bajj Privacy Policy – How We Handle Your Data

This Privacy Policy ("Policy") describes how bajj ("we", "us", "our") collects, processes, stores, and protects personal data provided by users ("you", "the Player") when accessing and using the bajj platform at bajj.vu, including all sports betting, live casino, slot, and crash game features available on the site. This Policy forms part of the bajj Terms & Conditions and should be read alongside them.

bajj processes personal data only for the purposes described in this Policy and only to the extent necessary for each stated purpose. We do not sell personal data to third parties. We do not use personal data for automated decision-making that produces legal or similarly significant effects without human oversight. If you are under 21 years of age, you are not permitted to use the bajj platform and you must not submit personal data to us.

How We Use Your Information

The table below summarises the primary purposes for which bajj processes personal data and the specific data category used for each purpose.

Sharing Your Information

bajj does not sell personal data. bajj shares personal data with third parties only in the limited circumstances described below. In every case, bajj requires that third parties receiving personal data maintain appropriate technical and organisational security measures and use the data only for the specified purpose.

• Payment processors: financial transaction data is shared with bKash, Nagad, Rocket, Upay, Visa, and Mastercard solely to execute deposits and withdrawals on your behalf. Each payment processor is bound by its own privacy obligations and applicable financial regulations.
• Game providers: limited session and technical data is shared with bajj's third-party game suppliers to deliver games, resolve disputes, and maintain RNG audit records. Game providers do not receive financial data beyond what is necessary for in-game transaction confirmation.
• Fraud and compliance service providers: identity verification and anti-fraud screening data is shared with specialist third-party compliance providers to meet KYC obligations and detect prohibited activity. These providers process data under strict confidentiality agreements.
• Regulatory and law enforcement authorities: bajj will disclose personal data to regulators, law enforcement agencies, or courts where it is legally required to do so, or where disclosure is necessary to protect the rights, property, or safety of bajj, its players, or the public.

bajj does not share personal data with advertising networks, social media platforms, or data analytics companies for profiling or targeted advertising purposes. bajj does not transfer personal data outside of the jurisdictions necessary to deliver the services described in this Policy without implementing appropriate data transfer safeguards.

Data Security

bajj implements technical and organisational measures designed to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. No data transmission over the internet is completely risk-free, but bajj applies the following safeguards as standard across the platform.

• All data transmitted between your device and bajj servers is encrypted using 256-bit SSL/TLS encryption. bajj enforces HTTPS across every page and API endpoint on the platform — unencrypted HTTP connections are rejected.
• Passwords are stored using a one-way cryptographic hash function. bajj staff cannot read your password in plain text. In the event of a system compromise, stored password hashes would not be usable without a computationally prohibitive cracking effort.
• Access to personal data within bajj is restricted to staff who require that data to perform their specific job function. All staff with access to personal data are subject to confidentiality obligations. Access permissions are reviewed periodically and revoked promptly when no longer required.
• bajj maintains an incident response plan for personal data breaches. In the event of a breach that poses a material risk to affected players, bajj will notify impacted players without undue delay, describing the nature of the breach, the data affected, and the steps bajj is taking to address it.

Despite the security measures bajj implements, no system is entirely immune to security incidents. bajj encourages all players to use a strong, unique password for their bajj account, to enable OTP verification, and to log out of the platform when using a shared or public device.

Your Privacy Rights

bajj respects your privacy rights in relation to the personal data it holds about you. The following rights are available to all bajj players. To exercise any of these rights, contact the bajj support team through the website. bajj will respond to all valid privacy rights requests within 30 calendar days of receipt.

• Right of access: you may request a copy of all personal data bajj holds about you, together with information about how it is being processed and the legal basis for each processing activity.
• Right to rectification: if any personal data bajj holds about you is inaccurate or incomplete, you may request that it be corrected or completed without undue delay.
• Right to erasure: you may request that bajj delete personal data it holds about you where the data is no longer necessary for the purpose it was collected, where you have withdrawn consent, or where the processing has no other valid legal basis. This right is subject to bajj's legal retention obligations — data that must be retained by law cannot be erased on request.
• Right to restrict processing: you may request that bajj restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data you have disputed is being verified, or while a legitimate interests objection is being assessed.
• Right to object to marketing: where bajj processes your personal data for direct marketing purposes on the basis of your consent, you have the right to withdraw that consent and opt out of all future marketing communications at any time by contacting our support team.

bajj will not charge a fee for processing a privacy rights request unless the request is manifestly unfounded or excessive, in which case a reasonable fee may be applied. bajj may request identity verification before processing a privacy rights request to ensure that data is not disclosed to an unauthorised person.

Changes to This Policy and Contact

bajj may update this Privacy Policy from time to time to reflect changes in how we process personal data, changes in applicable legal requirements, or improvements to our platform and services. When material changes are made to this Policy, bajj will post a notice on the platform and, where appropriate, notify registered players via their registered mobile number or email address. The updated Policy will display a revised effective date at the top of the document. Continued use of the bajj platform following the effective date of an updated Policy constitutes your acknowledgement of and agreement to the revised terms.

If you have any questions about this Privacy Policy, wish to exercise a privacy right, or want to raise a concern about how bajj handles your personal data, please contact our support team through the website at bajj.vu. Our contact email address for privacy matters is [email protected] — please note this address is for written correspondence only and cannot be reached by telephone. bajj aims to acknowledge all privacy-related queries within 24 hours and to resolve them fully within 30 calendar days.