Privacy Policy — bajifair
At bajifair, protecting your personal data is not an obligation we take lightly — it is a core part of how we earn and maintain the trust of every Bangladeshi player on our platform. This Privacy Policy explains what data we collect, why we collect it, how we store and protect it, and the rights you have over your own information.
How bajifair Protects Your Privacy
256-Bit SSL Encryption
Every data transfer between your device and bajifair servers is protected by industry-standard 256-bit SSL encryption, making it virtually impossible for any third party to intercept your personal or financial information in transit.
Secure Data Storage
Personal data is stored in access-controlled, encrypted server environments. bajifair does not store full payment card numbers or mobile banking PINs on its own systems. Sensitive credentials are handled exclusively by certified payment processors.
Minimal Data Principle
We collect only the data that is strictly necessary to operate the bajifair platform, verify your identity, process your transactions, and comply with anti-money laundering obligations. We do not harvest data for resale or unrelated commercial purposes.
No Unsolicited Marketing
bajifair will never sell or rent your personal data to third-party marketers. Promotional communications are sent only to players who have opted in. You can unsubscribe from all marketing messages at any time through your account settings or by contacting support.
Your Rights Are Respected
You have the right to access, correct, export, and request deletion of the personal data bajifair holds about you. Our privacy team handles all data-subject requests within a defined response window and keeps you informed at every step of the process.
Regular Policy Reviews
This Privacy Policy is reviewed and updated regularly to reflect changes in our platform, applicable laws, and industry best practices. When material changes are made, registered players are notified via the contact details on their bajifair account.
Information We Collect
bajifair collects personal data through several channels: directly from you when you register an account or use our services, automatically when you interact with our platform, and occasionally from trusted third-party sources during identity verification. We collect only what is necessary to deliver a safe, reliable, and legally compliant service to players in Bangladesh.
Information You Provide Directly
When you register or use bajifair, you may provide the following categories of personal data:
| Data Category | Examples | Purpose |
|---|---|---|
| Identity Data | Full name, date of birth, NID / passport number | Account registration, age verification, KYC compliance |
| Contact Data | Mobile number, email address | Account communication, OTP verification, support |
| Financial Data | bKash / Nagad / Rocket wallet number, bank account reference | Processing deposits and withdrawals |
| Verification Documents | NID scan, utility bill, address proof | KYC / AML compliance, fraud prevention |
| Account Preferences | Preferred currency, notification settings, responsible gaming limits | Personalised platform experience |
Information Collected Automatically
When you visit or interact with the bajifair platform, certain technical data is collected automatically by our systems and third-party analytics tools. This includes:
- Device & Technical Data: IP address, device type, operating system, browser type and version, screen resolution, and device identifiers.
- Usage Data: Pages visited, games played, bet amounts and frequency, session duration, click-through paths, and feature interactions.
- Location Data: Approximate geographic location derived from your IP address (used solely for regional compliance checks — bajifair does not use GPS-level location tracking).
- Cookie & Tracking Data: Data collected via cookies, session tokens, and similar technologies. See the Cookies section of this policy for full details.
Information from Third Parties
bajifair may receive personal data about you from the following third-party sources in limited, specific circumstances:
- Payment processors (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, and card networks) confirming transaction status.
- Identity verification service providers used during the KYC process.
- Fraud detection and AML screening services that cross-reference your details against sanctions or watchlists.
Note: bajifair does not purchase data lists or collect personal data from social media platforms without your explicit consent. Any third-party data received is used solely for the purpose of verifying your identity or processing your transactions.
How We Use Your Data
bajifair uses personal data collected from you for the following purposes, each of which has a defined legal basis under applicable data protection principles:
Service Delivery
The primary use of your personal data is to operate and deliver the bajifair platform. This includes creating and managing your player account, processing deposits and withdrawals via bKash, Nagad, Rocket, and other accepted methods, settling bets, delivering casino game outcomes, and providing customer support. Without this data, we cannot offer you our services.
Identity Verification & Compliance
bajifair is required to verify the identity of its players and monitor transactions for suspicious activity as part of our anti-money laundering (AML) obligations. Your identity data and transaction history are used to perform KYC checks and to comply with financial crime prevention standards applicable to online gambling platforms.
