bjji Privacy Policy — How We Handle Your Data

1. Introduction

1.1 bjji ("we", "us", "our") operates the online betting and casino platform accessible at bjji.io (the "Platform"). As the operator of the Platform, bjji acts as the data controller for all personal data collected from users ("you", "your", "Player") in connection with your use of our services.

1.2 bjji takes data privacy seriously. We recognise that the personal information you share with us — from your name and contact details to your financial transaction records — is sensitive, and we are committed to handling it with care, transparency, and rigorous security standards.

1.3 This Privacy Policy describes:

• The categories of personal data bjji collects from Players;
• The purposes for which that data is processed;
• The legal basis on which processing is carried out;
• How long data is retained;
• With whom data may be shared;
• The security measures in place to protect your data; and
• The rights you hold as a data subject and how to exercise them.

1.4 This Privacy Policy should be read together with the bjji Terms & Conditions, which are incorporated by reference. In the event of any conflict between this Privacy Policy and the Terms & Conditions with respect to data processing matters, this Privacy Policy shall prevail.

1.5 bjji's privacy practices apply to all Players regardless of location, but are specifically designed to reflect the expectations and legal environment relevant to users based in Bangladesh.

2. Categories of Personal Data We Collect

2.1 bjji collects the following categories of personal data from Players, depending on the nature of their interaction with the Platform:

Category	Examples	When Collected
Identity Data	Full legal name, date of birth, gender, nationality	At registration and during KYC verification
Contact Data	Email address, mobile phone number, residential address	At registration; updated by Player upon change
Verification Documents	National ID (NID), passport scan, utility bill, bank statement	During KYC; may be requested at withdrawal
Financial Data	Deposit amounts, withdrawal requests, bKash/Nagad mobile numbers, transaction history	With each deposit or withdrawal transaction
Account Activity Data	Login timestamps, session durations, game history, betting records, bonus usage	Continuously during Platform use
Technical Data	IP address, browser type and version, device type, operating system, screen resolution	Automatically on each Platform visit
Communications Data	Support chat transcripts, email correspondence, feedback submissions	When you contact bjji support
Preference Data	Responsible gaming limits set, marketing preferences, language settings	When you configure account settings

2.2 bjji does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data, unless expressly required by applicable law or for age verification purposes.

2.3 Where you provide data about third parties (for example, a referral), you confirm that you have obtained the appropriate consent from those individuals to share their data with bjji for the purpose stated.

3. How We Collect Your Data

3.1 bjji collects personal data through the following channels:

• Direct Collection: Information you actively provide when registering an account, completing a deposit or withdrawal, submitting identity verification documents, contacting support, or setting responsible gaming preferences.
• Automated Collection: Technical data collected automatically by bjji's servers and analytics systems each time you visit or interact with the Platform, including IP address, device identifiers, and session behavioural data.
• Third-Party Sources: Identity and age verification data received from KYC service providers who cross-reference the documents you submit against authoritative identity databases. Payment confirmation data received from payment processors including bKash, Nagad, Rocket, and Upay.
• Cookies and Similar Technologies: Data collected through session cookies, persistent cookies, and analytics tools embedded in the Platform. Please refer to Section 9 (Cookies & Tracking) for full details.

4. Legal Basis for Processing

4.1 bjji processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to fulfil the contract between bjji and you — specifically, to operate your account, process deposits and withdrawals, settle bets, and deliver the gaming and betting services you have signed up for.
• Legal Obligation: Processing required to comply with anti-money laundering (AML) obligations, age verification requirements, fraud prevention duties, and other legal obligations applicable to bjji as a platform operator.
• Legitimate Interests: Processing carried out for bjji's legitimate business interests, including fraud detection, platform security, product improvement, and responsible gaming monitoring — provided these interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing based on your freely given, specific, and informed consent — principally for the delivery of marketing communications and optional analytics cookies. You may withdraw consent at any time without affecting the lawfulness of prior processing.

5. How We Use Your Personal Data

5.1 bjji uses the personal data described in Section 2 for the following purposes:

