🔒

Data Protection & Privacy Commitment

1baji Privacy Policy

At 1baji, protecting the personal data of every player in Bangladesh is a core responsibility — not an afterthought. This Privacy Policy explains exactly what information we collect, why we collect it, how we store and protect it, and what rights you have over your own data. We believe in full transparency about how your information is handled.

Last updated: January 2026 Jurisdiction: Bangladesh SSL Encrypted Language: English

Please read this policy carefully. By creating an account or continuing to use the 1baji Platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree to the collection and use of your information as described herein, you should not use the 1baji Platform. For questions about this policy, contact us at [email protected].

Privacy at a Glance

Our Core Privacy Commitments

We Never Sell Your Data

1baji does not sell, rent, or trade your personal information to advertisers or data brokers. Your data is used solely to deliver, improve, and protect the 1baji service for you.

SSL Encryption on Every Page

All data transmitted between your device and 1baji servers is protected by TLS 1.2 / 1.3 encryption — the same standard used by Bangladesh's leading banks. No plaintext data is ever transmitted.

You Control Your Data

You have the right to access, correct, and request deletion of your personal information at any time. Submit your request to [email protected] and we will respond within 10 business days.

Minimal Data Collection

We collect only the information strictly necessary to operate your account, process transactions, verify your identity for KYC compliance, and keep the platform secure and fair for all players.

Strict Third-Party Limits

Any third party that receives data from 1baji — such as payment processors like bKash and Nagad — is contractually bound to use that data only for the specific purpose for which it was shared, and no other.

Marketing is Always Opt-In

We will never send you promotional communications without your explicit consent. You can withdraw marketing consent at any time from your account settings or by emailing [email protected].

Section 1

Information We Collect

1baji collects personal information in three primary ways: information you provide directly when registering and using the Platform, information generated automatically through your use of the Platform, and information received from trusted third-party sources such as payment processors and identity verification providers. Below is a detailed breakdown of each category.

Information You Provide Directly

When you create a 1baji account, place bets, make deposits or withdrawals, or contact our support team, you may provide us with the following information:

Identity information: Your full legal name as it appears on your Bangladesh National Identity Card (NID), date of birth, gender, and nationality.
Contact information: Your mobile phone number (Bangladesh-registered), email address, and residential address in Bangladesh (district, city, postal code).
Identity documents: Scanned copies or photographs of your NID, passport, or other government-issued photo ID submitted for KYC verification purposes.
Financial information: Your bKash, Nagad, Rocket, or Upay mobile wallet number; bank account details where applicable (Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank); and Visa or Mastercard details for card-based transactions. Note: full card numbers are never stored on 1baji servers — card processing is handled by PCI-DSS compliant payment partners.
Account credentials: Your chosen username. Passwords are stored in hashed form only — 1baji employees cannot view your plaintext password.
Support communications: The content of messages you send to 1baji support via email, including any attachments, screenshots, or documentation you provide in connection with a support request or dispute.

Information Collected Automatically

When you access or use the 1baji Platform, certain technical and behavioural information is collected automatically through our servers and analytics systems:

Device and technical data: Your IP address, device type (mobile, tablet, desktop), operating system and version, browser type and version, screen resolution, and language settings.
Usage data: Pages viewed, games played, bets placed (including market, selection, stake, and outcome), session start and end times, in-game actions, and navigation paths through the Platform.
Location data: Approximate geographic location derived from your IP address (country and city level only). 1baji does not collect precise GPS-level location data.
Log data: Server access logs including timestamps, HTTP response codes, referring URLs, and error logs generated during your session. Log data is used primarily for security monitoring and platform stability.

Information from Third Parties

In limited circumstances, 1baji may receive personal information about you from trusted third-party sources, including:

Payment processors: Transaction confirmation data (reference numbers, amounts, timestamps) from bKash, Nagad, Rocket, Upay, and card processing partners to reconcile deposits and withdrawals against your 1baji account.
Identity verification providers: Results of automated identity document checks and age verification checks conducted via third-party KYC service providers. 1baji does not receive raw biometric data — only a pass/fail verification result and document type confirmation.
Fraud prevention services: Risk scores and flagging data from fraud detection partners used to identify accounts or transactions that exhibit patterns associated with money laundering, account takeover, or other financial crime.

