Privacy Policy — biti baji

1 Information We Collect

When you interact with the biti baji platform — whether by registering an account, making a deposit, placing a bet, or contacting our support team — we collect certain categories of personal data. The specific data we collect depends on how you use the platform and what services you access.

Registration and Account Data

When you create a biti baji account, we collect the information you provide during the registration process. This includes:

• Full legal name (first name and surname)
• Date of birth (used to verify that you meet the 18+ age requirement)
• Mobile phone number (used for account verification, two-factor authentication, and transaction notifications)
• Email address (used for account communications and marketing, subject to your preferences)
• Residential address (required for identity verification and KYC compliance)
• Username and encrypted password

Identity Verification (KYC) Documents

In compliance with our anti-money laundering (AML) obligations and responsible gaming policies, biti baji may request and retain copies of identity verification documents, including:

• National ID card, passport, or driving licence
• Proof of address (utility bill, bank statement, or official correspondence)
• Proof of payment method (screenshot of bKash, Nagad, or Rocket account)
• Source-of-funds documentation for large deposit or withdrawal transactions

These documents are stored securely and are used solely for the purposes of identity verification and regulatory compliance. They are never used for profiling or marketing purposes.

Financial Transaction Data

We record details of all deposits and withdrawals made through your biti baji account, including the payment method used (bKash, Nagad, Rocket, Upay, Visa, or Mastercard), the transaction amount in Bangladeshi Taka (৳), the transaction date and time, and a transaction reference number. We do not store full card numbers; card transactions are processed by PCI-DSS compliant payment processors who tokenise card data before it reaches our systems.

Betting and Gaming Activity Data

We maintain a complete record of all bets placed, games played, results, session durations, and account balance changes. This data is used to operate your account, settle wagers, calculate bonuses, comply with responsible gaming obligations, and detect suspicious activity. It is retained as part of the platform's transaction audit trail.

Technical and Device Data

When you access the biti baji platform, our servers automatically collect certain technical data, including your IP address, browser type and version, operating system, device type, screen resolution, and the referring URL. This data is used for security monitoring, fraud detection, and platform performance optimisation. It is not used to personally identify you in isolation, but may be combined with account data where necessary for security investigations.

Communications Data

If you contact the biti baji support team via live chat, email, or any other channel, we retain a record of that communication including its content, date, and resolution. This data is used to improve service quality, resolve disputes, and train support staff. Communications are retained for a minimum of 12 months.

2 How We Use Your Data

biti baji processes your personal data for specific, defined purposes. We do not use your data for any purpose that is incompatible with the reason it was originally collected. The table below summarises the primary purposes for which we process personal data and the legal basis on which each processing activity rests.

Automated Decision-Making

biti baji uses automated systems for certain operational processes, including fraud scoring, responsible gaming alerts, and bonus eligibility checks. Where an automated decision produces a significant effect on your account (for example, a temporary suspension triggered by a fraud flag), you have the right to request human review of that decision by contacting the support team within 14 days of being notified.

Profiling

We may analyse your betting and gaming activity to understand your product preferences and, where you have consented to receive marketing, to tailor promotional offers to your interests. This profiling activity uses anonymised or pseudonymised data where possible and does not involve the sale of your personal profile to third parties.

3 Cookies and Tracking Technologies

The biti baji website uses cookies and similar tracking technologies to provide a functional, secure, and personalised browsing experience. A cookie is a small text file placed on your device by the website. Cookies do not contain executable code and cannot access other files on your device.

Types of Cookies We Use

• Strictly Necessary Cookies: These cookies are essential for the platform to function. They manage your login session, maintain your account state while you navigate between pages, and enable security features such as CSRF protection. These cookies cannot be disabled without impairing platform functionality.
• Functional Cookies: These cookies remember your preferences — such as your preferred language, odds format, and display settings — so that you do not need to re-configure the platform on each visit.
• Analytical Cookies: We use anonymised analytics cookies to understand how players navigate the platform, which pages are most visited, and where technical errors occur. This data is used to improve the platform and is not linked to individual player accounts.
• Security Cookies: These cookies are used by our fraud detection systems to identify unusual access patterns, bot traffic, and suspicious login attempts. They form a key part of our player protection infrastructure.

Managing Cookies

You can control cookies through your browser settings. Most modern browsers allow you to view, delete, and block cookies on a per-site or global basis. Please be aware that blocking strictly necessary cookies will prevent you from logging in to your biti baji account. Instructions for managing cookies are available in the help documentation of your specific browser.

4 Data Sharing and Third Parties

biti baji does not sell, rent, or otherwise commercially exploit your personal data. We share personal data with third parties only in the limited circumstances described below, and always subject to appropriate contractual or legal protections.

Payment Processing Partners

To process deposits and withdrawals, we share the minimum necessary financial data with our payment processing partners, including the operators of bKash, Nagad, Rocket, Upay, and card processing networks (Visa, Mastercard). These partners are independent data controllers with their own privacy policies governing how they handle transaction data. biti baji is not responsible for the data practices of these payment providers once data has been transmitted to them for the purpose of completing a transaction.

Identity Verification Services

We may share identity documents and personal data with third-party KYC verification service providers who conduct automated identity checks on our behalf. These providers act as data processors under contract with biti baji and are prohibited from using your data for any purpose other than completing the verification task we have instructed them to perform.

