salt baji Privacy
Policy

salt baji collects personal data that you provide directly when registering or using the platform, as well as data generated automatically through your interaction with the website. We collect only the data that is necessary to provide our services, comply with legal obligations, and maintain the security and integrity of the platform.

Data You Provide Directly

When you register a salt baji account, complete KYC verification, make a deposit or withdrawal, contact our support team, or participate in a promotion, you may provide the following categories of personal data:

• Identity data: Full legal name, date of birth, gender, and National Identity Card (NID) number;
• Contact data: Mobile phone number registered in Bangladesh, and email address if provided;
• Payment data: Mobile wallet type (bKash, Nagad, Rocket, or Upay) and the associated wallet number used for deposits and withdrawals;
• KYC documents: Scanned or photographed copies of your National ID Card, passport, driver's licence, or utility bill as required for identity verification;
• Support communications: Any messages, complaints, or queries you send to the salt baji customer support team via live chat, email, or any other channel.

Data Collected Automatically

When you visit or use the salt baji website, certain technical data is collected automatically by our systems. This data does not directly identify you by name but may be associated with your account or device:

• Device and browser data: IP address, browser type and version, operating system, device type (desktop, mobile, tablet), and screen resolution;
• Usage data: Pages visited, time spent on each page, games played, bets placed, navigation paths, and feature interactions;
• Session data: Login timestamps, session duration, logout events, and security-related events such as failed login attempts;
• Cookie and tracking data: Data collected via cookies and similar technologies as described in the Cookies section of this policy.

salt baji uses your personal data for specific, clearly defined purposes. We do not process your data in ways that are incompatible with the purposes for which it was originally collected. The primary purposes for which we use your data are set out below, together with the legal basis for each processing activity.

Purpose	Data Used	Legal Basis
Account registration and management	Identity data, contact data	Contract performance
Processing deposits and withdrawals	Payment data, identity data	Contract performance
KYC identity verification and age verification	KYC documents, identity data	Legal obligation
Fraud prevention and anti-money laundering monitoring	All categories	Legal obligation / Legitimate interest
Customer support and complaint resolution	Contact data, support communications	Contract performance
Platform security and abuse prevention	Device data, usage data, session data	Legitimate interest
Responsible gaming monitoring and intervention	Usage data, betting history	Legal obligation / Legitimate interest
Service improvements and analytics	Usage data, cookie data	Legitimate interest
Promotional communications (where opted in)	Contact data	Consent

Marketing Communications

salt baji may send you promotional messages — including information about new games, deposit bonuses, seasonal offers, and BPL cricket promotions — via SMS or email, but only where you have opted in to receive such communications at the time of registration or via your account settings. You may withdraw your consent to marketing communications at any time by contacting support or updating your preferences in your account settings. Withdrawal of marketing consent does not affect the lawfulness of any processing carried out before the withdrawal.

Automated Decision-Making

salt baji's fraud detection and responsible gaming systems use automated processing to flag unusual account activity, including patterns consistent with multi-accounting, bonus abuse, or excessive gambling behaviour. Where an automated decision significantly affects your account — for example, a temporary freeze or a responsible gaming intervention — you have the right to request human review of that decision. Please contact our support team to exercise this right.

salt baji does not sell, rent, or trade your personal data to any third party for their own commercial purposes. We share your data only in the limited circumstances described below, and only to the extent necessary for each stated purpose.

Payment Processing Partners

To process your deposits and withdrawals, salt baji shares the minimum necessary payment data with our mobile financial service partners, including bKash, Nagad, Rocket, and Upay. Each of these partners operates under its own privacy and security standards. salt baji shares only the data required to complete a specific transaction — we do not provide payment partners with your full account history or betting activity.

Identity Verification Services

salt baji may use third-party KYC and identity verification service providers to assist with the processing and validation of identity documents. Any such provider is bound by a confidentiality agreement and is permitted to use your data only for the purpose of completing the verification request made by salt baji.

Game Technology Providers

Casino and sports betting games on the salt baji platform are supplied by independent game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive a pseudonymous player identifier and session data in order to operate the game and record the outcome. They do not receive your full name, National ID, or payment details.

Legal and Regulatory Disclosure

salt baji may disclose your personal data to law enforcement agencies, regulatory bodies, or other competent authorities where required to do so by applicable law, a court order, or a formal legal process. We will notify you of any such disclosure where we are legally permitted to do so.

The salt baji website uses cookies and similar technologies to ensure the platform functions correctly, maintain your logged-in session, remember your preferences, and gather anonymised analytics data that helps us improve the user experience. This section explains what types of cookies we use and how you can manage them.

Types of Cookies We Use

• Strictly necessary cookies: These cookies are essential for the website to function. They manage your authenticated session, maintain your account security state, and enable core features such as the game lobby and account dashboard. These cookies cannot be disabled without preventing you from using the platform.
• Functional cookies: These cookies remember your preferences — such as your preferred language setting (English) and your chosen display options — so that you do not need to reconfigure them on each visit.
• Analytics cookies: We use anonymised analytics data to understand how users navigate the salt baji platform, which games are most popular, and where technical issues may be occurring. This data is aggregated and does not identify individual users by name.
• Security cookies: These cookies help salt baji detect and prevent fraudulent activity, including bot traffic, credential-stuffing attacks, and multi-account behaviour.

Managing Your Cookie Preferences

You can control and manage cookies through your browser settings. Most modern browsers allow you to view, block, or delete cookies at any time. Please note that blocking strictly necessary cookies will prevent you from logging into your salt baji account and using core platform features. For instructions on managing cookies in your specific browser, refer to your browser's official help documentation. For players in Bangladesh accessing the platform via mobile browsers (Chrome for Android, Samsung Internet, Firefox for Android), cookie management options are available within each browser's privacy settings.

