8baje Privacy Policy

This Privacy Policy describes how 8baje ("we", "us", "our") collects, uses, stores, and protects personal information provided by users ("you") when you access or use the 8baje platform at https://8baje.org (the "Platform"). By registering an account or continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein.

This Policy should be read alongside our Terms and Conditions, which also govern your use of the Platform. If you have any questions about how we handle your personal data, please contact us at [email protected]. We aim to respond to all privacy-related enquiries within two business days.

8baje collects personal information through different channels depending on how you interact with the Platform. The categories of data we may collect include:

We use the personal information we collect for specific, limited purposes. We will not use your data in ways that are incompatible with those stated at the time of collection. Our primary purposes for processing your data are:

• To create, manage, and maintain your account, and to verify your identity and age in accordance with our eligibility requirements.
• To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, and other supported payment providers, and to maintain an accurate record of all financial transactions.
• To detect and prevent fraud, money laundering, account takeover, and other prohibited activities as described in our Terms and Conditions.
• To provide customer support, respond to your enquiries, and resolve disputes in connection with your use of the Platform.
• To send you service-related communications including account notifications, security alerts, and updates to our Terms or this Privacy Policy.
• To monitor responsible gaming indicators and apply protective measures such as deposit limits, time-outs, or self-exclusion at your request or in compliance with our duty of care.

Where we wish to use your data for any additional purpose — such as personalised promotional communications — we will seek your separate consent before doing so. You may withdraw consent at any time by contacting [email protected].

We rely on the following legal bases when processing your personal data:

• Contractual necessity — processing required to fulfil the services described in our Terms and Conditions, including account management and payment processing.
• Legitimate interests — fraud prevention, platform security, system administration, and improving the quality of our services, where these interests are not overridden by your rights.
• Legal obligation — where processing is required to comply with applicable anti-money laundering, identity verification, or other regulatory requirements.
• Consent — where we have asked for and received your explicit consent for a specific purpose, such as receiving promotional emails. You may withdraw consent at any time without affecting the lawfulness of prior processing.

8baje does not sell, rent, or trade your personal data. We may share your information only in the following limited circumstances:

• Payment processors and financial partners such as bKash, Nagad, Rocket, and Upay — solely for the purpose of completing your deposit and withdrawal transactions securely.
• Technology and service providers who help us operate the Platform, including hosting providers, analytics services, fraud detection tools, and customer support software — all operating under strict data processing agreements.
• Law enforcement or regulatory authorities where we are required by law to disclose information, or where disclosure is necessary to protect the rights, property, or safety of 8baje, its users, or the public.
• A successor entity in the event of a merger, acquisition, or sale of all or a material portion of 8baje's business assets, provided the acquiring entity agrees to honour this Privacy Policy.

In all cases where data is shared with third-party processors, we require them to process data only as instructed by us and in compliance with applicable data protection standards. We do not permit third-party processors to use your data for their own marketing purposes.

8baje uses cookies and similar tracking technologies to improve your experience on the Platform. Cookies are small text files placed on your device when you visit a website. We use the following types:

• Essential cookies — necessary for the Platform to function correctly. These include session cookies that keep you logged in during your visit and security cookies that protect your account from cross-site request forgery. These cannot be disabled.
• Analytics cookies — used to measure how visitors interact with the Platform, which pages are most visited, and where users encounter errors. This data is aggregated and anonymised and is used to improve Platform performance.
• Preference cookies — used to remember your settings such as language preference, so you do not need to re-enter them on every visit.

You can control non-essential cookies through your browser settings. Disabling certain cookies may affect the functionality of some parts of the Platform. For detailed information about cookies in use, please contact [email protected].

8baje retains your personal data only for as long as necessary to fulfil the purposes described in this Policy, unless a longer retention period is required by law. As a general guideline: account and identity data is retained for the duration of your account plus a minimum of five years after account closure to comply with financial record-keeping and anti-money laundering requirements; transaction records are retained for a minimum of five years; gaming activity logs are retained for three years or longer where required for responsible gaming monitoring purposes; marketing consent records are retained until withdrawn, then for one additional year as an audit record.

When data is no longer required, it is securely deleted or anonymised so that it can no longer be linked to you as an individual. If you close your account, we will process a deletion request within 30 days subject to the minimum statutory retention periods described above.

8baje applies industry-standard technical and organisational measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include SSL/TLS encryption for all data in transit, encrypted storage for sensitive data at rest, access controls that limit internal staff access to personal data on a need-to-know basis, regular security assessments and vulnerability testing, and incident response procedures to contain and report any confirmed data breach.

No method of data transmission over the internet or electronic storage is completely secure. While we work hard to protect your personal data, we cannot guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you promptly in accordance with applicable law.

You have the following rights in relation to the personal data 8baje holds about you. To exercise any of these rights, please contact us at [email protected] with the subject line "Data Rights Request" and your registered account details. We will respond within 30 days:

• Right of access — you may request a copy of the personal data we hold about you, together with information about how it is being used.
• Right to rectification — you may request correction of any inaccurate or incomplete personal data we hold about you.
• Right to erasure — you may request deletion of your personal data where it is no longer necessary for the purposes it was collected, subject to our legal retention obligations.
• Right to restrict processing — you may ask us to pause processing of your data in certain circumstances, for example while a rectification request is being assessed.
• Right to withdraw consent — where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

Please note that some rights are subject to exemptions under applicable law. For example, we may be unable to delete data that we are legally required to retain. We will always explain clearly if an exemption applies to your request.

The 8baje Platform is strictly intended for adults aged 21 and above. We do not knowingly collect personal data from anyone under the age of 21. If you are a parent or guardian and believe that a minor has registered an account or provided personal data through the Platform, please contact us immediately at [email protected]. We will take prompt steps to verify the report and, if confirmed, delete the minor's data and close the account without delay.

The 8baje Platform may contain references to third-party services such as payment processors. Once you navigate away from the Platform to a third-party site or service, this Privacy Policy no longer applies. We encourage you to read the privacy policies of any third-party services you use in connection with the Platform. 8baje is not responsible for the privacy practices or content of third-party websites.

8baje may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or business operations. When we make material changes, we will post the revised Policy on this page with an updated effective date and, where appropriate, notify registered users via a Platform notification or email.

Your continued use of the Platform after a revised Policy has been posted constitutes your acceptance of the updated terms. We recommend reviewing this page periodically so you are always aware of how your data is being handled.

If you have any questions, concerns, or complaints about this Privacy Policy or the way 8baje handles your personal data, please contact our privacy team. All privacy-related enquiries are handled confidentially. Our email address is provided as plain text only and is not a clickable link.