Game Content Providers

The games available on the biti baji platform are supplied by licensed game studios including Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, and Ezugi. Your gameplay activity data (session ID, bet amounts, game outcomes) may be shared with these providers for the purpose of game operation, RTP auditing, and technical support. These providers do not receive your personally identifiable registration data.

Legal and Regulatory Disclosure

biti baji may be required to disclose personal data to law enforcement agencies, regulatory authorities, or courts in response to a lawful request, court order, or legal obligation. In such circumstances, we will disclose only the data that is strictly required to satisfy the legal obligation and will, where legally permitted, notify the affected player of the disclosure.

Business Transfers

In the event that biti baji undergoes a merger, acquisition, or sale of assets, player data may be transferred to the acquiring entity as part of the transaction. Players will be notified of any such transfer and the new entity will be bound by the terms of this Privacy Policy or a successor policy that provides equivalent protections.

5 Data Retention and Storage

biti baji retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law or regulatory obligation. The following retention periods apply as a general guide:

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where data has been anonymised, it may be retained indefinitely for aggregate statistical and analytical purposes without constituting personal data under applicable privacy standards.

Data Storage Location

Player data is stored on servers located in jurisdictions with recognised data protection standards. biti baji implements contractual safeguards for any cross-border data transfers to ensure that your data receives a consistent level of protection regardless of where it is physically stored.

6 Your Privacy Rights

As a player on the biti baji platform, you hold a number of rights with respect to your personal data. We are committed to honouring these rights promptly and without unnecessary barriers. To exercise any of the rights described below, please contact the support team at [email protected] with the subject line "Data Rights Request" and include your registered account username for verification purposes.

Right of Access

You have the right to request a copy of all personal data that biti baji holds about you. Upon receipt of a verified access request, we will provide a structured summary of your data within 30 days. This summary will include the categories of data held, the purposes for which it is processed, and details of any third parties with whom it has been shared.

Right to Rectification

If any of the personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. For most account data (such as your email address or phone number), you can update this information directly through Account Settings. For data that cannot be self-corrected (such as KYC documents), please contact the support team.

Right to Erasure

You may request that biti baji delete your personal data ("right to be forgotten") where it is no longer necessary for the purposes for which it was collected, where you withdraw consent, or where you believe the data has been processed unlawfully. Please note that this right is not absolute — we may be required to retain certain data for regulatory, legal, or dispute-resolution purposes even after account closure.

Right to Restrict Processing

You have the right to request that we limit the processing of your personal data in certain circumstances — for example, while you are contesting the accuracy of data we hold, or while an erasure request is being assessed. During any such restriction, your data will be stored but not actively processed for operational purposes.

Right to Data Portability

Where your data has been provided to us by you directly and is processed on the basis of your consent or contractual necessity, you may request that we provide it to you in a structured, machine-readable format (such as JSON or CSV) so that you can transfer it to another service provider.

Right to Withdraw Consent

Where biti baji processes your data on the basis of your consent — most notably for the sending of promotional and marketing communications — you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that took place before the withdrawal. You can withdraw marketing consent through Account Settings or by contacting support.

7 Data Security Measures

biti baji takes the security of your personal data very seriously and has implemented a comprehensive set of technical and organisational measures to protect it against unauthorised access, accidental loss, alteration, or disclosure.

Technical Safeguards

• 256-bit SSL/TLS Encryption: All data in transit between your browser and the biti baji platform is encrypted using industry-standard TLS 1.2 or higher.
• Password Hashing: Account passwords are stored as salted cryptographic hashes — never in plain text. Even in the unlikely event of a database breach, your actual password cannot be derived from the stored hash.
• Two-Factor Authentication: Players can enable SMS-based 2FA to add a second layer of verification to the login process. biti baji strongly recommends enabling this feature.
• Firewall and Intrusion Detection: The platform's infrastructure is protected by enterprise-grade firewalls and real-time intrusion detection systems that monitor for suspicious access patterns.
• Access Controls: Internal access to player data is restricted on a need-to-know basis. Staff access is role-based, logged, and subject to regular audit review.

Organisational Safeguards

• All staff who handle personal data receive mandatory data protection training
• Data processing activities are subject to periodic internal review
• Third-party vendors undergo security assessment before being granted access to platform systems
• A formal incident response plan is in place to manage and mitigate data breaches

Data Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, biti baji will notify affected players without undue delay once the breach has been assessed and contained. Notification will be sent to the email address registered on your account and will include details of the nature of the breach, the data affected, the likely consequences, and the steps biti baji is taking to address it.

8 Changes to This Policy

biti baji reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform features. When we make material changes to this policy, we will update the "Last Reviewed" date at the top of this page and, where the changes are significant, we will notify you directly via email or an in-platform notification.

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your personal data. Your continued use of the biti baji platform following the publication of an updated Privacy Policy constitutes your acceptance of the changes.

If you have questions or concerns about this Privacy Policy, or if you wish to exercise any of your data rights, please contact the biti baji support team at [email protected]. Our data protection contact is available during standard business hours (Bangladesh Standard Time, UTC+6), and the general support team is available 24/7 via live chat for urgent account security matters.