bdjali Privacy Policy

📄 Full Privacy Policy

1. Who We Are

bdjali is an online casino and sports betting platform serving players in Bangladesh. We operate https://bdjali.app and all associated sub-domains and mobile experiences. For any privacy-related enquiry, you may reach our data team at: [email protected].

2. Data We Collect

We collect personal data only where it is necessary to provide, operate, and improve our services, or where we are required to do so by applicable law. The categories of data we collect are:

• Identity Data Full legal name, date of birth, nationality, and copies of government-issued identity documents (e.g., National ID card, passport) provided during account verification.
• Contact Data Email address, mobile phone number, and city or division of residence (e.g., Dhaka, Chittagong, Sylhet, Khulna) provided at registration or when contacting support.
• Account Data Your chosen username, hashed password, account preferences, communication preferences, and the history of bonuses claimed or promotions participated in.
• Financial Data Transaction reference numbers, deposit and withdrawal amounts in BDT (৳), payment method type (bKash, Nagad, Rocket, Upay, bank transfer, Visa/Mastercard), and transaction timestamps. Full payment account numbers or card numbers are not stored on bdjali servers.
• Gaming & Betting Data Records of games played, bets placed, wagers, wins, losses, and session durations. This data is used to fulfil responsible gaming obligations and to resolve disputes.
• Technical Data IP address, device type, operating system, browser type and version, screen resolution, session tokens, and referral source. Collected automatically when you access the Platform.
• Communications Data Records of any messages, emails, or live chat conversations exchanged between you and the bdjali support team, including timestamps and content, retained for quality assurance and dispute resolution.
• Cookie & Analytics Data Session cookies, persistent cookies, and anonymised usage analytics collected via first-party analytics tools to understand page performance, navigation flows, and error rates.

3. How We Use Your Data

bdjali uses collected personal data for the following purposes:

1. Account creation and management: To register your account, verify your identity, and maintain your player profile throughout your relationship with bdjali.
2. Payment processing: To facilitate BDT deposits and withdrawals via bKash, Nagad, Rocket, Upay, bank transfer, and card payment providers, and to maintain accurate financial records of all transactions.
3. Service delivery: To provide access to sports betting markets, casino games, live dealer tables, and other platform features in accordance with your account status.
4. Responsible gaming compliance: To monitor betting and gaming activity for signs of problem gambling, to apply self-imposed limits or exclusions you have requested, and to fulfil our duty-of-care obligations under our responsible gaming policy.
5. Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, unauthorised account access, money laundering, and other illegal conduct that could harm players or the platform.
6. Legal and regulatory compliance: To meet record-keeping, anti-money-laundering (AML), and know-your-customer (KYC) obligations applicable to online gaming platforms.
7. Customer support: To respond to your enquiries, process complaints, and resolve disputes accurately and fairly.
8. Platform improvement: To analyse anonymised usage patterns, identify technical issues, test new features, and improve the overall bdjali experience for all players.
9. Marketing communications: To send you promotional emails or in-platform notifications about bonuses, new games, and seasonal offers — only if you have opted in to receive them. You may opt out at any time.

4. Legal Basis for Processing

bdjali processes your personal data on the following legal bases:

1. Contractual necessity: Processing required to perform the contract between you and bdjali — for example, running your account, processing payments, and delivering gaming services.
2. Legitimate interests: Processing necessary for our legitimate business interests, such as fraud prevention, platform security, and service improvement, where those interests are not overridden by your privacy rights.
3. Legal obligation: Processing required to comply with applicable laws, including AML regulations and KYC identity verification requirements.
4. Consent: Where we rely on your freely given, specific, and informed consent — for example, to send you optional marketing communications. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

5. Data Sharing and Disclosure

bdjali does not sell or rent your personal data. We may share it with the following categories of recipient only where necessary:

1. Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard — solely to execute your requested payment transactions.
2. Game providers: Third-party game studios such as Evolution Gaming, Pragmatic Play, Ezugi, NetEnt, Microgaming, and Spribe receive session tokens and anonymised player IDs necessary to deliver game content. They do not receive your full identity or payment data.
3. Identity verification providers: Third-party KYC services that verify the authenticity of identity documents you submit during account verification. These providers process data under strict confidentiality agreements.
4. Analytics and infrastructure providers: Cloud hosting, content delivery, and analytics platforms that support the technical operation of bdjali. All such providers are contractually bound to process data only on our instructions and to maintain appropriate security standards.
5. Law enforcement and regulators: Where we are legally compelled to disclose data by a valid court order, government authority, or applicable law, we will comply and, where permitted, notify you.

