23baj Privacy
Policy
Your privacy matters to us. This Privacy Policy explains exactly what personal data 23baj collects from players in Bangladesh and beyond, how that data is used, how it is stored securely, and what rights you hold over your own information.
All data exchanged between your device and the 23baj platform is protected by industry-standard TLS/SSL encryption, ensuring your personal and financial information cannot be intercepted in transit.
23baj collects only the data that is strictly necessary for account management, payment processing, regulatory compliance, and improving your experience on the platform. We do not sell your data to advertisers.
You have the right to access, correct, and request deletion of your personal data held by 23baj at any time. Submit a request to our support team and we will respond within 30 days in accordance with this policy.
23baj uses functional, analytical, and preference cookies to deliver a smooth experience. You can manage your cookie preferences at any time through your browser settings or by contacting our support team.
23baj does not sell, rent, or trade your personal information to any third party for marketing purposes. Data shared with partners is limited strictly to what is required to deliver our core services.
23baj does not knowingly collect or process personal data from individuals under the age of 18. If we become aware that a minor has provided personal data, that data will be deleted and the associated account closed immediately.
Information We Collect
23baj collects personal data through several channels when you register, deposit, play, or interact with our platform. The categories below outline what we collect and why.
When you create a 23baj account, we collect your full legal name, date of birth, residential address, email address, and phone number. This data is required to verify your identity, ensure you meet the 18+ age requirement, and communicate important account notifications to you.
As part of our Know Your Customer (KYC) process, we may collect copies of government-issued identification documents such as your National Identity Card (NID), passport, or driver's licence. Proof of address documents — such as a utility bill or bank statement dated within 90 days — may also be requested. These documents are used solely for identity verification and regulatory compliance purposes.
To process deposits and withdrawals, 23baj collects payment method details relevant to the channel you select — for example, your bKash or Nagad mobile number, or the last four digits of your Visa or Mastercard. Full card numbers are processed through PCI-DSS compliant payment gateways and are not stored on 23baj servers.
We maintain records of all deposits, withdrawals, bets placed, games played, bonus activity, and account balance changes. These records are essential for resolving disputes, meeting regulatory obligations, and providing you with an accurate account history.
When you access 23baj, we automatically collect technical data including your IP address, browser type and version, operating system, device identifiers, screen resolution, time zone (Bangladesh Standard Time, UTC+6, where applicable), session duration, and page interaction data. This information helps us secure your account, detect fraud, and optimise platform performance.
If you contact our support team via live chat or email, we retain records of that correspondence — including your name, contact details, and the content of your messages. These records help us track the resolution of your queries and improve the quality of our support service.
| Data Type | Purpose |
|---|---|
| Name & DOB | Identity & age verification |
| Email / Phone | Account communications |
| NID / Passport | KYC compliance |
| Payment details | Deposit & withdrawal processing |
| Bet & game records | Account history & disputes |
| IP & device data | Fraud detection & security |
| Support chat logs | Query resolution & QA |
How We Use Your Data
The personal data collected by 23baj is used only for clearly defined purposes. We do not process your data in ways that are incompatible with the original reason it was collected.
Your registration data is used to create and maintain your 23baj account, verify your identity, process your deposits and withdrawals, manage your bonus eligibility, and deliver the core betting and gaming services you have requested. Without this processing, we cannot provide you with a functional account.
23baj is obligated to process certain personal data in order to comply with applicable anti-money laundering (AML) regulations, Know Your Customer (KYC) requirements, and fraud prevention obligations. This includes verifying the source of funds for large transactions and reporting suspicious activity to relevant authorities where legally required.
We use your betting behaviour data and account activity records to identify potential problem gambling patterns. Where our systems detect signs of problematic play, we may proactively contact you with responsible gaming information or apply account safeguards in line with our Responsible Gaming policy. This processing is carried out in your genuine interest and that of public health.
