Babajee Privacy Policy – Your Data, Your Rights, Our Responsibility

Babajee is an online gaming and sports betting platform operated for players in Bangladesh and other permitted jurisdictions. When this Privacy Policy refers to "Babajee", "we", "us" or "our", it means the entity responsible for operating the Babajee platform and processing your personal data.

Babajee acts as the data controller for all personal information collected through the platform. This means we determine the purposes and means of processing your data and are responsible for ensuring it is handled lawfully, fairly and transparently.

If you need to contact us about any privacy matter — including exercising your data rights or raising a concern — you can reach us at [email protected]. We aim to respond to all privacy-related enquiries within 30 days.

Babajee collects personal data in several ways — directly from you when you register or use the platform, automatically through your use of our services, and occasionally from third-party sources such as identity verification providers. Here is a breakdown of the categories of data we collect:

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs or biometric data unless specifically required for identity verification purposes and with your explicit consent.

Babajee uses your personal data for specific, clearly defined purposes. We do not use your data in ways that are incompatible with the purposes for which it was originally collected. The main ways we use your data are:

• Account Management: To create and manage your Babajee account, verify your identity and maintain accurate records.
• Transaction Processing: To process deposits, withdrawals and any other financial transactions on the platform.
• Customer Support: To respond to your queries, resolve disputes and provide assistance when you need it.
• Legal Compliance: To meet our obligations under anti-money laundering (AML) regulations, Know Your Customer (KYC) requirements and other applicable laws.
• Fraud Prevention: To detect, investigate and prevent fraudulent activity, cheating and other prohibited conduct on the platform.
• Platform Improvement: To analyse how players use Babajee and improve the platform's features, performance and user experience.
• Responsible Gaming: To monitor gaming patterns and identify players who may need support, in line with our responsible gaming commitments.
• Marketing Communications: To send you promotional offers and updates about Babajee — but only if you have opted in to receive them. You can opt out at any time.

We never use your personal data to make fully automated decisions that have a significant legal or similarly significant effect on you without human review. If you have concerns about how your data is being used, contact us at [email protected].

Babajee processes your personal data on one or more of the following legal bases, depending on the specific purpose:

• Contract Performance: Processing is necessary to fulfil our contractual obligations to you — for example, operating your account and processing your transactions.
• Legal Obligation: Processing is required to comply with applicable laws and regulations, including AML and KYC requirements.
• Legitimate Interests: Processing is necessary for Babajee's legitimate business interests — such as fraud prevention, platform security and improving our services — provided these interests are not overridden by your rights.
• Consent: For certain processing activities — such as sending marketing communications or using non-essential cookies — we rely on your explicit consent. You can withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

Babajee does not sell your personal data. We share your data only where necessary and only with trusted parties who are contractually required to handle it securely and in accordance with applicable data protection laws. The categories of third parties we may share your data with include:

• Payment Processors: To process your deposits and withdrawals securely. All payment partners are PCI-DSS compliant.
• Identity Verification Providers: To carry out KYC checks and verify your identity as required by law.
• Game Providers: Third-party game studios whose games are available on Babajee may receive limited technical data necessary to deliver their games.
• IT and Security Providers: Companies that provide hosting, cybersecurity and platform infrastructure services to Babajee.
• Regulatory and Law Enforcement Authorities: Where we are legally required to disclose information — for example, in response to a court order or regulatory investigation.
• Analytics Providers: To help us understand how the platform is used and improve the player experience. Analytics data is aggregated and anonymised where possible.

All third-party service providers are subject to data processing agreements that require them to implement appropriate technical and organisational security measures and to process your data only for the purposes specified by Babajee.

Babajee uses cookies and similar tracking technologies to make the platform work properly, remember your preferences and understand how players use our services. Here is a summary of the types of cookies we use:

• Essential Cookies: Required for the platform to function. These include session cookies that keep you logged in and security cookies that protect against fraud. These cannot be disabled.
• Functional Cookies: Remember your preferences — such as language settings and display options — so you do not have to set them every time you visit.
• Analytics Cookies: Help us understand how players navigate the platform, which features are most popular and where improvements are needed. Data collected is aggregated and anonymised.
• Marketing Cookies: Used to deliver relevant promotional content to players who have opted in to marketing communications. These are only active if you have given consent.

