m baji Privacy
Policy

1. Data We Collect

When you register for and use an m baji account, we collect personal data from you in several ways. The categories of data we collect, and the contexts in which they are collected, are described in full below.

1.1 Registration Data

When you create an m baji account, we collect the following information which you provide directly:

• Full legal name as it appears on your government-issued identification document
• Date of birth (used to verify that you meet the 18+ age requirement)
• Residential address in Bangladesh (city, district, full postal address)
• Mobile phone number registered with your Bangladeshi mobile network operator
• Email address
• Chosen username and account password (stored in encrypted form)

1.2 Identity Verification Data

As part of our player verification process, which is triggered before your first withdrawal is processed, we may collect:

• Scanned or photographed copy of a government-issued photo ID (National Identity Card, passport, or driving licence)
• Proof of residential address (utility bill, bank statement, or equivalent document issued within the last three months)
• Selfie or live photograph for biometric verification purposes, where required

1.3 Financial & Transaction Data

When you make deposits or withdrawals via bKash, Nagad, Rocket, Upay, or a Bangladeshi bank account, we collect:

• Mobile wallet account numbers (bKash, Nagad, Rocket, Upay) associated with your transactions
• Bank account details where bank transfer is the selected payment method
• Transaction identifiers, amounts, timestamps, and status records for all deposits and withdrawals
• Betting and gaming transaction history including stakes placed, game titles, outcomes, and balances

1.4 Technical & Usage Data

When you access m baji through a web browser or mobile device, we automatically collect certain technical data including:

• IP address and approximate geolocation derived from it
• Device type, operating system, and browser version
• Session duration, pages visited, features accessed, and navigation patterns within the platform
• Login timestamps and authentication event logs
• Crash reports and error logs used for platform debugging

2. How We Use Your Data

m baji processes your personal data for clearly defined purposes, each grounded in a legitimate operational, legal, or contractual basis. We do not use your data for purposes that are incompatible with those described below.

Where we rely on your consent as the legal basis for processing — for example, sending you promotional offers about new games, BPL season bonuses, or Eid promotions — you may withdraw that consent at any time by contacting our support team or updating your communication preferences in the account settings section. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

3. Data Sharing & Third Parties

m baji does not sell your personal data to any third party under any circumstances. We may share specific categories of your data with carefully selected third parties only where this is necessary to deliver the platform's services or where we are required to do so by law.

3.1 Payment Service Providers

To process your deposits and withdrawals, we share the minimum necessary transaction and account data with the payment service providers you use — including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, and other supported Bangladeshi payment institutions. These providers process your financial data under their own privacy policies and are bound by applicable financial regulations.

3.2 Identity Verification Partners

Where m baji uses a third-party identity verification service to process your KYC documents (such as your National ID card or passport), your verification data is shared with that provider solely for the purpose of the verification check. Verification partners are contractually bound to process data only for the stated purpose and to apply equivalent data security standards.

3.3 Game Technology Providers

m baji's casino and sports betting products are powered by technology from third-party providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive pseudonymised player identifiers and game session data strictly for the purpose of game operation, fairness auditing, and responsible gaming compliance. No directly identifying personal data (such as your full name or mobile number) is shared with game providers beyond what is technically required.

3.4 Legal and Regulatory Disclosures

m baji may disclose your personal data to law enforcement agencies, financial intelligence authorities, or other competent bodies in Bangladesh or internationally where we are required to do so by applicable law, court order, or regulatory instruction. Such disclosures will be limited to the data specifically required and will be made in accordance with applicable legal process.

3.5 Anti-Fraud and Security Services

We use specialist third-party fraud detection and platform security services. These services may process your IP address, device fingerprint, and behavioural data to identify suspicious activity, attempted account takeovers, and patterns consistent with money laundering or bonus abuse. Data shared with these services is processed under strict data processing agreements and is not used for any purpose other than fraud prevention and platform security.

4. Cookies & Tracking Technologies

m baji uses cookies and similar technologies (such as local storage and session tokens) to operate the platform, maintain your logged-in session, and detect fraud. The cookies we use fall into the following categories:

m baji does not use third-party advertising cookies, behavioural tracking pixels, or any technology designed to build a profile of your browsing habits across websites other than m baji itself. You may configure your browser to block or delete cookies, but doing so may prevent certain features of the m baji platform from functioning correctly, including the ability to remain logged in between page loads.

5. Data Security & Storage

The security of your personal data is a priority at m baji. We have implemented a layered set of technical and organisational measures designed to protect your data against unauthorised access, accidental loss, destruction, or disclosure.

