baji9 Privacy Policy —
How We Protect Your Data

1. Introduction

This Privacy Policy ("Policy") describes how baji9 ("we", "us", "our", "the Company") collects, processes, stores, and protects personal data relating to individuals ("you", "the Player", "the User") who access or use the baji9 platform located at https://baji9.cc, including all associated sub-pages, services, games, promotions, and customer support channels (collectively, the "Platform").

baji9 is committed to handling your personal data responsibly and transparently. We take our data protection obligations seriously, and this Policy is designed to give you a clear, comprehensive understanding of our data practices so you can make informed decisions about your engagement with the Platform.

By registering an account or continuing to use the baji9 Platform, you acknowledge that you have read and understood this Privacy Policy. This Policy should be read alongside our Terms & Conditions and Responsible Gaming Policy, both of which are published on this website.

2. Data Controller

For the purposes of applicable data protection legislation, baji9 is the data controller responsible for your personal information collected through the Platform. All data protection enquiries, access requests, and complaints should be directed to our support team at [email protected].

We will acknowledge all formal data protection requests within five (5) business days and will aim to resolve them within thirty (30) calendar days, consistent with our obligations under applicable law.

3. Data We Collect

3.1 Data You Provide Directly

When you register for a baji9 account, use our services, or communicate with us, you may provide the following categories of personal data:

• Identity Data: Full legal name, date of birth, gender, and a copy of your government-issued photo identification (such as a National Identity Card or passport) submitted during KYC verification.
• Contact Data: Residential address (including district, division, and postal code within Bangladesh), email address, and Bangladeshi mobile number.
• Financial Data: Mobile banking account references for bKash, Nagad, Rocket, and Upay; Visa or Mastercard details where applicable; deposit and withdrawal transaction histories; and account balance records denominated in BDT.
• Communications Data: Records of your interactions with our live chat support, email correspondence, and any feedback or complaints you submit to us.

3.2 Data We Collect Automatically

When you access or use the baji9 Platform, we automatically collect certain technical and usage data:

• Device & Browser Data: Device type, operating system, browser type and version, screen resolution, and language preferences.
• Network Data: IP address, internet service provider, approximate geolocation (country and city level only), and connection type.
• Session Data: Pages visited, features used, bet placement patterns, game session timestamps, login and logout times, and navigation paths through the Platform.
• Cookie Data: Identifiers set by cookies and similar tracking technologies as described in Section 7 of this Policy.

3.3 Data From Third Parties

We may receive personal data about you from third-party sources in the following circumstances: identity verification agencies confirming the authenticity of your KYC documents; payment providers (such as bKash and Nagad) confirming transaction status; and fraud prevention databases used to assess the risk profile of account activity. Data received from third parties is processed in accordance with this Policy.

4. Lawful Bases for Processing

baji9 processes your personal data on the following lawful bases:

5. How We Use Your Data

baji9 uses the personal data we collect for the following specific purposes:

• Account Management: To create, maintain, and administer your baji9 player account, including processing your registration details and enforcing our one-account-per-player policy.
• Payment Processing: To facilitate deposits via bKash, Nagad, Rocket, Upay, Visa, and Mastercard and to process withdrawal requests to your verified payment accounts in BDT.
• Identity Verification: To verify that you meet our eligibility requirements, including the minimum age of 21 years, and to comply with our KYC and AML obligations.
• Service Delivery: To provide you with access to sports betting markets (including cricket, BPL, IPL, and T20 events), casino games, live dealer games, slots, fishing games, and esports betting products.
• Fraud Prevention: To detect, investigate, and prevent fraudulent activity, collusion, bonus abuse, money laundering, and other prohibited conduct as defined in our Terms & Conditions.
• Responsible Gaming: To monitor gaming patterns for signs of problem gambling behaviour, to administer deposit limits, wagering limits, cooling-off periods, and self-exclusion requests, and to fulfil our duty of care to all players on the Platform.
• Customer Support: To respond to your enquiries, resolve account disputes, process complaints, and communicate important service updates.
• Marketing (with consent): To send you promotional offers, bonus notifications, and event alerts via email or SMS where you have expressly consented to receive such communications. You may withdraw this consent at any time by contacting [email protected] or using the unsubscribe mechanism included in any marketing message.
• Legal Compliance: To comply with applicable laws, regulatory requirements, court orders, and lawful requests from competent authorities.

6. Data Sharing & Disclosure

6.1 Trusted Service Providers

baji9 may share your personal data with carefully selected third-party service providers who assist us in delivering the Platform. These include payment processing partners (bKash, Nagad, Rocket, Upay, Visa, Mastercard), KYC and identity verification providers, fraud detection and risk management systems, game software and platform technology providers (including studios such as Pragmatic Play, Evolution Gaming, Spribe, and Ezugi), email and SMS communication services, and data hosting and cloud infrastructure providers.

All third-party service providers are engaged under contractual arrangements that require them to process your personal data solely for the purposes specified by baji9, to maintain appropriate security standards, and to prohibit any further sharing or commercial exploitation of your data.

6.2 Legal and Regulatory Disclosure

baji9 may disclose your personal data to law enforcement agencies, regulatory authorities, or other competent bodies where required to do so by applicable law, court order, or in connection with the investigation of actual or suspected criminal activity including fraud, money laundering, or match-fixing.

6.3 Business Transfers

In the event that baji9 undergoes a merger, acquisition, or sale of all or a substantial portion of its assets, your personal data may be transferred to the acquiring entity as part of that transaction. We will notify affected players via email if such a transfer results in a material change to this Privacy Policy.

6.4 No Sale of Personal Data

baji9 does not sell, rent, or otherwise commercially transfer your personal data to third parties for their own marketing or commercial purposes. Your personal information is used exclusively for the purposes described in this Policy.

