Privacy Policy
— Your Data at bdjli

1. Data We Collect

bdjli collects personal data from players through several channels: directly via the registration and KYC process, automatically through your use of the platform, and occasionally from trusted third-party sources used for identity verification and fraud prevention purposes. The categories of personal data we collect are set out below.

1.1 Registration & Account Data

When you create a bdjli account, we collect the following information that you provide directly:

• Full legal name as it appears on your national identity documentation;
• Date of birth — collected to enforce our strict 18+ age policy;
• Residential address including district, city (e.g., Dhaka, Chittagong, Sylhet, Khulna), and postcode;
• Mobile phone number registered in Bangladesh, used for account verification and support communications;
• Email address, used for transactional communications, account notifications, and, where you have opted in, promotional messaging;
• Username and encrypted password — passwords are stored using one-way cryptographic hashing and are never accessible in plain text by bdjli staff.

1.2 KYC Verification Data

To comply with our Know Your Customer (KYC) obligations and to prevent underage gambling and financial crime, bdjli collects:

• Copies of government-issued identity documents such as the National Identity Card (NID), passport, or birth certificate;
• Proof of address documentation (e.g., utility bill, bank statement dated within 90 days);
• Proof of ownership of payment methods used for deposits (e.g., bKash, Nagad, Rocket account confirmation);
• Source of funds documentation in cases where regulatory requirements or internal risk assessment procedures require it.

1.3 Financial Transaction Data

bdjli records all financial transactions conducted through the platform, including deposit amounts, withdrawal requests, payment method identifiers (e.g., the last four digits of a bKash or Nagad mobile number), transaction timestamps, and transaction status. This data is retained for a minimum of five years in accordance with standard financial record-keeping obligations.

1.4 Gameplay & Behavioural Data

bdjli automatically collects data about how you interact with the platform, including:

• Games played, bet amounts, win/loss outcomes, and session durations;
• Sports betting activity including markets selected, odds accepted, and bet settlement results;
• Responsible gaming tool usage, such as deposit limit settings and self-exclusion requests;
• Navigation patterns, page views, and feature interactions within the bdjli platform.

1.5 Technical & Device Data

When you access bdjli via a web browser or mobile web interface, we automatically collect certain technical information, including:

• IP address and approximate geolocation derived from it;
• Browser type, version, and language settings;
• Device type, operating system, and screen resolution;
• Referring URL (the page you visited immediately before arriving at bdjli);
• Session timestamps and duration.

This technical data is used primarily for platform security, fraud detection, and performance optimisation. It is not used to build individual advertising profiles or sold to third-party advertisers.

2. How We Use Your Data

bdjli processes personal data only for specific, legitimate purposes. We do not process your data in ways that are incompatible with the purposes described in this Policy. The primary purposes for which we use your personal data are as follows:

Purpose	Legal Basis	Data Categories Used
Account creation and management	Contractual necessity	Registration data, KYC data
Processing deposits and withdrawals	Contractual necessity	Financial transaction data, payment method data
Identity and age verification (KYC)	Legal obligation, contractual necessity	KYC documents, registration data
Fraud prevention and security	Legitimate interest, legal obligation	Technical data, gameplay data, financial data
Responsible gaming enforcement	Legal obligation, player protection	Gameplay data, account data, behavioural data
Customer support	Contractual necessity, legitimate interest	All relevant account and transaction data
Promotional communications (opt-in only)	Consent	Email address, name, gameplay preferences
Platform improvement and analytics	Legitimate interest	Technical data, behavioural data (aggregated)

bdjli will never use your personal data for purposes unrelated to the operation of the platform, the fulfilment of our contractual obligations to you, or compliance with applicable legal requirements. We do not sell, rent, or trade your personal data to third-party marketers.

2.1 Marketing Communications

bdjli may send you promotional emails, SMS messages, or in-platform notifications about bonuses, new game launches, cricket betting markets, or seasonal promotions (such as Eid offers or BPL season specials) — but only if you have explicitly opted in to receive such communications during registration or via your account settings. You may withdraw your marketing consent at any time by contacting [email protected]. Withdrawal of marketing consent does not affect the lawfulness of processing carried out prior to withdrawal, and will not prevent bdjli from sending you essential transactional communications (e.g., deposit confirmations, withdrawal notifications, account security alerts).

