22baji Privacy Policy

22baji uses your personal information for the following specific purposes:

• Account Management: To create and maintain your Account, authenticate your identity at login, and administer your Account settings and preferences.
• Service Delivery: To process deposits and withdrawals, settle sports bets, operate casino and crash game sessions, and provide all features of the Platform that you access.
• Identity and Age Verification: To confirm that you are aged 21 or above and that the identity information you have provided is accurate, in compliance with responsible gaming obligations.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, unauthorised access, money laundering, bonus abuse, and other prohibited conduct as defined in our Terms & Conditions.
• Customer Support: To respond to your enquiries, resolve disputes, process complaints, and provide assistance via [email protected] and our live-chat service.
• Responsible Gaming: To monitor your gaming activity for indicators of problem gambling, enforce self-exclusion requests, and apply deposit limits and session time controls as requested.
• Platform Improvement: To analyse usage patterns, identify technical errors, optimise game loading performance, and develop new features that improve the experience for players across Bangladesh.
• Promotional Communications: Where you have opted in, to send you notifications about new promotions, bonuses, seasonal offers (such as Eid or Pohela Boishakh specials), and platform updates by SMS or email.
• Legal Compliance: To comply with applicable laws, respond to lawful requests from regulatory or law enforcement authorities, and enforce our Terms & Conditions.

22baji uses cookies and similar tracking technologies to improve your experience on the Platform and to support our operational and analytical functions. The types of cookies we use include:

• Strictly Necessary Cookies: Essential for the Platform to function correctly. These include session authentication cookies that keep you logged in while you navigate between pages. You cannot opt out of these cookies and continue to use the Platform.
• Functional Cookies: Used to remember your preferences such as language settings, currency display (Bangladeshi Taka, ৳), and responsible gaming settings applied to your Account.
• Analytical Cookies: Used to collect aggregated, anonymised data about how users navigate the Platform — for example, which game categories are most visited and how long sessions typically last. This data is used solely for Platform improvement purposes.
• Security Cookies: Used to support fraud detection mechanisms and to identify unusual or potentially malicious patterns in session behaviour.

You may manage or disable non-essential cookies through your browser settings. Note that disabling certain cookies may affect the functionality of parts of the Platform, including game loading and session management. Most mobile browsers (Chrome, Firefox, Samsung Internet) include cookie management options in their privacy settings menus.

22baji does not sell your personal data. We may share your information only in the following limited and controlled circumstances:

• Payment Processors: We share the minimum necessary financial identifiers with bKash, Nagad, Rocket, and Upay to process your deposits and withdrawals. These providers operate under their own privacy policies and are independently responsible for the data they hold.
• Game Providers: To deliver casino and crash game services, certain session data (such as an anonymised player ID and bet amount) is shared with game providers including Pragmatic Play, Evolution Gaming, Spribe, and others. No directly identifying personal information (such as your real name or mobile number) is passed to game providers.
• Identity Verification Partners: Where third-party KYC services are used to assist with document verification, your submitted ID documents may be processed by those services under strict data processing agreements.
• Legal and Regulatory Authorities: We may disclose your personal data to law enforcement agencies, government bodies, or regulatory authorities when required to do so by applicable law, a court order, or a lawful official request. We will, where legally permitted, notify you of any such disclosure.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of 22baji's business, your personal data may be transferred to the acquiring party as part of that transaction, subject to equivalent privacy protections.

All third parties with whom we share data are contractually obligated to use it only for the purposes specified and to apply appropriate security measures consistent with the standards described in this Policy.

22baji implements a range of technical and organisational measures to protect your personal data against unauthorised access, loss, alteration, or destruction. These include:

• SSL/TLS Encryption: All data transmitted between your browser or mobile app and our servers is encrypted using TLS 1.2 or higher. This includes registration forms, login sessions, deposit flows, and support messages.
• Access Controls: Access to personal data within our systems is restricted on a need-to-know basis. Staff who handle user data receive regular privacy and security training.
• Secure Storage: Personal data is stored on servers with physical and logical access controls, firewall protections, and regular vulnerability assessments.
• Password Protection: Account passwords are stored using one-way hashing algorithms. We do not store or have access to your plaintext password.
• Fraud Monitoring: Automated systems continuously monitor account activity for signs of unauthorised access or fraudulent behaviour and trigger alerts for human review where anomalies are detected.

While we take all reasonable steps to protect your data, no online platform can guarantee absolute security. You are responsible for keeping your login credentials confidential and for notifying us immediately at [email protected] if you believe your Account has been compromised.

