bdbjj Privacy Policy

bdbjj is committed to protecting the privacy of all individuals who use the Platform. This Privacy Policy ("Policy") describes the types of personal data we collect, the purposes for which we use that data, the circumstances under which we may share it, and the rights available to you in relation to your data. This Policy applies to all users of bdbjj, including registered account holders and unregistered visitors who browse the Platform.

By creating a bdbjj account or using any part of the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and use of your personal data as described herein. If you do not agree with any part of this Policy, you should not use the Platform. This Policy should be read alongside the bdbjj Terms and Conditions, which govern your use of the Platform overall.

Personal Data We Collect

How We Collect Your Data

bdbjj collects personal data through the following means. We collect only what is necessary for the stated purposes and do not retain data beyond the period required for those purposes:

• Direct registration: when you create a bdbjj account, you provide your name, contact details, and date of birth directly through the registration form.
• Account usage: your gaming activity, transaction history, and account behaviour are recorded automatically as you use the Platform.
• KYC verification: when you submit identity documents as part of our Know Your Customer process, the data contained in those documents is collected and stored securely.
• Technical data collection: cookies and similar tracking technologies collect device and session data automatically when you access the Platform through your browser.

How We Use Your Personal Data

bdbjj uses the personal data we collect for specific, defined purposes only. We do not use your data for any purpose beyond those listed below, and we do not sell personal data to third parties under any circumstances:

• Account management: to create, verify, maintain, and administer your bdbjj account, including processing login authentication and account security checks.
• Transaction processing: to facilitate deposits, withdrawals, and account balance management through bKash, Nagad, Rocket, and other supported payment channels.
• Regulatory compliance: to fulfil our obligations under applicable anti-money laundering (AML) rules, age verification requirements, and any other legal or regulatory obligations that apply to the Platform's operation.
• Responsible gaming: to monitor gaming patterns, implement responsible gaming tools at your request, identify potential problem gambling behaviour, and contact you with welfare information where appropriate.
• Customer support: to respond to your enquiries, resolve complaints, process account modification requests, and provide technical assistance.
• Platform improvement: to analyse aggregated, anonymised usage data to improve the Platform's performance, game offering, and user experience — this analysis does not identify individual users.

Legal Basis for Processing

bdbjj processes personal data only where a valid legal basis exists. The legal bases on which we rely are as follows:

• Contractual necessity: processing your identity, financial, and account data is necessary to provide the services you have contracted for by registering a bdbjj account and accepting the Terms and Conditions.
• Legal obligation: processing for KYC verification, age checks, AML compliance, and regulatory reporting is required by applicable law and regulation.
• Legitimate interests: processing gaming activity data to detect fraud, prevent abuse, and improve Platform security serves bdbjj's legitimate interest in maintaining a safe and fair gaming environment for all players.
• Consent: where we send you marketing communications or use non-essential cookies, we do so on the basis of your explicit consent. You may withdraw consent at any time by contacting bdbjj support.

Sharing Your Personal Data

bdbjj does not sell personal data. We share personal data with third parties only in the following limited circumstances, and only to the extent necessary for the stated purpose:

• Payment service providers: we share the minimum necessary financial data with bKash, Nagad, Rocket, Upay, and other payment partners to process deposits and withdrawals. These providers are bound by their own data protection obligations.
• Identity verification providers: KYC and age verification are conducted using specialist third-party verification services. These services process identity document data strictly for verification purposes and do not retain it beyond the verification period.
• Regulatory and law enforcement authorities: we will disclose personal data to competent authorities where required by applicable law, court order, or regulatory direction. We will notify you of such disclosure where legally permitted to do so.
• Technology and platform service providers: companies that provide hosting, security infrastructure, analytics processing, or customer support technology to bdbjj may have access to certain data as data processors acting under our instruction and on our behalf.

All third parties with whom bdbjj shares personal data are contractually required to process that data only for the purpose for which it was shared, to maintain appropriate security standards, and to delete or return the data once the purpose has been fulfilled. bdbjj does not transfer personal data to countries or territories outside Bangladesh without ensuring that appropriate safeguards are in place.

Payment Data and Mobile Wallets

Because bdbjj processes transactions through Bangladeshi mobile financial services — primarily bKash and Nagad — payment data is handled with the same level of care applied by those services themselves. When you initiate a deposit or withdrawal, bdbjj transmits only the transaction reference, amount, and wallet identifier necessary to complete that transaction. bdbjj does not store full mobile wallet credentials or PIN numbers on its servers.

All payment data transmissions between bdbjj and payment service providers are encrypted using SSL/TLS protocols. Transaction records are retained for the period required by applicable financial record-keeping obligations and are not accessible to unauthorised parties. If you believe there has been an unauthorised transaction on your bdbjj account, contact bdbjj support immediately using the email address in the footer of this page.

Cookies and Tracking Technologies

bdbjj uses cookies and similar lightweight tracking technologies to operate the Platform, maintain session state, and understand how the Platform is used. The following types of cookies are used:

• Essential cookies: necessary for the Platform to function. These include session authentication tokens that keep you logged in during a game session. They cannot be disabled without preventing the Platform from working.
• Performance cookies: collect anonymised data about how pages are accessed and which features are used, helping bdbjj identify technical issues and improve Platform stability.
• Preference cookies: store your language and display settings so you do not need to reconfigure them on each visit.

