Privacy Policy for yes baji
Your privacy matters to us. This Privacy Policy explains exactly what personal information yes baji collects when you use our platform, why we collect it, how it is stored and protected, and the rights you hold over your own data as a player based in Bangladesh.
SSL-Encrypted Transmission
Every piece of data you send to or receive from yes baji is protected by industry-standard TLS/SSL encryption. This applies to registration, login sessions, deposits via bKash or Nagad, and all account management activity.
No Data Sold to Third Parties
yes baji does not sell, rent, or trade your personal information to any third party for their own marketing purposes. Data is shared only with vetted service partners who are contractually bound to use it solely on yes baji's behalf.
Your Data, Your Rights
As a yes baji player, you have the right to access, correct, export, and request deletion of your personal data at any time by contacting our support team. We respond to all verified data requests within two business days.
Local Payment Privacy
Transaction records for bKash, Nagad, Rocket, Upay, and bank transfers are processed through their respective provider systems. yes baji stores only a reference token and settlement confirmation — never your full MFS PIN or card number.
Minimal Data Collection
yes baji collects only the information strictly necessary to operate your account, process transactions, prevent fraud, and meet legal obligations. We do not collect data beyond what is required to deliver a safe and reliable platform experience.
Defined Retention Periods
Personal data is not held indefinitely. yes baji applies clearly defined retention windows based on the type of data and the reason it was collected. Account data is retained for the period required by our operational and legal obligations, then securely deleted.
Information We Collect
When you interact with yes baji — whether by creating an account, making a deposit, placing a bet, or contacting our support team — we collect certain categories of personal information. The categories we collect, and the specific data points within each, are set out below.
Identity and Contact Information
At registration, yes baji collects your full name, date of birth, and a valid Bangladeshi mobile number. This information is used to create and verify your account, confirm that you meet our minimum age requirement of 18 years, and to contact you regarding account matters. We may also request a copy of a government-issued identity document — such as a National ID card (NID) or passport — as part of our Know Your Customer (KYC) verification process.
Financial and Transaction Information
When you make a deposit or request a withdrawal, yes baji records transaction amounts, timestamps, payment method type (e.g., bKash, Nagad, Rocket, Upay, bank transfer), and transaction reference numbers. We do not store your full mobile banking PIN, card number, or banking password. Payment authentication is handled directly by your chosen payment provider within their own secure environment.
Technical and Device Information
When you visit yes-baji.com, our servers automatically record certain technical data, including your IP address, browser type and version, device type (mobile or desktop), operating system, referring URL, pages visited, and timestamps of each visit. This technical data is used for platform security, fraud detection, and analytical purposes to improve site performance.
Behavioural and Gaming Activity Data
yes baji records your gameplay history, betting patterns, game preferences, session durations, and bonus usage. This data enables us to personalise your experience, operate our responsible gaming tools accurately (such as loss limits and session reminders), and to investigate any disputes concerning game outcomes or bet settlements.
Communications Data
If you contact yes baji via live chat or email at [email protected], we retain a record of that correspondence, including your messages and our responses. These records are used to resolve your enquiry, improve our support quality, and maintain an audit trail for dispute resolution purposes.
How We Use Your Data
yes baji uses the personal information we collect for the following clearly defined purposes. We do not use your data for any purpose that is incompatible with the reasons for which it was originally collected without first obtaining your consent.
- Account Creation and Management: To register your account, verify your identity and age, maintain your account settings, and communicate with you about account-related matters such as password resets, verification requests, and security alerts.
- Payment Processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, and other designated payment partners; to maintain transaction records; and to reconcile your account balance accurately.
- Platform Security and Fraud Prevention: To detect, investigate, and prevent fraudulent activity, money laundering, multi-accounting, bonus abuse, and other violations of our Terms & Conditions. This includes automated risk-scoring of account behaviour and, where necessary, manual review by our compliance team.
- Responsible Gaming: To operate deposit limits, loss limits, cooling-off periods, and self-exclusion tools accurately; to monitor for indicators of problem gambling behaviour; and to support players who request help managing their gaming activity.
- Legal and Regulatory Compliance: To comply with applicable legal obligations, respond to lawful requests from courts or regulatory bodies, and maintain records as required by anti-money laundering (AML) and counter-terrorism financing (CTF) obligations.
