bjbji Privacy Policy — How We Protect Your Data

bjbji is an online betting and live casino platform operating at https://bjbji.io, offering sports betting (including cricket, BPL, IPL, T20 World Cup, and other fixtures), live casino games, slots, crash games, and related entertainment services to players in Bangladesh and other permitted markets.

For the purposes of this Privacy Policy, bjbji is the data controller — meaning we determine the purposes and means by which your personal data is processed. Our designated point of contact for all data protection enquiries is the bjbji support team, reachable at [email protected].

• Platform name: bjbji
• Website: https://bjbji.io
• Primary market: Bangladesh
• Data protection contact: [email protected] (plain text — not a clickable link)
• Support language: English, available 24 hours a day, 7 days a week

bjbji collects personal data across several categories depending on your interaction with the platform. The table below summarises the categories of data we collect and provides examples of specific data points within each category.

bjbji does not collect sensitive personal data such as racial or ethnic origin, religious beliefs, political opinions, biometric data (other than liveness checks required for KYC), or health information unless you voluntarily disclose such information in a support communication.

bjbji collects personal data through a combination of direct interactions, automated technical mechanisms, and — in limited circumstances — from trusted third-party sources. Each collection method is described below.

• Direct collection: You provide data directly when you register a bjbji account, complete KYC verification, make a deposit or withdrawal, contact our support team, submit a complaint, or update your account profile.
• Automated collection: When you access the bjbji platform via any device, our servers automatically record technical and usage data including your IP address, device identifiers, browser type, and interaction logs. This data is collected via server logs, cookies, and similar technologies as described in Section 07.
• Payment processor data: When you transact via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, or Mastercard, the relevant payment processor confirms transaction status to bjbji. We receive confirmation data only — we do not receive or store your full payment credentials directly.
• KYC and fraud prevention providers: bjbji works with third-party identity verification services to validate the authenticity of identity documents and confirm that players meet the 21+ age requirement. These providers may supply bjbji with a verification result and risk score.
• Publicly available sources: In the course of fraud prevention and compliance checks, bjbji may reference publicly available information such as regulatory watch-lists, sanctions databases, and publicly accessible court records.

bjbji uses your personal data only for specific, documented purposes. The table below maps each primary use of your data to its corresponding legal basis (described further in Section 05).

bjbji will never use your personal data for any purpose that is incompatible with the purposes listed above without first notifying you and, where required, obtaining your explicit consent.

bjbji processes your personal data under one or more of the following legal bases, each of which is applied in good faith and documented internally:

• Contract performance: Processing is necessary to fulfil our contractual obligations to you as a registered bjbji player — including account management, game access, and payment processing.
• Legal obligation: Certain processing activities — particularly KYC verification, AML monitoring, and age verification — are required by applicable law. bjbji is obligated to perform these activities regardless of player preference.
• Legitimate interests: bjbji processes some data on the basis of its legitimate interests in operating a safe, fair, and commercially viable platform. This includes fraud prevention, security monitoring, and platform analytics. We conduct a balancing test to ensure our legitimate interests do not override your fundamental rights.
• Consent: Where processing is not required by contract or law — particularly for direct marketing communications and non-essential cookies — bjbji obtains your explicit, informed consent before processing begins. You may withdraw consent at any time by contacting [email protected].

bjbji does not sell your personal data. We share data only with carefully selected categories of third parties where sharing is necessary to deliver our services, meet legal obligations, or protect the integrity of the platform. All third-party data processors are bound by contractual obligations to handle your data securely and in accordance with this Policy.

