tj baji Privacy Policy

1. Information We Collect

tj baji collects personal data from users through several channels: directly from you when you register an account or complete identity verification; automatically through your use of the Platform; and from third-party payment providers and identity verification services with whom we work to operate the Platform securely. We do not collect more information than is necessary for each stated purpose.

Information You Provide Directly

When you create and maintain a tj baji account, you will be asked to provide some or all of the following personal data at different stages of the account lifecycle:

• Identity data: Full legal name as it appears on your Bangladeshi National Identity Card (NID), date of birth, NID number, and a scanned or photographed copy of your NID for KYC verification purposes.
• Contact data: Personal email address, mobile phone number registered in Bangladesh, and current residential address.
• Account credentials: Username and hashed (encrypted) password. We do not store passwords in plain text under any circumstances.
• Financial data: bKash, Nagad, Rocket, or Upay account numbers; Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, or Sonali Bank account details; and transaction history related to deposits and withdrawals on the tj baji Platform.
• Support correspondence: Records of any communication you send to our customer support team, including live chat transcripts and email messages.

Information Collected Automatically

When you visit or interact with the tj baji Platform, our servers and analytics systems automatically record certain technical data. This information is used for security monitoring, fraud detection, and improving platform performance — not for selling to third parties.

• IP address and approximate geographic location (country and city level)
• Device type, operating system version, and browser type and version
• Session start and end timestamps in Bangladesh Standard Time (UTC+6)
• Pages visited, features used, game sessions initiated, and betting activity logs
• Referral source (how you arrived at the Platform)
• Cookie identifiers and session tokens (see Section 4 for full cookie details)

Data Category	Collection Method	Legal Basis
Identity & KYC documents	Direct submission by player	Legal obligation (AML compliance)
Contact information	Account registration form	Contract performance
Payment & transaction data	Payment processor integration	Contract performance & legal obligation
Technical & device data	Automatic server logging	Legitimate interest (security & fraud prevention)
Betting & game activity	Platform event tracking	Contract performance & responsible gaming
Marketing preferences	Consent opt-in during registration	Consent (freely given, withdrawable)

2. How We Use Your Data

tj baji uses the personal data we collect strictly for the purposes described in this Privacy Policy. We do not use your data for any purpose that is incompatible with the reason it was originally collected. The primary purposes for which your data is processed are as follows:

Account Operation and Service Delivery

Your identity and contact data are essential for creating and maintaining your tj baji account, authenticating your login sessions, processing your deposits and withdrawals via bKash, Nagad, Rocket, Upay, and supported banks, crediting bonuses to your account, and providing customer support when you need assistance.

Identity Verification and Regulatory Compliance

Bangladeshi anti-money laundering (AML) obligations require us to verify the identity of every player before allowing real-money transactions. We process your NID details and financial data to satisfy these legal requirements. Failure to comply with these obligations could result in penalties for the Platform; consequently, identity verification is a mandatory non-negotiable condition of account activation.

Security and Fraud Prevention

We use your device data, IP address, login history, and betting patterns to detect suspicious activity such as account takeover attempts, multi-accounting, bonus abuse, and potential money laundering. Our fraud detection systems process this data in real time to protect both you and the integrity of the Platform.

Responsible Gaming Monitoring

tj baji analyses your betting frequency, session duration, and deposit patterns to identify signs of problem gambling behaviour. Where our systems detect patterns consistent with problematic play — such as rapidly escalating bet sizes, unusually long sessions, or chasing of losses — our responsible gaming team may reach out proactively to offer support tools. This processing is carried out in the interests of player welfare and is a condition of our operating standards.

Marketing Communications (With Your Consent)

If you have opted in to marketing communications during registration or subsequently through your account settings, we may contact you with personalised promotional offers, bonus announcements, and information about new games on the tj baji Platform. You may withdraw this consent at any time by updating your communication preferences in your account settings or by contacting support at tj-baji.com. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

3. Data Sharing & Third Parties

tj baji does not sell, rent, or otherwise transfer your personal data to third parties for their own commercial purposes. We share data only in the limited, specific circumstances described below, and only to the minimum extent necessary to fulfil the stated purpose.

Payment Processors

To process your deposits and withdrawals, we share the minimum necessary transaction details with your chosen payment provider (bKash, Nagad, Rocket, Upay, or your selected bank). These providers operate under their own privacy policies and are independently responsible for the data they hold. tj baji shares only what is required to complete each transaction; we do not share your full account profile with payment providers.

Identity Verification Providers

To conduct KYC checks, we work with third-party identity verification services that cross-reference the documents you submit against authoritative databases. These providers are contractually bound to process your data only for the specific verification task and to maintain appropriate security standards. Your NID data is not retained by these providers beyond the verification process.

Game Software Providers

Some games available on the tj baji Platform are supplied by third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive anonymised or pseudonymised session data (such as a session token and bet amounts) for game integrity and RNG audit purposes. They do not receive your name, contact details, or payment information.

Legal and Regulatory Disclosure

We may disclose your personal data to law enforcement agencies, financial intelligence units, or other regulatory authorities if we are legally required to do so, or if we have a good-faith belief that disclosure is necessary to prevent fraud, money laundering, or other criminal activity. In all such cases, we disclose only the data specifically requested and document the disclosure in our compliance records.

4. Cookies & Tracking Technologies

The tj baji Platform uses cookies and similar tracking technologies to deliver a functional, secure, and personalised user experience. A cookie is a small text file placed on your device by your browser when you visit a website. Cookies cannot run executable code, carry viruses, or extract data from your device.

