Bdbajji Privacy Policy — How We Handle Your Data

1 Introduction

Welcome to bdbajji. This Privacy Policy explains what information we collect about you, why we collect it, and how it is used and kept secure. By using the bdbajji website or app, you are considered to have agreed to this Privacy Policy.

We believe privacy is a fundamental right. That's why our privacy policy is designed to be simple, transparent, and user-friendly — no complex legal language hiding anything. Everything is stated plainly.

This privacy policy applies to all users of the https://bdbajji.ws website and its associated mobile applications. Whether you access bdbajji from Bangladesh or anywhere else, this policy applies to you.

2 Information We Collect

Bdbajji collects two types of information — what you provide directly, and what is gathered automatically through your use of the platform.

What You Provide Directly

Automatically Collected Information

• Device Information: Your device model, operating system, and browser version.
• Log Data: IP address, login time, pages visited, and session duration.
• Location Data: Country-level approximate location only — precise GPS coordinates are never collected.
• Cookies: For session management and saving your preferences.

3 How We Use It

Bdbajji uses the information it collects for the purposes listed below. Each purpose has a clear basis, and data is never used for anything beyond what is necessary.

4 Cookies Policy

Bdbajji uses cookies on its website and app. Cookies are small text files stored in your browser that help the website recognize you.

You can control or delete cookies at any time through your browser settings. However, disabling essential cookies may cause certain features of the website to stop working.

5 Data Sharing & Disclosure

Bdbajji never sells your data to third parties for commercial purposes. However, certain information may be shared in limited circumstances:

• Payment Provider: Only the information necessary to process transactions is shared with mobile banking services such as bKash, Nagad, and Rocket.
• KYC Verification Partners: Identity document details may be shared with authorized verification agencies for identity verification purposes.
• Legal Authorities: Disclosure of information is required when ordered by a court or upon a lawful request from a government authority.
• AML Monitoring: Suspicious financial activity may be reported to the relevant regulatory authorities.
• Business Successor: In the event of a company merger or acquisition — however, the new owner will be bound by this policy.

6 Data Retention & Deletion

Bdbajji does not retain any data longer than necessary. Retention periods for different types of information are outlined below:

• Account Information: For the duration of the active account and up to 5 years after closure (legal obligation).
• Financial Transaction Records: Minimum 5 years in accordance with AML regulations.
• KYC Documents: Up to 3 years after account closure.
• Log Data & Session Information: Up to 90 days maximum.
• Cookies Data: Based on cookie type (see Section 4 for details).

Once the legal retention period has expired, or upon your request, we permanently delete data using secure methods. Deleted data cannot be recovered.

7 Your Rights

As a bdbajji user, you have important rights regarding the protection of your data. These rights are provided in line with international GDPR standards.

To exercise any of these rights, email us at support@bdbajji.ws. We will respond within 30 business days.

8 Security Measures

Bdbajji follows industry-leading technical and organizational measures to protect your data. Our security framework is as follows:

• 256-bit SSL/TLS Encryption: All data transfers are carried out through encrypted channels.
• AES-256 Database Encryption: Stored data is also kept in encrypted form.
• Two-Factor Authentication (2FA): The option to add an extra layer of security to your account.
• Firewall & DDoS Protection:Robust firewalls and intrusion prevention systems are active at the server level.
• Regular Security Audits: Regular penetration tests and audits are conducted by independent third-party experts.
• Restricted access controls: Only authorized personnel may access specific data, and every access is logged.
• 24/7 Security Monitoring: Automated systems and a dedicated expert team monitor our servers around the clock.

9 Children's Privacy

Bdbajji is an 18+ platform. We do not knowingly collect information from anyone under the age of 18. Age is verified at registration, and additional verification may be requested in cases of doubt.

If we are notified that a minor has created an account, we will immediately close that account and delete all associated data. Parents or guardians can report such incidents to us at support@bdbajji.ws.

10 Policy Changes

We may update this Privacy Policy from time to time. For significant changes, we will:

• We will send a notification to your registered email address.
• We will display a clear notice on the website.
• We will update the "Last Updated" date at the top of this page.
• We will notify you at least 7 days before any changes take effect.

Continued use of the platform after notification will be considered acceptance of the updated policy. If you do not agree to the changes, you have the right to close your account.

11 Contact Us

For any questions, complaints, or requests to exercise your rights regarding this Privacy Policy, please contact our Data Protection Team: