babaje Privacy Policy

🛡️ Your Privacy at a Glance

babaje is committed to protecting the personal information of every player who uses our platform. The six principles below guide how we handle your data. Full details are set out in the clauses that follow.

📄 Full Privacy Policy

This Privacy Policy ("Policy") describes how babaje ("babaje", "we", "us", "our") collects, uses, stores, and discloses personal data relating to individuals ("you", "the Player") who visit, register with, or otherwise interact with the babaje website and associated services (collectively, the "Platform"). By creating an account or using the Platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.

This Policy applies to all personal data collected through the Platform, including data provided voluntarily during registration, data generated through your use of our gaming products, and data collected automatically through cookies and similar tracking technologies. This Policy should be read in conjunction with the Terms & Conditions and the Responsible Gaming Policy.

babaje may update this Policy periodically to reflect changes in our data practices or applicable laws. The date at the top of this document indicates when the Policy was last revised. Continued use of the Platform after a revision constitutes your acceptance of the updated Policy.

We collect personal data in the following categories. The specific data points collected depend on how you interact with the Platform:

• 👤
  Identity Data Full name, date of birth, gender, National ID Card (NID) number, and a copy of your NID or other government-issued identity document where required for verification.
• 📬
  Contact Data Mobile phone number, email address, and residential address (city, district, division within Bangladesh — e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh).
• 💳
  Financial Data bKash account number, Nagad account number, Rocket account number, Upay account number, Visa/Mastercard last-four digits, and USDT wallet address where applicable. We do not store full card numbers or mobile banking PINs.
• 🎮
  Transaction and Gaming Data Deposit history, withdrawal history, bet records, game session logs, win/loss records, bonus usage, and responsible gaming tool activations (deposit limits, session reminders, self-exclusion requests).
• 🌐
  Technical Data IP address, device type, operating system, browser type and version, mobile network operator (e.g., Grameenphone, Banglalink, Robi, Teletalk), screen resolution, and time-zone (Bangladesh Standard Time, UTC+6).
• 🍪
  Cookie and Usage Data Pages visited, features used, click-stream data, session duration, referral source, and preferences stored via cookies and similar technologies. See Section 9 for full cookie details.
• 📞
  Communications Data Records of support conversations (email, live chat), feedback submissions, and any other correspondence you send to babaje.

babaje processes your personal data only for the purposes described below and relies on one of the following lawful bases for each processing activity:

• Account Administration: Creating and managing your babaje account, verifying your identity, and enabling you to log in securely. Lawful basis: performance of a contract.
• Payment Processing: Processing deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, Mastercard, and USDT; detecting and preventing payment fraud. Lawful basis: performance of a contract and legitimate interests.
• Age and Identity Verification: Confirming that you are 21 years of age or older, and that you are who you say you are, in order to comply with our responsible gaming obligations. Lawful basis: legal obligation and legitimate interests.
• Game and Betting Services: Providing access to casino games, sports betting markets, crash games, live dealer tables, and all other Platform features; recording bet and game outcomes; settling winnings. Lawful basis: performance of a contract.
• Responsible Gaming: Monitoring play patterns to identify signs of problem gambling; implementing deposit limits, session time-outs, cooling-off periods, and self-exclusion measures. Lawful basis: legal obligation and legitimate interests (player protection).
• Customer Support: Responding to your queries, complaints, and support requests; maintaining records of communications for training and quality purposes. Lawful basis: performance of a contract and legitimate interests.
• Marketing Communications: Sending you promotional offers, bonus notifications, and news about babaje products and events — but only where you have given explicit consent or where permitted under applicable law. You may opt out at any time by contacting support. Lawful basis: consent.
• Security and Fraud Prevention: Detecting, investigating, and preventing fraudulent activity, collusion, money laundering, and other unlawful or prohibited conduct on the Platform. Lawful basis: legitimate interests and legal obligation.
• Legal Compliance: Meeting obligations imposed by applicable laws, including responding to lawful requests from regulatory or law enforcement authorities. Lawful basis: legal obligation.
• Platform Improvement: Analysing aggregated usage data to improve the Platform's performance, layout, and game selection. Lawful basis: legitimate interests.

babaje does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection agreements:

• Payment Processors: bKash, Nagad, Rocket, Upay, Visa, Mastercard, and USDT gateway providers require transaction data to process deposits and withdrawals. Each provider operates under its own privacy terms.
• Game Providers: Licensed game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive the minimum player data necessary to serve game content and log outcomes.
• Identity Verification Partners: Third-party KYC service providers who assist with document verification may receive identity data. These partners are bound by strict confidentiality obligations.
• IT and Hosting Providers: Cloud infrastructure and server hosting partners who store and process data on our behalf under data processing agreements that require them to implement appropriate security measures.
• Fraud and Security Services: Anti-fraud analytics providers who help us identify suspicious activity patterns. Data shared is typically technical and transactional, not directly identifiable.
• Legal and Regulatory Authorities: Where required by law or in response to a valid legal request, we may disclose personal data to courts, law enforcement agencies, or other competent authorities.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of babaje's business assets, your personal data may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy.

