Privacy Policy
How bdjaji Handles Your Data
Your privacy matters to bdjaji. This Privacy Policy explains exactly what personal data we collect, why we collect it, how it is stored and protected, and what rights you have over your information as a player on Bangladesh's premier online gaming platform.
bdjaji is committed to protecting the privacy and personal data of every player who uses the platform. We operate the bdjaji website and all associated services with the security and confidentiality of your information as a foundational principle. The data we collect is used exclusively for the purposes described in this policy — to deliver a safe, fair, and personalised gaming experience to players across Bangladesh.
This policy is written in plain, formal English to ensure that every player — regardless of their familiarity with legal language — can understand how their data is handled. If you have any questions about any section of this policy, please contact the bdjaji data team at [email protected] before using the platform.
Data Minimisation
bdjaji collects only the personal data that is strictly necessary for the specific purpose being served — whether that is account registration, KYC verification, or payment processing. We do not collect data speculatively or in excess of what is required.
SSL Encryption
All data transmitted between your device and the bdjaji platform is protected by industry-standard SSL (Secure Socket Layer) encryption. This ensures that your login credentials, payment details, and personal information cannot be intercepted in transit.
No Unauthorised Third-Party Sale
bdjaji does not sell, rent, or trade your personal data to any third party for commercial marketing purposes. Data is shared with third parties only where necessary to deliver the bdjaji service or where required by law, as detailed in Section 3 of this policy.
Purpose Limitation
Every category of data collected by bdjaji is linked to a clearly defined purpose. We do not repurpose data collected for one reason (e.g., identity verification) for an unrelated purpose (e.g., targeted advertising) without your explicit consent.
Access Controls
Access to your personal data within bdjaji's internal systems is restricted on a strict need-to-know basis. Only authorised personnel whose roles require access to specific categories of data — such as the payments team or the KYC compliance team — are permitted to view or process that data.
Your Rights Respected
bdjaji recognises and upholds your rights over your own personal data. You have the right to access, correct, and request deletion of the data we hold about you, subject to our legal obligations to retain certain records. See Section 7 for the full list of your data rights.
Information We Collect
bdjaji collects personal data from you in the following circumstances: when you register an Account; when you complete identity verification (KYC); when you make a deposit or withdrawal; when you contact the support team; when you participate in promotions or surveys; and automatically through your use of the platform via cookies and similar tracking technologies.
The categories of personal data we collect are as follows:
| Data Category | Specific Data Points | Collection Trigger |
|---|---|---|
| Identity Data | Full legal name, date of birth, gender, nationality, NID / passport number | Account registration & KYC |
| Contact Data | Email address, mobile phone number, residential address (city, district) | Account registration |
| Financial Data | Payment method type, mobile wallet number (partial), bank account reference, transaction history | Deposits & withdrawals |
| Verification Documents | Scanned or photographed copies of NID, passport, utility bill, or other proof of identity/address | KYC verification process |
| Technical Data | IP address, browser type and version, device type, operating system, screen resolution, session timestamps | Automatic — platform usage |
| Gameplay Data | Game history, bet amounts, wager outcomes, bonus usage, session duration | Automatic — gameplay activity |
| Communications Data | Support chat transcripts, email correspondence, complaint records | Customer support interactions |
| Marketing Preferences | Opt-in / opt-out status for promotional emails and SMS, promotion redemption history | Registration & account settings |
bdjaji does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, biometric data, or data concerning health or sexual orientation, except where expressly required by applicable law in the context of responsible gaming assessments or self-exclusion requests.
Where you provide personal data relating to another individual (for example, a next-of-kin contact for responsible gaming purposes), you confirm that you have obtained the necessary consent from that individual to share their data with bdjaji for the stated purpose.
