sltbaji Privacy Policy — How We Collect, Use, and Protect Your Personal Data
This Privacy Policy explains the types of personal information slt baji collects from players in Bangladesh, how we use and safeguard that data, and your rights regarding your personal information. We are committed to transparency and to treating your data with the highest standards of care.
Information We Collect
sltbaji collects personal data from you in several ways — directly when you register and use the platform, automatically as you browse and play, and occasionally from trusted third-party sources for verification purposes. The categories of personal data we collect are described in detail below.
1.1 Registration and Account Data
When you create a sltbaji account, we collect the personal information you provide during the registration process. This includes:
- Full legal name as it appears on your government-issued identity document.
- Date of birth — collected to verify that you are at least 18 years of age.
- Email address — used as your primary account identifier and for communications.
- Mobile number — used for account security, two-factor authentication, and WhatsApp support.
- Residential address — collected as part of Know Your Customer (KYC) verification, where required.
- Username and encrypted password — your chosen account credentials. Passwords are stored in hashed, salted form and are never accessible in plaintext by sltbaji staff.
1.2 Identity Verification (KYC) Documents
To comply with our age verification obligations and to prevent fraud and money laundering, sltbaji may request copies of identity verification documents at various stages of your account lifetime. These may include:
- Bangladesh National Identity Card (NID) or passport.
- Recent utility bill or bank statement confirming your residential address.
- Proof of ownership of the payment method used for deposits (e.g., a screenshot of your bKash or Nagad account confirming the account is registered in your name).
KYC documents are processed by our internal compliance team and by authorised third-party identity verification providers. They are stored securely and are never shared with any party outside of the KYC verification process.
1.3 Financial and Payment Data
When you make deposits or withdrawals, sltbaji records transaction data including the payment method used (e.g., bKash, Nagad, Rocket, Upay, Visa, Mastercard), transaction amounts in Bangladeshi Taka (৳ BDT), transaction timestamps, and transaction reference identifiers. sltbaji does not store full card numbers or mobile banking PINs. Payment processing is handled by our contracted payment processors, who operate under their own data security standards.
1.4 Gameplay and Betting Data
sltbaji records all gaming and betting activity conducted on your account. This includes game session logs, bet amounts, game outcomes, wagering history, bonus usage, and any other in-platform activity. This data is used for dispute resolution, fraud prevention, responsible gaming monitoring, and platform improvement.
1.5 Technical and Device Data
When you access sltbaji — whether via a web browser on a mobile phone in Dhaka, a desktop in Chittagong, or any other device — our systems automatically collect certain technical data, including:
- IP address and approximate geographic location (city/region level).
- Device type, operating system, and browser version.
- Session start and end times, pages visited, and features used.
- Referral source (e.g., the URL from which you arrived at sltbaji).
This technical data is used for security monitoring, platform optimisation, and to ensure a consistent experience across different devices and connection types common in Bangladesh.
1.6 Communications Data
If you contact the sltbaji support team via live chat, WhatsApp, or email, we retain records of that correspondence. These records are used for quality assurance, dispute resolution, and staff training purposes. Support interactions are stored for a minimum of two years from the date of the interaction.
Data Minimisation Principle
sltbaji is committed to the principle of data minimisation — we collect only the personal data that is genuinely necessary for the purposes described in this Policy. We do not collect sensitive personal data such as biometric data, religious beliefs, political opinions, or health records, except where you voluntarily provide health-related information in the context of a responsible gaming self-exclusion request.
How We Use Your Data
sltbaji uses the personal data we collect for specific, defined purposes. We do not use your data in ways that are incompatible with the purposes for which it was originally collected. The primary purposes for which we process your personal data are:
| Purpose | Description | Data Used |
|---|---|---|
| Account Management | Creating and maintaining your sltbaji account, processing login requests, managing account settings and preferences. | Registration data, device data |
| Age and Identity Verification | Confirming that you are at least 18 years of age and that your identity matches the information provided at registration. | KYC documents, registration data |
| Payment Processing | Processing deposits and withdrawals via bKash, Nagad, Rocket, Upay, bank transfers, and card payments in BDT. | Financial data, KYC documents |
| Fraud and AML Prevention | Detecting and preventing fraudulent activity, money laundering, bonus abuse, and other prohibited conduct as defined in the Terms & Conditions. | All categories of data |
| Responsible Gaming | Monitoring gameplay patterns to identify potential problem gambling behaviour and to enforce self-exclusion and limit settings activated by you. | Gameplay data, account data |
| Customer Support | Responding to your enquiries, resolving disputes, and providing assistance via live chat, WhatsApp, and email. | Communications data, account data |
| Marketing Communications | Sending you promotional offers, bonus notifications, and seasonal campaign communications — where you have consented to receive them. | Email, mobile number, gameplay data |
| Platform Improvement | Analysing usage patterns and technical data to improve the sltbaji platform experience for players across Bangladesh. | Technical data, gameplay data |
2.1 Marketing Communications
sltbaji may send you promotional communications including bonus offers, tournament announcements, BPL cricket betting promotions, Eid special campaigns, and Pohela Boishakh seasonal offers. These communications will be sent only where you have provided your consent at the time of registration or subsequently via your account communication preferences. You may opt out of marketing communications at any time by updating your preferences in the account settings section or by contacting the support team. Opting out of marketing communications does not affect your ability to continue using the sltbaji platform.
