batji Privacy Policy

1. Introduction

This Privacy Policy (the "Policy") describes how batji (the "Platform", "we", "us", or "our"), operator of the online casino and sports betting platform accessible at batji.io, collects, processes, stores, and shares personal information about you when you visit or use the batji platform.

This Policy applies to all personal data collected through the batji website, mobile-optimised interface, customer support channels, and any other interaction you have with the batji brand. It applies to registered account holders as well as visitors who browse batji.io without creating an account.

By accessing or using the batji platform in any capacity, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein. If you do not agree with any part of this Policy, you should cease using the platform immediately.

This Policy is effective as of 1 January 2026 and should be read in conjunction with batji's Terms & Conditions, which are incorporated by reference. In the event of any conflict between this Policy and the Terms & Conditions on a data-protection matter, this Policy shall take precedence.

2. Data Controller

For the purposes of applicable data protection law, batji acts as the data controller in respect of personal data collected through the batji.io platform. As data controller, batji determines the purposes for which and the means by which personal data is processed.

All data-related enquiries, subject access requests, and complaints should be directed to the batji data protection contact at [email protected]. Please use the subject line "Data Protection Enquiry" to ensure your message is routed to the appropriate team member for prompt handling.

Where batji engages third-party service providers to process data on its behalf — such as payment processors, identity verification providers, or cloud infrastructure partners — those parties act as data processors operating under written data processing agreements that bind them to handle your data only in accordance with batji's instructions and applicable law.

3. Personal Data We Collect

batji collects personal data through several distinct channels and at various points throughout your relationship with the platform. The categories of personal data we collect are set out in the table below:

3.1 Data You Provide Voluntarily

The majority of personal data batji holds about you is information you provide directly — at account registration, during KYC verification, when contacting support, or when updating your account profile. You are not obliged to provide this information, but failure to provide data marked as mandatory during registration will prevent you from creating or maintaining a functional batji account.

3.2 Data Collected Automatically

When you visit batji.io, certain technical and usage data is collected automatically through cookies, web beacons, and server logs. This data helps us maintain platform security, diagnose technical issues, understand how players navigate the site, and improve the overall user experience. See Section 9 (Cookies & Tracking) for further detail.

3.3 Data from Third Parties

batji may receive personal data about you from third-party sources in limited circumstances, including: identity verification providers who confirm the authenticity of documents you submit during KYC; payment processors who confirm the status and ownership of your payment method; and fraud-detection services that flag accounts or transactions associated with known fraudulent patterns.

4. How We Use Your Personal Data

batji uses the personal data it collects for the following clearly defined purposes:

• Account management: Creating, maintaining, and securing your batji account; processing login authentication; managing account settings and preferences.
• Payment processing: Facilitating deposits via bKash, Nagad, Rocket, Upay, and bank transfer; processing withdrawal requests to your verified payment method; maintaining transaction records.
• Identity verification (KYC/AML): Verifying your age (21+), identity, and payment method ownership in compliance with anti-money laundering obligations and our responsible gaming policy.
• Delivering platform services: Enabling access to casino games (slots, live dealer, video poker), sportsbook markets (cricket BPL, T20, football, kabaddi), and any other features of the batji platform.
• Customer support: Responding to your enquiries, complaints, and requests submitted via email to [email protected] or through any other support channel.
• Responsible gaming monitoring: Tracking gameplay patterns to identify signs of problem gambling; enforcing self-exclusion, deposit limits, and cooling-off periods you have set; proactively reaching out if concerning patterns are detected.
• Fraud prevention and security: Detecting and investigating fraudulent activity, unauthorised account access, money laundering, and other prohibited conduct outlined in the Terms & Conditions.
• Legal and regulatory compliance: Retaining records as required by applicable law; responding to lawful requests from courts, regulators, and law enforcement agencies.
• Platform improvement: Analysing aggregated and anonymised usage data to improve platform performance, navigation, game selection, and promotional offerings.
• Marketing communications (with consent): Sending you promotional offers, bonus notifications, and event updates relevant to your interests — but only where you have explicitly opted in to receive such communications. You may withdraw this consent at any time.

batji will not use your personal data for any purpose incompatible with those listed above without first obtaining your explicit consent or being required to do so by law.

5. Legal Basis for Processing

batji processes your personal data on the following legal bases:

• Contractual necessity: Processing required to fulfil the contract between you and batji — including account creation, payment processing, and platform access — is carried out because it is necessary to perform the agreement you entered into when registering.
• Legal obligation: Certain processing — including KYC identity checks, transaction record-keeping, and responding to law enforcement requests — is required to comply with legal obligations applicable to batji as a platform operator.
• Legitimate interests: Processing carried out for fraud prevention, platform security, responsible gaming monitoring, and internal analytics is based on batji's legitimate interests in operating a safe, fair, and sustainable platform, provided those interests are not overridden by your fundamental rights.
• Consent: Marketing communications and non-essential cookies are only deployed where you have given freely informed, specific, and withdrawable consent. You may withdraw consent for marketing at any time by contacting [email protected].

