Your Privacy Matters to 15baji

15baji collects personal information in several ways: directly from you when you register an account or use our services, automatically through your interaction with the platform, and in limited circumstances from trusted third-party sources. The categories of information we collect are described below.

1.1 Registration and Account Information

When you create a 15baji account, we collect the following personal details:

• Full legal name as stated on your government-issued identification
• Date of birth (to verify that you are 18 years of age or older)
• Email address and/or mobile phone number
• Residential address (city, district, and postcode)
• Preferred currency (Bangladeshi Taka, ৳)
• Username and encrypted password (passwords are never stored in plain text)

1.2 Identity Verification (KYC) Documents

As part of our Know Your Customer (KYC) programme and to comply with anti-money laundering obligations, we may request copies of identity documents including your National ID Card (NID), passport, driver's licence, utility bill, or bank statement. These documents are processed securely and are used solely for verification purposes.

1.3 Financial and Transaction Data

When you make deposits or withdrawals, we collect transaction records including payment method identifiers (such as your bKash, Nagad, or Rocket mobile number, or the last four digits of a card), transaction amounts in Bangladeshi Taka (৳), timestamps, and transaction reference numbers. We do not store full card numbers on our servers — card payment processing is handled by certified payment gateways.

1.4 Betting and Gaming Activity

We maintain complete records of your betting and gaming activity on the platform, including bet placement details, game session data, wager amounts, outcomes, and balance history. This data is used for account management, dispute resolution, regulatory compliance, and to personalise your experience on 15baji.

1.5 Technical and Device Data

When you access 15baji, our servers automatically collect certain technical information, including:

• IP address and approximate geographic location (country and city level)
• Device type, operating system, and browser version
• Pages visited, session duration, and navigation path within the site
• Referring URL (the site you visited immediately before arriving at 15baji)
• Time zone setting and language preference

This technical data is collected primarily for security monitoring, fraud prevention, platform optimisation, and analytics purposes.

1.6 Communications Data

When you contact 15baji support via email or live chat, we retain records of those communications, including the content of messages, timestamps, and any attachments. This is necessary for quality assurance, dispute resolution, and regulatory compliance.

15baji processes your personal data for specific, legitimate purposes. We do not use your data in ways that are incompatible with the purposes described at the time of collection. The table below summarises the primary purposes for which your data is used and the legal basis for each processing activity.

2.1 Marketing Communications

15baji will only send you promotional emails, SMS messages, or push notifications if you have explicitly opted in to receive such communications during registration or through your account settings. You may withdraw your consent to marketing communications at any time by updating your notification preferences in your account dashboard or by contacting us at [email protected]. Withdrawal of marketing consent does not affect the lawfulness of processing carried out prior to that withdrawal.

2.2 Automated Decision-Making

15baji uses automated systems to detect potentially fraudulent activity, identify patterns consistent with problem gambling, and flag accounts for enhanced due diligence review. Where an automated process results in a significant action affecting your account (such as a temporary suspension or a withdrawal hold), you have the right to request that a human member of our compliance team reviews that decision. To exercise this right, contact [email protected].

2.3 Personalisation

With your consent, 15baji may use data about your gaming preferences and activity history to personalise the content and promotional offers shown to you on the platform. Personalisation is always conducted within the bounds of your account preferences and applicable responsible gaming parameters — players who have set deposit limits or activated responsible gaming tools will not receive promotional content designed to encourage increased spending.

15baji does not sell, rent, or otherwise trade your personal data to third parties for commercial purposes. We share personal data only in the limited circumstances described below, and always with appropriate safeguards in place.

3.1 Service Providers and Technology Partners

We engage trusted third-party service providers who process personal data on our behalf in order to deliver the 15baji platform. These include payment processing gateways (for bKash, Nagad, Rocket, Upay, Visa, and Mastercard transactions), game software providers (who may receive anonymised session data for RNG auditing), cloud hosting and infrastructure providers, identity verification services, and customer support platforms. All such providers are bound by data processing agreements that restrict their use of your data to the purposes for which it was shared and require them to maintain appropriate security standards.

