Privacy Policy —
Your Data, Protected by bajalive

Section 01

Data We Collect

bajalive collects personal data from players through several channels: directly during account registration, through your ongoing use of the platform, and automatically via technical systems that operate in the background. The categories of data we collect are described in detail below. We collect only the data that is necessary for the purposes identified in this Policy — we do not collect data speculatively or beyond what is required.

Section 02

How We Use Your Data

bajalive processes your personal data for specific, legitimate purposes only. Each category of data is used in a manner consistent with the reason for which it was originally collected. The principal purposes for which we process your data are outlined below.

• Account Creation and Management: Identity and contact data are used to create and maintain your Player account, verify your age (18+ requirement), authenticate your logins, and process any account-related requests including password resets and contact detail updates.
• Payment Processing: Financial data is used to execute deposits via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, USDT, and BTC, and to process withdrawal requests back to the same verified payment method. Transaction records are retained for fraud detection and financial reconciliation.
• Service Delivery and Personalisation: Gaming activity data allows bajalive to display your bet history, calculate bonus eligibility, track wagering requirement progress, and personalise promotional offers relevant to your preferred game categories — whether cricket betting, slots, live casino, or crash games.
• Legal and Regulatory Compliance: KYC and financial data are processed to satisfy anti-money laundering obligations, age verification requirements, and any regulatory reporting obligations applicable to bajalive's operations. This processing is carried out on the basis of legal obligation.
• Fraud Detection and Security: Technical data — including IP address, device fingerprint, and login patterns — is analysed to detect unauthorised access, multiple-account creation, bonus abuse, and other fraudulent activity. Flagged accounts may be suspended pending investigation.
• Responsible Gaming: Gaming activity and Responsible Gaming data are used to monitor for patterns that may indicate problem gambling behaviour. Where such patterns are detected, bajalive may proactively prompt the player to use self-exclusion tools or set deposit limits, in line with the platform's commitment to player welfare.
• Marketing Communications: With your explicit consent, contact data may be used to send promotional emails or SMS notifications about bonuses, new games, and seasonal campaigns (e.g., Eid, BPL, Pohela Boishakh specials). You may withdraw your marketing consent at any time via your account settings or by contacting support.
• Platform Improvement: Aggregated, anonymised technical and gaming activity data is used to analyse platform performance, identify popular game categories, and guide product development decisions. This processing does not involve identifiable personal data.

Section 03

Data Sharing & Third Parties

bajalive does not sell your personal data. We may, however, share specific categories of data with carefully selected third-party partners where this is necessary to operate the platform, fulfil legal obligations, or protect the security of our players. All third-party partners who process data on our behalf are bound by contractual data protection obligations consistent with this Policy.

• Payment Processors: Financial data is shared with payment service providers — including bKash, Nagad, Rocket, Upay, and banking partners such as Dutch-Bangla Bank and BRAC Bank — solely for the purpose of processing your deposit or withdrawal transaction. These providers operate under their own privacy policies and regulatory obligations.
• Game Providers: When you play a game powered by a third-party studio (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Ezugi), the minimum data necessary to load and operate the game session — typically a session token and player ID — is shared with that provider. Game providers do not receive your full identity or financial data.
• KYC and Identity Verification Partners: Where bajalive uses a third-party identity verification service to process KYC documents, your identity data is transmitted to that service over an encrypted connection. The provider is contractually restricted from using your data for any purpose other than the verification task.
• Anti-Fraud and Security Services: Technical data including IP addresses and device identifiers may be shared with fraud detection platforms to assess risk scores and flag suspicious activity. This sharing is in the legitimate interests of bajalive and all genuine players using the platform.
• Legal Authorities: bajalive will disclose personal data to law enforcement agencies, regulatory bodies, or courts when required to do so by a valid legal order, subpoena, or equivalent instrument. We will notify affected players of such disclosures where legally permitted to do so.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of bajalive's business assets, player data may be transferred to the acquiring entity. Players will be notified of any such transfer and the new entity's privacy practices before the transfer takes effect.

Section 04

Cookies & Tracking Technologies

bajalive uses cookies and similar tracking technologies to operate the platform efficiently, remember your preferences, maintain your login session, and analyse how the site is used. A cookie is a small text file stored by your browser on your device when you visit bajalive. Cookies do not contain executable code and cannot install software on your device.

