bhajee Privacy Policy

Information We Collect

bhajee collects personal data through several channels: directly from you when you register and use the platform, automatically through your interactions with the site, and from third-party partners where lawfully permitted. The categories of data we collect are described below.

1.1 Data You Provide Directly

When you create a bhajee account, update your profile, or contact our support team, you voluntarily provide us with personal data that may include:

• Identity data: Full legal name, date of birth, gender, and National Identity Card (NID) or passport number submitted during KYC verification.
• Contact data: Email address, mobile phone number, and residential address (including city — e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi).
• Account credentials: Username and an encrypted hash of your chosen password. bhajee never stores passwords in plain text.
• Financial data: The mobile financial service number (bKash, Nagad, Rocket, Upay) or bank account details used to make deposits and receive withdrawals. Card details for Visa/Mastercard transactions are processed by the payment gateway and are not stored on bhajee servers.
• Communication data: The content of support tickets, live chat transcripts, email exchanges, and any feedback or complaints you submit to bhajee.
• Verification documents: Copies of government-issued identification documents submitted to satisfy KYC and age verification requirements.

1.2 Data Collected Automatically

When you access the bhajee platform, certain technical and behavioural data is collected automatically by our systems. This data is used for security monitoring, fraud prevention, platform optimisation, and analytics:

• Device & browser data: IP address, device type, operating system, browser version, and screen resolution.
• Session data: Login timestamps, session duration, pages visited, games played, bets placed, and cash-out actions.
• Geolocation data: Approximate location inferred from IP address, used to verify eligibility and comply with any applicable access restrictions.
• Cookies and tracking technologies: Session cookies, persistent cookies, and local storage tokens. See Section 4 for full details.

1.3 Data from Third Parties

bhajee may receive personal data about you from third-party sources in the following limited circumstances:

• Payment processors: Transaction confirmation data from bKash, Nagad, Rocket, Upay, and affiliated banks to verify the completion of deposits and withdrawals.
• Identity verification services: Confirmation signals from third-party KYC technology providers used to validate identity documents you submit.
• Game providers: Round outcomes, RTP data, and session activity logs from Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi in connection with games you play on bhajee.
• Fraud prevention services: Risk signals from third-party fraud screening tools used to protect the security and integrity of the platform.

How We Use Your Data

bhajee uses the personal data it collects for specific, legitimate purposes. We do not use your data for purposes that are incompatible with those listed below, and we do not sell your data to third parties under any circumstances.

Marketing Communications

bhajee may send you promotional emails, SMS messages, or in-platform notifications about bonuses, new games, and seasonal promotions (such as Eid, Pohela Boishakh, or BPL season offers) where you have given explicit consent to receive such communications at the time of registration or subsequently via your account settings. You may withdraw consent and opt out of marketing communications at any time by updating your notification preferences in the account settings panel or by contacting [email protected]. Withdrawing marketing consent does not affect the lawfulness of processing based on consent given before the withdrawal.

Legal Basis for Processing

bhajee processes your personal data on one or more of the following legal bases, depending on the specific purpose for which the data is being used:

• Contractual necessity: Processing that is required to fulfil bhajee's contractual obligations to you as a registered player — including account management, payment processing, and game provision — is carried out on the basis that it is necessary to perform the contract between bhajee and you.
• Legal obligation: Certain processing activities — including KYC identity verification, age verification, record-keeping for financial transactions, and fraud reporting — are required by applicable law. bhajee processes data for these purposes on the basis of compliance with a legal obligation.
• Legitimate interests: bhajee processes certain data (such as device data, session activity, and IP address) for fraud prevention, platform security, and responsible gaming monitoring on the basis of bhajee's legitimate interests in operating a safe and fair platform for all users, provided those interests are not overridden by your rights.
• Consent: Where bhajee sends marketing communications or uses non-essential cookies and tracking technologies, processing is based on your explicit consent. You may withdraw consent at any time without affecting prior processing.

Cookies & Tracking Technologies

bhajee uses cookies and similar client-side storage technologies to operate the platform securely and efficiently. This section explains what types of cookies we use, why we use them, and how you can manage your cookie preferences.

Types of Cookies We Use

Managing Cookies

You can manage cookie settings through your browser's privacy controls. Most modern browsers allow you to view, block, or delete cookies at any time. Please note that disabling strictly necessary cookies will impair or prevent login and core platform functionality. Instructions for managing cookies are available in the help documentation of your chosen browser (e.g., Chrome, Firefox, Safari, Samsung Internet).

Data Sharing & Third Parties

bhajee does not sell your personal data. We share personal data with third parties only in the specific, limited circumstances described below, and only with parties that are contractually required to handle your data with appropriate security and confidentiality safeguards.