7. Cookies & Tracking Technologies

baji9 uses cookies and similar tracking technologies (such as web beacons and local storage) to operate and improve the Platform. Cookies are small data files placed on your device when you visit the Platform. The following types of cookies are used:

• Strictly Necessary Cookies: These cookies are essential for the Platform to function and cannot be disabled. They include cookies that maintain your logged-in session, remember your preferences within a visit, and ensure the security of your account.
• Analytical Cookies: These cookies allow us to count visits and measure how users navigate the Platform so we can identify areas for improvement. The data collected is aggregated and does not directly identify individual players.
• Functional Cookies: These cookies remember choices you make (such as your preferred language settings) to provide a more personalised experience on your return visits.
• Marketing Cookies: Where you have consented to receive marketing communications, these cookies help us deliver relevant promotional content and measure the effectiveness of our campaigns. They do not track your activity on third-party websites.

You can control cookie preferences through your browser settings. Please note that disabling strictly necessary cookies may impair the functionality of the Platform, including your ability to log in and access your account.

8. Data Retention

baji9 retains personal data for as long as your account remains active and for a period thereafter as required by applicable law and our legitimate business interests. The following general retention periods apply:

• Active Account Data: Retained for the full duration of your account being open and active on the Platform.
• Closed Account Data: Following voluntary account closure or termination, we retain identity, financial, and transaction records for a minimum of five (5) years to satisfy anti-money laundering record-keeping requirements.
• KYC Documents: Retained for a minimum of five (5) years from the date of submission or from the date of account closure, whichever is later.
• Customer Support Records: Retained for three (3) years following the resolution of the relevant enquiry or complaint.
• Marketing Consent Records: Retained for the period during which consent is active plus three (3) years following withdrawal of consent.
• Technical and Session Data: Retained for up to thirteen (13) months for analytical and security purposes, after which it is aggregated or deleted.

Upon expiry of the applicable retention period, personal data is securely and irreversibly deleted or anonymised in a manner that prevents re-identification.

9. Security Measures

baji9 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the baji9 Platform.
• Encrypted storage of sensitive personal data, including password hashes and identity documents, at rest.
• Role-based access controls ensuring that baji9 staff access only the personal data required to perform their specific job functions.
• Regular security audits, vulnerability assessments, and penetration testing of Platform infrastructure.
• Multi-factor authentication options for player accounts to reduce the risk of unauthorised access.
• Secure disposal procedures for physical and digital data no longer required to be retained.

While baji9 takes all reasonable steps to protect your data, no online platform can guarantee absolute security against all possible threats. You are responsible for maintaining the security of your own login credentials and for notifying us immediately at [email protected] if you suspect any unauthorised access to your account.

10. Your Data Rights

As a player on the baji9 Platform, you have the following rights in relation to your personal data:

• Right of Access: You may request a copy of the personal data we hold about you at any time. We will provide this information within thirty (30) days of receiving a valid request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated.
• Right to Erasure: You may request the deletion of your personal data where we no longer have a lawful basis to retain it. Please note that we may be required to retain certain data to comply with legal obligations, in which case we will explain this to you when handling your request.
• Right to Restrict Processing: You may request that we limit the way in which we process your data in certain circumstances, for example while a complaint is being investigated.
• Right to Data Portability: Where processing is based on your consent or the performance of a contract, you may request that we provide your personal data in a structured, machine-readable format.
• Right to Object: You have the right to object to processing carried out on the basis of our legitimate interests, including direct marketing. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of these rights, please contact our support team at [email protected] with the subject line "Data Rights Request" and a description of your request. We will acknowledge your request within five (5) business days and complete it within thirty (30) calendar days.

11. Minors and Age Restrictions

The baji9 Platform is strictly intended for adults aged 21 years and above. We do not knowingly collect, process, or retain personal data from individuals under the age of 21. If baji9 becomes aware that personal data has been collected from a person below the minimum age, we will immediately close the relevant account, void any associated bets or transactions, and securely delete all personal data relating to that individual.

If you are a parent or guardian and believe that a minor in your care has created a baji9 account, please contact us immediately at [email protected] so that we can take prompt action.

12. International Data Transfers

baji9 primarily processes and stores personal data within secure facilities serving the Bangladesh market. In certain circumstances, such as when using internationally hosted game software platforms or cloud infrastructure providers, your data may be transferred to and processed in countries outside Bangladesh.

Where such transfers occur, baji9 ensures that appropriate safeguards are in place to protect your personal data, including contractual data protection clauses with the relevant service providers. We do not transfer personal data to jurisdictions that do not offer an adequate level of data protection without first implementing appropriate contractual or technical safeguards.

13. Changes to This Privacy Policy

baji9 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or the services we offer. The "Last Updated" date shown at the top of this document will always indicate when the most recent revision was made.

Where changes are material — meaning they significantly affect your rights or how we process your personal data — we will notify you via email to the address registered to your baji9 account prior to the changes taking effect, giving you the opportunity to review the updated Policy before it applies to you. Your continued use of the Platform following notification of material changes constitutes your acceptance of the revised Policy.

14. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way baji9 handles your personal data, please contact us using the following details:

• Email: [email protected] (plain text — not a clickable link)
• Subject Line for Data Requests: "Privacy Policy Enquiry" or "Data Rights Request"
• Live Chat: Available 24/7 directly through the baji9 Platform
• Support Hours: 24 hours a day, 7 days a week, including all public holidays in Bangladesh (Bangladesh Standard Time, UTC+6)

We aim to respond to all privacy-related enquiries within three (3) business hours during standard operating periods. During peak periods such as BPL finals, IPL playoffs, and ICC tournament events, response times may extend to six (6) hours.