Your Privacy Matters to bajkk

1 Introduction

This Privacy Policy ("Policy") describes how bajkk ("we", "us", "our") collects, uses, stores, discloses, and protects the personal data of individuals ("you", "the player") who access or use the bajkk website, mobile interface, and associated services (collectively, the "Platform").

bajkk is committed to handling personal data responsibly and transparently. This Policy is written in plain English so that every player — regardless of technical background — can understand exactly what happens to their personal information. We encourage you to read this Policy in full before registering an account.

By registering an account on bajkk, making a deposit, placing a bet, or otherwise using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein. If you do not agree with any part of this Policy, you must not use the bajkk Platform.

This Policy should be read alongside the bajkk Terms & Conditions and Responsible Gaming Policy, both of which are incorporated into the overall framework governing your use of the Platform.

2 Personal Data We Collect

bajkk collects personal data in several categories, depending on the nature of your interaction with the Platform. The following table provides a structured overview of the categories of personal data we process:

3 How We Collect Personal Data

bajkk collects personal data through three primary channels:

3.1 Data Provided Directly by You

This is data you actively submit when creating an account (name, email, phone number, date of birth), completing the KYC identity verification process (identity documents, address proof), making deposits or withdrawals (payment method details), contacting customer support (email correspondence, chat messages), or configuring responsible gaming preferences (deposit limits, self-exclusion settings).

3.2 Data Collected Automatically

When you access the bajkk Platform, our servers automatically record technical data including your IP address, the type of browser and device you are using, your operating system, the pages you visit, the time and duration of each session, and interaction events such as button clicks and game launches. This data is collected through server logs, first-party cookies, and JavaScript-based analytics.

3.3 Data from Third Parties

bajkk may receive personal data about you from third-party sources in limited, specific circumstances:

• Payment processors (bKash, Nagad, Rocket, Upay) confirm the status of deposit and withdrawal transactions. bajkk does not receive your full mobile wallet PIN or banking credentials — only transaction reference numbers and confirmation status.
• Identity verification service providers may confirm the authenticity of documents submitted during KYC, using automated document-scanning technology.
• Fraud prevention services may flag IP addresses or device fingerprints associated with known fraudulent activity.

4 Purposes of Processing Your Data

bajkk processes your personal data only for clearly defined, legitimate purposes. The following table sets out each purpose, the data categories involved, and the legal basis for that processing:

bajkk will not use your personal data for any purpose other than those listed above without first obtaining your explicit consent or where required to do so by applicable law.

5 Legal Basis for Processing

bajkk processes personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contract Performance: Processing is necessary to fulfil our obligations to you as a registered player — including maintaining your account, processing bets, and executing payments.
• Legal Obligation: Processing is required to comply with applicable laws — particularly anti-money laundering (AML) regulations, know-your-customer (KYC) requirements, and responsible gambling obligations.
• Legitimate Interest: Processing is in bajkk's legitimate business interests — such as fraud detection, platform security, and product improvement — provided those interests are not overridden by your privacy rights.
• Consent: Where processing is based on consent — such as receiving marketing emails or personalised promotions — you may withdraw that consent at any time through Account Settings or by emailing [email protected]. Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.

6 Data Sharing & Third Parties

6.1 Service Providers

bajkk shares personal data with a limited number of third-party service providers who assist in operating the Platform. These include: payment processing partners (bKash, Nagad, Rocket, Upay for fiat; crypto network processors for USDT and BTC); identity verification providers; fraud and risk management services; cloud infrastructure and hosting providers; and customer support platform providers. All service providers are bound by data processing agreements that require them to process your data only on bajkk's instructions, to apply appropriate security measures, and not to use the data for their own purposes.

6.2 Legal Disclosures

bajkk may disclose personal data to competent government authorities, law enforcement agencies, or courts where required to do so by law, in response to a valid legal order, or where bajkk believes in good faith that disclosure is necessary to prevent fraud, money laundering, or other criminal activity. bajkk will notify you of such a disclosure where legally permitted to do so.

6.3 Business Transfers

In the event of a merger, acquisition, sale of assets, or restructuring of the bajkk business, personal data held by bajkk may be transferred to the acquiring or successor entity as part of the transaction. bajkk will notify registered players of any such transfer via email prior to completion, and the acquiring entity will be bound to honour this Privacy Policy or to provide players with an opportunity to delete their accounts.

6.4 No Sale of Data

bajkk does not sell, rent, lease, or trade personal data to any third party for marketing, advertising, or profiling purposes. This commitment is unconditional and applies regardless of the format or value of the data concerned.

