baj77 Privacy Policy — How We Handle Your Personal Data
At baj77, the privacy and security of your personal information is a matter we treat with the utmost seriousness. This Privacy Policy explains exactly what data we collect when you use our platform, why we collect it, how it is stored and protected, and what rights you hold over your information. We are committed to handling your data with transparency, care, and full respect for your privacy.
Our Core Privacy Principles
Six foundational commitments that guide how baj77 collects, processes, and safeguards every piece of personal data entrusted to us by players across Bangladesh.
baj77 collects only the personal data that is strictly necessary to provide our services, verify your identity, process transactions in ৳ BDT, and comply with applicable legal obligations. We do not collect data for its own sake.
All personal data held by baj77 is stored on secure, encrypted servers protected by industry-standard 256-bit SSL encryption. Access to personal data is restricted to authorised personnel who need it to fulfil their operational duties.
We believe you have the right to know exactly what data we hold about you and how it is used. This Privacy Policy is written in clear, plain English so that every baj77 player in Bangladesh can understand their data rights without needing a legal background.
You retain meaningful control over your personal data at baj77. You can request access to your data, ask for corrections, request deletion, or withdraw consent for marketing communications at any time by contacting our support team.
baj77 does not sell, rent, or trade your personal data to third parties for their marketing purposes. Data is shared with third-party processors only where strictly necessary to operate our platform — and under binding confidentiality agreements.
baj77 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, and anti-money-laundering obligations. Data no longer needed is securely deleted.
baj77 ("baj77", "we", "us", "our") is committed to protecting the privacy and personal data of all individuals ("you", "your", "Player", "User") who access or use the baj77 online betting and casino platform, available at https://baj77.io (the "Platform"). This Privacy Policy describes our practices regarding the collection, use, storage, disclosure, and protection of your personal information.
This Privacy Policy is effective as of 1 January 2026 and applies to all players registered on the baj77 Platform, including players based in Dhaka, Chittagong, Sylhet, Rajshahi, Khulna, Barisal, Rangpur, Mymensingh, Cox's Bazar, and all other locations across Bangladesh from which our platform is accessed.
This Privacy Policy should be read alongside our Terms & Conditions and our Responsible Gaming Policy. Where any conflict exists between this Privacy Policy and those documents on privacy-related matters, this Privacy Policy shall take precedence.
If you have any questions about how baj77 handles your personal data, or if you wish to exercise any of your data rights described in this policy, please contact our support team at [email protected]. All privacy enquiries are handled in English and responded to within 5 business days.
baj77 collects personal data through several channels: information you provide directly during registration and account use, information generated automatically through your use of the Platform, and information provided by third-party identity and payment verification services. The categories of personal data we collect are described below.
2.1 Information You Provide Directly
| Data Category | Specific Data Points | When Collected |
|---|---|---|
| Identity Data | Full legal name, date of birth, gender, nationality, National ID or passport number | Registration & KYC verification |
| Contact Data | Mobile phone number, email address, residential address (district, city, postal code) | Registration |
| Authentication Data | Username, hashed password, security question responses | Registration & login |
| Financial Data | bKash / Nagad / Rocket / Upay account numbers, bank account details, transaction history in ৳ BDT | Deposits & withdrawals |
| Document Data | Scanned copies or photographs of government-issued ID, proof of address, payment method screenshots | KYC verification |
| Communications Data | Content of support tickets, live chat transcripts, email correspondence | Customer support interactions |
2.2 Information Collected Automatically
When you access and use the baj77 Platform, our systems automatically collect certain technical and behavioural data, including:
- Device & Technical Data: IP address, device type, operating system and version, browser type and version, screen resolution, and device identifiers.
- Usage Data: Pages visited, features used, games played, betting history, session duration, click-stream data, search queries entered within the Platform, and time-stamps of all activity.
- Location Data: Approximate geographic location derived from your IP address (country and region level). We do not collect precise GPS-level location data.
- Log Data: Server log files recording access requests, error events, and security-related events.
2.3 Information from Third Parties
baj77 may receive personal data about you from the following categories of third-party sources:
- Identity verification partners, who confirm the authenticity of the documents you submit during KYC verification.
