bipbaje Privacy Policy

1 Data We Collect

bipbaje collects personal data in two broad categories: information you provide directly when you register and use the platform, and information gathered automatically as you interact with our website and games. We limit data collection to what is strictly necessary to deliver a safe , functional, and legally compliant gaming service.

1.1 Information You Provide Directly

• Registration data: Full legal name, date of birth, gender, residential address (including city and district within Bangladesh), mobile number, and email address
• Identity verification documents: National ID card scan, passport copy, or driving licence image submitted during KYC review
• Payment information: Your registered bKash, Nagad, Rocket, or Upay mobile number; bank account details for Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, or Sonali Bank withdrawals; Visa or Mastercard details where applicable
• Communications: Any messages, support tickets, live chat transcripts, or emails you send to the bipbaje support team
• Responsible gaming declarations: Self-exclusion requests, deposit limit settings, and cooling-off period selections made via your account dashboard

1.2 Information Collected Automatically

• Device and browser data: IP address, device type, operating system, browser version, screen resolution, and preferred language setting
• Usage and behavioural data: Pages visited, game sessions started, bets placed, session duration, click paths, and in-game events
• Transaction logs: Deposit timestamps, withdrawal requests, bonus activations, and wagering history associated with your account
• Geolocation data: Approximate location derived from your IP address, used solely to apply jurisdiction-appropriate restrictions and to detect potentially fraudulent logins from unexpected locations
• Cookie and tracking data: Session cookies, preference cookies, and analytics identifiers — see Section 5 for full details

2 How We Collect Your Data

bipbaje collects your personal data through the following primary channels:

• Account registration form: When you create a bipbaje account at bipbaje.net, you provide your name, contact details, date of birth, and preferred payment method.
• KYC verification portal: When you submit identity documents to complete account verification before your first withdrawal.
• Deposit and withdrawal flows: When you initiate a transaction via bKash, Nagad, Rocket, or any supported banking partner, transaction metadata is recorded in your account ledger.
• Game and betting activity: Our platform records all wagers, game outcomes, and betting history associated with your account in real time.
• Customer support interactions: Any contact you initiate via live chat, email to [email protected], or WhatsApp creates a support record linked to your account.
• Cookies and analytics tools: Automated data collection via browser cookies and server-side analytics begins when you first visit bipbaje.net, even before you register.
• Third-party payment processors: When a transaction is processed by a payment partner (e.g., bKash API), that partner may transmit transaction confirmation metadata to bipbaje for reconciliation purposes.

3 Use of Personal Data

bipbaje uses the personal data we hold about you for specific, documented purposes. We do not use your data for any purpose that is incompatible with the reason it was originally collected. The table below summarises our key processing activities:

bipbaje will never sell, rent, or trade your personal data to external marketing companies or data brokers. Promotional communications are sent only to players who have explicitly opted in during registration or through their account preferences panel. You may withdraw your consent to receive marketing messages at any time by updating your notification settings in your dashboard or by contacting [email protected].

4 Data Sharing & Third Parties

bipbaje shares your personal data only with trusted third-party partners who are strictly necessary to the operation of the platform, and only to the extent required for their specific function. All third-party data processors are bound by contractual data protection obligations consistent with this Privacy Policy.

4.1 Categories of Third-Party Processors

• Payment processors: bKash, Nagad, Rocket, Upay, and our banking partners receive only the transaction data necessary to process your deposit or withdrawal. These providers operate under their own privacy and security frameworks.
• Game content providers: Studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive your anonymised player session identifier for game integrity and RNG audit purposes. They do not receive your name, contact details, or payment information.
• KYC and identity verification services: Third-party identity verification platforms may process your submitted documents to confirm your identity. These providers are contractually prohibited from retaining or reusing your documents beyond the verification task.
• Analytics and security platforms: We use reputable analytics and fraud-detection services to monitor platform performance and detect suspicious activity. These services process usage and device data in pseudonymised form.
• Cloud infrastructure and hosting: bipbaje's platform is hosted on secure servers. Our infrastructure partners process data only as instructed and under strict data processing agreements.

4.2 Legal Disclosures

bipbaje may disclose personal data without your consent where required to do so by applicable law, court order, or regulatory authority. In such cases, we will disclose only the minimum data necessary to fulfil the legal obligation and will notify you where we are legally permitted to do so.

5 Cookies & Tracking Technologies

bipbaje uses cookies and similar browser-based tracking technologies to ensure the platform functions correctly, to remember your preferences, and to analyse how players interact with our site so we can continually improve the experience.

5.1 Types of Cookies We Use

Strictly necessary cookies cannot be disabled as they are essential to platform operation. You may disable functional and analytics cookies through your browser's privacy settings. Please note that disabling certain cookies may affect your experience on bipbaje.net — for example, your login session may not persist across page loads if session cookies are blocked.