Types of Cookies We Use

Cookie Type	Purpose	Duration
Strictly Necessary	Authentication tokens, session management, CSRF protection, load balancing	Session / up to 24 hours
Functional	Remembering your language preference, game lobby layout, and account display settings	Up to 12 months
Analytics	Aggregated, anonymised data on how users navigate the Platform, used to improve UX and page performance	Up to 13 months
Security	Fraud detection signals, device fingerprinting tokens, rate-limiting identifiers	Up to 30 days

Managing Your Cookie Preferences

Strictly necessary cookies cannot be disabled as they are required for the Platform to function correctly. Functional and analytics cookies may be disabled through your browser settings at any time, though doing so may affect your experience on the Platform — for example, your display preferences may not be remembered between sessions. For instructions on managing cookies in your specific browser (Chrome, Firefox, Samsung Internet, Opera Mini, or other mobile browsers common in Bangladesh), please consult your browser's help documentation.

5. Data Retention & Storage

tj baji retains personal data for as long as it is necessary to fulfil the purpose for which it was collected, or for as long as required by applicable law, whichever is longer. We do not retain data in an identifiable form beyond what is genuinely required.

Retention Schedule

• Active account data: Retained for the full duration of your account's active status. You can request deletion of non-essential data at any time (see Section 6).
• KYC and identity documents: Retained for a minimum of five (5) years following account closure, as required by anti-money laundering regulations applicable to financial services platforms operating in Bangladesh.
• Transaction records: Retained for five (5) years from the date of each transaction for audit and regulatory compliance purposes.
• Customer support records: Retained for two (2) years from the date of the last interaction, after which they are anonymised or deleted.
• Marketing consent records: Retained for three (3) years from the date consent was last confirmed or updated, as evidence of lawful processing.
• Technical and server logs: Retained for ninety (90) days for security and fraud investigation purposes, then deleted.

Data Storage Location

All personal data belonging to tj baji players is stored on servers protected by industry-standard physical and logical security controls. Data is backed up regularly using encrypted backup systems. Backup media is stored in geographically separate secure facilities. In the event of a data breach that affects your personal data, tj baji will notify affected users promptly and take all reasonable steps to contain and remediate the breach.

6. Your Rights Over Your Data

As a tj baji player, you have the following rights with respect to the personal data we hold about you. These rights can be exercised at any time by contacting our data team at support at tj-baji.com. We will respond to all verified data rights requests within five (5) business days. In complex cases, a response may take up to thirty (30) calendar days, and we will notify you of any extension within the initial five-day window.

7. Data Security Measures

The security of your personal data is a core operational priority at tj baji. We maintain a layered security architecture designed to protect against unauthorised access, disclosure, alteration, and destruction of the data we hold.

Technical Security Controls

• TLS 1.3 encryption on all data in transit between your browser or app and our servers.
• AES-256 encryption for all sensitive data stored at rest, including identity documents, payment details, and account credentials.
• Bcrypt password hashing — passwords are never stored in plain text and are salted before hashing to prevent rainbow-table attacks.
• Two-factor authentication (2FA) available for all accounts, strongly recommended for players who handle large transaction volumes.
• Web Application Firewall (WAF) that filters and monitors HTTP traffic to block common web attack vectors including SQL injection and cross-site scripting.
• Real-time intrusion detection systems that alert the security team to anomalous access patterns within seconds of detection.

Organisational Security Controls

• Access to personal data is restricted on a strict need-to-know basis. Only staff members whose role requires access to specific data categories are granted that access.
• All staff with access to personal data complete mandatory data protection and security awareness training annually.
• Third-party vendors and service providers who process data on our behalf are subject to data processing agreements that impose security obligations equivalent to our own internal standards.
• Security audits and penetration testing are conducted by independent third parties on a regular basis. Any vulnerabilities identified are remediated on a risk-prioritised schedule.

8. Policy Updates & Contact

Changes to This Privacy Policy

tj baji reviews this Privacy Policy periodically and updates it whenever our data practices change, new legal obligations arise, or we introduce new features that affect how personal data is processed. When we make material changes to this Policy, we will notify registered players via email or through an in-platform notification at least seven (7) days before the changes take effect. The updated Policy will always be available on this page, and the "Last updated" date at the top will reflect the most recent revision.

Your continued use of the tj baji Platform following the effective date of any revised Privacy Policy constitutes your acknowledgement of and agreement to the updated terms. If you do not agree with any update, you may request account closure before the effective date and we will return your withdrawable balance in full.

Children's Privacy

The tj baji Platform is strictly for adults aged 18 and above. We do not knowingly collect or process personal data belonging to individuals under 18 years of age. If we become aware that data belonging to a minor has been collected — for example, through a falsified date of birth at registration — we will immediately delete all associated data and permanently close the account. If you believe a minor has registered on our Platform, please report it to support at tj-baji.com without delay.

Contact Our Data Team

For all privacy-related enquiries, data rights requests, or concerns about how tj baji handles your personal information, please contact us at:

Email: support at tj-baji.com
Response time: Within 5 business days (Bangladesh Standard Time, UTC+6)
Support hours: 24/7 Live Chat available; email responses during business hours

We take every privacy enquiry seriously. Our data team will acknowledge your request within 24 hours of receipt and provide a substantive response within the timeframes stated in Section 6.