- Service Improvement and Analytics: To analyse aggregated, anonymised usage patterns that help us improve site performance, optimise the user experience, and develop new features. Individual players are not identified in aggregated analytics reports.
- Marketing Communications: Where you have opted in to receive promotional communications, we may send you information about bonuses, seasonal promotions (such as Eid or BPL cricket offers), and platform updates via SMS or in-app notification. You may opt out of marketing communications at any time through your account settings or by contacting support.
- Dispute Resolution: To investigate and resolve disputes concerning game outcomes, bet settlements, bonus eligibility, or payment discrepancies. Retained gaming and communication records are used as evidence in this process.
Legal Basis for Processing
yes baji processes personal data on the following legal bases, depending on the specific purpose of the processing activity:
| Processing Purpose | Legal Basis |
|---|---|
| Account registration and identity verification | Performance of a contract (our Terms & Conditions) to which you are a party |
| Payment processing and transaction records | Performance of a contract; Legal obligation (AML/CTF record-keeping) |
| Fraud detection and platform security | Legitimate interests of yes baji in protecting the platform and its players from financial crime |
| Responsible gaming tools and monitoring | Legitimate interests; Legal obligation (duty of care to players) |
| Marketing and promotional communications | Your consent (opt-in), which may be withdrawn at any time |
| Analytics and service improvement | Legitimate interests (anonymised/aggregated data only) |
| Responding to legal or regulatory requests | Legal obligation |
Where yes baji relies on legitimate interests as the legal basis for processing, we have assessed that our legitimate interests are not overridden by your privacy rights. You may challenge this assessment at any time by contacting [email protected], and we will review your specific circumstances.
Data Sharing & Disclosure
yes baji does not sell, rent, or trade your personal information to any third party for commercial purposes. We share your data only in the limited circumstances described below, and only to the minimum extent necessary for each stated purpose.
Payment and Financial Service Partners
To process your deposits and withdrawals, yes baji shares transaction-related data with your chosen payment provider — such as bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank (DBBL), City Bank, BRAC Bank, Islami Bank, or Sonali Bank. Each provider operates under its own privacy framework and is independently responsible for data it processes within its own systems. yes baji shares only the data strictly necessary to initiate and confirm a payment.
Game Technology Providers
Games on the yes baji platform are delivered by third-party studios including Pragmatic Play, Evolution Gaming, Ezugi, Spribe, Microgaming, and NetEnt. These providers may receive a session token and anonymised player identifier to authenticate game sessions and record game outcomes for settlement and audit purposes. They do not receive your full name, mobile number, or payment details.
Legal and Regulatory Authorities
yes baji will disclose personal data to courts, law enforcement agencies, financial intelligence units, or other competent authorities where we are required to do so by applicable Bangladeshi law or by a valid court order. We will, where legally permitted, notify you before making such a disclosure.
Fraud Prevention and Industry Networks
In cases of suspected fraud, money laundering, or account abuse, yes baji may share relevant account information with fraud prevention organisations, payment processors, or other online gambling operators for the purpose of protecting the industry and its players from financial crime.
Data Processing Agreements
All third-party service providers who receive personal data from yes baji are required to sign a Data Processing Agreement (DPA) that contractually obliges them to: process data only on yes baji's documented instructions; implement appropriate technical and organisational security measures; and not further disclose the data to any sub-processor without yes baji's prior written consent.
International Transfers
Some of yes baji's technology partners — particularly game studios and server infrastructure providers — may process data in jurisdictions outside Bangladesh. Where such transfers occur, yes baji ensures that appropriate contractual safeguards are in place to protect the standard of data protection afforded to your information.
What We Never Share
yes baji will never sell your personal data to advertisers, data brokers, or any third party for their own commercial use. We will never share your full payment credentials (MFS PIN, bank password, or card number) with any party, including our own support team. Our agents access only the minimum account information required to resolve your support request.
Data Retention
yes baji retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. The following retention periods apply to the main categories of data we hold:
- Account Identity and KYC Documents: Retained for the duration of your active Account plus a minimum of five years following Account closure. This retention period is imposed by anti-money laundering regulations and enables us to respond to legal or regulatory enquiries after an Account is closed.
