baji7 Privacy Policy

1Introduction

baji7 ("we", "us", "our") operates the online betting and casino platform available at https://baji7.io (the "Platform"). We are committed to protecting the privacy and personal data of all individuals who interact with the Platform, whether as registered account holders or as visitors browsing the site.

This Privacy Policy sets out in clear, accessible English the categories of personal data we collect from users in Bangladesh, the purposes for which that data is processed, the parties with whom it may be shared, the security measures we apply to protect it, how long we retain it, and the rights available to you as a data subject.

This Privacy Policy should be read alongside our Terms & Conditions and our Responsible Gaming policy, both of which contain additional provisions relevant to your use of the baji7 Platform.

2Data Controller

For the purposes of this Privacy Policy, baji7 acts as the data controller in respect of the personal data collected and processed through the Platform. As data controller, baji7 determines the purposes and means of processing personal data provided by users.

If you have any questions, concerns, or requests relating to the processing of your personal data, you may contact our Data Protection team using the contact details set out in Section 16 of this Privacy Policy. We will respond to all data-related enquiries within a reasonable timeframe and in accordance with applicable data protection obligations.

3Data We Collect

baji7 may collect the following categories of personal data from users, depending on the nature of their interaction with the Platform:

baji7 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data, or health information, except where strictly required by law (for example, problem gambling support records where a user voluntarily engages with responsible gaming assistance).

4How We Collect Your Data

baji7 collects personal data through the following channels:

• Direct submissions: Data you provide when you register an account, complete KYC verification, make a deposit or withdrawal request, contact customer support, or update your account profile.
• Automated technical collection: Data collected automatically when you visit the Platform, including through cookies, server logs, and analytics tools that record technical and usage data such as IP address, device identifiers, and browsing behaviour on baji7.
• Payment providers: Confirmation data received from payment processors (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, and others) when a transaction is initiated or completed. baji7 receives transaction reference numbers and status confirmations; full payment account credentials are handled by the respective payment provider and are not stored on baji7 servers.
• Identity verification services: Data received from third-party KYC verification partners who assist baji7 in confirming user identity and age in compliance with our verification obligations.
• Fraud prevention and security tools: Data received from security and fraud detection systems that monitor platform activity to identify potentially irregular patterns or prohibited conduct as described in our Terms & Conditions.

5How We Use Your Data

baji7 processes personal data for the following purposes:

• Account management: To create, maintain, and administer your baji7 Account, including processing your registration, verifying your identity, and managing your account preferences.
• Transaction processing: To process deposits in BDT via bKash, Nagad, Rocket, and other supported methods, and to process withdrawal requests to your registered payment account.
• Platform service delivery: To provide access to sports betting markets (including BPL, T20, IPL, cricket, football, kabaddi, and rugby), live casino games, slots, fishing games, and all other features available on the baji7 Platform.
• KYC and age verification: To verify that you meet the minimum age requirement of 21 years and to confirm your identity as required for responsible operation of the Platform.
• Fraud and security monitoring: To detect, investigate, and prevent fraudulent activity, money laundering, prohibited conduct, and any other activities that threaten the integrity or security of the Platform or its users.
• Customer support: To respond to support enquiries, resolve account issues, process complaints, and communicate important account-related information.
• Responsible gaming: To administer deposit limits, self-exclusion requests, session time limits, and other responsible gaming tools selected by the user, and to identify and respond to patterns of use that may indicate problem gambling.
• Legal compliance: To comply with applicable anti-money laundering (AML) obligations, record-keeping requirements, and any lawful requests from competent authorities.
• Platform improvement: To analyse aggregated usage data to understand how the Platform is used, identify technical issues, improve user experience, and develop new features and services.
• Marketing communications: To send promotional offers, bonus notifications, and platform updates to users who have opted in to receive marketing communications. See Section 14 for details on managing your marketing preferences.

