bajlok Privacy Policy

bajlok processes your personal data under one or more of the following lawful bases:

• Contractual necessity: Processing is required to register your account, verify your identity, process deposits and withdrawals, and provide the gaming services you have requested from bajlok.
• Legal obligation: bajlok is required to collect and retain certain data to comply with applicable anti-money laundering (AML), Know Your Customer (KYC), and responsible gaming obligations.
• Legitimate interests: bajlok processes technical and usage data to operate and improve the platform, detect fraud, prevent abuse, and ensure fair play across all game types including cricket betting, slots, and live casino.
• Consent: Where bajlok relies on consent as its lawful basis — for example, to send optional promotional communications — you may withdraw that consent at any time by contacting [email protected] or by updating your communication preferences in your account settings.

bajlok uses the personal data we collect for the following specific purposes:

• Account management: Creating, maintaining, and securing your bajlok player account, including processing login credentials and enabling two-factor authentication via SMS.
• Payment processing: Facilitating deposits and withdrawals via bKash, Nagad, Rocket, and Upay. Verifying that payment methods are registered in your own name in compliance with our anti-fraud policy.
• Identity verification: Conducting KYC checks to confirm your age (21+), identity, and residential location as part of our responsible gaming and compliance obligations.
• Fraud prevention and security: Monitoring account activity for signs of fraudulent behaviour, collusion, money laundering, or policy violations. bajlok's real-time fraud detection systems process technical and gaming data automatically.
• Customer support: Responding to your queries, resolving disputes, processing complaints, and maintaining records of support interactions for quality and training purposes.
• Responsible gaming: Monitoring betting patterns to identify signs of problem gambling, enforcing deposit limits and self-exclusion orders, and providing appropriate interventions where necessary.
• Platform improvement: Analysing aggregated, anonymised usage data to improve game performance, user experience, and service reliability on the bajlok platform.
• Legal compliance: Retaining records as required by applicable law, responding to lawful requests from regulatory or law enforcement authorities, and defending bajlok's legal interests in disputes.
• Marketing communications (consent-based only): Sending promotional emails, SMS notifications, or in-platform messages about bonuses, new games, and special events — only where you have explicitly opted in.

bajlok does not sell, rent, or trade your personal data to third parties for their own marketing or commercial purposes. We may share your data with the following categories of recipients, strictly on a need-to-know basis:

• Payment service providers: bKash, Nagad, Rocket (Dutch-Bangla Bank), and Upay receive transactional data necessary to process your deposits and withdrawals. Each provider operates under its own privacy policy and data security standards.
• Identity verification services: Third-party KYC providers that assist bajlok in verifying player identities and documents. These providers are contractually bound to process data only for verification purposes.
• Game software providers: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive minimal session data necessary to deliver their games within the bajlok platform. They do not receive your full identity or financial data.
• IT and infrastructure providers: Cloud hosting, data storage, and cybersecurity vendors who support the operation of the bajlok platform. All such vendors are bound by data processing agreements.
• Legal and regulatory authorities: bajlok may disclose personal data to law enforcement agencies, financial intelligence units, or other competent authorities where required by applicable law or court order.
• Professional advisers: Lawyers, auditors, and compliance consultants who provide services to bajlok and who are bound by professional confidentiality obligations.

Any third party receiving personal data from bajlok is required to maintain appropriate technical and organisational security measures and to process that data only for the purposes specified by bajlok.

bajlok uses cookies and similar tracking technologies on the bajlok.bio platform for the following purposes:

• Essential cookies: Required for the platform to function. These enable login session persistence, security tokens, and basic navigation. They cannot be disabled without impairing platform functionality.
• Analytics cookies: Used to collect aggregated, anonymised data on how players interact with bajlok pages, which games are most popular, and how users navigate the site. This data helps us improve the platform experience.
• Security cookies: Used by bajlok's fraud detection systems to identify unusual access patterns, bot activity, and potential account takeover attempts.
• Preference cookies: Used to remember your platform settings and preferences across sessions.

bajlok does not use third-party advertising cookies or behavioural tracking cookies that profile you across other websites. You can manage cookie preferences through your device's browser settings. Note that disabling essential cookies will prevent you from accessing your bajlok account.

bajlok retains personal data for the following periods:

• Active account data: Retained for the full duration of your account being active on bajlok, plus a minimum of 5 years after account closure to satisfy AML and KYC record-keeping obligations.
• Transaction records: Financial transaction records (deposit/withdrawal history) are retained for a minimum of 5 years from the date of each transaction.
• KYC documents: Identity and address verification documents are retained for a minimum of 5 years from the date of submission or from the date of account closure, whichever is later.
• Support correspondence: Customer support records are retained for 3 years from the date of each interaction.
• Technical logs: IP address and session logs are retained for 12 months for security and fraud detection purposes.
• Marketing consent records: Records of your marketing opt-in or opt-out decisions are retained for the duration of your account plus 2 years after account closure.