• Account Management: To create, maintain, and administer your bjji account, including processing deposits and withdrawals in Bangladeshi Taka (৳) via your chosen payment method.
• Identity and Age Verification: To verify that you are at least 21 years of age and that the identity information you have provided is accurate and genuine, in compliance with our responsible gaming obligations.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, money laundering, multiple account registration, unauthorised access, and other prohibited conduct described in the bjji Terms & Conditions.
• Platform Personalisation: To remember your account settings, preferred payment methods, responsible gaming limits, and display preferences, so that each session on bjji is consistent with your saved configuration.
• Responsible Gaming: To monitor gameplay patterns for signs of problem gambling behaviour, to enforce deposit limits and self-exclusion periods you have set, and to proactively contact you where we identify concerning activity patterns in accordance with our Responsible Gaming Policy.
• Customer Support: To respond to your support queries, complaints, and feedback via live chat and email, and to maintain records of those communications for quality assurance and dispute resolution.
• Legal Compliance: To meet our obligations under applicable law, including responding to lawful requests from financial regulators, law enforcement agencies, and courts.
• Marketing Communications: Where you have given explicit consent, to send you promotional emails or in-app notifications about bjji bonuses, seasonal offers (including Eid and BPL season promotions), and platform updates. You may opt out at any time.
• Analytics and Improvement: To analyse Platform usage patterns, game performance, payment success rates, and user experience metrics in order to improve the quality and reliability of the bjji Platform over time.

5.2 bjji will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your consent or establishing a fresh legal basis for doing so.

6. Data Sharing & Disclosure

6.1 bjji does not sell, rent, or trade your personal data to any third party for their own marketing or commercial purposes. Data sharing is limited to the following categories of recipients, and only to the extent necessary for the stated purpose:

• Payment Processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, Visa, and Mastercard — to execute and confirm your deposit and withdrawal transactions. These providers process only the financial data necessary to complete your transaction.
• KYC and Identity Verification Providers: Third-party services that verify the authenticity of identity documents you submit. These providers are contractually prohibited from using your data for any purpose other than verification.
• Cloud Infrastructure and Hosting Providers: Secure cloud service providers that host the bjji Platform and databases. All hosting arrangements use servers with appropriate physical and digital security controls, and data processing agreements are in place.
• Game Content Providers: Where required to resolve a game outcome dispute, bjji may share limited account activity data with game providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi.
• Legal and Regulatory Authorities: Where bjji receives a lawful and documented request from a law enforcement agency, financial intelligence unit, or court, bjji will disclose the minimum data necessary to comply with that request. bjji will notify the affected Player of such a disclosure where legally permitted to do so.
• Professional Advisers: Lawyers, auditors, and insurers who are bound by professional secrecy obligations and who assist bjji in operating its business in compliance with applicable legal requirements.

6.2 In the event that bjji undergoes a merger, acquisition, or sale of its business assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified in advance of any such transfer and of any material changes to your privacy rights that may result.

7. Data Retention

7.1 bjji retains personal data for as long as is necessary to fulfil the purposes described in this Privacy Policy, or for as long as required by applicable law, whichever is longer.

7.2 The following retention periods apply as a general guide:

Data Category	Retention Period	Reason
Account & Identity Data	Duration of account + 5 years post-closure	Legal and regulatory compliance
Financial Transaction Records	7 years from transaction date	AML obligations and audit requirements
KYC Verification Documents	5 years post account closure	Identity verification and fraud prevention
Game and Betting History	3 years from each session date	Dispute resolution and responsible gaming monitoring
Support Communications	3 years from each communication	Quality assurance and complaint handling
Marketing Consent Records	Until consent is withdrawn + 12 months	Evidence of lawful processing basis
Technical / Log Data	12 months from collection	Security monitoring and fraud detection

7.3 Where data is no longer required for any of the above purposes, bjji will securely delete or anonymise it so that it can no longer be linked to any identifiable individual.

8. Data Security

8.1 bjji implements a layered security architecture to protect your personal data from unauthorised access, disclosure, alteration, or destruction. Our security measures include:

• TLS 1.3 Encryption: All data transmitted between your device and the bjji Platform is encrypted using Transport Layer Security 1.3, ensuring that your credentials, financial details, and personal information cannot be intercepted in transit.
• Password Security: Account passwords are never stored in plain text. bjji uses bcrypt hashing with unique per-user salts so that even in the event of a data breach, stored password hashes cannot be reversed to reveal original passwords.
• Access Controls: bjji staff access to Player data is governed by a strict role-based access control (RBAC) policy. No staff member can access Player financial or personal data beyond what is necessary for their specific job function.
• Two-Factor Authentication: bjji supports two-factor authentication (2FA) for Player accounts and requires it for all administrative access to internal systems that contain personal data.
• Regular Security Audits: bjji conducts periodic internal security reviews and engages independent security professionals to perform penetration testing and vulnerability assessments of the Platform infrastructure.
• Incident Response: bjji maintains a documented data breach response procedure. In the event of a confirmed data breach that is likely to result in risk to affected Players, bjji will notify affected individuals as promptly as practicable and take immediate steps to contain and remediate the breach.

8.2 While bjji takes all reasonable steps to protect your data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your account password and for logging out of active sessions on shared devices. If you believe your bjji account has been compromised, contact [email protected] immediately.

