Privacy Policy
of 888baji

Information We Collect

888baji collects personal data from you in several ways — directly when you register and use our services, automatically through your device and browser as you navigate the platform, and from third-party partners involved in payment processing and identity verification. The categories of personal data we collect are described below.

1.1 Information You Provide Directly

When you create an account, complete identity verification, make deposits or withdrawals, or contact our support team, you may provide us with the following categories of personal data:

1.2 Information Collected Automatically

When you access 888baji through any device or browser, we automatically collect certain technical data. This data is collected primarily through cookies, server logs, and similar technologies:

• Device and technical data: IP address, device type (mobile, desktop, tablet), operating system version, browser type and version, screen resolution, and device identifiers.
• Usage and behavioural data: Pages visited on 888baji, time spent on each page, games accessed, wager amounts and game outcomes, session duration, navigation paths, and click patterns.
• Location data: Approximate geographic location inferred from your IP address. We do not collect precise GPS coordinates unless you explicitly grant permission via your browser.
• Performance data: Error logs, loading times, and crash reports used to diagnose and fix technical issues with the platform.

1.3 Information from Third Parties

888baji may receive personal data about you from the following categories of third-party sources:

• Payment processors: bKash, Nagad, Rocket, Upay, and our banking partners may share transaction confirmation data, payment status updates, and fraud signals with us.
• Identity verification providers: Third-party KYC and AML screening services may provide us with verified identity status, sanctions screening results, and politically exposed person (PEP) flags.
• Analytics partners: Aggregated, anonymised analytics data from platform performance tools may be shared with us to help us understand how players interact with our services.
• Affiliate and referral partners: If you arrived at 888baji via an affiliate link, we may receive data about the referral source, though not personal data about you from the affiliate without your consent.

How We Use Your Data

888baji uses the personal data we collect for the following specific purposes. We do not use your personal data for any purpose that is incompatible with the reasons for which it was originally collected without first obtaining your consent or unless required by law.

• Account creation and management: To register your account, verify your identity, maintain your account profile, and provide you with access to the 888baji platform and all its features.
• Processing financial transactions: To process your deposits, execute withdrawal requests, apply bonus credits, and maintain an accurate record of your transaction history.
• Regulatory compliance and KYC: To fulfil our legal obligations under applicable anti-money laundering (AML) regulations and age verification requirements, including screening against sanctions lists and reporting suspicious activity where required by law.
• Fraud prevention and platform security: To detect, investigate, and prevent fraudulent activity, cheating, bonus abuse, duplicate account creation, money laundering, and any other prohibited conduct as defined in our Terms & Conditions.
• Customer support: To respond to your queries, resolve disputes, investigate complaints, and improve the quality and responsiveness of our support service.
• Personalisation: To tailor your experience on 888baji — for example, displaying games or promotions relevant to your interests based on your gameplay history, with your consent where required.
• Platform improvement: To analyse usage patterns, diagnose technical issues, measure the performance of platform features, and develop new products and services.
• Marketing communications: To send you promotional offers, bonus notifications, and platform updates by email or SMS — but only where you have opted in to receive such communications. You may opt out at any time.
• Responsible gaming monitoring: To identify patterns of play that may indicate problem gambling behaviour, and to facilitate the use of deposit limits, cooling-off periods, and self-exclusion tools.
• Legal proceedings: To establish, exercise, or defend legal claims, and to comply with court orders, regulatory investigations, or law enforcement requests.

Legal Basis for Processing

888baji processes your personal data on the following legal bases, consistent with internationally recognised data protection principles:

• Contractual necessity: Processing that is necessary to perform the contract between you and 888baji — specifically, to operate your account, process transactions, and deliver the gambling services you have requested.
• Legal obligation: Processing required to comply with applicable laws and regulations, including age verification obligations, anti-money laundering (AML) reporting requirements, and responses to lawful requests from competent authorities.
• Legitimate interests: Processing necessary for the legitimate interests of 888baji, including fraud prevention, platform security, improving our services, and protecting the rights of other users — provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: Where we rely on your consent as the legal basis — for example, for sending marketing communications or deploying non-essential cookies — you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal.
• Vital interests: In exceptional circumstances, we may process data to protect the vital interests of a person — for example, where a player discloses information suggesting a serious risk to their wellbeing in the context of problem gambling.

