bajlok Privacy Policy

1 Introduction

bajlok ("bajlok", "we", "us", "our") operates the online betting and casino platform accessible at bajlok.club. This Privacy Policy describes the personal data we collect from players and site visitors ("you", "your"), the purposes for which we use that data, how we protect it, and the rights you hold in relation to it.

bajlok is committed to handling personal data responsibly and in a manner consistent with the expectations of players based in Bangladesh. We apply data minimisation principles — collecting only what is genuinely necessary — and we maintain technical and organisational safeguards appropriate to the sensitivity of the data we hold.

This Policy applies to all personal data processed through bajlok.club, including data collected during account registration, identity verification, deposits and withdrawals, gameplay, customer support interactions, and general use of the platform's features.

2 Data We Collect

bajlok collects personal data in the following categories, depending on how you interact with the platform:

2.1 Registration Data

When you create a bajlok account, we collect: full legal name, date of birth, email address, contact number (mobile), and your chosen username. This information is required to establish your account and to verify that you meet the 18+ age eligibility requirement.

2.2 Identity Verification (KYC) Data

To comply with Know Your Customer (KYC) obligations and to prevent fraud and money laundering, bajlok may request and collect: a copy of a government-issued national identity card (NID) or passport; a selfie or photograph for biometric identity matching; and proof of address (such as a utility bill or bank statement dated within the last three months). KYC documents are processed securely and retained for the period required by our compliance obligations.

2.3 Financial Data

When you make deposits or request withdrawals, we collect transaction records including: payment method type (bKash, Nagad, Rocket, Upay, Visa, Mastercard), transaction amount in BDT, date and time of transaction, and the payment reference number. bajlok does not store full card numbers, CVV codes, or mobile banking PINs — these are handled exclusively by the respective payment processors.

2.4 Gameplay & Betting Data

bajlok records data related to your use of platform features, including: games played and bets placed; bet amounts, odds, and outcomes; session start and end times; bonus credits used and wagering progress; and game history across sports betting, live casino, slot, and crash game products.

2.5 Technical & Device Data

When you access bajlok.club, our servers and analytics systems automatically collect certain technical data, including: IP address; browser type and version; device type and operating system; referring URL; pages visited and time spent; and cookie identifiers (see Section 6 for full cookie details).

2.6 Communications Data

If you contact bajlok support via email or our support system, we retain records of that correspondence including your contact details, the content of your messages, and the outcome of any support case. This data is used to resolve your query and to improve service quality.

The table below summarises the main data categories, their source, and their primary purpose:

3 How We Use Your Data

bajlok uses the personal data it collects for the following purposes:

• Account Management: Creating and maintaining your bajlok account, authenticating your login sessions, and communicating platform updates or changes to our terms.
• Identity Verification: Confirming that you meet the 18+ age requirement and verifying your identity in compliance with KYC obligations before processing withdrawals.
• Payment Processing: Facilitating deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard, and maintaining accurate financial records of all transactions.
• Fraud Prevention & Security: Detecting and investigating suspicious account activity, preventing unauthorised access, identifying duplicate accounts, and protecting the integrity of the bajlok platform.
• Anti-Money Laundering (AML) Compliance: Monitoring transactions for patterns consistent with money laundering or terrorist financing and reporting to relevant authorities where legally required.
• Responsible Gaming: Monitoring gameplay patterns to identify players who may be exhibiting signs of problem gambling, enforcing player-set limits, and administering self-exclusion requests.
• Customer Support: Responding to your queries, resolving disputes, and managing formal complaints in relation to your bajlok account.
• Platform Improvement: Analysing aggregated and anonymised usage data to improve bajlok's product offering, website performance, and user experience.
• Promotional Communications: Where you have opted in to receive marketing, sending you information about bajlok bonuses, promotions, and new platform features. You may opt out of marketing communications at any time by contacting [email protected].

4 Legal Basis for Processing

bajlok processes your personal data on the following legal bases:

• Contractual Necessity: Processing that is necessary to fulfil our obligations under the Terms & Conditions you agreed to when registering a bajlok account — including account creation, payment processing, and customer support.
• Legal Obligation: Processing required to comply with applicable legal and regulatory requirements, including KYC identity verification, AML transaction monitoring, and data retention mandated by financial compliance obligations.
• Legitimate Interests: Processing necessary to pursue bajlok's legitimate business interests, including fraud detection, platform security, responsible gaming monitoring, and anonymised analytics — provided those interests are not overridden by your rights and interests.
• Consent: Where bajlok relies on your consent as the legal basis (for example, for optional marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

5 Data Sharing

bajlok may share your personal data with the following categories of third parties, strictly limited to what is necessary for the stated purpose:

• Payment Processors: bKash, Nagad, Rocket, Upay, and card network processors (Visa, Mastercard) receive the transaction data necessary to execute deposits and withdrawals. Each payment processor operates under its own privacy policy and data security standards.
• KYC Verification Providers: Third-party identity verification services may process identity documents and biometric data on bajlok's behalf to fulfil KYC obligations. These providers are contractually bound to process data only for the purpose of identity verification and to maintain appropriate security standards.
• Game Content Providers: Third-party game studios (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) may receive your player identifier and session data necessary to operate their games within the bajlok platform. Game providers do not receive your full personal profile or financial information beyond what is required for game session management.
• IT Infrastructure & Security Providers: Cloud hosting, cybersecurity, and platform infrastructure providers who process data on bajlok's behalf under strict data processing agreements.
• Legal & Regulatory Authorities: bajlok will disclose personal data to law enforcement agencies, financial intelligence units, or other competent authorities where required to do so by law, court order, or in response to a lawful request in connection with fraud investigation, AML reporting, or other legal proceedings.

