Data protection

Bbaji Privacy Policy – Our firm commitment to protecting your information

Your personal information is the most important thing to us. Find out clearly how bbaji collects your data, where it is stored, and how it is kept safe.

Last Updated: January 2026
Secured with SSL Encryption
No sale of data to third parties
Secure data storage
Full confidentiality guaranteed

How bbaji protects your privacy

A quick overview of the key pillars of our privacy policy.

End-to-end encryption

All your information on bbaji is encrypted using SSL/TLS technology. From banking details to personal identity — everything flows through completely secure channels.

Your data is never sold

Your name, phone number, or any personal information is never sold to advertisers or third parties. This is a strict policy at bbaji.

Transparent Data Collection Policy

Bbaji only collects information that is genuinely necessary to provide its services. Requesting excessive or irrelevant data is against our policy.

Right to erasure

You can request deletion of your stored information at any time. Unless required by law, bbaji will action your request within 30 days.

Access to your information

As a bbaji member, you can view your stored personal information from your account at any time and submit a correction request if needed.

Deletion of data after a specified period

Bbaji does not retain information longer than necessary. After account closure, personal data is automatically deleted within the designated timeframe.

Please Note: By registering on bbaji.xyz or using our services, you are considered to have accepted this privacy policy. Please read it carefully before you get started.

Bbaji.xyz ("bbaji", "we", "us") takes your privacy very seriously. This privacy policy explains what information we collect when you use the bbaji website, app, or any of our services, how we use that information, and how we keep it secure.

Compliance with Bangladesh's Digital Security Act and international data protection standards (GDPR) is a core principle of ours. We believe that transparency and trustworthiness are the foundation of a healthy, long-term relationship.

1

What types of information we collect

Bbaji collects two types of information — what you provide voluntarily and what is collected automatically.

What you provide (direct information):

  • Full name and date of birth
  • Email address and mobile number
  • Address and district
  • National ID or passport number (for verification purposes)
  • Payment method details (bKash, Nagad account numbers)
  • Security question answers and password (encrypted)

Automatically Collected Data:

  • IP address and geographic location (country/region only)
  • Browser type and operating system
  • Device type and screen resolution
  • Time of site access, page view history, and location
  • Game history and transaction records
  • Cookies and local storage data

bbaji never stores your bank card number, CVV, or full financial account details.

2

How We Use the Information We Collect

Bbaji uses your information only for the purposes listed below. It is never used for any unauthorized purpose.

Purpose What Information Is Used Basis
Account creation and management Name, email, mobile number Contractual obligations
Identity verification (KYC) National ID, date of birth Legal obligations
Payment processing Mobile Banking Information Contractual obligations
Fraud prevention IP address, device information, and transaction history Legitimate interest
Sending promotions and offers Email, mobile (subject to consent) Consent
Service Improvement & Research Anonymous usage data Legitimate interest

Bbaji never shares your information with third parties for advertising purposes. If you wish to stop receiving promotional messages, you can opt out at any time by contacting our support team.

3

Who your information may be shared with

Bbaji does not share your information with any third party except in the following limited circumstances:

  • Payment processors: Required information is shared with authorized payment gateways such as bKash and Nagad to process your transactions.
  • Game software providers: Limited data may be shared to verify gameplay and ensure fairness.
  • Legal Authorities: Disclosure of information is required when mandated by a valid court or government authority order.
  • Technology infrastructure: Necessary information is shared with hosting and security service providers, all of whom are bound by confidentiality agreements.

Before sharing any information with third parties, a strict non-disclosure agreement (NDA) is signed with them. Any breach of this agreement makes the third party legally liable.

4

Cookies and tracking technologies

Bbaji uses cookies on its website. Cookies are small text files stored in your browser that help improve your experience on the site.

The types of cookies we use:

  • Essential cookies: These are essential for maintaining your login session and ensuring security. They cannot be disabled.
  • Functional cookies: Used to remember your preferences (language, theme).
  • Analytics cookies: Anonymous data is collected to help us understand site traffic.

You can manage or delete cookies at any time through your browser settings. However, disabling essential cookies may cause some features of the site to stop working.

5

How we protect your data

Bbaji follows the highest industry standards to protect your information. Our security framework operates across multiple layers:

  • 256-bit SSL Encryption: All data transfers take place over encrypted channels.
  • Two-factor authentication (2FA): An additional layer of security when accessing your account.
  • Firewall and DDoS protection: Protection against server-level attacks.
  • Regular security audits: Regular audits conducted by third-party experts.
  • Staff training: All staff are trained on our privacy policy and data protection practices.
  • Data minimisation: We strictly adhere to a policy of collecting only the data that is necessary.

In the event of a data breach, affected members will be notified within 72 hours.

6

Data retention period

Bbaji does not keep any information beyond what is required. The following policy applies:

  • Active Account: Information is retained for as long as the account remains active.
  • Closed accounts: Certain information may be retained for up to 5 years after account closure for legal purposes.
  • Transaction Records: Retained for up to 7 years in accordance with financial regulatory requirements.
  • Marketing data: Withdrawal of consent results in immediate deletion of your data.
  • Cookies and session information: Automatically deleted when the session ends or the set expiry period passes.
7

Your rights

As a bbaji member, you have several important rights over your personal information:

Right to access your information

You have the right to know what information bbaji holds about you and to request a copy of it.

Right to Rectification

If any of your information is incorrect, you can submit a request to have it corrected.

Right to erasure

Under certain circumstances, you may request the complete deletion of your information.

Right to restrict processing

You may request that we stop using your information for specific purposes.

Right to data portability

You can export your information in a standard format (CSV/JSON).

Right to object

You may object to your information being used for marketing or profiling purposes.

To exercise any of the above rights, email us at [email protected]. We will respond within 30 days.

8

Children's Privacy

Bbaji strictly does not provide services to anyone under 18. We never knowingly collect personal information from minors.

  • Age verification is carried out at the time of registration.
  • Any data believed to have been collected from a child will be deleted immediately.
  • Parents or guardians can contact the support team regarding any account belonging to a minor.

If you believe someone you know is using bbaji by concealing their age, please let us know at [email protected].

9

Privacy Policy Updates

Bbaji may update this privacy policy from time to time. Notice will be given according to the significance of the changes:

  • Major changes: You will be notified at least 7 days in advance via email and an on-platform notice.
  • Minor changes: You will be notified by a change to the "Last Updated" date on this page.
  • Continued use of our services after any changes have been made will be considered acceptance of the updated policy.
  • If you do not agree with the updated policy, you may request to close your account.
10

Contact Us

For any questions, concerns, or requests to exercise your rights regarding this privacy policy, please contact our data protection team:

Email: [email protected] — We typically respond within 24–48 hours.

To help us process your request promptly, write "Privacy Request" in the email subject line and send it from your registered email address.

Privacy Policy FAQs

Never. bbaji does not sell your information to any advertisers or marketing companies. This goes entirely against our core principles. Your data is used solely for the purpose of providing our services.

Yes, you can. However, as required by financial regulatory authorities, transaction records must be retained for legal purposes for a specified period (typically 5–7 years). All other personal data will be deleted upon your request.

No. Your password is always stored using hash encryption. No bbaji employee — not even the technical team — can view your password directly.

Yes. You can opt out of marketing communications by clicking the "Unsubscribe" link in any promotional email, or by messaging us at [email protected].

Yes. In the event of a security breach, affected members will be notified at their registered email address within 72 hours and advised on the necessary protective measures to take.

Your data is safe, your game is on

Your privacy is fully protected at bbaji. Register with confidence and enjoy the best gaming experience.

বাংলা