bhaji Privacy Policy

1. Information We Collect

bhaji collects personal data through several channels — directly from you during registration and account use, automatically through your device and browser when you visit bhaji.net, and from trusted third-party partners such as payment processors and identity verification services. The categories of data we collect include the following:

1.1 Registration & Identity Data

When you create a bhaji account, we collect your full legal name, date of birth, username, password (stored in encrypted form), and contact details including email address and mobile number. We may also collect your residential address in Bangladesh (e.g., Dhaka, Chittagong, Sylhet, or another division) when required for identity verification.

1.2 Identity Verification (KYC) Data

As part of our Know Your Customer (KYC) process — which exists to protect you and the integrity of the Platform — we may collect copies of government-issued identity documents (such as your National Identity Card or passport), proof of address, and proof of ownership of your payment method (e.g., a screenshot of your bKash or Nagad mobile banking account in your name). This data is handled with the highest level of care and is not used for any purpose other than identity verification and fraud prevention.

1.3 Financial & Transaction Data

bhaji records all deposit and withdrawal transactions processed through your account. This includes transaction amounts in Bangladeshi Taka (৳), timestamps, payment method identifiers (e.g., the last four digits of a bKash wallet or bank account number), and transaction reference codes. We do not store full payment credentials — those are handled securely by our payment partners.

1.4 Usage & Activity Data

We automatically collect data about how you interact with the bhaji Platform, including pages visited, games played, bets placed, session duration, search queries within the Platform, and click patterns. This data is used in aggregate and individual form to improve the Platform, personalise your experience, and detect suspicious activity.

1.5 Device & Technical Data

When you access bhaji.net, our servers automatically log your IP address, browser type and version, operating system, device type, screen resolution, referring URL, and time zone (we operate on Bangladesh Standard Time, UTC+6). This information helps us optimise the Platform for Bangladeshi users and detect potential security threats.

1.6 Communications Data

If you contact bhaji's support team via live chat or email ([email protected]), we retain records of those communications — including the content of messages, timestamps, and resolution notes — for quality assurance, training, and dispute resolution purposes.

2. How We Use Your Data

bhaji uses the personal data we collect for specific, legitimate purposes. We do not use your data for purposes that are incompatible with the reasons for which it was originally collected. The primary purposes for which we process your personal data are set out in the table below:

Purpose	Data Used
Account creation and management	Registration & identity data, contact details
Processing deposits and withdrawals	Financial & transaction data, KYC documents
Identity verification and fraud prevention	KYC data, device & technical data, financial data
Personalising your gaming experience	Usage & activity data, game history
Customer support and dispute resolution	Communications data, account data
Sending service updates and promotional offers	Contact details, activity data (opt-out available)
Responsible gaming monitoring	Activity data, session data, financial data
Platform security and technical maintenance	Device & technical data, IP address logs
Compliance with legal obligations	All categories as required by applicable law

bhaji will never sell your personal data to third parties for their own marketing purposes. We do not profile our players for advertising resale or data brokerage.

3. Legal Basis for Processing

bhaji processes your personal data on one or more of the following lawful bases, depending on the specific processing activity:

• Contractual necessity: Processing your registration data, managing your account, and handling deposits and withdrawals are all necessary for bhaji to fulfil its contractual obligations to you as a registered player.
• Legal obligation: bhaji is required by applicable law and platform operating standards to collect and retain certain data — including KYC documents and transaction records — for anti-money laundering compliance, fraud prevention, and responsible gaming purposes.
• Legitimate interests: bhaji processes usage and technical data on the basis of its legitimate interest in operating a secure, optimised, and fair gaming platform for all players in Bangladesh.
• Consent: Where bhaji sends you marketing communications or promotional offers (such as Eid bonuses, Pohela Boishakh promotions, or BPL cricket betting offers), we rely on your explicit consent. You may withdraw this consent at any time by contacting [email protected] or adjusting your account notification preferences.

4. Data Sharing & Disclosure

bhaji does not sell, rent, or trade your personal data. We share your data only with trusted parties strictly as necessary to operate the Platform and meet our legal obligations. The categories of recipients with whom we may share your data are:

4.1 Payment Service Providers

To process your deposits and withdrawals, bhaji shares the minimum necessary financial and identity data with our payment partners, including bKash, Nagad, Rocket (Dutch-Bangla Bank), Upay, BRAC Bank, City Bank, and other accepted payment providers. These partners are contractually bound to use your data only to process your transaction and to maintain appropriate security standards.

4.2 Identity Verification Partners

bhaji may use third-party KYC and identity verification services to validate the documents you submit during account verification. These partners process your documents under strict data processing agreements and do not retain your data beyond the period required to complete verification.

4.3 Game Technology Providers

Game content on the bhaji Platform is provided by third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive your anonymised player ID and session data for the purpose of delivering game content, calculating results, and detecting cheating or technical faults. They do not receive your name, contact details, or financial data.

4.4 Legal and Regulatory Disclosure

bhaji may disclose your personal data to law enforcement agencies, courts, or other public authorities if we are required to do so by applicable law, court order, or if we reasonably believe that disclosure is necessary to prevent fraud, money laundering, or other serious criminal activity. In such cases, we will disclose only the minimum data required.

4.5 Business Transfers

In the event that bhaji undergoes a merger, acquisition, or sale of all or part of its assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such change and your continued use of the Platform will constitute acceptance of the transfer under the same privacy protections described in this policy.

