Privacy Policy for badbaje

Information We Collect

badbaje collects personal data that is necessary to provide a safe, compliant, and functional gambling platform. The categories of data we collect depend on how you interact with the platform — whether you are simply visiting the website, registering an account, making a deposit, or contacting customer support.

The following table summarises the main categories of personal data collected by badbaje, the context in which each category is gathered, and the primary purpose for which it is used:

badbaje does not collect sensitive personal data beyond what is strictly necessary for the purposes described above. We do not collect data relating to racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, or health data except where directly relevant to a responsible gaming assessment voluntarily initiated by the player.

How We Use Your Data

badbaje processes personal data only for legitimate, clearly defined purposes. We do not use your data in ways that are incompatible with the purposes for which it was originally collected. The following sets out the main purposes for which badbaje processes personal data, together with the legal basis applicable to each processing activity.

• Account creation and management: We use identity and contact data to create and maintain your badbaje player account, verify your identity, and communicate with you about your account status and activity.
• Payment processing: We process financial data to facilitate deposits and withdrawals via bKash, Nagad, Rocket, Visa, and Mastercard. Transaction records are maintained for accounting and fraud-detection purposes.
• Age and identity verification (KYC): We use identity documents and date-of-birth data to confirm that all players are aged 18 or above, in compliance with our age-restriction policy.
• Fraud prevention and platform security: Technical and financial data is analysed to detect and prevent fraudulent activity, money laundering, bonus abuse, and unauthorised account access.
• Responsible gaming monitoring: Usage and betting-history data is used to identify patterns that may indicate problem gambling behaviour, enabling the platform to apply protective measures where appropriate.
• Customer support: Communications data is used to handle support queries, resolve disputes, and improve the quality of the support service.
• Platform improvement: Aggregated and anonymised usage data is used to understand how players interact with the platform and to make improvements to game selection, navigation, and performance.
• Marketing communications: Where you have explicitly opted in to receive promotional communications, we may use your contact data to send information about bonuses, seasonal promotions — such as Eid or BPL cricket offers — and platform updates. You may withdraw consent for marketing communications at any time by contacting support@badbaje.
• Regulatory compliance: badbaje may be required to process and retain personal data to comply with applicable legal and regulatory obligations, including responding to lawful requests from competent authorities.

badbaje does not use automated decision-making processes that produce legal or similarly significant effects on players without human review. Where automated tools are used for fraud screening or responsible gaming assessment, a member of the compliance team reviews any resulting action before it is applied to a player's account.

Data Sharing & Disclosure

badbaje does not sell, rent, or trade your personal data to third parties for their own marketing or commercial purposes under any circumstances. We share personal data only where it is strictly necessary to deliver platform services, comply with legal obligations, or protect the security of the platform and its users.

The categories of third parties with whom badbaje may share personal data are set out below:

• Payment service providers: bKash, Nagad, Rocket, Upay, Visa, and Mastercard — solely for the purpose of processing deposit and withdrawal transactions. These providers operate under their own privacy policies and are not permitted to use your data for any other purpose.
• Game technology providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other licensed studio partners — limited technical data (such as session tokens) may be shared to facilitate game delivery. These providers do not receive your full identity profile.
• Identity verification services: Third-party KYC and document-verification providers used to validate identity documents submitted as part of the account verification process. These providers process data strictly under our instruction and under binding data-processing agreements.
• Fraud prevention and analytics providers: Specialist technology partners that assist with fraud detection, risk scoring, and responsible gaming monitoring. Data shared with these providers is used only for the stated purpose and not retained by them beyond the scope of the service agreement.
• Legal and regulatory authorities: badbaje may disclose personal data to law enforcement agencies, courts, or regulatory bodies where required by law, court order, or other lawful compulsion. We will notify affected users where legally permitted to do so.
• Professional advisers: Lawyers, auditors, and accountants engaged by badbaje who require access to data in the course of providing professional services. These parties are bound by professional confidentiality obligations.

Cookies & Tracking

badbaje uses cookies and similar tracking technologies to support core platform functionality, maintain session state, analyse usage patterns, and enhance the player experience. A cookie is a small text file placed on your device by the badbaje platform when you visit the site. Cookies do not contain executable code and cannot carry viruses or malware.

The following categories of cookies are used on badbaje:

• Strictly necessary cookies: Required for the platform to function. These include session authentication cookies that keep you logged in while you navigate between pages, and security cookies that protect against cross-site request forgery. These cookies cannot be disabled without breaking core functionality.
• Functional cookies: These remember your preferences — such as language settings and responsible gaming tool configurations — to personalise your experience on return visits.
• Analytics cookies: Used to collect aggregated, anonymised data about how visitors use the platform. This information helps badbaje understand which features are most used, identify navigation issues, and improve overall platform performance. Individual users are not identifiable from analytics data.
• Security and fraud-detection cookies: These assist with identifying suspicious activity, such as multiple login attempts from different locations, and help protect your account and the broader platform from unauthorised access.

You may configure your browser to block or delete cookies. Please note that disabling strictly necessary cookies will impair your ability to log in and use core platform features. Instructions for managing cookies are available in your browser's help documentation. Disabling analytics or functional cookies will not affect your ability to access the platform's gaming and betting services.

