bdji Privacy Policy

bdji is an online casino and sports betting platform accessible at https://bdji.bio, providing gambling and entertainment services to adult players across Bangladesh. References to "bdji", "we", "us", or "our" throughout this Privacy Policy refer to the bdji platform and the entity responsible for operating it.

bdji acts as the data controller in respect of the personal data collected from registered players and site visitors. As data controller, bdji determines the purposes for which personal data is collected and the manner in which it is processed. Where bdji engages third-party service providers who process personal data on our behalf (for example, payment processors such as bKash and Nagad), those providers act as data processors operating under contractual obligations that require them to protect your data in accordance with applicable law.

This Privacy Policy applies to all personal data collected through the bdji website, mobile-optimised interface, live chat support system, email communications, and any other channel through which a player or site visitor interacts with bdji. It should be read alongside the bdji Terms & Conditions and the bdji Responsible Gaming policy, both of which form part of the overall agreement between bdji and its registered players.

bdji collects personal data in the following categories. We collect only what is genuinely necessary for the purposes described in Section 4 of this policy.

bdji does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health information, unless a player voluntarily discloses such information in the context of a responsible gaming support interaction. Any such information disclosed in that context is treated with the highest level of confidentiality.

bdji collects personal data through the following primary channels:

• Direct provision by the player: When you register a bdji account, complete the KYC verification process, make a deposit or withdrawal, use the live chat or email support service, respond to a promotional survey, or update your account profile, you directly provide us with personal data.
• Automated collection during platform use: When you browse the bdji website or use any feature of the platform, we automatically collect Technical Data including your IP address, device identifiers, browser information, and session activity. This data is collected via server logs, cookies, and similar tracking technologies as described in Section 7.
• Third-party payment providers: When you initiate a deposit or withdrawal via bKash, Nagad, Rocket, Upay, or a Bangladeshi banking partner, those providers may share transaction confirmation data with bdji to reconcile your account balance. bdji does not receive your full wallet PIN or banking password through this process.
• Identity verification partners: Where bdji uses a third-party KYC verification service to validate identity documents submitted by players, that service may return a verification result and associated identity confirmation data to bdji.
• Fraud and AML screening: bdji may receive flagging or risk-scoring data from anti-fraud and anti-money laundering screening tools that process transaction patterns against known risk indicators.

bdji uses the personal data it collects for the following documented purposes:

• Account creation and management: To register your bdji account, maintain your player profile, and authenticate your identity when you log in.
• Age and identity verification (KYC): To confirm that you are aged 18 or above before allowing you to deposit, wager, or withdraw, as required by our responsible gaming obligations.
• Payment processing: To execute deposit and withdrawal transactions through your chosen payment method (bKash, Nagad, Rocket, Upay, bank transfer, or card), and to maintain an accurate record of your BDT account balance.
• Service delivery and improvement: To provide access to all bdji games and betting markets, personalise your experience (such as surfacing relevant game recommendations), diagnose and resolve technical issues, and develop new features.
• Promotions and bonuses: To determine your eligibility for bonuses and promotional offers, communicate relevant promotions to you (where you have not opted out of marketing communications), and administer the terms of active bonuses on your account.
• Fraud prevention and AML compliance: To monitor account activity for patterns consistent with fraud, money laundering, collusion, or other prohibited conduct, and to fulfil our anti-money laundering (AML) reporting obligations.
• Responsible gaming: To maintain records of responsible gaming tools applied to your account (deposit limits, cooling-off periods, self-exclusion), and to identify behavioural patterns that may indicate problem gambling so that appropriate support can be offered.
• Customer support: To respond to your queries, complaints, and requests submitted via live chat, email, or WhatsApp support channels.
• Legal and regulatory compliance: To retain records as required by applicable law, respond to lawful requests from government or regulatory authorities, and enforce our contractual rights.

bdji processes personal data only where a valid legal basis exists for doing so. The primary legal bases relied upon are as follows:

• Contractual necessity: Processing required to perform the agreement between bdji and the registered player — including account registration, payment processing, game delivery, and KYC verification — is carried out on the basis that it is necessary to fulfil that contract.
• Legitimate interests: Processing for fraud prevention, platform security, AML screening, responsible gaming monitoring, and service improvement is carried out on the basis of bdji's legitimate interest in operating a safe, fair, and commercially viable platform. Such processing is not overridden by player privacy interests given the nature and proportionality of the data used.
• Legal obligation: Processing required to comply with applicable law — including transaction record-keeping for AML purposes and responding to lawful authority requests — is carried out to fulfil those legal obligations.
• Consent: Where bdji sends direct marketing communications (such as promotional emails or bonus notifications), this is done on the basis of your consent, which may be withdrawn at any time by contacting bdji support or using the unsubscribe mechanism in any marketing email.

bdji does not sell personal data to any third party. We share personal data only in the following limited circumstances and only to the minimum extent necessary for the specific purpose:

• Payment processors: bKash, Nagad, Rocket, Upay, and Bangladeshi banking partners receive the transaction data necessary to process your deposits and withdrawals. These providers are contractually bound to protect your data and are prohibited from using it for any purpose beyond processing the specific transaction.
• KYC and identity verification providers: Where a third-party identity verification service is used to validate documents submitted during KYC, your identity document data is shared with that provider under a data processing agreement.
• Game content providers: Third-party game studios including Evolution Gaming, Pragmatic Play, Ezugi, Microgaming, NetEnt, and Spribe may receive a session token and anonymised player identifier when you launch their games on the bdji platform. These providers do not receive your name, contact details, or payment information.
• Fraud and AML screening services: Transaction data may be processed by anti-fraud and AML tools operating as data processors under bdji's instruction.
• Legal and regulatory authorities: bdji may be required by law, court order, or regulatory direction to disclose specific player data to competent authorities in Bangladesh or elsewhere. In such cases, bdji will comply with the lawful request and will notify the affected player where permitted to do so.
• Business successors: In the event of a merger, acquisition, or sale of all or substantially all of bdji's assets, player data may be transferred to the acquiring entity, subject to equivalent data protection obligations.

bdji uses cookies and similar tracking technologies on the platform to support essential functionality, enhance user experience, and analyse platform performance. A cookie is a small text file stored on your device by your browser when you visit a website.

The categories of cookies used by bdji are as follows:

• Strictly necessary cookies: Required for the platform to function correctly. These include session authentication cookies that keep you logged in during your visit, and security tokens that protect your account from cross-site request forgery attacks. These cookies cannot be disabled without breaking core platform functionality.
• Functional cookies: Used to remember your preferences, such as your chosen language setting, preferred payment method display, and responsible gaming limit configurations. Disabling these cookies may affect your experience but will not prevent you from using the platform.
• Analytics cookies: Used to collect anonymised data about how players navigate and interact with the bdji platform, including which pages are visited most, how long sessions last, and where errors occur. This data is used solely to improve platform performance and user experience. Analytics data is not linked to individual player identities.
• Marketing cookies: Where you have consented to receiving promotional communications, marketing cookies may be used to track which promotions you have been shown, to avoid sending you duplicate offers, and to measure the effectiveness of promotional campaigns. These cookies are only activated where you have provided consent.

Most web browsers allow you to manage cookie preferences through browser settings, including blocking or deleting cookies. Blocking strictly necessary cookies will impair platform functionality. For detailed guidance on managing cookies in your browser, consult the help documentation for your specific browser.

bdji retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Active account data: Retained for the lifetime of your registered bdji account and for a period of five years following permanent account closure, to satisfy AML record-keeping requirements and to defend any legal claims that may arise.
• Transaction records: Financial transaction records (deposits, withdrawals, bet history) are retained for a minimum of five years from the date of each transaction, in line with standard AML compliance requirements.
• KYC documents: Identity and age verification documents submitted during KYC are retained for five years from the date of submission or from the date of account closure, whichever is later.
• Support communications: Live chat transcripts, email correspondence, and complaint records are retained for three years from the date of the interaction, unless the communication relates to an ongoing legal matter in which case it is retained until that matter is resolved.
• Marketing consent records: Records of consent given for or withdrawn from marketing communications are retained for five years to demonstrate compliance with consent obligations.
• Technical logs: Server logs and IP address data are retained for a maximum of 12 months, after which they are anonymised or deleted.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification. Where anonymisation rather than deletion is applied, the resulting data may be retained indefinitely for aggregate statistical analysis.

bdji takes the security of player personal data seriously and maintains a range of technical and organisational measures designed to protect it against unauthorised access, disclosure, alteration, or destruction. These measures include:

• SSL/TLS encryption: All data transmitted between a player's device and the bdji platform is encrypted using SSL/TLS protocols, ensuring that data cannot be intercepted in transit.
• Encrypted data storage: Sensitive data fields including identity document references, payment account identifiers, and account passwords are stored in encrypted form. Passwords are hashed using a strong one-way algorithm and are never stored in plaintext.
• Access controls: Access to player personal data within bdji is restricted on a need-to-know basis. Staff with access to identifiable player records are subject to confidentiality obligations and receive training on data protection best practices.
• Intrusion detection and monitoring: The bdji platform infrastructure is monitored for unusual access patterns, potential intrusion attempts, and other security anomalies around the clock.
• Regular security assessments: bdji conducts periodic reviews of its data security practices and applies updates and patches to platform software in a timely manner to address known vulnerabilities.

As a bdji player whose personal data we process, you hold the following rights in respect of that data. You may exercise any of these rights by contacting bdji support via live chat or email at [email protected]. bdji will respond to all valid rights requests within 30 days of receipt.

bdji will not charge a fee for processing a rights request unless the request is clearly unfounded or excessive in nature, in which case a reasonable administrative fee may be applied. Where a request is refused, bdji will provide a clear explanation of the reason for refusal and inform you of your right to escalate the matter.

The bdji platform is strictly intended for adults aged 18 and above. bdji does not knowingly collect personal data from individuals under the age of 18. If you are under 18 years of age, you must not register a bdji account or provide any personal data to bdji.

If bdji becomes aware, through the KYC process or any other means, that personal data has been collected from a player who was under the age of 18 at the time of registration, bdji will:

• Immediately suspend and permanently close the account in question.
• Securely delete or anonymise the personal data associated with that account, subject only to any minimum retention obligations that apply under applicable law.
• Return any real-money deposits to the original payment source after deducting amounts already wagered, in accordance with the bdji Terms & Conditions.
• Forfeit any bonus or winnings balance accrued on the underage account.

If you believe that a person under the age of 18 has registered and used a bdji account, please report this immediately to [email protected]. bdji treats all underage gambling reports as high-priority matters and will investigate within 24 hours of receipt.

The bdji platform may contain references to or integrations with third-party services, including payment providers (bKash, Nagad, Rocket), game content studios (Pragmatic Play, Evolution Gaming, Ezugi, Microgaming, NetEnt, Spribe), and sporting event data providers. Where interaction with a third-party service requires you to navigate away from the bdji platform or to share data directly with that third party, bdji's Privacy Policy does not apply to the data collected by that third party.

bdji is not responsible for the privacy practices of any third-party service, even where a link to or integration with that service is provided through the bdji platform. Players are encouraged to review the privacy policies of any third-party services they interact with independently of bdji.

bdji reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the structure of the bdji platform. When material changes are made, bdji will notify registered players via an on-platform notification or by email to the address associated with the player's account, prior to the changes taking effect.

The "Last Updated" date displayed at the top of this Privacy Policy will be revised each time a change is made. Players are encouraged to review this Privacy Policy periodically. Continued use of the bdji platform following notification of a material change constitutes acceptance of the revised policy. If you do not accept the revised terms, you may contact bdji support to request account closure.

Minor updates — such as corrections to typographical errors, clarifications of existing language that do not alter the substance of the policy, or formatting changes — may be made without advance notice and without a change to the "Last Updated" date.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights described in Section 10, or want to report a concern about how bdji is handling your personal data, please reach out to the bdji support team using any of the following channels:

• Live Chat: Available 24 hours a day, 7 days a week, 365 days a year via the bdji platform. This is the fastest channel for urgent data security concerns.
• Email: [email protected] (plain text — not a clickable link). Please use the subject line "Privacy Request" and include your registered username and account email address so we can locate your records efficiently.
• WhatsApp: +880 1700 000000 (plain text — not a clickable link). Available for general privacy queries during support hours.

bdji will acknowledge all privacy-related requests within 72 hours of receipt and will provide a substantive response within 30 days. Where a request is complex or involves a large volume of data, bdji may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it before the initial 30-day period expires.

If you are not satisfied with bdji's response to a privacy concern or data rights request, you have the right to escalate the matter to the relevant data protection authority or competent regulatory body in your jurisdiction. bdji is committed to resolving all privacy complaints fairly and transparently, and we encourage players to contact us directly in the first instance before escalating to an external authority.