Privacy Policy — Your Data, Protected by ajee

Introduction

This Privacy Policy describes how ajee ("we", "us", "our", or "the Platform") collects, uses, stores, and protects the personal information of individuals ("you", "the Player", "the User") who register for or access the ajee platform at ajee.io. ajee is committed to handling all personal data responsibly, securely, and in accordance with recognised data protection principles.

By creating an account on ajee or by continuing to use the platform after this Privacy Policy has been updated, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Privacy Policy, you must not register an account or use the ajee platform.

This Privacy Policy should be read alongside the ajee Terms and Conditions, which govern the overall contractual relationship between you and ajee. In the event of any conflict between the two documents, the Terms and Conditions shall prevail unless the matter in dispute relates exclusively to the handling of personal data, in which case this Privacy Policy shall govern.

Data We Collect

ajee collects personal data through several channels, including direct registration input, account activity, payment transactions, identity verification processes, and automated technical collection. The following table summarises the categories of data we collect, the source of that data, and the primary purpose for which it is collected.

2.1 Data You Are Not Required to Provide

Certain fields during registration are optional. You are not required to provide information beyond what is marked as mandatory. However, failure to provide certain categories of data — such as identity verification documents when requested — may limit your ability to make withdrawals or access certain platform features.

2.2 Sensitive Data

ajee does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data beyond what is contained in a standard government-issued identity document submitted for KYC purposes. If you believe you have inadvertently shared sensitive data with us, please contact [email protected] immediately so we can review and appropriately handle the submission.

How We Use Your Data

ajee uses the personal data it collects for the following specific purposes. We do not use your data for any purpose that is incompatible with those listed below without first obtaining your explicit consent or updating this Privacy Policy with appropriate notice.

• Account Registration and Management: To create and maintain your ajee player account, authenticate your identity at login, manage your preferences, and communicate account-related information such as transaction confirmations, security alerts, and policy updates.
• Identity Verification (KYC): To verify that you meet the minimum age requirement of 21 years and that your identity matches the registration information provided, in compliance with our anti-money laundering (AML) and know-your-customer (KYC) obligations.
• Payment Processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, Mastercard, and other supported payment methods; to verify that payments originate from accounts registered in your own name; and to detect and prevent fraudulent payment activity.
• Platform Operation and Game Delivery: To deliver cricket betting markets, slot games, live casino products, crash games, and all other platform features; to record bet outcomes and account balances; and to resolve any disputes relating to game results or transaction records.
• Responsible Gaming: To monitor betting patterns that may indicate problem gambling behaviour; to administer self-imposed limits, cooling-off periods, and self-exclusion requests; and to fulfil our duty of care obligations to players.
• Fraud and Security: To detect, investigate, and prevent fraudulent activity, account takeovers, bonus abuse, money laundering, and other prohibited activities; to share relevant data with law enforcement or regulatory bodies where legally required.
• Customer Support: To respond to enquiries, handle complaints, process formal dispute submissions, and maintain records of support interactions for quality assurance purposes.
• Marketing Communications: To send you information about ajee promotions, bonuses, and seasonal offers — including BPL, IPL, T20 World Cup, and Eid special promotions — where you have opted in to receive such communications. You may opt out at any time by contacting [email protected].
• Legal and Regulatory Compliance: To fulfil obligations under applicable anti-money laundering legislation, to respond to lawfully issued requests from regulatory or law enforcement authorities, and to maintain records as required by applicable retention obligations.

Legal Basis for Processing

ajee processes your personal data on one or more of the following legal bases depending on the specific processing activity and applicable data protection requirements:

• Contractual Necessity: Processing that is necessary to perform our contractual obligations to you under the ajee Terms and Conditions — including account creation, payment processing, game delivery, and withdrawal handling — is carried out on the basis that it is required to fulfil the contract between us.
• Legal Obligation: Processing carried out to comply with applicable legal obligations — including anti-money laundering checks, age verification, identity verification, and reporting to regulatory authorities — is carried out on the basis that it is required by law.
• Legitimate Interests: Processing carried out for fraud detection, security monitoring, platform improvement, and responsible gaming monitoring is carried out on the basis of ajee's legitimate interests in operating a safe, fair, and commercially viable platform, provided those interests are not overridden by your privacy rights.
• Consent: Processing carried out for optional marketing communications is based on your explicit consent provided at registration or through a subsequent opt-in action. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

Data Sharing and Disclosure

ajee does not sell, rent, or trade your personal data. We share personal data only in the limited and controlled circumstances described below, and only to the extent necessary for the specified purpose.

5.1 Payment Processors

To process deposits and withdrawals, we share the minimum necessary financial and identity data with our payment processing partners, including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, and card processing networks for Visa and Mastercard transactions. These partners process your data strictly in accordance with their own data protection obligations and are not permitted to use it for any other purpose.