- Payment processors (including bKash, Nagad, Rocket, and Upay), who confirm the status and ownership of payment accounts associated with transactions on your baj77 account.
- Fraud prevention and anti-money-laundering screening services, which may flag your account or transactions against known risk databases.
- Self-exclusion registries, where you or another responsible gaming body has requested your exclusion from online gambling platforms.
baj77 uses your personal data for the following specific purposes. We do not use your data for any purpose not listed here without first obtaining your explicit consent or being required to do so by law.
- Account Registration and Management: To create and maintain your baj77 player account, verify your identity, enforce our one-account-per-player policy, and manage your account settings and preferences.
- Identity Verification (KYC): To confirm that you meet the minimum age requirement of 21 years, verify that you are who you claim to be, and ensure compliance with anti-money-laundering and counter-terrorism financing obligations.
- Transaction Processing: To process your deposits and withdrawals in ৳ BDT via your chosen payment method (bKash, Nagad, Rocket, Upay, Visa, Mastercard, bank transfer), maintain accurate financial records, and reconcile accounts.
- Platform Delivery and Support: To deliver the betting, casino, and gaming services you request, personalise your platform experience, and provide customer support via live chat and email.
- Security and Fraud Prevention: To detect, investigate, and prevent fraudulent activity, money laundering, bonus abuse, account takeover attempts, and other prohibited conduct as defined in our Terms & Conditions.
- Responsible Gaming Compliance: To enforce deposit limits, self-exclusion requests, cooling-off periods, and other responsible gaming tools you activate on your account, and to identify patterns of problem gambling behaviour that may require intervention.
- Legal and Regulatory Compliance: To comply with applicable laws, respond to lawful requests from regulatory authorities, law enforcement agencies, and courts, and to maintain records as required by applicable financial crime regulations.
- Platform Improvement: To analyse aggregated, anonymised usage data in order to improve the performance, features, and content of the baj77 Platform.
- Marketing Communications: To send you promotional offers, bonus announcements, tournament invitations, and other marketing communications — but only where you have provided explicit consent or where we have a legitimate interest in doing so. You may opt out at any time. See Section 11 for full details.
baj77 processes your personal data on one or more of the following legal bases:
- Contractual Necessity: Processing is necessary to perform the contract between you and baj77 — specifically, to provide you with the betting and casino services you have registered for and to manage your account, deposits, withdrawals, and bets.
- Legal Obligation: Processing is required to comply with applicable legal obligations, including anti-money-laundering laws, counter-terrorism financing regulations, age verification requirements, and obligations to respond to lawful requests from authorities.
- Legitimate Interests: Processing is necessary for the legitimate interests of baj77, including detecting and preventing fraud, ensuring platform security, enforcing our Terms & Conditions, and improving our services — provided that these interests are not overridden by your fundamental rights and freedoms.
- Consent: For marketing communications and for certain non-essential cookies and tracking technologies, baj77 relies on your explicit consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.
baj77 does not sell, rent, or trade your personal data to third parties for their own marketing or commercial purposes. We may share your personal data with carefully selected third parties only where necessary for the following legitimate purposes:
- Payment Processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard require certain personal and financial data to process deposit and withdrawal transactions on your behalf.
- Identity Verification Providers: Third-party KYC and AML compliance vendors receive copies of your identity documents and personal data to verify your identity and screen against regulatory databases.
- Game Software Studios: Providers such as Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, and Spribe may receive certain session and technical data necessary to deliver their games on our platform. These studios do not receive your full identity or financial data.
- IT Infrastructure and Hosting Providers: Cloud hosting and data centre providers who store and process data on baj77's behalf under strict data processing agreements.
- Fraud Prevention and Security Services: Third-party fraud detection and cybersecurity partners who help baj77 identify and respond to suspicious activity.
- Legal and Regulatory Authorities: We may disclose personal data to law enforcement agencies, regulatory bodies, courts, or other governmental authorities where we are required by law to do so, or where disclosure is necessary to protect the rights, property, or safety of baj77, our players, or third parties.
All third-party processors engaged by baj77 are bound by contractual data processing agreements that require them to process personal data only on baj77's documented instructions, to implement appropriate technical and organisational security measures, and to delete or return all personal data upon termination of their engagement.
baj77 uses cookies and similar tracking technologies to operate the Platform, remember your preferences, maintain your login session, analyse usage patterns, and deliver a personalised experience. Cookies are small text files stored on your device by your browser.