3.2 Legal and Regulatory Disclosure

15baji may disclose personal data to law enforcement agencies, regulatory authorities, or other governmental bodies where we are required to do so by applicable law, court order, or binding regulatory direction. Such disclosures are made only to the extent strictly necessary to comply with the relevant legal requirement. Where permitted by law, 15baji will notify you of any such disclosure.

3.3 Fraud Prevention and Security

To protect the integrity of the platform and the safety of our players, 15baji may share data with fraud prevention agencies, financial intelligence units, or industry anti-fraud networks where we have reasonable grounds to suspect fraudulent activity, money laundering, or other criminal conduct. Information shared in this context is used solely for fraud prevention and investigation purposes.

3.4 Business Transfers

In the event that 15baji undergoes a merger, acquisition, restructuring, or sale of assets, your personal data may be transferred to the acquiring entity as part of that transaction. In such circumstances, 15baji will take reasonable steps to ensure that the acquiring entity is bound to honour the commitments set out in this Privacy Policy with respect to your personal data. You will be notified of any material change to data controller identity.

15baji uses cookies and similar tracking technologies to enhance your experience on the platform, maintain session continuity, and gather anonymised analytics data. A cookie is a small text file stored on your device by your browser when you visit a website. Cookies cannot execute code or deliver viruses, and they do not contain personally identifiable information in their raw form.

4.1 Types of Cookies We Use

4.2 Managing Your Cookie Preferences

You can control and manage cookies through your browser settings. Most modern browsers allow you to view, block, and delete cookies stored on your device. Please note that disabling strictly necessary cookies will impair the functionality of the 15baji platform and may prevent you from logging in or completing transactions. Instructions for managing cookies in common browsers are available from each browser vendor's support pages.

4.3 No Third-Party Advertising Cookies

15baji does not use third-party advertising cookies or cross-site tracking technologies to build advertising profiles or retarget you on external websites. The analytics cookies we use are operated by trusted analytics providers under strict data processing agreements that prohibit them from using 15baji visitor data for any purpose beyond providing us with aggregated platform analytics.

15baji retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law and regulatory obligations. The retention periods applicable to the main categories of data we hold are set out below.

5.1 Post-Retention Deletion

Once the applicable retention period has expired, personal data is either securely deleted from our systems or irreversibly anonymised so that it can no longer be linked to any individual. Anonymised, aggregated data (from which individual identity cannot be reconstructed) may be retained indefinitely for statistical and business analysis purposes.

5.2 Self-Exclusion Data

Records of self-exclusion requests are retained permanently regardless of any general data deletion request. This is a deliberate responsible gaming safeguard — retaining self-exclusion records ensures that a player who has requested exclusion cannot be inadvertently re-onboarded in the future. This retention is in the best interests of the player and overrides any general right to erasure with respect to self-exclusion records specifically.

15baji implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. While no system can guarantee absolute security, we apply industry best-practice standards throughout our operations.

6.1 Technical Security Controls

• Transport Layer Security: All data in transit between your browser and 15baji servers is encrypted using TLS 1.2 or higher with 256-bit encryption keys.
• Password Storage: User passwords are stored as salted cryptographic hashes using modern hashing algorithms. Plain-text passwords are never stored anywhere on our systems.
• Two-Factor Authentication (2FA): Players are strongly encouraged to activate 2FA on their accounts. 2FA adds an additional layer of authentication beyond the password, significantly reducing the risk of unauthorised account access.
• Intrusion Detection: 15baji operates automated intrusion detection and prevention systems that monitor platform traffic for suspicious patterns in real time.
• Access Controls: Access to systems containing personal data is restricted on a strict need-to-know basis. Staff with access to personal data are subject to confidentiality obligations and undergo regular security awareness training.
• Payment Security: Card payment processing is handled through PCI-DSS-compliant payment gateways. 15baji does not store full card numbers on its own servers.

6.2 Organisational Security Measures

Beyond technical controls, 15baji maintains formal information security policies, conducts periodic security reviews, and requires all staff and contractors with access to personal data to sign binding confidentiality agreements. Security incidents are investigated promptly, and where a breach is determined to pose a risk to individuals, affected players will be notified without undue delay.

