Privacy Policy — beeti baji

The categories of personal data we collect about you include the following:

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, genetic or biometric data (beyond what is required for document-based identity verification), or data concerning health — except where a player voluntarily discloses health-related information in the context of a responsible gaming self-exclusion request, in which case that disclosure is handled with heightened care and used solely to action the request.

We do not knowingly collect personal data from any individual under the age of 18. If we become aware that a minor has provided us with personal data, we will delete that data and close the associated account immediately.

beeti baji processes your personal data only for defined, lawful purposes. We do not use your data for any purpose that is incompatible with the reason for which it was originally collected. The following table sets out the primary purposes for which we process personal data and the legal basis for each processing activity.

Where we rely on consent as the legal basis for processing — such as for marketing communications — you may withdraw that consent at any time by contacting our support team or by using the unsubscribe mechanism included in each marketing email. Withdrawal of consent does not affect the lawfulness of processing that occurred prior to the withdrawal.

beeti baji uses automated decision-making processes in limited circumstances, specifically for real-time fraud detection and for the identification of problem gambling patterns that may trigger responsible gaming interventions. Where an automated decision materially affects your account (for example, a temporary deposit restriction), you have the right to request human review of that decision by contacting our support team.

Your personal data may be disclosed to the following categories of recipients in the circumstances described:

• Payment processors: Mobile banking operators including bKash, Nagad, Rocket, and Upay receive transaction references and account identifiers necessary to process your deposit or withdrawal. These partners operate under their own regulated data frameworks and are not granted access to your full account profile.
• KYC and identity verification providers: Third-party identity verification services may process copies of identity documents you submit to satisfy our verification requirements. These providers are bound by data processing agreements and are prohibited from using your documents for any purpose other than verification.
• Game content providers: When you participate in a game provided by a third-party studio such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Ezugi, a session token and anonymised player identifier are shared with the provider to enable the game to function. Your full name, email address, and financial data are not transmitted to game providers.
• Analytics and platform performance providers: Aggregated and pseudonymised technical data (IP ranges, browser types, session durations) may be shared with analytics service providers to help us improve the Platform. This data does not identify you as an individual.
• Legal and regulatory authorities: beeti baji will disclose personal data to law enforcement agencies, financial intelligence units, or other regulatory bodies where required to do so by applicable law or in response to a lawful court order. Where legally permitted, we will notify you of such a disclosure.
• Corporate transactions: In the event of a merger, acquisition, or sale of all or substantially all of beeti baji's assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and any change in the applicable privacy policy before the transfer takes effect.

All third-party recipients of your personal data are required to implement appropriate technical and organisational security measures and to process your data only in accordance with our documented instructions. beeti baji maintains a current register of all data processing relationships and reviews those relationships periodically for compliance.

beeti baji uses cookies and similar tracking technologies (local storage, session storage, pixel tags) to ensure the Platform functions correctly, to maintain your session security, and to help us understand how players interact with the site so we can improve it over time.

The following categories of cookies are deployed on the beeti baji Platform:

beeti baji does not use advertising or cross-site tracking cookies. We do not participate in retargeting advertising networks. No cookie deployed on this Platform is designed to track your activity on other websites.

You can manage, restrict, or delete cookies through your browser settings at any time. Note that disabling strictly necessary cookies will prevent you from logging in and using the Platform. Instructions for managing cookies in popular browsers are available from each browser's official help documentation.

Some cookies set by third-party game providers within embedded game iframes are governed by those providers' own cookie policies. beeti baji has no direct control over cookies set by third-party game content within the iframe context, but only providers with compliant data practices are integrated into the platform.

beeti baji retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, to comply with legal obligations, and to resolve any disputes or enforce our agreements. The following retention periods apply:

• Account and identity data: Retained for the duration of your active account relationship with beeti baji, and for a minimum of five years following account closure. This retention period reflects our obligations under applicable anti-money laundering and financial record-keeping requirements.
• KYC documents: Retained for a minimum of five years from the date of verification, or longer where required by a specific legal obligation or ongoing investigation.
• Transaction records: Deposit and withdrawal records in BDT are retained for a minimum of five years in accordance with financial record-keeping obligations.
• Bet and gaming history: Retained for the duration of your account and for three years following closure. This data may be retained longer where relevant to a dispute, investigation, or legal proceeding.
• Support communications: Live chat transcripts and email correspondence are retained for two years from the date of the interaction, unless the communication is relevant to an ongoing dispute in which case it is retained until that dispute is fully resolved.
• Technical and server logs: IP address logs and session data are retained for twelve months for security and fraud prevention purposes.
• Marketing consent records: Records of your consent to receive marketing communications are retained for three years from the date you last engaged with a marketing message or withdrew consent.

At the end of the applicable retention period, personal data is securely deleted or anonymised in accordance with our data destruction policy. Anonymised data (data from which all identifying information has been irreversibly removed) may be retained indefinitely for aggregate statistical and research purposes.

