Your Privacy Matters at bdij

1. Introduction

1.1 bdij ("we", "our", or "us") operates the online betting and gaming platform at https://bdij.io. This Privacy Policy describes how bdij collects, processes, stores, shares, and protects the personal data of individuals who access or use our website, mobile experience, games, and associated services (collectively, the "bdij Platform").

1.2 This Privacy Policy applies to all registered account holders, prospective users who browse the bdij website without registering, and any individual whose personal data bdij processes in connection with the provision of its services to the Bangladesh market.

1.3 By accessing the bdij Platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any aspect of this policy, you should discontinue use of the bdij Platform and contact our support team to arrange the deletion of any personal data we may hold about you.

1.4 This Privacy Policy is published in English. It should be read alongside bdij's Terms & Conditions and Responsible Gaming Policy, which together form the full framework of user agreements governing your use of the bdij Platform.

1.5 bdij takes its data protection obligations seriously. We invest in security infrastructure, staff training, and ongoing policy review to ensure that your personal data is handled responsibly, proportionately, and in accordance with applicable data protection principles at all times.

2. Data We Collect

2.1 Registration and Identity Data: When you create a bdij account, we collect your full legal name, date of birth, residential address (including district, division, and postal code within Bangladesh), email address, and mobile phone number. This data is required to open and maintain your account.

2.2 Verification and KYC Data: To comply with age verification requirements (21+ policy) and Know Your Customer (KYC) obligations, bdij may collect copies of government-issued identity documents such as your National Identity Card (NID), passport, or driving licence, as well as proof of residential address such as a utility bill or bank statement.

2.3 Financial and Payment Data: When you make deposits or withdrawals, bdij records transaction amounts, dates, payment method identifiers (e.g., your bKash or Nagad mobile number, the last four digits of a card), and transaction reference numbers. bdij does not store full card numbers or payment credentials on its own servers — these are processed and tokenised by our payment service providers.

2.4 Betting and Gaming Activity Data: bdij records all bets, wagers, casino game sessions, slot spins, and sporting event selections placed through your account. This includes stake amounts, odds, game titles, win/loss outcomes, session durations, and bonus usage history. This data is central to providing the betting service and to our responsible gaming monitoring obligations.

2.5 Technical and Device Data: bdij automatically collects certain technical data when you access the platform, including your IP address, browser type and version, device type, operating system, screen resolution, language settings, referring URL, and session timestamps. This data is collected to maintain platform security, detect fraud, and optimise the user experience.

2.6 Communication Data: If you contact bdij's support team via live chat, email, or any other channel, we retain records of those communications — including the content of messages, timestamps, and resolution notes — for quality assurance, training, and dispute resolution purposes.

2.7 Responsible Gaming Data: Where you apply deposit limits, session time controls, cooling-off periods, or voluntary self-exclusion, bdij records those elections and the dates on which they were applied. This data is maintained to ensure that player protection measures are enforced consistently and without interruption.

The following table summarises the primary categories of personal data bdij collects:

3. How We Collect Data

3.1 Directly from you: The majority of the personal data bdij holds is provided directly by you — at registration, during KYC submission, when making deposits or withdrawals, when contacting support, or when applying responsible gaming settings through your account dashboard.

3.2 Automatically during platform use: Technical data is collected automatically through our web server logs, cookies, and analytics tools each time you access the bdij Platform. See Section 7 (Cookies and Tracking) for further detail on how we use cookies.

3.3 From payment service providers: When you complete a deposit or withdrawal, our integrated payment partners — including bKash, Nagad, Rocket, Upay, and card processing partners — transmit transaction confirmation data to bdij. This typically includes a transaction reference number, the payment method identifier, and the transaction amount. Full payment credentials are not shared with bdij by these providers.

3.4 From game providers: Game studios and live casino providers such as Evolution Gaming, Ezugi, Pragmatic Play, NetEnt, Microgaming, and Spribe may transmit game session data to bdij's platform, including session start/end times, bet amounts, and win/loss outcomes. This data is used to populate your bdij account transaction history.

3.5 From fraud prevention partners: bdij works with third-party fraud detection and risk management services. These partners may supply bdij with risk scores, device fingerprint data, or flagging signals based on patterns associated with fraudulent activity. bdij uses this data solely to protect the integrity of the platform and the safety of its legitimate players.

4. How We Use Your Data

4.1 To provide and manage your account: bdij uses your registration and identity data to create and maintain your account, authenticate your logins, and ensure that only you can access your account balance and betting history.

4.2 To process financial transactions: Payment data and account data are used to process deposits and withdrawals accurately and in a timely manner. bdij uses this data to match incoming payments to the correct player account and to route withdrawal funds to the correct payment method.

4.3 To comply with age and identity verification requirements: bdij is obligated under its 21+ age policy to verify that all players are adults. KYC data is used exclusively for the purpose of confirming your eligibility to hold an account and to meet applicable compliance obligations.

