Privacy Policy — slotbaj

01 Information We Collect

slotbaj collects personal data through several channels: directly from you when you register an account, make a deposit, contact support, or use platform features; automatically through your interaction with the Platform; and, in limited cases, from trusted third-party verification partners. We apply a minimal data principle — we collect only what is genuinely necessary to provide, secure, and improve our services.

1.1 Registration & Account Data

When you create a slotbaj account, we collect the following information:

• Full legal name as it appears on official identification documents.
• Date of birth (used strictly for age verification — you must be 18 or older).
• Email address (used for account communications, security alerts, and, where consented, promotional messages).
• Mobile phone number (used for account security and support verification).
• Residential address (required for identity verification and regulatory compliance).
• Preferred payment method details (e.g., bKash or Nagad mobile wallet number, bank account details).
• Username and hashed password (your plain-text password is never stored).

1.2 Identity Verification (KYC) Data

As part of our Know Your Customer (KYC) process, we may request copies of government-issued identity documents such as your National Identity Card (NID), passport, or driving licence. Supporting documents such as utility bills or bank statements may also be requested to verify your address. These documents are processed securely and retained only for as long as required by our compliance obligations.

1.3 Transaction & Gaming Data

We automatically record the following data each time you interact with the Platform:

• Deposit and withdrawal amounts, timestamps, and payment method references.
• Game session data including game titles played, wager amounts, outcomes, and session duration.
• Bonus redemption records and wagering progress.
• Sports betting selections, stake amounts, and settlement records.

1.4 Technical & Device Data

When you access slotbaj, our servers and analytics systems automatically collect:

• IP address and approximate geolocation (city/country level).
• Device type, operating system, and browser version.
• Pages visited, session duration, click-path data, and referring URLs.
• Cookie identifiers and session tokens (see Section 4 for full cookie details).

02 How We Use Your Data

slotbaj processes your personal data for clearly defined, legitimate purposes. We do not use your data in ways that are incompatible with the purposes for which it was originally collected. The table below summarises our primary data processing activities and their legal basis.

2.1 Marketing Communications

slotbaj will only send you marketing emails or promotional notifications if you have explicitly opted in to receive them during registration or via your account settings. You may withdraw your consent to marketing communications at any time by updating your account preferences or by contacting support@slotbaj. Withdrawal of marketing consent does not affect the processing of data for other purposes listed above.

2.2 Responsible Gaming Profiling

As part of our duty of care, slotbaj analyses gaming behaviour data to identify patterns that may indicate problem gambling. This includes monitoring deposit frequency, session length, loss chasing patterns, and self-exclusion history. Where such patterns are identified, our responsible gaming team may reach out proactively to offer support tools such as deposit limits or cooling-off periods. This processing is carried out in your interests and in accordance with responsible gaming obligations.

03 Data Sharing & Third Parties

slotbaj does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We share data only in the limited, specific circumstances described in this section, and only with parties who are contractually obligated to handle your data securely and in accordance with this Privacy Policy.

3.1 Service Providers

We engage trusted third-party service providers to support the operation of slotbaj. These providers access only the data they need to perform their specific function and are prohibited from using it for any other purpose. Categories of service providers include:

• Payment processors: bKash, Nagad, Rocket, Upay, and banking partners process transaction data to facilitate deposits and withdrawals.
• Identity verification providers: Third-party KYC specialists may process identity document data to verify your age and identity on our behalf.
• Game providers: Studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive session identifiers and wager data necessary to deliver their games through the Platform.
• Analytics providers: Anonymised or pseudonymised technical data is shared with analytics platforms to help us understand Platform usage and improve our services.
• Customer support software: Support correspondence data is processed by our helpdesk software provider to manage and resolve your support requests.

3.2 Legal & Regulatory Disclosure

slotbaj may disclose your personal data to law enforcement agencies, regulatory authorities, or other government bodies where we are required to do so by applicable law, court order, or regulatory direction. In such cases, we will disclose only the minimum data necessary to satisfy the legal requirement and will, where permitted by law, notify you of such a disclosure.

3.3 Business Transfers

In the event that slotbaj undergoes a corporate restructuring, merger, acquisition, or sale of assets, personal data held by the Platform may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and the privacy policy applicable to your data following the transaction.

04 Cookies & Tracking Technologies

slotbaj uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files placed on your device by your browser when you visit a website. They allow the Platform to recognise your device on subsequent visits, remember your preferences, and analyse how the Platform is used.

4.1 Types of Cookies We Use

4.2 Managing Cookies

Strictly necessary cookies cannot be disabled as they are essential for the Platform to function correctly. All other cookie categories can be managed through your browser settings. Most modern browsers allow you to view, block, or delete cookies via the privacy or settings menu. Please note that disabling functional or analytics cookies may affect your experience on the Platform — certain preferences may not be retained between sessions.

For detailed guidance on managing cookies in your specific browser, please refer to your browser's official help documentation. slotbaj does not currently respond to "Do Not Track" browser signals, as no industry-wide standard for such signals has been adopted.

