42baje Privacy Policy

42baje collects personal information in two broad categories: information you provide directly to us, and information collected automatically as you interact with the platform. Below is a detailed breakdown of each category.

Information You Provide Directly:

• Registration Data: Full legal name, date of birth, email address, mobile phone number registered in Bangladesh, and a chosen username and password.
• Identity Verification (KYC) Data: Copies of government-issued identity documents (National ID card, passport, or driving licence), proof of address documents, and — where required — proof of payment method ownership (e.g., a screenshot of your bKash or Nagad account holder name).
• Financial Data: Details of the payment methods you use to deposit and withdraw funds, including bKash account numbers, Nagad account numbers, Rocket numbers, bank account details, and Visa or Mastercard information. Full payment card numbers are never stored by 42baje — card processing is handled by PCI-DSS compliant payment processors.
• Communications Data: The content of any communications you send to 42baje via live chat, email, or support ticket, including the nature of your query, any attachments you submit, and the outcome of the interaction.
• Responsible Gaming Data: Any self-exclusion requests, deposit limit settings, cool-off periods, or reality check preferences that you set through your account settings or via our support team.

Information Collected Automatically:

• Device and Technical Data: IP address, device type (mobile/desktop/tablet), operating system, browser type and version, screen resolution, and device identifiers.
• Usage Data: Pages visited on the 42baje platform, games played, duration of play sessions, bet amounts, game outcomes, login timestamps, and navigation paths through the platform.
• Location Data: Approximate geographic location derived from your IP address, used for fraud prevention and to confirm that you are accessing the platform from Bangladesh.
• Cookie and Tracking Data: Information collected via cookies, web beacons, and similar technologies as described in Section 4 of this policy.

42baje uses the personal data we collect for the following specific purposes. We do not use personal data for any purpose not listed here without first obtaining your explicit consent or updating this Privacy Policy.

• Account Management: To create, maintain, and manage your player account, including processing deposits and withdrawals, maintaining transaction histories, and providing access to your gaming activity records.
• Identity and Age Verification: To verify that you are who you claim to be and that you meet the minimum age requirement of 18 years. Verification is mandatory under our responsible gaming obligations and is a condition of account activation.
• Transaction Processing: To process deposit and withdrawal requests via bKash, Nagad, Rocket, Upay, bank transfer, Visa, and Mastercard — and to reconcile those transactions against your account balance accurately.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, money laundering, account takeover attempts, bonus abuse, and any other conduct that violates these Terms & Conditions or applicable law.
• Responsible Gaming Compliance: To monitor player behaviour for signs of problem gambling, to enforce deposit limits and self-exclusion orders set by players, and to operate our responsible gaming programme in accordance with best practice.
• Legal and Regulatory Compliance: To comply with applicable laws and regulations, including anti-money laundering (AML) obligations, know-your-customer (KYC) requirements, and any lawful requests from law enforcement or regulatory authorities.
• Customer Support: To respond to your queries, complaints, and support requests accurately and efficiently, and to maintain a record of our interactions with you for quality assurance purposes.
• Platform Improvement: To analyse aggregate usage patterns and improve the design, functionality, and game selection of the 42baje platform for the benefit of all players.
• Marketing Communications: To send you promotional offers, bonus notifications, and news about new games or features on 42baje — but only where you have given explicit consent to receive such communications. You may withdraw this consent at any time.

42baje processes personal data only where there is a valid legal basis for doing so. The legal bases on which we rely are as follows:

• Contractual Necessity: Processing your registration data, financial data, and KYC data is necessary to perform our contract with you — specifically, to open and maintain your 42baje account and to process your deposits and withdrawals. Without this processing, we cannot provide the service.
• Legal Obligation: Certain processing activities — including identity verification, transaction record-keeping, and reporting obligations — are required to comply with applicable anti-money laundering laws, financial regulations, and other legal obligations applicable to online gaming platforms operating in or serving Bangladesh.
• Legitimate Interests: We process device data, usage data, and location data on the basis of our legitimate interest in maintaining the security and integrity of the 42baje platform, preventing fraud, and improving the platform experience for all players. We balance this interest against your right to privacy and apply appropriate safeguards.
• Consent: Where we process data for marketing communications or non-essential cookies, we do so only on the basis of your freely given, specific, and informed consent. You may withdraw this consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

42baje uses cookies and similar tracking technologies to operate and improve the platform. A cookie is a small text file placed on your device by a website when you visit it. Cookies allow the website to remember your preferences and recognise your device on return visits.

