Privacy Policy — How l bajee Collects, Uses, and Protects Your Data

l bajee collects personal data from players through several channels: directly from you when you register an account or use our services, automatically through your interaction with the platform, and from third-party sources such as payment processors and identity verification providers. The categories of personal data we collect are described below.

Registration and Account Data

When you create a player account on l bajee, we collect the following information:

• Full legal name — as it appears on your government-issued identification document.
• Date of birth — required for age verification to confirm you are 18 years of age or older.
• Residential address — including city (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, or Cox's Bazar) and postal code.
• Email address — used for account communications, security notifications, and promotional messages where consent has been given.
• Mobile phone number — used for two-factor authentication, account security alerts, and transactional notifications.
• Username and encrypted password — your login credentials. Passwords are stored in hashed, salted form and are never readable by l bajee staff.

Identity Verification (KYC) Data

To comply with our Know Your Customer (KYC) obligations and to verify your age and identity before processing withdrawals, l bajee may collect copies of the following documents:

• Bangladesh National Identity Card (NID)
• Valid passport (biographical data page)
• Government-issued driver's licence
• Proof of residential address (utility bill, bank statement, or similar document dated within 90 days)

KYC documents are used solely for identity and age verification purposes and are stored in an access-controlled, encrypted document management system. Documents are retained only for as long as legally required and are deleted in accordance with our data retention schedule.

Financial and Payment Data

When you make a deposit or request a withdrawal, l bajee collects transaction data including your chosen payment method (bKash, Nagad, Rocket, Upay, bank transfer, or card), transaction reference numbers, deposit and withdrawal amounts in Bangladeshi Taka (৳), and the date and time of each transaction. Full card numbers and mobile banking PINs are never stored by l bajee; payment processing is handled by PCI-DSS-compliant third-party payment processors.

Technical and Usage Data

When you interact with the l bajee platform, we automatically collect certain technical data, including:

• IP address and approximate geographic location derived from IP.
• Device type, operating system, and browser type and version.
• Session duration, pages visited, games played, bets placed, and in-platform navigation patterns.
• Referral source (how you arrived at the l bajee platform).
• Cookie identifiers and similar tracking data — see the Cookies and Tracking Technologies section for full details.

l bajee processes your personal data on the basis of one or more of the following legal grounds: performance of a contract (your player account agreement with us), compliance with a legal obligation, our legitimate business interests (where these do not override your rights), or your explicit consent where required by applicable law.

Account Management and Platform Delivery

We use your registration and account data to create and maintain your player account, authenticate your identity each time you log in, process your deposits and withdrawals, and provide you with access to the full range of games and betting markets available on the l bajee platform. Without this data, we are unable to provide you with our services.

Age and Identity Verification

l bajee is a platform strictly for adults aged 18 and above. We process your date of birth and KYC identity documents to verify that you meet this requirement. This is a non-negotiable legal and ethical obligation. Accounts where age verification cannot be completed will be restricted until verification is finalised.

Fraud Prevention and Platform Security

We analyse transaction data, IP addresses, device fingerprints, and behavioural patterns on the platform to detect and prevent fraudulent activity, money laundering, account takeover attempts, bonus abuse, and any other conduct that may compromise the integrity of the l bajee platform or the security of other players' accounts.

Responsible Gaming Monitoring

l bajee uses account activity data — including deposit frequency, session duration, wagering patterns, and voluntary limit settings — to monitor for signs of problem gambling. Where our systems detect potentially harmful behaviour, our responsible gaming team may make contact to offer support, guidance, or to apply protective restrictions to the account. This processing is carried out in the interests of player welfare and platform integrity.

Customer Support and Dispute Resolution

Communication data, including live chat transcripts, email correspondence, and support ticket records, is retained to provide effective customer support, to resolve disputes, and to maintain an accurate record of all interactions between l bajee and its players. Support records are retained for a minimum of two years from the date of the relevant interaction.