Where processing is based on legitimate interests, 888baji has conducted a balancing assessment to ensure that our interests do not outweigh your right to privacy. You have the right to object to processing based on legitimate interests at any time — see the Your Privacy Rights section for details.

Data Sharing & Third Parties

888baji does not sell, rent, or trade your personal data to any third party. We share personal data only in the limited circumstances described below, and only with parties who are contractually obligated to handle your data securely and in accordance with applicable data protection standards.

4.1 Service Providers and Data Processors

We share personal data with carefully selected third-party service providers who process data on our behalf and under our instruction for specific operational purposes:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, and other financial institutions as required to process your transactions.
• Identity verification (KYC/AML) providers: Third-party services that assist us in verifying your identity, screening against sanctions databases, and fulfilling our AML compliance obligations.
• Cloud infrastructure providers: Hosting, database, and storage providers that maintain the secure infrastructure on which the 888baji platform operates.
• Customer support platforms: Live chat and ticketing system providers used to manage and respond to support enquiries.
• Analytics providers: Platform performance and usage analytics tools that help us understand how our platform is used, used only with anonymised or aggregated data where possible.
• Game content providers: Providers such as Evolution Gaming, Pragmatic Play, NetEnt, Microgaming, Spribe, and Ezugi may receive limited technical data (such as player session tokens) as required to operate their games within the 888baji environment.

4.2 Legal and Regulatory Disclosures

888baji may be required to disclose your personal data to competent governmental, regulatory, or law enforcement authorities where required by applicable law, a court order, or a lawful regulatory request. We will endeavour to notify you of any such disclosure where we are legally permitted to do so.

4.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of 888baji's business assets, your personal data may be transferred to the acquiring entity as part of that transaction. In such an event, we will take reasonable steps to ensure that the acquiring party is bound by equivalent data protection obligations, and we will notify affected players of any material change to how their data is handled.

Cookies & Tracking Technologies

888baji uses cookies and similar tracking technologies to operate certain essential functions of the platform, maintain your login session, prevent fraud, and analyse platform usage. This section explains what cookies we use and how you can manage them.

5.1 What Are Cookies?

Cookies are small text files placed on your device by a website when you visit it. They are widely used to make websites work efficiently, to remember your preferences, and to provide anonymous usage statistics to site operators. Cookies set by 888baji are first-party cookies (set by our domain). We may also use limited third-party cookies from service providers listed in Section 4.

5.2 Types of Cookies We Use

5.3 Managing Your Cookie Preferences

You can manage your cookie preferences at any time through your browser settings. Most modern browsers allow you to block or delete cookies, or to be notified when a cookie is being set. Note that disabling essential cookies (session and security cookies) may prevent certain features of 888baji from functioning correctly, including the ability to log in and place wagers.

Instructions for managing cookies are available in the help documentation of all major browsers including Google Chrome, Mozilla Firefox, Apple Safari, and Microsoft Edge. You may also be able to manage analytics and preference cookies through your 888baji account settings panel.

Data Retention

888baji retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. Our data retention periods are as follows:

• Active account data: Personal data associated with your active 888baji account is retained for the full duration that your account remains open and active.
• Transaction records: Financial transaction data — including deposit and withdrawal records, wager history, and bonus credit logs — is retained for a minimum of seven (7) years from the date of the transaction to comply with financial record-keeping obligations.
• KYC and identity documents: Documents submitted for identity verification are retained for a minimum of five (5) years from the date of submission or from the date of account closure, whichever is later, in accordance with AML regulatory requirements.
• Support correspondence: Records of live chat sessions, emails, and support tickets are retained for three (3) years from the date of the interaction to allow us to resolve any subsequent disputes or complaints.
• Marketing data: Your marketing preferences and opt-in/opt-out records are retained for three (3) years from the date you last interacted with a marketing communication, or until you withdraw consent, whichever comes first.
• Closed account data: Where an account is closed by you or by 888baji, non-mandatory personal data is deleted or anonymised within 90 days of closure. Data subject to legal retention obligations (see above) is retained for the applicable mandatory period.