All third parties with whom bajlok shares personal data are required to process that data only for the specified purpose and to maintain security standards appropriate to the sensitivity of the data involved.

6 Cookies & Tracking Technologies

bajlok.club uses cookies and similar tracking technologies to operate the platform, personalise your experience, and analyse site usage. The following categories of cookies may be placed on your device when you visit bajlok.club:

• Strictly Necessary Cookies: Essential for the platform to function correctly. These include session authentication cookies, security tokens, and load-balancing identifiers. These cookies cannot be disabled without impairing core platform functionality.
• Functional Cookies: Remember your preferences (such as language settings and responsible gaming limits) to provide a personalised experience across sessions.
• Analytics Cookies: Collect anonymised data about how players navigate bajlok.club — such as pages visited, time spent, and click paths — to help us improve platform performance and content. Analytics data is aggregated and does not identify individual users.
• Security Cookies: Used for fraud detection and to identify anomalous login patterns that may indicate unauthorised account access attempts.

You can manage cookie preferences through your browser settings. Disabling strictly necessary cookies will affect platform functionality. For analytics cookies, you may opt out without affecting your ability to use bajlok.club. Persistent cookies set by bajlok expire within a maximum period of 12 months from the date of placement unless cleared earlier by you.

7 Data Retention

bajlok retains personal data for as long as is necessary to fulfil the purpose for which it was collected, subject to the following retention guidelines:

• Account Data: Retained for the duration of your active account relationship with bajlok, plus a minimum of five (5) years following account closure, to satisfy financial compliance and AML record-keeping obligations.
• KYC / Identity Documents: Retained for a minimum of five (5) years following account closure in compliance with applicable financial crime prevention requirements.
• Transaction Records: Retained for a minimum of five (5) years to meet financial record-keeping obligations and to support any dispute resolution or regulatory inquiry that may arise.
• Gameplay Records: Retained for a minimum of two (2) years to support responsible gaming monitoring, dispute resolution, and bonus audit trails.
• Support Correspondence: Retained for two (2) years following the resolution of the relevant support case.
• Technical & Device Data (Logs): Retained for up to twelve (12) months for security and fraud investigation purposes, after which they are anonymised or deleted.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised. Where anonymisation is applied, the resulting data no longer constitutes personal data and may be retained indefinitely for aggregated analytics purposes.

8 Data Security

bajlok implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures include:

• End-to-end SSL/TLS encryption for all platform communications.
• Encrypted storage of sensitive data fields including passwords (using industry-standard hashing) and identity document files.
• Role-based access controls limiting internal data access to staff with a documented operational need.
• Regular security vulnerability assessments and penetration testing of the platform infrastructure.
• Automated anomaly detection systems monitoring for unusual login patterns, large or atypical transactions, and other potential indicators of account compromise or fraud.
• Staff confidentiality agreements and data protection training for all personnel with access to player data.

While bajlok takes all reasonable steps to protect your data, no internet-based platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your bajlok account credentials. If you believe your account has been compromised, contact [email protected] immediately.

9 Your Rights

As a bajlok player, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact [email protected] with your registered username and a description of your request. bajlok will respond within 30 days of receipt.

• Right of Access: You may request a copy of the personal data bajlok holds about you, together with information about how it is being used.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data held in your bajlok account.
• Right to Erasure: You may request deletion of your personal data. This right is subject to exceptions where retention is required by law (e.g., AML record-keeping obligations) or is necessary for the establishment, exercise, or defence of legal claims.
• Right to Restrict Processing: You may request that bajlok restricts its processing of your personal data in certain circumstances — for example, while the accuracy of data you have disputed is being verified.
• Right to Data Portability: Where processing is based on your consent or on a contract, you may request that bajlok provides your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You may object to processing based on bajlok's legitimate interests. bajlok will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests, or the processing is necessary for legal claims.
• Right to Withdraw Consent: Where bajlok relies on your consent as the legal basis for processing (e.g., marketing communications), you may withdraw that consent at any time by contacting [email protected].

10 Children's Privacy

If you are a parent or guardian and believe that a minor in your care has provided personal data to bajlok, please contact us immediately at [email protected]. We will investigate and take prompt remedial action, including account closure and data deletion, within 48 hours of a verified report.

11 Third-Party Links

bajlok.club may contain references to third-party game providers, payment services, or other external services. bajlok is not responsible for the privacy practices or content of any third-party services. We encourage you to review the privacy policy of any third-party service you interact with in connection with your use of the bajlok platform, particularly the payment processors (bKash, Nagad, Rocket, Upay) and game studio operators whose software is integrated into bajlok.club.

12 Changes to This Policy

bajlok reserves the right to update this Privacy Policy at any time. Where changes are material, bajlok will notify registered players via the email address associated with their account or by posting a prominent notice on bajlok.club prior to the change taking effect. The "Last Updated" date at the top of this page will be revised accordingly.

Continued use of bajlok.club following the publication of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the changes, you must cease using the platform and may request closure of your account by contacting our support team.

13 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data bajlok holds about you, please contact the bajlok data support team. We are available 24 hours a day, 7 days a week on Bangladesh Standard Time (BST, UTC+6).

Email: [email protected]

Please include your registered bajlok username, a clear description of your query or request, and — where applicable — the specific right you wish to exercise. bajlok aims to acknowledge all data-related requests within 5 business days and to provide a full response within 30 calendar days of receipt.

This Privacy Policy was last updated on 1 July 2026 and supersedes all previously published versions. © 2026 bajlok. All rights reserved.