f baji Privacy Policy
At f baji, your privacy matters as much as your gameplay. This Privacy Policy explains exactly what personal data we collect, why we collect it, how we use it, who we share it with, and what rights you hold as a registered player based in Bangladesh.
Our Core Privacy Commitments
Before reading the full policy, here is a plain-English summary of the six commitments that define how f baji handles your personal information.
We Never Sell Your Data
f baji does not sell, rent, or trade your personal information to any third party for marketing purposes. Your data is used solely to operate and improve the f baji platform and to fulfil our legal obligations as an online gaming operator.
SSL Encryption on Every Request
Every page, every login, every transaction on f baji is protected by industry-standard SSL/TLS encryption. Data in transit between your device and our servers is encrypted at all times, making interception by third parties technically infeasible under normal conditions.
You Control Your Data
Registered players have the right to access, correct, download, or request deletion of their personal data at any time. Submit a request to our support team and we will respond within 30 days. Some data may be retained where required by law or for legitimate business purposes such as fraud prevention.
Minimum Necessary Data
f baji collects only the personal data that is genuinely necessary to provide our services, verify your identity, process payments, and comply with applicable regulations. We do not collect data speculatively or for purposes unrelated to the operation of the platform.
Transparent Cookie Use
We use cookies and similar tracking technologies to keep you logged in, remember your preferences, and understand how players navigate our platform. You can manage cookie preferences through your browser settings. Essential cookies required for the platform to function cannot be disabled.
Clear Retention Limits
Personal data is not held indefinitely. f baji maintains defined retention periods for each category of data based on operational necessity and regulatory requirements. Once data is no longer needed, it is securely deleted or irreversibly anonymised in accordance with our internal data governance procedures.
1. Data We Collect
f baji collects personal data from players through several channels: directly when you register an account, when you make a deposit or withdrawal, when you contact our support team, and automatically through your use of the platform. The categories of data we collect are described below.
1.1 Account Registration Data
When you create an f baji account, we collect the following information:
- Full legal name — as it appears on your government-issued identity document.
- Date of birth — to verify that you are at least 18 years of age.
- Residential address — including street, city, district, and postal code.
- Email address — used for account communications, promotional messages (where consented), and password reset.
- Mobile phone number — used for account verification and, where applicable, two-factor authentication (2FA).
- Username and password — your chosen account credentials. Passwords are stored in hashed form; f baji staff cannot view your plain-text password.
1.2 Identity Verification (KYC) Data
As part of our Know Your Customer (KYC) process, we may request copies of the following documents before processing your first withdrawal or at any other point where identity verification is required:
- National Identity Card (NID), passport, or driving licence (photographic identity).
- Utility bill, bank statement, or official government letter as proof of address (dated within 3 months).
- Screenshot or confirmation of the payment method used for deposits (e.g., your bKash or Nagad account number).
- Selfie photograph holding your identity document, where requested for enhanced verification.
1.3 Transaction Data
Every financial transaction conducted through f baji generates a record that we retain. This includes deposit amounts, withdrawal amounts, payment method identifiers (e.g., bKash wallet number, last four digits of a card), transaction timestamps, and transaction reference numbers assigned by f baji and the payment provider. We do not store full card numbers; card payments are handled via PCI-DSS compliant third-party payment processors who provide us only with tokenised references.
1.4 Gaming Activity Data
f baji records all gaming and betting activity associated with your account, including: bets placed, stake amounts, odds accepted, game sessions (start and end times, game type, game provider), winnings and losses, bonus credits used, and wagering progress toward bonus requirements. This data is used to maintain accurate account records, resolve disputes, detect problem gambling patterns, and improve platform services.
1.5 Technical and Device Data
When you access f baji, our servers automatically collect certain technical information, including: your IP address, browser type and version, operating system, device type (desktop, mobile, tablet), screen resolution, referring URL, pages visited on f baji, time spent on each page, and session duration. This data is used for security monitoring, fraud detection, platform performance optimisation, and aggregate analytics.