5. Cookies & Tracking

bhaji uses cookies and similar tracking technologies on bhaji.net to ensure the Platform functions correctly, to remember your preferences, to analyse usage patterns, and to provide a personalised experience. The types of cookies we use are:

• Strictly necessary cookies: These are essential for the Platform to function. They enable you to log in, maintain your session, and navigate between pages. The Platform cannot operate without these cookies and they cannot be disabled.
• Performance and analytics cookies: These cookies help us understand how players use bhaji.net — which pages are visited most, where users encounter errors, and how long sessions last. This data is collected in aggregate and used solely to improve Platform performance.
• Preference cookies: These cookies remember your account settings and preferences — such as your preferred language (English) and notification settings — so you do not have to reconfigure them on every visit.
• Security cookies: These are used to detect and prevent fraudulent activity and bot-driven access, contributing to a safe and fair environment for all bhaji players.

You can manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent the Platform from functioning correctly. Third-party game providers may set their own cookies within game frames; these are governed by those providers' privacy policies.

6. Data Retention

bhaji retains your personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law. Our standard data retention periods are as follows:

Data Category	Retention Period	Reason
Account registration data	Duration of account + 5 years after closure	Legal compliance, dispute resolution
KYC / identity documents	Duration of account + 5 years after closure	Anti-money laundering obligations
Financial transaction records	7 years from transaction date	Financial record-keeping requirements
Support communications	3 years from last interaction	Quality assurance, dispute resolution
Usage and activity logs	24 months from collection	Platform analytics and security
Device and technical logs	12 months from collection	Security monitoring, fraud prevention
Marketing consent records	Until consent is withdrawn + 1 year	Consent compliance records

When retention periods expire, bhaji securely deletes or anonymises your personal data so that it can no longer be attributed to you individually. Anonymised aggregate data may be retained indefinitely for statistical analysis.

7. Your Privacy Rights

As a bhaji player, you have meaningful rights over your personal data. bhaji is committed to honouring these rights promptly and transparently. Your rights include:

• Right of access: You may request a copy of the personal data bhaji holds about you at any time. We will provide this in a structured, readable format within 30 days of receiving your verified request.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. You can update basic account information directly from your bhaji account dashboard.
• Right to erasure: You may request that bhaji delete your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal obligation to retain certain records as described in Section 6.
• Right to restriction of processing: You may ask bhaji to restrict processing of your data in certain circumstances — for example, while you contest the accuracy of data we hold about you.
• Right to data portability: Where technically feasible, you may request that we provide your personal data in a machine-readable format so that you can transfer it to another service provider.
• Right to object: You have the right to object to processing of your personal data carried out on the basis of legitimate interests, including for direct marketing purposes. To opt out of marketing communications from bhaji, contact [email protected].
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

To exercise any of the above rights, please contact our support team at [email protected] with the subject line "Privacy Rights Request". We will verify your identity before processing any request and aim to respond within 30 days. Complex requests may require an extension of up to an additional 60 days, in which case we will notify you promptly.

8. Data Security

The security measures bhaji employs include the following:

• 256-bit SSL/TLS encryption: All data transmitted between your device and bhaji.net is encrypted in transit using 256-bit SSL/TLS. Look for the padlock icon and "https" in your browser address bar when using bhaji.net.
• Encrypted data storage: Sensitive data — including passwords and identity documents — is stored in encrypted form. Passwords are hashed using industry-standard algorithms and cannot be read by bhaji staff.
• Access controls: Access to your personal data within bhaji's systems is restricted to authorised personnel only, on a strict need-to-know basis. All staff with data access undergo security training and are bound by confidentiality obligations.
• Fraud detection systems: bhaji operates real-time automated systems that monitor for suspicious login attempts, unusual transaction patterns, and potential account takeover activity. Suspicious activity triggers immediate alerts and protective action.
• Regular security reviews: bhaji's security infrastructure is reviewed and updated regularly to address emerging threats and maintain the highest practical security standards for our Bangladesh player base.

You also play an important role in keeping your account secure. Please use a strong, unique password for your bhaji account, do not share your login credentials with anyone, and contact [email protected] immediately if you suspect unauthorised access to your account.

9. Third-Party Services

bhaji.net may contain links to third-party content and services — including game providers, payment processors, and informational resources. This Privacy Policy applies solely to data processed by bhaji. When you interact with third-party services accessed through the bhaji Platform, those services operate under their own privacy policies. bhaji is not responsible for the privacy practices of third-party services and encourages you to review their policies before providing any personal information.

bhaji's game technology partners — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — operate under their own data protection frameworks. These partners are selected in part on the basis of their security credentials and compliance with recognised industry standards for fair play and data protection.

Payment partners such as bKash, Nagad, and Rocket (Dutch-Bangla Bank) handle payment data under their own security and privacy frameworks, which are separate from and in addition to bhaji's own protections.

10. Policy Updates & Contact

bhaji reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or Platform features. When we make material changes to this policy, we will publish the updated version at bhaji.net/privacy-policy with a revised "last updated" date. For significant changes that materially affect how we process your data, we will endeavour to notify you directly via email or an in-platform notification.

Your continued use of the bhaji Platform following publication of an updated Privacy Policy constitutes your acceptance of the revised terms. We encourage you to review this page periodically to stay informed about how bhaji protects your personal data.

If you have any questions, concerns, or requests relating to this Privacy Policy or bhaji's data practices, please contact our support team:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 via the bhaji platform dashboard
• Average response time: 2–5 minutes via live chat; up to 48 hours via email

For formal privacy-related correspondence, please include "Privacy Policy Enquiry" in your subject line. All formal privacy requests will be acknowledged within 5 business days.