vip baj Privacy Policy
Your privacy matters to us. This Privacy Policy explains exactly what personal information vip baj collects from players in Bangladesh, how that data is used, how long it is retained, and the rights you hold over your own information. We are committed to handling your data with transparency and care.
Our Privacy Commitments
How vip baj Protects Your Data
The following six principles guide every data-handling decision at vip baj. They summarise our approach before the full legal detail below.
End-to-End Encryption
All data transmitted between your device and the vip baj platform is protected by industry-standard SSL/TLS encryption. This ensures that your personal and financial information cannot be intercepted during transit.
Minimal Data Collection
vip baj collects only the data that is genuinely necessary to provide, secure, and improve our services. We do not collect data for its own sake, and we do not sell your personal information to third-party advertisers or data brokers.
No Sale of Personal Data
Your personal information is never sold, rented, or traded. Data is shared only with essential service partners — payment processors, identity verification providers, and fraud prevention systems — under strict confidentiality agreements.
You Control Your Data
Registered players may request access to, correction of, or deletion of their personal data at any time by contacting [email protected]. We aim to respond to all data-related requests within 14 business days of receipt.
Clear Retention Limits
We do not keep your data indefinitely. Retention periods are tied to the purpose for which data was collected. Account data is retained for the lifetime of your account plus a defined post-closure period. See the Data Retention section for full details.
Transparent Policy Updates
When this Privacy Policy is updated in a material way, we will notify registered players by email at least 7 days before the changes take effect. Continued use of the vip baj platform after the effective date constitutes acceptance of the revised policy.
Section 1
Information We Collect
vip baj collects personal information from players at several stages: during account registration, during the identity verification process, through your ongoing use of the platform, and through automated technical means such as cookies and server logs. The categories of personal data we collect are set out below.
Registration Data
When you create a vip baj account, we collect the information you provide directly: your full legal name, date of birth, residential address (including district, division, and postcode within Bangladesh), email address, mobile phone number, and your chosen username. This information is required to open your account and is verified against your identity documents before any withdrawal is permitted.
Identity Verification Data
To comply with our age verification and anti-money-laundering obligations, we may collect copies of identity documents — primarily the Bangladesh National Identity Card (NID) — as well as a live selfie or photograph. In cases where additional verification is required, we may request a utility bill or bank statement as proof of address. These documents are processed by our identity verification partner under strict data-handling agreements.
Financial Transaction Data
When you deposit or withdraw funds, we collect the details necessary to process the transaction: your bKash, Nagad, Rocket, or Upay mobile wallet number, or your bank account and card details where applicable. We do not store full card numbers on our own servers — card data is tokenised by our payment processor (Visa/Mastercard) and held in their secure vaulted environment. We retain transaction records including amounts, dates, and payment method references for audit and compliance purposes.
Activity and Gameplay Data
We automatically record your activity on the vip baj platform including: betting history (matches, markets, stakes, and outcomes), game session logs (slots, live casino, crash games), login timestamps, IP addresses at the time of login, device type, operating system, and browser version. This data is used for fraud detection, responsible gaming monitoring, and service improvement.
Communications Data
If you contact the vip baj support team — whether by email, live chat, or any other channel — we retain a record of that correspondence, including the content of the messages exchanged and any attachments provided. This is used for quality assurance, dispute resolution, and ongoing account management.
Data You Choose to Provide
You may voluntarily provide additional information at any point, such as preferred language, sports preferences, or responsible gaming limits. Providing this information is optional, and declining to do so will not affect your ability to use the platform's core services.
Why We Need Your NID
Bangladesh law and responsible gambling best practices require us to verify that every player is a real adult (18+) before processing withdrawals. Your NID data is used exclusively for this purpose and is never shared with advertisers or unrelated third parties.
Card Data Security
vip baj does not store raw card numbers on its own infrastructure. All Visa and Mastercard payment data is handled directly by our PCI-DSS certified payment processor, which returns only a secure token for our records.
Data We Never Collect
vip baj does not collect your social media passwords, access to your phone contacts or photo library, or any biometric data beyond the identity verification selfie required for KYC compliance.
Section 2
How We Use Your Data
vip baj uses the personal data it collects for the following specific purposes. We only process your data where a valid legal basis exists — either because processing is necessary to perform our contract with you, because we have a legitimate business interest, or because you have given your explicit consent.
Account Management and Service Delivery
Your registration data is used to create and maintain your account, authenticate your logins, process your bets and game sessions, and deliver the sports betting and casino services you have requested. Without this data, we cannot provide you with a personalised platform experience or ensure your account is secure.