2.2 Automated Decision-Making
sltbaji uses automated systems to assist with certain decisions, including fraud risk scoring, responsible gaming flagging, and bonus eligibility assessment. These automated processes use your account data, gameplay history, and technical data to produce a risk or eligibility score. Where an automated decision significantly affects your account (for example, an account restriction following a high fraud risk score), you have the right to request human review of that decision by contacting the support team.
Legal Basis for Processing
sltbaji processes your personal data on one or more of the following legal bases, depending on the specific processing activity:
- Contractual Necessity: Much of our data processing is necessary for the performance of the contract between you and sltbaji — i.e., to provide you with the gaming and betting services you have registered to use. This covers account management, payment processing, gameplay recording, and customer support.
- Legitimate Interests: We process certain categories of data on the basis of our legitimate interests as a business, including fraud prevention, platform security, anti-money-laundering compliance, and platform improvement. We have assessed that our legitimate interests in these processing activities are not overridden by your rights and freedoms.
- Consent: Where we rely on consent as our legal basis — primarily for marketing communications — we will ask you to provide explicit consent at the point of collection. You may withdraw your consent at any time without affecting the lawfulness of processing that took place before the withdrawal.
- Legal Obligation: Certain data processing activities are necessary for sltbaji to comply with applicable legal obligations, including Know Your Customer (KYC) identity verification, anti-money-laundering (AML) record-keeping, and responding to lawful requests from competent authorities.
Data Sharing and Disclosure
sltbaji does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share personal data only in the specific, limited circumstances described below.
4.1 Service Providers and Data Processors
We engage trusted third-party service providers to assist with the operation of the sltbaji platform. These providers process personal data on our behalf and are contractually bound to handle it securely and only for the purposes specified by sltbaji. Categories of service providers include:
- Payment processors handling bKash, Nagad, Rocket, Upay, and card transactions.
- KYC and identity verification providers who assist with document verification.
- Game content providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — these providers may receive anonymised session data to facilitate game delivery.
- Cloud hosting and infrastructure providers who host sltbaji's servers and databases.
- Customer support platform providers who power the live chat system.
- Analytics providers who help us understand platform usage patterns using aggregated, non-identifiable data.
4.2 Legal and Regulatory Disclosure
sltbaji may disclose your personal data to law enforcement agencies, regulatory bodies, or courts of competent jurisdiction where required to do so by applicable law, by court order, or where we believe in good faith that such disclosure is necessary to prevent fraud, protect the safety of users or third parties, or enforce our Terms & Conditions.
4.3 Business Transfers
In the event that sltbaji undergoes a merger, acquisition, or sale of all or part of its assets, your personal data may be transferred to the acquiring entity as part of that transaction. We will provide notice of any such transfer via the email address registered to your account, and the acquiring entity will be bound by the data protection commitments set out in this Privacy Policy.
No Sale of Personal Data
sltbaji does not sell, exchange, or monetise your personal data. We do not share your data with advertising networks, data brokers, or third-party marketers for their own commercial purposes. Any data sharing is strictly limited to the service provider relationships described above, all of which are governed by contractual data processing agreements.
Cookies and Tracking Technologies
sltbaji uses cookies and similar tracking technologies to ensure the platform functions correctly, to remember your preferences, and to help us understand how players interact with the site. A cookie is a small text file placed on your device by a website you visit.
5.1 Types of Cookies We Use
- Essential Cookies: These are strictly necessary for the sltbaji platform to operate. They enable core functions such as account login session management, security token validation, and shopping cart-equivalent bet slip functionality. Essential cookies cannot be disabled without breaking core platform features.