6. How We Share Your Data

batji does not sell, rent, or trade your personal data to third parties for their own commercial use. We share personal data with external parties only in the circumstances described below:

6.1 Payment Processors

When you make a deposit or request a withdrawal, the minimum necessary financial data is shared with the relevant payment provider (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, Visa, Mastercard) solely to process that transaction. These providers operate under their own privacy policies and are bound by financial services regulations.

6.2 Identity Verification Providers

To fulfil our KYC obligations, batji may transmit identity document images and personal details to accredited third-party identity verification services. These providers are contractually bound to use your data exclusively for verification purposes and to destroy or return documents upon completion of the verification process.

6.3 Fraud Prevention and Security Services

Certain account and transaction data may be shared with specialist fraud-detection services and security monitoring platforms. These services help batji identify unusual patterns, flag potentially fraudulent accounts, and protect the platform community as a whole.

6.4 Cloud Infrastructure and Technology Partners

batji uses reputable cloud infrastructure providers to host the platform and its data. These providers act as data processors under written agreements and are not permitted to access or use your personal data for any purpose other than providing the contracted infrastructure services.

6.5 Legal and Regulatory Authorities

batji may disclose personal data to law enforcement agencies, courts, or regulatory authorities where required to do so by law, court order, or in response to a lawful and properly documented request. In such cases, batji will disclose only the minimum data necessary to satisfy the legal requirement and, where legally permissible, will notify you of such disclosure.

6.6 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or a material part of batji's business assets, personal data held by batji may be transferred to the acquiring entity. You will be notified in advance of such a transfer and of any material change to how your data will be handled by the new entity.

7. Data Retention

batji retains personal data for no longer than is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention guidelines apply:

• Account and identity data: Retained for the duration of your account relationship with batji and for a period of 6 years following account closure, in line with standard financial record-keeping obligations.
• Transaction records: Deposit and withdrawal records, along with associated financial data, are retained for 6 years from the date of each transaction to satisfy anti-money laundering record-keeping requirements.
• KYC documents: Identity documents submitted for verification are retained for the legally required period following the end of the customer relationship and are then securely destroyed.
• Support correspondence: Email and chat transcripts are retained for 3 years from the date of the last interaction, unless a longer retention period is required due to an ongoing dispute or legal hold.
• Technical and usage data: Server logs and anonymised analytics data are typically retained for 12–24 months for security analysis and platform improvement purposes.
• Marketing consent records: Records of consent and withdrawal of consent for marketing communications are retained for the duration of the account relationship and for 3 years thereafter as evidence of compliance.

When personal data is no longer required and no legal retention obligation applies, batji will securely delete or anonymise the data so that it can no longer be linked to you as an individual.

8. Security Measures

batji takes the security of your personal data seriously and implements a layered set of technical and organisational safeguards to protect against unauthorised access, accidental loss, disclosure, or destruction. Our security measures include:

• SSL/TLS encryption: All data transmitted between your device and batji.io is encrypted in transit using industry-standard Transport Layer Security (TLS 1.2 or higher).
• AES-256 encryption at rest: Sensitive data stored in batji's databases — including identity documents, financial data, and account credentials — is encrypted at rest using AES-256 encryption.
• Password hashing: Account passwords are never stored in plain text. batji uses a strong, salted cryptographic hashing algorithm to store password data, ensuring that even internal staff cannot retrieve your original password.
• Two-factor authentication (2FA): Account holders are encouraged to enable 2FA for an additional layer of account security. Where enabled, a one-time verification code is required alongside your password at login.
• Access controls: Access to personal data within batji's internal systems is restricted on a strict need-to-know basis. Staff with data access are subject to background screening and mandatory data protection training.
• Penetration testing and vulnerability scanning: batji engages independent security specialists to conduct regular penetration tests and vulnerability assessments of the platform infrastructure.
• Incident response: batji maintains a documented data breach response procedure. In the event of a security incident affecting your personal data, we will notify affected account holders without undue delay in accordance with applicable notification obligations.

Whilst batji employs robust security practices, no online platform can guarantee absolute security against all possible threats. You play an important role in keeping your account secure by maintaining a strong, unique password and keeping your login credentials confidential. If you suspect your account has been compromised, contact [email protected] immediately.