7 Cookies & Tracking Technologies

bajkk uses first-party cookies and similar tracking technologies to operate the Platform effectively. The following types of cookies are in use:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication cookies that keep you logged in, CSRF protection tokens, and load-balancing cookies. These cannot be disabled without breaking core platform functionality.
• Functional Cookies: Remember your preferences such as language setting, preferred game category, and responsible gaming tool configurations. These improve your experience but are not essential.
• Analytics Cookies: First-party analytics cookies collect aggregated, anonymised data about page visits, session durations, and feature usage. This data helps bajkk understand how players interact with the Platform and where improvements can be made. bajkk does not use third-party advertising or retargeting cookies.
• Security Cookies: Used by the fraud detection system to assign a risk score to sessions based on device fingerprint consistency, IP reputation, and behavioural patterns. These are a critical component of bajkk's account security infrastructure.

You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair your ability to log in and use the Platform. Disabling functional or analytics cookies will not prevent access but may reduce the quality of your experience.

8 Data Retention

bajkk retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply as a general guide:

When the applicable retention period expires, bajkk will securely delete the data or, where deletion is not technically feasible (e.g., backup archives), anonymise it so that it can no longer be linked to any individual.

9 Data Security

bajkk implements a layered security architecture to protect personal data against unauthorised access, disclosure, alteration, and destruction. Key security measures include:

• Transport Encryption: All data transmitted between players and the bajkk Platform is encrypted using 256-bit TLS (Transport Layer Security). bajkk enforces HTTPS across all Platform pages with HTTP Strict Transport Security (HSTS) headers in place.
• At-Rest Encryption: All databases containing personal data are encrypted at rest using AES-256 encryption. Encryption keys are managed separately from the encrypted data and are rotated on a scheduled basis.
• Password Security: Player passwords are hashed using bcrypt with a unique salt per account. Plaintext passwords are never stored, logged, or transmitted. bajkk support staff have no ability to view your password.
• Two-Factor Authentication (2FA): Optional 2FA via SMS OTP is available for all accounts and is strongly recommended. bajkk reserves the right to require 2FA for high-value withdrawal requests.
• Access Controls: Access to personal data by bajkk staff is governed by role-based access control (RBAC). Only staff who require access to specific data categories to perform their job functions are granted that access. All internal access is logged and audited.
• Penetration Testing: bajkk conducts regular security assessments, including vulnerability scanning and penetration testing, to identify and remediate weaknesses in the Platform infrastructure.
• Incident Response: bajkk maintains a documented data breach response procedure. In the event of a breach that affects player personal data, bajkk will notify affected players within 72 hours of becoming aware of the breach, where feasible.

10 Your Data Rights

As a bajkk account holder, you have the following rights in relation to your personal data. These rights may be exercised by contacting bajkk at [email protected] with the subject line "Data Rights Request". bajkk will respond to all verified requests within 30 days.

11 Minors & Age Restriction

The bajkk Platform is strictly intended for adults aged 21 and above. bajkk does not knowingly collect personal data from individuals under the age of 21. The KYC identity verification process is specifically designed to confirm that every registered player meets the minimum age requirement before any real-money activity is permitted.

If bajkk becomes aware that personal data has been collected from a player who is under 21 years of age, that account will be suspended immediately, all funds returned via the original payment method where feasible, and all associated personal data deleted from bajkk systems without undue delay.

12 International Data Transfers

bajkk's primary player base is located in Bangladesh. The Platform's infrastructure and data processing activities are designed to keep personal data within jurisdictions that offer adequate levels of data protection. However, some of bajkk's third-party service providers — particularly cloud infrastructure and fraud detection services — may process data in servers located outside Bangladesh.

Where personal data is transferred internationally, bajkk ensures that appropriate safeguards are in place, including:

• Contractual clauses in data processing agreements that require the recipient to apply data protection standards equivalent to those in this Policy.
• Selection of service providers that operate under recognised privacy frameworks or are subject to adequacy decisions by relevant data protection authorities.
• Technical controls such as end-to-end encryption to protect data during transit across jurisdictions.

You may request details of the international transfer safeguards applicable to your data by contacting [email protected].

13 Changes to This Privacy Policy

bajkk reserves the right to update this Privacy Policy at any time to reflect changes in applicable law, platform functionality, data processing practices, or business operations. When material changes are made, bajkk will notify registered players via the email address associated with their account at least 14 days before the changes take effect.

The updated Policy will be published on this page with a revised "Last Updated" date. Continued use of the bajkk Platform after the effective date of any changes constitutes acceptance of the revised Policy. If you do not agree with the revised Policy, you must cease using the Platform and may request account closure by contacting [email protected].

For minor, non-material changes — such as corrections to formatting, clarifications of existing language, or updates to contact details — bajkk may update this page without prior notice. The "Last Updated" date at the top of this Policy will always reflect the date of the most recent revision.

14 Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way bajkk handles your personal data, please contact the bajkk Data Protection team using the details below. All privacy-related enquiries are treated with strict confidentiality.