86baji Privacy Policy

1 Data Controller

86baji operates as the data controller in respect of personal data collected through the platform. As data controller, 86baji determines the purposes and means by which personal data is processed. If you have any questions about this Policy or wish to exercise your data rights, please contact our support team using the details provided at the foot of this page. All data-related inquiries are handled by our dedicated privacy team and acknowledged within 72 hours of receipt.

2 Personal Data We Collect

86baji collects personal data in the following categories, depending on how you interact with the platform:

• Identity Data: Full name, date of birth, gender, and a copy of a government-issued photo ID (such as a National Identity Card or passport) collected during the account registration and verification process.
• Contact Data: Email address, mobile phone number, and residential address in Bangladesh (city/division such as Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, or Mymensingh).
• Account Data: Username, encrypted password, account preferences, communication preferences, and records of all account activity including login history and session timestamps in Bangladesh Standard Time (BST, UTC+6).
• Financial Data: Payment method details sufficient to process deposits and withdrawals — for example, the registered mobile number associated with a bKash, Nagad, Rocket, or Upay account, or the account name and reference for a Bangladeshi bank transfer. Full payment credentials such as complete card numbers are not stored on 86baji servers.
• Transaction Data: A complete record of all deposits, withdrawals, wagers, bonuses, and adjustments made to your account, including amounts in Bangladeshi Taka (৳), timestamps, and payment method used.
• Technical Data: IP address, device type, operating system, browser type and version, referring URL, pages visited on the platform, session duration, and crash/error reports.
• Communications Data: Records of all communications between you and the 86baji support team, including live chat transcripts, emails, and any documents you submit in connection with a query or complaint.
• Responsible Gaming Data: Records of any deposit limits, cooling-off periods, or self-exclusion requests you have submitted, maintained to ensure we honour your responsible gaming preferences across all sessions.

86baji does not knowingly collect personal data from individuals under the age of 21. If we become aware that data has been submitted by a person below this age threshold, the associated account will be immediately closed and the data deleted.

3 How We Collect Your Data

86baji collects personal data through the following channels:

• Direct submission: Data you provide when registering an account, completing identity verification, making a deposit or withdrawal, contacting our support team, or completing any other form on the platform.
• Automated collection: Technical data collected automatically when you access the platform, through server logs, cookies, session storage, and similar technologies. See Section 9 (Cookies) for full details.
• Third-party sources: Identity verification agencies, fraud prevention databases, payment processors (bKash, Nagad, Rocket, Upay, Visa, Mastercard, and Bangladeshi banking partners), and responsible gaming registries may provide us with data to assist with account verification, fraud detection, and compliance with our responsible gaming obligations.

4 How We Use Your Personal Data

86baji processes personal data only for specific, legitimate purposes. The table below summarises the primary purposes and the legal basis for each:

5 Sharing Your Personal Data

86baji does not sell your personal data. We share data only in the following circumstances and only to the extent necessary for the stated purpose:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank, Visa, and Mastercard receive only the data required to process a specific transaction.
• Identity verification providers: Third-party KYC (Know Your Customer) service providers receive identity documents and personal details for the sole purpose of verifying your identity and confirming your age.
• Game content providers: Studio partners including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive a pseudonymous player identifier and session data necessary to deliver game content. They do not receive your full name, contact details, or financial data.
• Responsible gaming registries: Where required by our responsible gaming obligations, account status information may be shared with recognised self-exclusion registries.
• Fraud prevention and law enforcement: Where we are legally required to do so, or where disclosure is necessary to prevent fraud or protect the rights and safety of our players and staff, data may be shared with law enforcement agencies or fraud prevention bodies.
• Business transfers: In the event of a merger, acquisition, or sale of the platform, player data may be transferred as part of that transaction. Players will be notified in advance of any such transfer and of any change to the applicable privacy policy.

All third-party service providers who receive personal data from 86baji are required to process that data in accordance with our instructions and to maintain appropriate technical and organisational security measures.

6 Data Retention

86baji retains personal data for as long as your account remains active and for a defined period after account closure, in order to fulfil legal obligations, resolve disputes, and enforce our agreements. The following general retention periods apply:

• Account and identity data: Retained for the life of the account and for a minimum of five years following account closure, to satisfy anti-money laundering record-keeping requirements.
• Transaction data: Retained for a minimum of five years from the date of each transaction.
• Communications data: Support correspondence is retained for a minimum of two years from the date of the last communication in a thread.
• Technical data: Server logs and session data are retained for a maximum of 12 months and then automatically deleted or anonymised.
• Responsible gaming data: Self-exclusion and limit records are retained for a minimum of five years to ensure that reinstated players do not circumvent previous restrictions.
• Marketing preferences: Consent and preference records are retained for as long as we send you marketing communications and for two years after you withdraw consent, as evidence of the consent previously given.

When data reaches the end of its applicable retention period, it is securely deleted from live systems. Backup copies are purged in accordance with our routine backup rotation schedule, typically within 90 days of the deletion of the live record.

7 Data Security

86baji implements a range of technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• SSL/TLS encryption for all data in transit between your device and the 86baji platform.
• Encryption of sensitive data at rest, including stored payment references and identity document copies.
• Role-based access controls ensuring that only authorised 86baji personnel can access personal data, and only to the extent necessary for their role.
• Regular internal security reviews and vulnerability assessments of the platform and its underlying infrastructure.
• Two-factor authentication available for all player accounts to reduce the risk of unauthorised access.
• Incident response procedures to detect, contain, and notify affected parties in the event of a data breach, in accordance with applicable notification obligations.

While 86baji takes all reasonable steps to protect your personal data, no system can guarantee absolute security. You play an important role in keeping your account secure by maintaining a strong, unique password and not sharing your login credentials with anyone. 86baji will never ask for your password via email, SMS, or live chat.

8 Your Data Rights

Subject to applicable law, you have the following rights in relation to your personal data held by 86baji:

• Right of access: You may request a copy of the personal data we hold about you at any time. We will provide this within a reasonable timeframe upon verification of your identity.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or completed.
• Right to erasure: You may request that we delete your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn your consent, or where you object to processing. Note that this right is subject to legal retention obligations — data we are required by law to retain cannot be erased on request until the applicable retention period has elapsed.
• Right to restrict processing: You may request that we restrict the processing of your data in certain circumstances, for example while the accuracy of the data is contested.
• Right to data portability: You have the right to receive a copy of personal data you have provided to us in a structured, commonly used, machine-readable format.
• Right to withdraw consent: Where processing is based on your consent — for example, for marketing communications — you may withdraw that consent at any time by contacting our support team or adjusting your account communication preferences. Withdrawal of consent does not affect the lawfulness of any processing carried out before the withdrawal.
• Right to object: You may object to processing of your personal data where it is based on legitimate interests, including profiling for direct marketing purposes. We will assess your objection and cease processing unless we can demonstrate compelling legitimate grounds that override your interests.

To exercise any of the above rights, contact the 86baji support team at the email address shown in the footer of this page. We will verify your identity before processing any data rights request and will respond within a reasonable timeframe.

9 Cookies and Tracking Technologies

86baji uses cookies and similar tracking technologies on the platform to ensure it functions correctly, to remember your preferences, to analyse usage patterns, and to support security features. The types of cookies used are:

• Strictly necessary cookies: Required for core platform functionality, including session management, authentication, and security features. These cannot be disabled without impairing your ability to use the platform.
• Functional cookies: Used to remember your preferences, such as language settings and display options, across sessions.
• Analytics cookies: Used to collect anonymised or pseudonymised information about how players use the platform — for example, which pages are visited most frequently and how long sessions last. This data is used to improve platform performance and user experience.
• Security cookies: Used to detect and prevent fraudulent activity, including bot traffic and account takeover attempts.

You can manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies may prevent certain features of the platform from functioning correctly. 86baji does not use third-party advertising cookies or cross-site tracking technologies for the purpose of delivering targeted advertising on external websites.

10 Marketing Communications

If you have opted in to receive marketing communications from 86baji during the registration process or at any subsequent point, we may contact you by email or SMS to inform you of promotions, bonuses, new games, and seasonal offers. Examples of seasonal communications may include Eid bonus offers, Pohela Boishakh celebrations, or Bangladesh Premier League (BPL) cricket promotions.

You may opt out of marketing communications at any time by:

• Clicking the unsubscribe link included in any marketing email from 86baji.
• Replying STOP to any marketing SMS.
• Adjusting your communication preferences in your account settings after login.
• Contacting the 86baji support team directly and requesting removal from all marketing lists.

Opting out of marketing communications does not affect your ability to use the platform, and you will continue to receive essential account-related communications such as transaction confirmations, security alerts, and policy updates.

11 Children's Privacy

The 86baji platform is strictly for adults aged 21 and above. We do not knowingly collect, solicit, or process personal data from individuals under the age of 21. If a parent or guardian becomes aware that their child has provided personal data to 86baji without appropriate consent, they should contact our support team immediately. Upon confirmation, 86baji will close the relevant account and securely delete all associated personal data as promptly as possible.

12 Changes to This Privacy Policy

86baji reserves the right to update this Privacy Policy at any time. Where a material change is made to the way we process your personal data, we will notify you by email to the address registered on your account and by displaying a prominent notice on the platform prior to the change taking effect. The date shown at the top of this page reflects when the Policy was last updated.

Continued use of the 86baji platform after an updated Privacy Policy has been published constitutes your acceptance of the revised terms. If you do not agree with any change, you should stop using the platform and may request account closure as described in our Terms & Conditions.

13 Contact and Data Requests

For any questions about this Privacy Policy, to exercise your data rights, or to raise a data-related concern, please contact the 86baji privacy team. All contact details are provided in the footer of this page. Please use the subject line "Privacy Request" when contacting us so that your message is routed to the correct team without delay. We aim to acknowledge all privacy-related inquiries within 72 hours and to resolve substantive requests within a reasonable timeframe.