Platform Security & Fraud Prevention
We use technical and usage data to monitor for and prevent fraudulent activity, including but not limited to: multiple account creation, bonus abuse, unauthorised account access, and automated bot activity. Behavioural analytics help us identify unusual patterns that may indicate account compromise or coordinated fraud attempts.
Responsible Gaming
bajifair uses your account activity data — including betting frequency, session length, and deposit patterns — to identify early indicators of problem gambling. This data powers our responsible gaming tools such as deposit limits, session reminders, and self-exclusion triggers. This use of data directly protects your wellbeing as a player.
Communications
We use your contact data to send transactional messages (deposit confirmations, withdrawal notifications, account alerts), service announcements (policy updates, platform maintenance notices), and — where you have opted in — promotional communications about bonuses, new games, and seasonal offers such as BPL cricket promotions or Eid special events.
Platform Improvement
Aggregated and anonymised usage data helps us understand how players interact with bajifair, identify technical issues, improve game performance, and develop new features. This data does not identify individual players and is used solely to enhance the overall platform experience.
Legal Basis: bajifair processes your personal data based on one or more of the following grounds: (a) performance of a contract (your player account agreement), (b) compliance with a legal obligation (KYC/AML requirements), (c) our legitimate interests in operating a secure and fraud-free platform, or (d) your explicit consent (marketing communications). You may withdraw consent for marketing at any time.
Data Sharing & Third Parties
bajifair does not sell, trade, or rent your personal data to third parties for their own commercial purposes. We share personal data with external parties only where it is necessary to provide our services, meet legal obligations, or protect the integrity of the platform.
Categories of Third Parties We Work With
- Payment Service Providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, and Mastercard receive the minimum transaction data necessary to process your deposits and withdrawals. These providers are governed by their own privacy policies and are bound by contractual data protection obligations with bajifair.
- Identity Verification Providers: Third-party KYC service providers may process copies of your identification documents to confirm your identity. These providers operate under strict confidentiality and data security agreements.
- Game Software Providers: Providers such as Pragmatic Play, Evolution Gaming, Spribe, Microgaming, NetEnt, and Ezugi may receive a pseudonymous player identifier and game session data necessary to deliver their games. They do not receive your full personal profile.
- Analytics & Security Providers: We use trusted third-party tools for platform analytics, fraud detection, and cybersecurity monitoring. Data shared with these providers is minimised, anonymised where possible, and governed by data processing agreements.
- Legal & Regulatory Authorities: bajifair will disclose personal data to law enforcement agencies, regulators, or courts where required to do so by applicable law, a valid legal order, or to protect against fraud, money laundering, or other criminal activity.
International Transfers: Some of our technology partners operate servers outside Bangladesh. Where personal data is transferred internationally, bajifair ensures that appropriate contractual safeguards are in place to maintain the same level of data protection that applies within the platform.
Data Security & Storage
bajifair implements a layered security architecture to safeguard your personal data against unauthorised access, accidental loss, alteration, or disclosure. Our security measures are reviewed regularly and updated in response to emerging threats and changes in industry best practices.
Technical Measures
- Transport Security: All data exchanged between your browser or app and bajifair servers is encrypted using TLS 1.2 or higher (256-bit SSL).
- At-Rest Encryption: Sensitive personal data stored in our databases is encrypted at rest using AES-256 encryption.
- Access Controls: Access to personal data within bajifair is restricted on a strict need-to-know basis. Staff with access undergo regular security training and background checks.
- Firewalls & Intrusion Detection: Our platform infrastructure is protected by enterprise-grade firewalls and continuous intrusion detection and prevention systems (IDPS).
- Password Hashing: Player passwords are never stored in plain text. All passwords are hashed using industry-standard algorithms before storage.
Organisational Measures
- Regular internal security audits and vulnerability assessments.
- Documented data breach response procedures, including player notification protocols.
- Contractual data protection obligations imposed on all third-party service providers handling player data.
- A designated privacy point of contact responsible for overseeing data protection compliance within bajifair.
Your Role in Security: While bajifair takes all reasonable technical and organisational steps to protect your data, you also play an important part. Use a strong, unique password for your bajifair account, do not share your login credentials with anyone, and contact our support team immediately if you suspect your account has been compromised.
Your Privacy Rights
bajifair respects your rights over your personal data. The following rights are available to all registered players on the platform. To exercise any of these rights, please contact our privacy team using the details in the final section of this policy.
