mybaji Privacy Policy

Data We Collect

When you register for and use a mybaji account, we collect personal data that is necessary to provide our services, verify your identity, process payments, and comply with applicable legal and anti-money laundering obligations. We collect only what is necessary and do not request data beyond what is required to operate the platform safely and responsibly.

Registration Data

When you create a mybaji account, we collect the following information:

• Full legal name (as it appears on your government-issued identity document)
• Date of birth (to verify that you meet the 18+ age requirement)
• Registered mobile phone number (used for account authentication and communications)
• Email address (where provided, used for account notices and promotional communications if opted in)
• Preferred language and time zone (Bangladesh Standard Time, UTC+6)

Identity Verification (KYC) Data

Before processing your first withdrawal, mybaji conducts a Know Your Customer (KYC) verification. This requires submission of:

• A clear photograph or scan of your Bangladesh National Identity Card (NID) or passport
• A selfie or live photograph for facial verification purposes (where required)
• Proof of payment method ownership (e.g., a screenshot showing your registered mobile banking account name matching your mybaji account name)

Transaction & Financial Data

mybaji records all deposit and withdrawal transactions processed through bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, and Visa/Mastercard. Transaction records include the payment method used, the transaction amount in BDT, the timestamp (BST), and the transaction reference number provided by the payment provider. mybaji does not store full card numbers or full mobile banking PIN codes.

Behavioural & Technical Data

When you browse and use the mybaji platform, we automatically collect certain technical data including:

• IP address and approximate geographic location (city level)
• Device type, operating system, and browser version
• Pages visited, time spent on each page, and navigation path
• Game sessions played, bet amounts, and outcomes (for responsible gaming monitoring and dispute resolution)
• Session timestamps and duration

Communication Data

Any communications you send to mybaji — including support tickets submitted via [email protected], live chat transcripts, and any disputes or complaints — are recorded and stored to enable mybaji to handle your enquiry, track resolution outcomes, and improve our support quality.

How We Use Your Data

mybaji processes your personal data only for the purposes described below. We do not use your data for purposes incompatible with those stated at the time of collection. Every processing purpose has a defined legal basis — either the performance of our contract with you, compliance with a legal obligation, or our legitimate interests in operating a safe and responsible gaming platform.

Marketing Communications

mybaji may send you promotional communications about bonuses, new games, seasonal offers (such as BPL and T20 World Cup promotions, Eid specials, and Pohela Boishakh offers), and platform updates — but only where you have expressly opted in to receiving such communications at registration or subsequently through your account settings. You may withdraw consent for marketing communications at any time by contacting [email protected]. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

Data Sharing

mybaji does not sell, rent, or exchange your personal data with third parties for commercial gain. We share your data only where strictly necessary to deliver our services, comply with legal requirements, or protect the integrity of the platform. All third-party service providers who process data on our behalf are contractually required to handle that data securely and only for the specific purpose for which it was shared.

Payment Providers

When you make a deposit or request a withdrawal, mybaji shares the minimum data necessary with the relevant payment provider — such as bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, or Visa/Mastercard — to process the transaction. The payment provider's own privacy policy governs how they handle your data within their systems. mybaji is not responsible for the data practices of these external payment providers.

Identity Verification Partners

mybaji may use a third-party identity verification service to assist with KYC document review and facial verification. Any such partner is bound by strict data processing agreements and may only use your identity data for the specific purpose of completing mybaji's verification process.

Game Providers

Game content on the mybaji platform is provided by licensed third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive anonymised session data (such as game round IDs and bet outcomes) to validate game results and resolve disputes. They do not receive personally identifiable information such as your full name, mobile number, or identity documents.

Legal & Regulatory Disclosure

mybaji may be required to disclose your personal data to law enforcement agencies, courts, or regulatory authorities if required to do so by applicable law, a lawful court order, or in response to a formal legal process. In such cases, mybaji will disclose only the minimum data required to comply with the relevant legal obligation and will inform you of any such disclosure where permitted to do so by law.

Cookies & Tracking

mybaji uses cookies and similar tracking technologies to operate the platform, remember your preferences, and understand how players interact with the site. This section explains the types of cookies mybaji uses and how you can manage them.

Types of Cookies Used

Managing Your Cookie Preferences

You can control and delete cookies through your browser settings. Most modern browsers allow you to refuse cookies, delete existing cookies, or receive a warning before a cookie is stored. Please note that disabling strictly necessary cookies will prevent you from logging in to your mybaji account and using core platform features. Disabling functional cookies may result in loss of saved preferences between sessions.

mybaji does not use third-party advertising cookies, retargeting pixels, or social media tracking cookies that follow your browsing activity outside of the mybaji.app domain.

