Privacy Policy
at d baje

d baje collects personal data in several ways: directly from you when you register or interact with our platform, automatically through your use of the site, and in limited circumstances from third-party verification providers. The categories of data we collect are described below.

We do not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data beyond what is strictly required for age and identity verification. If you provide any such information voluntarily in a support communication, it will be treated with the highest level of confidentiality and deleted once the matter is resolved.

d baje does not knowingly collect data from individuals under the age of 18. If we become aware that data belonging to a minor has been collected, we will delete it immediately and close the associated account. Parents or guardians who believe a minor has registered on d baje should contact us immediately at [email protected].

d baje processes your personal data only for the specific, lawful purposes set out below. We do not use your data for any purpose that is incompatible with the reason it was originally collected without first notifying you and, where required, obtaining your consent.

• Account Creation and Management: We use your identity and contact data to create and maintain your registered d baje account, verify your age and eligibility, and communicate essential account information to you.
• Payment Processing: We use your financial data to process deposits and withdrawals through your chosen payment method (bKash, Nagad, Rocket, Upay, bank transfer). Transaction records are retained for accounting and legal compliance purposes.
• Identity Verification (KYC): We are required to verify the identity of players, particularly before processing withdrawals above certain thresholds. Your identity documents are used solely for verification and are stored securely once verified.
• Fraud Prevention and Security: Technical and usage data is analysed to detect and prevent fraud, unauthorised account access, money laundering, and other security threats. This processing is necessary for the protection of both d baje and its players.
• Legal and Regulatory Compliance: We process data as required to comply with applicable laws, including anti-money laundering (AML) regulations, reporting obligations to relevant authorities, and responses to lawful requests from government bodies.
• Customer Support: Communications data is used to respond to your support queries, resolve complaints, and improve the quality of our support service.
• Platform Improvement: Aggregated and anonymised usage data is used to analyse how players interact with d baje, identify technical issues, and improve the platform's performance, navigation, and game offering.
• Responsible Gaming Monitoring: Usage patterns and session data are monitored to identify indicators of problem gambling behaviour. Where such indicators are detected, d baje may proactively contact the player to offer responsible gaming resources. This processing is carried out in the player's best interest.
• Promotional Communications: Where you have opted in to receive marketing communications from d baje, we will use your contact data to send you information about promotions, bonuses, and platform updates. You may unsubscribe at any time by contacting [email protected] or using the unsubscribe option in any marketing email.

d baje does not sell your personal data. We share personal data only in the limited circumstances described below, and only to the extent necessary for the stated purpose.

• Payment Service Providers: We share financial data with payment processors (including bKash, Nagad, Rocket, Upay, and partner banks such as Dutch-Bangla Bank and BRAC Bank) to facilitate deposits and withdrawals. These providers are bound by their own privacy and data security obligations and are authorised to use your data only to process the specific transaction.
• Identity Verification Partners: Where third-party KYC verification services are used to confirm your identity or age, we share the minimum necessary identity data with those providers. Such providers are contractually obligated to process your data solely for verification purposes and to delete it once the verification process is complete.
• Game Software Providers: When you play a game on d baje, limited technical and session data (such as player ID, bet amount, and game result) is shared with the relevant game studio (for example, Pragmatic Play, Evolution Gaming, or Spribe) for the purpose of running the game and maintaining game integrity. Game providers do not receive your full identity or financial data.
• Legal and Regulatory Authorities: d baje may disclose personal data to government authorities, law enforcement agencies, financial intelligence units, or courts where we are legally required to do so, including in response to a valid court order, warrant, or regulatory request. We will notify you of such disclosure where permitted by law.
• Business Transfers: In the event of a merger, acquisition, restructuring, or sale of all or part of d baje's business, your personal data may be transferred to the acquiring entity as part of the transaction. You will be notified of any such transfer and of any changes to this Privacy Policy that result from it.

All third parties with whom d baje shares data are required to maintain appropriate technical and organisational security measures to protect your personal data and to use it only for the agreed purpose. d baje remains responsible for ensuring that these obligations are met.

d baje uses cookies and similar tracking technologies (collectively, "cookies") to operate and improve the platform. A cookie is a small text file stored on your device when you visit a website. Cookies allow the website to recognise your device on return visits and to maintain session state across page loads.