babaje retains your personal data for as long as your account remains active and for a period thereafter as required by our legal and regulatory obligations. The following general retention periods apply:

• Account and Identity Data: Retained for the lifetime of the account plus a minimum of five years after account closure, to satisfy anti-money-laundering and record-keeping obligations.
• Transaction and Betting Records: Retained for a minimum of five years from the date of the transaction.
• Support Communications: Retained for up to two years from the date of the last communication.
• Cookie and Technical Data: Session cookies are deleted when you close your browser. Persistent cookies and associated logs are retained for up to twelve months unless you clear them earlier.
• Marketing Consent Records: Retained until you withdraw consent and for one year thereafter as evidence of your consent status.

When data is no longer required for the purposes for which it was collected and no legal retention obligation applies, babaje will securely delete or anonymise it in accordance with our internal data disposal procedures.

babaje takes the security of your personal data seriously. We implement a combination of technical, organisational, and procedural measures to protect your information against unauthorised access, accidental loss, destruction, or disclosure. Key measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and babaje servers.
• Encryption of sensitive data at rest, including payment account references and identity document copies.
• Role-based access controls ensuring that only authorised babaje personnel can access personal data, and only to the extent necessary for their role.
• Regular security assessments and penetration testing of the Platform infrastructure.
• Multi-factor authentication options for player accounts and mandatory two-factor authentication for all babaje administrative systems.
• Incident response procedures to contain, investigate, and notify affected players in the event of a confirmed data breach within a reasonable timeframe.

While babaje takes every reasonable precaution, no internet-based platform can guarantee absolute security. You are responsible for keeping your login credentials confidential and for notifying babaje immediately at [email protected] if you suspect any unauthorised access to your account.

Subject to applicable law and certain limitations, you have the following rights with respect to the personal data babaje holds about you:

• Right of Access: You may request a copy of the personal data we hold about you, along with information about how it is processed.
• Right to Rectification: You may ask us to correct inaccurate or incomplete personal data. For basic account details (phone number, email), you can update these directly within your account settings.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations. Note that we may be unable to erase certain data while legal obligations to retain it remain in force.
• Right to Restrict Processing: You may ask us to suspend processing of your personal data in certain circumstances, for example while you contest its accuracy.
• Right to Data Portability: Where processing is based on your consent or on a contract with you and is carried out by automated means, you may request a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You may object to processing of your personal data where we rely on legitimate interests as the lawful basis, including processing for direct marketing purposes.
• Right to Withdraw Consent: Where we rely on your consent as the basis for processing (for example, for marketing emails), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, please contact our support team. Email: [email protected] — please include "Data Rights Request" in your subject line. We will respond within a reasonable period and may need to verify your identity before fulfilling the request.

babaje uses cookies and similar tracking technologies (such as local storage and pixel tags) to operate and improve the Platform. Cookies are small text files placed on your device when you visit the Platform. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication cookies, anti-fraud security tokens, and load-balancing cookies. These cannot be disabled without breaking core Platform functionality.
• Functional Cookies: Remember your preferences such as preferred language, last-used payment method, and responsible gaming tool settings. Disabling these may affect your user experience.
• Analytics Cookies: Collect aggregated, anonymised information about how players interact with the Platform — pages visited, features used, session duration — to help us improve the Platform. We use privacy-respecting analytics tools that do not share individual-level data with third-party advertisers.
• Marketing and Retargeting Cookies: Used only with your explicit consent to deliver relevant promotional communications about babaje. You may withdraw consent at any time via your account settings or by contacting support.

Most web browsers allow you to refuse or delete cookies through their settings. Please note that disabling cookies may affect the functionality of the Platform. For detailed guidance on managing cookies on your specific browser or device, refer to your browser's help documentation.

babaje employs age-verification procedures during registration and may request documentary proof of age (such as an NID or passport) at any time. Players who are unable to provide satisfactory proof of age will have their accounts suspended pending verification.

The Platform may reference or integrate third-party services such as payment gateways (bKash, Nagad) and game providers (Pragmatic Play, Evolution Gaming, Spribe, etc.). These third parties operate under their own privacy policies, and babaje is not responsible for the privacy practices of those external services. We recommend that you review the privacy policy of any third-party service before providing your personal data to them directly.

babaje reserves the right to update this Privacy Policy at any time. When we make material changes, we will post the updated Policy on the Platform with a revised effective date and, where appropriate, notify registered players via email or an in-platform notification. Your continued use of the Platform following notification of a material change constitutes your acceptance of the updated Policy. We encourage you to review this Policy periodically.

If you have any questions, concerns, or complaints about this Privacy Policy or about how babaje handles your personal data, please contact our dedicated privacy team:

Email: [email protected] — please use the subject line "Privacy Enquiry".

We take all privacy concerns seriously and will acknowledge your enquiry promptly. If you are not satisfied with our response, you may have the right to lodge a complaint with a relevant supervisory or data protection authority in your jurisdiction.