- Performance and Analytics Cookies: These cookies collect aggregated information about how visitors use the sltbaji platform — for example, which pages are visited most frequently and whether any error messages are received. This data helps us improve the platform for all Bangladesh players. This information does not identify individual users.
- Functionality Cookies: These cookies remember choices you make on the sltbaji platform — such as your preferred language setting, your most recently used payment method, and your display preferences — to provide a more personalised experience.
- Marketing and Retargeting Cookies: Where you have consented, these cookies track your browsing activity and may be used to deliver sltbaji promotional content that is relevant to your interests. You may withdraw consent for marketing cookies at any time via the cookie preferences panel.
5.2 Managing Cookies
You can control and manage cookies through your web browser settings. Most browsers allow you to refuse all cookies, accept only certain types, or delete cookies that have already been set. Please note that disabling essential cookies will prevent you from accessing core sltbaji platform features, including account login. Instructions for managing cookies vary by browser — consult your browser's help documentation for guidance specific to your device.
Cookie Retention Periods
Session cookies are deleted automatically when you close your browser. Persistent cookies remain on your device for a defined period — typically between 30 days and 12 months depending on the cookie's purpose — after which they expire and are deleted automatically. You may manually delete persistent cookies at any time via your browser settings.
Data Retention
sltbaji retains your personal data only for as long as is necessary for the purposes described in this Privacy Policy, or as required by applicable legal obligations. The following retention periods apply:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account registration data | Duration of account + 5 years after closure | AML obligations, dispute resolution |
| KYC documents | Duration of account + 5 years after closure | Regulatory compliance, fraud prevention |
| Transaction records | 7 years from the transaction date | Financial record-keeping obligations |
| Gameplay and betting logs | Duration of account + 2 years after closure | Dispute resolution, responsible gaming review |
| Support communications | 2 years from date of interaction | Quality assurance, dispute resolution |
| Marketing consent records | Until consent is withdrawn + 1 year | Evidence of consent basis |
| Technical / device logs | 13 months from collection | Security monitoring, fraud detection |
| Self-exclusion records | Minimum 7 years from self-exclusion date | Responsible gaming compliance |
After the applicable retention period expires, sltbaji will securely delete or anonymise your personal data. Anonymised data — where it is no longer possible to identify you from the data — may be retained indefinitely for statistical and analytical purposes without restriction.
Your Data Rights
As a registered sltbaji player, you have a number of rights in relation to your personal data. sltbaji respects these rights and will respond to valid requests promptly, typically within 30 calendar days of receipt. To exercise any of the rights described below, please contact the sltbaji support team via live chat or by emailing [email protected] (plain text — not a clickable link).
Right of Access
You have the right to request a copy of all personal data that sltbaji holds about you. We will provide this in a structured, readable format within 30 days.
Right to Rectification
If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or completed without undue delay.
Right to Erasure
You may request that sltbaji delete your personal data where it is no longer necessary for the original purpose, subject to overriding legal retention obligations.
Right to Restrict Processing
You have the right to request that sltbaji restrict the processing of your data while a dispute about its accuracy or lawfulness is being resolved.
Right to Data Portability
Where processing is based on consent or contractual necessity, you may request that your data be provided in a machine-readable format suitable for transfer to another service.
Right to Object
You have the right to object to sltbaji processing your data on the basis of legitimate interests, including for direct marketing purposes. We will honour all valid objections promptly.
Right Against Automated Decisions
Where a significant decision about your account is made solely by automated means, you have the right to request human review of that decision.
Right to Withdraw Consent
Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that occurred prior to withdrawal.
Limitations on Erasure Requests
While sltbaji will honour valid erasure requests wherever possible, we are legally required to retain certain categories of data — particularly KYC documents and financial transaction records — for defined periods under applicable AML and financial regulations. An erasure request cannot override these legal retention obligations. Where we are unable to fully comply with an erasure request due to a legal obligation, we will inform you of the specific data categories that must be retained and the reason for retention.
Data Security
sltbaji takes the security of your personal data seriously and implements a range of technical and organisational measures to protect it against unauthorised access, loss, destruction, alteration, or disclosure. Key security measures in place include:
- SSL/TLS Encryption: All data transmitted between your device and sltbaji's servers is encrypted using industry-standard SSL/TLS protocols. You can verify the secure connection by checking for the padlock icon in your browser's address bar when visiting sltbaji.net.
- Password Hashing: Account passwords are stored using strong one-way cryptographic hashing algorithms. sltbaji staff cannot view your password in plaintext under any circumstances.
- Access Controls: Access to personal data within sltbaji's internal systems is restricted on a strict need-to-know basis. Staff with access to personal data are subject to confidentiality obligations and regular data protection training.