Types of Cookies Used by baj77:
| Cookie Type | Purpose | Required? |
|---|---|---|
| Strictly Necessary | Maintain your login session, enforce security measures, load the Platform correctly | Yes — cannot be disabled |
| Functional | Remember your language preferences, display settings, and last-visited game categories | Optional |
| Analytics | Collect aggregated, anonymised data on how players navigate and use the Platform so that we can improve performance and content | Optional |
| Security | Detect and prevent fraudulent login attempts, bot activity, and account takeover attacks | Yes — cannot be disabled |
baj77 does not use third-party advertising or retargeting cookies. We do not allow ad networks to place cookies on the baj77 Platform.
You may control cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent the Platform from functioning correctly. For optional cookies, you may withdraw consent at any time by adjusting your browser settings or by contacting support at [email protected].
baj77 takes the security of your personal data seriously and has implemented a comprehensive set of technical and organisational measures designed to protect your data against unauthorised access, accidental loss, alteration, disclosure, or destruction.
Technical Security Measures:
- All data transmitted between your device and the baj77 Platform is encrypted using 256-bit SSL/TLS encryption.
- Passwords are stored using strong one-way cryptographic hashing algorithms. baj77 staff cannot view your plaintext password.
- Financial data, KYC documents, and identity records are stored in encrypted databases on access-controlled servers.
- The Platform is protected by enterprise-grade firewall systems, intrusion detection and prevention systems (IDPS), and automated threat monitoring operating around the clock.
- Access to systems holding personal data is restricted using role-based access controls. Only authorised personnel with a legitimate operational need may access specific categories of personal data.
- Regular independent security audits and penetration testing are conducted to identify and remediate vulnerabilities.
Organisational Security Measures:
- All baj77 staff who handle personal data receive mandatory data protection and security training.
- Internal data handling policies and procedures are reviewed and updated regularly.
- Third-party processors are subject to security due diligence assessments before engagement and ongoing compliance monitoring.
In the unlikely event of a data breach that poses a risk to your rights and freedoms, baj77 will notify affected players without undue delay and will take all necessary steps to contain the breach and mitigate its impact.
While baj77 takes every reasonable precaution to protect your personal data, no system is completely immune to security risks. You are also responsible for maintaining the security of your own account credentials. Never share your baj77 username or password with anyone. If you suspect unauthorised access to your account, contact [email protected] immediately.
baj77 retains personal data for only as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, and financial crime compliance obligations. The following general retention periods apply:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account & Identity Data | Duration of account + 5 years after closure | AML compliance & regulatory obligations |
| KYC Documents | Duration of account + 5 years after closure | AML & identity verification record-keeping |
| Financial Transaction Records | Duration of account + 7 years after closure | Financial record-keeping & audit requirements |
| Betting & Gaming History | Duration of account + 5 years after closure | Dispute resolution & regulatory compliance |
| Support Communications | 3 years from last interaction | Quality assurance & dispute resolution |
| Marketing Consent Records | Until consent is withdrawn + 3 years | Proof of consent for compliance purposes |
| Technical & Log Data | 90 days | Security monitoring & incident investigation |
When personal data is no longer required for any of the purposes listed above, baj77 will securely delete or irreversibly anonymise that data so that it can no longer be associated with any individual. Anonymised, aggregated data may be retained indefinitely for statistical and analytical purposes.
As a baj77 player, you hold a number of rights with respect to your personal data. baj77 is committed to honouring these rights promptly and without undue restriction. Your rights are set out below:
You have the right to request a copy of all personal data that baj77 holds about you. We will provide this information in a structured, clear format within 30 days of your verified request.
If any personal data baj77 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update most account information directly in your account settings or by contacting support.
You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (and no other legal basis applies), or where you object to processing. Note that some data must be retained for legal and regulatory compliance purposes and cannot be deleted on request.
You have the right to request that baj77 restrict the processing of your personal data in certain circumstances — for example, while the accuracy of your data is being verified, or while an objection to processing is being considered.
Where processing is based on your consent or contractual necessity, you have the right to receive a copy of the personal data you have provided to baj77 in a structured, commonly used, machine-readable format.
