Privacy Policy for
livebaji

livebaji collects personal information from you at various points during your relationship with the Platform. The information we collect falls into three broad categories: information you provide directly, information generated automatically through your use of the Platform, and information received from third parties such as payment processors and identity verification services.

Information You Provide Directly

When you register an account, make a deposit, request a withdrawal, or contact our support team, you may provide us with the following categories of personal data:

• Identity data: Full legal name, date of birth, gender, and a copy of your government-issued identity document (National Identity Card, passport, or driving licence) submitted during KYC verification.
• Contact data: Email address, mobile phone number, and residential address (including city, district, and postal code within Bangladesh — for example, Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, or Mymensingh).
• Financial data: Mobile financial service account reference (bKash, Nagad, Rocket, or Upay registered number), bank account name, and bank name (Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, or Sonali Bank) where bank transfer is used. We do not store full card numbers or mobile wallet PINs.
• Account credentials: Username and hashed password. We never store your password in plain text.
• Communications data: Content of messages sent to our support team via email, and any feedback or complaints submitted through the Platform.
• Responsible gaming data: Self-exclusion requests, deposit limit preferences, and time-out settings that you configure on the Platform.

Information Collected Automatically

When you access and use livebaji, our systems automatically collect certain technical and behavioural data. This includes:

• Device and browser data: IP address, device type, operating system, browser type and version, and screen resolution.
• Usage data: Pages visited, games played, bets placed, session duration, click paths, and feature interactions within the Platform.
• Transaction logs: Records of all deposits, withdrawals, bonus claims, and wagering activity associated with your account.
• Geolocation data: Approximate location derived from your IP address, used to verify that you are accessing the Platform from an eligible location. We do not collect precise GPS coordinates.
• Cookie and tracking data: Information collected via cookies and similar technologies as described in the Cookies section of this Policy.

Information From Third Parties

We may receive personal data about you from the following third-party sources to supplement or verify the information you have provided:

• Identity verification and KYC service providers, who return a verification status and flag any discrepancies against national identity databases.
• Payment processors (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank), who confirm transaction outcomes and associated account reference numbers.
• Fraud detection and anti-money-laundering (AML) screening services, which may provide risk signals based on publicly available sanction lists or known fraud patterns.
• Game providers (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi), which transmit session and game-round data to the Platform for the purpose of displaying your game history and settling bets.

livebaji does not share your personal data with external parties except where it is necessary to deliver the service you have contracted for, where we are legally required to do so, or where you have given us explicit consent. The categories of third parties with whom we may share data are described below.

Service Providers and Data Processors

We engage trusted third-party companies to perform specific functions on our behalf. These service providers act as data processors and are contractually bound to process your data only for the purposes we specify and to maintain appropriate security standards. They include:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, and Sonali Bank — to authorise and settle financial transactions.
• KYC and identity verification providers: To verify your identity and age during the account opening and KYC processes.
• Game studios: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — to deliver game content and return game-round results. These studios receive only the session and stake data necessary to operate individual game rounds.
• Platform hosting and cloud infrastructure providers: Who store and process Platform data on our behalf within secured data centres.
• Anti-fraud and AML screening services: Who receive transaction and account data to perform automated risk assessments.
• Email and communication service providers: Who deliver transactional and marketing emails on our behalf.

Legal and Regulatory Disclosures

livebaji may be required by applicable law or regulation to disclose personal data to governmental or regulatory authorities. Such disclosures may be made in the context of anti-money-laundering investigations, tax compliance inquiries, court orders, or other lawful requests. We will notify affected users of any such disclosure where we are legally permitted to do so.

Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of the assets of livebaji, your personal data may be transferred to the successor entity. We will provide notice of any such transfer before your data becomes subject to a materially different privacy policy.

livebaji employs a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and our servers.
• Encryption of sensitive data fields (such as identity document copies and financial references) at rest in our database.
• Strict role-based access controls, ensuring that only staff with a legitimate operational need can access personal data.
• Regular internal and external security assessments of Platform infrastructure.
• Secure password hashing using industry-standard one-way cryptographic algorithms — your password is never stored in a readable format.
• Intrusion detection systems and real-time monitoring of Platform infrastructure for anomalous activity.
• Periodic staff training on data protection responsibilities and secure data handling procedures.

Despite these measures, no security system is completely impenetrable. In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, livebaji will notify affected users without undue delay and will describe the nature of the breach, the categories of data involved, and the steps we are taking to contain and remediate the incident.

Data Retention Periods

We retain your personal data for as long as your account remains active and for a defined period thereafter. Specific retention periods are as follows:

• Account and identity data: Retained for the duration of your account and for five years after account closure, to comply with anti-money-laundering and fraud-prevention obligations.
• Transaction and financial records: Retained for seven years from the date of each transaction for accounting and legal compliance purposes.
• Support communications: Retained for three years from the date of the most recent interaction, to support dispute resolution.
• Analytics data: Anonymised and aggregated within 24 months; identifiable usage logs are deleted within 90 days.
• Self-exclusion records: Retained permanently to prevent re-registration by excluded players, even after account closure.

When a retention period expires, data is securely deleted or anonymised so that it can no longer be associated with you as an individual.

The livebaji Platform incorporates game content and software delivered by third-party game studios, including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. When you launch a game provided by one of these studios, a session is established between your browser and the studio's game server. That session is subject to the privacy practices of the relevant game provider. livebaji is not responsible for the data processing practices of third-party game studios beyond the scope of the data-sharing arrangements described in this Policy.

From time to time, the Platform may contain references to payment partners such as bKash, Nagad, Rocket, and Upay. When you initiate a transaction through one of these services, you will be interacting directly with the payment provider's own infrastructure, which is governed by that provider's terms of service and privacy policy. livebaji recommends that you review the privacy policies of any third-party service you use in connection with the Platform.

livebaji does not control, and takes no responsibility for, the content, privacy policies, or practices of any third-party service provider operating independently of our Platform. The inclusion of any third-party service on or in connection with livebaji does not constitute an endorsement of that service's data practices.