishakh, Eid, and other culturally significant occasions. These communications may be delivered via the email address or mobile number registered to your account.

You can opt out of marketing communications at any time by contacting bajili support at [email protected] and requesting removal from the marketing list. Please allow up to five business days for your opt-out request to take effect. Note that opting out of marketing communications does not affect essential account-related notifications such as deposit confirmations, withdrawal updates, and security alerts — these will continue to be sent as they are necessary for the operation of your account.

The bajili platform is strictly for adults aged 21 and above. bajili does not knowingly collect personal data from anyone under the age of 21. If bajili discovers or has reason to believe that an account has been registered by a person under 21 years of age, it will immediately close that account, void all associated transactions, and securely delete any personal data collected in connection with that account. If you believe a minor has registered on bajili using your personal details or payment methods, please contact bajili support immediately at [email protected].

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way bajili handles your personal data, please contact the bajili data support team. All privacy-related enquiries are handled in strict confidence and will receive a response within a reasonable timeframe.

This Privacy Policy was last updated on 1 January 2026 and applies to all personal data collected by bajili on or after that date. Previous versions of this policy are available on request by contacting bajili support.