4.4 To deliver responsible gaming protections: Gaming activity data, session data, and responsible gaming preference data are used to monitor player behaviour for signs of problem gambling and to enforce any limits or exclusions you have elected. Where bdij's responsible gaming systems identify a pattern of concern, this data may be used to proactively reach out to the player or to apply protective restrictions.

4.5 To prevent fraud and ensure platform integrity: Technical data, IP data, device fingerprinting data, and gaming activity patterns are analysed to detect and prevent fraudulent activity, money laundering, bonus abuse, multi-accounting, and other prohibited conduct as defined in the bdij Terms & Conditions.

4.6 To provide customer support: Communication data is used to respond to your support enquiries, resolve disputes, and follow up on any account issues you have raised. Support records are also used for staff training and quality assurance purposes.

4.7 To improve the bdij Platform: Aggregated and anonymised technical and gaming activity data is used by bdij's product and development teams to understand how players use the platform, identify areas for improvement, and test new features. This data is not linked back to individual player identities when used for product improvement purposes.

4.8 To send service communications: bdij uses your email address and mobile number to send transactional communications — such as deposit confirmations, withdrawal notifications, security alerts, and account verification messages. These are not marketing communications and cannot be opted out of whilst your account remains active, as they form part of the core service.

4.9 To send marketing communications (where consented): Where you have explicitly opted in to receive marketing communications from bdij, we may use your email address or mobile number to send you details of promotions, bonus offers, and seasonal events relevant to the Bangladesh market. You may withdraw your marketing consent at any time by contacting support at [email protected].

5. Legal Basis for Processing

5.1 bdij processes personal data on the following legal bases:

• Contractual necessity: Processing required to deliver the services you have contracted for — including account management, transaction processing, and game delivery — is carried out on the basis that it is necessary to perform the contract between you and bdij.
• Legal obligation: Processing required to comply with applicable legal and regulatory obligations — including age verification, KYC, and anti-money laundering checks — is carried out on the basis of legal obligation.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and product improvement is carried out on the basis of bdij's legitimate interests, where those interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing for direct marketing communications is carried out solely on the basis of your explicit, freely given consent. You may withdraw this consent at any time without affecting the lawfulness of processing carried out before withdrawal.

6. Data Sharing and Disclosure

6.1 Payment service providers: bdij shares the minimum necessary payment data with its integrated payment partners — including bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, and City Bank — for the sole purpose of processing your deposits and withdrawals. These providers operate under their own privacy policies and data protection obligations.

6.2 Game providers: bdij shares your player account identifier and session data with game studios — including Evolution Gaming, Ezugi, Pragmatic Play, NetEnt, Microgaming, and Spribe — as required to initiate and record game sessions. Providers receive only the data necessary to operate the game and return session outcomes to bdij.

6.3 Identity verification and KYC partners: bdij may use third-party identity verification services to assist with document verification and age confirmation. These partners process KYC document data on bdij's behalf and under binding data processing agreements that restrict secondary use of the data.

6.4 Fraud prevention and security partners: Technical and behavioural data may be shared with fraud detection partners to assess account risk, detect suspicious login activity, and prevent platform abuse. These partners act as data processors under binding contractual terms.

6.5 Legal and regulatory disclosures: bdij may disclose personal data to competent authorities, law enforcement agencies, or regulatory bodies where we are legally required to do so, or where disclosure is necessary to protect bdij's rights, the safety of its players, or to investigate and prevent fraud and criminal activity.

6.6 Business transfers: In the event that bdij undergoes a merger, acquisition, or transfer of assets, personal data held by bdij may be transferred to the successor entity as part of that transaction. You will be notified of any such transfer and the privacy terms applicable to your data under the new entity.

7. Cookies and Tracking

7.1 bdij uses cookies and similar tracking technologies on its platform to ensure the website functions correctly, to maintain your session whilst you are logged in, to remember your preferences, and to gather anonymised analytics data about how the platform is used.

7.2 The following categories of cookies are used by bdij:

• Strictly necessary cookies: Required for the platform to function. These include session authentication cookies that keep you logged in during your visit. These cookies cannot be disabled without impairing platform functionality.
• Analytics cookies: Used to collect anonymised data about how visitors navigate the bdij website — such as which pages are most visited, average session duration, and device types used. This data is processed in aggregate and is not linked to individual player identities.
• Functional cookies: Used to remember your language preferences, display settings, and other optional personalisation choices you may have made during previous visits.
• Security cookies: Used to support rate-limiting, brute-force protection on login pages, and CSRF token validation. These cookies are essential to platform security.

7.3 bdij does not use advertising cookies or serve third-party behavioural advertising. No advertising network has access to bdij player data for targeting purposes.

7.4 You may control cookie preferences through your browser settings. Note that disabling strictly necessary or security cookies may impair your ability to use the bdij Platform. Disabling analytics or functional cookies will not affect your ability to place bets or access games.

8. Data Retention

8.1 bdij retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, to comply with legal and regulatory retention obligations, or to resolve any outstanding disputes or claims.

