Bbajee Privacy Policy – How Your Information Is Protected

Bbajee Two types of member data are collected — information you provide directly, and data generated automatically through your use of the platform.

Member-Provided Information:

• Name and mobile number — provided at the time of registration.
• Date of birth — for age verification.
• Identity document details — collected during the KYC process (national ID or passport).
• Payment account details — bKash, Nagad, Rocket, or bank account numbers.
• Email address — if provided.
• Messages and complaints submitted to support.

Automatically collected information:

• Device information — including phone model and operating system.
• IP address and approximate location.
• Browser type and version.
• Activity logs on the platform — including login times, page visits, and betting history.
• Session duration and app usage patterns.

Bbajee Data is collected through a variety of methods. Members have the right to know about each of them:

• Collected directly: Via the registration form, KYC upload, payment form, and support chat.
• Automatic Collection: Through cookies and log files while browsing the platform or using the app.
• From payment processors: Limited data is accessed solely to confirm transactions and detect fraud.
• From identity verification services: Licensed third parties may be used for KYC document verification — however, your data is not stored with them.

Bbajee does not collect member information from social media or any other external platforms. Our data collection is strictly limited to Bbajee's own services.

Bbajee Collected data is used only for specific purposes. Each purpose is detailed below:

Bbajee will never use your information beyond the purposes stated above. If the purpose changes, you will be informed in advance and, where required, fresh consent will be obtained.

Bbajee Your information may be shared with third parties in limited and specific circumstances. Each case is detailed below:

• Payment processor: Only the information required to process transactions is shared with payment services such as bKash, Nagad, and Rocket.
• Identity Verification Service: During the KYC process, document details may be shared with a licensed verification provider — strictly for the purpose of identity verification.
• Game providers: Limited data is shared with game providers such as Evolution Gaming or Pragmatic Play solely to manage game sessions.
• Legal Authorities: Relevant information may be disclosed in cases involving legal obligations, court orders, or government investigations.
• Anti-Fraud Network: Limited risk signals may be shared with industry-level fraud detection systems.

When sharing data with third parties, Bbajee ensures that those parties also comply with appropriate data protection standards. Every third-party agreement includes confidentiality and data protection clauses.

Bbajee's website and app use cookies and similar technologies. It's important to understand what these technologies do:

• Essential Cookies: Maintains login sessions and performs security verification. The platform cannot function properly without these.
• Functional Cookies: Remembers your preferred language, game settings, and personalization preferences.
• Analytics cookies: Time spent on each page and the features used most — this information helps us improve our services.
• Security Cookies: Used to detect suspicious activity.

Cookie Controls: You can disable non-essential cookies through your browser settings, though some features may not work properly. The mobile app uses local storage instead of cookies — this data is cleared when you uninstall the app.

Bbajee Both technical and administrative measures have been put in place to keep your information secure:

Technical Safeguards:

• 256-bit TLS encryption on all data transmissions.
• Sensitive data in the database is stored in encrypted form.
• Passwords are stored using bcrypt hashing — they are never visible to anyone in plain text.
• Two-Factor Authentication (2FA) is available.
• 24/7 automated intrusion detection system.
• Regular security audits and penetration testing.

Administrative Safeguards:

• Staff access to member data is strictly limited — only those who need it can view it.
• All staff sign confidentiality agreements.
• A complete log of all data access is maintained.
• Regular staff training.

Bbajee Data is never retained longer than necessary. Retention periods vary depending on the type of information:

After Account Closure: Following a voluntary account closure, personal data will be deleted or anonymized once the legal retention periods mentioned above have expired. Until then, the data is kept in an inactive state and is not used for any active purpose.

As a Bbajee member, you have several rights regarding your personal data. Exercising these rights is entirely at your discretion:

• Right to Access: You may request to see what information Bbajee holds about you.
• Access: You may request a copy of your personal data held by us.
• Right to Rectification: You may request corrections to any inaccurate information.
• Right to Erasure: You may request deletion of your data in certain circumstances — however, where legal obligations apply, full deletion may not always be possible.
• Right to Restrict Processing: You can request that your data no longer be used for a specific purpose.
• Marketing Opt-Out: You can opt out of promotional messages at any time.

To exercise any of these rights, email support@bbajee.my or contact us via live chat. All requests will be responded to within 30 days of receipt.

BbajeeServices are available to users aged 18 and above only. We never knowingly collect personal information from anyone under the age of 18.

Age Verification: Date of birth is used to verify age at the time of registration. Where there is doubt, further verification is carried out via KYC documentation. If a person is found to be under 18:

• The account will be closed immediately.
• Your deposited funds will be returned.
• All collected data will be deleted.

If you become aware that anyone under 18 is using Bbajee, please notify us immediately at support@bbajee.my. We will act promptly.

Bbajee This Privacy Policy may be updated from time to time. When changes are made:

• Members will be notified by email and in-app notification at least 14 days before any significant changes take effect.
• A plain-language summary of any changes will be provided separately.
• The date of the latest version will always be shown at the top of the page.
• Previous versions will be archived and made available upon request.

For any privacy-related questions or concerns:

• Email: support@bbajee.my (Subject: Privacy Request)
• Live Chat: Directly through the Bbajee website or app
• Response Time: Standard requests are handled within 3 business days; urgent matters within 24 hours.