- Transaction and Financial Records: Retained for a minimum of seven years from the date of each transaction, in accordance with financial record-keeping obligations. This includes deposit and withdrawal records, payment method references, and bonus settlement records.
- Gameplay and Betting History: Retained for five years from the date of each game session or bet. This data is used for dispute resolution, responsible gaming monitoring, and regulatory audit purposes.
- Support Correspondence: Email and live chat records are retained for three years from the date of the most recent exchange in a support thread, or until the relevant dispute is fully resolved, whichever is later.
- Marketing Consent Records: Records of your marketing opt-in and opt-out decisions are retained for as long as your Account is active, and for a minimum of three years following Account closure, to demonstrate compliance with consent obligations.
- Technical Log Data (IP addresses, device logs): Retained for 90 days in active security logs, and then archived for a further 12 months before permanent deletion. Archived logs are accessible only to yes baji's security team for the purpose of fraud investigation.
When a retention period expires, yes baji securely deletes or irreversibly anonymises the relevant data so that it can no longer be linked to any individual player. If you request deletion of your personal data before a retention period has expired, yes baji will assess whether any legal obligation prevents immediate deletion and will communicate the outcome to you within two business days of your verified request.
Data Security
yes baji implements a layered set of technical and organisational security measures designed to protect your personal information against unauthorised access, accidental loss, destruction, or disclosure. Our key security controls include the following:
- Transport Layer Security (TLS): All data transmitted between your device and yes-baji.com is encrypted using TLS 1.2 or higher. This protects your login credentials, session data, and any information you enter into the platform from interception in transit.
- Encrypted Data Storage: Sensitive data fields — including passwords (stored as salted cryptographic hashes, never in plain text), KYC document images, and payment reference tokens — are encrypted at rest using AES-256 encryption on our database servers.
- Access Controls: Internal access to player personal data is governed by a strict role-based access control (RBAC) policy. Staff members are granted access only to the data categories required for their specific job function. Access logs are maintained and reviewed regularly by our security team.
- Two-Factor Authentication (2FA): yes baji supports two-factor authentication on player accounts via one-time password (OTP) sent to your registered Bangladeshi mobile number. We strongly encourage all players to enable 2FA to add an additional layer of protection to their account.
- Intrusion Detection and Monitoring: Our infrastructure is monitored 24/7 for anomalous activity, attempted intrusions, and unusual login patterns. Automated alerts trigger immediate review by our security team for any suspected breach attempt.
- Vulnerability Management: yes baji conducts regular security assessments of our platform, including periodic penetration testing. Identified vulnerabilities are remediated according to a risk-prioritised schedule.
Despite these measures, no online platform can guarantee absolute security. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, yes baji will notify affected players without undue delay and will take all reasonable steps to contain and remediate the incident.
Protect Your Own Account
Your account security also depends on the steps you take. yes baji strongly recommends that you use a unique, strong password for your account that is not reused on other websites; enable 2FA via OTP; never share your login credentials or OTP codes with anyone — including anyone claiming to be yes baji staff; and log out of your account when using a shared device. Our support team will never ask for your password.
Reporting a Security Concern
If you believe your yes baji account has been accessed without your authorisation, or if you discover a security vulnerability on our platform, please contact us immediately at [email protected] with the subject line "Security — Urgent". We will acknowledge your report within one hour and investigate promptly.
Your Privacy Rights
As a yes baji player, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact [email protected] with your registered mobile number and a description of your request. We will verify your identity before processing any request and will respond within two business days.
- Right of Access: You may request a copy of the personal data that yes baji holds about you. We will provide this in a structured, commonly used format (such as a PDF summary) within five business days of identity verification.
- Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. For example, if your registered name contains a typographical error, we will update it upon receipt of supporting documentation.
- Right to Erasure ("Right to Be Forgotten"): You may request that yes baji delete your personal data. Where no legal obligation requires us to retain the data, we will delete it within 10 business days of a verified request. Where retention is legally required (e.g., AML/CTF records), we will inform you of the applicable retention period and delete the data as soon as the period expires.
- Right to Restrict Processing: In certain circumstances — such as where you contest the accuracy of data we hold, or where you have objected to processing and we are assessing your objection — you may request that we restrict how we use your data while the issue is being resolved.
