bdjili Privacy Policy

bdjili ("we", "us", "our", or "the Platform") is committed to safeguarding the personal data of every individual who accesses or registers on bdjili.app. This Privacy Policy describes in plain, professional terms precisely what personal data bdjili collects, the specific purposes for which it is processed, the third parties with whom it may be shared, and the rights available to you as a data subject.

This policy applies to all services available through the bdjili platform, including casino games, live dealer products, sports betting markets, payment processing, customer support, and promotional communications. It applies equally to players based in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, Cox's Bazar, and all other regions within Bangladesh, as well as INR-currency players accessing bdjili from other South Asian territories.

By registering an account on bdjili or by continuing to use the Platform after this policy has been updated, you acknowledge that you have read this Privacy Policy and consent to the data processing activities described herein. If you do not consent , you must discontinue use of the Platform and contact us to request account closure.

This Privacy Policy should be read alongside bdjili's Terms & Conditions, which govern the overall contractual relationship between you and bdjili, and our Responsible Gaming policy, which sets out our commitments to player welfare.

For the purposes of this Privacy Policy, bdjili acts as the data controller in respect of all personal data collected from players and visitors to bdjili.app. As the data controller, bdjili determines the purposes and means of processing your personal data and bears full responsibility for ensuring that processing is carried out lawfully, fairly, and transparently.

All data-related enquiries, subject access requests, erasure requests, and formal privacy complaints should be directed to our support team using the contact details set out in Section 13 of this policy. We are committed to responding to all privacy-related correspondence within five (5) business days of receipt.

bdjili collects the minimum personal data necessary to operate a secure, compliant, and high-quality gaming platform. The categories of personal data we collect are described in the table below:

bdjili collects personal data through several distinct channels, each of which is described below:

• Direct Submission: Data you provide voluntarily when creating an account, completing identity verification, making a deposit or withdrawal, contacting our support team, or updating your account profile. This represents the primary source of personal data held by bdjili.
• Automated Technologies: When you visit bdjili.app, our servers automatically record certain technical data including your IP address, browser fingerprint, device identifiers, and session metadata. This data is collected via server logs, cookies, and similar tracking technologies as described in Section 9.
• Payment Providers: When you process a transaction via bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, or City Bank, the relevant payment provider shares transaction confirmation data — including the transaction reference number and the masked payment method identifier — with bdjili to confirm receipt of funds.
• Third-Party Identity Verification Services: bdjili uses regulated Know Your Customer (KYC) service providers to validate identity documents. These providers may supply additional data points as part of their verification output, including document authenticity scores and watchlist screening results.
• Game Providers: Game studios such as Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, and Microgaming share session and wager data with bdjili in real time as part of the game integration. This data is used for account crediting, dispute resolution, and responsible gaming monitoring.
• Public Sources: In certain fraud prevention and AML (anti-money laundering) screening contexts, bdjili may cross-reference data against publicly available records or regulated watchlist databases. No personal data from public sources is used for marketing purposes.

bdjili processes your personal data only where a valid legal basis exists. The following table sets out the primary purposes for which we process personal data and the corresponding legal basis for each:

Where processing is based on your consent (for example, receiving promotional emails about IPL season bonuses, BPL offers, or Eid promotions), you may withdraw that consent at any time by updating your communication preferences in your account settings or by contacting us at [email protected]. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

bdjili does not sell, rent, or trade your personal data to any third party for commercial purposes. Your data is shared only where it is strictly necessary to operate the Platform or where we are legally obligated to disclose it. The categories of recipients who may receive your data are as follows:

• Payment Service Providers: bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, and City Bank receive the minimum data necessary to process your deposits and withdrawals — typically your registered mobile number or masked card reference and the transaction amount in BDT or INR.
• KYC and Identity Verification Partners: Regulated third-party providers who perform document authenticity checks and watchlist screening on our behalf. These providers are contractually bound to process data only for KYC purposes and to apply data security standards equivalent to those of bdjili.
• Game Technology Providers: Studios including Pragmatic Play, Evolution Gaming, Ezugi, NetEnt, Microgaming, and Spribe receive session identifiers and wager data as part of the technical integration required to deliver games. They do not receive your full identity profile or payment details.
• IT Infrastructure and Hosting Providers: Cloud hosting and content delivery providers who store and transmit platform data on our behalf. All such providers are contractually bound by data processing agreements that restrict their use of your data to service delivery only.
• Fraud Detection and Security Services: Specialist providers who assist bdjili in identifying fraudulent account activity, chargebacks, and suspicious betting patterns. These providers process technical and transactional data under strict confidentiality obligations.
• Legal and Regulatory Authorities: Where bdjili is required by law, court order, or regulatory directive to disclose personal data, we will comply. Where legally permitted, we will notify the affected player before disclosure. We do not voluntarily disclose player data to government bodies in the absence of a legally binding requirement.

bdjili retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The general retention periods applied by bdjili are as follows:

• Account and Identity Data: Retained for the duration of your active account plus a minimum of five (5) years following account closure, to comply with anti-money laundering record-keeping requirements.
• Financial Transaction Records: Retained for a minimum of seven (7) years following the date of each transaction, in line with standard financial record-keeping obligations.
• KYC Documentation: Retained for five (5) years after the completion of the verification process, or longer if required by a specific regulatory obligation.
• Gaming Activity Records: Retained for five (5) years from the date of the relevant activity to enable dispute resolution and responsible gaming review.
• Support Communications: Retained for three (3) years from the date of the last communication, to support complaint handling and quality assurance.
• Technical and Usage Data: Retained for up to twelve (12) months in identifiable form, after which it is aggregated and anonymised for analytics purposes only.
• Marketing Consent Records: Retained for the duration of your active marketing consent plus three (3) years, to evidence the lawfulness of promotional communications.

When personal data is no longer required for any of the above purposes and no legal obligation requires its continued retention, bdjili will securely delete or anonymise the data. Anonymised data that cannot be re-linked to an individual may be retained indefinitely for statistical and business intelligence purposes.

bdjili implements a layered set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include but are not limited to:

• SSL/TLS Encryption: All data transmitted between your device and bdjili.app is encrypted in transit using industry-standard SSL/TLS protocols. This applies to account login sessions, payment processing flows, and all API communications.
• Password Hashing: Account passwords are stored exclusively in one-way hashed form using a strong cryptographic algorithm. bdjili staff cannot view or retrieve your plaintext password under any circumstances. In the event of a data breach, your password is not exposed in readable form.
• Access Controls: Access to personal data held within bdjili's systems is restricted on a strict need-to-know basis. Staff members are granted only the minimum access privileges required to perform their specific job functions. All internal access is logged and subject to periodic audit.
• Two-Factor Authentication: bdjili offers two-factor authentication (2FA) to all registered players. We strongly recommend enabling 2FA on your account to add a second layer of protection beyond your password.
• Penetration Testing and Vulnerability Management: bdjili conducts regular security assessments of its platform infrastructure to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, bdjili will notify affected players without undue delay and will take all reasonable steps to contain and remediate the breach.

bdjili uses cookies and similar browser-based technologies to deliver and improve the Platform. A cookie is a small text file placed on your device by a web server when you visit a website. The cookies used by bdjili fall into the following categories:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session management cookies that keep you logged in during a gaming session, security tokens, and cookies that remember your currency preference (BDT or INR). These cookies cannot be disabled without significantly impairing your ability to use bdjili.
• Functional Cookies: Remember your preferences and settings (such as language preference and responsible gaming limit configurations) across sessions, so you do not need to re-enter them each time you visit.
• Analytical Cookies: Collect anonymised data about how players use the Platform — which pages are visited most frequently, where users encounter errors, and which features drive the most engagement. This data is used exclusively to improve bdjili's products and user experience. No individual player is identified through analytical cookie data.
• Performance Cookies: Help bdjili monitor server response times, page load speeds, and the performance of game integrations across different device types, so that technical teams can identify and resolve performance bottlenecks.

bdjili does not use third-party advertising cookies, retargeting pixels, or social media tracking scripts. Your gaming activity on bdjili is not shared with external advertising networks. You may manage cookie preferences through your browser settings; however, disabling strictly necessary cookies will prevent normal Platform operation.

