bajikar Privacy Policy

Registration Data

When you create a bajikar account, we collect the information you provide directly in the registration form. This includes your full legal name, date of birth, email address, mobile phone number, residential address, and preferred payment method details. This data is required to create and maintain your account, verify your identity, and process financial transactions in Bangladeshi Taka (৳).

Identity Verification (KYC) Data

To comply with our anti-fraud obligations and to verify that all players are aged 18 or above, bajikar conducts Know Your Customer (KYC) checks before processing withdrawals. During this process we may collect copies of government-issued identification documents (such as a National Identity Card, passport, or driving licence), selfie photographs for facial verification, and proof of payment method ownership such as a screenshot of a bKash or Nagad account screen showing your registered mobile number.

Transaction Data

We record all financial transactions associated with your account, including deposit amounts, withdrawal requests, payment method used, transaction timestamps (in Bangladesh Standard Time, BST UTC+6), transaction reference numbers, and the outcome of each transaction. This data is retained for fraud prevention, dispute resolution, and regulatory compliance purposes.

Gameplay & Betting Data

bajikar logs all game activity on the Platform, including game titles played, bet amounts per round, win and loss records, bonus fund usage, wagering progress, session start and end times, and game outcomes. This data is used to calculate account balances accurately, detect potential problem gambling patterns, and ensure the integrity of the Random Number Generator (RNG) outcomes provided by our game suppliers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi.

Device & Technical Data

When you access bajikar, our servers automatically collect certain technical information about your device and connection. This includes your IP address, browser type and version, operating system, device type (desktop, mobile, tablet), screen resolution, referring URL, pages visited on the Platform, and session duration. This data helps us maintain Platform security, detect suspicious access attempts, and optimise the user experience across devices commonly used by players in Dhaka, Chittagong, Sylhet, and other cities across Bangladesh.

Communications Data

If you contact bajikar via email at support@bajikar or through any in-Platform support interface, we retain a record of the content of your message, any attachments you provide, and our response. This data is used to resolve your query, train our support team, and maintain a record of any formal complaints or dispute submissions.

Promotional Data

If you opt in to receive promotional communications from bajikar, we record your consent, the date and channel of consent, and any subsequent preferences you set regarding communication frequency or topics. You may withdraw your consent to marketing communications at any time by contacting support@bajikar.

The table below summarises each processing purpose, the legal basis under which we rely on to process your data, and the categories of data involved.

Where we rely on legitimate interest as the legal basis for processing, we have assessed that our interests are not overridden by your privacy rights and freedoms. You have the right to object to processing based on legitimate interest at any time by contacting support@bajikar.

Where we rely on consent as the legal basis (specifically for marketing communications), you may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal. Withdrawal of marketing consent does not affect your ability to use the Platform.

Payment Processing Partners

To process your deposits and withdrawals in Bangladeshi Taka (৳), bajikar shares necessary transaction data with authorised payment processors including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank, Visa, and Mastercard. Each payment partner operates under its own data protection terms and is responsible for securing data within its own systems. bajikar shares only the minimum data required to execute each transaction — typically your registered mobile number or bank account reference and the transaction amount.

Game Software Providers

To deliver casino games and sports betting markets on the Platform, bajikar integrates software from third-party providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive a unique player session token and anonymised player identifier to initialise and record game sessions. They do not receive your full name, contact details, or payment information. All game providers integrated into bajikar are required to operate under certified RNG and fair-play standards.

Identity Verification Services

To conduct KYC verification, bajikar may engage a third-party identity verification service to cross-reference submitted documents against independent data sources. These providers process your KYC data under strict confidentiality agreements and are prohibited from using your data for any purpose other than identity verification on behalf of bajikar.

Legal and Regulatory Disclosure

bajikar may disclose personal data to law enforcement agencies, courts, or other competent authorities if required to do so by applicable law, valid legal process, or a lawful order. We will, where permitted by law, notify you of any such disclosure request. bajikar will not voluntarily disclose your data to any government authority without a valid legal basis.

Business Transfers

In the event that bajikar undergoes a merger, acquisition, or sale of all or substantially all of its assets, your personal data may be transferred as part of that transaction. You will be notified of any such transfer via the email address registered on your account prior to the completion of the transaction, and you will be informed of any material changes to how your data will be processed as a result.

A cookie is a small text file stored on your device by your web browser when you visit a website. Cookies allow the Platform to remember certain information about your session and preferences between page loads. bajikar uses the following categories of cookies:

Managing Cookies

Most web browsers allow you to control cookies through their settings menus. You can typically choose to block all cookies, block third-party cookies only, or delete existing cookies stored on your device. Please note that disabling strictly necessary cookies will impair your ability to log in to and use the bajikar Platform. Detailed cookie management instructions are available in the help documentation for all major browsers including Chrome, Firefox, Edge, and Samsung Internet (the most widely used browser among mobile players in Bangladesh).

No Third-Party Tracking Scripts

bajikar does not load third-party advertising pixels, social media tracking scripts, or affiliate tracking beacons on any page of the Platform. The only third-party scripts loaded are the Bootstrap front-end framework and Bootstrap Icons library, both served from established CDN providers, which do not collect personal data.

The retention periods applicable to different categories of data processed by bajikar are set out below. All retention periods are calculated from the date on which the relevant data was last active or the relevant account relationship ended, whichever is later.