9. Cookies & Tracking Technologies

batji uses cookies and similar tracking technologies on the batji.io website to enhance platform functionality, maintain session security, and gather anonymised analytics on how the platform is used. The following categories of cookies are employed:

• Strictly necessary cookies: These cookies are essential for the operation of the batji platform. They enable core functions such as session management, login authentication, and security checks. These cookies cannot be disabled without materially impairing your ability to use the platform.
• Functional cookies: These cookies remember your preferences — such as your preferred language, display settings, and recent game selections — to provide a more personalised experience on return visits.
• Analytics cookies: batji uses anonymised analytics tools to understand aggregate user behaviour on the platform, including which pages are most visited, how users navigate between sections, and where users encounter difficulty. This data is used in aggregate form only and is not linked to individual accounts.
• Marketing cookies (consent required): Where you have explicitly consented, marketing cookies may be used to deliver relevant promotional content based on your demonstrated interests. You may withdraw consent for marketing cookies at any time via the cookie preference centre or by contacting support.

You may control cookie settings through your browser. Most modern browsers allow you to block or delete cookies; however, disabling strictly necessary cookies may prevent you from logging in or using certain features of the batji platform. Please consult your browser's help documentation for guidance on managing cookie settings.

10. Your Data Rights

As a data subject, you hold the following rights in respect of your personal data held by batji. To exercise any of these rights, please submit a written request to [email protected] with the subject line "Data Rights Request". batji will respond within 30 calendar days of receiving a valid request.

• Right of access: You have the right to request a copy of the personal data batji holds about you, together with information about how it is used and with whom it is shared.
• Right to rectification: If any personal data batji holds about you is inaccurate or incomplete, you have the right to request that it be corrected or updated without undue delay.
• Right to erasure ("right to be forgotten"): You may request that batji delete your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (and no other legal basis applies), or where the data has been unlawfully processed. Note that certain data must be retained by law and cannot be deleted upon request.
• Right to restriction of processing: You may request that batji restrict processing of your personal data in certain circumstances — for example, while the accuracy of data you have contested is being verified.
• Right to data portability: Where processing is based on your consent or on contractual necessity and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to object: You have the right to object to processing of your personal data carried out on the basis of legitimate interests, including profiling based on those interests. You also have an unconditional right to object to processing for direct marketing purposes at any time.
• Rights relating to automated decision-making: You have the right not to be subject to a decision based solely on automated processing — including profiling — that produces legal or similarly significant effects concerning you, unless certain exceptions apply.

11. Minors & Age Restriction

The batji platform is strictly intended for adults aged 21 years and above. batji does not knowingly collect personal data from individuals under the age of 21. If you are under 21, you must not use the batji platform, create an account, or provide any personal information to batji.

If batji becomes aware that personal data has been collected from an individual under the age of 21 — whether through a failed age verification check, a parental notification, or any other means — all data associated with that individual will be promptly deleted, the account will be closed, and any funds deposited will be handled in accordance with batji's underage gambling policy.

If you believe a minor may have accessed or registered on the batji platform, please notify us immediately at [email protected] so that we can investigate and take appropriate action without delay.

12. International Data Transfers

batji primarily stores and processes personal data within secure data centre facilities. In certain circumstances — for example, where a cloud infrastructure provider or third-party processor operates data centres in jurisdictions outside Bangladesh — your personal data may be transferred to and processed in a country other than the one in which you are located.

Where such transfers occur, batji ensures that appropriate safeguards are in place to protect your personal data, including the use of contractual clauses that bind the receiving party to data protection standards equivalent to those described in this Policy. batji will not transfer personal data to a jurisdiction that does not provide an adequate level of protection for personal data without putting in place appropriate contractual or technical safeguards.

For further information about the safeguards batji applies to international data transfers, or to request a copy of the relevant contractual provisions, please contact [email protected].

13. Changes to This Privacy Policy

batji reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or platform features. The most current version of this Policy will always be available at batji.io/privacy-policy, with the effective date updated accordingly.

Where changes are material — meaning they significantly affect how we collect, use, or share your personal data, or affect your rights as a data subject — batji will notify registered account holders via the email address on file at least 14 days before the changes take effect. Your continued use of the batji platform after the effective date of any updated Policy constitutes your acceptance of the revised terms.

We encourage you to review this Privacy Policy periodically so that you remain informed about how batji is protecting your information. If you have any concerns about a proposed change, please contact us at [email protected] before the effective date.

14. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data batji holds about you, please reach out to our data protection contact:

• Email: [email protected]
• Subject line: "Data Protection Enquiry" or "Data Rights Request"
• Response time: Typically under 2 hours for general queries; up to 30 calendar days for formal data rights requests.
• Available: 24/7 in English.

Please include your registered username and a clear description of your query or request in all correspondence to allow us to respond as promptly and accurately as possible.