1.6 Communications Data
If you contact f baji via live chat, email, or WhatsApp, we retain records of that correspondence including the content of messages, timestamps, and the nature of the issue raised. This data is used to resolve your query, improve our support quality, and maintain a record of interactions for compliance purposes.
2. How We Use Your Data
f baji processes your personal data for the following purposes, each supported by a legitimate legal basis:
| Purpose | Legal Basis |
|---|---|
| Creating and managing your player account | Contractual necessity |
| Processing deposits and withdrawals | Contractual necessity |
| Verifying your identity (KYC) | Legal obligation & legitimate interest |
| Detecting and preventing fraud, money laundering, and bonus abuse | Legal obligation & legitimate interest |
| Providing customer support | Contractual necessity |
| Sending account-related notifications (e.g., withdrawal confirmations) | Contractual necessity |
| Sending promotional communications and bonus offers | Consent (you may withdraw at any time) |
| Monitoring for responsible gaming indicators | Legal obligation & legitimate interest |
| Improving platform features and user experience | Legitimate interest |
| Complying with applicable laws and regulatory requirements | Legal obligation |
f baji will not use your personal data for any purpose other than those listed above without first obtaining your explicit consent or establishing a fresh legal basis for the new processing activity.
3. Data Sharing & Third Parties
f baji does not sell your personal data. We do, however, share specific categories of data with carefully selected third-party partners where necessary to deliver our services. All third-party partners are contractually required to process your data only as instructed by f baji, in accordance with applicable data protection standards, and for no other purpose.
3.1 Payment Processors
To process deposits and withdrawals, f baji shares transaction-relevant data with payment service providers including bKash, Nagad, Rocket, Upay, and international card processors. The data shared is limited to what is strictly necessary to complete the transaction (e.g., your registered wallet number, transaction amount, and a unique f baji transaction reference). These providers operate under their own privacy policies and are responsible for the security of data within their systems.
3.2 Identity Verification Services
f baji may engage third-party identity verification and KYC service providers to assist in verifying the authenticity of identity documents submitted by players. These providers receive only the identity data necessary for the verification task and are prohibited from using that data for any secondary purpose.
3.3 Game Providers
When you launch a game hosted by a third-party studio — such as Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, Spribe, or Ezugi — a session token and limited account identifier are passed to that provider to initiate the game session. Game providers do not receive your full name, payment information, or contact details. Their handling of session data is governed by their own privacy arrangements with f baji.
3.4 Analytics and Security Providers
f baji uses analytics and cybersecurity tools to monitor platform performance, detect fraudulent activity, and prevent account compromise. These tools may process technical and device data (see Section 1.5). Where such tools are provided by third parties, they are configured to process data on behalf of f baji under a data processing agreement and are not permitted to use the data independently.
3.5 Legal and Regulatory Disclosure
f baji may disclose personal data to law enforcement agencies, regulatory authorities, or other competent bodies where we are legally required to do so, or where disclosure is necessary to protect the rights, property, or safety of f baji, its players, or the public. We will notify affected players of such disclosures where we are legally permitted to do so.
4. Cookies & Tracking
f baji uses cookies — small text files stored on your device — and similar technologies such as pixel tags, local storage, and session tokens. Below is a breakdown of the cookie categories in use on the f baji platform.
4.1 Strictly Necessary Cookies
These cookies are required for the platform to function and cannot be disabled. They include your session authentication token (which keeps you logged in), CSRF protection tokens (which prevent cross-site request forgery attacks), and load balancing identifiers. No personal data beyond a temporary session identifier is stored in these cookies.
4.2 Preference Cookies
These cookies remember choices you have made on the platform, such as your preferred language setting, game lobby display mode, and notification preferences. Disabling preference cookies means these settings will not be remembered between sessions.
4.3 Analytics Cookies
f baji uses analytics cookies to understand how players navigate the platform — which pages are most visited, where players drop off, and how long sessions typically last. This data is processed in aggregate and is used to inform platform improvements. Analytics cookies do not identify you personally.