How We Use Your Data
bdjaji processes your personal data only for specific, legitimate purposes and only to the extent necessary for each purpose. The following table sets out the primary purposes for which we use your data and the legal basis for each category of processing:
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Account creation and management | Identity Data, Contact Data | Contract performance |
| Identity verification (KYC) and age confirmation | Identity Data, Verification Documents | Legal obligation; contract |
| Processing deposits and withdrawals | Financial Data, Identity Data | Contract performance |
| Fraud detection and prevention | Technical Data, Financial Data, Gameplay Data | Legitimate interest; legal obligation |
| Responsible gaming monitoring | Gameplay Data, Financial Data, Communications Data | Legal obligation; legitimate interest |
| Customer support and complaint resolution | Communications Data, Identity Data, Account Data | Contract performance; legitimate interest |
| Sending promotional offers and bonuses | Contact Data, Marketing Preferences | Consent (opt-in) |
| Platform security and abuse prevention | Technical Data, Gameplay Data | Legitimate interest |
| Compliance with legal and regulatory obligations | All categories as required | Legal obligation |
bdjaji uses automated systems to monitor gameplay patterns and transaction activity for the purposes of fraud detection and responsible gaming. Where automated processing produces a decision that materially affects your Account — such as a temporary suspension pending investigation — you have the right to request human review of that decision by contacting the support team.
Data Sharing & Disclosure
bdjaji does not sell your personal data to third parties. However, in order to operate the platform effectively and fulfil our legal obligations, we share certain categories of personal data with the following categories of trusted third parties, all of whom are contractually required to process your data only for the specific purpose for which it was shared and in accordance with applicable data protection standards:
- Payment Service Providers: To process your deposits and withdrawals, bdjaji shares the minimum necessary payment and identity data with payment partners such as bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, and City Bank. These providers have their own independent privacy policies governing the data they process in connection with your transactions.
- KYC and Identity Verification Partners: To fulfil our age and identity verification obligations, bdjaji may share your Identity Data and Verification Documents with specialist third-party KYC service providers. These partners are engaged on data processing agreements that restrict their use of your data to the verification purpose only.
- Game Content Providers: Where games are provided by third-party studios — including Pragmatic Play, Evolution Gaming, Spribe, Ezugi, NetEnt, and Microgaming — those providers may receive Technical Data and Gameplay Data necessary to deliver and fairly record game outcomes. Game providers do not receive your financial or identity data beyond what is technically required for game session management.
- Fraud Prevention Services: bdjaji uses third-party fraud intelligence and device fingerprinting services to detect and prevent fraudulent activity. Technical Data, including IP addresses and device identifiers, may be shared with these services.
- Legal and Regulatory Authorities: bdjaji will disclose personal data to law enforcement agencies, regulatory bodies, or courts if required to do so by applicable law, court order, or regulatory direction. bdjaji will, where legally permitted, notify affected players of any such disclosure request.
- Business Successors: In the event of a merger, acquisition, or sale of all or part of bdjaji's business assets, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer and the privacy terms applicable to your data following the transfer.
All third-party data processors engaged by bdjaji are subject to written data processing agreements that impose obligations of confidentiality, data minimisation, and purpose limitation consistent with the standards described in this Privacy Policy. bdjaji remains responsible for ensuring that third-party processors handle your data appropriately.
Data Retention & Storage
bdjaji retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply to the principal categories of data held by bdjaji:
- Account and Identity Data: Retained for the duration of your Account plus a minimum of 5 years following Account closure, in order to comply with anti-money laundering (AML) record-keeping obligations and to handle any post-closure disputes or regulatory enquiries.
- Financial Transaction Records: Retained for a minimum of 5 years from the date of each transaction, consistent with standard financial record-keeping requirements applicable in Bangladesh.
- KYC Verification Documents: Retained for the same period as Account and Identity Data — a minimum of 5 years post-closure. Document files are stored in encrypted form and access is restricted to the bdjaji compliance team.
- Gameplay Records: Retained for a minimum of 3 years from the date of each gaming session. Gameplay records may be retained longer where they are subject to an active dispute, investigation, or audit.
- Customer Support Communications: Retained for 2 years from the date of the relevant interaction, unless the communication relates to an unresolved complaint or legal matter, in which case it is retained until the matter is fully resolved plus 1 year.