8.2 The following indicative retention periods apply to the main categories of personal data bdij holds:

8.3 Following the expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be linked to an identifiable individual.

9. Data Security

9.1 bdij applies a layered security architecture to protect your personal data against unauthorised access, accidental loss, unlawful disclosure, and destruction. Security measures in place include:

• SSL/TLS encryption on all data transmitted between your device and the bdij Platform.
• Encryption at rest for sensitive stored data including KYC documents and financial records.
• Role-based access controls ensuring that only authorised bdij personnel can access personal data, and only to the extent required for their specific role.
• Multi-factor authentication requirements for all bdij staff with administrative access to player data systems.
• Continuous monitoring for intrusion, anomalous access patterns, and data exfiltration attempts.
• Regular third-party security audits and penetration testing of the bdij Platform infrastructure.
• Formal incident response procedures to identify, contain, and notify affected parties in the event of a data breach.

9.2 Whilst bdij takes all reasonable and practicable steps to secure your personal data, no digital system or network can guarantee absolute security. bdij cannot accept liability for security incidents arising from factors entirely outside its reasonable control, such as compromise of your own device or credentials.

9.3 In the event that a data security incident occurs that affects your personal data, bdij will notify you without undue delay and will provide clear information about the nature of the incident, the data affected, and the steps bdij is taking in response.

10. Your Rights

10.1 As a bdij player whose personal data we process, you hold the following rights in relation to that data. You may exercise any of these rights by contacting the bdij support team at [email protected]:

• Right of access: You have the right to request a copy of the personal data bdij holds about you, along with information about how it is being used.
• Right to rectification: If any personal data bdij holds about you is inaccurate or incomplete, you have the right to request that it be corrected or updated.
• Right to erasure: In certain circumstances, you have the right to request that bdij delete your personal data. Note that this right is subject to bdij's legal and regulatory retention obligations — we may be required to retain certain data even after account closure.
• Right to restriction of processing: In certain circumstances, you may request that bdij restrict its processing of your personal data whilst a dispute regarding accuracy or lawfulness is resolved.
• Right to data portability: Where processing is carried out by automated means on the basis of consent or contractual necessity, you have the right to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to object: You have the right to object to bdij processing your personal data on the basis of legitimate interests. bdij will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent (such as marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to the withdrawal.

10.2 bdij will respond to all legitimate data rights requests within 30 days of receipt. In complex cases, this period may be extended by a further 60 days, in which case bdij will notify you of the extension and the reason for it within the initial 30-day window.

10.3 bdij will not charge a fee for responding to data rights requests unless a request is manifestly unfounded, repetitive, or excessive — in which case a reasonable administrative fee may apply.

11. Third-Party Services

11.1 The bdij Platform integrates with third-party services to deliver games, process payments, and provide customer support infrastructure. Whilst bdij carefully selects its partners and imposes contractual data protection obligations on all data processors, each third-party provider operates under its own privacy framework for data that passes through its systems.

11.2 This Privacy Policy does not govern the data practices of third-party providers. bdij encourages you to review the privacy policies of relevant providers — including your mobile financial services provider (bKash, Nagad, Rocket, or Upay) and the game studio whose titles you play — if you have specific questions about how those parties handle your data.

11.3 bdij does not permit any third-party service provider to use data shared with them in connection with bdij services for any secondary purpose beyond what is strictly necessary to deliver the contracted service to bdij. All data processors are bound by written agreements that reflect these restrictions.

12. Children's Privacy

12.1 The bdij Platform is strictly for individuals aged 21 years or older. bdij does not knowingly collect or process the personal data of any individual under the age of 21. If you are under 21, you must not register an account or use the bdij Platform.

12.2 If bdij discovers or is notified that it has collected personal data from an individual under the age of 21, it will immediately close the associated account, delete all personal data collected from that individual (subject only to any retention obligations relating to the investigation of the underage access event itself), and return any deposits made net of any winnings, which will be forfeited.

12.3 If you believe that a minor may have registered an account on the bdij Platform, please contact the support team immediately at [email protected]. bdij treats all reports of potential underage access as a priority matter.

13. Policy Updates

13.1 bdij reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or the services we provide. The effective date of the current version is displayed at the top of this page.

13.2 Where changes to this Privacy Policy are material — meaning they significantly affect how we collect, use, or share your personal data — bdij will notify registered players by email or via a prominent notice on the platform at least 14 days before the changes take effect.

13.3 Your continued use of the bdij Platform following the publication of an updated Privacy Policy constitutes your acknowledgement of the revised terms. If you do not accept the updated policy, you must cease using the platform and contact support to arrange account closure.

14. Contact Us

14.1 If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or have a concern about how bdij handles your personal data, please contact our support team. We are committed to responding promptly and transparently to all privacy-related enquiries.

14.2 Privacy and data rights contact: [email protected] — please include "Privacy Enquiry" in the subject line of your message so that our team can direct your request to the appropriate handler without delay. All privacy enquiries are acknowledged within 24 hours and responded to in full within 30 days.

14.3 For urgent matters — including suspected unauthorised access to your account or an urgent request to apply a self-exclusion — please use the live chat function on the bdij Platform for the fastest possible response, available 24 hours a day, 7 days a week, in English.