Bajavip Privacy Policy – How We Handle Your Data

Welcome to Bajavip. This Privacy Policy explains what information we collect when you use the Bajavip platform — whether via the website, mobile app, or any other channel — why we collect it, how we store it, and when we may share it with others.

Bajavip believes your personal data belongs to you — we are simply its custodians. This policy is written in full so that every player can clearly understand what happens to their information.

This policy is drafted in accordance with the GDPR (General Data Protection Regulation) and the data protection guidelines of the Curaçao Gaming Authority. Bajavip adheres to international standards.

Bajavip collects two types of information — what you provide directly, and what is collected automatically as you use the platform.

What you provide directly:

Automatically Collected Information:

• Device Information: Your device, operating system, and browser — collected for security and compatibility purposes.
• IP Address: To identify the location of your internet connection — primarily for fraud prevention purposes.
• Session Information: Time spent on the platform and pages visited — used to improve the user experience.
• Betting History: Your betting history per game — displayed in your account and used for responsible gaming monitoring.
• Cookies & Tracking: Limited browsing data — discussed in detail in the following section.

Bajavip uses your data only for specific, legitimate purposes. Each use case is clearly explained below.

As part of responsible gaming oversight, Bajavip analyzes your betting patterns solely to identify unusual activity and offer assistance where needed. This analysis is never used against you.

Bajavip does not sell your data to third parties. However, limited information may be shared with trusted partners in specific circumstances.

• Payment Providers: bKash, Nagad, and Rocket receive only the limited payment information required to process transactions. They operate under their own privacy policies.
• Identity Verification Providers: Licensed third-party providers are used for identity document verification during the KYC process.
• Technology Service Providers: Cloud hosting, anti-fraud systems, and support platforms all operate under strict data processing agreements with Bajavip.
• Regulatory Authority: The Curaçao Gaming Authority or relevant government agencies — only when required by legal obligation.
• Anti-Money Laundering Authority: As part of AML (Anti-Money Laundering) obligations, reporting suspicious transactions to the relevant authorities is a legal requirement.

Bajavip uses multiple layers of security to protect your personal information, covering both technical and organizational measures.

• SSL/TLS 256-Bit Encryption: Every interaction on our website and app is encrypted.
• Two-Factor Authentication (2FA): Mobile OTP verification at the time of account login.
• Separate Database Servers: Player data and financial data are stored on separate servers.
• Regular Security Audits: Third-party cybersecurity experts conduct regular audits.
• Staff Training: All Bajavip staff undergo regular training on data protection.
• Incident Response Plan: In the event of a data breach, affected users will be notified within 72 hours.

Security Indicators

Cookies are small text files stored in your browser or device. Bajavip uses cookies to improve service quality and personalise your experience.

You can delete cookies or block new ones at any time through your browser settings. Please note that disabling essential cookies may affect certain features of the platform.

Bajavip does not retain your data longer than necessary. A separate retention period is defined for each category of information.

• Account Information: For the duration the account remains active and for 5 years after closure — required under AML and legal obligations.
• Transaction Records: Up to 7 years — in accordance with international financial transaction record-keeping standards.
• KYC Documents: 5 years after account closure — required by regulatory obligations.
• Support Conversations: 3 years after last contact — retained as evidence for dispute resolution.
• Analytics Data: Up to 2 years in anonymized form — used for platform improvement.

Once the defined retention period has passed, Bajavip permanently deletes the data using secure methods that make recovery impossible.

As a Bajavip player, you have specific rights over your own data. There are no fees to exercise any of these rights.

Bajavip strictly does not serve anyone under the age of 18. We do not knowingly collect personal data from minors. If someone registers with a false age and is later found to be under 18, all their data will be deleted immediately.

A note for parents — please keep your ID, mobile banking accounts, and devices secure, and ensure that minors in your household cannot access this platform.

Bajavip may update this Privacy Policy when necessary. How you are notified will depend on the nature of the changes.

• Minor Changes: The "Last Updated" date at the top of the policy will be revised accordingly.
• Major Changes: Advance notice will be sent to your registered email and via SMS.
• Your Consent: Continued use of the platform after a notice has been issued constitutes acceptance of the updated policy.

If you do not agree to the updated policy, you may request to close your account — your full balance will be withdrawn before the account is closed.