6.3 Your Role in Security

While 15baji takes every reasonable precaution to protect your data, you also play a critical role in account security. You should use a strong, unique password for your 15baji account that is not reused on any other website. You should never share your login credentials with anyone. If you suspect your account has been accessed by an unauthorised party, contact support immediately at [email protected] and change your password without delay.

As a 15baji player, you hold a number of rights with respect to the personal data we hold about you. We are committed to honouring these rights in a timely and transparent manner. To exercise any of the rights described below, contact our support team at [email protected] with the subject line "Privacy Rights Request" and specify the right you wish to exercise.

7.1 Right to Access

You have the right to request a copy of the personal data that 15baji holds about you. Upon receipt of a verified access request, we will provide you with a summary of the categories of data held, the purposes for which it is processed, and — where technically feasible — a copy of the data itself. We will respond to access requests within 30 days of receipt. For complex or multiple requests, this period may be extended by a further 30 days, in which case we will notify you of the extension and the reason for it.

7.2 Right to Rectification

If you believe that personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. You can update many account details (such as your email address or contact number) directly through your account settings. For changes to identity-critical data such as your name or date of birth, you will be required to provide supporting documentation consistent with our KYC procedures.

7.3 Right to Erasure

In certain circumstances, you have the right to request that we delete personal data we hold about you. This right applies where the data is no longer necessary for the purpose for which it was collected, where you have withdrawn consent and no other legal basis applies, or where the data has been processed unlawfully. Please note that this right is not absolute — we may be required to retain certain data to comply with legal obligations (see Section 5 on Data Retention). Self-exclusion records are permanently exempt from erasure requests.

7.4 Right to Restrict Processing

You may request that we restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data is being contested, or where processing is unlawful but you prefer restriction to deletion. During a restriction period, we will continue to store your data but will not process it for any other purpose without your consent or as otherwise permitted by law.

7.5 Right to Object

You have the right to object to the processing of your personal data where that processing is based on our legitimate interests. Where you object, we will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, or the processing is necessary for the establishment, exercise, or defence of legal claims. You have an unconditional right to object to processing for direct marketing purposes, which we will honour immediately.

7.6 Right to Data Portability

Where processing is based on your consent or contractual necessity and is carried out by automated means, you have the right to receive a copy of the personal data you have provided to us in a structured, commonly used, machine-readable format (such as CSV or JSON). You may also request that we transmit this data directly to another controller where technically feasible.

7.7 Right to Withdraw Consent

Where processing is based on your consent (such as marketing communications or personalisation features), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of any processing carried out prior to withdrawal. To withdraw consent, update your preferences in your account settings or contact [email protected].

15baji reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform features. When we make material changes to this policy, we will publish the revised version on this page and update the "Last reviewed" date displayed at the top of this page. For significant changes that materially affect how we process your personal data, we will make reasonable efforts to notify you directly via your registered email address or a prominent in-platform notice.

8.1 Your Continued Use

Your continued use of the 15baji platform following the publication of a revised Privacy Policy constitutes your acknowledgement of the updated terms. If you do not agree with any changes made to this policy, you should cease using the platform and may request account closure by contacting support. We recommend that you review this page periodically to stay informed of how 15baji handles your personal data.

8.2 How to Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way 15baji processes your personal data, please contact us using the details below. We take all privacy enquiries seriously and will respond promptly.

• Email: [email protected] (subject line: "Privacy Policy Enquiry")
• Response time: Within 2 business days for general enquiries; within 30 days for formal rights requests
• Operating hours: Bangladesh Standard Time (BST, UTC+6), 24 hours a day, 7 days a week via email

8.3 Links to Other Pages

For related policies and information, please refer to the following pages on the 15baji website:

• Terms & Conditions — the complete agreement governing your use of the platform
• Responsible Gaming — self-exclusion tools, deposit limits, and support resources
• FAQ — answers to common questions about accounts, payments, and security
• About Us — information about the 15baji platform and our mission