6Legal Basis for Processing

baji7 processes personal data on the following legal bases depending on the specific processing activity:

• Contractual necessity: Processing required to perform the contract between baji7 and the user — including account management, transaction processing, and service delivery — is carried out on the basis that it is necessary for the performance of that contract.
• Legal obligation: Processing required to comply with applicable legal obligations — including AML requirements, age verification, and record-keeping — is carried out on the basis of legal obligation.
• Legitimate interests: Processing carried out for fraud prevention, security monitoring, platform improvement, and responsible gaming monitoring is based on baji7's legitimate interests in operating a safe, fair, and reliable platform, provided that those interests are not overridden by the interests or rights of the data subject.
• Consent: Processing for the purpose of sending direct marketing communications is based on the explicit consent of the user. Users may withdraw their consent to marketing at any time as described in Section 14.

7Data Sharing & Disclosure

baji7 does not sell, rent, or trade personal data to any third party for their own commercial purposes. Personal data may be shared with the following categories of trusted third parties strictly to the extent necessary to deliver platform services or comply with legal requirements:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank (DBBL), City Bank, BRAC Bank, Islami Bank, Sonali Bank, and other payment partners, solely to facilitate deposit and withdrawal transactions.
• KYC and identity verification providers: Third-party verification services used to confirm user identity and age as part of baji7's verification obligations.
• Game content providers: Platform partners including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and others may receive limited technical session data necessary to deliver their games through the baji7 Platform. These providers are bound by strict data processing agreements.
• Fraud prevention and security services: Third-party fraud detection and security monitoring providers who assist baji7 in identifying and preventing prohibited conduct on the Platform.
• IT and hosting infrastructure providers: Technology service providers who host and maintain baji7's platform infrastructure, bound by appropriate data processing agreements.
• Legal and regulatory authorities: Competent authorities, law enforcement agencies, or regulatory bodies where disclosure is required by applicable law, court order, or legal process.

8Payment Data

baji7 takes the security of payment-related data with the highest degree of seriousness. The following practices govern how payment data is handled on the baji7 Platform:

• baji7 does not store full payment account credentials (such as complete bKash PINs, Nagad account passwords, or full card numbers) on its own servers. Payment transactions are processed directly through the relevant payment provider's secure infrastructure.
• baji7 retains payment reference information (such as transaction IDs, registered mobile numbers associated with bKash or Nagad accounts, and partial account identifiers) for the purposes of transaction verification, withdrawal processing, AML compliance, and dispute resolution.
• All payment data in transit between users, baji7, and payment providers is protected by 256-bit SSL/TLS encryption.
• baji7's policy of returning withdrawals to the same payment method used for the most recent deposit is a security measure that helps protect users against unauthorised withdrawal requests and reduces the risk of fraudulent fund diversion.

9Cookies & Tracking Technologies

baji7 uses cookies and similar tracking technologies to operate and improve the Platform. A cookie is a small text file placed on your device when you visit the Platform. The following categories of cookies are used:

• Strictly necessary cookies: Required for the Platform to function correctly, including maintaining your login session, remembering your account preferences, and enabling secure transactions. These cookies cannot be disabled without significantly impairing Platform functionality.
• Analytical and performance cookies: Used to collect anonymised data about how users navigate the Platform, which pages are visited most frequently, and where technical errors occur. This data helps baji7 improve platform performance and user experience.
• Functional cookies: Used to remember choices you make on the Platform such as your preferred language, game display settings, and responsible gaming tool configurations.
• Security cookies: Used to support fraud detection, bot prevention, and account security monitoring functions on the Platform.

You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies may prevent certain features of the baji7 Platform from functioning correctly. baji7 does not use third-party advertising cookies or behavioural targeting cookies that track your activity across websites outside of the baji7 Platform.

10Data Security

baji7 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our key security measures include:

• 256-bit SSL/TLS encryption for all data transmitted between user devices and baji7 servers.
• Access controls that restrict internal access to personal data to authorised personnel on a strict need-to-know basis.
• Regular security assessments and penetration testing of platform infrastructure.
• Encrypted storage of sensitive personal data at rest.
• Intrusion detection systems and real-time security monitoring of platform infrastructure.
• Incident response procedures to identify, contain, and report data security incidents in a timely manner.