KYC Identity Data

Identity documents submitted for KYC (Bangladesh NID, passport, etc.) are stored securely and used only for age and identity verification. They are never shared with advertisers or marketing partners.

Card data security: Full card numbers are never stored on 1baji servers. All card transactions are processed by PCI-DSS Level 1 compliant payment partners. 1baji retains only a masked card reference (last 4 digits and card type).

Location data: 1baji collects only approximate, IP-derived location data (country and city level). We do not collect or store precise GPS coordinates from your device at any time.

Data Category	Examples	Collection Method	Required / Optional
Identity information	Full name, date of birth, NID number	Provided by you at registration / KYC	Required
Contact information	Mobile number, email, address	Provided by you at registration	Required
Financial information	bKash / Nagad number, masked card reference	Provided by you during deposits / withdrawals	Required for transactions
Device & technical data	IP address, browser, OS, device type	Collected automatically on Platform access	Automatic
Usage & betting data	Games played, bets placed, session duration	Collected automatically during Platform use	Automatic
Marketing preferences	Email opt-in status, preferred sports/games	Provided by you (optional)	Optional

Section 2

How We Use Your Information

1baji uses the personal information we collect for the following purposes. We only process your data where we have a legitimate basis for doing so — typically because it is necessary to perform our contract with you (i.e., to operate your account), because we have a legal obligation to do so (such as KYC and anti-money-laundering compliance), or because we have a legitimate interest that does not override your privacy rights.

Account Operation and Service Delivery

The primary use of your personal data is to create and maintain your account, process deposits and withdrawals via bKash, Nagad, Rocket, Upay, and card payment methods, settle bets and casino game outcomes, and provide customer support when you contact us. Without this processing, we cannot operate your account or deliver the services you have registered for.

Identity Verification and Regulatory Compliance

1baji is obligated to verify the identity and age of all players as part of its KYC (Know Your Customer) and responsible gaming obligations. Your identity documents and personal details are used to confirm that you are aged 18 or above and that you are who you claim to be. This processing is a legal obligation, not discretionary.

In addition, your transaction data is monitored for patterns consistent with money laundering or terrorist financing. Where suspicious activity is identified, 1baji may be required by law to report it to relevant financial intelligence authorities. This monitoring is an ongoing legal obligation.

Platform Security and Fraud Prevention

Your IP address, device data, and behavioural patterns are used to detect and prevent fraudulent activity including account takeover attempts, bonus abuse, multi-accounting, automated bot activity, and money laundering. This processing is in 1baji's legitimate interest and the legitimate interest of all genuine players on the Platform.

Responsible Gaming Monitoring

Your betting and gaming activity data is analysed to identify patterns that may indicate problem gambling behaviour — such as rapidly increasing stake sizes, extended uninterrupted play sessions, or repeated failed deposit attempts following account balance depletion. Where such patterns are identified, 1baji's responsible gaming team may reach out to offer support tools or information. This processing is both a legitimate interest and a legal obligation under responsible gaming standards.

Platform Improvement and Analytics

Aggregated and anonymised usage data is used to understand how players navigate the Platform, which games and sports markets are most popular among Bangladesh players, and where technical or usability issues occur. This data does not identify you individually and is used solely to improve the platform experience for all users.

Marketing Communications (Opt-In Only)

If you have explicitly opted in to marketing communications, 1baji may send you emails or SMS messages about promotions, new game launches, seasonal offers (such as Eid or Pohela Boishakh bonus offers), or BPL and IPL betting promotions. You can withdraw your marketing consent at any time via your account settings or by emailing [email protected]. Withdrawal of marketing consent does not affect the processing of your data for account operation, compliance, or security purposes.

Legal basis summary: We process your data under three legal bases — (1) contract performance (operating your account), (2) legal obligation (KYC, AML compliance), and (3) legitimate interests (fraud prevention, platform security, responsible gaming monitoring).

Marketing is Always Opt-In

We will never send promotional messages without your explicit consent. You can unsubscribe from marketing at any time — it takes effect within 48 hours. Unsubscribing does not close your account or affect service communications.

Section 3

Data Sharing & Third Parties

1baji does not sell your personal data to any third party. We share personal data only in the limited circumstances described below, and only to the minimum extent necessary for the specified purpose. All third-party recipients of personal data from 1baji are subject to contractual data protection obligations.