Payment Processing
Financial transaction data is used to process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, Mastercard, and bank transfer. We share only the minimum data necessary with each payment provider to complete your transaction. Payment providers are contractually prohibited from using your data for any purpose other than processing the transaction on our behalf.
Identity Verification and Compliance
We are required by our internal policies and responsible gambling commitments to verify the age and identity of all players before processing withdrawals. Identity verification data is used solely for this purpose and for anti-money-laundering (AML) screening. This processing is necessary to comply with our legal and contractual obligations.
Fraud Prevention and Platform Security
Activity logs, device data, and IP address records are used to detect and prevent fraud, bonus abuse, multi-accounting, and other prohibited conduct described in our Terms & Conditions. This processing is based on vip baj's legitimate interest in maintaining the integrity and fairness of the platform for all players.
Responsible Gaming Monitoring
Gameplay data — including session lengths, deposit frequency, loss patterns, and self-exclusion status — is monitored by our responsible gaming systems to identify players who may be experiencing gambling-related harm. Where such indicators are detected, vip baj may proactively contact the player or apply protective account restrictions. This processing is in the player's vital interest and is a core component of our responsible gaming commitment.
Marketing Communications
With your explicit consent (given at registration or at any later point), vip baj may send you promotional emails, SMS notifications, or in-platform messages about bonuses, seasonal promotions (such as Eid or Pohela Boishakh special offers), and new game launches. You may withdraw consent to marketing communications at any time by clicking "unsubscribe" in any marketing email or by updating your communication preferences in Account Settings.
Platform Improvement and Analytics
Aggregated and anonymised usage data is used to analyse player behaviour trends, improve the platform's navigation and performance, and inform decisions about new product features. This data does not identify individual players and is used in aggregate statistical form only.
| Purpose | Legal Basis |
|---|---|
| Account creation and management | Contract performance |
| Payment processing | Contract performance |
| Age and identity verification | Legal obligation |
| Fraud and abuse prevention | Legitimate interest |
| Responsible gaming monitoring | Vital interest / Legal obligation |
| Marketing communications | Consent |
| Platform analytics | Legitimate interest |
| Dispute resolution and auditing | Legitimate interest / Legal obligation |
Section 3
Data Sharing and Disclosure
vip baj does not sell, rent, or trade your personal information to any third party for commercial purposes. We share your data only in the limited circumstances described below, and only with parties who are bound by contractual or legal obligations to protect it.
Payment Service Providers
To process your deposits and withdrawals, we share the minimum necessary financial and identity information with our payment partners: bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, City Bank, and BRAC Bank. Each of these providers receives only the data required to complete your specific transaction. They are contractually prohibited from using your data for any other purpose.
Identity Verification Providers
To fulfil our age verification and KYC obligations, we share copies of identity documents with our contracted identity verification partner. This partner operates under a strict data processing agreement and is authorised only to verify the authenticity and content of the documents provided — not to retain or re-use them for any other purpose.
Game Content Providers
The games hosted on vip baj are powered by third-party game studios including Pragmatic Play, Evolution Gaming, Spribe, Microgaming, NetEnt, and Ezugi, among others. These providers receive only a pseudonymous player identifier and the bet/game session data required to run the game. They do not receive your name, NID, phone number, or payment details.
Fraud Prevention and Security Services
vip baj uses third-party fraud detection and cybersecurity services that may process technical data such as IP addresses, device fingerprints, and login behaviour patterns. These services are used to protect the integrity of the platform and the security of all player accounts. Data shared with these services is subject to strict contractual confidentiality obligations.
Law Enforcement and Legal Obligations
We may be required to disclose personal data in response to a valid court order, subpoena, or lawful request from a government authority or law enforcement agency in Bangladesh or another relevant jurisdiction. In such cases, we will disclose only the data specifically required by the order and will inform the affected player where legally permissible to do so.
Business Transfers
In the event that vip baj undergoes a merger, acquisition, or sale of all or part of its assets, your personal data may be transferred to the acquiring entity as part of that transaction. In such an event, we will provide notice to affected players and ensure that the receiving entity is bound by privacy obligations no less protective than those described in this policy.
No Cross-Border Transfers Without Protection
Where personal data is transferred to service providers or partners located outside Bangladesh, vip baj takes appropriate steps to ensure that the transfer is subject to adequate safeguards — including contractual data processing agreements that require the receiving party to maintain appropriate technical and organisational security measures. vip baj does not transfer personal data to jurisdictions that do not offer an adequate level of data protection without first implementing such safeguards.