No Third-Party Advertising Cookies

salt baji does not use third-party advertising cookies or tracking pixels that would allow external advertising networks to build a profile of your browsing behaviour across different websites. The only tracking technologies present on the salt baji website serve operational, security, or internal analytics purposes.

Protecting your personal data against unauthorised access, loss, or misuse is a core operational priority for salt baji. We apply a layered security approach that encompasses technical, organisational, and procedural safeguards.

Technical Security Controls

• 256-bit SSL/TLS encryption on all data transmitted between your browser or app and our servers;
• Encrypted data storage — sensitive fields including passwords, National ID numbers, and payment wallet numbers are stored in encrypted form using industry-standard hashing and encryption algorithms;
• Firewall and intrusion detection systems monitoring network traffic in real time;
• Regular security audits and penetration testing conducted by qualified security professionals;
• Two-factor authentication (2FA) available for all registered accounts via SMS verification.

Organisational Controls

Access to personal data within salt baji is restricted on a strict need-to-know basis. Only authorised staff whose job function requires access to specific data categories — such as the compliance team handling KYC documents, or the support team handling contact data — are permitted to access that data. All staff with access to personal data receive training on data protection obligations and are bound by confidentiality agreements.

Incident Response

In the event of a data security incident that is likely to result in a risk to your rights — for example, an unauthorised access event affecting account credentials — salt baji will notify affected users without undue delay. The notification will describe the nature of the incident, the categories of data affected, the likely consequences, and the steps we are taking to address the situation.

salt baji retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. Different categories of data are subject to different retention periods, as outlined below.

Data Category	Retention Period	Reason
Account registration data	Duration of account + 5 years post-closure	Legal and audit obligations
KYC identity documents	5 years from date of submission	AML legal requirement
Transaction and payment records	7 years from transaction date	Financial record-keeping obligations
Betting and gaming history	5 years from date of activity	Responsible gaming monitoring, dispute resolution
Customer support communications	3 years from last interaction	Complaint resolution and quality assurance
Analytics and usage data	26 months (anonymised after 12 months)	Platform improvement
Marketing consent records	Until withdrawal of consent + 3 years	Evidence of lawful basis

Once the applicable retention period has expired, salt baji will securely delete or anonymise the relevant data. Anonymised data — from which no individual can be identified — may be retained indefinitely for statistical and platform improvement purposes without limitation.

Account Closure and Data

Closing your salt baji account does not result in immediate deletion of all data. Retention obligations under financial, anti-money laundering, and responsible gaming rules require that certain records be kept for the periods specified in the table above, even after an account is closed. During the retention period, your data will not be used for marketing or product development purposes — it will be held in a restricted archive accessible only to compliance and legal staff.

As a registered user of salt baji, you have a number of rights in relation to your personal data. salt baji is committed to honouring these rights promptly and without creating unnecessary barriers to their exercise. To exercise any of the rights described below, please contact us at [email protected].

Right of Access

You have the right to request a copy of the personal data that salt baji holds about you. Upon a verified request, we will provide you with a summary of the data categories held, the purposes for which they are processed, and any third parties with whom they have been shared. We will respond to access requests within 30 days of receipt.

Right to Correction

If any personal data held by salt baji is inaccurate or incomplete, you have the right to request that it be corrected. For most standard data fields — such as your email address or phone number — you can update these directly via your account settings. For KYC-related data, please contact the support team with the correct information and supporting documentation.

Right to Erasure

You may request that salt baji delete your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw your consent (and there is no other lawful basis for processing), or where the data has been processed unlawfully. Please note that this right is subject to exceptions — we cannot delete data that we are legally required to retain under financial record-keeping or AML obligations. In such cases, we will explain which data must be retained and why.

Right to Restrict Processing

In certain circumstances — for example, while a dispute about data accuracy is being resolved — you may request that salt baji restrict the processing of your personal data to storage only, without any further active use.

Right to Withdraw Marketing Consent

Where you have given consent to receive marketing communications from salt baji, you may withdraw that consent at any time. Withdrawal will take effect within 48 hours of receipt of your request. Withdrawal of marketing consent does not affect your ability to continue using the salt baji platform or any other processing carried out on a different legal basis.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way salt baji handles your personal data, please contact our support team using the details below. We take all privacy inquiries seriously and will respond in English within a reasonable timeframe during Bangladesh Standard Time (BST, UTC+6) business hours.

Contact Details

• Support email: [email protected] (plain text — not a clickable link)
• Support hours: 24 hours a day, 7 days a week, Bangladesh Standard Time (UTC+6)
• Response time: General queries within 24 hours; privacy and data requests within 10 business days

Updates to This Privacy Policy

salt baji reviews this Privacy Policy on a regular basis to ensure it remains accurate, complete, and reflective of our current data processing activities. We reserve the right to update this policy at any time. Where changes are material — for example, if we introduce a new category of data processing or share data with a new category of third party — we will notify registered users via their registered mobile number or email address at least 7 days before the changes take effect.

The "Last Updated" date at the top of this page reflects the most recent revision. We encourage you to review this policy periodically. Your continued use of the salt baji platform after the effective date of any updated policy constitutes your acceptance of the revised terms.

This Privacy Policy applies exclusively to data processed by salt baji via the website at https://salt-baji.com. It does not apply to third-party game providers, payment processors, or any other external website that may be referenced on the platform — each of those parties operates under its own privacy policy.