baj999 Privacy Policy

This Privacy Policy ("Policy") describes the practices of baj999 ("the Platform", "We", "Us", "Our") with respect to the collection, use, storage, sharing, and protection of personal data belonging to individuals ("Members", "Users", "You") who access and use the baj999 website at https://baj999.bid and any associated mobile-optimised or app-based interfaces.

baj999 is committed to handling your personal data with transparency, integrity, and care. We recognise that members in Bangladesh entrust us with sensitive financial and identity information when they register, deposit, and play on our platform, and we take that responsibility seriously. This Policy is designed to give you a clear and complete picture of exactly how that information is managed throughout its lifecycle — from the moment it is collected to the point at which it is securely deleted.

This Policy forms part of the binding agreement between you and baj999 and should be read in conjunction with our Terms & Conditions and Responsible Gaming Policy. By creating a baj999 account or continuing to use the platform after this Policy has been updated, you confirm that you have read, understood, and agreed to the practices described herein.

If you have any questions about this Policy or about how baj999 handles your personal data, please contact our dedicated data support team at [email protected] before using the platform.

baj999 collects personal data from members through several channels: directly when you provide it during registration or KYC verification, automatically as you interact with the platform, and occasionally from third-party service providers who assist us in delivering our services. The categories of personal data we collect are described in detail below.

2.1 Registration & Identity Data

When you create a baj999 account, we collect the following information to establish and verify your identity:

• Full legal name (as it appears on your official identity document)
• Date of birth (to verify you are aged 18 or above)
• Email address
• Mobile phone number (Bangladeshi or international)
• Username and encrypted password
• Preferred currency (Bangladeshi Taka — BDT)

2.2 Identity Verification (KYC) Documents

As part of our Know Your Customer (KYC) and anti-money-laundering (AML) compliance process, we may request copies of the following documents before processing your first withdrawal or when triggered by risk-assessment rules:

• Bangladesh National Identity Card (NID) — front and back
• Valid passport (photo page)
• Driver's licence
• Recent utility bill or bank statement (as proof of address, issued within 90 days)
• Proof of ownership of the payment method used (e.g., screenshot of bKash account showing your registered name)

2.3 Financial & Transaction Data

To process deposits and withdrawals, baj999 collects and retains:

• Payment method type (e.g., bKash, Nagad, Rocket, Upay, Visa, Mastercard)
• Mobile wallet account numbers or masked card details (we never store full card numbers)
• Deposit and withdrawal amounts, dates, and transaction reference numbers
• Running account balance history
• Bonus credits received and wagering progress

2.4 Usage & Behavioural Data

As you interact with baj999, we automatically collect technical and behavioural data to operate the platform, detect fraud, and improve your experience:

• IP address and approximate geolocation (country and city)
• Device type, operating system, browser name and version
• Session duration, pages visited, and click-path data
• Game history: games played, bet amounts, outcomes, session timestamps
• Search queries entered within the baj999 platform
• Error logs and crash reports

2.5 Communication Data

When you contact baj999 support or respond to our communications, we collect:

• Content of support tickets and live-chat transcripts
• Email correspondence with our team
• Survey responses and feedback you choose to submit
• Records of promotional emails opened and links clicked (where you have opted in to marketing)

baj999 uses the personal data it collects for specific, clearly defined purposes. We do not use your data for any purpose that is incompatible with the purposes described below without first obtaining your explicit consent.

baj999 does not use automated decision-making processes — such as profiling algorithms that produce legal or similarly significant effects on you — without human review. If an automated system flags your account for a security review, a baj999 compliance team member will manually assess the case before any consequential action is taken.

baj999 processes your personal data on the basis of one or more of the following legal grounds, each of which applies to specific processing activities as described:

• Contractual necessity: Processing that is required to perform our obligations under the baj999 Terms & Conditions — including account management, payment processing, game delivery, and customer support. Without this processing, we cannot provide the service you have contracted for.
• Legal obligation: Processing that is required to comply with applicable laws and regulations, including AML laws, age-verification requirements, and the obligation to retain transaction records for regulatory audit purposes.
• Legitimate interests: Processing carried out for purposes that serve baj999's legitimate business interests — such as fraud detection, platform security, and aggregate analytics — where those interests are not overridden by your fundamental rights and freedoms. We conduct a balancing test before relying on this basis.
• Consent: Processing for which we have obtained your explicit, freely given, and informed consent — specifically, the sending of optional marketing communications. You may withdraw this consent at any time by contacting [email protected] and your withdrawal will take effect within 72 hours.

baj999 does not sell your personal data. We share personal data with third parties only in the following carefully controlled circumstances:

• Payment processors: baj999 works with licensed payment gateway providers to process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard. These providers receive only the minimum data required to authenticate and execute your transaction. They are contractually bound to use that data solely for payment-processing purposes and to maintain industry-standard security practices.
• Identity verification providers: During the KYC process, baj999 may use specialist identity-verification service providers to authenticate documents and cross-reference identity data against available databases. These providers act under strict data-processing agreements and are authorised only to return a verification result — not to retain or reuse your documents.
• Game software providers: When you play games on baj999 supplied by third-party providers such as Pragmatic Play, NetEnt, Microgaming, PG Soft, Spribe, or Ezugi, those providers may receive technical session data (such as a tokenised player ID and bet amounts) necessary to run the game in real time. They do not receive your name, email address, or payment details.
• Analytics and platform infrastructure providers: baj999 uses trusted cloud-infrastructure and web-analytics service providers to host the platform and analyse aggregate usage patterns. These providers operate under data-processing agreements and do not use your data for their own purposes.
• Law enforcement and regulatory authorities: baj999 will disclose personal data to law-enforcement agencies, courts, or regulatory authorities when required to do so by a lawful order, warrant, or legal obligation. We will endeavour to notify you of any such disclosure unless we are prohibited from doing so by law.
• Business transfers: In the event of a merger, acquisition, or sale of all or a material part of baj999's assets, personal data may be transferred to the acquiring entity. You will be notified of any such transfer and of any material changes to data handling practices that result from it.

baj999 uses cookies — small text files stored on your device — and similar tracking technologies to operate the platform, remember your preferences, and analyse aggregate usage. We categorise our cookies as follows:

baj999 does not use advertising cookies or cross-site tracking cookies of any kind. You will not see baj999-targeted advertisements following you across other websites as a result of visiting our platform.

You can manage or delete cookies at any time through your browser's settings panel. Note that disabling functional cookies may degrade certain non-essential features of the baj999 platform, such as remembered login preferences. Disabling strictly necessary or security cookies may prevent the platform from functioning correctly.

baj999 implements a comprehensive suite of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our security programme includes the following controls:

• Transport security: All data transmitted between your device and baj999's servers is encrypted using TLS 1.2 or higher, providing 256-bit encryption strength. The baj999 domain enforces HTTPS at all times; unencrypted HTTP connections are automatically redirected.
• Password protection: Member passwords are stored exclusively as one-way cryptographic hashes using a strong hashing algorithm with per-user salting. baj999 never stores passwords in plain text and our staff cannot retrieve your password — only reset it via a verified reset flow.
• Access controls: Access to member data within baj999's internal systems is restricted on a strict need-to-know basis. Staff members are granted access to only the data categories required to perform their specific job functions. All internal data access is logged and subject to audit.
• Infrastructure security: baj999's platform is hosted on secure, enterprise-grade cloud infrastructure with physical access controls, redundant firewalls, intrusion-detection systems, and regular vulnerability assessments.
• Payment security: baj999 does not store full payment card numbers on its own systems. Card payment processing is handled by PCI DSS-compliant payment gateways. Mobile wallet transactions are processed via secure API integrations with bKash, Nagad, Rocket, and Upay.
• Staff training: All baj999 staff who handle personal data receive mandatory data-protection training upon joining and at regular intervals thereafter. Confidentiality obligations are embedded in all staff contracts.

Despite these measures, no online platform can guarantee absolute security. You also play an important role in keeping your account safe: use a strong, unique password, never share your baj999 login credentials with anyone, and report any suspected unauthorised access to [email protected] immediately.

baj999 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply to the main categories of data we hold:

Upon expiry of the applicable retention period, personal data is securely deleted from baj999's active systems and any long-term backup archives on a rolling basis. Where full deletion is not immediately technically feasible (for example, in encrypted backup archives), the data is flagged for deletion at the next scheduled backup purge cycle and is not accessed or used in the interim.

As a member whose personal data baj999 processes, you have the following rights. To exercise any of these rights, please contact us at [email protected] with the subject line "Privacy Rights Request". We will acknowledge your request within 5 business days and provide a substantive response within 30 calendar days.