9. Cookies & Tracking Technologies

9.1 bjji uses cookies and similar technologies on the Platform. A cookie is a small text file placed on your device by a web server. The following categories of cookies are used:

• Strictly Necessary Cookies: These cookies are essential for the Platform to function. They enable core features such as account authentication (keeping you logged in during a session), security token management, and load balancing. These cookies cannot be disabled without breaking the Platform. No consent is required for strictly necessary cookies.
• Performance Cookies: These cookies collect anonymised data about how Players use the Platform — which pages are visited most frequently, how long sessions last, and where errors occur — so that bjji can improve Platform performance and user experience. The data collected is aggregated and not linked to any individual Player profile.
• Functional Cookies: These cookies remember your preferences such as your chosen language, display settings, and recently played games, so that you do not need to reconfigure them on each visit.
• Analytics Cookies: bjji uses privacy-respecting analytics tools to understand overall Platform usage trends. Analytics data is not used for targeted advertising and is not shared with advertising networks or data brokers.

9.2 bjji does not use third-party advertising cookies, retargeting pixels, or social media tracking scripts on the Platform.

9.3 You can manage or disable non-essential cookies through your browser's privacy settings at any time. Please note that disabling functional cookies may affect your experience on the bjji Platform. Instructions for managing cookies are available in the help documentation of all major browsers including Chrome, Firefox, Safari, and Samsung Internet.

10. Your Rights as a Data Subject

10.1 As a Player whose personal data is processed by bjji, you hold the following rights with respect to that data. To exercise any of these rights, please submit a written request to [email protected] with the subject line "Data Subject Request". bjji will respond within 30 days of receiving a valid request.

10.2 bjji will not charge a fee for handling data subject requests unless a request is manifestly unfounded or excessive. In such cases, bjji may charge a reasonable administrative fee or decline to act on the request, and will explain the reason in writing.

11. Children & Minors

11.1 The bjji Platform is strictly intended for adults aged 21 years and above. bjji does not knowingly collect or process personal data from any individual below the age of 21.

11.2 If bjji becomes aware that personal data has been collected from an individual below the minimum age — whether through a false declaration at registration or by any other means — bjji will immediately suspend the relevant account, delete the personal data associated with it, and forfeit any balances held in that account.

11.3 If you are a parent or guardian and believe that a minor in your care has registered on the bjji Platform, please contact bjji immediately at [email protected] so that we can take prompt action to close the account and delete all associated data.

12. Third-Party Links & Services

12.1 The bjji Platform may contain references to third-party game providers and payment services. While bjji takes care to work only with reputable and security-conscious partners, bjji is not responsible for the privacy practices of those third-party services. Each third-party provider operates under its own privacy policy, and we encourage you to review those policies independently.

12.2 Once you leave the bjji Platform to interact with a payment provider such as bKash or Nagad, the data you provide to that provider is governed by their own privacy terms, not by this Privacy Policy.

13. Marketing Communications

13.1 bjji may send you promotional communications including emails or in-app notifications about bonuses, new games, seasonal promotions (such as Eid specials, Pohela Boishakh offers, and BPL cricket season promotions), and Platform updates, but only where you have given your explicit consent to receive such communications at the time of registration or subsequently through your account settings.

13.2 You may withdraw your marketing consent and unsubscribe from all promotional communications at any time by:

• Clicking the "Unsubscribe" link at the bottom of any bjji marketing email;
• Updating your communication preferences in your bjji account settings; or
• Contacting the bjji support team at [email protected] with the subject line "Unsubscribe from Marketing".

13.3 Unsubscribing from marketing communications will not affect bjji's ability to send you essential account communications such as deposit confirmations, withdrawal notifications, security alerts, or updates to these Terms or this Privacy Policy, which are sent on the basis of contractual necessity rather than marketing consent.

14. Changes to This Privacy Policy

14.1 bjji reviews and updates this Privacy Policy periodically to reflect changes in our data practices, the services we offer, or applicable legal requirements. The "Last Updated" date at the top of this page indicates when the most recent revision was made.

14.2 Where changes to this Privacy Policy are material — for example, where we introduce a new category of data processing or a new category of third-party recipient — bjji will notify registered Players by email and via a prominent in-platform notification at least 14 days before the changes take effect.

14.3 Continued use of the bjji Platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not accept the revised Privacy Policy, you should stop using the Platform and request account closure in accordance with the bjji Terms & Conditions.

15. Contact Us & Data Enquiries

15.1 If you have any questions, concerns, or requests relating to this Privacy Policy or bjji's data processing practices, please contact the bjji Privacy and Data team using the details below:

15.2 bjji is committed to resolving all privacy-related queries and complaints promptly and fairly. If you are not satisfied with bjji's response to a privacy concern, you may escalate your complaint to the relevant data protection authority in your jurisdiction.