Data Protection

Baji200 Privacy Policy — How we collect and protect your information

Baji200 believes your personal data belongs to you. This page explains in plain English what data we collect, why we collect it, and how we protect it.

Last Updated: January 2026 Version 2.4 Fully in Bengali SSL 256-bit Encryption
At a Glance

The Six Core Pillars of Our Privacy Commitment

Military-Grade Encryption

Every transaction and piece of personal information you share is protected by 256-bit SSL encryption — the same technology used by banks.

TLS 1.3 + AES-256
Not Sold to Third Parties

Your name, mobile number, or any other personal information will never be sold to advertisers or external organisations.

Zero Data Sales
Minimal Data Collection

We collect only the minimum information necessary to provide our services — nothing more.

Data Minimisation
Your Rights Over Your Data

You have the full right to request access to, correction of, or deletion of your data. Let us know at any time.

GDPR-Compliant
Regular Security Audits

An independent cybersecurity team regularly audits baji200's systems to ensure there are no vulnerabilities.

Annual Penetration Testing
Full Transparency in Plain English

No legal jargon, no fine print — baji200's Privacy Policy is written in plain English so every member can understand it.

Plain Bangla
1

Introduction & Scope

Welcome to baji200. This Privacy Policy explains how baji200 collects, stores, and uses your personal information. It applies to baji200's website, mobile app, and all digital services.

By registering with or using baji200, you are considered to have accepted this Privacy Policy. Please read it carefully before using our services for the first time.

If you have any questions about this policy, please reach out to our support team. We'll walk you through everything in plain, simple language.

We comply with international data protection regulations and uphold the highest standards of privacy for our Bangladeshi members. Our goal is to ensure you remain in full control of your own information.

2

What Data Is Collected

Baji200 collects two types of data — what you provide directly, and what is collected automatically.

2.1 Information You Provide Directly
  • Registration Information: Name, mobile number, date of birth, email address
  • Identity Verification Information: National ID Number (for large withdrawals)
  • Payment Information: Mobile banking number (Mobile Pay/Nagad) — fully encrypted
  • Support Communications: Messages sent by you via chat or email
2.2 What Is Collected Automatically
  • Device Information: Device type, operating system, browser
  • Usage Patterns: Pages visited and time spent, buttons clicked
  • IP Address: Fraud Prevention & Security
  • Cookies & Session Data: To remember your login status and preferences

What We Never Collect: Full bank account numbers, card numbers, social media passwords, or your physical location.

3

Purpose of Data Collection

Baji200 uses your information only for specific and legitimate purposes. The use of each type of data is clearly set out below:

Data Type Purpose of Use Legal Basis
Name & Mobile Number Account Creation & Login Contract Performance
Date of Birth Age Verification (18+) Legal Obligations
Payment Number Deposits & Withdrawals Contract Performance
NID Information AML Verification & Large Transactions Legal Obligations
IP Address Fraud & Abuse Prevention Legitimate Interest
Usage Patterns Service Improvement & Personalization Legitimate Interest
Support Messages Troubleshooting & Quality Assurance Contract Performance

Baji200 never shares your data with third parties for marketing purposes. If you receive promotional messages from us, you can opt out at any time.

4

Data Storage & Security

4.1 Technical Safeguards

Baji200 servers are hosted in internationally accredited data centers with round-the-clock physical security and cybersecurity measures in place. To keep your data safe, we use:

  • AES-256 Encryption (for data at rest)
  • TLS 1.3 Encryption (for data in transit)
  • Multi-Factor Authentication (for internal system access)
  • Automated Threat Detection System
  • Regular backups and disaster recovery planning
4.2 Institutional Security

Baji200 employees may only access member information when required for their specific role. All staff must sign strict confidentiality agreements and receive regular security training.

In the event of a security breach, baji200 will notify affected members within 72 hours and take all necessary steps to address the situation.

5

Cookies & Tracking Technologies

Baji200's website and app use cookies and similar technologies. A cookie is a small file stored on your device.

5.1 Types of Cookies We Use
  • Essential Cookies: For login state and security — the site cannot function without these
  • Functional Cookies: For language preferences and a personalized experience
  • Analytical Cookies: To understand which sections of the site are used most
5.2 Cookie Controls

You can disable non-essential cookies through your browser settings. Please note that doing so may affect certain features, such as automatic login or saved language preferences.

Baji200 does not use any advertising or cross-site tracking cookies. Your browsing habits are not tracked across other websites.