You have the right to object to baj77's processing of your personal data where we rely on legitimate interests as our legal basis. You also have an absolute right to object to your data being used for direct marketing purposes at any time.
Where processing is based on your consent (e.g., for marketing communications or non-essential cookies), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.
To exercise any of the above rights, please submit a written request to [email protected] with the subject line "Data Rights Request" and include your registered account username and a brief description of the right you wish to exercise. baj77 will acknowledge your request within 48 hours and respond substantively within 30 days. Requests that are manifestly unfounded or excessive may be refused or may be subject to a reasonable administrative fee, with written reasons provided.
The baj77 Platform is strictly intended for adults aged 21 years and above. baj77 does not knowingly collect, process, or retain personal data from individuals under the age of 21. Age verification is a mandatory part of the baj77 registration process, and additional KYC age checks may be required before withdrawals are approved.
If baj77 discovers that personal data has been collected from an individual below the minimum age of 21 — whether through a misrepresentation during registration or otherwise — that account will be immediately closed, all associated funds will be handled in accordance with our Terms & Conditions, and all personal data relating to that individual will be deleted as promptly as legally permissible.
If you are a parent or guardian and believe that a minor in your care has registered on the baj77 Platform or has accessed our services, please contact us immediately at [email protected]. We will investigate and take swift action to close the account and remove the relevant personal data.
baj77 may send you promotional communications including bonus offers, tournament announcements, seasonal promotions (such as Eid, Pohela Boishakh, or BPL season specials), and platform news. We will only send you marketing communications where you have provided explicit consent during registration, or where we have a legitimate interest in contacting you about services closely related to those you have already used.
Opting Out of Marketing: You may withdraw your consent to receive marketing communications from baj77 at any time by:
- Clicking the "Unsubscribe" link included at the bottom of every promotional email we send you.
- Updating your communication preferences in your baj77 account settings.
- Sending a written opt-out request to [email protected] with the subject line "Marketing Opt-Out".
Once you opt out, baj77 will process your request within 5 business days. You may continue to receive transactional and account-related communications (such as deposit confirmations, withdrawal notifications, and security alerts) regardless of your marketing preferences, as these are necessary for the operation of your account.
baj77 does not share your contact details with third-party marketers or data brokers. All marketing communications sent by baj77 originate from baj77 directly and relate exclusively to services available on the baj77 Platform.
baj77 reserves the right to update, modify, or replace this Privacy Policy at any time. Changes may be made to reflect updates in applicable law, changes in our data processing practices, new services or features added to the Platform, or improvements in how we communicate our privacy commitments to players.
When material changes are made to this Privacy Policy, baj77 will notify registered players by posting a prominent notice on the Platform and, where appropriate, by sending a notification to the email address associated with your account. The updated Privacy Policy will always display the revised effective date at the top of the document.
Your continued use of the baj77 Platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the changes, you must stop using the Platform and may close your account by contacting our support team. We recommend that you review this Privacy Policy periodically to stay informed about how baj77 protects your personal data.
If you have any questions, concerns, or requests relating to this Privacy Policy or to baj77's handling of your personal data, please contact our dedicated support team. All privacy-related enquiries are handled in English and treated with strict confidentiality.
- Email: [email protected] (plain text — not a clickable link)
- Subject Line: Use "Privacy Enquiry" for general questions or "Data Rights Request" for formal data subject requests.
- Response Time: baj77 acknowledges all privacy enquiries within 48 hours and provides a substantive response within 30 calendar days.
- Support Hours: Our support team is available 24/7 via live chat on the baj77 Platform for general account and privacy questions.
- Serving: Players across Bangladesh, including Dhaka, Chittagong, Sylhet, Rajshahi, Khulna, Barisal, Rangpur, Mymensingh, and Cox's Bazar.
baj77 is committed to resolving all privacy concerns promptly and fairly. If you are unsatisfied with the outcome of your enquiry, you retain the right to escalate your concern to an appropriate supervisory authority in your jurisdiction.
Ready to Experience baj77?
Now that you understand how baj77 protects your privacy, explore our cricket betting markets, live casino tables, and top slot games — all in ৳ BDT with instant bKash and Nagad deposits.