Marketing Communications

Where you have provided explicit consent, l bajee may use your email address and mobile phone number to send you promotional communications about new games, bonus offers, and seasonal promotions relevant to the Bangladesh market — including offers related to cricket events such as the BPL and T20 World Cup, and seasonal events such as Eid and Pohela Boishakh. You may withdraw your consent to receive marketing communications at any time by updating your communication preferences in your account settings or by contacting our support team.

l bajee may share your personal data with the following categories of third parties under strictly defined circumstances:

Payment Service Providers

To process your deposits and withdrawals, l bajee shares relevant transaction data with our payment processing partners, which include mobile financial service providers such as bKash, Nagad, Rocket, and Upay, as well as banking institutions including BRAC Bank, City Bank, Islami Bank, Sonali Bank, and Dutch-Bangla Bank, and card networks operated by Visa and Mastercard. These providers receive only the transaction data necessary to complete the specific payment instruction. They are contractually prohibited from using your data for any other purpose.

Identity Verification Providers

l bajee uses specialist third-party KYC and identity verification service providers to authenticate the identity documents submitted by players as part of the account verification process. These providers process your KYC documents under data processing agreements that strictly limit their use of your data to the verification service only.

Technology and Platform Providers

The l bajee platform relies on a range of third-party technology providers for functions including cloud hosting, database management, content delivery, game software provision (including studios such as Pragmatic Play, Evolution Gaming, Spribe, NetEnt, Microgaming, and Ezugi), and platform analytics. These providers operate under data processing agreements and are authorised to process your data only as directed by l bajee.

Legal and Regulatory Disclosure

l bajee may be required to disclose your personal data to competent authorities, law enforcement agencies, or regulatory bodies in response to a lawful request, court order, or legal process. We will make reasonable efforts to notify you of any such disclosure where legally permitted to do so, unless doing so would compromise an ongoing investigation or is otherwise prohibited by law.

Business Transfers

In the event that l bajee undergoes a merger, acquisition, restructuring, or sale of assets, your personal data may be transferred to the successor entity as part of that transaction. In such circumstances, l bajee will take reasonable steps to ensure that your data continues to be handled in accordance with the terms of this Privacy Policy, and you will be notified of any material change to data controller identity.

The l bajee platform uses cookies and similar client-side storage technologies to deliver a functional, secure, and personalised experience. This section explains what cookies we use, why we use them, and how you can manage your cookie preferences.

What Are Cookies?

Cookies are small text files placed on your device by a website you visit. They allow the website to remember information about your visit — such as your preferred language, login session status, and browsing behaviour — so that the site functions correctly and your experience is consistent across visits. Cookies do not contain executable code and cannot be used to access other files on your device.

Types of Cookies Used by l bajee

Managing Your Cookie Preferences

Strictly necessary cookies cannot be disabled, as they are essential to the operation of the l bajee platform. For all other cookie categories, you may manage your preferences through your browser settings. Most modern browsers allow you to view, block, or delete cookies at any time. Please note that disabling functional or analytics cookies may affect the performance and personalisation of your platform experience.

For detailed instructions on managing cookies in your specific browser, please consult your browser's official help documentation. Common browsers include Google Chrome, Mozilla Firefox, Microsoft Edge, Safari for iOS, and Samsung Internet for Android — all of which are widely used by players in Bangladesh.

l bajee retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following principles govern our data retention practices.

Retention Periods

• Account and registration data — retained for the duration of your active account and for a minimum of five years following account closure, in accordance with anti-money laundering record-keeping requirements.
• KYC identity verification documents — retained for a minimum of five years from the date of submission, or longer if required by applicable law.
• Financial transaction records — retained for a minimum of five years from the date of each transaction.
• Customer support records — retained for a minimum of two years from the date of the relevant interaction.
• Technical and usage logs — retained for up to 12 months on a rolling basis, after which logs are anonymised or deleted.
• Marketing consent records — retained until consent is withdrawn and for a reasonable period thereafter to demonstrate compliance.

Security Measures

l bajee implements a layered approach to data security that encompasses both technical and organisational controls. Key security measures include:

• SSL/TLS encryption for all data transmitted between player devices and the l bajee platform.
• AES-256 encryption at rest for databases containing personal and financial data.
• Role-based access controls that limit staff access to personal data strictly on a need-to-know basis.
• Regular third-party penetration testing and security audits of the platform infrastructure.
• Multi-factor authentication requirements for all administrative access to production systems.
• Comprehensive incident response procedures to detect, contain, and report data security incidents in a timely manner.

