Privacy Policy — Your Data at bdtji

This Privacy Policy ("Policy") is issued by bdtji ("we", "us", "our") and applies to all players, registered account holders, and visitors who access or use the bdtji platform at https://bdtji.io and any associated mobile or web applications (collectively, the "Platform"). This Policy sets out how bdtji collects, uses, stores, shares, and protects personal data in connection with the provision of our online betting and casino services to players in Bangladesh and other permitted jurisdictions.

bdtji is committed to handling your personal data with transparency, care, and respect. We collect only the data that is necessary for the purposes described in this Policy, and we do not engage in the sale or commercial exploitation of player data. This Policy should be read alongside our Terms and Conditions and Responsible Gaming Policy, both of which are published on this Platform.

By registering an account, logging in, making a deposit, or otherwise using the bdtji Platform, you confirm that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you should discontinue use of the Platform and contact our support team to request account closure.

For the purposes of applicable data protection law, bdtji acts as the data controller in respect of all personal data collected through the Platform. As data controller, bdtji determines the purposes and means by which your personal data is processed. All data processing activities described in this Policy are carried out by bdtji or by authorised third-party processors acting on our instructions under written data processing agreements that impose obligations equivalent to those described in this Policy.

If you have any questions, requests, or concerns regarding how bdtji processes your personal data, you may contact our Data Protection team directly at:

• Email: [email protected] (plain text — not a clickable link)
• Subject line: "Privacy Enquiry — [Your Username]"
• Response time: Within 10 business days of receipt

bdtji collects the following categories of personal data from players and platform visitors. The precise data points collected may vary depending on the nature of your interaction with the Platform and the services you access.

3.1 Identity & Registration Data

• Full legal name as it appears on your government-issued identification document
• Date of birth (used for mandatory age verification — players must be 21 or older)
• Gender (optional, collected during registration for personalisation purposes)
• Username and account password (stored in encrypted, hashed form — never in plain text)
• National ID number, passport number, or driving licence number (collected during KYC verification)
• Selfie or photograph submitted for identity verification purposes

3.2 Contact & Location Data

• Email address registered to your bdtji account
• Mobile phone number (used for account verification OTPs and support communications)
• Current residential address including district, division, and postcode
• City of residence (e.g., Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, Cox's Bazar)

3.3 Financial & Transaction Data

• Mobile financial service account details (bKash number, Nagad number, Rocket number, Upay number) associated with deposits and withdrawals
• Bank account details (account name, account number, branch) where bank transfer is used
• Card type and last four digits (Visa, Mastercard) where card payment is supported
• Transaction history including deposit amounts, withdrawal amounts, dates, times, and reference numbers, all denominated in Bangladeshi Taka (BDT)
• Wallet balance information and bonus credit records

3.4 Behavioural & Gaming Data

• Betting history including markets selected, stake amounts, odds accepted, and settlement outcomes
• Casino game session data including games played, rounds completed, session duration, and results
• Responsible gaming tool settings (deposit limits, session reminders, cooling-off periods, self-exclusion status)
• Platform navigation patterns, page visits, feature usage, and time-on-site data

3.5 Technical & Device Data

• IP address and approximate geographic location derived from IP
• Device type, model, and operating system version
• Browser type and version
• Unique device identifiers and session tokens
• Referring URL and entry page data
• Cookie identifiers and local storage data (see Section 8 for full cookie details)

3.6 Communications Data

• Records of all communications you initiate with bdtji support, including email, live chat, and in-platform messaging
• Feedback, complaints, and dispute records
• Survey responses and voluntary promotional opt-in records

bdtji collects personal data through the following channels and mechanisms:

• Direct provision: Data you voluntarily provide during account registration, KYC verification, payment setup, support interactions, and promotional opt-ins.
• Automated collection: Technical data collected automatically when you visit or use the Platform, including via cookies, log files, session tracking technologies, and analytics tools.
• Third-party identity verification providers: Where you submit documents for KYC purposes, our verification partners may process your identity data on our behalf and return a verification result to bdtji.
• Payment service providers: Transaction data relating to deposits and withdrawals processed via bKash, Nagad, Rocket, Upay, or banking partners is shared with bdtji by those providers to the extent necessary to confirm transaction status.
• Game providers: Session and outcome data from games hosted by third-party studios (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, Spribe) is transmitted to bdtji to enable accurate settlement and account management.
• Publicly available sources: In limited circumstances relating to fraud prevention or compliance, bdtji may verify certain information against publicly available records or licensed data sources.

bdtji processes your personal data only for specific, defined purposes and only where a legitimate basis exists for doing so. The table below summarises the primary processing activities, their purposes, and the legal basis on which each is conducted.

bdtji retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and our internal compliance policies. The following general retention periods apply:

• Active account data: Retained for the duration of the player's account and for a minimum of five (5) years following account closure, to meet record-keeping and audit requirements.
• Transaction records: Retained for a minimum of seven (7) years from the date of the transaction in accordance with financial record-keeping standards.
• KYC verification documents: Retained for five (5) years following account closure or the last verified transaction, whichever is later.
• Support communications: Retained for three (3) years from the date of the communication, unless they relate to an unresolved dispute or legal matter.
• Marketing consent records: Retained for the duration of your marketing opt-in status plus one (1) year following opt-out, as evidence of the consent given or withdrawn.
• Technical and device data (logs): Retained for up to twelve (12) months from the date of collection, after which they are anonymised or deleted.
• Self-excluded player records: Retained for the full duration of the self-exclusion period and for five (5) years thereafter to prevent re-registration in violation of the exclusion.

When retention periods expire, personal data is securely deleted or irreversibly anonymised so that it can no longer be associated with an identified or identifiable individual. Where data must be retained beyond these periods for an ongoing legal dispute or regulatory investigation, it will be flagged as legally held and access-restricted to authorised personnel only.

bdtji does not sell, rent, or trade your personal data to third parties for marketing or commercial purposes. We may share your personal data with the following categories of recipients only to the extent strictly necessary for the purposes described in this Policy:

7.1 Service Providers & Processors

Third-party companies that provide services to bdtji and process personal data on our behalf under written data processing agreements. These include identity verification providers, payment processors (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank), game content providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, Spribe), cloud hosting and infrastructure providers, fraud detection services, and customer support platform operators.

7.2 Legal & Regulatory Authorities

bdtji may disclose personal data to law enforcement agencies, regulatory bodies, tax authorities, or courts where we are legally required to do so, or where disclosure is necessary to protect the rights, property, or safety of bdtji, our players, or third parties. Such disclosures are made only to the extent required by applicable law and after appropriate legal review where time permits.

7.3 Business Transfers

In the event of a merger, acquisition, asset sale, restructuring, or other corporate transaction involving bdtji, your personal data may be transferred to the acquiring or successor entity as part of the transaction. You will be notified of any such transfer and the privacy practices of the successor entity via a prominent notice on the Platform or by direct communication to your registered email address, prior to any change in the applicable Privacy Policy.

7.4 Fraud Prevention Networks

bdtji may share limited personal data (such as IP addresses, device fingerprints, and account identifiers) with industry fraud prevention networks and shared blacklist services for the purpose of detecting and preventing fraudulent activity, bonus abuse, and money laundering across the online gaming sector.

bdtji uses cookies and similar tracking technologies (collectively "Cookies") on the Platform to enable essential functionality, improve user experience, and gather analytics data. Cookies are small text files stored on your device by your browser when you visit the Platform. They allow the Platform to recognise your device on return visits and to store preferences and session information.

Types of Cookies We Use

• Strictly Necessary Cookies: Required for the Platform to function correctly. These include session authentication cookies, security tokens, and load-balancing cookies. These cannot be disabled without impairing core Platform functionality.
• Functional Cookies: Store your preferences such as language settings, notification preferences, and responsible gaming limit configurations, so that these are preserved between sessions.
• Analytics Cookies: Collect aggregated, anonymised data on how players navigate and use the Platform — including page visit counts, session durations, and feature interactions — enabling bdtji to improve the Platform experience.
• Marketing Cookies: Used only with your explicit consent, these cookies track your engagement with bdtji promotional content to enable relevant, personalised communications and to measure campaign effectiveness.

Managing Your Cookie Preferences

You may manage your cookie preferences at any time through your browser settings. Most browsers allow you to refuse or delete cookies, though doing so may affect the functionality of certain Platform features. Strictly Necessary Cookies cannot be disabled as they are essential to the Platform's operation. Marketing Cookies may be opted out of at any time by updating your marketing preferences in your account settings or by contacting support at [email protected].

bdtji implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security infrastructure includes the following controls:

• SSL/TLS Encryption: All data transmitted between your device and the bdtji Platform is encrypted in transit using industry-standard SSL/TLS protocols. The padlock icon in your browser confirms that this encryption is active during your session.
• Password Hashing: Account passwords are never stored in plain text. They are processed through a one-way cryptographic hashing algorithm with salting before being stored, ensuring that even bdtji staff cannot read your password.
• Access Controls: Access to systems containing personal data is restricted to authorised personnel only on a strict need-to-know basis. All staff with access to personal data undergo data protection training and are bound by confidentiality obligations.
• Two-Factor Authentication (2FA): bdtji supports optional two-factor authentication for player accounts. We strongly encourage all players to enable 2FA to add a second layer of protection beyond their password.
• Intrusion Detection: The Platform is monitored continuously by automated intrusion detection and anomaly-alerting systems designed to identify unusual access patterns or potential security incidents in real time.
• Data Minimisation: bdtji collects only the minimum personal data necessary for each identified processing purpose and does not retain data beyond the periods specified in Section 6.
• Incident Response: In the event of a confirmed personal data breach that poses a risk to players, bdtji will notify affected individuals and take all reasonable steps to contain and remediate the breach without undue delay.