4.4 Managing Cookies
You can manage or delete cookies through your browser settings. Most modern browsers allow you to block third-party cookies, clear cookies on exit, or view and delete individual cookies. Please note that blocking strictly necessary cookies will impair your ability to use the f baji platform, as these are required for authentication and security.
5. Data Retention
f baji retains personal data for as long as necessary to fulfil the purposes for which it was collected, to comply with applicable legal and regulatory obligations, and to resolve any disputes that may arise. The following retention periods apply as a general guide:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account registration data | Duration of account + 5 years after closure | Legal obligation (AML/KYC regulations) |
| Identity verification documents | Duration of account + 5 years after closure | Legal obligation |
| Transaction records | 7 years from transaction date | Legal obligation (financial record-keeping) |
| Gaming activity logs | 5 years from date of activity | Legitimate interest (dispute resolution) |
| Support correspondence | 3 years from date of last interaction | Legitimate interest (quality assurance) |
| Technical / device data | 13 months from collection | Legitimate interest (security monitoring) |
| Marketing consent records | Until consent withdrawn + 1 year | Legal obligation (consent records) |
At the end of each applicable retention period, personal data is either permanently deleted from all f baji systems or irreversibly anonymised so that it can no longer be linked to an identifiable individual. Anonymised data may be retained indefinitely for aggregate statistical purposes.
6. Your Privacy Rights
As a player on f baji, you have the following rights regarding your personal data. To exercise any of these rights, contact our support team via live chat or at [email protected]. We will acknowledge your request within 5 business days and respond in full within 30 calendar days.
7. Data Security Measures
f baji takes the security of your personal data seriously and has implemented a layered set of technical and organisational measures to protect it against unauthorised access, disclosure, alteration, or destruction.
7.1 Technical Measures
- SSL/TLS Encryption: All data transmitted between your browser and f baji's servers is encrypted using TLS 1.2 or higher. Our SSL certificate is renewed regularly and enforced on all platform endpoints.
- Password Hashing: Player passwords are stored using a strong, salted cryptographic hashing algorithm. f baji staff cannot read your password in plain text under any circumstances.
- Access Controls: Internal access to player personal data is restricted on a strict need-to-know basis. Staff members are granted access only to the data required to perform their specific role.
- Intrusion Detection: f baji operates continuous monitoring systems that alert our security team to anomalous access patterns, brute-force login attempts, and other potential threats.
- Data Segregation: Personal data, financial data, and gaming logs are stored in logically segregated systems with separate access controls to limit the impact of any potential security incident.
7.2 Organisational Measures
- All staff with access to personal data receive regular training on data protection obligations and security best practices.
- Third-party service providers are vetted for data security compliance before being granted any access to f baji player data.
- f baji maintains an incident response plan that defines the steps to be taken in the event of a confirmed or suspected data breach, including player notification procedures.
8. Policy Updates & Contact
f baji reserves the right to update or amend this Privacy Policy at any time. When material changes are made, we will publish the revised policy on this page with an updated "Last Updated" date and, where practicable, notify registered players via their registered email address or via a notice on the platform homepage.
We encourage you to review this Privacy Policy periodically to stay informed about how f baji protects your data. Your continued use of the platform following the publication of a revised Privacy Policy constitutes your acceptance of the changes.
8.1 Contact for Privacy Matters
If you have any questions, concerns, or requests relating to this Privacy Policy or f baji's handling of your personal data, please contact our Data Protection team through any of the following channels:
- Email: [email protected] (plain text — not a clickable link)
- Live Chat: Available 24/7 through the f baji platform
- Response Time: We aim to acknowledge all privacy-related requests within 5 business days and resolve them within 30 calendar days.
f baji is committed to resolving privacy concerns directly with affected players in the first instance. We take all privacy complaints seriously and will investigate each case thoroughly before providing a substantive response.
Your Data Is Safe With f baji
We are committed to protecting your privacy at every step. If you have questions, explore our FAQ or contact our support team. Ready to play? Head to the platform and enjoy a secure betting experience.
18+ only. Gambling involves financial risk. Please play responsibly.