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, Mastercard, and other payment partners receive the minimum identity and transaction data necessary to authorise and complete your financial transactions.
• KYC and identity verification providers: Specialist third-party services receive copies of your identity documents and biometric data solely for the purpose of verifying your identity and age in accordance with our legal obligations.
• Fraud and AML screening services: Transaction and identity data may be checked against fraud databases and sanctions lists maintained by third-party compliance providers.
• Game content providers: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive session-level technical data necessary to deliver and audit game outcomes. These providers do not receive your financial or identity documents.
• IT and hosting providers: bjbji uses trusted cloud infrastructure and server management providers who process data on our behalf under strict data processing agreements.
• Regulatory and law enforcement authorities: bjbji will disclose personal data to competent authorities where required to do so by law, court order, or regulatory directive. We will notify affected players of such disclosures where legally permitted to do so.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of bjbji's business, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer and of any changes to this Policy that result from it.

bjbji uses cookies and similar tracking technologies to operate the platform, remember your preferences, maintain your login session, and gather aggregate analytics data that helps us improve the player experience. The categories of cookies we use are described below.

• Strictly necessary cookies: These cookies are essential for the bjbji platform to function. They manage your session state after bjbji Login, maintain your language and currency preferences, and enable secure navigation. These cookies cannot be disabled without breaking core platform functionality.
• Functional cookies: These cookies remember your preferences such as display settings, recently viewed game categories, and notification preferences. They are not strictly necessary but improve your experience significantly.
• Analytics cookies: bjbji uses privacy-respecting analytics tools to understand aggregate patterns in how players navigate and use the platform. These cookies collect anonymised data and do not identify you personally.
• Security cookies: Certain cookies are used specifically to detect and prevent fraudulent activity, protect against session hijacking, and enforce account security policies including bjbji Login rate limiting.

bjbji does not use third-party advertising cookies, retargeting pixels, or cross-site tracking technologies. You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will impair platform functionality, including the ability to log in via bjbji Login.

Cookie data is retained only for the duration of your session (session cookies) or for a fixed period appropriate to the cookie's function (persistent cookies, maximum 12 months). Persistent cookies are renewed only where you actively continue to use the platform.

bjbji implements a multi-layered security architecture to protect your personal data from unauthorised access, disclosure, alteration, and destruction. Our security measures are reviewed and updated on a regular basis to address emerging threats.

• Encryption in transit: All data transmitted between your device and the bjbji platform is protected by 256-bit TLS/SSL encryption. This applies to account data, payment information, KYC documents, and session communications.
• Encryption at rest: Sensitive personal data and financial records stored on bjbji's servers are encrypted at rest using industry-standard AES-256 encryption. Identity documents are stored in an isolated, access-restricted vault.
• Access controls: Access to systems holding personal data is restricted on a need-to-know basis. All bjbji staff with data access undergo background verification and are bound by strict confidentiality obligations. Access logs are maintained and reviewed regularly.
• Password security: bjbji Login passwords are stored using a one-way cryptographic hash with salt. bjbji never stores plaintext passwords and support agents cannot retrieve or view your password.
• Fraud monitoring: bjbji's automated systems continuously monitor account activity for anomalies indicative of unauthorised access, credential stuffing, or account takeover attempts.
• Incident response: In the event of a data breach that poses a risk to your rights and freedoms, bjbji will notify affected players without undue delay and will take immediate remediation action.

bjbji retains personal data for the minimum period necessary to fulfil the purpose for which it was collected, subject to any mandatory retention periods imposed by applicable law. The retention schedule below outlines standard retention periods for major data categories.

Where data is no longer required and no legal retention obligation applies, bjbji will securely delete or irreversibly anonymise the data. Anonymised aggregate data — which can no longer identify any individual — may be retained indefinitely for statistical and platform improvement purposes.

bjbji recognises and respects the data rights held by players. The following rights are available to all registered bjbji users. To exercise any of these rights, please contact our support team at [email protected] with the subject line "Data Request". bjbji will respond to all valid requests within 30 days.