The categories of cookies used by 42baje are as follows:

You can manage cookie preferences at any time through your browser settings. Most modern browsers allow you to block or delete cookies, restrict cookies from specific sites, or receive a notification before a cookie is placed. Please note that disabling strictly necessary cookies will prevent the 42baje platform from functioning correctly and may result in an inability to log in or complete transactions.

In addition to cookies, 42baje may use web beacons (also known as pixel tags) in promotional emails and on certain platform pages to track whether emails have been opened and whether links have been clicked. This data is used solely to measure the effectiveness of our communications and improve future outreach.

42baje does not sell, rent, or trade your personal data. We share personal data only in the following circumstances and only to the extent strictly necessary for the purpose stated:

• Payment Processors: We share financial data with our payment processing partners — including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, and card processing networks (Visa, Mastercard) — to facilitate deposits and withdrawals. These providers are bound by their own privacy policies and industry-standard security obligations.
• Identity Verification Providers: KYC and age verification data may be shared with third-party identity verification services who act as data processors on our behalf. These providers are contractually prohibited from using your data for any purpose other than the verification service they perform for 42baje.
• Game Providers: Certain technical data (such as player session IDs and game round data) is shared with our game providers — including Pragmatic Play, Evolution Gaming, Spribe, NetEnt, and others — solely for the purpose of delivering and settling game outcomes. Game providers do not receive personally identifiable information beyond what is technically necessary.
• Legal and Regulatory Authorities: Where required by applicable law, court order, or a legitimate request from a law enforcement or regulatory authority, 42baje will disclose personal data to the relevant authority. We will notify the affected player of such a disclosure where we are legally permitted to do so.
• Fraud Prevention Networks: In cases of suspected fraud, money laundering, or other illegal activity, 42baje may share relevant data with industry fraud prevention bodies and networks to protect players and the broader online gaming ecosystem.
• Business Transfers: In the event that 42baje undergoes a merger, acquisition, or sale of all or part of its business, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and the privacy implications in advance.

All third parties with whom 42baje shares personal data are required to maintain appropriate security standards and to use the data only for the purpose for which it was shared. 42baje remains responsible for the actions of its data processors at all times.

42baje retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following retention periods apply:

When the applicable retention period expires, personal data is securely deleted or anonymised in a manner that prevents reconstruction of your identity. Anonymised, aggregate data (from which no individual can be identified) may be retained indefinitely for statistical and analytical purposes.

42baje implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security programme includes:

• Transport Layer Security: All data transmitted between your device and the 42baje platform is encrypted using TLS 1.2 or higher (256-bit SSL). Our HTTPS connection is enforced at all times — plain HTTP connections are rejected.
• At-Rest Encryption: Personal data stored in our databases is encrypted at rest using AES-256 encryption. Encryption keys are managed separately from the encrypted data and are rotated on a scheduled basis.
• Access Controls: Access to personal data is restricted to 42baje employees and contractors who have a verified operational need. All access is logged, and logs are reviewed regularly by our security team.
• Password Security: Player passwords are stored using industry-standard one-way hashing algorithms with salting. 42baje staff cannot view your password in plaintext, and we will never ask you to share your password via any channel.
• Penetration Testing: The 42baje platform undergoes regular independent security assessments and penetration tests to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: In the event of a data breach that is likely to result in risk to your rights and freedoms, 42baje will notify affected players and relevant authorities as promptly as technically possible, and no later than required by applicable law.

While we take all reasonable steps to protect your personal data, no digital platform can guarantee absolute security. You also play a role in keeping your account secure — please use a strong, unique password for your 42baje account and do not share your login credentials with anyone.

As a player on the 42baje platform, you hold the following rights with respect to your personal data. To exercise any of these rights, please contact our data protection team via 24/7 live chat or by emailing [email protected] (plain text — not a clickable link). We will respond within 30 calendar days of receiving your request.

