At bajilok, we take your privacy seriously. This Privacy Policy describes how bajilok collects, uses, stores, and protects the personal information you provide when you register an account, make a deposit, play games, or interact with the bajilok platform in any way. By using bajilok, you agree to the practices described in this policy. If you do not agree, please do not use the bajilok platform.
1 Overview
Bajilok is committed to protecting the privacy of every player on the platform. We understand that when you share your personal information with us — your name, mobile number, payment details — you are placing trust in bajilok. We do not take that trust lightly. This Privacy Policy is written in plain language so that every bajilok player, regardless of technical background, can understand exactly how their data is handled.
This policy applies to all personal data collected through the bajilok website, the bajilok mobile app, and any communication channels operated by bajilok, including live chat and email support. It covers data collected from players in Bangladesh and any other jurisdiction where bajilok operates.
Short version: Bajilok collects only the data it needs to run your account and keep the platform secure. We never sell your data. You can request access to, correction of, or deletion of your data at any time by contacting [email protected].
2 What We Collect
Bajilok collects personal data in two ways: information you provide directly, and information collected automatically when you use the platform. The table below gives a clear breakdown of what bajilok collects and why.
| Data Type | Examples | Why We Collect It |
|---|---|---|
| Identity Data | Full name, date of birth, national ID number | Account registration, age verification, KYC compliance |
| Contact Data | Mobile number, email address | Account communication, transaction alerts, support |
| Payment Data | bKash/Nagad/Rocket account number, transaction IDs | Processing deposits and withdrawals, fraud prevention |
| Technical Data | IP address, device type, browser, OS version | Security monitoring, fraud detection, platform optimisation |
| Usage Data | Games played, bet amounts, session duration, login times | Responsible gaming monitoring, platform improvement |
| Communication Data | Live chat transcripts, support emails | Resolving disputes, improving support quality |
Bajilok does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health information unless specifically required by law. We collect only what is necessary to operate your account safely and in compliance with applicable regulations.
3 How We Use Your Data
Every piece of data bajilok collects has a specific, legitimate purpose. We do not collect data speculatively or store information we do not need. Below is a full account of how bajilok uses your personal data:
- Account management: Your identity and contact data are used to create and maintain your bajilok account, verify your identity, and communicate with you about your account activity.
- Payment processing: Your payment data is used exclusively to process deposits and withdrawals via bKash, Nagad, and Rocket. Bajilok does not store full payment credentials — only the account number and transaction references needed to process and verify transactions.
- Fraud prevention and security: Technical data including your IP address, device fingerprint, and login history is used to detect and prevent fraudulent activity, unauthorised account access, and money laundering. This is a legal obligation for bajilok as a licensed gaming platform.
- Responsible gaming: Usage data — including your session duration, bet frequency, and deposit patterns — is monitored to identify signs of problem gambling. Bajilok uses this data to trigger responsible gaming interventions where appropriate, such as sending a session reminder or flagging an account for a welfare check.
- Platform improvement: Aggregated, anonymised usage data is used to understand how players interact with bajilok, which games are most popular, and where the platform experience can be improved. This data cannot be used to identify individual players.
- Legal compliance: Bajilok is required by law to retain certain records for regulatory and anti-money laundering purposes. Your identity and transaction data may be retained and disclosed to regulatory authorities where required by law.
- Marketing communications: If you have opted in to marketing communications, bajilok may use your contact data to send you information about promotions, new games, and platform updates. You can opt out of marketing communications at any time by contacting [email protected] or using the unsubscribe link in any marketing email.
No profiling for third-party advertising: Bajilok does not use your personal data to build advertising profiles for sale to third-party advertisers. Your data is used only for the purposes listed above.
4 Legal Basis for Processing
Bajilok processes your personal data on the following legal bases, depending on the purpose of the processing:
- Contract performance: Processing your identity, contact, and payment data is necessary to fulfil the contract between you and bajilok — that is, to operate your account, process your transactions, and provide access to games.
- Legal obligation: Bajilok is required by applicable law to verify player identities, retain transaction records, and report suspicious activity. Processing for these purposes is a legal obligation, not a choice.
- Legitimate interests: Bajilok processes technical and usage data on the basis of legitimate interests — specifically, the interest in keeping the platform secure, preventing fraud, and improving the player experience. These interests do not override your privacy rights.
- Consent: Where bajilok processes your data for marketing purposes, we do so only with your explicit consent. You can withdraw this consent at any time.
5 Data Sharing
Bajilok does not sell, rent, or trade your personal data to any third party. Full stop. However, bajilok does share data with a limited number of trusted third parties where it is necessary to operate the platform. Every third party that receives bajilok player data is contractually required to handle it securely and use it only for the specified purpose.
- Payment processors: bKash, Nagad, and Rocket receive the minimum data necessary to process your transactions — typically your registered mobile number and the transaction amount. These providers have their own privacy policies governing how they handle this data.
- Identity verification providers: Where bajilok uses a third-party KYC (Know Your Customer) service to verify your identity, your identity documents and personal details are shared with that provider for verification purposes only.
- Fraud prevention services: Bajilok may share technical data — such as IP addresses and device identifiers — with fraud prevention services to identify and block fraudulent activity across the platform.
