Privacy Policy — bajilaiv

Information We Collect

bajilaiv collects personal data from you at various stages of your interaction with the platform — from your initial visit through to account registration, deposit activity, gameplay, and any support correspondence. The categories of personal data we collect are outlined below.

We do not intentionally collect sensitive personal data categories such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data unless specifically required for a mandatory identity verification check by an applicable law. Where sensitive data must be processed as part of a legally mandated verification, it is handled with heightened security measures and deleted promptly once verification is complete.

How We Use Your Data

bajilaiv uses the personal data it collects for specific, legitimate, and clearly defined purposes. We do not use your data for purposes that are incompatible with the reasons for which it was originally collected. The primary purposes for which we process your personal data are set out below.

• Account Management: To create, maintain, verify, and administer your bajilaiv player account, including processing your registration, updating your profile, managing your preferences, and responding to your support requests. Your identity and contact data are essential for this purpose and cannot be withheld without affecting your ability to use the platform.
• Payment Processing: To process deposits and withdrawals in Bangladeshi Taka (৳ BDT) via bKash, Nagad, Rocket, Upay, Visa, Mastercard, and supported bank transfer methods. Financial data is shared with payment processors on a need-to-know basis and is never retained longer than necessary for the completion of the transaction and applicable record-keeping requirements.
• Identity Verification (KYC/AML): To verify that you meet the 18+ age requirement, to confirm the authenticity of your identity documents, and to comply with our anti-money laundering (AML) obligations. KYC verification is mandatory before your first withdrawal is processed, and may be repeated periodically or where unusual account activity is detected.
• Game & Betting Services: To deliver the full range of casino games, live dealer tables, crash games, colour prediction rounds, and sports betting markets (including cricket BPL, IPL, T20 World Cup, and football fixtures). Usage data and gameplay history are used to ensure accurate bet settlement, game history display, and fair play monitoring.
• Promotional Communications: To send you information about bonuses, seasonal promotions (Eid, Pohela Boishakh, BPL season offers), and platform updates via email or SMS — but only where you have provided consent to receive marketing communications. You may withdraw this consent at any time by updating your communication preferences in your account settings or by contacting support@bajilaiv.
• Platform Analytics & Improvement: To analyse aggregated and anonymised usage data to understand how players interact with the platform, identify areas for technical improvement, optimise the game library, and enhance the overall user experience for our Bangladesh-based player base. Analytics data is handled in aggregated form wherever possible.
• Responsible Gaming Monitoring: To monitor for signs of problem gambling behaviour — including unusually large or rapid deposits, prolonged gameplay sessions, or patterns consistent with chasing losses — and to intervene proactively where appropriate, in fulfilment of our responsible gaming obligations. Usage and financial data are used for this purpose and are never shared externally for this reason.
• Legal & Regulatory Compliance: To comply with applicable laws, regulations, court orders, and requests from competent authorities, including financial crime reporting obligations. This may require us to retain certain data for defined statutory periods even after your account is closed, as described in the Data Retention section of this policy.

Legal Basis for Processing

Every data processing activity carried out by bajilaiv is grounded in at least one valid legal basis. The applicable legal bases for our primary processing activities are summarised in the table below.

Data Sharing & Disclosure

bajilaiv does not sell, rent, or trade your personal data to any third party for their own marketing or commercial purposes. We share personal data only with carefully selected third-party partners and service providers who assist us in delivering the bajilaiv platform, and only to the minimum extent necessary for their specific function.

• Payment Processors: Transaction data is shared with bKash, Nagad, Rocket, Upay, Visa, Mastercard, and our banking partners (Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank) solely for the purpose of processing your deposit or withdrawal in ৳ BDT. These processors are contractually bound to handle your data securely and in accordance with applicable financial regulations.
• Game Providers: Gameplay data is transmitted to game providers including Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, and Spribe as part of the technical delivery of their game content. Game providers receive only the data necessary for game operation (typically a hashed player identifier, bet value, and game session token) — they do not receive your full identity or payment data.
• Identity Verification Providers: Where required for enhanced KYC verification, identity documents and personal information may be shared with accredited identity verification service providers for authentication and fraud screening purposes. These providers are contractually prohibited from using your data for any purpose beyond the specific verification task assigned.
• Analytics Providers: Anonymised and aggregated usage data may be shared with analytics platform providers to assist with platform performance monitoring and product development. No personally identifiable information is included in analytics data shared with third-party analytics tools.
• Legal & Regulatory Authorities: bajilaiv may be required by law, court order, or regulatory authority to disclose personal data without prior notice to the affected player. In such circumstances, we will comply with our legal obligations while seeking, where permissible, to limit the scope of disclosure to the minimum required.

All third-party data processors engaged by bajilaiv are required to sign Data Processing Agreements that impose strict obligations regarding data security, confidentiality, and the restriction of data use to agreed-upon purposes. bajilaiv remains responsible for the handling of your personal data at all times, even where processing is carried out by a third party on our behalf.

Cookies & Tracking Technologies

bajilaiv uses cookies and similar technologies (including web beacons and local storage) to operate core platform functionality, remember your session preferences, and analyse platform usage. Cookies are small text files stored on your device when you visit the platform. They do not contain executable code and cannot access any other files on your device.