Payment Processing Partners

To process deposits and withdrawals, 1baji shares the transaction details and account identifiers necessary to execute the payment with the relevant payment processor — which may include bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank, and international card processing networks (Visa, Mastercard). Each payment partner operates under its own privacy policy and is independently responsible for data received in connection with payment processing.

Identity Verification and KYC Providers

To fulfil KYC obligations, 1baji shares identity document images and personal details with third-party identity verification service providers. These providers use the information solely to perform document authenticity checks and age verification, and are contractually prohibited from retaining or using the data for any other purpose.

Game Content Providers

Games hosted on the 1baji Platform are provided by third-party studios including Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, Red Tiger, and Spribe. These studios may receive a pseudonymous player identifier (not your name or contact details) alongside game activity data necessary to operate the game session, settle outcomes, and maintain game integrity. The data shared with game studios does not include your financial details or identity documents.

Fraud Prevention and Security Partners

1baji works with specialist fraud prevention and cybersecurity providers who may process your IP address, device fingerprint, and transaction risk signals to detect and prevent fraud. These partners are bound by strict data processing agreements and use the data solely for fraud and security purposes.

Legal and Regulatory Disclosures

1baji may be legally required to disclose personal data to law enforcement agencies, financial intelligence units, or other competent authorities in response to a lawful request, court order, or legal obligation. In such cases, 1baji will disclose only the minimum data required to comply with the specific legal obligation. Where permitted by law, 1baji will notify the affected account holder that their data has been requested.

Business Transfers

In the event that 1baji is involved in a merger, acquisition, or sale of all or substantially all of its assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and the resulting changes to this Privacy Policy via your registered email address before the transfer takes effect.

We never sell your data. 1baji does not sell, rent, trade, or otherwise transfer your personal information to advertising networks, data brokers, or commercial third parties for their own use.

Game studios receive pseudonymous data only. When you play a game from Pragmatic Play, Evolution Gaming, or another studio, that studio receives a player session token — not your name, NID number, or contact details.

Legal disclosures: If 1baji is required by law to share your data with a government authority, we will disclose only the minimum information required and will notify you where legally permitted to do so.

Section 4

Cookies & Tracking Technologies

1baji uses cookies and similar tracking technologies on the Platform to enable core functionality, remember your preferences, maintain your login session, analyse usage patterns, and detect fraud. This section explains what cookies we use and how you can manage them.

What Are Cookies?

A cookie is a small text file placed on your device by a website you visit. Cookies allow the website to recognise your device on return visits and to remember information about your session. Cookies are widely used by online platforms to make them work efficiently and to provide useful information to site operators.

Types of Cookies Used by 1baji

Strictly necessary cookies: These cookies are essential for the Platform to function. They maintain your login session, remember your account language preference (English), and ensure that the security features of the Platform operate correctly. You cannot opt out of strictly necessary cookies without disabling your ability to use the Platform.
Functional cookies: These cookies remember your preferences — such as your preferred sports market, last viewed game category, or whether you have previously acknowledged a particular notice — to provide a more personalised experience. Functional cookies do not track your activity across other websites.
Analytics cookies: These cookies collect anonymised information about how players use the Platform — pages visited, time on page, game categories browsed, and navigation paths. This data helps 1baji identify which features are popular with Bangladesh players and where improvements are needed. Analytics data is aggregated and does not identify you individually.
Security and fraud-detection cookies: These cookies assist in identifying unusual activity patterns that may indicate a bot, account takeover attempt, or fraudulent session. They form part of 1baji's active security infrastructure and cannot be disabled without affecting the security of your account.

Managing Your Cookie Preferences

You can control and manage cookies through your browser settings. Most modern browsers allow you to view, delete, and block cookies from specific websites. Please note that blocking strictly necessary or security cookies may prevent you from logging in or using core Platform features.

For guidance on managing cookies in your specific browser, refer to the help documentation of your browser (Chrome, Firefox, Safari, Edge, or Samsung Internet on Android devices popular in Bangladesh). 1baji does not respond to browser "Do Not Track" signals as there is no consistent industry standard for how such signals should be interpreted.

Four Types of Cookies

1baji uses strictly necessary, functional, analytics, and security cookies. There are no advertising or retargeting cookies on the 1baji Platform — we do not serve third-party ads.