Your Privacy Rights

As a player on 888baji, you have the following rights in relation to the personal data we hold about you. These rights may be subject to certain conditions and exceptions as permitted by applicable law.

• Right of access: You have the right to request a copy of the personal data we hold about you. We will provide this in a portable, machine-readable format where technically feasible.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it without undue delay.
• Right to erasure ("right to be forgotten"): You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (and no other legal basis applies), or where the data has been processed unlawfully. This right is subject to our legal retention obligations — we cannot delete data that we are required by law to retain.
• Right to restrict processing: You may request that we restrict the processing of your personal data in certain circumstances — for example, while we investigate a dispute about the accuracy of your data.
• Right to data portability: Where processing is based on your consent or a contract, you have the right to receive your personal data in a structured, commonly used format so that it can be transferred to another service provider.
• Right to object: You have the right to object to processing of your personal data where that processing is based on our legitimate interests. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent (such as marketing communications), you may withdraw that consent at any time without affecting the lawfulness of any prior processing.
• Right not to be subject to automated decisions: You have the right not to be subject to decisions made solely by automated means — including profiling — that produce legal or similarly significant effects, unless such processing is necessary for a contract or permitted by law.

To exercise any of these rights, please contact our Data Protection team at support@888baji with the subject line "Data Rights Request" and a description of the right you wish to exercise. We will acknowledge your request within 72 hours and provide a substantive response within 30 calendar days. In complex cases, this period may be extended by a further 60 days, in which case we will notify you of the extension and the reason for it.

Data Security Measures

888baji implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our security programme includes, but is not limited to, the following measures:

• TLS/SSL encryption: All data transmitted between your browser or device and our servers is encrypted using Transport Layer Security (TLS) with a minimum of 256-bit encryption. Our SSL certificate is kept current and validated.
• Data encryption at rest: Sensitive personal data — including KYC documents, payment details, and password hashes — is encrypted at rest using industry-standard algorithms.
• Access controls: Access to personal data within 888baji is restricted on a strict need-to-know basis. Only authorised personnel whose role requires access to specific categories of data are granted permission to view it.
• Two-factor authentication (2FA): Internal systems that store or process personal data are protected by multi-factor authentication. Players are also encouraged to enable 2FA on their accounts for additional security.
• Penetration testing and vulnerability scanning: Our platform undergoes regular security testing to identify and remediate vulnerabilities before they can be exploited.
• Incident response: 888baji maintains a documented data breach response procedure. In the event of a security incident that poses a risk to your rights and freedoms, we will notify affected players without undue delay and take all necessary steps to contain and remediate the breach.
• Vendor security assessment: All third-party service providers who process personal data on our behalf are assessed for security compliance before engagement and are contractually obligated to maintain equivalent security standards.

While we take all reasonable precautions to protect your data, no online platform can guarantee absolute security. You are also responsible for keeping your account credentials secure. If you suspect your account has been compromised, contact us immediately at support@888baji.

Children's Privacy

If 888baji becomes aware — through our age verification process, a report from a third party, or any other means — that personal data has been collected from a person under the age of 18, we will take immediate steps to delete that data and permanently close the associated account. All funds in such an account will be returned to the originating payment source.

If you are a parent or guardian and believe that your child has registered on 888baji, please contact our support team immediately at support@888baji. We treat all underage access reports as a priority matter and will respond and take action within 24 hours of receiving such a report.

Parents and guardians are also encouraged to make use of third-party parental control software and internet filtering tools to restrict access to online gambling sites from devices used by minors.

Changes to This Privacy Policy

888baji reserves the right to update, amend, or replace this Privacy Policy at any time to reflect changes in our data practices, applicable law, regulatory requirements, or the services we offer. The date at the top of this page indicates when the Privacy Policy was most recently updated.

When we make material changes to this Privacy Policy — that is, changes that significantly affect how we collect, use, or share your personal data — we will provide prominent notice to registered players via the email address associated with their account and/or via a notice displayed when you next log in to 888baji. We encourage you to review this page periodically to stay informed about our data practices.

Your continued use of the 888baji platform after a revised Privacy Policy has been published constitutes your acceptance of the updated terms. If you do not agree with a revised Privacy Policy, you must discontinue use of the platform and may request account closure by contacting our support team.