bdtji's Platform is operated primarily for players in Bangladesh. However, some of our third-party service providers — including cloud hosting infrastructure, game providers (such as Pragmatic Play, Evolution Gaming, and NetEnt), and analytics processors — may be located in or process data in jurisdictions outside Bangladesh. Where personal data is transferred to such providers, bdtji ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that described in this Policy.

Such safeguards may include contractual clauses requiring the recipient to adhere to equivalent data protection standards, technical measures such as encryption and pseudonymisation, and internal data transfer policies that restrict the scope of data made available to overseas processors. bdtji does not transfer personal data to any jurisdiction or recipient that it does not consider capable of providing an adequate level of protection for that data.

As a player whose personal data is processed by bdtji, you have the following rights with respect to your personal information. These rights may be exercised by contacting bdtji at [email protected] with the subject line "Data Rights Request — [Your Username]".

• Right of Access: You may request a copy of the personal data bdtji holds about you, along with information about how it is processed, where it is stored, and with whom it is shared.
• Right to Rectification: You may request that bdtji correct or update any inaccurate or incomplete personal data held in your account.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations (see Section 6). Note that certain data — particularly transaction records and KYC documents — must be retained for the minimum periods specified by applicable law and cannot be deleted on request.
• Right to Restrict Processing: You may request that bdtji limits its processing of your personal data in certain circumstances, for example while the accuracy of the data is being contested or while a complaint is under investigation.
• Right to Data Portability: You may request that bdtji provide your personal data to you in a structured, commonly used, machine-readable format, where technically feasible and where processing is based on consent or contractual necessity.
• Right to Object: You may object at any time to the processing of your personal data for direct marketing purposes. You may also object to processing carried out on the basis of legitimate interests, though bdtji may continue such processing where it can demonstrate compelling legitimate grounds that override your objection.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

bdtji will acknowledge and respond to all data rights requests within ten (10) business days. Where a request requires additional time to process, bdtji will notify you of the expected response timeline. Identity verification may be required before processing certain requests to ensure that personal data is not disclosed to an unauthorised individual.

The bdtji Platform is strictly intended for individuals aged 21 and above. bdtji does not knowingly collect personal data from individuals under the age of 21. The Platform employs automated and manual age verification procedures at registration and during KYC review to prevent underage access.

If bdtji becomes aware that personal data has been collected from an individual under the age of 21 — whether through a parent's report, an internal review, or a KYC verification outcome — we will immediately suspend the relevant account, delete or anonymise the personal data collected (except for any records required to be retained for compliance purposes), and return any deposits made in accordance with our Terms and Conditions.

bdtji may send you promotional communications — including welcome bonus offers, deposit match notifications, seasonal promotions (such as Eid specials, Pohela Boishakh campaigns, or IPL/BPL cricket season offers), and platform news — by email or SMS to your registered contact details, where you have provided your explicit consent to receive such communications.

You may opt out of marketing communications at any time by:

• Clicking the "Unsubscribe" link included in any marketing email sent by bdtji
• Updating your communication preferences in your account settings
• Contacting support at [email protected] with the subject line "Marketing Opt-Out — [Your Username]"

Opting out of marketing communications does not affect the delivery of transactional or service communications (such as deposit confirmations, withdrawal notifications, KYC requests, or security alerts), which are sent as a necessary part of the service provided under our Terms and Conditions.

bdtji reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, Platform functionality, or regulatory requirements. When material changes are made, bdtji will provide notice to registered players via email to the registered address and/or via a prominent notification on the Platform homepage. The date of the most recent revision is indicated at the top of this Policy.

Your continued use of the bdtji Platform after the effective date of any revised Privacy Policy constitutes your acknowledgement of the changes and your agreement to the updated terms. If you do not accept the revised Policy, you should cease using the Platform and contact support to arrange account closure and withdrawal of any available balance prior to the effective date of the changes.

For any questions, requests, or concerns relating to this Privacy Policy or bdtji's personal data practices, please contact our Data Protection team using the details below. We are committed to responding promptly and transparently to all privacy-related enquiries.

• Email: [email protected] (plain text — not a clickable link)
• Subject line: "Privacy Enquiry" or "Data Rights Request — [Your Username]"
• Response time: Within 10 business days for formal data rights requests; within 24 hours for general privacy queries
• Hours: 24 hours a day, 7 days a week, Bangladesh Standard Time (BST, UTC+6)
• Language: English