Section 5
Data Retention and Storage
vip baj retains your personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and compliance obligations. The following retention schedule applies to the main categories of data we hold.
Account and Registration Data
Your account registration data — including name, date of birth, contact details, and username — is retained for the lifetime of your active account. Following account closure (whether requested by you or initiated by vip baj), this data is retained for a further 5 years for audit, dispute resolution, and anti-fraud compliance purposes, after which it is securely deleted or fully anonymised.
Identity Verification Documents
Copies of identity documents (NID, selfie, proof of address) are retained for the duration of your account and for 5 years after account closure. This retention period reflects obligations related to responsible gaming recordkeeping and financial compliance. Documents are stored in encrypted form on secure servers and access is strictly limited to authorised compliance personnel.
Financial Transaction Records
All deposit and withdrawal records — including amounts, dates, payment method references, and associated account identifiers — are retained for a minimum of 7 years from the date of the transaction. This extended retention period is required for financial audit purposes. After 7 years, transaction records are securely deleted unless an active dispute or investigation requires their continued retention.
Activity and Gameplay Logs
Detailed gameplay and activity logs (session times, bet history, game outcomes) are retained for 3 years from the date of the activity. Aggregated and anonymised analytics data derived from these logs may be retained indefinitely as it contains no personally identifiable information.
Support Communications
Records of customer support correspondence are retained for 3 years from the date of the last message in the conversation thread. This allows vip baj to refer to previous interactions when handling follow-up queries and to resolve any disputes that arise after the original interaction.
Marketing Consent Records
Where you have given or withdrawn consent to receive marketing communications, vip baj retains a record of that consent or withdrawal for the duration of your account plus 3 years. This record is maintained to demonstrate compliance with consent requirements and to defend against any claim that unsolicited communications were sent.
Data Storage Location
vip baj's primary data storage infrastructure is maintained on secure cloud servers. Where data is processed or stored by third-party sub-processors located outside Bangladesh, vip baj ensures that appropriate data transfer safeguards are in place as described in the Data Sharing section above. All servers used by vip baj — whether primary or sub-processor — are required to maintain industry-standard physical and digital security controls.
Section 6
Data Security Measures
vip baj implements a layered set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. No online platform can guarantee absolute security, but we take all reasonable steps to minimise risk and respond rapidly to any security incident.
Encryption
All data transmitted between your device and the vip baj platform is encrypted using TLS 1.2 or higher. Data stored on our servers — including identity documents, financial records, and account credentials — is encrypted at rest using AES-256 encryption. Password data is stored exclusively as salted cryptographic hashes; vip baj staff cannot view your plaintext password at any time.
Access Controls
Access to personal data within vip baj's internal systems is restricted on a strict need-to-know basis. Staff who require access to personal data to perform their role — such as compliance officers and customer support agents — are granted access only to the specific data categories required for their function. All internal data access is logged and subject to periodic review.
Infrastructure Security
vip baj's platform infrastructure is protected by firewalls, intrusion detection systems, and distributed denial-of-service (DDoS) mitigation services. Security patches are applied to all system components within defined timelines following vendor release. The platform undergoes periodic third-party penetration testing to identify and address potential vulnerabilities before they can be exploited.
Incident Response
vip baj maintains a formal data breach response procedure. In the event of a confirmed security incident that affects your personal data, we will notify affected players as promptly as reasonably practicable — and within a maximum of 72 hours of becoming aware of the breach — describing the nature of the incident, the data involved, and the steps taken in response. Notification will be sent to the email address registered on your account.
Your Role in Security
The security of your account also depends on the steps you take. We strongly recommend choosing a unique, strong password for your vip baj account, enabling two-factor authentication (2FA) in Account Settings, and never sharing your login credentials with any other person. If you suspect your account has been accessed without your authorisation, contact [email protected] immediately and change your password without delay.
TLS Encryption
All connections to vip-baj.com are protected by TLS 1.2+ encryption. Look for the padlock icon in your browser's address bar to confirm your connection is secure before entering any personal or financial information.
Enable Two-Factor Authentication
2FA adds a second layer of security to your vip baj login. Once enabled, a one-time code is required each time you log in from a new device, making it significantly harder for unauthorised users to access your account even if they obtain your password.
Phishing Warning
vip baj will never ask for your password via email, SMS, or live chat. If you receive a message claiming to be from vip baj and asking for your password or payment details, do not respond — report it immediately to [email protected].
