Privacy Policy — bajislot

1 Introduction and Scope

This Privacy Policy ("Policy") is issued by bajislot ("bajislot", "we", "us", "our") and applies to all personal data collected from individuals ("you", "the Player", "the User") who access or interact with the bajislot website, mobile platform, live casino, sports betting services, and any other digital product or communication channel operated under the bajislot brand.

By registering an account, depositing funds, placing wagers, or otherwise using any bajislot service, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you should not use the bajislot platform.

bajislot operates with a primary user base in Bangladesh and processes the personal data of Bangladeshi players in BDT (Bangladeshi Taka). Our data practices are aligned with internationally recognised privacy standards, and we are committed to applying those standards consistently for the benefit of all players on our platform regardless of their location.

This Policy should be read alongside the bajislot Terms & Conditions and Responsible Gaming policy, all of which together constitute the full agreement governing your relationship with bajislot.

2 Data We Collect

bajislot collects personal data through several channels: directly from you when you register and interact with our platform, automatically through your device and browser as you use our services, and from trusted third-party partners such as payment processors and identity verification providers. The categories of personal data we collect are set out in the table below.

bajislot does not knowingly collect personal data from individuals under the age of 18. If we discover that data has been collected from a minor, that account will be immediately closed, all funds forfeited in line with our Terms & Conditions, and the data deleted from our systems. 18+ age verification is a mandatory step in the registration process.

3 How We Use Your Data

bajislot processes your personal data only for specific, documented purposes. We do not use your data for purposes beyond those listed below without first obtaining your explicit consent or as otherwise required by applicable law. The primary purposes for which we use your personal data are:

• Account creation and management: To register your player account, verify your identity, maintain your account settings, and manage your ongoing relationship with bajislot.
• Service delivery: To process deposits and withdrawals in BDT via bKash, Nagad, Rocket, Upay, and other supported payment methods; to credit winnings; to apply bonuses; and to facilitate your gaming activity across slots, live casino, and cricket betting.
• Legal and regulatory compliance: To fulfil our Know Your Customer (KYC) and Anti-Money Laundering (AML) obligations, to respond to lawful requests from authorities, and to maintain transaction records as required by applicable financial regulations.
• Fraud prevention and platform security: To detect, investigate, and prevent fraudulent activity, unauthorised account access, money laundering, bonus abuse, and other prohibited conduct as defined in our Terms & Conditions.
• Responsible gaming: To monitor gaming patterns for signs of problem gambling behaviour, to apply self-exclusion and deposit limit requests, and to provide appropriate interventions and referrals as part of our Responsible Gaming programme.
• Customer support: To respond to your queries, complaints, and support requests submitted via live chat or email, and to maintain records of those communications to improve our service quality.
• Platform improvement: To analyse usage patterns, test new features, optimise platform performance, and enhance the overall player experience on bajislot.
• Marketing communications: Where you have opted in to receive them, to send you promotional offers, bonus notifications, and information about new games, features, and seasonal campaigns relevant to Bangladeshi players — including Eid, Pohela Boishakh, BPL season, and IPL season promotions. You may opt out of marketing communications at any time.

bajislot relies on the following legal bases for processing personal data: (a) contractual necessity — processing required to fulfil the bajislot Terms & Conditions; (b) legal obligation — processing required to comply with KYC, AML, and financial record-keeping requirements; (c) legitimate interest — processing for fraud prevention, platform security, and service improvement; and (d) consent — processing for marketing communications and non-essential cookies, where applicable.

4 Cookies and Tracking Technologies

bajislot uses cookies and similar tracking technologies (collectively "cookies") on its platform to ensure the site functions correctly, to remember your preferences, and to gather analytical data that helps us improve the player experience. A cookie is a small text file placed on your device by a website server; it cannot run code or transmit viruses.

