Privacy Policy — How bajawin Collects, Uses, and Protects Your Personal Data

bajawin collects personal data from you in several ways — directly when you register and use the platform, automatically as you browse and interact with the site, and occasionally from third-party sources such as payment processors and identity verification providers. The categories of data we collect are described below.

Registration & Account Data: When you create a bajawin account, we collect your full legal name, date of birth, residential address, email address, mobile phone number, and a username and password of your choosing. This information is necessary to establish and manage your account and to comply with our Know Your Customer (KYC) obligations.

Identity Verification Data: As part of our KYC process, we may request copies of government-issued identity documents such as your National ID card (NID), passport, or driving licence. We may also request proof of address documents and, in some cases, a selfie photograph taken alongside your identity document. This data is used solely for verification and fraud-prevention purposes.

Financial & Transaction Data: When you make deposits or withdrawals on bajawin, we collect transactional data including deposit amounts, withdrawal requests, payment method details (such as your registered bKash or Nagad mobile number, or bank account reference), and transaction timestamps. We do not store full card numbers or payment credentials — these are handled directly by our payment partners.

Betting & Gaming Activity Data: We maintain a full record of all bets placed, games played, bonus offers claimed, and gaming session data associated with your bajawin account. This data is used for account management, dispute resolution, responsible gaming monitoring, and platform improvement.

Device & Technical Data: When you access bajawin, we automatically collect technical information about your device and connection, including your IP address, browser type and version, operating system, device identifiers, screen resolution, and referring URL. This data is used for security monitoring, fraud detection, and platform optimisation.

Communications Data: If you contact bajawin support via live chat, email, or any other channel, we retain records of those communications, including the content of messages and any attachments sent, for customer service quality and dispute resolution purposes.

bajawin does not sell, rent, or otherwise commercially transfer your personal data to third parties. However, in order to operate the bajawin platform effectively and fulfil our legal obligations, we do share certain categories of personal data with the following carefully selected categories of third party:

• Payment Processing Partners: Providers of bKash, Nagad, Rocket, Upay, and bank transfer services receive the minimum transaction data necessary to process your deposits and withdrawals. These partners operate under their own privacy policies and are subject to applicable Bangladeshi financial regulations.
• Identity Verification Providers: Third-party KYC and identity verification services may process your identity documents on bajawin's behalf to confirm your age and identity. These providers are contractually bound to process your data solely for this purpose and to maintain appropriate data security standards.
• Game Software Providers: Casino game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive session-level data (such as player ID, bet amounts, and game outcomes) necessary to operate their games on the bajawin platform. These providers do not receive your full personal profile.
• Analytics & Platform Technology Providers: bajawin uses trusted third-party analytics and infrastructure services to monitor platform performance, detect fraud, and optimise user experience. These providers process technical and usage data in their capacity as data processors acting under our instructions.
• Legal & Regulatory Authorities: We may disclose your personal data to law enforcement agencies, regulatory bodies, courts, or other public authorities in Bangladesh or internationally where we are legally required or permitted to do so — for example, in connection with an AML investigation, fraud inquiry, or court order.

All third parties that process personal data on behalf of bajawin are required to implement appropriate technical and organisational data security measures. We do not permit our data processing partners to use your personal data for their own independent purposes beyond those specified in our agreements with them.

bajawin takes the security of your personal data seriously and implements a range of technical and organisational measures to protect your information against unauthorised access, accidental loss, destruction, alteration, or disclosure. No online platform can guarantee absolute security, but we maintain industry-standard protections appropriate to the sensitivity of the data we hold.

Our key data security measures include:

• SSL/TLS Encryption in Transit: All communications between your browser or mobile device and the bajawin platform are encrypted using SSL/TLS protocols. The padlock icon displayed in your browser's address bar confirms that your connection is secure.
• Encryption at Rest: Sensitive personal data — including identity documents and financial transaction records — is stored in encrypted form on bajawin's secure servers. Encryption keys are managed through controlled access procedures.
• Access Controls: Access to personal data within bajawin's systems is restricted on a strict need-to-know basis. Staff members who have no legitimate business reason to access your data cannot do so. All internal access to personal data is logged and audited.
• Penetration Testing & Security Audits: bajawin conducts regular security assessments, including penetration testing and vulnerability scanning, to identify and remediate potential weaknesses in our systems before they can be exploited.
• Two-Factor Authentication (2FA): bajawin offers two-factor authentication for account login. We strongly encourage all Bangladesh players to enable 2FA in their account settings to add an additional layer of protection against unauthorised access.
• Incident Response: In the event of a confirmed data security incident that is likely to result in a risk to your rights and interests, bajawin will notify affected players within a reasonable timeframe in accordance with applicable obligations, and will take immediate steps to contain and remediate the incident.

Players also have an important role to play in keeping their bajawin account secure. You should choose a strong, unique password, never share your login credentials with anyone, and log out of your account when using shared or public devices. If you suspect that your account has been compromised, contact bajawin support immediately via the email address displayed in the footer of this page.

As a bajawin player, you hold a number of rights in relation to the personal data we hold about you. We are committed to honouring these rights promptly and transparently. Your privacy rights include:

• Right of Access: You have the right to request a copy of the personal data that bajawin holds about you. Upon a valid request, we will provide you with a summary of your data in a clear and understandable format within 30 days.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it. You can update many basic account details — such as your contact information — directly through your bajawin account settings.
• Right to Erasure: You have the right to request the deletion of your personal data, subject to our legal retention obligations as described in Section 6. We will process erasure requests as fully as our legal obligations permit.
• Right to Restriction: In certain circumstances — for example, where you contest the accuracy of data we hold, or where you have objected to our processing — you have the right to request that we restrict the processing of your personal data while the matter is under review.
• Right to Data Portability: Where we process your personal data on the basis of your consent or for the performance of a contract, you have the right to receive your data in a structured, machine-readable format that you can transfer to another service provider.
• Right to Object: You have the right to object to our processing of your personal data where that processing is based on our legitimate interests. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to Withdraw Consent: Where we process your data on the basis of your consent (for example, for marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

To exercise any of the rights listed above, please contact bajawin's support team. We may need to verify your identity before processing your request to ensure that data is not disclosed to or altered by an unauthorised person. We aim to respond to all valid privacy rights requests within 30 days of receipt.