Baje Privacy Policy

1 Who We Are

Baje is an online gaming platform operated at baje.one, serving players primarily in Bangladesh. When this privacy policy refers to "baje", "we", "us", or "our", it means the baje platform and the team responsible for operating it.

Baje acts as the data controller for the personal information you provide when registering and using the platform. This means baje determines the purposes and means of processing your personal data, and is responsible for ensuring that processing is carried out lawfully and transparently.

If you have any questions about how baje handles your personal data, the first point of contact is the support team at [email protected]. The team will direct your query to the appropriate person and respond promptly.

2 Data We Collect

Baje collects personal data in several ways — directly from you when you register or interact with the platform, automatically as you use the baje website or app, and from third-party payment processors when you make deposits or withdrawals.

2.1 Registration Data

When you create a baje account, we collect:

• Your full legal name
• Date of birth
• Mobile phone number
• Email address
• Your chosen username and password (stored in encrypted form)

2.2 Identity Verification Data

When baje requests identity verification — for example, before processing a withdrawal or if there is a concern about account security — we may collect copies of government-issued identification documents such as a National ID card or passport. This data is used solely for verification purposes and is handled with strict access controls.

2.3 Payment Data

When you make a deposit or withdrawal via bKash or Nagad, baje receives transaction confirmation data from the payment processor. This includes the transaction reference number, the amount, and the mobile number associated with the payment. Baje does not store your full bKash or Nagad PIN or password.

2.4 Usage and Technical Data

Baje automatically collects certain technical data when you use the platform, including:

Data Type	Examples	Purpose
Device data	Device type, operating system, browser version	Platform optimisation and fraud prevention
Network data	IP address, approximate location	Security monitoring and duplicate account detection
Session data	Login times, pages visited, session duration	Platform improvement and responsible gaming monitoring
Game activity	Games played, bet amounts, win/loss history	Account management, dispute resolution, responsible gaming

3 How We Use Your Data

Baje uses the personal data it collects for specific, legitimate purposes. We do not use your data in ways that are incompatible with the purposes described here. The main ways baje uses your personal data are:

• Account management: To create and maintain your baje account, verify your identity, and manage your account settings and preferences.
• Payment processing: To process deposits and withdrawals via bKash and Nagad, and to maintain accurate transaction records for your account.
• Platform security: To detect and prevent fraud, money laundering, duplicate accounts, and other prohibited activities on the baje platform.
• Customer support: To respond to your queries, resolve disputes, and provide assistance when you contact the baje support team.
• Responsible gaming: To monitor gaming activity for signs of problem gambling and to apply any self-exclusion or limit settings you have requested.
• Legal compliance: To meet baje's obligations under applicable laws and regulations, including anti-money laundering requirements and age verification obligations.
• Platform improvement: To analyse how players use baje and to improve the platform's performance, design, and game offering.
• Communications: To send you important account notifications, updates to these policies, and — where you have opted in — promotional offers from baje.

4 Legal Basis for Processing

Baje processes your personal data on the following legal bases, depending on the type of data and the purpose of processing:

• Contract performance: Processing that is necessary to provide the baje service to you — for example, creating your account, processing payments, and managing your game activity.
• Legal obligation: Processing that baje is required to carry out under applicable law — for example, identity verification and anti-money laundering checks.
• Legitimate interests: Processing that is necessary for baje's legitimate business interests, such as fraud prevention, platform security, and improving the baje service — provided these interests are not overridden by your rights.
• Consent: Processing based on your explicit consent — for example, sending you marketing communications. You can withdraw consent at any time.

5 Data Sharing

Baje does not sell your personal data to any third party. Baje shares personal data only in the following limited circumstances:

5.1 Payment Processors

To process deposits and withdrawals, baje shares necessary transaction data with bKash and Nagad. These providers process your payment data under their own privacy policies and security standards. Baje shares only the minimum data required to complete the transaction.

5.2 Identity Verification Services

Where baje uses a third-party service to assist with identity verification, your verification documents may be shared with that provider. All such providers are contractually required to handle your data securely and to use it only for the purpose of verification.

5.3 Legal and Regulatory Authorities

Baje may be required to disclose personal data to law enforcement agencies, regulatory bodies, or other authorities if required to do so by law, or if baje reasonably believes that disclosure is necessary to protect the rights, property, or safety of baje, its players, or others.

5.4 Business Transfers

In the event that baje undergoes a merger, acquisition, or sale of assets, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer and of any changes to this privacy policy that result from it.

