Privacy Policy —
How bajilibe Protects Your Data

bajilibe collects personal data from you in two primary ways: information you provide directly when registering and using the platform, and information collected automatically as you interact with our website. The categories of data we collect are as follows:

Information you provide directly:

• Registration data: Full legal name, date of birth, residential address (including city — Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, or elsewhere in Bangladesh), email address, and chosen username when you open a bajilibe account.
• Identity verification documents: Government-issued photo identification (National ID card, passport, or driving licence) and proof of address documentation when requested as part of our Know Your Customer (KYC) process.
• Payment information: Mobile banking account numbers (bKash, Nagad, Rocket, Upay), bank account details (Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank), or card details (Visa, Mastercard) provided when making deposits or requesting withdrawals. Full card numbers and mobile banking PINs are not stored by bajilibe.
• Support communications: Any information you share when contacting bajilibe support via email, live chat, or our contact form, including the content of your messages and any attachments you submit.
• Responsible gaming data: Deposit limits, loss limits, session time limits, cooling-off periods, or self-exclusion requests you submit through our responsible gaming tools.

Information collected automatically:

• Device and technical data: IP address, browser type and version, operating system, device type, screen resolution, and time zone settings.
• Usage and behavioural data: Pages visited on bajilibe, game sessions played, bet history, session duration, navigation paths, and feature interactions.
• Transaction logs: Records of all deposits, withdrawals, bonuses claimed, and wagering activity on your bajilibe account, retained for financial compliance and dispute resolution purposes.
• Cookie and tracking data: Information collected via cookies and similar technologies as described in Section 4 of this Privacy Policy.

bajilibe processes the personal data we collect for specific, legitimate purposes. We do not use your data in ways that are incompatible with the reasons for which it was originally collected. The table below summarises our primary processing purposes and the legal basis for each:

bajilibe does not make automated decisions that have a significant legal or similarly significant effect on you without providing you an opportunity to request human review. Where profiling is used (for example, to identify potentially problematic gambling patterns), it is done in your interest as part of our responsible gaming obligations, not to your detriment.

bajilibe does not sell your personal data to third parties. We share your data only in the circumstances described below, and only to the minimum extent necessary for the stated purpose.

• Payment service providers: When you make a deposit or withdrawal, your payment details are shared with the relevant payment processor (for example, bKash, Nagad, Rocket, or Upay, or the card processing network for Visa and Mastercard transactions). These providers process payment data under their own privacy policies and security standards, which are independently certified.
• Identity verification partners: bajilibe may use third-party KYC and AML verification services to validate identity documents and screen against sanctions and politically exposed persons (PEP) databases. These partners process only the specific data required to complete verification and are contractually prohibited from using it for any other purpose.
• Game software providers: The casino and sportsbook games available on bajilibe are provided by licensed studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may process certain technical data (such as session identifiers and game logs) to deliver their games and ensure fair play certification. They do not receive your full personal profile.
• Analytics and platform services: bajilibe uses trusted technical service providers to support platform performance, fraud detection, and security monitoring. These providers act as data processors under our instruction and are contractually bound to process data only as directed by bajilibe.
• Legal and regulatory authorities: bajilibe will disclose personal data to law enforcement, regulatory bodies, or other competent authorities when required to do so by applicable law, court order, or regulatory directive. We will notify you of such disclosure where legally permitted to do so.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of bajilibe's assets, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer and the applicable privacy terms in advance where possible.

bajilibe respects your rights over your personal data. Depending on your circumstances and applicable law, you may hold the following rights with respect to the personal data bajilibe holds about you:

• Right of access: You have the right to request a copy of the personal data bajilibe holds about you. We will respond to verified access requests within 30 days. The information will be provided free of charge in a commonly used electronic format.
• Right to rectification: If any of the personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update basic account details directly within your bajilibe account settings. For data that cannot be self-corrected, contact support@bajilibe.
• Right to erasure ("right to be forgotten"): You may request that bajilibe delete your personal data where it is no longer needed for the purpose it was collected, where you have withdrawn consent, or where processing is unlawful. Note that this right is subject to overriding legal obligations — for example, we are required by law to retain certain financial records regardless of an erasure request.
• Right to restriction of processing: You may request that bajilibe restrict (rather than delete) the processing of your personal data in certain circumstances, for example while a dispute about accuracy is being resolved.
• Right to data portability: Where processing is based on your consent or the performance of a contract, and is carried out by automated means, you have the right to receive your personal data in a structured, machine-readable format.
• Right to object: You have the right to object to processing of your personal data carried out on the basis of legitimate interests, including profiling. bajilibe will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent (for example, marketing emails), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact bajilibe's data support team at support@bajilibe with the subject line "Privacy Rights Request". We will acknowledge your request within 5 business days and aim to fulfil it within 30 calendar days. We may need to verify your identity before processing your request to ensure the security of your account data.

The security of your personal data is a fundamental operational priority at bajilibe. We implement a layered security architecture that addresses threats at the network, application, and data levels. Our key security measures include:

• Transport Layer Security (TLS): All data exchanged between your browser or mobile device and bajilibe's servers is encrypted using TLS 1.2 or higher. The padlock icon visible in your browser's address bar confirms that this encryption is active during your session.
• At-rest encryption: Personal data stored in bajilibe's databases is encrypted at rest using AES-256 encryption. This means that even in the unlikely event of unauthorised server access, stored data cannot be read without the appropriate decryption keys.
• Access controls: bajilibe operates strict role-based access controls. Staff members can access personal data only to the extent required by their specific job function. Access logs are maintained and reviewed regularly.
• Intrusion detection and monitoring: bajilibe's infrastructure is continuously monitored for anomalous activity. Automated intrusion detection systems flag suspicious access patterns for immediate review by our security team.
• Penetration testing: bajilibe conducts regular security assessments, including vulnerability scanning and penetration testing, to identify and remediate potential weaknesses before they can be exploited.
• Staff training: All bajilibe staff who handle personal data receive regular data protection and security awareness training. Confidentiality obligations are embedded in all staff employment agreements.
• Incident response: bajilibe maintains a documented data breach response plan. In the event of a confirmed personal data breach that poses a risk to affected individuals, bajilibe will notify affected players without undue delay and will take all reasonable steps to contain and remediate the breach.

While bajilibe takes extensive measures to protect your data, no internet-based service can guarantee absolute security. You also play a role in protecting your account — use a strong, unique password for your bajilibe account, do not share your credentials with anyone, and contact us immediately at support@bajilibe if you suspect unauthorised access to your account.

bajilibe reserves the right to update this Privacy Policy from time to time to reflect changes in our data processing practices, platform features, legal obligations, or regulatory guidance. When material changes are made, we will notify registered players via email or via a prominent notice on the bajilibe platform prior to the changes taking effect.

The "Last Updated" date displayed at the top of this Privacy Policy indicates when the most recent revision was made. We encourage you to review this page periodically. Your continued use of bajilibe following notification of any update constitutes your acceptance of the revised Privacy Policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way bajilibe processes your personal data, please contact us using the details below. Our data support team is available to assist you in English, seven days a week.

bajilibe is committed to resolving privacy concerns promptly and transparently. If you are not satisfied with our response to a privacy complaint, you retain the right to escalate the matter to the relevant data protection authority in your jurisdiction.

This Privacy Policy was last reviewed and updated in January 2026. It supersedes all previous versions of the bajilibe privacy notice. The English version of this Privacy Policy is the authoritative version and takes precedence in the event of any discrepancy with any translated version.