baji77 Privacy Policy

baji77 is an online casino and sports betting platform accessible at https://baji77.bid, providing live dealer games, slots, cricket betting, and real-money wagering services to players in Bangladesh and other eligible jurisdictions. In the context of this Privacy Policy, "baji77", "we", "us", or "our" refers to the operator of the baji77 platform.

baji77 acts as the data controller in respect of all personal data collected through the Platform. This means we determine the purposes for which your personal data is processed and the means by which it is handled. Any questions about our role as data controller or about the contents of this Privacy Policy should be directed to our support team at [email protected].

baji77 collects personal data across three broad categories: information you provide directly, information generated by your use of the Platform, and information received from third-party service providers.

baji77 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or biometric data beyond what is contained in standard government-issued identity documents submitted for verification purposes.

baji77 collects personal data through the following mechanisms:

• Direct submission: Information you enter into registration forms, the payment cashier, KYC document upload interfaces, support ticket forms, and live chat sessions.
• Automated technical collection: Server logs, cookies, pixel tags, and session analytics tools that record your interaction with the Platform, including pages visited, games launched, time on site, and error events.
• Payment processor feeds: Transaction confirmation data received from bKash, Nagad, Rocket, Upay, and card network processors following deposit or withdrawal requests.
• Identity verification partners: Where baji77 uses a third-party KYC service to cross-reference submitted identity documents against public records or document authenticity databases, data points returned from that service are stored against your account record.
• Fraud detection systems: Automated tools that analyse device fingerprints, behavioural patterns, and network characteristics to detect multi-accounting, bonus abuse, or other prohibited conduct as defined in the Terms & Conditions.

baji77 processes your personal data for the following defined purposes:

• Account creation and management: To register your account, authenticate your identity at login, and maintain an accurate record of your account status, preferences, and history.
• Payment processing: To initiate, settle, and record deposit and withdrawal transactions via bKash, Nagad, Rocket, Upay, Visa, and Mastercard in Bangladeshi Taka (BDT).
• Identity verification and KYC compliance: To verify that players meet the 18+ age requirement and to satisfy anti-money-laundering (AML) obligations, including confirming the source of funds where required.
• Service delivery: To provide access to casino games, sportsbook markets, live dealer tables, promotional offers, and customer support.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity including multi-accounting, use of stolen payment instruments, and bonus abuse.
• Responsible gaming: To monitor gameplay patterns for signs of problem gambling behaviour and to action self-exclusion, deposit limit, and cooling-off requests promptly.
• Marketing communications: To send you promotional emails, SMS alerts, and in-platform notifications about bonuses, tournaments, and new game releases — subject to your marketing consent preferences.
• Platform improvement: To analyse aggregated usage data, identify technical issues, and develop new features that improve the overall baji77 experience.
• Legal compliance: To retain records as required by applicable financial, anti-money-laundering, and data protection regulations.

baji77 processes personal data on one or more of the following legal bases:

• Contractual necessity: Processing required to perform the baji77 Player Agreement — including account management, payment execution, and service delivery — is carried out on the basis that it is necessary to fulfil our contractual obligations to you.
• Legal obligation: Processing required to comply with applicable legal requirements — including KYC verification, AML record-keeping, and age verification — is carried out on the basis of legal obligation.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and aggregate analytics is carried out on the basis of baji77's legitimate interests, provided those interests are not overridden by your fundamental privacy rights.
• Consent: Processing for marketing communications is carried out on the basis of your explicit consent, which you may withdraw at any time without affecting the lawfulness of prior processing.

baji77 does not sell, rent, or trade your personal data to any third party for commercial gain. Data is shared only in the following limited and controlled circumstances:

• Payment processors: bKash, Nagad, Rocket, Upay, Visa, and Mastercard receive the transaction data strictly necessary to process your deposit or withdrawal request. These providers operate under their own privacy and security frameworks.
• Identity verification providers: Third-party KYC and AML screening services receive the identity documents and data points required to complete player verification. All such providers are bound by confidentiality obligations and may not use your data for any purpose beyond the verification service.
• Game content providers: Studios such as Evolution Gaming, Pragmatic Play, Ezugi, Netent, Microgaming, and Spribe receive a session token and anonymised player identifier in order to deliver game content. They do not receive your name, payment details, or contact information.
• IT and infrastructure providers: Cloud hosting, database management, and cybersecurity service providers who require access to platform data to maintain system integrity. All such providers are contractually bound to process data only on baji77's instructions.
• Law enforcement and regulatory authorities: Where baji77 is compelled by law, court order, or regulatory directive to disclose personal data, we will comply with the minimum disclosure required. Where legally permitted, we will notify affected players of such disclosure.
• Business transfers: In the event of a merger, acquisition, or sale of the baji77 business, player data may be transferred to the acquiring entity. Affected players will be notified in advance of any such transfer, and the acquiring entity will be required to honour the terms of this Privacy Policy.

baji77 uses cookies and similar tracking technologies to ensure the Platform functions correctly and to improve your user experience. The following categories of cookies are in use:

You may manage cookie preferences through your browser settings at any time. Please note that disabling essential cookies may prevent certain Platform features from operating correctly, including the ability to maintain a logged-in session.

baji77 does not use cookies to serve third-party advertising or to track your activity across websites other than https://baji77.bid.

baji77 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, subject to any longer retention periods required by applicable law.