22baji retains your personal data for as long as is necessary to fulfil the purposes for which it was collected. Specific retention periods are as follows:

• Active Account Data: Retained for the full duration of your Account's active status plus a minimum post-closure retention period as required for legal, audit, and dispute resolution purposes.
• Transaction Records: Financial transaction records, including deposit and withdrawal histories, are retained for a minimum of five years from the date of the transaction to meet anti-money-laundering record-keeping requirements.
• Identity Verification Documents: Copies of ID documents submitted during KYC are retained for the period required by applicable law and then securely deleted.
• Support Communications: Emails and chat transcripts with our support team are retained for up to two years from the date of the last communication to assist with follow-up enquiries and dispute history.
• Analytical Data: Anonymised or aggregated usage analytics may be retained indefinitely as they do not constitute personal data.

Upon expiry of applicable retention periods, personal data is securely deleted or anonymised in a way that prevents re-identification.

You have the following rights with respect to the personal data that 22baji holds about you. To exercise any of these rights, please contact us at [email protected] with your registered Account username and a clear description of your request.

• Right of Access: You may request a copy of the personal data we hold about you, including the categories of data, the purposes for which it is processed, and any third parties with whom it has been shared.
• Right to Rectification: You may request correction of any personal data that is inaccurate or incomplete. Minor updates such as phone number or email address changes can often be made directly through your Account settings.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to overriding legal retention obligations (such as transaction records required for anti-money-laundering compliance).
• Right to Restrict Processing: You may request that we temporarily restrict the processing of your personal data while a correction or erasure request is being assessed.
• Right to Withdraw Consent: Where processing is based on your consent (for example, receiving promotional communications), you may withdraw that consent at any time by contacting [email protected] or updating your Account notification preferences.
• Right to Complain: If you are dissatisfied with how 22baji has handled your personal data, you may raise a complaint directly with us at [email protected]. We aim to acknowledge all privacy complaints within 24 hours and resolve them within 14 business days.

With your consent at registration or at any subsequent point, 22baji may send you promotional communications by SMS or email. These may include:

• Welcome bonus and first-deposit offer notifications.
• Seasonal promotions tied to Bangladesh cricket events (BPL, T20 World Cup, IPL) or cultural occasions (Eid, Pohela Boishakh, Victory Day, Ramadan).
• Reload bonus and cashback offer announcements.
• Platform updates, new game launches, and feature announcements.

You may opt out of marketing communications at any time by replying STOP to an SMS, clicking the unsubscribe link in a promotional email, or contacting [email protected] with an opt-out request. Opting out of marketing does not affect transactional communications such as deposit confirmations, withdrawal notifications, or security alerts, which are sent regardless of marketing preferences.

The 22baji Platform may reference third-party services such as payment providers (bKash, Nagad, Rocket, Upay) and game studios (Pragmatic Play, Evolution Gaming, Spribe, Ezugi, Microgaming, NetEnt). When you interact with these services — for example, by initiating a bKash deposit — you are also subject to the privacy practices of that third party.

22baji is not responsible for the content, privacy policies, or data-handling practices of any third-party service provider. We encourage you to review the privacy policy of any third-party service before providing them with your personal information. Our inclusion of a payment method or game provider on the Platform does not constitute an endorsement of their privacy practices.

The 22baji Platform is strictly intended for persons aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from a person under the minimum age, we will immediately close the associated Account, delete the data, and where applicable, refund any deposits made net of any withdrawals already processed, subject to investigation.

If you believe that a minor has registered on the Platform or has provided us with their personal data, please contact us immediately at [email protected] so that we can take appropriate action. Parents and guardians are encouraged to use device-level parental controls and responsible gaming tools to prevent underage access to gambling platforms.

22baji reserves the right to update or amend this Privacy Policy at any time. When material changes are made, we will post the revised Policy on this page with an updated effective date. We may also notify registered users of significant changes via the mobile number or email address associated with their Account.

Your continued use of the Platform following the publication of a revised Policy constitutes your acceptance of the updated terms. We recommend reviewing this page periodically, particularly before making deposits or engaging with new Platform features. If you do not agree with changes to this Policy, you should stop using the Platform and contact [email protected] to request Account closure.

If you have any questions, concerns, or requests relating to this Privacy Policy or the personal data we hold about you, please contact the 22baji privacy team:

• Email: [email protected] (plain text — not a clickable link)
• Response Time: We aim to acknowledge all privacy-related enquiries within 24 hours and to provide a substantive response within 7 business days, measured in Bangladesh Standard Time (BST, UTC+6).
• Postal Enquiries: For formal written requests relating to data access or erasure rights, please send your request in writing to [email protected] with the subject line "Privacy Request" and include your Account username and a copy of your identity document for verification purposes.