You can manage or disable non-essential cookies through your browser settings at any time. Note that disabling certain cookies may affect the functionality of the Babajee platform. For more information on managing cookies, refer to your browser's help documentation.

Babajee retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account Data: Retained for the duration of your account and for a minimum of 5 years after account closure, in line with AML and regulatory requirements.
• Transaction Records: Retained for a minimum of 5 years from the date of the transaction, as required by financial regulations.
• KYC Documents: Retained for the period required by applicable anti-money laundering legislation — typically 5 years from the end of the business relationship.
• Support Communications: Retained for up to 3 years from the date of the last communication, unless a longer period is required for dispute resolution.
• Technical and Usage Data: Typically retained for up to 2 years in identifiable form, after which it is anonymised or deleted.

When your data is no longer needed, Babajee securely deletes or anonymises it so that it can no longer be linked back to you. If you request deletion of your account, we will process your request in accordance with our legal retention obligations — some data may need to be retained even after account closure.

Babajee respects your rights over your personal data. Depending on applicable law, you may have the following rights:

• Right of Access: Request a copy of the personal data Babajee holds about you.
• Right to Rectification: Ask us to correct any inaccurate or incomplete personal data.
• Right to Erasure: Request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention requirements.
• Right to Restriction: Ask us to restrict processing of your data in certain circumstances — for example, while a dispute is being resolved.
• Right to Data Portability: Request a copy of your data in a structured, machine-readable format so you can transfer it to another service provider.
• Right to Object: Object to processing of your data based on legitimate interests, including profiling for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on consent, withdraw that consent at any time without affecting prior processing.

To exercise any of these rights, contact us at [email protected] with the subject line "Data Rights Request". We will respond within 30 days. We may need to verify your identity before processing your request.

Babajee takes the security of your personal data seriously. We implement a range of technical and organisational measures to protect your data against unauthorised access, loss, destruction or alteration. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers.
• Encrypted storage of sensitive data, including passwords (which are hashed and never stored in plain text).
• Strict internal access controls — only authorised personnel with a legitimate business need can access personal data.
• Regular security audits and penetration testing by independent cybersecurity specialists.
• Two-factor authentication (2FA) available for all player accounts to add an extra layer of login security.
• Continuous monitoring of our systems for suspicious activity and potential security threats.

While Babajee takes every reasonable precaution to protect your data, no system is completely immune to security risks. In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you without undue delay and take immediate steps to contain and remediate the breach.

Babajee is strictly an adult platform. We do not knowingly collect personal data from anyone under the age of 18. Our registration process includes age verification steps to prevent minors from creating accounts.

If we become aware that we have inadvertently collected personal data from a person under 18, we will delete that data immediately and close the associated account. If you believe a minor has registered on Babajee, please contact us at [email protected] so we can investigate and take appropriate action.

Parents and guardians are encouraged to use parental control tools to prevent minors from accessing online gaming platforms. Babajee supports responsible gaming at every level — and that starts with keeping the platform exclusively for adults.

Babajee may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements or other factors. When we make material changes, we will notify registered players via email or an in-platform notification before the changes take effect.

The "Last Updated" date at the top of this page reflects when the policy was most recently revised. We encourage you to review this page periodically so you are always aware of how your data is being handled. Your continued use of Babajee after any update constitutes acceptance of the revised Privacy Policy.

If you disagree with any changes to this Privacy Policy, you should stop using the platform and contact us to close your account. We will handle any outstanding data in accordance with the version of the policy that was in effect when your data was collected.

If you have any questions, concerns or requests relating to this Privacy Policy or the way Babajee handles your personal data, please get in touch with our team:

• Email: [email protected]
• Subject Line for Data Requests: "Data Rights Request" or "Privacy Enquiry"
• Live Chat: Available 24/7 through the Babajee platform
• Response Time: We aim to respond to all privacy-related queries within 30 days

We take every privacy concern seriously and will always respond promptly and professionally. If you are not satisfied with our response, you have the right to escalate your complaint to the relevant data protection authority in your jurisdiction.

For responsible gaming support or account closure requests, please visit our Responsible Gaming page or contact support directly. All communications are treated with strict confidentiality.