Data Retention

mybaji retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, to comply with legal obligations, and to resolve any outstanding disputes. The following retention periods apply to the main categories of data we hold:

After the applicable retention period has expired, personal data is securely deleted or irreversibly anonymised so that it can no longer be linked to any individual. Where data must be retained for overlapping purposes with different retention periods, the longer period applies.

Your Rights

As a mybaji player, you have the following rights with respect to your personal data. mybaji is committed to honouring these rights promptly and transparently. To exercise any of the rights listed below, contact [email protected] with the subject line "Data Rights Request" and a clear description of your request.

Right of Access

You have the right to request a copy of the personal data mybaji holds about you. Upon a verified request, mybaji will provide a summary of the data held, the purposes for which it is processed, and any third parties with whom it has been shared. mybaji will respond to access requests within 30 days of receipt.

Right to Rectification

If any of the personal data mybaji holds about you is inaccurate or incomplete, you have the right to request that it be corrected. Where the correction affects KYC-verified data (such as your legal name or date of birth), mybaji may require you to resubmit updated identity documentation before making the change.

Right to Erasure

You have the right to request deletion of your personal data where it is no longer necessary for the purpose it was collected, where you have withdrawn consent (and there is no other legal basis for processing), or where the data has been processed unlawfully. mybaji will fulfil erasure requests subject to any overriding legal retention obligations — for example, transaction records required for AML compliance cannot be deleted on request alone.

Right to Restrict Processing

In certain circumstances — such as where you contest the accuracy of data held, or where you have objected to processing and a determination is pending — you may request that mybaji restricts its processing of your data to storage only while the matter is resolved.

Right to Object

You have the right to object to processing of your personal data where that processing is based on mybaji's legitimate interests. You may also withdraw your consent for marketing communications at any time without affecting the lawfulness of prior processing. mybaji will cease processing for marketing purposes immediately upon receipt of a valid objection or withdrawal of consent.

Right to Data Portability

Where mybaji processes your data on the basis of your consent or for the performance of a contract, and where the processing is carried out by automated means, you have the right to receive your data in a structured, commonly used, and machine-readable format, and to request that it be transmitted to another controller where technically feasible.

Data Security

mybaji implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures are reviewed and updated on an ongoing basis in line with industry standards for online gaming and financial services platforms.

Technical Measures

• 256-bit SSL/TLS encryption on all data transmitted between your device and the mybaji platform.
• Encrypted data storage for all sensitive data fields including identity documents, payment references, and account credentials.
• Access controls — mybaji staff can only access personal data where it is necessary for their specific role. Identity documents, for example, are accessible only to the compliance and KYC team.
• Multi-factor authentication for internal mybaji systems that hold player data.
• Intrusion detection and anomaly monitoring systems operate continuously to identify and respond to potential security incidents.
• Regular security testing including penetration testing of the mybaji platform infrastructure.

Organisational Measures

• All mybaji staff and contractors with access to personal data are subject to confidentiality obligations.
• Data handling procedures are reviewed regularly and updated to reflect best practice.
• mybaji maintains an incident response plan. In the event of a data breach that poses a risk to players, affected individuals will be notified without undue delay.

Your Responsibility

While mybaji takes extensive steps to protect your data on its end, the security of your mybaji account also depends on the steps you take. You are responsible for keeping your login credentials confidential, using a strong and unique password, not sharing your account with others, and logging out of your mybaji session when using a shared or public device. mybaji will never ask you for your password via email, chat, or phone.

Contact & Updates

If you have any questions, concerns, or requests relating to this Privacy Policy or mybaji's handling of your personal data, please contact the mybaji support and data team directly:

Updates to This Policy

mybaji reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform functionality. When material changes are made, mybaji will notify registered players via their registered contact details and/or by displaying a prominent notice on the mybaji.app platform. The "Effective" date at the top of this page will be updated to reflect the date of the latest revision.

Continued use of the mybaji platform following notification of changes to this Privacy Policy constitutes acceptance of the revised policy. If you do not agree with a revised policy, you should stop using the platform and may request account closure by contacting [email protected].

This Privacy Policy was last reviewed and updated on 1 January 2026. It applies to all players registered on the mybaji platform and to all services offered at mybaji.app, including the sportsbook, live casino, slots, crash games, and all associated payment and account services.