Technical and device data — including IP addresses, login timestamps, and device fingerprints — is analysed continuously to detect unauthorised access, multi-account abuse, bot activity, and other forms of fraud. Accounts flagged by our automated security systems may be temporarily suspended pending a manual review by our security team.
Aggregated and anonymised usage data is used internally to improve the 23baj platform — including page performance, game loading speed, payment flow optimisation, and mobile usability. This data does not identify individual players and is used solely to enhance the overall user experience.
If you have opted in to marketing communications, 23baj may send you promotional emails or in-platform notifications about new games, upcoming cricket events such as BPL or T20 World Cup matches, seasonal offers (for example around Eid or Pohela Boishakh), and exclusive bonuses. You may withdraw your consent to marketing communications at any time by contacting [email protected] or using the unsubscribe link in any promotional email.
- Contract performance — account creation, deposits, bets, withdrawals
- Legal obligation — KYC, AML, regulatory reporting
- Legitimate interest — fraud prevention, platform security, analytics
- Consent — marketing emails, optional preference cookies
- Vital interest — responsible gaming safeguards
Data Sharing and Disclosure
23baj does not sell your personal data. We share data only with trusted partners and only where strictly necessary to deliver our services or meet legal obligations.
To process your deposits and withdrawals, we share the minimum necessary payment details with our payment partners — including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, and the card networks Visa and Mastercard. These partners are bound by their own data protection obligations and are only permitted to use your data for the purpose of processing the specific transaction.
Some game providers — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — may process limited technical identifiers (such as a pseudonymised player ID) in order to deliver game sessions, maintain game history, and enforce game-level fairness rules. These providers do not receive your full name, NID, or financial details.
23baj may be legally required to disclose certain player data to regulatory bodies, financial intelligence units, or law enforcement agencies. Such disclosures are made only where we are legally compelled to do so. We will not voluntarily disclose player data to government authorities beyond what is required by a valid legal obligation.
To complete KYC checks, 23baj may use third-party identity verification services that compare your submitted documents against official databases. These providers process your data under strict contractual data processing agreements and are prohibited from retaining or using your identity documents for any purpose other than the verification request submitted by 23baj.
In the event that 23baj undergoes a corporate restructure, merger, or acquisition, player data may be transferred to the successor entity as part of the business assets. In such circumstances, 23baj will notify affected players via their registered email address and ensure that the successor entity is bound by privacy obligations at least as protective as those in this policy.
23baj does not sell, rent, lease, or otherwise commercially exploit your personal data to third parties for their own marketing or profiling purposes. Any data-sharing arrangement we enter into is governed by a formal data processing agreement that limits the recipient's permitted use of your information.
Data Retention and Storage
We retain your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The table below summarises our standard retention periods.
| Data Category | Retention Period | Basis |
|---|---|---|
| Registration data (name, DOB, address) | Duration of account + 5 years post-closure | Legal / AML obligation |
| KYC / identity documents | Duration of account + 5 years post-closure | Regulatory compliance |
| Transaction and bet records | Duration of account + 7 years post-closure | Financial record-keeping |
| Support communications | 3 years from last interaction | Legitimate interest |
| Technical / device / IP logs | 13 months on a rolling basis | Security & fraud prevention |
| Marketing consent records | Until consent is withdrawn + 1 year | Consent management |
| Self-exclusion records | Permanently retained | Responsible gaming obligation |
Player data is stored on secure servers. Where data is processed or stored outside of Bangladesh, 23baj ensures appropriate safeguards are in place — including contractual data transfer clauses — to protect your information to a standard equivalent to that described in this policy.
Your Privacy Rights
As a 23baj player, you hold a number of rights over your personal data. These rights can be exercised free of charge by contacting our support team at [email protected].
You may request a copy of all personal data 23baj holds about you. We will provide this within 30 days of your verified request.
If any personal data we hold is inaccurate or out of date, you have the right to request that it be corrected. Update your profile directly or contact support.
You may request deletion of personal data that is no longer necessary for the purposes it was collected, subject to legal retention obligations.