• Right of access: You may request a copy of all personal data that bjbji holds about you. We will provide this in a structured, commonly used format (typically PDF or CSV) within 30 days of your verified request.
• Right to rectification: If any personal data held by bjbji is inaccurate or incomplete, you have the right to request that we correct or complete it without undue delay.
• Right to erasure: You may request that bjbji delete your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent, or where you object to processing based on legitimate interests. This right is subject to any overriding legal obligations that require us to retain data.
• Right to restriction: You may request that bjbji restrict the processing of your personal data while a dispute about its accuracy or our legal basis for processing is being resolved.
• Right to data portability: Where processing is based on your consent or on contract performance and is carried out by automated means, you may request that we transfer your data to you or to another provider in a machine-readable format.
• Right to object: You may object at any time to processing based on bjbji's legitimate interests, including profiling for fraud prevention or platform analytics. bjbji will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent (such as marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.
• Right not to be subject to automated decisions: bjbji does not make solely automated decisions that produce significant legal or similarly significant effects on players without human review. Where automated tools flag an account for review, a trained compliance team member evaluates the case before any action is taken.

bjbji is strictly an adult platform. All players must be aged 21 years or older to register an account, access any games, or place any bets on the bjbji platform. This age restriction applies without exception to all players in Bangladesh and all other markets in which bjbji operates.

bjbji does not knowingly collect, store, or process personal data from individuals under the age of 21. Age verification is a mandatory step in the bjbji account registration and KYC process. Any account found to belong to a person under 21 will be immediately suspended, all balances will be frozen pending investigation, and the relevant data will be handled in accordance with applicable law.

• Players must be 21 years or older — no exceptions.
• Date of birth is collected at registration and verified against a government-issued ID document during KYC.
• If bjbji discovers that personal data of a person under 21 has been collected inadvertently, that data will be deleted as promptly as possible.
• Parents or guardians who believe a minor has registered on bjbji should contact [email protected] immediately for assistance.

The bjbji platform may contain references to third-party game providers, payment processors, and other services. While bjbji carefully selects its partners, we do not control the privacy practices of third-party websites or services, and this Privacy Policy does not extend to those external platforms.

• bjbji is not responsible for the data collection, storage, or processing practices of third-party providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Ezugi, even where their content is embedded within the bjbji platform.
• Payment processors including bKash, Nagad, Rocket, and Upay operate under their own privacy policies. bjbji recommends that players review the privacy documentation of any payment service they use.
• Any links to external websites that may appear in informational content on bjbji are provided for reference only. Clicking such links takes you away from the bjbji platform, and bjbji accepts no responsibility for the content or data practices of those external sites.
• bjbji performs due diligence on all third-party partners before onboarding them and requires contractual commitments to data security. However, bjbji cannot guarantee the practices of third-party systems once data leaves our direct control.

bjbji reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, the services we offer, or developments in applicable law. The date of the most recent revision is displayed at the top of this page and within the "Updated" badge in the table of contents.

• Minor updates: Corrections of typographical errors, clarifications that do not change the substance of the Policy, and formatting changes will be made without advance notice. The revision date will be updated accordingly.
• Material updates: Any changes that materially affect how we collect, use, or share your personal data, or that affect your rights as a bjbji player, will be communicated to registered players via the email address on their account at least 14 days before the changes take effect.
• Continued use as acceptance: Your continued use of the bjbji platform after the effective date of an updated Policy constitutes your acceptance of the revised terms. If you do not agree with any changes, you may close your account by contacting [email protected] before the effective date.
• Archived versions: Previous versions of this Privacy Policy are available on request from the bjbji support team.

For all privacy-related enquiries, data subject access requests, consent withdrawals, or complaints regarding bjbji's data practices, please contact the bjbji data protection team using the details below. All communications regarding personal data should be directed to our support team in writing.

• When submitting a data subject access request, please include your registered bjbji username, the email address on your account, and a clear description of the data you are requesting or the right you wish to exercise. This helps us verify your identity and process your request efficiently.
• bjbji may request additional identity verification before fulfilling a data access or erasure request to ensure that we do not disclose or delete data at the request of an unauthorised third party.
• If you are not satisfied with bjbji's response to a data-related complaint, you may escalate the matter to the relevant data protection authority in your jurisdiction.
• bjbji is committed to resolving all privacy complaints fairly and transparently. We treat every data request with the same seriousness, regardless of the volume of data involved or the nature of the request.