bikbaji Privacy Policy

1 Information We Collect

bikbaji collects personal information from players through several channels: the account registration form, the KYC (Know Your Customer) verification process, ongoing platform activity, payment transactions, and communications with our support team. The categories of personal data we may collect include the following:

Registration & Identity Information

When you register a bikbaji account, we collect your full legal name, date of birth, gender, nationality, and a username of your choosing. This information is required to create and administer your account, verify your identity, and comply with our age verification obligations. Players must be 18 years or older to register, and the date of birth you provide is used to enforce this requirement.

Contact Information

We collect your email address, mobile phone number, and residential address in Bangladesh (including city, district, and postal code). Contact details are used to communicate account-related notices, respond to support queries, deliver promotional communications where you have opted in, and fulfil our legal and regulatory obligations.

KYC & Identity Verification Documents

To comply with anti-money-laundering (AML) obligations and to process withdrawals, we may request copies of the following documents:

• Government-issued photo identification (National ID card, passport, or driving licence)
• Proof of residential address (utility bill, bank statement, or official correspondence dated within 90 days)
• Proof of ownership of the payment method used (bKash, Nagad, Rocket, Upay, or bank account confirmation)

Document images are stored in encrypted form and accessed only by authorised personnel conducting identity reviews. We do not retain document scans beyond the period required by our data retention policy.

Financial & Transaction Data

We record details of all financial transactions on your bikbaji account, including deposit amounts, withdrawal requests, payment method identifiers (mobile wallet numbers, bank account references), transaction timestamps, and transaction outcomes. This data is used to process payments, detect fraud, and meet our AML reporting obligations.

Technical & Device Data

When you access the bikbaji platform, our servers automatically log certain technical data including your IP address, browser type and version, device type (desktop, mobile, tablet), operating system, session duration, pages visited, and referring URL. This data helps us maintain platform security, diagnose technical issues, and improve the user experience for players in Dhaka, Chittagong, Sylhet, and across Bangladesh.

Behavioural & Gaming Activity Data

We record your betting and gaming activity on the platform, including games played, wagers placed, bet amounts, game outcomes, bonus usage, and session frequency. This data is used to provide a personalised experience, identify problem gambling indicators in accordance with our responsible gaming obligations, and detect patterns consistent with fraud or collusion.

2 How We Use Your Data

bikbaji processes personal data only for clearly defined and lawful purposes. The table below summarises the primary purposes for which we use the personal data we collect, together with the legal basis for each processing activity:

Marketing Communications

If you have opted in to receive promotional communications from bikbaji, we may contact you by email or SMS regarding new games, seasonal promotions (including Eid offers, BPL season specials, and Pohela Boishakh promotions), bonus credits, and platform updates. You may withdraw your consent to receive marketing communications at any time by contacting our support team or updating your account preferences. Withdrawal of consent does not affect the lawfulness of any processing that occurred prior to that withdrawal.

Automated Decision-Making

bikbaji uses automated systems to screen accounts for indicators of fraud, money laundering, and problem gambling. These systems may flag accounts for manual review or, in certain cases, automatically apply restrictions such as withdrawal holds or account suspension pending investigation. Where an automated decision has a significant effect on your account, you have the right to request human review of that decision by contacting our support team.

3 Data Sharing & Third Parties

bikbaji does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We may, however, share your data with carefully selected third-party service providers and in specific legally required circumstances, as described below.

Service Providers & Technology Partners

We engage third-party service providers to support the operation of the bikbaji platform. These providers may process personal data on our behalf and are contractually required to handle that data securely and only for the purposes for which it was shared. Categories of service provider include:

• Payment processors: Mobile financial service providers (bKash, Nagad, Rocket, Upay) and banking partners (Dutch-Bangla Bank, BRAC Bank, City Bank) process transaction data to facilitate deposits and withdrawals.
• Identity verification services: Third-party KYC technology providers assist in verifying the authenticity of identity documents submitted during account verification.
• Game content providers: Studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi supply game software and may receive session identifiers necessary to deliver and audit game outcomes.
• Cloud infrastructure & hosting providers: Our platform and data are hosted on secure cloud infrastructure. Hosting providers access data only to the extent necessary to deliver infrastructure services.
• Customer support technology: Live chat and ticketing platforms used by our support team may store records of support interactions including your contact details and the content of your communications with us.

Legal & Regulatory Disclosures

bikbaji may disclose personal data to law enforcement authorities, financial intelligence units, regulatory bodies, or courts where we are required to do so by applicable law, court order, or other binding legal process. We will notify affected players of such disclosures where we are legally permitted to do so.

Business Transfers

In the event of a merger, acquisition, corporate restructuring, or sale of assets involving bikbaji, player data may be transferred to the acquiring entity as part of that transaction. In such circumstances, bikbaji will ensure that the receiving party is bound by privacy obligations at least as protective as those set out in this Policy. You will be notified of any such transfer via the email address registered to your account.

4 Cookies & Tracking Technologies

The bikbaji platform uses cookies and similar tracking technologies to deliver a functional, personalised, and secure experience. A cookie is a small text file placed on your device by a web server when you visit a website. Cookies do not execute code and cannot carry viruses or malware. They are used solely for the purposes described in this section.

