23baj Privacy Policy — How We Handle Your Data

Privacy at a Glance

Introduction

This Privacy Policy ("Policy") explains how 23baj ("the Platform", "we", "us", "our") collects, uses, stores, and protects the personal information of users ("Player", "User", "you") who access and use the services available at 23baj.bet. By registering an account or using the 23baj platform, you acknowledge that you have read and understood this Policy and consent to the collection and use of your personal information as described herein.

This Policy applies to all personal data collected through the 23baj website, mobile browser interface, customer support communications, and any other channel through which you interact with the Platform. It should be read alongside the 23baj Terms and Conditions. Capitalised terms not defined in this Policy carry the meanings given to them in the Terms and Conditions.

Information We Collect

23baj collects personal information that you provide directly, information that is generated automatically when you use the Platform, and in limited cases, information obtained from third-party service providers. The categories of personal information we collect include:

• ▸Identity and contact information: full name, date of birth, Bangladeshi mobile number, email address, and residential address as provided at registration or during KYC verification.
• ▸Identity verification documents: national identification card number, passport details, or other government-issued documents submitted to fulfil KYC requirements.
• ▸Financial and payment information: bKash, Nagad, Rocket, or Upay mobile wallet identifiers and transaction reference numbers used for deposits and withdrawals. Full payment credentials are not stored by 23baj.
• ▸Technical and usage data: IP address, device type, operating system, browser version, screen resolution, session duration, pages visited, and in-game activity logs.
• ▸Communications data: records of any correspondence between you and 23baj support, including support tickets, email exchanges, and any feedback you provide.

You are not required to provide all categories of personal information listed above. However, failure to provide information that is necessary for account registration, identity verification, or payment processing may prevent 23baj from being able to provide you with full access to the Platform or specific services.

How We Use Your Information

23baj uses the personal information we collect for the following purposes, each of which is necessary to provide you with a functional, secure, and compliant gaming service:

• ▸Account creation and management: to register your account, verify your identity, process KYC documentation, and maintain your account in good standing throughout its lifecycle.
• ▸Payment processing: to facilitate deposits via bKash, Nagad, Rocket, Upay and Bangladeshi bank transfers, to process withdrawal requests, and to maintain accurate financial records of all transactions on your account.
• ▸Platform security and fraud prevention: to detect, investigate, and prevent suspicious activity, fraudulent transactions, money laundering, and other prohibited conduct as defined in the Terms and Conditions.
• ▸Customer support: to respond to your enquiries, resolve disputes, process complaints, and communicate with you regarding your account status, transactions, or platform updates.
• ▸Responsible gaming compliance: to monitor gaming patterns for indicators of problem gambling behaviour, to enforce the minimum age of 21 years, and to administer self-exclusion and cooling-off arrangements where requested.
• ▸Platform improvement and analytics: to analyse aggregated, anonymised usage data to understand how players interact with 23baj, identify technical issues, and improve the overall user experience. This analysis does not involve identifying individual players.

Legal Basis for Processing

23baj processes your personal data on one or more of the following legal bases, depending on the specific purpose for which the data is being used:

• ▸Contractual necessity: processing that is required to deliver the services set out in the 23baj Terms and Conditions, including account registration, payment processing, and platform access.
• ▸Legitimate interests: processing that serves 23baj's legitimate business interests in fraud prevention, security monitoring, and platform improvement, where those interests are not overridden by your rights and interests.
• ▸Legal obligation: processing that is necessary to comply with applicable laws and regulations, including anti-money laundering requirements, age verification obligations, and responses to lawful requests from authorities.

Payment Data and Financial Information

23baj handles payment data with particular care given its sensitive nature. When you make a deposit via bKash, Nagad, Rocket or Upay, 23baj records the mobile wallet identifier associated with the transaction and the transaction reference number issued by the payment provider. 23baj does not store your mobile wallet PIN, password, or full account credentials. The data recorded is sufficient to maintain an accurate transaction history for your account and to match incoming payment confirmations against pending deposits.

For bank transfer deposits, 23baj records the sending bank name, the account reference or last four digits provided in the transfer reference, and the transaction amount. This information is used solely to match incoming transfers to your 23baj account and to maintain compliant financial records. It is not used for any purpose other than payment administration and fraud prevention.

Sharing of Your Information

23baj does not sell, rent, or trade your personal information to third parties for their own marketing or commercial purposes. We may share your personal information in the following limited circumstances:

• ▸Service providers and technology partners: third-party vendors who provide services integral to the Platform's operation, including payment processing infrastructure, game content delivery, identity verification services, and cloud hosting. These parties process data only on 23baj's instructions and are contractually bound to appropriate data protection standards.
• ▸Law enforcement and regulatory authorities: where 23baj is required by applicable law, court order, or governmental regulation to disclose personal information, or where disclosure is necessary to protect the rights, property, or safety of 23baj, its users, or third parties.
• ▸Anti-fraud and anti-money laundering compliance: where sharing of data with financial intelligence units or industry anti-fraud networks is required to fulfil legal obligations relating to the detection and reporting of suspicious financial activity.
• ▸Business restructuring: in the event of a merger, acquisition, or sale of all or part of 23baj's business, personal data may be transferred to the acquiring entity, subject to equivalent data protection commitments. Users will be notified of any such transfer via the contact details held on their account.