As a data subject, you hold the following rights in respect of the personal data that bdjili processes about you. These rights are exercisable by submitting a written request to [email protected] with "Privacy Request" in the subject line:

• Right of Access: You may request a copy of all personal data that bdjili holds about you, along with information about how it is processed. bdjili will provide this in a structured, readable format within thirty (30) days of a verified request.
• Right to Rectification: If any personal data held by bdjili is inaccurate or incomplete, you have the right to request that it be corrected. For minor corrections such as email address or mobile number updates, you may also make changes directly through your account settings.
• Right to Erasure ("Right to Be Forgotten"): You may request that bdjili delete your personal data. This right is subject to exceptions — for example, bdjili is legally required to retain financial transaction records and KYC documentation for defined periods regardless of an erasure request. Where erasure is not possible due to a legal obligation, bdjili will inform you of the applicable retention period.
• Right to Restrict Processing: You may request that bdjili restrict the processing of your personal data in certain circumstances, such as while the accuracy of the data is being disputed or while an objection to processing is under consideration.
• Right to Data Portability: You may request that bdjili provide your personal data in a structured, machine-readable format for transfer to another service provider, where technically feasible and where the processing is based on consent or contract.
• Right to Object: You may object to the processing of your personal data where bdjili relies on legitimate interests as the legal basis for processing. bdjili will cease processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that occurred prior to withdrawal.

bdjili will not charge a fee for exercising any of the above rights unless a request is manifestly unfounded or excessive in scope. All requests will receive an initial acknowledgement within five (5) business days and a substantive response within thirty (30) days. In complex cases, this period may be extended by a further sixty (60) days, in which case you will be informed of the extension and the reasons for it.

bdjili is strictly an 18+ platform. We do not knowingly collect or process personal data belonging to individuals under the age of 18. Our registration process includes an age declaration step, and bdjili performs KYC age verification checks as part of the account review process.

If bdjili becomes aware that personal data has been collected from a person under the age of 18, the following steps will be taken immediately:

• The account will be suspended and access to the Platform will be revoked.
• All personal data associated with the account will be reviewed and securely deleted where no legal obligation requires its retention.
• Any deposits made by the underage individual will be returned to the originating payment method after identity confirmation, net of any applicable payment provider fees.
• The matter will be handled in accordance with bdjili's child protection obligations and applicable law.

Parents and guardians who believe that a minor may have accessed bdjili using their device or payment credentials should contact us immediately at [email protected]. We treat all such reports with the utmost seriousness and will act on them without delay.

bdjili reserves the right to update this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, business operations, or data processing practices. All updates will be published on this page with a revised "Last Updated" date at the top of the document.

For material changes — defined as changes that significantly alter how your personal data is collected, used, or shared — bdjili will provide advance notice via the email address registered to your account at least seven (7) days before the change takes effect. Non-material clarifications and formatting updates may be published without prior notice.

Your continued use of the bdjili platform after an updated Privacy Policy has taken effect constitutes your acceptance of the revised terms. If you do not agree with the changes, you must stop using the Platform and request account closure before the effective date of the updated policy. The current version of the Privacy Policy at bdjili.app/privacy-policy is always the operative version.

For any questions, concerns, or formal requests relating to this Privacy Policy or the processing of your personal data by bdjili, please contact our data team using the details below. We encourage you to reach out before escalating any concern, as we are committed to resolving privacy matters promptly and fairly.

• Email: [email protected] — please use subject line "Privacy Request" for data rights submissions
• Response Time: Initial acknowledgement within 5 business days; substantive response within 30 days
• Support Hours: 24 hours a day, 7 days a week, including Bangladesh public holidays
• Platform: bdjili.app

All formal privacy complaints will be logged, acknowledged in writing, and investigated by our data protection team. Where a complaint cannot be resolved through direct contact, bdjili will outline any available escalation or dispute resolution options in writing.