4bajee Privacy Policy

4bajee ("we", "us", "our") is committed to protecting the personal data of every individual who interacts with the 4bajee platform, including registered players, visitors, and prospective members in Bangladesh. This Privacy Policy describes how we collect, use, store, share, and protect your personal information in connection with your use of the 4bajee website and all associated services.

By registering an account with 4bajee or by continuing to use the platform after the effective date of this policy, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not agree with any aspect of this policy, you should discontinue use of the platform and may contact us to request deletion of your account and associated data.

This policy is written in plain English and structured to give you a clear understanding of your data rights. We do not sell your personal data to third parties for their own marketing purposes. We do not share your data with unaffiliated organisations except where required by law, necessary to deliver the services you have requested, or where you have given explicit consent. These commitments are not aspirational — they are the operational standards to which 4bajee holds itself.

1. Information You Provide Directly

When you register an account with 4bajee, engage with our support team, or use specific platform features, you voluntarily provide personal data. This includes, but is not limited to, the categories described below.

2. Information Collected Automatically

When you access the 4bajee platform, certain technical and behavioural data is collected automatically by our systems and third-party analytics tools. This data helps us operate the platform securely, diagnose technical issues, prevent fraud, and improve the user experience.

• Device and Browser Data: Device type, operating system, browser version, screen resolution, and language settings.
• Log Data: IP address, access timestamps, pages visited, referring URLs, and session duration.
• Geolocation Data: Approximate location derived from your IP address, used to apply geographic access controls and to comply with applicable legal requirements.
• Cookies and Tracking Technologies: Session cookies, persistent cookies, and similar technologies used to maintain your login session, remember preferences, and gather anonymous analytics data. See Section 9 of this policy for full cookie details.
• Game and Betting Activity: Records of games played, bets placed, odds accepted, outcomes, bonus usage, and wagering history. This data is used for account management, dispute resolution, fraud detection, and responsible gaming monitoring.

3. Lawful Bases and Specific Purposes

4bajee processes your personal data only where a lawful basis exists for doing so. The primary purposes for which we use your data are set out below, together with the corresponding legal basis for each.

• Account Registration and Platform Access: To create and manage your player account, verify your identity and age (21+ requirement), and provide access to the platform's games, betting markets, and features. Legal basis: contractual necessity.
• Transaction Processing: To process your deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, and City Bank, and to maintain accurate financial records. Legal basis: contractual necessity and legal obligation.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, money laundering, bonus abuse, and unauthorised account access. Legal basis: legitimate interests and legal obligation.
• Responsible Gaming Compliance: To monitor betting behaviour, enforce self-exclusion requests, apply deposit limits, and intervene where indicators of problem gambling are detected. Legal basis: legal obligation and legitimate interests.
• Customer Support: To respond to your enquiries, resolve disputes, process complaints, and provide technical assistance. Legal basis: contractual necessity and legitimate interests.
• Legal and Regulatory Compliance: To comply with applicable anti-money laundering (AML) requirements, identity verification obligations, and any lawful requests from competent authorities. Legal basis: legal obligation.
• Marketing Communications (with consent): To send you promotional offers, game updates, and platform news via SMS, email, or in-platform notifications where you have given explicit consent. You may withdraw consent at any time. Legal basis: consent.
• Platform Improvement and Analytics: To analyse usage patterns, diagnose technical issues, and improve the design and functionality of the platform. Legal basis: legitimate interests.

4. Retention Periods

4bajee retains personal data for as long as necessary to fulfil the purposes for which it was collected, and for such additional periods as are required by applicable law or legitimate business necessity. Our standard retention periods are as follows:

• Active Account Data: Retained for the full duration of your account relationship with 4bajee and for a period of no less than five (5) years following account closure, in compliance with financial record-keeping and anti-money laundering obligations.
• Transaction Records: Retained for a minimum of seven (7) years from the date of the transaction to satisfy accounting and AML regulatory requirements.
• Identity Verification Documents: Retained for a minimum of five (5) years from the date of account closure or the date of the last transaction, whichever is later.
• Customer Support Records: Retained for three (3) years from the date the support interaction was closed, to support dispute resolution and quality assurance.
• Marketing Consent Records: Retained for the duration of your consent plus three (3) years, to demonstrate compliance with consent requirements.
• Technical Log Data: Retained for up to twelve (12) months for security monitoring and fraud detection purposes, after which it is anonymised or deleted.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to an individual. Where data is anonymised rather than deleted, the resulting aggregated datasets do not constitute personal data and are not subject to this policy.