• Right of Access: You have the right to request a copy of the personal data baj999 holds about you, along with information about how it is used, where it came from, and with whom it has been shared.
• Right to Rectification: If any of the personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it without undue delay. You can update basic account details (email, phone number) directly in your baj999 account settings. Changes to your legal name or date of birth require documentary evidence and must be submitted via support.
• Right to Erasure ("Right to Be Forgotten"): You have the right to request the deletion of your personal data where: (a) it is no longer necessary for the purposes for which it was collected; (b) you withdraw consent and no other legal basis for processing exists; (c) the data has been unlawfully processed. Please note that certain data categories — particularly those subject to AML and financial record-keeping obligations — must be retained for the statutory periods set out in Section 8 and cannot be deleted on request during that window.
• Right to Restriction: In certain circumstances, you may request that baj999 restrict the processing of your personal data — for example, while the accuracy of data you have contested is being verified, or where you have objected to processing pending verification of whether baj999's legitimate interests override yours.
• Right to Portability: Where processing is based on your consent or on contractual necessity and is carried out by automated means, you have the right to receive the personal data you have provided to us in a structured, commonly used, machine-readable format (such as JSON or CSV), and to have that data transmitted directly to another controller where technically feasible.
• Right to Object: You have the right to object at any time to the processing of your personal data where that processing is based on baj999's legitimate interests. You also have an unconditional right to object to the use of your personal data for direct marketing purposes, and baj999 will cease that processing immediately upon receipt of your objection.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that occurred before the withdrawal.

baj999 is an adult gaming and betting platform. Our services are strictly intended for individuals who are 18 years of age or older. We do not knowingly collect, process, or store personal data from anyone under the age of 18.

During the registration process, all prospective members are required to confirm that they are 18 or above. Where baj999 has reason to believe that an account has been registered by or is being used by a person under the age of 18, we will immediately suspend that account and initiate a formal KYC review. If the age-verification review confirms that the account holder is under 18, the account will be permanently closed, all funds will be returned through the original deposit method where legally permissible, and all personal data associated with that account will be deleted (subject only to the retention obligations imposed by AML law).

If you are the parent or guardian of a minor and you believe your child has registered on baj999 without your knowledge, please contact us immediately at [email protected] with the subject line "Minor Account Concern" and we will prioritise the investigation and closure of the account.

baj999 strongly encourages parents and guardians to make use of parental-control and internet-filtering tools to prevent minors from accessing online gambling platforms. We also recommend visiting our Responsible Gaming page for additional resources on protecting young people from gambling harm.

baj999 operates with the support of cloud-infrastructure, payment-processing, and software-development service providers whose systems may be located outside Bangladesh. As a result, your personal data may be transferred to and processed in countries or territories other than Bangladesh.

Whenever such a transfer occurs, baj999 takes steps to ensure that your personal data receives a level of protection that is at least equivalent to the protections described in this Privacy Policy. The safeguards we rely upon for international transfers include:

• Contractual clauses: We incorporate internationally recognised data-protection clauses into our agreements with all third-party processors located outside Bangladesh. These clauses obligate the receiving party to handle your data in accordance with standards equivalent to those described in this Policy.
• Processor due diligence: Before engaging any new international service provider, baj999 conducts a data-protection assessment to verify that the provider operates adequate security controls and maintains an appropriate data-handling culture.
• Minimal data sharing: When data is transferred internationally, baj999 applies the principle of data minimisation — sharing only the specific data fields required by the receiving service provider to perform their contracted function, and no more.

If you would like further information about the international transfer safeguards that apply to your personal data, or the specific countries in which our key service providers are based, please contact us at [email protected].

baj999 reviews this Privacy Policy at least once every twelve months and whenever there is a material change to our data-processing practices, the services we offer, or the legal environment in which we operate. When we make changes, we will update the "Last Updated" date displayed at the top of this page.

If we make a material change to this Policy — meaning a change that significantly affects your rights or the way we use your personal data — we will notify active members by email at least 14 days before the change takes effect. Your continued use of baj999 after the effective date of a revised Policy constitutes your acceptance of the updated terms.

We maintain an internal version archive of all previous editions of this Privacy Policy. If you would like to review a previous version, please contact us at [email protected] and we will provide the relevant historic version upon request.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way baj999 handles your personal data, please contact our data support team using the details below. We are committed to resolving all privacy-related enquiries promptly and transparently.

• Email: [email protected] — please use the subject line "Privacy Enquiry" for data-protection questions.
• Response time: We aim to acknowledge all privacy enquiries within 2 business days (Bangladesh Standard Time, UTC+6) and to provide a substantive response within 30 calendar days.
• Rights requests: For formal data-subject rights requests (access, erasure, portability, etc.), please use the subject line "Privacy Rights Request" to ensure your message is routed directly to our compliance team.

For responsible gaming support, self-exclusion requests, or account closure requests, please visit our Responsible Gaming page or include "Responsible Gaming" in the subject line of your support email so our dedicated team can prioritise your request appropriately.

For all other enquiries including account verification, deposit and withdrawal issues, bonus queries, and technical support, please email [email protected] with your registered username and a clear description of your issue.