Technical Security Measures

• SSL/TLS Encryption in Transit: All data transmitted between your browser or mobile device and m baji's servers is encrypted using SSL/TLS protocols. The padlock icon in your browser confirms this encryption is active.
• Encryption at Rest: Sensitive personal data stored on m baji's servers — including identity documents and financial records — is encrypted at rest using strong encryption standards.
• Password Hashing: Account passwords are never stored in plain text. They are hashed using a secure one-way hashing algorithm before storage, meaning even m baji's own technical staff cannot read your password.
• Access Controls: Access to systems holding personal data is restricted to authorised personnel only, managed through role-based access control and multi-factor authentication for administrative accounts.
• Regular Security Audits: m baji conducts periodic security assessments and penetration testing to identify and remediate vulnerabilities before they can be exploited.

Organisational Security Measures

• All staff and contractors with access to player data are subject to confidentiality obligations and receive data protection training appropriate to their role.
• Third-party service providers who process player data on m baji's behalf are required to sign data processing agreements and demonstrate compliance with equivalent security standards.
• m baji maintains an incident response procedure. In the event of a data breach that poses a risk to your rights and freedoms, affected players will be notified without undue delay.

Server Location

m baji's primary data processing infrastructure is operated on secured hosting services. Where player data is processed on servers located outside Bangladesh, appropriate contractual safeguards are applied to ensure your data receives a level of protection equivalent to that described in this Privacy Policy.

6. Your Privacy Rights

As a player on m baji, you hold a number of rights with respect to the personal data we hold about you. These rights are described below. To exercise any of these rights, please contact our support team via 24/7 live chat or by email at [email protected]. We will acknowledge your request promptly and provide a substantive response within 10 business days (Bangladesh Standard Time, UTC+6).

Right of Access

You have the right to request a copy of the personal data m baji holds about you. Upon receipt of a verified access request, we will provide you with a summary of the categories of data held, the purposes for which it is processed, and, where feasible, the data itself in a structured format.

Right to Rectification

If any personal data m baji holds about you is inaccurate or incomplete, you have the right to request that it be corrected. Minor corrections (such as updating your email address or mobile number) can typically be made directly within your account settings. Corrections to identity-linked data (such as your full legal name or date of birth) may require submission of a supporting document.

Right to Erasure

You may request the deletion of your personal data in certain circumstances — for example, if the data is no longer necessary for the purpose for which it was collected, or if you withdraw your consent for processing where consent was the legal basis. Please note that m baji is subject to legal obligations that require us to retain certain data (particularly transaction records and identity verification documents) for defined periods. Erasure requests will be honoured to the fullest extent permitted by our legal retention obligations.

Right to Restrict Processing

In certain circumstances (for example, while an accuracy dispute is being resolved), you may request that we restrict the processing of your personal data. Restricted data will be stored but not actively used for other processing purposes.

Right to Object

Where we process your data on the basis of legitimate interest — for example, for fraud prevention analytics or platform security monitoring — you have the right to object to that processing. We will assess your objection and cease the processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.

Right to Withdraw Consent

Where processing is based on your consent (for example, receiving promotional communications), you may withdraw that consent at any time without penalty. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

7. Data Retention Policy

m baji retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal, regulatory, or operational obligations. The following retention periods apply to the main categories of player data:

At the end of the applicable retention period, personal data is either securely deleted or anonymised so that it can no longer be associated with any identifiable individual. Anonymised, aggregated data may be retained indefinitely for statistical and analytical purposes — for example, to understand long-term platform usage patterns — but this data cannot be used to identify you.

Players who close their accounts voluntarily may request accelerated deletion of data that is not subject to a mandatory legal retention period. Such requests will be processed within 30 days of account closure confirmation, subject to verification of the account holder's identity.

8. Policy Updates & Contact

m baji reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform services. When we make material changes to this policy, we will publish the updated version on this page with a revised effective date. Where a change is particularly significant — for example, a new category of data sharing — we will endeavour to notify registered players directly via email or in-platform notification.

Your continued use of the m baji platform following the publication of an updated Privacy Policy constitutes your acknowledgement of the changes. We encourage you to review this page periodically to stay informed of how we are protecting your personal data.

Contact Us About Privacy

If you have any questions, concerns, or complaints about the way m baji handles your personal data, or if you wish to exercise any of your privacy rights as described in Section 6 of this policy, please contact our team:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 through the m baji platform support widget
• Response time: We aim to acknowledge all privacy-related enquiries within 48 hours and provide a full response within 10 business days (Bangladesh Standard Time, UTC+6)

m baji is committed to resolving privacy concerns directly and in good faith. If you feel that a concern has not been addressed to your satisfaction after contacting our support team, you may seek guidance from consumer protection bodies or relevant data protection authorities in Bangladesh.