The categories of cookies used by bajislot are as follows:

• Strictly necessary cookies: These cookies are essential for the bajislot platform to function. They enable core features such as secure login sessions, account authentication, game loading, and payment processing. These cookies cannot be disabled without significantly impairing platform functionality. No consent is required for strictly necessary cookies.
• Performance and analytics cookies: These cookies collect anonymised information about how players interact with bajislot — such as which pages are visited most frequently, how long sessions last, and where users navigate from and to. This data is used exclusively in aggregate form to improve platform performance. We use privacy-conscious analytics tools for this purpose.
• Functional cookies: These cookies remember your preferences and choices on the bajislot platform — such as your preferred language settings, display preferences, and any responsible gaming limits you have set — so that you do not need to re-enter them on every visit.
• Session management cookies: These are temporary cookies that expire when you close your browser. They maintain the continuity of your gaming session and ensure that your wager history and balance are correctly attributed to your account throughout a single visit.

bajislot does not use third-party advertising cookies or sell cookie data to external advertising networks. Your browsing behaviour on bajislot is not shared with social media platforms or ad exchanges for the purpose of serving targeted advertisements on other websites.

You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will prevent you from logging into your bajislot account and using core platform features. For performance and functional cookies, you may opt out without affecting your ability to play.

5 Data Sharing and Third Parties

bajislot does not sell, rent, or trade your personal data to any third party for commercial purposes. We share your data only where strictly necessary to deliver our services, comply with legal obligations, or protect the security of our platform. The categories of third parties with whom data may be shared are described below:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, Visa, and Mastercard and their respective processing networks receive the financial data necessary to execute your deposit and withdrawal transactions. These providers operate under their own privacy policies and are bound by industry-standard financial data protection requirements.
• Identity verification providers: bajislot uses third-party KYC and AML compliance providers to verify the identity documents submitted during account registration and during enhanced verification checks. These providers process identity data strictly for verification purposes and are contractually prohibited from using it for any other purpose.
• Game providers: Integrated game studios — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — receive the technical and session data necessary to deliver their games within the bajislot platform. Game providers do not receive your financial or identity data beyond the session token required to authenticate your game session.
• Customer support platforms: Our live chat and support ticketing infrastructure may be hosted by third-party customer service technology providers. Support communications are stored on their systems subject to data processing agreements that bind them to confidentiality and security standards equivalent to those applied by bajislot.
• Law enforcement and regulatory bodies: bajislot will disclose personal data to law enforcement agencies, financial intelligence units, or other government bodies when required to do so by a lawful order, warrant, or regulation. In such cases, bajislot will disclose only the minimum data necessary to comply with the request.
• Business successors: In the event of a merger, acquisition, or asset sale involving bajislot, player personal data may be transferred to the acquiring entity as part of that transaction. Players will be notified of any such transfer and the privacy practices of the successor entity in advance.

All third parties with whom bajislot shares personal data are subject to contractual data processing agreements that require them to implement appropriate technical and organisational security measures, to process data only as instructed by bajislot, and to delete or return data when the processing relationship ends.

6 Data Retention and Storage

bajislot retains your personal data for as long as is necessary to fulfil the purposes described in this Policy, or as required by applicable legal, regulatory, and financial record-keeping obligations. The following retention periods apply as a baseline:

• Account and identity data: Retained for the duration of your active account plus a minimum of five (5) years following permanent account closure, to comply with AML and financial record-keeping regulations.
• Transaction and financial records: Retained for a minimum of five (5) years from the date of each transaction, in line with standard financial compliance requirements.
• Gaming activity logs: Retained for a minimum of three (3) years to support dispute resolution, responsible gaming monitoring, and platform integrity investigations.
• KYC verification documents: Retained for the duration of the account relationship plus five (5) years post-closure. Physical copies (if any) are destroyed securely; digital copies are deleted from our active systems after the retention period.
• Support communications: Retained for up to two (2) years from the date of the last communication in a support thread, to enable continuity of service and quality review.
• Marketing consent records: Retained for the duration of your opt-in consent plus three (3) years to evidence compliance with consent-based marketing obligations.
• Technical and usage logs: Typically retained for thirteen (13) months for analytics comparison purposes, then anonymised or deleted.