You can manage cookie settings through your browser's privacy controls. Disabling essential cookies will prevent you from logging in and using the Platform. Performance and preference cookies can be disabled without affecting core functionality. bdbjj does not currently use third-party advertising cookies.

Data Security

bdbjj implements industry-standard technical and organisational security measures to protect personal data against unauthorised access, loss, destruction, or alteration. These measures include SSL/TLS encryption for all data in transit, encrypted storage for sensitive account and financial data at rest, access controls that restrict internal data access to authorised personnel with a demonstrated need, and regular security assessments of the Platform's infrastructure.

While bdbjj takes all reasonable steps to protect your data, no internet-based system is completely immune from security risks. In the unlikely event of a data breach that affects your personal data, bdbjj will notify you as soon as practicable and will take all reasonable steps to mitigate the impact. You are responsible for keeping your account password confidential and for logging out of the Platform when using shared or public devices.

Data Retention

bdbjj retains personal data for as long as is necessary to fulfil the purposes for which it was collected, including compliance with legal and regulatory obligations. The following general retention periods apply: account data is retained for the duration of your active account plus a minimum of five years after account closure, in accordance with applicable financial record-keeping obligations; KYC identity documents are retained for five years from the date of submission or account closure, whichever is later; transaction records are retained for five years from the date of the transaction; support communications are retained for two years from the date of the communication.

When personal data is no longer required for any of the purposes described above, bdbjj will securely delete or anonymise it. Where full deletion is not technically possible within a particular system, bdbjj will isolate the data from further processing until deletion is possible. You may request early deletion of your data by contacting bdbjj support — such requests will be honoured subject to bdbjj's legal obligations to retain certain categories of data.

Your Data Rights

As a user of the bdbjj Platform, you have the following rights in relation to your personal data. To exercise any of these rights, contact bdbjj support using the email address in the footer of this page. bdbjj will respond to all valid data rights requests within a reasonable timeframe:

• Right of access: you may request a copy of all personal data bdbjj holds about you, together with information about how it is being used.
• Right to rectification: if any personal data bdbjj holds about you is inaccurate or incomplete, you have the right to request that it be corrected or updated.
• Right to erasure: you may request the deletion of your personal data in circumstances where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where the processing was unlawful, subject to bdbjj's legal retention obligations.
• Right to restrict processing: in certain circumstances you may request that bdbjj restrict how it uses your data, for example while the accuracy of data you have disputed is being verified.
• Right to data portability: where processing is based on your consent or on a contract with you, and is carried out by automated means, you may request that bdbjj provide your data in a structured, commonly used, machine-readable format.
• Right to object: you have the right to object to processing carried out on the basis of legitimate interests, including profiling. bdbjj will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.

bdbjj will verify your identity before processing any data rights request to ensure that personal data is not disclosed to, or modified by, an unauthorised party. bdbjj will not charge a fee for handling data rights requests unless they are manifestly unfounded or excessive, in which case a reasonable administrative fee may apply.

Protection of Minors

The bdbjj Platform is strictly for adults aged 21 and above. bdbjj does not knowingly collect or process personal data relating to individuals under the age of 21. If bdbjj discovers that personal data has been collected from a person under 21, that data will be deleted immediately and the associated account will be closed. If you believe that a person under the age of 21 has registered a bdbjj account or that their personal data has been submitted to bdbjj without appropriate authorisation, please notify bdbjj support immediately. Parents and guardians are encouraged to use device-level parental controls to prevent access to online gaming platforms.

Third-Party Services

The bdbjj Platform may reference or integrate with third-party services such as payment gateways (bKash, Nagad) and game content providers (Pragmatic Play, Evolution Gaming, Spribe). These third parties operate their own platforms and are governed by their own privacy policies, which are independent of this Policy. bdbjj is not responsible for the privacy practices of third-party service providers. We encourage you to review the privacy policies of any third-party services you interact with in connection with your use of bdbjj.

Changes to This Privacy Policy

bdbjj reserves the right to update or amend this Privacy Policy at any time. When material changes are made, we will display a notice on the Platform and update the "Last Updated" date at the top of this page. We encourage you to review this Policy periodically so that you remain informed about how bdbjj collects and uses your personal data.

Your continued use of the bdbjj Platform after any update to this Policy constitutes your acceptance of the revised Policy. If you do not agree with the changes, you must stop using the Platform and may request closure of your account by contacting bdbjj support.

Contact Us About Privacy

If you have any questions, concerns, or requests relating to this Privacy Policy or to how bdbjj handles your personal data, please contact the bdbjj Data Support team using the email address displayed in the footer of this page. All privacy-related enquiries will be handled with strict confidentiality and will be responded to within a reasonable period.

For requests to exercise your data rights (access, rectification, erasure, portability, or objection), please include your registered account details and a clear description of the request in your message. bdbjj will verify your identity before actioning any data rights request to ensure the security of your personal information.