05 Data Retention & Storage

slotbaj retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, including for the satisfaction of any legal, accounting, or reporting requirements.

5.1 Retention Periods

• Active account data: Retained for the lifetime of your account plus a minimum of 5 years following account closure, in accordance with financial record-keeping requirements.
• KYC and identity documents: Retained for a minimum of 5 years from the date of verification or account closure, whichever is later.
• Transaction records: Retained for a minimum of 5 years from the date of each transaction to comply with applicable financial regulations.
• Support correspondence: Retained for 3 years from the date of the most recent interaction in a given support thread.
• Marketing consent records: Retained for the duration of your account and for 3 years after consent is withdrawn, as evidence of the original consent.
• Technical and analytics data: Retained in aggregated, anonymised form for up to 24 months.

5.2 Data Storage Location

All personal data collected by slotbaj is stored on secure servers protected by industry-standard physical and digital security measures. Data is processed and stored with strict access controls ensuring that only authorised personnel with a legitimate operational need can access identifiable personal data.

5.3 Data Deletion

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with an identifiable individual. If you request deletion of your data before the retention period has expired, we will delete all data that we are not legally required to retain and will inform you clearly of any data categories that must be kept for compliance reasons.

06 Your Privacy Rights

slotbaj respects your rights over your personal data. As a user of the Platform, you hold the following rights with respect to the personal data we hold about you. To exercise any of these rights, please contact our privacy team at support@slotbaj with the subject line "Privacy Rights Request". We will acknowledge your request within 72 hours and aim to fulfil it within 30 days.

6.1 Right of Access

You have the right to request a copy of the personal data slotbaj holds about you. This is sometimes called a Subject Access Request (SAR). We will provide a structured summary of the data we hold, the purposes for which it is processed, and the categories of recipients with whom it has been shared.

6.2 Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Minor corrections such as updating your email address or phone number can be made directly through your account settings. For corrections to identity-verified data (e.g., your legal name or date of birth), please contact support and provide updated documentation.

6.3 Right to Erasure

You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where processing is unlawful. Please note that we may be unable to delete certain data categories that we are required to retain by law — in such cases, we will clearly explain which data must be kept and why.

6.4 Right to Restrict Processing

In certain circumstances — for example, while a data accuracy dispute is being resolved — you may request that we restrict our processing of your personal data. During a restriction period, we will store your data but will not actively process it for other purposes.

6.5 Right to Data Portability

Where data is processed on the basis of your consent or contractual necessity, you have the right to receive a copy of your personal data in a structured, commonly used, and machine-readable format.

6.6 Right to Object

You have the right to object to the processing of your personal data where such processing is based on our legitimate interests, including profiling for responsible gaming purposes or direct marketing. Upon receipt of a valid objection, we will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.

07 Security Measures

The security of your personal data is a top priority at slotbaj. We implement a layered security architecture that combines technical, organisational, and procedural controls to protect your data against unauthorised access, disclosure, alteration, and destruction.

7.1 Technical Security Controls

• 256-bit SSL / TLS encryption: All data transmitted between your device and the slotbaj Platform is encrypted in transit using TLS 1.2 or higher.
• AES-256 encryption at rest: All stored personal data, including identity documents and financial records, is encrypted at rest using AES-256 standard encryption.
• Password hashing: User passwords are hashed using a strong, salted hashing algorithm. Plain-text passwords are never stored or transmitted.
• Firewall and intrusion detection: The Platform is protected by enterprise-grade firewall systems and continuous intrusion detection monitoring.
• Regular penetration testing: slotbaj commissions periodic independent security assessments to identify and remediate vulnerabilities before they can be exploited.

7.2 Organisational Security Controls

• Access to personal data systems is granted on a strict need-to-know basis, governed by role-based access controls.
• All staff with access to personal data undergo data protection and security awareness training.
• Data access events are logged and subject to regular audit review.
• A formal data breach response procedure is in place; in the event of a confirmed data breach affecting your personal data, slotbaj will notify affected users promptly.

7.3 Your Role in Security

While slotbaj takes all reasonable steps to protect your data, the security of your account also depends on you. We strongly recommend using a unique, complex password for your slotbaj account, never sharing your login credentials with any third party, and logging out of your account when using a shared or public device. If you suspect that your account has been compromised, contact support@slotbaj immediately.

08 Policy Updates & Contact

8.1 Policy Updates

slotbaj reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform services. When we make material changes to this policy, we will update the "Last updated" date shown at the top of this page and, where the changes significantly affect your rights, notify you directly by email to the address registered on your account.

We encourage you to review this Privacy Policy periodically to remain informed about how slotbaj protects your data. Your continued use of the Platform following any update to this policy constitutes your acceptance of the revised terms.

8.2 Contact & Privacy Queries

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by slotbaj, please contact our privacy support team using the details below. We are committed to addressing all privacy-related enquiries thoroughly and within a reasonable timeframe.

• Email: support@slotbaj (subject line: "Privacy Policy Query")
• Response time: Within 72 hours for all privacy-related enquiries
• Support hours: 24 hours a day, 7 days a week, Bangladesh Standard Time (BST, UTC+6)