• Strictly Necessary Cookies: These cookies are essential for the platform to function. They include session authentication tokens, CSRF protection tokens, and load-balancing cookies. These cookies cannot be disabled without preventing you from accessing your account or using the platform. No consent is required for strictly necessary cookies under applicable standards.
• Preference Cookies: These cookies remember your platform settings such as your preferred game lobby layout, language setting (English), and notification preferences. If you clear your cookies, these preferences will be reset to their default values and will need to be re-applied on your next visit.
• Analytics Cookies: These cookies collect anonymised information about how players navigate the platform — which pages are visited most frequently, how long users spend in the game lobby, and which features generate the most engagement. This data is used exclusively for internal platform improvement purposes and is not shared with advertising networks.
• Security Cookies: These cookies assist our fraud detection and responsible gaming monitoring systems by recording session patterns that help identify unusual account activity, including potential unauthorised access attempts or bot-driven behaviour. They form an integral part of the platform's security infrastructure.

Most web browsers allow you to control cookies through your browser settings. You can configure your browser to refuse all cookies, to notify you when a cookie is set, or to delete cookies after each session. Please note that disabling certain cookie categories — particularly strictly necessary and security cookies — will impair the functionality of the bajilaiv platform and may prevent you from logging in or completing transactions.

Data Retention

bajilaiv retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, to comply with applicable legal obligations, to resolve disputes, and to enforce our agreements. When the retention period for a data category expires, the data is securely deleted or anonymised in a manner that prevents re-identification.

Where data must be retained beyond the closure of your account — for example, to comply with AML record-keeping requirements — access to that data is strictly restricted to authorised compliance personnel and is not used for any operational or marketing purpose. The data is held in an archived state and will be permanently deleted as soon as the applicable retention period expires.

Your Privacy Rights

As a user of bajilaiv, you hold a set of rights in relation to the personal data we hold about you. We are committed to honouring these rights promptly and transparently. To exercise any of the rights described below, please submit a written request to support@bajilaiv with the subject line "Privacy Rights Request", including your registered email address and full name for verification purposes.

• Right of Access: You have the right to request a copy of all personal data that bajilaiv holds about you, including details of the purposes for which it is processed, the categories of data held, and any third parties with whom it has been shared. We will respond to verified access requests within 30 days.
• Right to Rectification: You have the right to request the correction of inaccurate or incomplete personal data held about you. For account-level details such as email address or phone number, you may update these directly in your account settings. For identity data (name, date of birth, NID), corrections must be submitted to support together with supporting documentation.
• Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (and no other legal basis applies), or where you object to processing based on legitimate interests. Please note that this right is not absolute — we may be required to retain certain data to comply with legal obligations as described in the Data Retention section above.
• Right to Restriction of Processing: In certain circumstances (for example, where you contest the accuracy of data, or where you have objected to processing pending our assessment of that objection), you may request that we restrict our processing of your personal data. During a restriction period, we will continue to store the data but will not actively process it for operational purposes.
• Right to Data Portability: Where processing is based on your consent or on the performance of a contract, and is carried out by automated means, you may request that we provide your personal data to you in a structured, commonly used, machine-readable format (such as JSON or CSV) so that you can transfer it to another service provider.
• Right to Object: You have the right to object at any time to the processing of your personal data where we rely on legitimate interests as the legal basis. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, or where processing is necessary for the establishment, exercise, or defence of legal claims.
• Right to Withdraw Marketing Consent: You may withdraw consent to receive promotional communications from bajilaiv at any time by updating your notification preferences in your account settings, or by sending a withdrawal request to support@bajilaiv. Withdrawal of marketing consent will not affect your account or your ability to use any game or betting service on the platform.

Data Security Measures

bajilaiv implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security programme is reviewed and updated regularly to address evolving threats and to maintain alignment with current industry best practices.

• SSL/TLS 1.3 Encryption: All data transmitted between your device and bajilaiv is encrypted using Transport Layer Security (TLS) 1.3 — the current industry standard for secure web communications. Our SSL certificate is maintained by a recognised certificate authority and is renewed on a scheduled basis.
• Encryption at Rest: Sensitive data stored in our databases — including identity documents, financial records, and KYC data — is encrypted at rest using AES-256 encryption. Encryption keys are managed separately from the encrypted data and are rotated on a scheduled basis.
• Access Controls: Access to personal data within bajilaiv's systems is restricted on a strict need-to-know basis using role-based access control (RBAC). All internal access to sensitive data is logged and subject to periodic audit review. Administrative access requires multi-factor authentication.
• Fraud Detection Systems: Automated fraud detection systems monitor transaction patterns, login behaviour, and gameplay activity in real time to identify and flag unusual activity for human review. These systems help protect your account from unauthorised access and protect the platform from financial crime.
• Regular Security Assessments: bajilaiv conducts periodic security assessments of its infrastructure and application layer, including vulnerability scanning and review of third-party integrations. Identified vulnerabilities are prioritised and remediated in accordance with a formal patch management process.
• Data Breach Response: In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of affected players, bajilaiv will notify affected users without undue delay via the registered email address on their account, providing details of the nature of the breach, the categories of data affected, and the steps being taken to mitigate impact.

While bajilaiv takes every reasonable precaution to protect your personal data, no internet-based platform can guarantee absolute security. You also bear responsibility for protecting your account by using a strong, unique password, enabling two-factor authentication (2FA) where available, and never sharing your login credentials with a third party. If you suspect your account has been compromised, contact support@bajilaiv immediately.