• Right of Access: You may request a copy of all personal data that 42baje holds about you. We will provide this in a clear, structured format within 30 days of your request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it. Some data, such as your registered name and date of birth, may require KYC document verification before it can be changed.
• Right to Erasure: In certain circumstances, you may request the deletion of your personal data. This right is not absolute — where we are legally required to retain data (e.g., transaction records and KYC documents for AML compliance), we cannot delete that data until the applicable retention period expires.
• Right to Restrict Processing: You may request that we restrict the processing of your personal data in specific circumstances — for example, while a dispute about the accuracy of your data is being resolved.
• Right to Data Portability: You may request a copy of the personal data you have provided to us in a commonly used, machine-readable format (such as JSON or CSV), allowing you to transfer it to another service provider where technically feasible.
• Right to Object: You have the right to object to the processing of your personal data where that processing is based on our legitimate interests. We will review your objection and cease the processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications, non-essential cookies), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

The 42baje platform integrates third-party services to deliver certain features. These include game providers, payment processors, identity verification services, and analytics tools. When you interact with these integrated services, those providers may collect data about your interaction in accordance with their own privacy policies.

42baje is not responsible for the privacy practices of third-party services that operate outside the scope of 42baje's direct control. We recommend that players review the privacy policies of any third-party service they interact with. The third-party providers used by 42baje include, but are not limited to:

• Game Providers: Pragmatic Play, Evolution Gaming, Spribe, NetEnt, Microgaming, Ezugi, Hacksaw Gaming, Play'n GO, Red Tiger, BGaming, Relax Gaming — game session data is processed by these providers to deliver and settle game outcomes.
• Payment Processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, Mastercard — financial transaction data is processed by these providers to facilitate deposits and withdrawals.
• Identity Verification: Third-party KYC service providers who verify the authenticity of identity documents submitted by players during the account verification process.
• Analytics Providers: Aggregate platform usage data is processed by analytics tools to help 42baje understand how the platform is used and where improvements can be made. No personally identifiable information is shared with analytics providers.

All third-party providers engaged by 42baje are vetted for their data security standards and are bound by data processing agreements that prohibit them from using player data for any purpose beyond the specific service they provide to 42baje.

The 42baje platform is strictly intended for adults aged 18 years and above. We do not knowingly collect personal data from any individual under the age of 18. Age verification is a mandatory step in the account registration process, and we reserve the right to request documentary proof of age at any time.

If 42baje discovers or is notified that personal data has been collected from a person under the age of 18, we will take immediate steps to close the associated account, reverse any transactions where possible, and permanently delete all personal data associated with that account from our systems without undue delay.

Parents or legal guardians who believe that a minor may have registered on the 42baje platform are urged to contact our support team immediately via 24/7 live chat or at [email protected] (plain text — not a clickable link). We treat all such reports as urgent and will act on them as a priority.

42baje reserves the right to update, amend, or replace this Privacy Policy at any time. We may make changes to reflect updates in applicable law, changes to our data processing activities, improvements to our security practices, or operational changes to the 42baje platform.

When we make material changes to this Privacy Policy, we will notify registered players via the email address associated with their account, via an in-platform notification displayed at next login, or both. Non-material corrections and clarifications may be made without direct notification to players but will always be reflected in the updated version published at https://42baje.app/privacy-policy.

The "Last Updated" date displayed at the top of this policy will always reflect when the most recent version was published. We encourage all players to review this Privacy Policy periodically so that they remain informed about how their personal data is being handled.

Your continued use of the 42baje platform following the notification of any material change to this Privacy Policy will constitute your acceptance of the updated policy. If you do not agree with a material change, you must stop using the platform and may close your account by contacting our support team at [email protected] (plain text — not a clickable link) before the effective date of the change.

42baje is the data controller responsible for the personal data collected and processed through the 42baje platform at https://42baje.app. If you have any questions, concerns, or requests relating to this Privacy Policy or to the handling of your personal data, please contact us through any of the following channels:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: 24/7 live chat available directly on the 42baje platform
• Response Time: We aim to acknowledge all privacy-related queries within 2 business days (Bangladesh Standard Time, UTC+6) and to provide a full response within 30 calendar days.

When contacting us about a privacy matter, please include your registered username or email address so that we can locate your account and handle your request accurately. For requests relating to your right of access or right to erasure, we may need to verify your identity before processing the request, to ensure that we do not disclose or delete data in response to a fraudulent request.

This Privacy Policy was last reviewed and updated on 1 January 2026. It supersedes all previous versions of the 42baje Privacy Policy. In the event of any conflict between this document and any other communication from 42baje regarding data privacy, this document shall prevail unless expressly stated otherwise in writing by 42baje.