Privacy Policy — bdjl

1 Introduction

bdjl is committed to handling the personal data of all platform users with integrity, transparency, and respect. We recognise that privacy is a fundamental concern for any individual who shares personal information online, and we take that responsibility seriously.

This Policy applies to all personal data collected and processed in connection with the bdjl platform, including data gathered during account registration, identity verification, payment processing, gameplay activity, customer support interactions, and general platform use. It applies regardless of the device or method by which you access the bdjl platform.

This Policy should be read alongside the bdjl Terms & Conditions and Responsible Gaming policy, both of which are incorporated by reference and form part of the overall framework governing your relationship with bdjl.

2 Data Controller

For the purposes of this Privacy Policy, bdjl acts as the data controller in respect of personal data collected through the bdjl platform at bdjl.vu. As data controller, bdjl determines the purposes for which and the means by which personal data is processed.

If you have any questions regarding this Policy, or if you wish to exercise any of your data rights, you may contact our designated data protection contact using the details set out in Section 15 of this Policy.

3 Personal Data We Collect

bdjl collects the following categories of personal data, depending on the nature of your interaction with the platform:

3.1 Identity and Contact Data

• Full legal name
• Date of birth
• Gender (where provided)
• Residential address, including city (e.g., Dhaka, Chittagong, Sylhet, Khulna) and postal code
• Email address
• Mobile phone number
• Nationality

3.2 Identity Verification (KYC) Data

• Government-issued identity document (National ID card, passport, or driver's licence) — image or scan
• Proof of address document (utility bill, bank statement)
• Selfie or live photograph where required for biometric verification
• Source of funds documentation where required under our compliance procedures

3.3 Financial Data

• Mobile wallet identifiers (bKash account number, Nagad account number, Rocket number, Upay number)
• Bank account details where bank transfer is the chosen payment method (Dutch-Bangla Bank, City Bank, BRAC Bank, and others)
• Transaction history: deposits, withdrawals, and associated amounts in Bangladeshi Taka (৳ BDT)

3.4 Account and Gameplay Data

• Account username and encrypted password hash
• Account creation date and time (Bangladesh Standard Time, UTC+6)
• Login history including timestamps and IP addresses
• Gameplay records: games played, bet amounts, results, session durations
• Bonus and promotional history
• Responsible gaming tool settings (deposit limits, loss limits, self-exclusion status)

3.5 Technical and Usage Data

• IP address and approximate geolocation derived from IP
• Browser type and version
• Operating system and device type
• Pages visited and features used within the bdjl platform
• Referring URL and session duration
• Cookie identifiers (see Section 10)

3.6 Communications Data

• Records of correspondence with bdjl customer support, including email and live chat transcripts
• Complaint and dispute records
• Survey or feedback responses where voluntarily provided

4 How We Collect Your Data

bdjl collects personal data through the following channels and methods:

• Directly from you — when you complete the registration form, submit KYC documents, make a deposit or withdrawal, contact customer support, or respond to a survey.
• Automatically — when you access and navigate the bdjl platform, through server logs, cookies, pixel tags, and similar tracking technologies that record technical and usage data.
• From third-party partners — including identity verification and KYC service providers, payment processors (bKash, Nagad, Rocket, Upay, and banking partners), fraud detection services, and game providers, where these parties share data relevant to the operation of your account or the prevention of fraud.

5 How We Use Your Personal Data

bdjl uses your personal data for the following purposes. In the table below, we identify the data category used for each purpose alongside the legal basis on which the processing relies (see also Section 6).

bdjl does not use your personal data for automated decision-making that produces legal or similarly significant effects on you without human review, except where this is expressly permitted or required by law and you have been informed accordingly.

6 Legal Basis for Processing

bdjl processes your personal data on the following legal grounds:

• Contract performance: Processing is necessary for the performance of a contract to which you are a party — namely, the bdjl Terms & Conditions — or in order to take steps at your request prior to entering into that contract. This covers account creation, payment processing, and game delivery.
• Legal obligation: Processing is necessary for bdjl to comply with applicable legal obligations, including age verification requirements, anti-money laundering (AML) compliance, and fraud reporting obligations.
• Legitimate interests: Processing is necessary for the purposes of bdjl's legitimate interests — such as fraud prevention, platform security, and service improvement — provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: Where bdjl relies on your consent as the legal basis for processing (for example, in connection with direct marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to the withdrawal. To withdraw consent, contact [email protected].

7 Data Sharing and Disclosure

bdjl does not sell your personal data. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection obligations:

• Payment processors and mobile wallet operators — bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank — to process your deposits and withdrawals in BDT.
• KYC and identity verification service providers — third-party providers who assist bdjl in verifying your age and identity as required under our compliance procedures.
• Game providers and software studios — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi, who require certain technical identifiers to deliver game services within the bdjl platform.
• Fraud prevention and security services — providers of fraud detection, risk scoring, and cybersecurity tools who process certain technical and transactional data to protect the integrity of the platform.
• Professional advisors — legal counsel, auditors, and insurers, where disclosure is necessary in connection with the provision of professional services to bdjl.
• Regulatory and law enforcement authorities — where bdjl is required by applicable law, court order, or regulatory direction to disclose personal data.