If you request deletion of your personal data before the end of the applicable retention period, we will assess the request against our legal obligations and notify you of what data can be deleted immediately and what must be retained and for how long.

The security measures beeti baji employs include, but are not limited to, the following:

• SSL/TLS encryption: All data in transit between your browser or mobile app and our servers is protected by SSL/TLS encryption. The padlock icon in your browser confirms an active encrypted connection.
• Encrypted data storage: Passwords are stored using industry-standard one-way hashing algorithms. Sensitive fields including identity document references and payment identifiers are encrypted at rest using AES-256 encryption.
• Access controls: Access to production systems containing personal data is restricted to authorised personnel only, on a strict need-to-know basis. All internal access is logged and reviewed periodically.
• Two-factor authentication (2FA): Players are encouraged to enable 2FA on their accounts for an additional layer of login security. Internal staff accounts with access to player data require 2FA as a mandatory control.
• Regular security assessments: beeti baji conducts periodic vulnerability assessments and penetration testing of its platform infrastructure to identify and remediate potential security weaknesses before they can be exploited.
• Intrusion detection: Our infrastructure is monitored around the clock using automated intrusion detection systems that alert our security team to anomalous activity in real time.
• Data minimisation: Staff and third-party systems are granted access only to the minimum amount of personal data required to perform their specific function, reducing the potential blast radius of any security incident.

In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of affected players, beeti baji will notify affected individuals without undue delay, providing a clear description of the nature of the breach, the data involved, and the steps we are taking to address it. We will also notify relevant authorities where required by applicable law.

You play an important role in keeping your account secure. Please ensure you use a strong, unique password, enable 2FA where available, and never share your login credentials with any other person. If you believe your account has been compromised, contact our support team immediately at [email protected].

As a player on the beeti baji Platform, you have a number of rights concerning your personal data. These rights are described below. To exercise any of these rights, please contact our support team via live chat or by emailing [email protected]. We will respond to all verified requests within 30 calendar days of receipt. Where a request is complex or involves a large volume of data, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it.

• Right of Access: You have the right to request a copy of all personal data we hold about you, together with information about how that data is used, where it came from, and with whom it has been shared. This is commonly referred to as a Subject Access Request (SAR). There is no charge for a SAR except in cases of manifestly unfounded or excessive requests.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. You may also update basic account information directly through the account settings section of the Platform.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where the processing was unlawful. This right is subject to legal retention obligations — we cannot delete data we are legally required to keep, but we will explain clearly what we can and cannot delete in response to your request.
• Right to Restriction: You may request that we restrict the processing of your personal data in certain circumstances, for example while we investigate a rectification request or while a dispute is pending. Restricted data is retained but not actively processed.
• Right to Object: Where we process your data on the basis of legitimate interest, you have the right to object to that processing. We will assess your objection and cease processing unless we can demonstrate a compelling legitimate ground that overrides your interests.
• Right to Data Portability: Where processing is based on your consent or on the performance of a contract, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format, and to request that it be transmitted to another controller where technically feasible.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal. To withdraw marketing consent, use the unsubscribe link in any marketing email or contact support directly.
• Right Not to Be Subject to Solely Automated Decisions: Where a significant decision about your account is made by automated means alone (for example, an automated fraud flag that restricts your account), you have the right to request human review of that decision.

beeti baji will not discriminate against you for exercising any of the rights listed above. Exercising your rights will not affect the quality of service you receive, provided your account remains in good standing under our Terms & Conditions.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way beeti baji handles your personal data, you are encouraged to contact us through any of the following channels:

• Email: [email protected] — include "Privacy Request" in the subject line so your message is routed to the correct team.
• Live Chat: Available 24/7 on Bangladesh Standard Time (BST, UTC+6) via the Platform's on-site chat interface.
• WhatsApp: +880 1700 000000, available 8 AM to midnight BST.

beeti baji aims to acknowledge all privacy-related enquiries within 48 hours and to resolve them fully within 30 calendar days. For Subject Access Requests (SARs), we will request proof of identity before releasing any personal data to ensure we disclose information only to the verified account holder.

Updates to this Policy: beeti baji reviews this Privacy Policy periodically and updates it to reflect changes in our data practices, applicable law, or platform features. The "Last Updated" date at the top of this page indicates when the most recent revision was made. Where changes are material — meaning they could significantly affect your rights or the way we process your data — we will notify registered players via email or an on-platform notification prior to the changes taking effect. Your continued use of the Platform after the effective date of any revision constitutes your acknowledgment of the updated Policy.

If you are not satisfied with our response to a privacy complaint, you have the right to escalate your concern to the relevant data protection authority in your jurisdiction. beeti baji will cooperate fully with any such investigation and will implement any remedial measures required by a competent authority.