baijid Privacy Policy — Your Data, Our Responsibility

baijid collects personal information from players in several ways: information you provide directly when registering or using the platform, information generated automatically through your use of the platform, and information received from third-party service providers. The categories of information collected are described in detail below.

Information You Provide Directly

When you register a baijid account, update your profile, complete KYC verification, make a deposit or withdrawal, contact customer support, or participate in a promotion, you may provide us with some or all of the following:

• Identity information: Full legal name, date of birth, gender, and nationality.
• Contact information: Email address, mobile phone number, and country of residence.
• Verification documents: Copies of your National Identity Card (NID), passport, birth certificate, or other government-issued identification submitted during KYC verification.
• Payment information: bKash or Nagad mobile wallet numbers, Rocket or Upay account references, cryptocurrency wallet addresses, and the last four digits of any Visa or Mastercard used. Full card numbers are processed by our payment partners and are never stored on baijid systems.
• Communication records: The content of any messages, emails, or live chat conversations you have with the baijid support team, including your stated purpose and the date and time of contact.
• Responsible gaming preferences: Any self-exclusion requests, deposit limit settings, session time limits, or cool-off periods you set through your account settings or by contacting support.

Information Collected Automatically

When you access the baijid platform, certain technical information is collected automatically by our systems. This includes:

Information from Third Parties

baijid may receive information about you from third-party service providers in the course of operating the platform. This includes identity verification data from KYC service providers, fraud risk scores from payment processors, transaction confirmation data from mobile money operators such as bKash, Nagad, and Rocket, and geolocation verification data from IP intelligence services. All third-party providers who supply data to baijid are contractually required to handle that data in compliance with applicable data protection standards.

baijid does not sell, rent, or trade your personal data to any third party. We share your personal information only in the limited circumstances described below, and only with parties who are bound by appropriate contractual data protection obligations.

Essential Service Providers

To operate the platform and deliver services to you, baijid works with a number of third-party service providers. These providers are given access to only the personal data they need to perform their specific function and are prohibited from using that data for any other purpose. Categories of essential service providers include:

• Payment processors: bKash, Nagad, Rocket, Upay, and crypto payment gateway providers who process your deposit and withdrawal transactions.
• KYC and identity verification providers: Third-party services that assist baijid in verifying player identity documents and age.
• Game technology providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other studios whose game platforms integrate with baijid. These providers may receive a session token and anonymised player identifier sufficient to run the game but do not receive your full personal profile.
• IT infrastructure providers: Cloud hosting, content delivery network (CDN), and database providers that store and process platform data on baijid's behalf.
• Fraud prevention and security providers: Services that analyse transaction and session data for fraud risk signals.

Legal and Regulatory Disclosure

baijid may disclose your personal data to law enforcement agencies, regulatory authorities, financial intelligence units, or courts of competent jurisdiction where we are required to do so by applicable law, court order, or lawful government request. In such cases, baijid will disclose only the minimum information required to satisfy the legal obligation and will notify the affected player where it is legally permissible to do so.

Business Transfers

In the event that baijid undergoes a merger, acquisition, restructuring, or sale of all or part of its business assets, player data held by baijid may be transferred to the acquiring entity as part of that transaction. In such an event, baijid will notify affected players by email before their data is transferred to a new data controller, and the acquiring entity will be required to honour the commitments made in this Privacy Policy.

baijid retains personal data only for as long as is necessary to fulfil the specific purpose for which it was collected, or for as long as is required by applicable law or regulation. When personal data is no longer required, it is securely deleted or anonymised in accordance with our internal data lifecycle management procedures.

Retention Periods by Data Category

Data Storage Location

baijid stores personal data on secure cloud infrastructure provided by reputable international hosting providers. Data may be stored on servers located outside Bangladesh. Where data is transferred internationally, baijid ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that described in this Privacy Policy, regardless of the storage location.

Secure Deletion

When personal data reaches the end of its applicable retention period, baijid deletes it using secure overwriting methods that prevent reconstruction of the original data. KYC documents are deleted from baijid systems following the retention period and are not archived in any retrievable format beyond that point.

baijid takes the security of your personal data extremely seriously. We implement a layered set of technical and organisational security measures designed to protect your data against unauthorised access, disclosure, alteration, or destruction. These measures are reviewed and updated regularly to keep pace with evolving security standards and threat landscapes.

Technical Safeguards

• TLS/SSL Encryption: All data transmitted between your browser or app and baijid's servers is encrypted using Transport Layer Security (TLS 1.2 or higher). Connections over plain HTTP are automatically redirected to HTTPS.
• At-Rest Encryption: Sensitive personal data stored in baijid's databases, including KYC documents, payment references, and account credentials, is encrypted at rest using AES-256 encryption.
• Password Hashing: Account passwords are never stored in plain text. They are hashed using a one-way cryptographic algorithm with salting before storage, meaning that even baijid's own staff cannot retrieve your password.
• Two-Factor Authentication (2FA): Players are encouraged to enable 2FA on their baijid account for additional login security. 2FA uses a time-based one-time password (TOTP) delivered to your registered mobile device.
• Session Timeout: Inactive sessions are automatically terminated after a defined period to prevent unauthorised access from shared or unattended devices.
• Intrusion Detection: baijid operates automated intrusion detection systems that monitor for unusual access patterns, multiple failed login attempts, and other security anomalies in real time.

Organisational Safeguards

• Access to player personal data within baijid's team is restricted on a strict need-to-know basis. Staff who do not require access to personal data to perform their role are not granted it.
• All staff who have access to personal data are required to complete data protection training and are bound by confidentiality obligations.
• Third-party service providers who process data on baijid's behalf are subject to data processing agreements that require them to implement and maintain appropriate security standards.
• baijid conducts periodic internal reviews of its data security practices and acts promptly to address any identified vulnerabilities.

Data Breach Response

In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of affected players, baijid will notify affected players by email as promptly as is practically possible. The notification will describe the nature of the breach, the categories of data affected, the likely consequences, and the measures baijid has taken or is taking to address the breach and mitigate its effects.