• Active account data: Retained for the duration of your account's active status plus a minimum of five (5) years following account closure, to comply with AML record-keeping obligations.
• Financial transaction records: Retained for a minimum of seven (7) years from the date of the transaction, in line with standard financial record-keeping requirements.
• KYC documents: Retained for a minimum of five (5) years following account closure or the termination of the player relationship.
• Support communications: Retained for three (3) years from the date of the last interaction, to allow reference in the event of a dispute or follow-up inquiry.
• Marketing consent records: Retained for the period during which consent is active, plus three (3) years after withdrawal of consent as evidence of the original consent basis.
• Technical/log data: Retained for up to twelve (12) months from collection, unless a specific security investigation requires extended retention.

Upon the expiry of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be attributed to an identifiable individual.

baji77 implements a layered security architecture to protect your personal and financial data against unauthorised access, disclosure, alteration, and destruction. Our security measures include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and the baji77 Platform
• Encrypted database storage for all personally identifiable information and financial records at rest
• Role-based access controls ensuring that only authorised baji77 staff with a legitimate operational need can access specific categories of player data
• Two-factor authentication available for player accounts and mandatory for all internal staff systems accessing personal data
• Regular penetration testing and vulnerability assessments conducted by independent cybersecurity professionals
• Intrusion detection systems that monitor platform traffic in real time and generate alerts for anomalous access patterns
• Incident response procedures that define the steps to be taken in the event of a data breach, including player notification within a reasonable timeframe where the breach is likely to result in a high risk to your rights

As a baji77 player, you hold the following rights in respect of your personal data. To exercise any of these rights, contact our support team at [email protected] with a clear written description of your request. We will acknowledge your request within two (2) business days and provide a substantive response within five (5) business days.

• Right of access: You may request a copy of all personal data that baji77 holds about you, along with information on how it is being used and with whom it has been shared.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or completed without undue delay.
• Right to erasure: You may request that we delete your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where you object to processing and there are no overriding legitimate grounds. Note that this right is subject to our legal retention obligations — data we are required by law to retain cannot be erased on request.
• Right to restriction of processing: You may request that we temporarily limit our use of your personal data while a dispute about its accuracy or the legitimacy of its processing is being resolved.
• Right to data portability: Where processing is based on your consent or on contractual necessity, you may request that we provide your personal data in a structured, commonly used, machine-readable format.
• Right to object: You may object at any time to processing of your personal data carried out on the basis of legitimate interests, including profiling related to direct marketing. Upon receiving a valid objection, baji77 will cease that processing unless compelling legitimate grounds exist that override your interests.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time by updating your account settings or contacting support. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

baji77 is strictly an 18+ platform. We do not knowingly collect, process, or store personal data belonging to any individual under the age of 18. Age verification is a mandatory step in our registration and KYC process, and any account found to belong to a minor will be immediately suspended and all associated data will be handled in accordance with our legal obligations.

If you are a parent or guardian and you believe that a person under 18 has registered on the baji77 Platform, please contact us immediately at [email protected]. We will investigate the matter promptly and take all necessary steps to close the account and remove associated personal data.

baji77 supports third-party parental control tools that can restrict access to gambling websites on shared or family devices. We recommend that parents and guardians make use of these tools to prevent underage access.

The baji77 Platform may contain references or contextual mentions of third-party brands, game studios, or payment partners. This Privacy Policy applies exclusively to data collected and processed by baji77 through the baji77 Platform at https://baji77.bid.

baji77 accepts no responsibility for the privacy practices of any third-party service provider, payment processor, or game studio. We recommend that you review the privacy policies of any third-party service that you interact with in connection with your baji77 account — including bKash, Nagad, Rocket, and your card-issuing bank — as those entities operate under their own data protection frameworks, which are independent of this Policy.

baji77 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or Platform features. When material changes are made — those that significantly affect your rights or the way we handle your data — we will notify registered players via the email address on file at least seven (7) days before the revised Policy takes effect.

Non-material changes, such as clarifications of existing language or updates to reflect new payment methods, may take effect immediately upon publication. The "Last Updated" date displayed in the Hero section of this page will always reflect the date of the most recent revision.

Your continued use of the baji77 Platform following the effective date of any update constitutes acceptance of the revised Privacy Policy. If you do not accept the updated Policy, you must cease using the Platform and contact support to request account closure.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way baji77 handles your personal data, please reach out to our support team using the contact details below. All privacy-related inquiries are handled by dedicated staff and will receive a substantive response within five (5) business days.

When submitting a privacy request, please include your registered account username or email address, a clear description of your request or concern, and any relevant reference numbers from prior support interactions. This will help us locate your records promptly and handle your request as efficiently as possible.

baji77 is committed to resolving all privacy concerns fairly, transparently, and without undue delay. If after contacting us you remain unsatisfied with our response, you retain the right to escalate the matter through any applicable independent dispute resolution or data protection oversight channel available in your jurisdiction.