Right of Access
You have the right to request a copy of the personal data that bajifair holds about you. We will provide this information within a reasonable timeframe and in a commonly used electronic format. We may ask you to verify your identity before fulfilling this request.
Right to Rectification
If any personal data held by bajifair is inaccurate or incomplete, you have the right to request that it be corrected. You can update most personal details directly through your account settings. For identity documents and KYC records, please contact our support team.
Right to Erasure
In certain circumstances, you have the right to request that bajifair delete the personal data we hold about you. This right is subject to limitations — for example, we are required by law to retain certain financial and identity records for a minimum period to comply with AML obligations. Where full erasure is not possible, we will explain precisely what data must be retained and why.
Right to Restrict Processing
You may request that bajifair restrict the processing of your personal data in specific circumstances — for example, while a dispute about the accuracy of your data is being resolved. During a restriction period, your data will be stored but not actively processed for operational purposes.
Right to Data Portability
Where technically feasible, you have the right to receive the personal data you have provided to bajifair in a structured, machine-readable format, and to request that this data be transferred to another service provider of your choice.
Right to Withdraw Consent
Where bajifair processes your personal data on the basis of your consent (such as for marketing communications), you may withdraw that consent at any time by updating your notification preferences in your account settings or by contacting our support team. Withdrawal of consent does not affect the lawfulness of processing that took place before consent was withdrawn.
Response Timeframe: bajifair aims to respond to all privacy rights requests within 30 calendar days of receipt. In complex cases requiring additional investigation, we may extend this period by up to a further 30 days, in which case we will notify you of the extension and the reason for it.
Data Retention Policy
bajifair retains personal data for as long as is necessary to fulfil the purposes for which it was collected, comply with legal and regulatory obligations, resolve disputes, and enforce our agreements. The specific retention periods applied to different categories of data are set out below.
| Data Category | Retention Period | Reason |
|---|---|---|
| Account & Identity Data | Duration of account + 5 years after closure | Legal obligation, AML compliance, dispute resolution |
| Transaction Records | 7 years from transaction date | Financial record-keeping, AML regulatory requirements |
| KYC Documents | 5 years after account closure | Regulatory compliance, fraud prevention |
| Betting & Game History | 3 years from activity date | Responsible gaming monitoring, dispute resolution |
| Support Communications | 2 years from last communication | Service quality, complaint resolution |
| Analytics & Usage Data | 24 months (anonymised) | Platform improvement, performance monitoring |
| Marketing Preferences | Until consent is withdrawn | Compliance with consent-based marketing rules |
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with any individual player. Where anonymisation is used in place of deletion, the resulting data set is used solely for aggregate statistical analysis.
Players who close their bajifair account should be aware that certain data categories will be retained for the minimum periods required by law, even after the account has been deactivated. This is not a choice made by bajifair but a legal requirement under applicable financial crime prevention regulations.
Contact Our Privacy Team
If you have any questions about this Privacy Policy, wish to exercise any of your privacy rights, or have concerns about the way bajifair handles your personal data, please do not hesitate to reach out to our privacy team. We are committed to addressing all privacy-related enquiries promptly and transparently.
How to Reach Us
The most direct way to raise a privacy concern or submit a data rights request is via our live support chat, available around the clock on the bajifair platform. Alternatively, you may contact our team by email. Our support email address is displayed in the footer of every page on this site. Please use the subject line "Privacy Request — [Your Full Name]" so that your message is directed to the correct team without delay.
For formal written data-subject access requests, please include the following information in your message to allow us to verify your identity and locate your records efficiently:
- Your full registered name as it appears on your bajifair account.
- The mobile number or email address associated with your account.
- A brief description of the specific right you wish to exercise or the concern you wish to raise.
- A copy of a valid identity document (for access or erasure requests, to prevent unauthorised disclosure to third parties).
Policy Updates
bajifair reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, platform features, or applicable legal requirements. The current version is always available on this page, identified by the effective date at the top of the document. For material changes that significantly affect your rights or how we use your data, we will provide advance notice via your registered contact details before the change takes effect.
Continued Use Constitutes Acceptance: Your continued use of bajifair following any update to this Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with any changes, you should stop using the platform and may request account closure by contacting our support team.
Your Data Is Safe — Now Enjoy the Platform
We take your privacy seriously so you can focus on what matters. Explore our casino games, check out cricket betting, or log in to your account.