3. Cookies & Tracking

bdjli uses cookies and similar tracking technologies to operate the platform, maintain your session state, prevent fraud, and understand how players use the site. A cookie is a small text file placed on your device by a web server. Cookies cannot execute code and cannot be used to deliver viruses to your device.

3.1 Types of Cookies Used

• Strictly Necessary Cookies: These are essential for the platform to function and cannot be disabled. They include session authentication cookies that keep you logged in, anti-CSRF tokens, and load-balancing cookies. No consent is required for these cookies as they are required for service delivery.
• Performance & Analytics Cookies: These cookies help bdjli understand how players navigate the platform — which pages are visited most, where players exit, and how long sessions last. The data collected is aggregated and anonymised wherever possible. These cookies are set only with your consent.
• Functionality Cookies: These cookies remember your preferences — such as your preferred deposit method or responsible gaming limit settings — so you do not need to re-enter them at every session. They are set with your consent.
• Fraud Prevention Cookies: bdjli uses certain device fingerprinting cookies to detect and prevent fraudulent activity such as multi-accounting, bonus abuse, and unauthorised account access. These are set in bdjli's legitimate interest in protecting the platform and its players.

3.2 Managing Cookies

You may control and delete cookies through your browser settings at any time. Please note that disabling strictly necessary cookies will prevent you from logging in to your bdjli account and using core platform features. Instructions for managing cookies in the most commonly used browsers are available from each browser provider's official support documentation. Continued use of the bdjli platform after being presented with our cookie notice constitutes consent to the placement of non-essential cookies as described above.

4. Data Sharing & Third Parties

bdjli does not sell, rent, or commercially transfer your personal data to any third party for their own marketing purposes. We share personal data with third parties only in the specific, limited circumstances described below.

4.1 Payment Service Providers

To process your deposits and withdrawals, bdjli must share relevant financial data with the payment service providers you choose to use. These currently include bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, and BRAC Bank. The data shared is limited to the minimum required to process the transaction (typically: transaction amount, your account reference, and the destination payment identifier). Each payment partner operates under its own privacy policy and is independently responsible for the security of data it receives.

4.2 Identity Verification Partners

bdjli works with specialist third-party KYC and identity verification providers to validate player identity documents and screen against financial crime databases. These partners process KYC data strictly on bdjli's behalf under data processing agreements that prohibit them from using your data for any purpose beyond the KYC service they provide to bdjli.

4.3 IT Infrastructure & Cloud Providers

bdjli uses trusted cloud infrastructure and hosting providers to operate its platform. These providers may process personal data stored on bdjli's systems as part of normal hosting operations. All such providers are contractually bound to implement appropriate technical and organisational security measures and to process data only on bdjli's documented instructions.

4.4 Legal and Regulatory Disclosure

bdjli may disclose personal data to law enforcement agencies, regulatory bodies, or courts of competent jurisdiction where we are required to do so by applicable law, where disclosure is necessary to prevent or detect serious crime, or where disclosure is required to protect the rights, property, or safety of bdjli, its players, or third parties. In all such cases, bdjli will disclose only the minimum data necessary to fulfil the legal obligation and will, where legally permissible, notify the affected player of the disclosure.

5. Data Retention

bdjli retains personal data for as long as is necessary to fulfil the purposes for which it was collected, as set out in this Privacy Policy, and for as long as required by applicable legal, regulatory, and contractual obligations. The general retention periods applied by bdjli are as follows:

• Account and registration data: Retained for the lifetime of the account and for a minimum of 5 years following account closure, to meet financial record-keeping and anti-money-laundering obligations;
• KYC documentation: Retained for a minimum of 5 years from the date of submission or from the date of account closure, whichever is later;
• Financial transaction records: Retained for a minimum of 5 years from the date of each transaction;
• Gameplay and betting history: Retained for a minimum of 3 years from the date of each betting session, used for dispute resolution and responsible gaming monitoring;
• Technical and device logs: Retained for a maximum of 12 months, after which they are deleted or irreversibly anonymised;
• Marketing consent records: Retained for the duration of your marketing opt-in and for 3 years thereafter to evidence compliance with consent requirements.