You may ask us to pause the processing of your data in certain circumstances — for example, while a dispute over accuracy is being resolved.
Where processing is based on your consent or a contract, you may request your data in a structured, commonly used, machine-readable format.
You may object to processing carried out on the basis of legitimate interest, including profiling for responsible gaming detection or direct marketing.
If you previously opted in to marketing, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing before the withdrawal.
If you believe your privacy rights have been violated, you may lodge a complaint with 23baj support or with the relevant data protection authority in your jurisdiction.
Data Security Measures
23baj employs a layered security approach to protect your personal data from unauthorised access, disclosure, alteration, or destruction.
All data transmitted between your device and 23baj servers is encrypted using TLS 1.2 or higher. Sensitive data stored on our servers — including identity document scans and payment records — is encrypted at rest using AES-256 encryption. Encryption keys are managed through a dedicated key management system with strict access controls.
Access to personal data within 23baj's internal systems is governed by role-based access control. Only staff members who genuinely require access to your data to perform their duties are granted it. All internal access is logged and reviewed regularly. We strongly recommend that players enable two-factor authentication on their 23baj account to protect against unauthorised login.
23baj operates continuous automated monitoring systems that flag unusual account activity — including logins from unrecognised devices, abnormal betting patterns, or multiple failed authentication attempts. Accounts identified as potentially compromised are placed under enhanced review and the registered account holder is notified immediately.
23baj undergoes periodic security assessments conducted by independent third-party auditors. These assessments cover infrastructure security, application-layer vulnerabilities, and data handling practices. Findings are acted upon promptly in accordance with a risk-prioritised remediation schedule.
In the event of a personal data breach that poses a risk to your rights and freedoms, 23baj will notify affected players without undue delay via their registered email address. The notification will describe the nature of the breach, the categories of data affected, the likely consequences, and the measures taken or proposed to address the breach. Where required by applicable law, relevant authorities will also be notified.
While 23baj takes all reasonable technical and organisational measures to secure your data, you also play an important role. Keep your account password unique and confidential, do not share your login credentials with anyone, log out after each session on shared devices, and contact support immediately if you suspect your account has been accessed without your authorisation.
All data in transit is protected by modern transport layer security protocols.
Stored personal and financial data is encrypted using military-grade AES-256 standards.
Internal data access is restricted by role. No staff member has unrestricted access to all player data.
Independent security audits are conducted periodically to identify and remediate vulnerabilities.
Contact and Complaints
If you have any questions about this Privacy Policy, wish to exercise your privacy rights, or want to raise a concern about how your data has been handled, please get in touch using the details below.
For all privacy-related enquiries, please email our data protection team at [email protected] with the subject line "Privacy Enquiry" or "Privacy Rights Request". We aim to acknowledge all privacy enquiries within 2 business days and resolve them within 30 calendar days.
Our 24/7 live chat support is available after login for general account and privacy queries. For formal privacy rights requests — such as data access, rectification, or erasure — we recommend submitting your request in writing via email so that we have a clear record of your instructions and can respond formally.
If you are not satisfied with how 23baj has handled your privacy concern, you have the right to escalate your complaint to the relevant data protection authority or consumer protection body in your jurisdiction. 23baj will cooperate fully with any lawful investigation conducted by a competent authority.
23baj reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, technology, or applicable legal requirements. When we make material changes, we will notify registered players via their registered email address and update the effective date at the top of this page. Continued use of the platform after a policy update constitutes acceptance of the revised terms. We encourage you to review this policy periodically.
-
Email (Privacy):
[email protected] -
Live Chat:
Available 24/7 after account login -
Response Time:
Acknowledgement within 2 business days; resolution within 30 days -
Time Zone:
Bangladesh Standard Time (BST, UTC+6) -
Effective Date:
1 January 2026
Your Data Is Safe. Now Enjoy the Games.
Now that you understand how 23baj protects your privacy, feel free to explore our full range of cricket betting markets, casino games, and slots — all on a platform built with your security in mind.