6

Data Sharing Policy

Baji200 never sells your data. However, in specific and limited circumstances, certain information may be shared with trusted partners:

  • Payment Processor: To process transactions with payment partners such as Mobile Pay and Nagad
  • Identity Verification Services: To comply with AML (Anti-Money Laundering) regulations
  • Legal Authorities: Upon a valid court order or lawful request from a regulatory authority
  • Security Analyst: Fraud detection service providers — encrypted data only

All third-party partners are bound by the same strict confidentiality agreements as baji200. They are not permitted to share or sell your information to any other party.

7

Your Data Rights

Baji200 believes you should have full control over your own data. Your rights are outlined below:

Right of Access

You may request a full summary of the information we hold about you. We will provide a complete response within 30 days.

Right to Rectification

If any of your information is incorrect, you may request a correction. We will make the necessary updates within 7 business days.

Right to Erasure

After closing your account, you may request that your data be deleted. All information will be removed except where retention is required by law.

Right to Restrict Processing

You can request that we stop using your data for specific purposes — for example, to opt out of marketing messages.

Right to Data Portability

Your data can be provided in a machine-readable format (JSON/CSV) upon request.

Right to Object

You may object to certain types of data processing, particularly those carried out on the basis of legitimate interests.

To exercise any of these rights, please contact our support team. We will respond to your request within 30 days of receipt.

8

Protection of Minors' Data

Baji200 is strictly for users aged 18 and above. We do not knowingly collect any personal information from minors.

Age is verified at the point of registration. If it is established that a minor has created an account, that account will be closed immediately and all collected data will be deleted.

If you suspect a minor is using baji200, please notify our support team immediately — we will take prompt action.

9

Third-Party Services & Links

Baji200 works with a number of trusted third-party service providers to operate its platform. All such providers are bound by strict confidentiality agreements.

9.1 Payment Gateway

When transacting via Mobile Pay or Nagad, your payment information is also governed by those platforms' own privacy policies. We recommend reading their policies separately.

9.2 Analytics Tools

Baji200 uses internal analytics tools to understand site performance. No third-party advertising analytics tools are used.

Baji200's website contains no social media tracking pixels or advertising network trackers.

10

Data Retention & Deletion Periods

Baji200 does not retain any data beyond what is necessary. The retention period for each type of data is outlined below:

Data Type Retention Period Reason
Account Information 5 years after account closure Legal Obligations
Transaction Records 7 Years AML Policy
Support Chat 2 Years Quality Assurance
Login Logs 90 Days Security Monitoring
Cookie Data End of session or 30 days User Experience
Marketing Preferences Until Consent Is Withdrawn Your Consent
11

Privacy Policy Updates

Baji200 may update this Privacy Policy from time to time. For significant changes, members will be notified by email or SMS at least 15 days in advance.

Continued use of baji200 following any changes will be considered acceptance of the updated policy. We encourage you to review this page regularly.

Version History: In this version (2.4, January 2026), the data retention table and cookies section have been updated. The user rights section has been expanded in greater detail compared to the previous version.

12

Contact Us

For any privacy-related questions or concerns, please get in touch with us. Our data protection team will handle your request within 30 days.

Email
privacy@baji200.co
Live Chat
24/7 Support

Our support team is fully available in Bangla. If you find any legal language confusing, just ask us directly in chat — we'll explain it in plain, simple terms.

How secure is your information?

Baji200's multi-layered security system keeps your data protected at all times.

Security Standards

Our Layers of Protection

Encryption Strength98%
Fraud Detection95%
Server Uptime99.9%
Data Minimization96%
Security Audit Compliance100%
Detailed Discussion

Why does baji200 take your data privacy so seriously?

Data theft on online platforms is not new in Bangladesh. Many users report receiving calls from unknown numbers shortly after registering on a platform — a direct result of data being sold. baji200 operates completely differently.

When you provide your mobile number on baji200, it is used solely to verify your account. It will never be shared with any advertiser, third-party call centre, or external organisation. This is a written commitment — not just a claim.

Extra care is taken with payment information. baji200 will never ask for your Mobile Pay or Nagad PIN. If anyone requests your PIN claiming to be from baji200, it is a scam — report it to our support team immediately. Our systems never ask for your PIN because we simply do not need it.

For baji200, data protection is more than a legal obligation — it is a core value. We believe the best way to earn our members' trust is to safeguard their information as if it were our own. That trust wasn't built overnight; it has been upheld at every step, year after year.

Digital service users in Bangladesh are more informed than ever. They want to know where their data goes, why it's collected, and how long it's kept. This Privacy Policy is baji200's attempt to answer those questions clearly and honestly.

If you find anything in this policy unclear or insufficient, we genuinely want to hear from you. Please send any feedback or suggestions regarding our Privacy Policy through the support team — we will review it carefully.

Join baji200 with confidence, knowing your data is safe

Register today on a platform that takes your privacy seriously.

বাংলা