bajl Privacy Policy — How We Protect Your Personal Data

bajl is an online betting and casino platform serving players in Bangladesh. We operate bajl.im and all associated digital interfaces. As an operator that handles financial transactions and player account data, we take data privacy and information security extremely seriously.

This Privacy Policy applies to all personal data collected through the bajl platform, including data collected during the registration process, during account use, during financial transactions, and through your interactions with bajl's customer support team. It applies equally to access via desktop browsers and any mobile interfaces through which the bajl platform is accessed.

bajl is the data controller for personal data collected through the platform. This means bajl determines the purposes and means by which your personal data is processed. Where bajl engages third-party processors — such as payment service providers or game studios — those parties process data only on bajl's instructions and for the specific purposes described in this policy.

All natural-language communications between bajl and its players are conducted in English. This Privacy Policy is written in English and constitutes the authoritative version of bajl's privacy commitments. Bangladesh Standard Time (BST, UTC+6) applies to all time-sensitive data processing commitments described herein.

bajl collects personal data through several channels and for specific, defined purposes. The categories of data we collect are described below.

Registration Data. When you create a bajl account you are required to provide: your full legal name, date of birth, email address, and mobile phone number. This data is required to create and manage your account, to verify your age and identity, and to communicate with you regarding your account.

Identity Verification (KYC) Data. As part of our Know Your Customer (KYC) obligations, bajl may request copies of identity documents including your National Identity Card (NID), passport, or other government-issued identification. We may also request proof of address or proof of payment method ownership. KYC documents are processed and stored securely and are used solely for verification purposes.

Transaction Data. bajl records details of all financial transactions conducted on the platform, including deposit amounts, withdrawal requests, payment method identifiers (such as your bKash or Nagad mobile number or the last four digits of a payment card), transaction timestamps, and transaction status. This data is necessary to process payments and to maintain accurate financial records.

Gameplay and Betting Data. bajl logs your betting and gaming activity on the platform, including game sessions, bet amounts, bet outcomes, sports betting selections, and bonus usage. This data is used to operate the platform, to detect irregular activity, and to personalise your experience where applicable.

Device and Technical Data. When you access bajl, we automatically collect certain technical data including your IP address, browser type and version, operating system, device type, screen resolution, and session timestamps. This data is collected via server logs and browser-side technology and is used for security monitoring, fraud prevention, and platform optimisation.

Communications Data. If you contact bajl's customer support team via live chat or email, we retain records of those communications including the content of messages, timestamps, and the resolution applied. This data is used to handle your queries effectively and to improve our support quality.

bajl uses the personal data it collects for the following purposes:

• Account Management: To create, maintain, verify, and secure your bajl account, and to communicate with you about your account status, transactions, and any changes to bajl's services or policies.
• Payment Processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard. Transaction data is retained for financial reconciliation and audit purposes.
• Age and Identity Verification: To comply with bajl's 21+ age restriction and to verify that players are who they claim to be, in line with responsible gaming and anti-money laundering obligations.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, bonus abuse, money laundering, account takeover attempts, and other forms of platform misuse.
• Responsible Gaming: To monitor gameplay patterns that may indicate problem gambling behaviour, and to facilitate the operation of responsible gaming tools including deposit limits, session reminders, and self-exclusion.
• Platform Improvement: To analyse aggregated, anonymised usage data to understand how players interact with the platform and to improve the user experience, game catalogue, and support quality.
• Legal Compliance: To comply with applicable legal obligations and to respond to lawful requests from regulatory or law enforcement authorities where required.
• Customer Support: To respond to queries, resolve disputes, and provide assistance via bajl's 24/7 live chat and email support channels.

bajl does not use your personal data for automated decision-making that produces legal or similarly significant effects without human review, except in the context of fraud detection systems where automated flagging is followed by human investigation before any consequential action is taken.

bajl processes your personal data on one or more of the following legal bases:

• Contractual Necessity: Processing is necessary to perform the contract between you and bajl — that is, to operate your account, process transactions, and provide the services you have registered to use.
• Consent: Where you have provided specific consent to a particular use of your data — for example, receiving promotional communications — bajl will process data on that basis. You may withdraw consent at any time by contacting support.
• Legitimate Interests: bajl may process data where it is necessary for bajl's legitimate interests, such as fraud prevention, platform security, and improving service quality, provided those interests are not overridden by your rights and interests.
• Legal Obligation: bajl may process and retain data where required to comply with applicable legal obligations, including financial record-keeping requirements and responses to lawful authority requests.