6. Data Retention

1. bdjali retains your account data for as long as your account remains active and for a minimum period of five (5) years following account closure, in order to meet legal, regulatory, and dispute-resolution obligations.
2. Financial transaction records are retained for a minimum of seven (7) years from the date of the transaction, in accordance with standard financial record-keeping requirements.
3. Communications data (support tickets, chat logs) is retained for three (3) years from the date of the interaction.
4. Technical and analytics data is retained in anonymised form for up to two (2) years for platform performance analysis. Non-anonymised technical data (e.g., IP addresses associated with a specific account action) is retained for twelve (12) months.
5. After the applicable retention period expires, personal data is securely deleted or anonymised so that it can no longer be linked to an identifiable individual.

7. Cookies and Tracking Technologies

bdjali uses the following types of cookies and similar technologies when you access our platform:

1. Essential cookies: Required for the platform to function. These include session authentication cookies, security tokens, and load-balancing cookies. These cannot be disabled without breaking the service.
2. Preference cookies: Store your chosen settings such as language preference, notification opt-in status, and last-visited game category to improve your return experience.
3. Analytics cookies: First-party analytics cookies that record anonymised interaction data — pages visited, session duration, error events — to help us identify and fix performance issues. We do not use Google Analytics or other third-party analytics platforms that share your data outside bdjali.
4. bdjali does not use advertising cookies, retargeting pixels, or any third-party tracking technology that follows your activity outside of our platform.
5. You may manage non-essential cookies through your browser settings. Disabling analytics cookies will not affect your ability to use any core bdjali feature.

8. Data Security

1. All data transmitted between your device and bdjali is encrypted using TLS 1.2 or TLS 1.3. Our platform enforces HTTPS across all pages with no insecure fallback.
2. Passwords are stored as salted cryptographic hashes. Plain-text passwords are never stored or transmitted by bdjali.
3. Access to personal data within the bdjali organisation is restricted on a strict need-to-know basis. Staff with access to player data are subject to confidentiality obligations and security training.
4. We conduct regular security reviews of our infrastructure and promptly address vulnerabilities identified through internal testing or responsible disclosure.
5. In the event of a confirmed data breach affecting your personal information, bdjali will notify affected players within 72 hours of confirming the incident and provide guidance on protective steps you should take.

9. Your Rights

As a bdjali player, you have the following rights regarding the personal data we hold about you. To exercise any of these rights, contact us at [email protected]:

1. Right of access: You may request a copy of all personal data bdjali holds about you. We will provide this within 30 days of receiving a verified request.
2. Right to rectification: If any personal data we hold is inaccurate or incomplete, you may ask us to correct it. We will update records promptly and notify any third parties who received the incorrect data where feasible.
3. Right to erasure: You may request that we delete your personal data. We will comply except where retention is required by law (for example, financial records subject to AML obligations).
4. Right to restrict processing: You may ask us to temporarily stop processing your data — for example, while a dispute is being investigated — without requiring full deletion.
5. Right to data portability: You may request your account data in a structured, machine-readable format (CSV or JSON) so that you can transfer it to another provider.
6. Right to object: You may object to processing based on legitimate interests, including direct marketing. Where you object to marketing, we will stop immediately.
7. Right to withdraw consent: Where we process your data on the basis of consent (e.g., marketing emails), you may withdraw consent at any time without penalty.

10. Children and Minors

The bdjali platform is strictly intended for individuals aged 21 years and above. We do not knowingly collect or process personal data belonging to persons under the age of 21. If we become aware that data has been collected from a person under 21, that account will be closed immediately and all associated data deleted. If you believe a minor has registered on our platform, please notify us at [email protected] without delay.

11. International Data Transfers

bdjali may store and process your data on servers located outside Bangladesh, including in jurisdictions where data protection laws may differ from those applicable in Bangladesh. Where such transfers occur, we apply appropriate safeguards — including contractual protections and data processing agreements — to ensure your data receives a consistent level of protection regardless of where it is processed.

12. Third-Party Links

The bdjali platform does not contain links to external third-party websites. This privacy policy applies solely to data collected and processed by bdjali at https://bdjali.app and does not extend to any third-party services or platforms.

13. Changes to This Policy

1. bdjali may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or platform features.
2. When we make material changes, we will notify registered players via email and display a prominent notice on the platform for at least 14 days before the changes take effect.
3. Your continued use of bdjali after the effective date of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not accept the changes, you should close your account before the effective date.

14. Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or the way bdjali handles your personal data, please contact our team at: [email protected]. We aim to respond to all privacy enquiries within 5 business days.