- Regulatory authorities: Bajilok is legally required to share player data with regulatory and law enforcement authorities upon receipt of a valid legal request. Bajilok will notify you of any such disclosure where permitted by law.
- IT and hosting providers: The bajilok platform is hosted on secure servers operated by trusted infrastructure providers. These providers have access to platform data only to the extent necessary to maintain the infrastructure and are bound by strict data processing agreements.
No cross-border transfers without safeguards: If bajilok transfers your personal data outside Bangladesh, we ensure that appropriate safeguards are in place to protect your data to the same standard as required under applicable Bangladeshi law.
6 Cookies
Bajilok uses cookies and similar tracking technologies on the bajilok website and app. Cookies are small text files stored on your device that help bajilok recognise you, remember your preferences, and understand how you use the platform.
- Essential cookies: These cookies are necessary for the bajilok platform to function. They keep you logged in during your session, remember your language preference, and ensure that the platform loads correctly. You cannot opt out of essential cookies without stopping your use of bajilok.
- Analytics cookies: Bajilok uses anonymised analytics cookies to understand how players navigate the platform — which pages are visited most, where players drop off, and how long sessions last. This data is aggregated and cannot identify individual players.
- Security cookies: These cookies help bajilok detect and prevent fraudulent activity, including bot traffic and account takeover attempts.
- Preference cookies: These cookies remember your platform settings — such as your preferred game view or notification preferences — so you do not have to reset them every time you log in.
You can manage cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of the bajilok platform.
7 Data Retention
Bajilok retains your personal data for as long as your account is active and for a defined period after account closure, as required by applicable law and regulatory obligations. The table below outlines bajilok's standard data retention periods:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account & Identity Data | 5 years after account closure | Anti-money laundering regulations |
| Transaction Records | 5 years after transaction date | Financial record-keeping requirements |
| Support Communications | 2 years after last interaction | Dispute resolution |
| Technical & Usage Data | 13 months from collection | Security monitoring, analytics |
| Marketing Preferences | Until consent is withdrawn | Consent-based processing |
After the applicable retention period, bajilok securely deletes or anonymises your personal data so that it can no longer be linked to you as an individual.
8 Data Security
Bajilok implements a range of technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, or disclosure. These measures include:
- SSL/TLS encryption: All data transmitted between your device and the bajilok platform is encrypted using industry-standard SSL/TLS protocols. This means that even if data is intercepted in transit, it cannot be read by a third party.
- Encrypted data storage: Sensitive personal data stored on bajilok's servers — including identity documents and payment references — is encrypted at rest using AES-256 encryption.
- Access controls: Access to personal data within bajilok is restricted on a strict need-to-know basis. Only authorised personnel with a legitimate operational need can access player data, and all access is logged and audited.
- Two-factor authentication: Bajilok supports two-factor authentication (2FA) for player accounts. We strongly recommend that all bajilok players enable 2FA to add an extra layer of protection to their account.
- Regular security audits: Bajilok conducts regular security assessments and penetration tests to identify and address vulnerabilities in the platform before they can be exploited.
- Incident response: In the event of a data breach that affects your personal data, bajilok will notify you and the relevant regulatory authorities within the timeframe required by applicable law.
Your role in security: Bajilok's security measures protect data on our end, but you also play a role. Use a strong, unique password for your bajilok account, enable 2FA, and never share your login credentials with anyone.
9 Your Rights
As a bajilok player, you have the following rights over your personal data. To exercise any of these rights, contact bajilok at [email protected]. Bajilok will respond to all data rights requests within 30 days.
Right of Access
Request a copy of all personal data bajilok holds about you, including how it is used and with whom it has been shared.
Right to Rectification
Request correction of any inaccurate or incomplete personal data bajilok holds about you.
Right to Erasure
Request deletion of your personal data where bajilok no longer has a legal basis to retain it.
Right to Restriction
Request that bajilok restricts processing of your data while a dispute about its accuracy or use is resolved.
Right to Portability
Request your personal data in a structured, machine-readable format so you can transfer it to another service.
Right to Object
Object to bajilok processing your data for marketing purposes or on the basis of legitimate interests.
10 Minors
Bajilok is strictly an 18+ platform. We do not knowingly collect personal data from anyone under the age of 18. If bajilok discovers that a player account belongs to a minor, the account will be closed immediately, any balance will be forfeited, and all personal data associated with the account will be deleted as soon as legally permissible.
If you are a parent or guardian and believe that a minor has registered on bajilok, please contact [email protected] immediately with the relevant account details. Bajilok will investigate and take appropriate action within 24 hours.
11 Policy Changes
Bajilok may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or platform features. When we make changes, the updated policy will be published on this page with a revised "Last Updated" date. For significant changes that affect how we use your personal data, bajilok will notify registered players via email or an in-platform notification before the changes take effect.
Your continued use of bajilok after an updated Privacy Policy has been published constitutes your acceptance of the revised policy. We recommend checking this page periodically so you are always aware of how bajilok handles your data.
12 Contact Us
If you have any questions about this Privacy Policy, want to exercise your data rights, or need to report a privacy concern, please contact the bajilok privacy team. We aim to respond to all privacy-related enquiries within two business days.