You can delete or block cookies at any time via your browser settings. Note that blocking essential session cookies will prevent you from staying logged in to your 1baji account.

Cookie Type	Purpose	Retention	Can Be Disabled?
Strictly necessary	Login session, security token, language preference	Session / 24 hours	No — Platform will not function
Functional	User preferences, last viewed category	30 days	Yes — via browser settings
Analytics	Anonymised usage statistics, page performance	90 days	Yes — via browser settings
Security / fraud detection	Device fingerprint, bot detection, risk scoring	Session / 7 days	No — affects account security

Section 5

Data Retention & Storage

1baji retains your personal data for as long as your account remains active and for a defined period thereafter, in accordance with our legal obligations, operational requirements, and responsible gaming standards. The table below summarises our key retention periods.

Account data (your registration details, KYC documents, and transaction history) is retained for a minimum of 5 years following account closure. This retention period reflects our obligations under applicable anti-money-laundering regulations, which require financial service providers to retain customer identification and transaction records for a defined period to support any future regulatory investigation or audit.

Betting and gaming history is retained for a minimum of 3 years from the date of each transaction. This data may be required to resolve disputes, respond to regulatory enquiries, or support responsible gaming investigations relating to a player's account.

Support communications (including email correspondence with the 1baji support team) are retained for 2 years from the date of the last communication in each case. This allows 1baji to provide consistent support and to reference prior interactions when resolving recurring or escalated issues.

Marketing preference data is retained for as long as you maintain your marketing opt-in. If you withdraw your marketing consent, your marketing preference data will be updated immediately and all non-service communications will cease within 48 hours. A record of your consent and its withdrawal is retained for 2 years for compliance purposes.

Analytics data (anonymised usage statistics) is retained for up to 12 months in identifiable form, after which it is either deleted or further anonymised so that it can no longer be linked to your account or device.

Following the expiry of the applicable retention period for any data category, that data is securely deleted or irreversibly anonymised. 1baji does not retain personal data beyond its required retention period for any purpose.

Retention at a Glance

Account & KYC data: 5 years post-closure. Betting history: 3 years per transaction. Support records: 2 years. Marketing preferences: until consent withdrawn. Analytics: up to 12 months.

Even if you close your account, certain data must be retained for up to 5 years under applicable AML and financial record-keeping obligations. This is a legal requirement, not a commercial choice.

Section 6

How We Secure Your Data

1baji implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Security is not a single feature — it is a layered programme that covers data in transit, data at rest, access controls, and ongoing monitoring.

Encryption

All data transmitted between your device and 1baji servers is encrypted using TLS 1.2 and TLS 1.3 protocols. Data stored on 1baji servers — including identity documents, financial records, and account credentials — is encrypted at rest using AES-256 encryption. Passwords are stored exclusively as salted cryptographic hashes; no 1baji employee has access to your plaintext password at any time.

Access Controls

Access to personal data within 1baji is restricted on a strict need-to-know basis. Staff members are granted access only to the categories of data required to perform their specific role. All internal access to personal data is logged and audited. Privileged access to database systems and identity documents requires multi-factor authentication (MFA) and is reviewed on a regular schedule.

Penetration Testing and Security Audits

The 1baji Platform undergoes regular security assessments including penetration testing by qualified third-party security professionals. Any vulnerabilities identified are triaged and remediated according to their severity. Critical vulnerabilities are addressed on an emergency basis without waiting for a scheduled maintenance window.

Incident Response

In the event of a personal data breach that creates a risk to your rights and freedoms — for example, unauthorised access to account credentials or identity documents — 1baji will notify affected users promptly via their registered email address. The notification will include details of the nature of the breach, the categories of data affected, the likely consequences, and the steps 1baji has taken or is taking to address the breach.

Your Responsibilities

While 1baji takes extensive measures to secure the Platform, account security also depends on your own practices. You are responsible for keeping your account password confidential, not sharing your login credentials with any other person, using a strong and unique password, and notifying 1baji immediately at [email protected] if you suspect your account has been compromised.

TLS 1.3 Encryption: 1baji uses the latest TLS 1.3 transport encryption standard — the same protocol used by international banking platforms. All data in transit between your device and our servers is fully encrypted.