The following categories of cookies are used on d baje:

• Strictly Necessary Cookies: These cookies are essential for the platform to function. They manage your login session, maintain your authenticated state while navigating the site, and protect against cross-site request forgery (CSRF). Without these cookies, d baje cannot operate. No consent is required for strictly necessary cookies.
• Performance and Analytics Cookies: These cookies collect anonymised information about how visitors use d baje — which pages are visited most often, how long players spend on each section, and where errors occur. This data is used to improve site performance and navigation. These cookies do not identify you personally.
• Functional Cookies: These cookies remember your preferences — such as your preferred language or display settings — so that you do not need to reconfigure them on each visit. They improve your overall experience on d baje.

d baje does not use third-party advertising cookies or cross-site tracking cookies. You can manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will prevent you from logging in to your d baje account.

d baje retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

Once the applicable retention period has expired and there is no ongoing legal basis for continued storage, d baje will securely delete or irreversibly anonymise your personal data. Anonymised data that can no longer identify you may be retained indefinitely for statistical and analytical purposes.

Where you request account closure, d baje will cease processing your data for platform-operation purposes immediately. However, certain data will be retained for the legally mandated periods described above, even after your account has been closed.

As a registered player or visitor, you hold the following rights with respect to the personal data d baje holds about you. To exercise any of these rights, contact our support team at [email protected] with your full name, registered mobile number, and a description of your request. We will acknowledge your request within 48 hours and aim to resolve it within 30 days.

• Right to Access: You may request a copy of the personal data d baje holds about you. We will provide this in a clear, readable format. Requests are processed free of charge for reasonable, non-repetitive requests.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update basic contact information directly through your account settings.
• Right to Erasure: In certain circumstances, you may request that d baje delete your personal data. This right is subject to our legal obligations — for example, we cannot delete transaction records that we are required by law to retain. Where erasure is not possible in full, we will delete all data that can lawfully be removed.
• Right to Restriction of Processing: You may request that d baje temporarily stop processing your data while a dispute about its accuracy or lawfulness is resolved.
• Right to Data Portability: Where technically feasible, you may request that d baje provide your personal data in a structured, machine-readable format so that it can be transferred to another service provider.
• Right to Object: You may object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing carried out on the basis of legitimate interests, though d baje may be entitled to continue processing where there are compelling legitimate grounds.
• Right to Withdraw Consent: Where processing is based on your consent (for example, marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing that occurred before the withdrawal.

d baje takes the security of your personal data seriously and has implemented a comprehensive set of technical and organisational measures to protect it against unauthorised access, loss, alteration, or disclosure.

• Encryption in Transit: All data exchanged between your browser or device and d baje servers is encrypted using TLS 1.2 or higher with 256-bit SSL certificates. This protects your login credentials, payment details, and personal data from interception.
• Encryption at Rest: Sensitive personal data and financial records stored in d baje databases are encrypted at rest using industry-standard encryption algorithms.
• Access Controls: Access to personal data within d baje's internal systems is restricted on a strict need-to-know basis. Staff members can access only the data necessary to perform their specific role. All internal access is logged and audited regularly.
• Two-Factor Authentication: d baje supports OTP-based two-factor authentication for player accounts and enforces it for high-value transactions. Internal system access for staff also requires multi-factor authentication.
• Security Monitoring: d baje operates continuous security monitoring and intrusion detection on its infrastructure. Suspicious activity triggers automated alerts and is reviewed by the security team promptly.
• Incident Response: In the event of a data breach that is likely to result in a risk to your rights or interests, d baje will notify affected players as soon as reasonably practicable and will take immediate steps to contain and remediate the breach.

While d baje takes every reasonable precaution to protect your data, no internet-based platform can guarantee absolute security. You are responsible for keeping your own login credentials confidential and for taking appropriate precautions on your own devices, such as using up-to-date antivirus software and avoiding accessing your account over unsecured public Wi-Fi networks.

d baje may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or the features and services we offer. When a material change is made to this Policy, we will update the effective date displayed at the top of this document.

Where a change is significant — for example, a change to the categories of data we collect, the purposes for which we use it, or the third parties with whom we share it — d baje will notify registered players via the email address associated with their account at least 14 days before the change takes effect. Your continued use of d baje after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms.

We encourage you to review this Privacy Policy periodically to stay informed about how d baje protects your personal data. Previous versions of this Policy are available on request by contacting [email protected].

If you have any questions, concerns, or complaints about this Privacy Policy or about how d baje handles your personal data, please contact our support team:

This Privacy Policy is written in English and governs the collection and processing of personal data by d baje. In the event of any inconsistency between this English version and any translated summary, the English version shall prevail.