5.2 Identity Verification Providers

Where ajee uses third-party identity verification or KYC service providers to verify the identity and age of players, we share the relevant identity documents and personal details with those providers. These providers are engaged under strict data processing agreements that limit their use of your data to the verification purpose only.

5.3 Fraud and Security Partners

ajee may share technical data such as IP addresses, device fingerprints, and account activity data with fraud detection and cybersecurity partners to protect the platform and its players from malicious activity. This sharing is carried out under agreements that restrict the use of your data to fraud prevention purposes only.

5.4 Game Providers

Third-party game studio partners — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — may receive limited session-level technical data (such as an anonymised player session identifier) necessary to deliver their game content within the ajee platform. These providers do not receive your full personal profile and are bound by their own privacy and security obligations under licence agreements with ajee.

5.5 Legal and Regulatory Authorities

ajee may disclose your personal data to law enforcement agencies, regulatory bodies, or courts where we are legally required to do so by a valid order, warrant, or regulatory directive. We will notify you of any such disclosure where we are legally permitted to do so. We will not disclose your data to authorities on a voluntary basis beyond what is required by our legal obligations.

5.6 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of the ajee business, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and of any material change to how your data will be processed as a result. You will retain the right to request deletion of your data in accordance with Section 8 of this Policy.

Cookies and Tracking Technologies

ajee uses cookies and similar tracking technologies on the platform to enable core functionality, enhance your user experience, and gather analytical data that helps us improve the platform. This section explains the types of cookies we use and how you can manage your preferences.

6.1 Types of Cookies Used

• Strictly Necessary Cookies: These cookies are essential for the platform to function. They enable you to log in to your account, navigate between pages, and maintain your session securely. These cookies cannot be disabled without significantly impairing your ability to use the platform.
• Functional Cookies: These cookies remember your preferences — such as your preferred language settings and previously used payment methods — to provide a more personalised experience on return visits.
• Analytics Cookies: These cookies collect anonymised data about how players use the platform — which pages are visited most frequently, where sessions begin and end, and how features are navigated. This data helps us identify areas for improvement.
• Security Cookies: These cookies are used to detect and prevent fraudulent activity, including bot access and account takeover attempts. They form part of our platform security infrastructure and cannot be disabled.

6.2 Managing Cookie Preferences

You can manage non-essential cookies through your browser settings. Most modern browsers allow you to view, delete, and block cookies on a per-site basis. Please note that disabling functional or analytics cookies may affect the quality of your experience on the ajee platform but will not prevent you from accessing core account features, provided strictly necessary cookies remain enabled.

6.3 No Third-Party Advertising Cookies

ajee does not use third-party advertising or retargeting cookies. We do not share cookie data with advertising networks or allow external advertisers to place tracking cookies on our platform. Your browsing activity on ajee is not used to build advertising profiles for third-party use.

Data Retention

ajee retains personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply as a general guide:

• Active Account Data: Personal data associated with an active ajee account is retained for the full duration that the account remains open and active.
• Closed Account Data: Following account closure — whether by player request or by ajee — identity and transaction records are retained for a minimum of 5 years from the date of closure to satisfy anti-money laundering record-keeping obligations.
• Payment and Transaction Records: Financial transaction records, including deposit and withdrawal history, are retained for a minimum of 5 years from the date of the transaction.
• Support and Complaint Records: Records of customer support interactions and formal complaints are retained for 3 years from the date of the last interaction in the relevant thread.
• Marketing Consent Records: Records of your consent to or withdrawal from marketing communications are retained for the duration of your account plus 2 years following account closure.
• Technical and Log Data: Server logs, IP address records, and session data are retained for up to 12 months from the date of collection, unless a longer retention period is required in connection with an active security investigation or legal matter.

At the end of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to any individual player. Where data is anonymised rather than deleted, the anonymised data may be retained indefinitely for aggregate analytical purposes.

Your Rights

As a player on the ajee platform, you have the following rights in relation to your personal data. These rights may be subject to certain limitations where overriding legal obligations apply — for example, ajee cannot delete transaction records that are required to be retained under anti-money laundering law — but we will always explain the specific reason if we are unable to fulfil a request in full.

• Right of Access: You have the right to request a copy of all personal data that ajee holds about you. We will respond to access requests within 30 days of receipt. Where the volume or complexity of data is significant, we may request an extension of up to an additional 30 days, of which we will notify you promptly.
• Right to Rectification: You have the right to request correction of any personal data held by ajee that is inaccurate or incomplete. For standard account data such as contact details, you may be able to update this directly through your account settings. For identity and verification data, please contact [email protected].
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where the data has been processed unlawfully. This right is subject to overriding legal retention obligations.
• Right to Restriction: You have the right to request that ajee restricts the processing of your personal data in certain circumstances — for example, while the accuracy of data you have contested is being verified, or where you have objected to processing based on legitimate interests and the objection is under review.
• Right to Object: You have the right to object to processing of your personal data carried out on the basis of legitimate interests, including profiling for fraud detection or responsible gaming monitoring purposes. We will cease processing unless we can demonstrate compelling legitimate grounds that override your rights.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity, and is carried out by automated means, you have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to Withdraw Consent: Where processing is based on your consent — in particular, consent to receive marketing communications — you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of the above rights, please contact the ajee data support team at [email protected] with the subject line "Data Rights Request". Please include your registered email address and a brief description of your request. We will acknowledge receipt within 2 business days and provide a substantive response within 30 days.