You may manage or disable non-essential cookies through your browser settings at any time. Please note that disabling strictly necessary cookies will impair your ability to log in and use the platform. For most players, the default browser settings will provide an appropriate balance between functionality and privacy.

Section 05

Data Security Measures

bajalive implements a layered set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. While no online platform can guarantee absolute security, our approach is designed to meet the standard expected of a responsible operator serving players in Dhaka, Chittagong, Sylhet, and across Bangladesh.

• TLS/SSL Encryption in Transit: All data exchanged between your browser or mobile device and bajalive's servers is encrypted using Transport Layer Security (TLS). This ensures that your credentials, payment details, and personal information cannot be intercepted during transmission.
• Encryption at Rest: Sensitive data stored on bajalive's servers — including identity documents, payment method details, and account credentials — is encrypted at rest using AES-256 or equivalent strong encryption standards.
• Access Controls: Access to personal data within bajalive's internal systems is restricted on a strict need-to-know basis. Staff members can access only the data necessary to perform their specific role. All access is logged and audited periodically.
• Two-Factor Authentication (2FA): Players are strongly encouraged to enable 2FA on their accounts. 2FA adds a second layer of verification to the login process, significantly reducing the risk of unauthorised access even if login credentials are compromised.
• Penetration Testing and Security Audits: bajalive conducts regular security assessments to identify and remediate vulnerabilities in the platform before they can be exploited. Game integrity is verified through certified RNG auditing carried out by independent testing laboratories.
• Incident Response: In the event of a data security incident that poses a risk to your personal data, bajalive will take immediate containment measures and notify affected players as promptly as the investigation allows, providing guidance on protective steps you should take.

Section 06

Data Retention

bajalive retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal or regulatory obligations. The retention periods set out below represent our standard practice and may be extended where a legal hold, ongoing investigation, or unresolved dispute requires it.

When personal data is no longer required and no legal hold applies, bajalive securely deletes or anonymises the data so that it can no longer be associated with any individual player. Anonymised, aggregated datasets may be retained indefinitely for statistical analysis and platform improvement purposes.

Section 07

Your Privacy Rights

bajalive respects the privacy rights of every player on the platform. Regardless of where you are located in Bangladesh — Dhaka, Chittagong, Khulna, Rajshahi, Sylhet, Barisal, Rangpur, Mymensingh, or Cox's Bazar — you have meaningful rights over your personal data. These rights are described below along with guidance on how to exercise them.

• Right of Access: You may request a copy of the personal data bajalive holds about you at any time. We will provide this information in a clear, readable format within a reasonable period following receipt of your request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete — for example, an incorrect mobile number or outdated payment method — you have the right to request that we correct it. You may also update certain details directly through your account settings.
• Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, and where no legal obligation requires us to retain it. Please note that financial records and KYC data must be retained for the periods specified in the Data Retention section and cannot be erased on request before those periods expire.
• Right to Restrict Processing: In certain circumstances — for example, while the accuracy of data is being contested, or while a complaint is being investigated — you may request that we restrict processing of your data to storage only.
• Right to Data Portability: Where processing is based on your consent or on a contractual basis, you may request that bajalive provide your data in a structured, commonly used, machine-readable format so that you can transfer it to another service if you choose.
• Right to Withdraw Consent: Where bajalive processes your data on the basis of consent — most commonly for marketing communications — you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal. Withdraw consent via your account settings or by contacting support.
• Right to Object to Marketing: You have an absolute right to object to the use of your personal data for direct marketing purposes at any time. Upon receipt of such an objection, bajalive will cease all marketing communications to you promptly.

Section 08

Updates to This Policy

bajalive reserves the right to update or amend this Privacy Policy at any time in response to changes in applicable law, platform features, or data processing practices. When material changes are made, we will notify active players via email or an in-platform notification prior to the changes taking effect. The "Effective" date displayed in the hero section of this page will be updated to reflect the most recent revision.

We encourage all players to review this Privacy Policy periodically — particularly following any notification of changes — to remain informed about how bajalive collects, uses, and protects your personal data. Continued use of the platform following the effective date of any revision constitutes acceptance of the updated Policy. If you do not accept the revised terms, you should discontinue use and request account closure via the support team.