In all cases where 23baj shares personal data with third parties, we take reasonable steps to ensure that those parties protect the data to a standard consistent with this Policy and applicable law. We do not permit third-party service providers to use your personal data for their own independent purposes.

Cookies and Tracking Technologies

23baj uses cookies and similar tracking technologies to support the operation of the Platform and improve your browsing experience. A cookie is a small text file placed on your device by the Platform when you visit. 23baj uses the following categories of cookies:

• ▸Strictly necessary cookies: these are essential for the Platform to function and cannot be switched off. They include session authentication cookies that keep you logged in during your visit and security tokens that protect your account.
• ▸Analytics cookies: these help 23baj understand how users navigate the Platform by collecting aggregated, anonymised data on page visits, session lengths, and feature usage. This information is used solely to improve the Platform's performance and usability.
• ▸Preference cookies: these remember your in-session preferences such as display settings or previously entered form fields, to reduce the need for you to re-enter information on repeat visits.

You may manage or disable non-essential cookies through your device or browser settings. Please note that disabling strictly necessary cookies may affect the functionality of the 23baj platform, including your ability to log in and access account features. 23baj does not use third-party advertising or retargeting cookies.

Data Retention

23baj retains your personal data for as long as your account remains active and for such additional period as may be required to fulfil our legal obligations, resolve disputes, and enforce our agreements. Account data is generally retained for a minimum of five years following account closure, in order to comply with financial record-keeping requirements and anti-money laundering regulations applicable in the jurisdictions in which 23baj operates.

Where personal data is no longer required for the purposes for which it was collected, and where no legal obligation to retain it exists, 23baj will securely delete or anonymise that data. Technical data such as server logs may be retained for a shorter period consistent with standard security monitoring practice. If you request deletion of your account and personal data, 23baj will process that request subject to any overriding legal retention obligations and will confirm the outcome in writing to your registered email address.

Your Rights

Subject to applicable law, you have the following rights in relation to the personal data that 23baj holds about you. To exercise any of these rights, please contact the 23baj support team using the email address provided in the Contact section below. 23baj will respond to all verified requests within a reasonable timeframe.

• ▸Right of access: you may request a copy of the personal data that 23baj holds about you, together with information about how that data is being used and with whom it has been shared.
• ▸Right to rectification: if any personal data that 23baj holds about you is inaccurate or incomplete, you may request that it be corrected or updated. Where possible, 23baj will action corrections promptly.
• ▸Right to erasure: in certain circumstances you may request that 23baj delete your personal data. This right is subject to any overriding legal obligations that require 23baj to retain the data, such as financial record-keeping requirements.
• ▸Right to restriction of processing: you may request that 23baj restricts its processing of your personal data in certain circumstances, for example where you contest the accuracy of the data or where you object to processing based on legitimate interests.
• ▸Right to object: you have the right to object to 23baj's processing of your personal data where that processing is based on legitimate interests. 23baj will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests, rights and freedoms.

Security Measures

23baj implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, disclosure, or destruction. All data transmitted between your device and the 23baj platform is encrypted using SSL (Secure Sockets Layer) technology. Account access is protected by password authentication and, where enabled, one-time password (OTP) verification delivered to your registered mobile number.

While 23baj takes reasonable precautions to safeguard your personal data, no method of electronic transmission or storage is completely secure. 23baj cannot guarantee absolute security and accepts no liability for unauthorised access that results from circumstances beyond its reasonable control, such as a player sharing their own account credentials with a third party. Players are encouraged to use a unique, strong password for their 23baj account and to contact support immediately if they suspect any unauthorised access.

Protection of Minors

The 23baj platform is strictly for adults aged 21 and above. 23baj does not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from a person under 21, we will take immediate steps to delete that data and close the associated account. If you are a parent or guardian and believe that a minor has registered on the 23baj platform, please contact us immediately at [email protected] so that we may investigate and take appropriate action.

Changes to This Privacy Policy

23baj reserves the right to update or amend this Privacy Policy at any time. When material changes are made, the revised Policy will be published on this page with an updated effective date shown at the top. Your continued use of the 23baj platform following the publication of any changes constitutes your acceptance of the updated Policy. We encourage you to review this page periodically to stay informed of how 23baj handles your personal information. If the changes are significant, we may also notify you via your registered email address or via an in-platform notification.

Contact Us — Privacy Enquiries

If you have any questions, concerns, or requests relating to this Privacy Policy or the way in which 23baj handles your personal data, please contact the 23baj support team. All privacy-related correspondence should be directed to the support email address below. Please include your registered account name and a brief description of your enquiry to help us respond promptly. All communications are handled in English. Response times are targeted during Bangladesh Standard Time (BST, UTC+6) business hours.