6 Cookies and Tracking

Baje uses cookies and similar tracking technologies on the baje website and app. Cookies are small text files stored on your device that help baje recognise you, remember your preferences, and understand how you use the platform.

6.1 Types of Cookies Baje Uses

Cookie Type	Purpose	Can Be Disabled?
Essential cookies	Required for the baje platform to function — login sessions, security tokens	No — platform won't work without these
Analytics cookies	Help baje understand how players navigate the platform so we can improve it	Yes — via cookie settings
Preference cookies	Remember your language, display, and notification preferences	Yes — via cookie settings

You can manage your cookie preferences through your browser settings. Note that disabling non-essential cookies will not affect your ability to use the core baje platform, but some personalisation features may not work as expected.

7 Data Retention

Baje retains your personal data for as long as your account is active and for a period after account closure as required by applicable law and legitimate business needs. The general retention periods baje applies are:

• Account data: Retained for the duration of your account and for five years after account closure, to meet legal and regulatory obligations.
• Transaction records: Retained for five years from the date of the transaction, in line with financial record-keeping requirements.
• Identity verification documents: Retained for five years after account closure or the completion of the verification process, whichever is later.
• Support communications: Retained for two years from the date of the last interaction.
• Technical and usage data: Retained for up to 13 months on a rolling basis.

After the applicable retention period, baje will securely delete or anonymise your personal data so that it can no longer be linked to you.

8 Data Security

Baje takes the security of your personal data seriously. The platform implements a range of technical and organisational measures to protect your data against unauthorised access, loss, destruction, or alteration. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and baje's servers.
• Encryption of sensitive data at rest, including passwords and identity documents.
• Strict access controls — only authorised baje personnel can access personal data, and only to the extent necessary for their role.
• Regular security audits and vulnerability assessments of the baje platform.
• 24/7 monitoring for suspicious activity and potential data breaches.

While baje takes every reasonable precaution to protect your data, no online platform can guarantee absolute security. You also play a role in keeping your account secure — use a strong, unique password for your baje account and never share it with anyone.

9 Your Rights

As a baje player, you have the following rights in relation to your personal data. To exercise any of these rights, contact the baje support team at [email protected].

• Right of access: You can request a copy of the personal data baje holds about you at any time.
• Right to rectification: If any of your personal data held by baje is inaccurate or incomplete, you can ask us to correct it.
• Right to erasure: In certain circumstances, you can ask baje to delete your personal data. Note that baje may be required to retain some data for legal reasons even after an erasure request.
• Right to restrict processing: You can ask baje to pause the processing of your personal data in certain situations — for example, while a dispute is being resolved.
• Right to data portability: You can request a copy of your personal data in a structured, machine-readable format.
• Right to object: You can object to baje processing your data on the basis of legitimate interests, including for direct marketing purposes.
• Right to withdraw consent: Where baje processes your data based on your consent, you can withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

Baje will respond to all data rights requests within 30 days. In complex cases, this may be extended by a further two months, and you will be informed of the extension and the reason for it.

10 Children's Privacy

The baje platform is strictly for adults aged 18 and over. Baje does not knowingly collect personal data from anyone under the age of 18. If baje discovers that a player is under 18, the account will be closed immediately and any personal data associated with it will be deleted.

If you believe that a minor has registered on baje, please contact the support team at [email protected] immediately so that the matter can be investigated and resolved promptly.

11 Changes to This Privacy Policy

Baje may update this privacy policy from time to time to reflect changes in the platform, applicable law, or data handling practices. When changes are made, the updated policy will be published on this page with a revised "Last updated" date at the top.

For significant changes — particularly those that affect how baje uses your personal data in a material way — baje will notify registered players via email or an in-platform notification before the changes take effect. Your continued use of baje after the effective date of any update constitutes acceptance of the revised privacy policy.

Baje recommends reviewing this page periodically so you are always aware of how your data is being handled. If you disagree with any changes to this policy, you may close your account by contacting [email protected].

12 Contact Us

If you have any questions, concerns, or requests relating to this privacy policy or the way baje handles your personal data, please get in touch:

• Email: [email protected]
• Support hours: 24 hours a day, 7 days a week
• FAQ: Visit the baje FAQ page
• Terms and Conditions: Read the full baje Terms and Conditions

Baje aims to respond to all privacy-related enquiries within 48 hours. For formal data rights requests, the response window is up to 30 days as described in Section 9 above.