Data Security

badbaje applies technical and organisational security measures appropriate to the sensitivity of the personal data it holds. Our security programme is designed to protect player data against unauthorised access, accidental loss, alteration, and unlawful disclosure. The following measures form part of our information security framework:

• SSL/TLS encryption: All data transmitted between your device and the badbaje platform is encrypted using industry-standard SSL/TLS protocols. This applies to login sessions, financial transactions, and all personal data submitted via forms or the support interface.
• Access controls: Access to personal data held by badbaje is restricted on a strict need-to-know basis. Staff members are granted only the minimum level of data access required to perform their role. Access privileges are reviewed regularly.
• Password security: Player passwords are stored using strong one-way cryptographic hashing. badbaje staff cannot retrieve or view your password in plain text at any time.
• Secure infrastructure: The badbaje platform is hosted on secure server infrastructure with firewalls, intrusion detection systems, and regular security patching in place.
• Staff training: All badbaje staff who handle personal data are trained in data protection principles and the platform's internal data handling procedures.
• Incident response: badbaje maintains an incident response plan to address data security incidents promptly. In the event of a breach that materially affects player data, affected users will be notified without undue delay.

While badbaje takes all reasonable steps to protect your personal data, no digital platform can guarantee absolute security against all possible threats. You are responsible for maintaining the security of your own account credentials, including your password and any two-factor authentication methods you have configured. If you suspect that your account has been compromised, contact support@badbaje or use the live chat immediately.

Data Retention

badbaje retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, to comply with applicable legal and regulatory obligations, and to resolve any disputes or enforce platform policies. The retention periods applicable to the main categories of data held by badbaje are set out below.

• Account and identity data: Retained for the duration of the player's account and for a minimum period of five years following account closure, to satisfy record-keeping obligations and to support any post-closure disputes or regulatory enquiries.
• Financial transaction records: Retained for a minimum of five years from the date of the transaction in accordance with financial record-keeping requirements. This applies to all deposit and withdrawal records regardless of the payment method used.
• KYC verification documents: Retained for the duration of the account and for five years following closure. Document copies are stored securely and accessed only by authorised compliance personnel.
• Customer support communications: Retained for three years from the date of the interaction to support quality assurance, dispute resolution, and staff training purposes.
• Technical and usage data: Aggregated and anonymised usage data may be retained indefinitely for platform improvement purposes. Personally identifiable technical data — such as IP address logs — is retained for no longer than 12 months unless required for an ongoing security investigation.
• Marketing consent records: Records of consent given or withdrawn for marketing communications are retained for the life of the account and for two years following account closure.

When personal data is no longer required for the purposes for which it was collected and no legal retention obligation applies, badbaje will securely delete or anonymise the data in accordance with our internal data disposal procedures. Anonymised data that can no longer be linked to any individual may be retained and used for statistical and research purposes without time limit.

Your Rights

badbaje respects your rights in relation to your personal data. The following rights are available to players and visitors whose personal data is held by badbaje. To exercise any of these rights, please contact the data team at support@badbaje with the subject line "Data Rights Request". We will respond to all valid requests within a reasonable timeframe.

• Right of access: You have the right to request a copy of the personal data badbaje holds about you, together with information about how it is used and on what basis. This is sometimes referred to as a Subject Access Request (SAR).
• Right to rectification: If any personal data badbaje holds about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. You may also update certain account details directly via your account settings.
• Right to erasure: In certain circumstances, you may request that badbaje delete your personal data. This right is subject to overriding legal retention obligations — for example, we are not able to erase financial transaction records that we are required to retain for regulatory purposes.
• Right to restrict processing: You may request that badbaje suspend the processing of your personal data in certain circumstances — for example, while the accuracy of the data is being contested.
• Right to data portability: Where processing is based on your consent or the performance of a contract, you may request that badbaje provides your personal data in a structured, commonly used, machine-readable format.
• Right to withdraw consent: Where processing is based on your consent — such as for marketing communications — you may withdraw that consent at any time by contacting support@badbaje. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.
• Right to object: You may object to the processing of your personal data for direct marketing purposes at any time. You may also object to other forms of processing where the basis for that processing is our legitimate interest, subject to badbaje demonstrating compelling legitimate grounds.

Contact & Data Queries

If you have any questions, concerns, or requests relating to this Privacy Policy or the way in which badbaje handles your personal data, please contact the support team using one of the channels listed below. All data-related enquiries are handled with confidentiality and will receive a substantive response.

• Email: support@badbaje — use the subject line "Privacy Query" or "Data Rights Request" for the fastest routing to the appropriate team member.
• Live Chat: Available 24/7 on the badbaje platform. For complex data queries, email is recommended as it creates a written record and allows for a more detailed response.
• WhatsApp: +880 1700 000000 — available during standard Bangladesh Standard Time (BST, UTC+6) support hours for general account and privacy enquiries.

badbaje aims to respond to all privacy-related enquiries within five business days. For formal data rights requests — such as Subject Access Requests or erasure requests — we will acknowledge receipt within two business days and provide a substantive response within a reasonable timeframe proportionate to the complexity of the request.

This Privacy Policy may be updated from time to time to reflect changes in platform practices, technology, or applicable requirements. The "Last Updated" date at the top of this page will be revised whenever a material change is made. We encourage you to review this policy periodically. Continued use of the badbaje platform following a published update constitutes acceptance of the revised policy.