Categories of Third Parties

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank, Visa, and Mastercard receive the financial and identity data necessary to process your deposits and withdrawals. Each provider operates under their own privacy policy and regulatory framework.
• Game content providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive session identifiers and game activity data required to deliver their game content to you within the bhajee platform.
• Identity verification (KYC) providers: Third-party identity verification technology partners receive copies of the documents you submit during the KYC process solely for the purpose of validating your identity and age.
• Fraud prevention services: Specialised fraud screening providers receive device data, IP addresses, and session identifiers to generate risk signals that help protect the bhajee platform from fraudulent activity.
• Analytics providers: Aggregated and anonymised analytics data may be processed by third-party analytics platforms to assist bhajee in understanding platform performance. No personally identifiable information is shared for analytics purposes.
• Legal and regulatory authorities: bhajee may disclose personal data to law enforcement agencies, financial intelligence units, or other competent authorities where required to do so by applicable law, court order, or regulatory mandate.

International Data Transfers

Some of bhajee's technology and service providers may be located outside of Bangladesh. Where personal data is transferred internationally, bhajee takes reasonable steps to ensure that the receiving party applies data protection standards no less rigorous than those described in this policy, including through the use of contractual data processing agreements.

Data Retention

bhajee retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, including satisfying any applicable legal, regulatory, accounting, or reporting requirements. The following general retention guidelines apply:

When your personal data is no longer required for any of the above purposes, bhajee will securely delete or permanently anonymise it. Anonymised data — which cannot be used to identify you — may be retained indefinitely for statistical and research purposes.

Your Privacy Rights

As a player on the bhajee platform, you have a number of rights in relation to the personal data we hold about you. bhajee is committed to facilitating the exercise of these rights promptly and transparently. To exercise any of the rights below, please contact [email protected] with the subject line "Privacy Rights Request" and include your account username and the specific right you wish to exercise.

bhajee will acknowledge all privacy rights requests within 5 business days (Bangladesh Standard Time, UTC+6) and will aim to resolve them within 30 calendar days. Complex requests may require up to 60 days; we will notify you if an extension is needed. bhajee will not charge a fee for exercising your rights unless a request is manifestly unfounded or excessive, in which case a reasonable administrative fee may apply.

Data Security

bhajee implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, disclosure, or destruction. Our security framework includes the following controls:

• SSL/TLS encryption: All data in transit between your device and bhajee's servers is encrypted using SSL/TLS protocols. The bhajee.org domain is served exclusively over HTTPS.
• Encrypted password storage: Account passwords are stored as salted cryptographic hashes using industry-standard algorithms. Plain-text passwords are never stored or transmitted.
• Two-factor authentication (2FA): Players are encouraged to enable 2FA via their registered mobile number. This significantly reduces the risk of unauthorised account access even if a password is compromised.
• Access controls: Internal access to player personal data is restricted to authorised bhajee personnel on a strict need-to-know basis. Access logs are maintained and regularly reviewed.
• Fraud monitoring: Automated and manual monitoring systems scan for unusual login patterns, suspicious transaction behaviour, and anomalous gameplay activity in real time.
• Data minimisation: bhajee systems are designed to limit the personal data accessible to any single service or team to the minimum required for the relevant function.
• Third-party security standards: All third-party vendors who process personal data on bhajee's behalf are contractually required to maintain security standards no less stringent than those described in this section.

In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, bhajee will notify affected players without undue delay and will take immediate steps to contain and remediate the breach.

Children's Privacy

bhajee enforces mandatory age verification as part of the account registration and KYC process. Any account that is found to have been created by or on behalf of a person under the age of 18 will be immediately closed, all funds will be returned to the originating payment method, and any personal data associated with that account will be securely deleted as soon as it is no longer required for legal compliance purposes.

If you are a parent or guardian and you believe that your child has created a bhajee account or provided personal data to bhajee without your knowledge or consent, please contact [email protected] immediately. bhajee will investigate the matter promptly and take appropriate action, including account closure and data deletion where applicable.

Policy Updates & Contact

Updates to This Policy

bhajee reserves the right to update, revise, or replace this Privacy Policy at any time. The effective date at the top of this page will be updated whenever a material change is made. Material changes — such as a new category of data being collected or a new third-party sharing arrangement — will be communicated to registered players via a notification in their account dashboard or by email to the address on file.

Minor changes (such as clarifications of existing practice or formatting corrections) may be made without prior notice. It is your responsibility to review this Privacy Policy periodically. Continued use of the bhajee platform following the publication of any revised Privacy Policy constitutes your acceptance of the updated terms.

How to Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data bhajee holds about you, please contact the bhajee privacy team using the details below. All privacy-related correspondence must be submitted in English to ensure it is handled accurately and without delay.

When submitting a privacy rights request or complaint, please include your registered account username, the nature of your request, and any relevant supporting information. This will allow bhajee to locate your records and respond efficiently. You do not need to provide your password or full financial account details when contacting support.