Data Breach Notification

In the event of a personal data breach that poses a significant risk to your rights and interests, l bajee will notify affected players without undue delay following our discovery of the breach. Notifications will be delivered to the email address registered on your account and will include a description of the nature of the breach, the categories and approximate volume of data affected, the likely consequences, and the steps l bajee has taken or proposes to take to address the breach.

As a registered player on l bajee, you hold a number of rights in respect of the personal data we hold about you. These rights are described below. To exercise any of these rights, please contact our support team at [email protected]. We will acknowledge your request within 48 hours and provide a substantive response within 30 calendar days.

Right of Access

You have the right to request a copy of the personal data that l bajee holds about you. This is commonly referred to as a Subject Access Request (SAR). Upon receipt of a verified SAR, l bajee will provide you with a summary of the personal data held, the purposes for which it is processed, the categories of third parties with whom it has been shared, and the applicable retention period.

Right to Rectification

If any personal data held by l bajee is inaccurate or incomplete, you have the right to request that it be corrected. Minor corrections — such as updating your contact email address or residential address — can be made directly through your account settings. For corrections to core identity data (such as your legal name or date of birth), you will be required to submit supporting documentation.

Right to Erasure

You have the right to request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where you object to processing based on legitimate interests. Please note that l bajee may be required to retain certain data for legal and regulatory compliance purposes even following a valid erasure request. Where data cannot be fully deleted, we will explain the specific reason and the retention period that applies.

Right to Restrict Processing

In certain circumstances — for example, where you contest the accuracy of data we hold, or where processing is unlawful but you prefer restriction over deletion — you may request that l bajee restrict the processing of your personal data. During any restriction period, your data will be stored but not actively used.

Right to Object to Marketing

You have the right to object to the use of your personal data for direct marketing purposes at any time. You may opt out of marketing communications by updating your preferences in your l bajee account settings or by contacting our support team. Opting out of marketing will not affect your ability to use the platform or receive transactional account notifications.

The l bajee platform integrates with a number of third-party service providers to deliver its full range of features, including game software studios, payment processors, and analytics platforms. While l bajee exercises care in selecting its third-party partners and requires them to meet appropriate data protection standards via contractual obligations, we are not responsible for the privacy practices of third-party entities operating their own independent platforms or services.

Game content on the l bajee platform is provided by third-party studios including Pragmatic Play, Evolution Gaming, Spribe, NetEnt, Microgaming, and Ezugi, among others. These studios may operate their own data collection mechanisms within their game engines — for example, for game integrity monitoring and fairness auditing purposes. Any data collection by game studios occurs within the l bajee platform environment and is governed by our data processing agreements with those studios.

Payment transactions are routed through third-party payment processors. When you initiate a payment via bKash, Nagad, Rocket, Upay, or a bank transfer, portions of that transaction are processed directly by the relevant payment provider under that provider's own terms and privacy policy. l bajee recommends that you review the privacy policies of your chosen payment provider to understand how your financial data is handled outside of the l bajee platform.

The l bajee platform does not contain links to unaffiliated external websites. All navigation on the platform leads to pages within the l bajee domain. Should this change in future, this section will be updated accordingly.

l bajee reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable legal requirements, or the introduction of new platform features. When material changes are made to this policy, registered players will be notified via the email address associated with their account. The effective date at the top of this document reflects when the policy was last reviewed and updated.

We encourage all players to review this Privacy Policy periodically to stay informed about how l bajee protects their personal data. Continued use of the platform following the publication of an updated Privacy Policy constitutes your acknowledgement of the changes and your agreement to the revised terms.

How to Contact Us About Privacy

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data that l bajee holds about you, please contact our Data Support team using the details below. All privacy-related enquiries are handled in English and are treated with strict confidentiality.

• Email: [email protected]
• Live Chat: Available 24/7 through your registered l bajee player account
• Response Time: We acknowledge all privacy enquiries within 48 hours and provide a full written response within 30 calendar days of receiving a verifiable request.
• Operating Hours: Bangladesh Standard Time (BST, UTC+6), 24 hours a day, 7 days a week

l bajee is committed to resolving all privacy-related concerns promptly and transparently. If you are not satisfied with our response to a privacy enquiry, you may have the right to escalate your complaint to an appropriate supervisory authority under the laws of your jurisdiction.