- Marketing Preference Records: Retained for the duration of your Account and for 1 year following Account closure, to demonstrate compliance with consent-based marketing obligations.
- Technical / Log Data: Retained for up to 12 months from collection, after which it is deleted or anonymised for aggregate analytics purposes.
At the end of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents reconstruction of the original data. Where data cannot be immediately deleted due to backup rotation cycles, bdjaji ensures that the data is isolated from active processing systems and deleted at the earliest practicable opportunity.
All personal data held by bdjaji is stored on servers that implement encryption at rest, access logging, and regular security auditing. bdjaji does not store complete payment credentials — such as full mobile wallet PIN codes or full bank account numbers — on its own servers.
Security Measures
Transport Layer Security
All data exchanged between your device and bdjaji is encrypted using TLS (Transport Layer Security) 1.2 or higher. This protects your credentials, payment details, and personal information from interception during transmission over public and private networks.
Encryption at Rest
Personal data stored in bdjaji's databases — including identity documents, financial records, and account credentials — is encrypted at rest using AES-256 encryption. Encryption keys are managed separately from the encrypted data and are subject to regular rotation.
Role-Based Access Control
Access to personal data within bdjaji's internal systems is governed by a strict role-based access control (RBAC) framework. Staff members are granted access only to the data categories required for their specific job function. All internal data access is logged and subject to periodic audit.
Incident Response
bdjaji maintains a documented data breach response procedure. In the event of a security incident that poses a risk to your personal data, bdjaji will notify affected players promptly and take immediate remedial action, including containing the breach, assessing its scope, and implementing safeguards to prevent recurrence.
While bdjaji implements industry-standard security measures, no online platform can guarantee absolute security against all possible threats. You are responsible for maintaining the security of your Account credentials, including your username, password, and any two-factor authentication methods associated with your Account. If you believe that your Account credentials have been compromised, please contact [email protected] immediately so that your Account can be secured without delay.
Your Data Rights
As a bdjaji player whose personal data is processed by bdjaji, you have the following rights in respect of your personal data. bdjaji is committed to honouring these rights promptly and without undue delay — typically within 30 calendar days of a valid request being submitted.
To exercise any of the above rights, please submit a written request to [email protected] with the subject line "Data Rights Request" and include your registered Account username and a description of the right you wish to exercise. bdjaji may request additional information to verify your identity before processing the request, to ensure that data is not disclosed to or deleted at the request of an unauthorised person.
bdjaji will respond to all valid data rights requests within 30 calendar days. Where a request is complex or numerous, bdjaji may extend this period by a further 30 days — in which case you will be notified of the extension and the reason for it within the initial 30-day period.
If you are not satisfied with bdjaji's response to a data rights request, or if you believe that bdjaji has processed your personal data in violation of this Privacy Policy, you have the right to raise a complaint with the relevant data protection authority in your jurisdiction.
Changes to This Policy
bdjaji reserves the right to update or amend this Privacy Policy from time to time to reflect changes in the law, changes in our data processing practices, or improvements to the bdjaji platform. All updates will be published on this page with a revised "Last Updated" date at the top of the policy.
Where a change to this Privacy Policy is material — meaning it significantly affects the way we process your personal data or reduces your rights — bdjaji will notify you directly via email to your registered address, or via an in-platform notification, at least 14 days before the change takes effect. Continued use of the bdjaji platform after the effective date of a revised Privacy Policy constitutes your acceptance of the updated terms.
bdjaji encourages you to review this Privacy Policy periodically to stay informed about how your data is handled. The current version of the policy is always accessible at bdjaji.net/privacy-policy. If you have any questions about changes to this policy, please contact the bdjaji data team at [email protected] before continuing to use the platform.
Your Privacy is Protected on Bangladesh's Royal Gaming Platform
Now that you understand how bdjaji protects your data, explore everything the platform has to offer — live casino, cricket betting, slots, and more. Players must be 18 years or older.