All personal data held by bajislot is stored on servers secured with 256-bit SSL/TLS encryption at rest and in transit. Access to personal data within bajislot's systems is restricted to authorised personnel on a strict need-to-know basis. Internal access logs are maintained and reviewed regularly. bajislot conducts periodic data audits to ensure that data no longer required for its original purpose is securely deleted or anonymised in a timely manner.

Where data is processed by third-party providers (see Section 5), those providers are contractually required to implement equivalent retention and security standards and to delete data within agreed timeframes once the processing purpose has been fulfilled.

7 Your Privacy Rights

As a player on bajislot, you hold a number of rights in relation to your personal data. bajislot is committed to facilitating the exercise of these rights promptly and without unnecessary friction. The rights available to you are described below:

• Right of access: You have the right to request a copy of the personal data that bajislot holds about you. We will provide this in a commonly used electronic format within a reasonable timeframe following identity verification.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. For most account data (email address, contact number, address), you can update this directly within your account settings. For identity document data, please contact support.
• Right to erasure: In certain circumstances, you have the right to request that bajislot delete your personal data. This right is not absolute — we are required to retain certain data for legal and regulatory compliance purposes (see Section 6). Where erasure is not possible in full, we will explain which data must be retained and why.
• Right to restriction of processing: You have the right to request that bajislot restricts the processing of your data in specific circumstances — for example, while a data accuracy dispute is being resolved, or where you have objected to processing pending verification of legitimate grounds.
• Right to data portability: Where technically feasible and where processing is based on your consent or contractual necessity, you may request that your personal data be provided to you in a structured, machine-readable format for transfer to another service provider.
• Right to object to marketing: You may withdraw your consent to receive marketing communications from bajislot at any time by clicking the unsubscribe link in any marketing email, adjusting your account notification preferences, or contacting our support team. Withdrawal of marketing consent does not affect your ability to use the platform.
• Right to lodge a complaint: If you believe that bajislot has handled your personal data in a manner inconsistent with this Policy, you have the right to raise a formal complaint with bajislot's data team in the first instance, and subsequently with the relevant data protection authority if your complaint is not resolved to your satisfaction.

To exercise any of the rights described above, please contact bajislot's support team via live chat (available 24/7) or by emailing support@bajislot. We will acknowledge all data rights requests within 72 hours and aim to resolve them within 30 calendar days. Where a request is particularly complex or involves a high volume of data, we will notify you if additional time is required.

bajislot may request additional identity verification before fulfilling a data rights request to protect against unauthorised access to another player's personal data. This is a standard security measure and not an attempt to obstruct the exercise of your rights.

8 Contact and Data Queries

bajislot takes data privacy seriously and maintains a dedicated point of contact for all privacy-related queries, data rights requests, and complaints related to the handling of personal data on our platform.

For all privacy enquiries, please contact the bajislot data team using the following channels:

• Live Chat: Available 24 hours a day, 7 days a week directly on the bajislot platform. Live chat is the fastest channel for routine data queries, consent withdrawal, and account-level data corrections.
• Email: support@bajislot — for formal data rights requests, complaints, or queries that require a written response. Please include your registered account email and a brief description of your request in the subject line.

bajislot will respond to all privacy-related email enquiries within 72 hours during normal business hours (Bangladesh Standard Time, UTC+6). Complex data rights requests — such as full data subject access requests or erasure requests requiring legal review — will be acknowledged within 72 hours with a projected resolution timeline communicated to you at that point.

bajislot reviews and updates this Privacy Policy periodically to reflect changes in our data practices, platform features, or applicable legal requirements. The "Last Updated" date at the top of this document indicates when the most recent substantive changes were made. Where changes are material, registered players will be notified via their registered email address and via a notice displayed on the bajislot platform for a minimum of 14 days prior to the changes taking effect.

Your continued use of the bajislot platform following the effective date of any revised Privacy Policy constitutes your acknowledgement of the updated terms. If you have any concerns about any update to this Policy, please contact our support team before continuing to use the platform.