bajl does not sell your personal data. We share personal data with third parties only in the following limited circumstances:

• Payment Service Providers: Transaction data is shared with payment processors including mobile financial service operators (bKash, Nagad, Rocket, Upay) and card processors (Visa, Mastercard networks) to the extent necessary to complete payment transactions. These processors act as data processors on bajl's behalf and are contractually bound to process data only for specified payment purposes.
• Game Studio Providers: Where you play games supplied by third-party studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Ezugi, a session token and anonymised player identifier may be passed to the relevant studio's systems to initiate and operate the game session. Full personal data is not shared with game studios.
• Identity Verification Services: bajl may engage third-party KYC verification providers to assist in validating identity documents. These providers process personal data solely for verification purposes under strict confidentiality obligations.
• Legal and Regulatory Authorities: bajl may disclose personal data to law enforcement agencies, regulatory bodies, or courts where we are legally required to do so, or where disclosure is necessary to protect the rights, safety, or property of bajl or its players.
• Business Transfers: In the event that bajl undergoes a merger, acquisition, or sale of all or part of its assets, player data may be transferred to the successor entity as part of that transaction, subject to equivalent privacy protections.

In all cases where bajl shares data with third-party processors, appropriate data processing agreements are in place to ensure your data is handled securely and in accordance with this Privacy Policy.

Mobile Financial Services. When you deposit or withdraw using bKash, Nagad, Rocket, or Upay, bajl records your registered mobile wallet number and the transaction reference provided by the payment operator. bajl does not store your mobile wallet PIN or any authentication credentials for these services. All payment data is transmitted over encrypted channels.

Card Payments. Visa and Mastercard payments are processed via PCI-DSS (Payment Card Industry Data Security Standard) compliant third-party processors. bajl does not store full card numbers (PANs), CVV/CVC codes, or card expiry dates on its own systems. The payment processor returns only a tokenised reference and the last four digits of the card number for record-keeping purposes.

Bank Transfers. Where bank transfers are used via Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, or Sonali Bank, bajl retains the bank reference number and transaction amount for reconciliation. Full bank account numbers are not stored beyond what is strictly required for transaction processing.

Segregated Funds. Player funds held by bajl are maintained in accounts segregated from bajl's operational funds. This segregation protects player balances and ensures that they are not commingled with bajl's business finances.

bajl uses cookies and similar browser-based technologies to operate and improve the platform. The categories of cookies we use are as follows:

• Strictly Necessary Cookies: These cookies are essential for the bajl platform to function. They enable core features such as session management, login state persistence, and security verification. The platform cannot function correctly without these cookies, and they cannot be disabled.
• Performance and Analytics Cookies: bajl uses anonymised analytics data to understand how players navigate the platform — for example, which pages are most visited, how long sessions last, and where players encounter errors. This data is aggregated and does not identify individual players.
• Functionality Cookies: These cookies remember your preferences — such as language and display settings — to provide a more personalised experience when you return to bajl.

bajl does not use advertising cookies, retargeting pixels, or third-party tracking technologies that track your activity across websites unrelated to bajl.

Most web browsers allow you to manage cookie settings through their privacy or settings menus. You may choose to block or delete cookies at any time; however, disabling strictly necessary cookies will impair the functionality of the bajl platform, including the ability to log in and conduct transactions.

bajl retains personal data for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal obligations. The following general retention periods apply:

• Active Account Data: Personal data associated with an active bajl account is retained for as long as the account remains open. Players who close their account may request deletion of non-essential data; however, certain data categories must be retained for the periods described below.
• Transaction and Financial Records: Records of deposits, withdrawals, and betting activity are retained for a minimum of seven years following the transaction date, in line with standard financial record-keeping practice.
• KYC and Verification Documents: Identity verification documents are retained for a minimum of five years following account closure or the completion of the relevant verification process, whichever is later.
• Customer Support Communications: Records of support interactions are retained for three years from the date of the relevant interaction, to facilitate quality assurance and dispute resolution.
• Technical and Device Data: Server log data including IP addresses and session data is retained for 12 months from collection, after which it is deleted or anonymised.
• Self-Excluded Players: Where a player has voluntarily self-excluded, bajl retains sufficient data to enforce the self-exclusion and to prevent re-registration for the duration of the exclusion period and for a reasonable period thereafter.