- Infrastructure Security: sltbaji's servers and databases are hosted in secure data centre environments with physical access controls, network firewalls, intrusion detection systems, and regular security patch management.
- Data Breach Response: sltbaji maintains an internal data breach response procedure. In the event of a personal data breach that poses a risk to affected players, we will notify impacted individuals via their registered email address within a commercially reasonable timeframe.
While sltbaji employs robust security measures, no online platform can guarantee absolute security against all possible threats. You play an important role in keeping your account secure by maintaining a strong, unique password, not sharing your credentials with any third party, and notifying us immediately if you suspect any unauthorised access to your account.
Your Responsibilities
You are responsible for keeping your sltbaji account credentials confidential. sltbaji will never ask you for your password via email, live chat, phone, or any other channel. If you receive any communication claiming to be from sltbaji and requesting your password, treat it as a phishing attempt and contact our support team immediately via the live chat on sltbaji.net.
Third-Party Services
The sltbaji platform integrates with a number of third-party services to deliver its full range of features. While sltbaji carefully selects these partners and requires them to maintain appropriate data protection standards, we are not responsible for the privacy practices of third-party services operating under their own independent privacy policies.
Third-party integrations on the sltbaji platform include game content delivered by Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi; payment processing services for bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard; and KYC verification technology providers. Each of these partners operates under their own data processing agreements with sltbaji and their own independent privacy frameworks.
When you interact with a third-party game or payment interface embedded within the sltbaji platform, limited session or transaction data may be passed to the relevant third-party provider to enable the service to function. sltbaji does not control what the third-party provider does with that data beyond the scope of our contractual data processing agreements.
Policy Updates
sltbaji reserves the right to update, amend, or replace this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable law, or improvements to the platform. When material changes are made to this Policy, we will notify registered players via the email address associated with their account or via a prominent notice on the sltbaji platform.
The date of the most recent update is displayed at the top of this page and in the "Last Updated" notice below the hero section. We encourage you to review this Privacy Policy periodically to stay informed about how sltbaji protects your personal data.
Your continued use of the sltbaji platform following the publication of an updated Privacy Policy constitutes your acknowledgement of the changes. If you do not agree with the updated Policy, you should cease using the platform and may request account closure by contacting the 24/7 live support team .
Privacy Enquiries and Formal Requests
For any questions, concerns, or formal data subject requests relating to this Privacy Policy, please contact the sltbaji data protection team at [email protected] (plain text — not a clickable link). You may also reach us via 24/7 live chat on the platform, or via WhatsApp during support hours of 08:00–00:00 BST (Bangladesh Standard Time, UTC+6). We aim to respond to all privacy-related enquiries within 5 business days.
How sltbaji Protects Your Privacy Every Day
Beyond the formal obligations set out in this Privacy Policy, sltbaji makes the following day-to-day commitments to every registered player in Bangladesh.
End-to-End SSL Encryption
Every page visit, login, deposit, and withdrawal on sltbaji is protected by SSL/TLS encryption. Your personal data and financial information travel between your device and our servers through an encrypted channel that cannot be intercepted by third parties on the network.
Zero Data Sales — Ever
sltbaji has a firm policy against selling, renting, or trading your personal data to any third party for commercial gain. Your data is used exclusively to operate and improve the platform and to fulfil our legal obligations. No exceptions.
Minimal Data Collection
We collect only the personal data that is strictly necessary to provide sltbaji's gaming and betting services, verify your identity, and comply with applicable regulations. We do not collect unnecessary sensitive data or track your activity outside of the sltbaji platform.
Transparent Record-Keeping
sltbaji maintains clear, auditable records of what personal data we hold, why we hold it, and for how long. Our data retention schedule is published openly in Section 6 of this Privacy Policy, and you can request a copy of your personal data record at any time.
Full Account Data Controls
Your sltbaji account settings give you direct control over your communication preferences, marketing consent, and responsible gaming limits. Data subject requests — including access, rectification, and erasure — are handled by our support team within 30 calendar days.
Vetted Third-Party Partners
Every third-party service provider that processes personal data on behalf of sltbaji — including payment processors handling bKash and Nagad transactions and KYC verification providers — is bound by a formal data processing agreement that sets out strict security and confidentiality requirements.
Have Questions About Your Privacy on sltbaji?
Our support team is available 24/7 to help with any privacy-related enquiry. You can also explore our FAQ for quick answers, review our Responsible Gaming tools, or head to the sltbaji Casino to start playing.