11Data Retention

baji7 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Active account data: Retained for the duration of the account's active status plus a reasonable period following account closure to support dispute resolution, legal claims, and regulatory audit obligations.
• Transaction records: Financial transaction records, including deposit and withdrawal histories, are retained for a minimum of five years from the date of the transaction in accordance with standard AML record-keeping requirements.
• KYC verification documents: Identity and age verification documents submitted during KYC review are retained for the duration required by applicable verification obligations and for a period after account closure.
• Customer support records: Communications between users and the baji7 support team are retained for a period sufficient to support complaint resolution and continuous improvement of support quality.
• Technical and usage data: Anonymised or pseudonymised technical and analytics data may be retained for longer periods for platform improvement and security monitoring purposes, as this data does not identify individual users.

Upon the expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with baji7's data disposal procedures.

12Your Data Rights

As a user of the baji7 Platform, you hold the following rights in relation to your personal data, subject to applicable law and any overriding legal obligations held by baji7:

• Right of access: You have the right to request a copy of the personal data baji7 holds about you, along with information about how it is processed.
• Right to rectification: You have the right to request that inaccurate or incomplete personal data held by baji7 be corrected or updated. You may also update certain account details directly through your account settings.
• Right to erasure: In certain circumstances, you have the right to request the deletion of your personal data. Please note that baji7 may be required to retain certain data for legal compliance purposes even following an erasure request, such as transaction records held for AML purposes.
• Right to restrict processing: In certain circumstances, you have the right to request that baji7 restrict the processing of your personal data while a concern or dispute is being resolved.
• Right to data portability: Where processing is based on your consent or on contractual necessity, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to object: You have the right to object to processing carried out on the basis of baji7's legitimate interests. baji7 will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to withdraw consent: Where processing is based on your consent (such as marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of the above rights, please contact baji7 using the details provided in Section 16. We will respond to all valid data rights requests within a reasonable period. We may need to verify your identity before processing a data rights request to protect your data against unauthorised access.

13Children's Privacy

The baji7 Platform is strictly intended for adults aged 21 years and above. baji7 does not knowingly collect personal data from individuals under the age of 21, and we do not permit persons under 21 to register an account or use the Platform in any capacity.

If baji7 becomes aware that personal data has been collected from an individual who is under 21 years of age, we will take immediate steps to suspend the associated account and securely delete the personal data in question. If you are a parent or guardian and believe that a person under the age of 21 in your care has provided personal data to baji7, please contact our support team immediately at [email protected].

14Marketing Communications

With your consent, baji7 may send you promotional communications including bonus offers, seasonal promotions (such as Eid specials, Pohela Boishakh offers, BPL tournament promotions, and T20 World Cup campaigns), and platform updates via your registered mobile number or email address.

You may opt out of receiving marketing communications from baji7 at any time by:

• Updating your communication preferences in your baji7 account settings.
• Contacting baji7 customer support via email at [email protected] and requesting removal from marketing lists.

Please note that opting out of marketing communications will not affect the delivery of transactional communications that are necessary for account management, such as deposit confirmations, withdrawal notifications, security alerts, and KYC requests. These service communications will continue to be sent regardless of your marketing preferences.

15Updates to This Privacy Policy

baji7 reserves the right to update, amend, or replace this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the services offered on the Platform. The effective date of the current version is displayed at the top of this page.

Where changes to this Privacy Policy are material — meaning they significantly affect how personal data is collected, used, or shared — baji7 will notify registered users via the mobile number or email address associated with their account prior to the updated policy taking effect. For minor or clarificatory amendments, the updated policy will be published on this page without individual notification.

Continued use of the baji7 Platform following the publication of an updated Privacy Policy constitutes acceptance of the revised terms. If you do not agree with the updated Privacy Policy, you should cease using the Platform and may request account closure in accordance with Section 14 of our Terms & Conditions.

16Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data baji7 holds about you, please contact our Data Protection and Privacy team using the details below:

For information about your rights under these terms, please also refer to the Terms & Conditions page. For questions specifically about responsible gaming tools and account controls, please visit our Responsible Gaming page. For general questions about the Platform, our FAQ page covers the most common queries from Bangladesh players.

This Privacy Policy was last reviewed and updated on 1 January 2026. baji7 reserves the right to update this policy at any time. The version published on this page supersedes all previous versions.