Passwords are never stored in plaintext. Your password is stored as a salted cryptographic hash. Even if our database were compromised, your actual password could not be retrieved from the stored hash.

Suspect a breach? If you believe your account has been accessed without your authorisation, contact [email protected] immediately. We will secure your account and investigate within 1 business hour for account-critical security matters.

Section 7

Your Privacy Rights

As a 1baji player, you have a number of rights in relation to the personal data we hold about you. These rights are set out below. To exercise any of these rights, please contact us at [email protected] with your account username and a description of the right you wish to exercise. We will respond within 10 business days of receiving your request.

Right of Access

You have the right to request a copy of all personal data 1baji holds about you. Upon a verified request, we will provide a structured summary of your data including account details, transaction history, KYC status, and any marketing preferences on file, within 10 business days.

Right to Rectification

If any personal data 1baji holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update most account details directly in your account settings. For corrections to KYC identity data, you will be asked to submit updated documentation.

Right to Erasure

You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent and there is no other lawful basis for processing. Note: where 1baji is subject to a legal obligation to retain data (e.g., KYC records under AML law), that data cannot be deleted until the legally required retention period has expired.

Right to Restrict Processing

You have the right to request that 1baji restricts the processing of your personal data in certain circumstances — for example, while a rectification request is being resolved, or where you contest the lawfulness of processing. During a restriction period, 1baji will continue to store your data but will not actively process it beyond what is necessary for storage and security purposes.

Right to Data Portability

Where processing is based on your consent or the performance of a contract, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format (such as CSV or JSON). You may also request that this data be transmitted directly to another service provider where technically feasible.

Right to Object

You have the right to object at any time to the processing of your personal data where that processing is based on 1baji's legitimate interests — including profiling for responsible gaming monitoring or direct marketing. Where you object to marketing processing, we will cease that processing immediately. Where you object to other legitimate-interest processing, we will assess whether our interests are overridden by your rights and respond accordingly.

Right to Withdraw Consent

Where 1baji processes your data based on your consent (for example, for marketing communications), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of any processing carried out before the withdrawal. To withdraw consent, update your preferences in account settings or email [email protected].

Response time: 1baji will acknowledge all privacy rights requests within 2 business days and provide a full response within 10 business days. For complex requests, this period may be extended by a further 10 business days, in which case we will notify you of the extension and the reason for it before the initial 10-day period expires.

Section 8

Changes to This Policy

1baji reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or the structure of the Platform. All changes to this Privacy Policy will be published on this page with an updated "Last updated" date at the top of the document.

Notification of Material Changes

Where a change to this Privacy Policy is material — meaning it significantly affects how we collect, use, or share your personal data, or meaningfully reduces your privacy rights — we will notify you in advance via your registered email address. The notification will summarise the nature of the change and the date on which it will take effect, giving you a reasonable opportunity to review the updated policy before it applies to your account.

Your Continued Use

Your continued use of the 1baji Platform after a Privacy Policy update has been published and you have been notified (where applicable) constitutes your acknowledgement of the updated policy. If you do not accept the changes, you should cease using the Platform and may request account closure by contacting [email protected]. Account closure does not affect 1baji's right to retain data as required by applicable legal retention obligations.

Historical Versions

Upon reasonable request, 1baji will provide access to prior versions of this Privacy Policy so that you can compare changes over time. To request a prior version, contact [email protected] with the approximate date of the version you wish to review.

Contact Us

If you have any questions, concerns, or requests in relation to this Privacy Policy or the way 1baji handles your personal data, please contact our support team. All privacy-related enquiries are handled by 1baji's data protection team, who will respond within 10 business days.

Contact: [email protected]

All correspondence must be in English. Please include your account username and a clear description of your enquiry so we can assist you as efficiently as possible.

We Will Notify You

For any material change to this Privacy Policy, registered players will receive advance notice by email before the change takes effect. Minor clarifications and formatting updates may be made without individual notification.

For all privacy enquiries, data access requests, and consent withdrawals, contact us at [email protected]. Our data protection team will respond within 10 business days.

Explore 1baji

Your Privacy Is Protected — Now Enjoy the Platform

Now that you understand how 1baji protects your data, explore our full range of cricket betting, live casino games, slots, and fast bKash & Nagad payouts — all in a secure, fair environment.