8 Data Retention

bdjl retains personal data only for as long as is necessary for the purposes described in this Policy, or as required by applicable law. The following retention periods apply as a general guideline:

• Account data and gameplay records: Retained for the duration of your active account, plus a minimum of five (5) years following account closure, in accordance with applicable record-keeping and AML obligations.
• KYC and identity documents: Retained for a minimum of five (5) years following the end of your account relationship with bdjl, or such longer period as required by applicable law.
• Transaction records: Retained for a minimum of seven (7) years in accordance with applicable financial record-keeping requirements.
• Customer support communications: Retained for three (3) years following the resolution of the relevant support interaction or dispute.
• Technical and usage logs: Retained for up to twelve (12) months for security and fraud prevention analysis, then deleted or anonymised.
• Marketing consent records: Retained for the duration of active consent, plus two (2) years following withdrawal of consent, to evidence compliance.

Where personal data is no longer required, bdjl will securely delete or anonymise it so that it can no longer be associated with you as an individual.

9 Your Data Rights

Subject to applicable law, you have the following rights in respect of your personal data held by bdjl. To exercise any of these rights, please contact us using the details in Section 15:

• Right of access: You have the right to request a copy of the personal data bdjl holds about you, along with information about how it is processed.
• Right to rectification: You have the right to request correction of any inaccurate or incomplete personal data bdjl holds about you.
• Right to erasure ("right to be forgotten"): You have the right to request deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose for which it was collected, or where you have withdrawn consent and no other legal basis applies. This right is subject to exceptions where retention is required by law.
• Right to restriction of processing: You have the right to request that bdjl restricts the processing of your personal data in certain circumstances, such as while the accuracy of data is being disputed.
• Right to data portability: Where processing is based on your consent or on contract performance and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to object: You have the right to object to the processing of your personal data where bdjl relies on legitimate interests as the legal basis, unless bdjl demonstrates compelling legitimate grounds for the processing.
• Right to withdraw consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing prior to the withdrawal.

10 Cookies and Tracking Technologies

bdjl uses cookies and similar tracking technologies (such as pixel tags and local storage) to operate and improve the platform. Cookies are small text files placed on your device when you visit the bdjl website. They serve several functions:

• Strictly necessary cookies: Required for the platform to function. These include session authentication cookies that keep you logged in during your visit. They cannot be disabled without severely impairing platform functionality.
• Performance and analytics cookies: Help bdjl understand how visitors interact with the platform — which pages are most visited, where users encounter issues, and how sessions flow. Data collected is aggregated and does not directly identify individual users.
• Functionality cookies: Remember your preferences, such as preferred language settings and display configurations, to improve your experience across sessions.
• Targeting and marketing cookies: Used where you have provided consent to receive personalised promotional communications from bdjl. These cookies track gameplay and session activity to inform the relevance of offers presented to you.

You may manage or disable cookies through your browser settings at any time. Please note that disabling strictly necessary cookies may prevent you from accessing certain features of the bdjl platform. Consent to non-essential cookies may be withdrawn at any time by adjusting your browser preferences or contacting [email protected].

11 Security Measures

bdjl implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your browser and the bdjl platform.
• Encrypted storage of sensitive data, including password hashes and financial identifiers, at rest.
• Role-based access controls limiting internal staff access to personal data on a need-to-know basis.
• Regular security assessments and penetration testing of the bdjl platform infrastructure.
• Multi-factor authentication options for account access.
• Monitoring systems designed to detect and respond to unusual access patterns or suspected data breaches.

Despite these measures, no online platform can guarantee absolute security. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, bdjl will notify affected individuals without undue delay, in accordance with applicable notification obligations.

12 Minors and Age Restrictions

The bdjl platform is strictly intended for adults aged 18 years and above. bdjl does not knowingly collect or process the personal data of any individual under the age of 18. If we become aware that personal data has been collected from a person under 18, that data will be deleted immediately and the associated account will be permanently closed.

If you are a parent or guardian and believe that a minor in your care has registered an account or provided personal data to bdjl, please contact us immediately at [email protected] so that we can take prompt corrective action.

13 Third-Party Links and Integrations

The bdjl platform may contain references to, or integrations with, third-party game providers, payment processors, and technology partners. While bdjl carefully selects its partners, this Privacy Policy applies solely to the bdjl platform and does not govern the data practices of any third party. bdjl is not responsible for the privacy practices of any third-party service, and you are encouraged to review the privacy policies of any third-party provider whose services you access in connection with your bdjl account.

14 Changes to This Privacy Policy

bdjl reserves the right to update or amend this Privacy Policy at any time. Where changes are material — meaning they significantly affect the way your personal data is collected or used — bdjl will notify registered account holders via the email address on record prior to the changes taking effect. The effective date at the top of this document will be updated to reflect any revision.

Your continued use of the bdjl platform after the effective date of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not accept the revised Policy, you should cease using the platform and may request account closure by contacting [email protected].

15 Contact Us

For all privacy-related queries, data rights requests, or concerns about how bdjl handles your personal data, please contact our support team using the details below. The email address is provided as plain text only and is not a clickable link.

When submitting a data rights request, please include your registered account username, the nature of your request, and any relevant details that will help us locate and process your data accurately and efficiently.