Section 7
Your Privacy Rights
As a player on the vip baj platform, you hold the following rights in relation to the personal data we hold about you. To exercise any of these rights, contact our support team at [email protected] with the subject line "Privacy Rights Request" and we will respond within 14 business days.
Right of Access
You have the right to request a copy of the personal data vip baj holds about you. Upon receipt of a verified access request, we will provide you with a summary of the categories of data held, the purposes for which it is processed, and the third parties with whom it has been shared, along with a copy of the data itself in a readable format.
Right to Rectification
If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. For basic account details (email address, phone number, residential address), you may update this information directly in Account Settings. For legal name corrections or date-of-birth amendments, please contact [email protected] and provide supporting identity documentation.
Right to Erasure
You may request that vip baj delete your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose for which it was collected, or where you have withdrawn your consent and no other legal basis for processing applies. Please note that the right to erasure is not absolute: we may be required to retain certain data for legal, audit, or anti-fraud compliance purposes as described in the Data Retention section. We will explain any such reason if we are unable to fulfil an erasure request in full.
Right to Restrict Processing
In certain circumstances — such as while the accuracy of your data is being contested, or while a complaint is being investigated — you may request that we restrict the processing of your personal data. During a restriction period, we will continue to store your data but will not actively process it except with your consent or for the establishment, exercise, or defence of legal claims.
Right to Data Portability
Where vip baj processes your data on the basis of your consent or as necessary for the performance of our contract with you, and where that processing is carried out by automated means, you have the right to receive a copy of your data in a structured, commonly used, machine-readable format (such as CSV or JSON) so that it can be transferred to another service provider if you choose.
Right to Object to Marketing
You have the right to object at any time to the processing of your personal data for direct marketing purposes. Upon receipt of such an objection, vip baj will immediately cease sending marketing communications to you and will record your preference in our consent management system. You may also unsubscribe from marketing emails at any time by clicking the "unsubscribe" link in any marketing message.
How to Exercise Your Rights
Send your request to [email protected] with the subject line "Privacy Rights Request", your registered email address or username, and a brief description of the right you wish to exercise. We may ask you to verify your identity before fulfilling the request to ensure that your data is not disclosed to an unauthorised third party. There is no charge for exercising your privacy rights, and we aim to respond within 14 business days of receipt.
Section 8
Policy Updates and Contact
vip baj reviews this Privacy Policy periodically and updates it when necessary to reflect changes in our data practices, changes in applicable law, or feedback from players. The effective date at the top of the page will be updated whenever a new version is published.
Material Changes
Where a change to this policy is material — meaning it significantly affects how we collect, use, or share your personal data, or materially affects your privacy rights — vip baj will notify you by email to the address registered on your account at least 7 days before the change takes effect. The email will describe the nature of the change and link to the updated policy. Continued use of the vip baj platform after the effective date of a material change constitutes your acceptance of the revised policy. If you do not accept the revised policy, you should cease using the platform and contact [email protected] to close your account.
Minor Changes
For minor, non-material changes — such as corrections to typographical errors, clarifications of existing language that do not alter the substance of any provision, or updates to contact details — vip baj will update the policy and the effective date without individual notification. We encourage you to review this page periodically to remain informed.
Contact the vip baj Privacy Team
If you have any question about this Privacy Policy, wish to exercise a privacy right, or have a concern about how vip baj handles your personal data, please contact us at the following address. All privacy-related communications should be sent by email for documentation purposes.
Email: [email protected]
Subject line for privacy queries: Privacy Policy Query
Subject line for rights requests: Privacy Rights Request
Response time: Within 14 business days of receipt
For urgent matters relating to a suspected data breach or unauthorised access to your account, please also contact support immediately via live chat within the platform, available 24 hours a day, 7 days a week, in English.
Policy Change Notifications
Material updates to this Privacy Policy are sent to your registered email address at least 7 days before taking effect. To ensure you receive these notifications, keep your email address current in Account Settings. Check your spam folder if you have not received a notification you expected.
Privacy Contact
All privacy-related requests and queries should be directed to [email protected] with the appropriate subject line. This ensures your message reaches the correct team and receives a timely response within our 14 business day commitment.
Current Version
This Privacy Policy is version effective January 2026. Always refer to the date shown in the hero section at the top of this page to confirm you are reading the most current version of our policy.
Explore vip baj
Ready to Play? Your Data Is Safe With Us.
Now that you understand how vip baj protects your privacy, explore our full range of cricket betting, live casino, slots, and more — all secured by the data safeguards described in this policy.