At the end of each applicable retention period, bajlok securely deletes or anonymises the relevant data so that it can no longer be linked to your identity.

As a bajlok player, you hold the following rights in relation to the personal data we process about you. To exercise any of these rights, contact bajlok's support team at [email protected]. We will respond to all verifiable requests within 30 calendar days.

• Right of access: You may request a copy of all personal data bajlok holds about you, together with information about how it is processed.
• Right to rectification: If any personal data bajlok holds about you is inaccurate or incomplete, you may request that it be corrected or supplemented.
• Right to erasure: You may request deletion of your personal data where bajlok no longer has a lawful basis to retain it. Note that this right is subject to overriding legal retention obligations, particularly AML and KYC requirements.
• Right to restrict processing: You may request that bajlok restricts the processing of your data in certain circumstances, for example while a dispute about its accuracy is pending.
• Right to data portability: Where processing is based on consent or contractual necessity, you may request a structured, machine-readable copy of your personal data to transfer to another service provider.
• Right to object: You may object to processing based on legitimate interests, including profiling related to fraud detection, where you believe your individual circumstances warrant an override.
• Right to withdraw consent: Where bajlok processes data based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

bajlok implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and bajlok's servers
• Encrypted storage of sensitive account data, including hashed passwords — plain-text passwords are never stored
• Role-based access controls ensuring that only authorised bajlok personnel can access player data, strictly on a need-to-know basis
• Two-factor authentication (2FA) via SMS available to all registered players to protect account access
• Regular security audits and vulnerability assessments of the bajlok platform infrastructure
• Automated anomaly detection systems that flag and investigate unusual login or transaction patterns in real time

Despite these measures, no online platform can guarantee absolute security. If you suspect that your bajlok account has been compromised, contact [email protected] immediately so we can take prompt action to secure your account.

bajlok operates as an internationally hosted platform. Some of the data processors we work with — including cloud infrastructure providers and game software suppliers such as Pragmatic Play, Evolution Gaming, and Spribe — may process data on servers located outside Bangladesh. Where such transfers occur, bajlok ensures that appropriate safeguards are in place, including:

• Contractual data processing agreements incorporating standard data protection clauses
• Transfers only to processors that maintain security standards equivalent to or exceeding those applied by bajlok
• Ongoing due diligence on third-party data processors to verify continued compliance with their contractual obligations

By using the bajlok platform, you acknowledge that your data may be transferred and processed internationally in accordance with the safeguards described above.

bajlok's services are strictly intended for adults aged 21 and above. bajlok does not knowingly collect personal data from individuals under the age of 21. If bajlok becomes aware that a registered player is under 21, the account will be immediately suspended, all deposits returned where possible, and all personal data relating to the underage player deleted from our systems within 30 days, except where retention is required for legal compliance purposes.

If you believe that an underage individual has registered on bajlok, please contact [email protected] immediately so we can investigate and take appropriate action.

bajlok reserves the right to update or amend this Privacy Policy at any time. When material changes are made, the updated Policy will be published on this page with a revised "Last Updated" date. Where the changes are significant, bajlok will make reasonable efforts to notify affected players via the email address or mobile number registered to their account.

Your continued use of the bajlok platform after publication of a revised Privacy Policy constitutes your acceptance of the updated terms. If you disagree with any changes, you must stop using the platform and request account closure by contacting [email protected].

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a concern about how bajlok has handled your personal data, please contact our dedicated support team:

• Email: [email protected] (plain text — not a clickable link)
• Support hours: 24/7, Bangladesh Standard Time (UTC+6)
• Response target: Within 24 hours for general queries; within 30 calendar days for formal data rights requests

bajlok is committed to resolving all privacy-related queries promptly and transparently. If you remain unsatisfied with our response, you may escalate your complaint to the relevant data protection authority in your jurisdiction.