Data Security

ajee implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. Our security posture is reviewed regularly and updated in response to emerging threats.

9.1 Technical Measures

• SSL/TLS Encryption: All data in transit between your device and the ajee platform is encrypted using industry-standard SSL/TLS protocols. This applies to all pages of the platform including login, account management, deposit, and withdrawal flows.
• Password Security: Account passwords are never stored in plain text. ajee uses strong one-way cryptographic hashing to store password credentials, meaning that even ajee staff cannot retrieve your password. If you forget your password, it must be reset — it cannot be recovered.
• Access Controls: Access to personal data within ajee's internal systems is restricted on a strict need-to-know basis. Only staff with a legitimate operational requirement may access player personal data, and all internal access is logged and subject to audit.
• Fraud Detection Systems: ajee operates automated systems that monitor account activity in real time for signs of unauthorised access, including unusual login locations, IP address anomalies, and atypical transaction patterns. Suspicious activity triggers immediate review and, where necessary, temporary account hold.

9.2 Organisational Measures

All ajee staff who handle personal data are required to complete data protection training and are bound by confidentiality obligations. Third-party partners with access to personal data are engaged only under written data processing agreements that impose security standards equivalent to those applied internally by ajee.

9.3 Data Breach Response

In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of players, ajee will take immediate steps to contain the breach, assess the scope, and notify affected players without undue delay. Notifications will be sent to the email address on file and will include a description of the nature of the breach, the categories of data affected, and the steps being taken to mitigate any adverse effects.

Children and Minors

The ajee platform is strictly intended for adults aged 21 years or older. ajee does not knowingly collect personal data from individuals under the age of 21. The registration process includes a mandatory age declaration, and ajee employs identity verification procedures to detect and prevent underage registration.

If ajee becomes aware that personal data has been collected from an individual under 21 years of age, we will take immediate steps to close the associated account, delete the personal data in question, and return any real-money deposits to the originating payment method. If you are a parent or guardian and you believe that a minor in your care has created an ajee account, please contact us immediately at [email protected].

International Data Transfers

ajee operates as an internationally based offshore gaming platform. As a result, personal data collected from players in Bangladesh may be transferred to, stored on, and processed on servers located outside of Bangladesh. Where such transfers occur, ajee takes steps to ensure that appropriate safeguards are in place to protect your data to a standard equivalent to that described in this Privacy Policy.

Safeguards applied to international data transfers may include: contractual clauses in agreements with third-party data processors that impose equivalent data protection obligations; selection of service providers that operate under recognised international security certification frameworks; and transfer only to jurisdictions that maintain adequate data protection regimes under applicable standards.

If you have questions about the specific safeguards applied to any international transfer of your personal data, please contact us at [email protected] and we will provide the relevant information within a reasonable timeframe.

Changes to This Privacy Policy

ajee reserves the right to update or amend this Privacy Policy at any time. When material changes are made — including changes to the categories of data collected, the purposes for which data is used, or the third parties with whom data is shared — ajee will notify registered players by posting a prominent notice on the platform and, where the change is significant, by sending a notification to the email address on file.

Updated versions of this Privacy Policy will carry a revised "Last Updated" date at the top of the page. The updated Policy will take effect from the date stated in the notification, which will be no fewer than 7 days after the notice is published under normal circumstances. Changes required on shorter notice due to urgent legal, regulatory, or security reasons will be clearly labelled as such.

Your continued use of the ajee platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with the changes, you may request account closure in accordance with the account closure provisions in the ajee Terms and Conditions.

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the handling of your personal data by ajee, please contact our data support team using the details below. We are committed to responding promptly and transparently to all privacy-related enquiries.

• Support Email: [email protected] (plain text — not a clickable link)
• Subject Line for Data Requests: Use "Data Rights Request" for access, deletion, rectification, or portability requests.
• Subject Line for Privacy Complaints: Use "Privacy Complaint" for matters relating to alleged misuse or unauthorised disclosure of your personal data.
• Response Time: General privacy enquiries are typically answered within 3 business hours. Formal data rights requests receive a substantive response within 30 days.
• Operating Hours: Support is available 24 hours a day, 7 days a week, 365 days a year — including Eid, Pohela Boishakh, Victory Day (December 16), and Independence Day (March 26).
• Time Zone: All support operations run on Bangladesh Standard Time (BST, UTC+6).