Rummy Baji Privacy Policy — Your Data Is Safe With Us

Rummy Baji collects only the information necessary to provide its services. In line with our privacy policy, data collection is always transparent and purpose-driven.

Information collected at registration:

• Full Name (as per National ID)
• Mobile Number & Email Address
• Date of Birth (for age verification)
• Username & Password (Encrypted)
• Current Address

Information Collected During KYC Verification:

• National ID (NID) or Passport Copy
• Selfie or Liveness Verification Photo
• Proof of Address Documents

Information collected automatically while using the platform:

• IP Address & Device Information
• Browser Type & Version
• Login Time & Session Data
• Game History & Transaction Records
• Behavioral data collected via cookies and tracking technologies

Under Rummy Baji's Privacy Policy, all collected data is used solely for specific, legitimate purposes. No data is ever used beyond its intended scope.

Primary purposes for data use:

• Account Management: To support registration, login, password reset, and overall account security.
• Service Delivery: For gameplay, deposits, withdrawals, and bonus processing.
• Verification: To complete age and identity verification and the KYC process.
• Security: To prevent fraud, money laundering, and misuse.
• Customer Support: For troubleshooting, dispute resolution, and customer support.
• Legal Obligation: To comply with applicable laws and regulatory requirements.
• Service Improvement: To analyze and improve the user experience.
• Contact: To keep you informed about important updates, bonuses, and promotions.

We never use your data to send you unsolicited ads or share it with third parties for marketing purposes. If you no longer wish to receive marketing emails, you can unsubscribe at any time.

Rummy Baji never sells your personal data under any circumstances. However, we may need to share limited information with select trusted partners in order to deliver our services.

Data Sharing Scenarios:

• Payment Processors: Necessary information is shared with payment gateway providers, including bKash, Nagad, and Rocket, to process transactions.
• KYC Service Provider: With authorized third-party KYC platforms for identity verification.
• Technology Partners: For server hosting, cloud storage, and cybersecurity services.
• Law Enforcement: Data may be disclosed to authorities in response to a court order or legal obligation.
• Regulatory Authority: To relevant authorities for licensing and regulatory compliance purposes.

The Rummy Baji website and app use various types of cookies and similar technologies. Cookies are small data files stored in your browser.

Cookie Types & Purposes:

• Essential Cookies: Essential for core platform functionality — including login sessions and security tokens. These cannot be disabled.
• Functionality Cookies: Used to remember your preferences such as language, timezone, and similar settings. Only active with your consent.
• Analytics Cookies: To collect site usage statistics. You can disable this at any time.
• Security Cookies: For device fingerprinting to detect multiple accounts and fraudulent activity.

You can manage cookies through your browser settings. Please note that disabling essential cookies may affect the functionality of certain features on the platform.

Under the Rummy Baji Privacy Policy, your data is retained only for as long as necessary. Retention periods depend on the type of data and applicable legal requirements.

Once the retention period expires, data is securely deleted or irreversibly anonymized. Your data is stored on servers located in Bangladesh and Singapore, where strict data protection laws apply.

Rummy Baji uses industry-leading security technology to protect your personal and financial data. This technical protection is the cornerstone of our Privacy Policy.

• SSL/TLS Encryption: All data transmissions are secured with 256-bit SSL encryption.
• Two-Factor Authentication (2FA): An additional layer of security for account login.
• Firewall & DDoS Protection: Servers are protected against cyberattacks.
• Regular Security Audits: Regular security audits conducted by third-party experts.
• Encrypted Password Storage: Passwords are never stored in plain text — only in hashed form.
• Access Control: Only authorized personnel have access to specific data.
• Data Backup: Regular encrypted backups stored securely offsite.

In the event of a data breach, we are required to notify affected users within 72 hours. Our multi-layered security infrastructure, however, keeps the likelihood of such incidents to an absolute minimum.

Under the Rummy Baji Privacy Policy, you have specific rights over your personal data. We respect those rights and are happy to assist with any request you make.

To exercise any of these rights, please reach out to our support team. We are committed to responding within 30 days of receiving your request. In some cases, legal obligations may prevent us from fully fulfilling a request — if so, we will explain the reasons in detail.

Rummy Baji strictly prohibits use of the platform by anyone under 18. In line with our privacy policy, we do not knowingly collect personal information from minors.

Age verification is mandatory during the registration process. If a minor creates an account using false information and this comes to our attention, the account will be immediately closed and all associated data will be deleted.

Rummy Baji reserves the right to update or modify this Privacy Policy, in whole or in part, at any time. Changes may be made in response to technological developments, legal amendments, or service improvements.

For any significant changes, we will notify you at least 7 days in advance via your registered email and platform notifications. Continued use of the platform after such changes constitutes acceptance of the updated policy.

The date of the latest update will always be shown at the top of this page. Previous versions are also available upon request.

If you have any questions or concerns about this Privacy Policy, or wish to exercise your data rights, please get in touch. Our dedicated privacy team is always ready to assist.