- Right to Data Portability: You may request that we provide your personal data in a machine-readable format (such as CSV or JSON) so that you can transfer it to another service provider, where technically feasible.
- Right to Object: You may object to processing of your personal data where yes baji relies on legitimate interests as the legal basis. We will assess your objection and cease the relevant processing unless we can demonstrate compelling legitimate grounds that override your interests.
- Right to Withdraw Marketing Consent: If you have opted in to receive promotional communications from yes baji, you may withdraw that consent at any time through your account settings or by emailing [email protected]. Withdrawal of marketing consent does not affect the lawfulness of processing carried out before withdrawal.
How to Submit a Data Request
Send your request to [email protected] with the subject line "Data Privacy Request — [Type of Request]" (e.g., "Data Privacy Request — Access" or "Data Privacy Request — Erasure"). Include your registered mobile number. We will verify your identity within one business day and begin processing your request immediately thereafter. There is no charge for submitting a data rights request.
Third-Party Services
The yes baji platform integrates with a number of third-party service providers to deliver its full range of features. Each provider is governed by its own privacy policy and data protection framework, and yes baji is not responsible for the data practices of external parties beyond the contractual obligations we impose on them through Data Processing Agreements.
The principal third-party service categories and their data interactions with yes baji are as follows:
- Game Studios (Pragmatic Play, Evolution Gaming, Ezugi, Spribe, Microgaming, NetEnt): These providers receive an anonymised session token and game configuration parameters to authenticate and deliver game sessions. They record game outcomes on their own certified servers for settlement and independent audit purposes. Game outcome records may be used by yes baji to resolve player disputes.
- Payment Partners (bKash, Nagad, Rocket, Upay, DBBL, City Bank, BRAC Bank, Islami Bank, Sonali Bank): Payment partners receive the transaction amount, account reference, and payment confirmation data necessary to execute deposits and withdrawals. Each partner is subject to Bangladesh Bank regulations and their own data protection obligations. yes baji does not store your full MFS account credentials.
- Customer Support Technology: yes baji's live chat and email support tools may be provided by a third-party helpdesk platform. Support conversations are stored within that platform's secure environment. Staff access is governed by yes baji's internal RBAC policy.
- Infrastructure and Hosting: yes baji's platform is hosted on secure cloud infrastructure. The hosting provider has access to server-level data but is contractually prohibited from accessing or using player personal data beyond the scope of providing infrastructure services to yes baji.
- Fraud Detection Services: yes baji may use third-party fraud scoring tools that analyse device fingerprints, IP reputation data, and behavioural signals to identify high-risk activity. These tools process data on yes baji's behalf and are bound by our Data Processing Agreements.
Links to third-party payment provider websites — such as bKash or Nagad — that may appear in support documentation are provided for reference only. Once you navigate away from yes-baji.com, yes baji has no control over the data practices of the site you visit. We encourage you to review the privacy policy of any third-party service you use in connection with your yes baji account.
Updates to This Policy
yes baji may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, new platform features, or updated guidance from data protection authorities. The effective date at the top of this document will be revised whenever a material update is made.
Where a change is material — meaning it significantly affects how we collect, use, or share your personal data — yes baji will notify you via an on-site notice displayed prominently on yes-baji.com for a minimum of seven days before the change takes effect. For non-material changes, such as clarifications of existing wording or corrections of typographical errors, we may update the document without prior notice beyond updating the effective date.
We encourage you to review this Privacy Policy periodically. The most current version is always available at yes-baji.com/privacy-policy. If you continue to use the yes baji platform after a revised Privacy Policy has taken effect, you are confirming your acceptance of the updated terms. If you do not agree with a material change, you may request account closure before the change takes effect, and yes baji will refund any real-money balance to your registered payment method.
For questions about this Privacy Policy, historical versions, or any aspect of how yes baji handles your personal data, please contact our support team at [email protected]. We are available 24/7 and will respond to all privacy-related enquiries within two business hours during Bangladesh Standard Time (UTC+6).
Current Policy Version
This Privacy Policy was last reviewed and updated on 1 January 2026. All previous versions are available on request by contacting [email protected] with the subject line "Privacy Policy — Previous Version Request".
Ready to Play with yes baji?
Your privacy is protected. Now explore everything yes baji has to offer — from live cricket betting to premium slots, live casino tables, and more.