5. Early Deletion Requests

You may request early deletion of your personal data at any time by contacting our support team. We will action valid deletion requests within 30 days. Please note that we cannot delete data that we are legally required to retain during an active retention period — in such cases, we will restrict processing of that data to the minimum required by law and notify you accordingly.

6. Rights Available to You

As a player on the 4bajee platform, you hold the following rights in respect of your personal data. To exercise any of these rights, please contact our support team using the email address shown in the footer of this page.

• Right of Access: You may request a copy of the personal data we hold about you, together with information about how it is being processed. We will respond to access requests within 30 days.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or supplement it. You may also update certain account details directly through your account settings.
• Right to Erasure: You may request that we delete your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent, or where you object to processing based on legitimate interests. This right is subject to our legal retention obligations.
• Right to Restriction of Processing: You may request that we restrict the processing of your personal data in certain circumstances, for example while a dispute about accuracy is being resolved.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity and is carried out by automated means, you may request a copy of your data in a structured, machine-readable format.
• Right to Object: You may object to processing of your personal data that is based on our legitimate interests, including profiling for fraud detection. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (for example, marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to the withdrawal.

7. How to Exercise Your Rights

Submit your data rights request in writing to our support team via the email address shown in the footer of this page. Please include your registered username and a description of the right you wish to exercise. We may need to verify your identity before processing your request. We will acknowledge receipt within 5 business days and aim to fulfil your request within 30 calendar days. In cases of complexity, this period may be extended by a further 30 days, in which case we will notify you and provide a reason for the extension.

8. How 4bajee Uses Cookies

4bajee uses cookies and similar technologies on the platform. A cookie is a small text file placed on your device by a web server. Cookies do not contain executable code and cannot access other files on your device. We use the following categories of cookies:

• Strictly Necessary Cookies: These cookies are essential for the platform to function and cannot be disabled. They include session management cookies that keep you logged in during your visit and security cookies that protect against cross-site request forgery.
• Performance and Analytics Cookies: These cookies collect anonymous information about how visitors use the platform, such as which pages are visited most often and whether users encounter error messages. This data helps us improve platform performance.
• Functionality Cookies: These cookies remember your preferences — such as your selected language and notification settings — so you do not need to re-enter them on each visit.
• Targeting and Session Cookies: These cookies are used to deliver relevant promotional content within the platform. They do not track you across third-party websites.

You can manage cookie preferences through your browser settings. Disabling strictly necessary cookies will affect your ability to use the platform. Disabling analytics or functionality cookies will not prevent you from accessing the platform but may reduce the quality of your experience.

9. Technical and Organisational Security Measures

4bajee implements a range of technical and organisational measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• SSL/TLS encryption for all data in transit between your device and our servers.
• Encryption of sensitive data at rest, including stored payment identifiers and identity documents.
• Password hashing using industry-standard cryptographic algorithms — we never store passwords in readable form.
• Access controls that restrict internal access to personal data on a strict need-to-know basis.
• Regular security assessments and vulnerability testing of platform infrastructure.
• Fraud detection systems that monitor account activity in real time for indicators of unauthorised access.

While 4bajee takes data security seriously, no platform can guarantee absolute security against all possible threats. You play an important role in protecting your own account by keeping your login credentials confidential, using a strong and unique password, and notifying us immediately if you suspect unauthorised access to your account.

10. Data Breach Notification

In the event of a personal data breach that is likely to result in a risk to your rights or freedoms, 4bajee will notify affected players without undue delay, providing information about the nature of the breach, the categories of data affected, and the steps we are taking to address it. We will also notify relevant authorities as required by applicable law.

11. No Data Collection from Minors

The 4bajee platform is strictly intended for adults aged 21 and above. We do not knowingly collect or process personal data from individuals under the age of 21. If you are under 21, you must not register an account or use the platform in any way.

If 4bajee becomes aware that personal data has been collected from a person under the age of 21, we will take immediate steps to delete that data and close the associated account. If you are a parent or guardian and believe that a minor has registered an account with 4bajee, please contact our support team immediately so that we can investigate and take appropriate action.

12. How We Communicate Updates

4bajee may update this Privacy Policy from time to time to reflect changes in our data processing practices, legal requirements, or platform features. When we make material changes to this policy, we will notify registered players via email or through a prominent notice on the platform prior to the changes taking effect.

The effective date shown at the top of this policy indicates when the current version was last updated. We encourage you to review this policy periodically. Your continued use of the platform following the notification of any update constitutes your acceptance of the revised policy.

For any questions about this Privacy Policy, including requests to exercise your data rights or concerns about how your personal data is being handled, please contact our support team at the email address shown in the footer of this page. We aim to acknowledge all privacy-related enquiries within 2 business days and to provide a substantive response within 10 business days.