Categories of Cookies We Use

• Strictly Necessary Cookies: These cookies are essential for the bikbaji platform to function correctly. They maintain your login session, remember your account preferences, and ensure security features operate as intended. These cookies cannot be disabled without disrupting platform functionality.
• Performance & Analytics Cookies: These cookies collect anonymised data about how players interact with the bikbaji platform — for example, which pages are visited most frequently, how long sessions last, and where technical errors occur. This data is used to improve platform performance and user experience.
• Functionality Cookies: These cookies remember your language preferences, display settings, and game history so that your experience is consistent across sessions. They are not used to track you across other websites.
• Targeting & Preference Cookies: Where you have provided consent, these cookies help us deliver promotional content and bonus offers that are relevant to your activity on the bikbaji platform. They do not share your data with unaffiliated advertising networks.

Managing Your Cookie Preferences

You may manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the bikbaji platform, including your ability to remain logged in or access personalised features. Strictly necessary cookies remain active regardless of your browser settings, as they are required for the platform to operate securely.

5 Data Security & Retention

bikbaji employs industry-standard technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Our security framework includes the following measures:

• SSL/TLS Encryption: All data transmitted between your device and the bikbaji platform is encrypted using SSL/TLS protocols. The padlock icon visible in your browser's address bar confirms that your connection is secure.
• Encrypted Data Storage: Sensitive personal data — including identity documents, financial records, and KYC materials — is stored in encrypted form on secure servers. Encryption keys are managed separately from the encrypted data.
• Access Controls: Access to personal data within bikbaji is restricted on a strict need-to-know basis. Staff members can access only the data necessary to perform their specific role. All internal access is logged and subject to regular audit.
• Two-Factor Authentication: Critical administrative and data access operations within bikbaji's internal systems require multi-factor authentication.
• Regular Security Audits: bikbaji conducts periodic security assessments to identify and remediate vulnerabilities in our platform and data infrastructure.

Data Retention Periods

We retain personal data only for as long as it is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account data (active accounts): Retained for the duration of the account relationship plus a minimum of five years following account closure, to satisfy AML and financial record-keeping obligations.
• KYC documents: Retained for a minimum of five years following account closure or the completion of the last transaction, whichever is later.
• Transaction records: Retained for a minimum of five years from the date of each transaction.
• Support communications: Retained for a minimum of two years from the date of the last interaction.
• Technical logs (IP addresses, session data): Typically retained for up to 12 months, unless required for longer periods in connection with an ongoing investigation or dispute.

Following the expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents reconstruction of the original data.

6 Your Privacy Rights

As a bikbaji player, you hold a number of rights with respect to the personal data we hold about you. bikbaji is committed to respecting and facilitating the exercise of these rights. The following rights are available to all registered players:

Right of Access

You have the right to request a copy of the personal data that bikbaji holds about you. Upon receiving a verified access request, we will provide you with a summary of the data we hold, the purposes for which it is processed, and the categories of third parties with whom it has been shared. We aim to respond to access requests within 30 days of receipt.

Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update certain account details directly through your bikbaji account settings panel. For changes to identity-verified fields (such as your legal name or date of birth), you will need to contact our support team and provide supporting documentation.

Right to Erasure

You may request the deletion of your personal data in certain circumstances — for example, if the data is no longer necessary for the purpose for which it was collected, or if you withdraw consent for consent-based processing. Please note that we are unable to erase data where retention is required by applicable law, including AML regulations that mandate a minimum five-year retention period for financial records and KYC documentation.

Right to Restrict Processing

You have the right to request that we restrict the processing of your personal data in certain circumstances, such as while the accuracy of data you have contested is being verified, or where you have objected to processing based on legitimate interest.

Right to Object

Where bikbaji processes your personal data on the basis of legitimate interest (for example, for fraud prevention or platform security purposes), you have the right to object to that processing. We will assess your objection and cease the relevant processing unless we can demonstrate compelling legitimate grounds that override your interests.

Exercising Your Rights

To exercise any of the privacy rights described above, please contact the bikbaji support team via live chat or by emailing support@bikbaji.net. We will verify your identity before processing any request that relates to personal data. We will not charge a fee for requests made in good faith and responded to within the standard 30-day window.

7 Minors & Age Verification

The bikbaji platform is strictly intended for adults aged 18 years and above. We do not knowingly collect, process, or store personal data belonging to individuals under the age of 18. Age verification is a mandatory step in the bikbaji account activation process, and our KYC procedures are designed to identify and block registrations by minors.

If bikbaji discovers or is notified that an account has been registered by a person under the age of 18, the following steps will be taken immediately:

• The account will be suspended without notice pending investigation.
• All funds associated with the account will be held and reviewed.
• All personal data collected in connection with the underage account will be deleted as swiftly as practicable, subject to any legal obligations to retain specific records.
• The matter will be escalated to our responsible gaming team for follow-up.

Parents and guardians who have reason to believe that a minor has accessed or registered on the bikbaji platform are encouraged to contact our support team immediately at support@bikbaji.net. We take underage access seriously and will act promptly on any credible report.

8 Changes to This Policy

bikbaji reserves the right to update or revise this Privacy Policy at any time. Changes may be made in response to updates in applicable law, changes to our data processing practices, the introduction of new platform features, or feedback from our players.

Where a change to this Policy is material — meaning it significantly affects how we use your personal data or the rights available to you — we will notify registered players via the email address associated with their bikbaji account at least 14 days before the change takes effect. The updated Policy will also be published on this page with a revised effective date prominently displayed at the top.

For minor or administrative changes that do not materially affect the substance of this Policy, we reserve the right to update the Policy without direct notification to individual players. We therefore encourage you to review this page periodically. Your continued use of the bikbaji platform following any update to this Privacy Policy constitutes your acceptance of the revised terms.

If you have questions or concerns about any change to this Privacy Policy, please contact our support team before continuing to use the platform. We are happy to clarify how any specific change affects the processing of your personal data.