• Account Registration Data: Retained for the duration of your active account plus a period of 5 years following account closure. This period is required to respond to any retrospective dispute or regulatory enquiry.
• KYC Verification Documents: Retained for a minimum of 5 years following the completion of each verification check, in accordance with standard anti-money laundering record-keeping practices. Original document images are stored in encrypted form on secured servers.
• Transaction Records: All deposit and withdrawal records are retained for a minimum of 5 years following the date of each transaction. This period supports financial reconciliation, dispute resolution, and compliance obligations.
• Gameplay Logs: Individual game round records are retained for 2 years. Aggregated gameplay statistics (with no personally identifiable data) may be retained indefinitely for platform analytics purposes.
• Customer Support Communications: Email and support chat records are retained for 3 years from the date of the last message in each conversation thread. Records relating to formal disputes are retained for 5 years.
• Device and Technical Data (Logs): Server access logs and security event logs are retained for 12 months and then purged automatically unless required for an active fraud investigation.
• Marketing Consent Records: Consent records are retained for the duration of your account plus 2 years, to demonstrate compliance with consent requirements. These records are retained even after you withdraw marketing consent.

Data Storage Location

bajikar stores player data on secured servers. All data is encrypted at rest using industry-standard encryption protocols. Backups are maintained to ensure service continuity and are subject to the same access controls and encryption standards as primary data stores.

You may exercise any of the following rights at any time by contacting bajikar at support@bajikar with the subject line "Data Rights Request". We will acknowledge your request within 5 business days and provide a substantive response within 30 calendar days. In cases of complexity or high volume, we may extend this period by an additional 30 days with prior notification.

• Right of Access: You may request a copy of all personal data that bajikar holds about you, together with a description of the purposes for which it is processed, the categories of data held, and the third parties with whom it has been shared.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it without undue delay. Where feasible, corrections to your account profile can be made directly from within your account settings area.
• Right to Erasure ("Right to Be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent and no other legal basis applies, or where the data has been processed unlawfully. Please note that we may be unable to fulfil erasure requests in full where we are required by law to retain certain records (such as KYC and transaction data for the retention periods described in Section 5).
• Right to Restriction of Processing: You may request that we restrict processing of your personal data in certain circumstances, such as while you contest the accuracy of data we hold, or while an objection to legitimate interest processing is under review.
• Right to Data Portability: You may request that we provide your personal data in a structured, commonly used, machine-readable format so that it can be transferred to another service provider of your choice. This right applies to data you provided directly to bajikar that is processed on the basis of your consent or the performance of a contract.
• Right to Object: You may object to processing of your personal data that is based on our legitimate interest. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms. You may object to direct marketing at any time and we will cease that activity immediately upon receipt of your objection.
• Right to Withdraw Consent: Where processing is based on your consent (such as marketing communications), you may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing that occurred before withdrawal.

We take the security of your personal data seriously and employ a range of technical and organisational measures to safeguard the information we hold. No security system is impenetrable, but bajikar invests continuously in maintaining a robust security posture appropriate to the nature and sensitivity of the data we process.

Technical Security Controls

• Transport Layer Security (TLS): All data transmitted between your browser and bajikar servers is encrypted using TLS 1.2 or higher, ensuring that your login credentials, payment details, and personal information cannot be read in transit.
• Encryption at Rest: Sensitive personal data stored on bajikar servers — including KYC documents and payment method records — is encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data is restricted to authorised bajikar personnel on a strict need-to-know basis. Administrative access requires multi-factor authentication and is logged for audit purposes.
• Intrusion Detection: bajikar operates automated intrusion detection and anomaly monitoring systems that generate alerts in real time for unusual access patterns, brute-force login attempts, and suspicious account activity.
• Vulnerability Management: The Platform undergoes regular security assessments to identify and remediate vulnerabilities before they can be exploited. Third-party game integrations are reviewed for security compliance prior to deployment.

Organisational Security Controls

• All bajikar personnel who have access to personal data undergo regular data protection training and are bound by confidentiality obligations in their employment or contractor agreements.
• Data processing activities are documented and reviewed on a regular basis to ensure ongoing compliance with this Privacy Policy and applicable data protection principles.
• Third-party suppliers who process data on behalf of bajikar are subject to data processor agreements that impose equivalent data security standards to those we apply internally.

Your Role in Account Security

While bajikar implements strong security measures at the platform level, account security also depends on the actions you take as a player. Please use a strong, unique password for your bajikar account, enable two-factor authentication if available, never share your login credentials with any other person, and contact support immediately if you suspect your account has been accessed without your authorisation. bajikar cannot be held responsible for unauthorised access that results directly from a player's failure to maintain the confidentiality of their own credentials.

Updates to this Policy

bajikar reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the services we offer. The effective date at the top of this Policy will be updated whenever a change is made. For material changes — those that significantly affect your rights or how your data is used — we will notify you via the email address registered on your account at least 14 days before the change takes effect. For minor clarifications or non-material updates, we may simply update this page without direct notification. We encourage you to review this Policy periodically.

Continued use of the bajikar Platform following the effective date of any update constitutes your acknowledgement of the revised Policy. If you do not agree with any changes to this Policy, you should cease using the Platform and request account closure in accordance with the process described in the Terms & Conditions.

How to Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or the personal data bajikar holds about you, please contact our data support team using the details below. All privacy-related communications must be sent in writing. We do not handle data rights requests received verbally via live chat.

• Email: support@bajikar (Subject line: "Privacy Policy Enquiry" or "Data Rights Request")
• Response Time: We aim to acknowledge all privacy enquiries within 5 business days and resolve them within 30 calendar days.
• Support Hours: 24 hours a day, 7 days a week — Bangladesh Standard Time (BST, UTC+6)