Upon expiry of the relevant retention period, personal data is securely deleted or irreversibly anonymised in accordance with bdjli's internal data deletion procedures. Anonymised, aggregated data may be retained indefinitely for statistical and analytical purposes as it no longer constitutes personal data.

6. Data Security

bdjli implements a layered set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our key security controls include:

• 256-bit SSL/TLS Encryption: All data transmitted between your browser and the bdjli platform is encrypted in transit using industry-standard TLS protocols. Look for the padlock icon in your browser's address bar when using bdjli;
• Password Hashing: Account passwords are stored using a strong one-way cryptographic hash function. bdjli staff cannot view your password in plain text under any circumstances;
• Access Controls: Access to personal data within bdjli's systems is restricted on a strict need-to-know basis. Staff are granted the minimum level of data access required to fulfil their role, and all access is logged and subject to audit;
• Two-Factor Authentication: bdjli supports and encourages the use of two-factor authentication (2FA) for all player accounts. Players are strongly advised to enable 2FA via their account settings;
• Fraud Detection Systems: bdjli operates automated fraud detection and anomaly detection systems that monitor account activity in real time to identify suspicious patterns and flag them for review;
• Regular Security Testing: bdjli conducts periodic vulnerability assessments and penetration testing of its platform infrastructure to identify and remediate security weaknesses before they can be exploited.

Despite these measures, no online platform can guarantee absolute security against all possible threats. In the unlikely event of a data breach that poses a significant risk to player rights and freedoms, bdjli will notify affected players and relevant authorities in accordance with applicable legal requirements and within the timeframes prescribed by law.

7. Your Privacy Rights

bdjli is committed to respecting your rights over your personal data. As a bdjli player in Bangladesh, you have the following rights with respect to your personal information held by bdjli:

• Right of Access: You have the right to request a copy of the personal data that bdjli holds about you. We will respond to verified access requests within 30 days;
• Right to Rectification: If any personal data held by bdjli is inaccurate or incomplete, you have the right to request that it be corrected. You may update certain account details directly via your account settings;
• Right to Erasure: You may request deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purposes it was collected. Note that this right is subject to overriding legal retention obligations; bdjli may be required to retain certain data (e.g., transaction records) regardless of an erasure request;
• Right to Restrict Processing: You may request that bdjli restrict the processing of your personal data in certain circumstances, such as while a rectification request is being assessed;
• Right to Data Portability: Where bdjli processes your data on the basis of your consent or for the performance of a contract, you may request a machine-readable copy of the personal data you have provided to bdjli;
• Right to Withdraw Consent: Where bdjli processes your data on the basis of your consent (e.g., for marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing;
• Right to Object: You have the right to object to processing of your personal data where bdjli relies on legitimate interest as its legal basis. bdjli will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.

To exercise any of the above rights, please submit a written request to [email protected]. We may need to verify your identity before processing your request. All rights requests will be acknowledged within 5 business days and fully responded to within 30 calendar days. Where a request is complex or involves a high volume of data, this period may be extended by a further 30 days, and you will be notified of the extension.

8. Policy Updates & Contact

bdjli reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, operational requirements, or applicable law. When a material update is made, bdjli will publish the revised Policy at bdjli.com/privacy-policy with an updated effective date. Where the change is significant, we will notify registered players via the email address on their account. We encourage all players to review this Policy periodically.

If you have any questions, concerns, or complaints about this Privacy Policy or about the way bdjli handles your personal data, please contact our Privacy team:

• Email: [email protected] (plain text — not a clickable link)
• Response Time: Under 15 minutes during BST business hours; within 24 hours at all other times
• Language: English
• Time Zone: Bangladesh Standard Time (BST, UTC+6)

bdjli takes all privacy concerns seriously. If you are not satisfied with our response to your query or complaint, you have the right to escalate the matter to a relevant supervisory authority or data protection regulator with jurisdiction over bdjli's operations.