6 Data Retention

bipbaje retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following retention periods apply:

• Active account data: Retained for the full duration of your account's active status plus a minimum of 5 years following account closure, to comply with anti-money laundering record-keeping obligations.
• KYC identity documents: Retained for a minimum of 5 years following account closure or the last transaction, in line with regulatory requirements.
• Transaction and betting history: Retained for 5 years from the date of each transaction for financial audit and AML compliance purposes.
• Customer support communications: Retained for 3 years from the date of each interaction to enable us to resolve recurring issues and maintain a consistent support record.
• Marketing consent records: Retained for the duration of your active marketing opt-in, plus 1 year following withdrawal of consent as evidence of compliance.
• Analytics and usage data: Pseudonymised analytics data is retained for up to 24 months, after which it is either deleted or fully anonymised.
• Self-exclusion records: Retained indefinitely or for the duration specified in the self-exclusion request, to prevent the re-registration of excluded players.

When retention periods expire, personal data is securely deleted or anonymised so that it can no longer be linked to any individual. Physical documents (if any) are destroyed using certified secure disposal methods.

7 Data Security Measures

bipbaje implements a layered approach to data security, combining technical, organisational, and procedural safeguards to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure.

7.1 Technical Safeguards

• 256-bit SSL/TLS encryption on all pages and API endpoints — your data is always encrypted in transit between your device and bipbaje's servers
• Encrypted data storage — sensitive fields including passwords (stored as salted hashes), payment details, and identity document images are encrypted at rest
• Two-factor authentication (2FA) — optional for players, mandatory for all bipbaje staff accessing internal systems
• Automated intrusion detection and real-time alerting for unusual access patterns or brute-force login attempts
• Regular penetration testing conducted by independent security professionals

7.2 Organisational Safeguards

• Access to personal data is restricted on a strict need-to-know basis — only staff whose role requires access to specific data categories are granted that access
• All bipbaje employees and contractors with access to personal data are bound by confidentiality obligations and receive annual data protection training
• A designated Data Protection contact oversees compliance with this Privacy Policy and handles all data subject requests

Despite these measures, no online platform can guarantee absolute security. In the unlikely event of a personal data breach that poses a risk to your rights, bipbaje will notify affected players promptly via the contact details registered to their account.

8 Your Privacy Rights

As a bipbaje player, you have the following rights with respect to your personal data. To exercise any of these rights, submit a written request to [email protected] with the subject line "Privacy Rights Request". We will respond within 14 business days (Bangladesh Standard Time, UTC+6).

• Right of Access: You may request a copy of all personal data bipbaje holds about you, along with information about how it is being used and with whom it has been shared.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you may request that it be corrected. For name or date-of-birth corrections, supporting documentation will be required.
• Right to Erasure ("Right to Be Forgotten"): You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to our legal retention obligations (see Section 6).
• Right to Restriction of Processing: You may request that we temporarily suspend certain processing activities — for example, while a rectification request is being assessed.
• Right to Data Portability: You may request your personal data in a structured, machine-readable format (JSON or CSV) for transfer to another service provider.
• Right to Object: You may object to processing based on legitimate interest, including direct marketing. Where you object to marketing, we will cease all promotional communications within 5 business days.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing emails), you may withdraw consent at any time without affecting the lawfulness of prior processing.

9 Children's Privacy

bipbaje is strictly an adults-only platform. We do not knowingly collect, store, or process the personal data of any person under the age of 18. All registration flows include a date-of-birth verification step, and KYC procedures are designed to detect and reject underage applicants.

If bipbaje becomes aware that a registered account belongs to a player under the age of 18, the account will be immediately suspended, all funds will be returned to the originating payment method, and all personal data associated with the account will be securely deleted. If you are a parent or guardian and believe your child has registered on bipbaje, please contact us immediately at [email protected] and we will act without delay.

10 Policy Amendments & Contact

10.1 Amendments to This Policy

bipbaje reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. When material changes are made, the "Last Updated" date at the top of this page will be revised and, where feasible, registered players will be notified via their registered email address or via an in-platform notification upon next login. We encourage you to review this policy periodically. Continued use of bipbaje after the effective date of any revision constitutes acceptance of the updated policy.

10.2 Contacting Us About Privacy

For any questions, concerns, or requests relating to this Privacy Policy or bipbaje's data practices, please contact our Data Protection team:

• Email: [email protected] — subject line: "Privacy Enquiry"
• Live Chat: Available 24/7 via your bipbaje account dashboard
• Response time: All privacy enquiries are acknowledged within 2 business hours (BST, UTC+6) and fully resolved within 14 business days

We take every privacy enquiry seriously and are committed to resolving all concerns fairly, transparently, and promptly. If you are unsatisfied with our response, you may escalate your complaint to the relevant data protection authority applicable in your jurisdiction.