At the end of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to an identified individual.

bajl implements a layered set of technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, or disclosure. These measures include:

• 256-Bit SSL/TLS Encryption: All data transmitted between your browser or device and bajl's servers is encrypted using industry-standard Transport Layer Security (TLS). This protects login credentials, payment data, and personal information in transit.
• Access Controls: Access to systems containing player personal data is restricted to authorised bajl personnel on a strictly need-to-know basis. All internal access is logged and monitored.
• Secure Server Infrastructure: bajl's servers and databases are hosted in access-controlled environments with physical and logical security controls, intrusion detection systems, and regular security assessments.
• Password Security: Player account passwords are stored in hashed form using industry-standard cryptographic hashing. bajl never stores passwords in plain text. bajl staff cannot retrieve your password — only a reset can be issued.
• Fraud and Anomaly Detection: bajl operates automated monitoring systems to detect unusual account activity, suspicious login attempts, and irregular financial patterns that may indicate security incidents.

Despite these measures, no online platform can guarantee absolute security. bajl encourages all players to use strong, unique passwords for their bajl account, to enable any available two-factor authentication, and to contact support immediately at [email protected] if they suspect any unauthorised access to their account.

bajl respects your rights over your personal data. As a bajl player, you have the following rights with respect to your personal data:

• Right of Access: You have the right to request a copy of the personal data bajl holds about you. bajl will respond to verified access requests within five business days.
• Right to Rectification: If any personal data bajl holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update certain details directly within your account settings, or contact support for assistance.
• Right to Erasure: Subject to bajl's legal retention obligations, you have the right to request that your personal data be deleted. Note that data subject to mandatory retention periods — such as financial transaction records — cannot be deleted before the retention period expires, even upon request.
• Right to Restrict Processing: In certain circumstances you may request that bajl restrict the processing of your data while a dispute or investigation is pending.
• Right to Data Portability: Where processing is based on consent or contractual necessity and is carried out by automated means, you may request a copy of your data in a structured, machine-readable format.
• Right to Withdraw Consent: Where bajl processes your data based on consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing conducted prior to withdrawal.
• Right to Object: You have the right to object to processing based on bajl's legitimate interests. bajl will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.

To exercise any of the above rights, please contact bajl's support team via live chat or by emailing [email protected]. bajl may need to verify your identity before processing a data rights request to ensure the security of your account. bajl will acknowledge all data rights requests within 24 hours and will provide a substantive response within five business days.

bajl's platform is strictly for adults aged 21 years and over. bajl does not knowingly collect or process personal data belonging to individuals under the age of 21. If bajl becomes aware that a user under the age of 21 has registered an account or provided personal data, bajl will immediately close the account, void any transactions conducted, and securely delete all associated personal data.

If you are a parent or guardian and believe that a minor in your care has created a bajl account or provided personal data to bajl, please contact our support team immediately via live chat or at [email protected]. bajl will investigate promptly and take appropriate action.

bajl's age verification processes are designed to identify and prevent underage registration. These include date-of-birth checks at registration and KYC document verification for age confirmation where required.

bajl reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable legal requirements, or the services we offer. When material changes are made, bajl will notify registered players via the email address or mobile number held on their account, with a minimum of seven days' notice before the revised policy takes effect.

The date on which the current version of this Privacy Policy was last updated is displayed at the top of this page. bajl encourages players to review this Privacy Policy periodically to stay informed about how we protect and use personal data. Your continued use of the bajl platform following the effective date of any amendment constitutes acceptance of the revised Privacy Policy.

If you have any concerns about changes to this Privacy Policy, you are welcome to contact bajl's support team before the changes take effect to discuss how they may affect you.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way bajl handles your personal data, please contact us using the details below. All privacy-related communications are handled in English by bajl's support team, available 24 hours a day, 7 days a week including Bangladesh public holidays.