Your Privacy Matters at bdjl

1 Introduction

bdjl ("we", "us", "our") operates the online casino and sports betting platform accessible at bdjl.lat (the "Platform"). We are committed to protecting the privacy and personal data of every player who registers and interacts with our Platform. This Privacy Policy ("Policy") describes in plain, accessible English how bdjl collects, uses, stores, discloses, and safeguards personal information relating to players based in Bangladesh and elsewhere.

This Policy applies to all personal data processed in connection with the Platform, including data collected during account registration, deposits and withdrawals, gameplay activity, promotional participation, customer support interactions, and general browsing of the bdjl website. It should be read alongside our Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference.

By registering a bdjl account or continuing to use the Platform after this Policy has been published, you confirm that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not agree with any part of this Policy, you must not use the Platform.

This Policy was last reviewed and updated on 1 January 2026. Previous versions are available on request by contacting support@bdjl.lat.

2 Personal Data We Collect

bdjl collects personal data in two broad categories: data you provide to us directly, and data we collect automatically as a result of your use of the Platform. The specific categories are set out in the table below.

Category	Examples of Data Collected	Source
Identity Data	Full legal name, date of birth, national identity card (NID) number, passport number, photograph (where submitted for verification)	Provided by you during registration or verification
Contact Data	Mobile phone number (Bangladeshi), email address, city/district of residence (e.g., Dhaka, Chittagong, Sylhet)	Provided by you during registration or account updates
Financial Data	bKash/Nagad/Rocket/Upay account numbers, Dutch-Bangla or BRAC Bank account details, transaction reference numbers, deposit and withdrawal history	Provided by you during payment processing; received from payment providers
Account Data	Username, hashed password, account balance, bonus balance, wagering progress, self-exclusion or limit settings	Generated by the Platform upon registration and gameplay
Technical Data	IP address, device type, operating system, browser type and version, screen resolution, session duration, referring URL	Collected automatically via server logs and analytics tools
Usage Data	Pages visited, games played, bets placed, game results, time and date of activity, feature interactions	Collected automatically during Platform use
Communications Data	Content of support tickets, live chat transcripts, email correspondence, complaint records	Provided by you when you contact bdjl support
Marketing Preferences	Email and SMS opt-in/opt-out status, preferred promotional categories, language preference	Provided by you via account settings or inferred from Platform behaviour

We do not knowingly collect special category data (such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data) unless this is strictly required for age verification or regulatory compliance purposes, in which case it will only be processed with your explicit consent and will be deleted once verification is complete.

3 How We Collect Your Data

bdjl collects personal data through the following primary channels:

• Direct interactions: Data you enter into registration forms, account verification uploads, deposit and withdrawal requests, support chat windows, and email communications sent to bdjl.
• Automated technologies: Cookies, web beacons, server-side logging, and analytics scripts that record technical and usage data as you navigate the Platform. See Section 7 (Cookies & Tracking) for full details.
• Payment processors: Confirmation data returned by bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, and BRAC Bank following successful transaction processing. This data is limited to confirmation references and account identifiers necessary to match payments to your bdjl account.
• Identity verification providers: Where bdjl uses a third-party KYC (Know Your Customer) service to verify your identity documents, that provider may return a verification status and document summary to bdjl. The full document image is processed by the KYC provider under their own privacy obligations and is not stored on bdjl servers beyond the verification window.
• Game studios: Game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may return session data (game ID, bet amounts, outcomes, timestamps) to bdjl's systems as part of the integrated game platform. This data is used for account reconciliation, dispute resolution, and responsible gaming monitoring.

4 How We Use Your Personal Data

bdjl uses personal data collected from players for the following clearly defined purposes:

• Account management: Creating, maintaining, and administering your bdjl account, including processing login credentials, updating account details, and managing account security settings.
• Identity and age verification: Confirming that you are at least 21 years of age and are the person you represent yourself to be, in accordance with our Terms & Conditions and responsible gaming obligations.
• Payment processing: Facilitating BDT deposits and withdrawals via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, and BRAC Bank, and maintaining an accurate record of all financial transactions associated with your account.
• Platform delivery and personalisation: Providing access to casino games, cricket betting markets, slots, and other Platform features; personalising your dashboard and game recommendations based on historical play patterns.
• Fraud prevention and security: Detecting and preventing fraudulent activity, money laundering, duplicate account creation, underage gambling, and other prohibited conduct as defined in our Terms & Conditions.
• Responsible gaming: Monitoring gameplay patterns for signs of problem gambling behaviour and, where appropriate, applying player protection measures such as deposit limit enforcement, cooling-off periods, or self-exclusion.
• Customer support: Responding to player queries, complaints, and support requests; maintaining records of support interactions for quality assurance and dispute resolution purposes.
• Legal and regulatory compliance: Meeting obligations under applicable anti-money-laundering, fraud prevention, and data protection laws; responding to lawful requests from regulatory or law enforcement authorities.
• Direct marketing (with consent): Sending promotional emails, SMS messages, and in-Platform notifications about bonuses, new games, seasonal promotions (e.g., BPL, Eid, Pohela Boishakh offers), and Platform updates — but only where you have opted in and have not subsequently withdrawn consent. See Section 12 for full details.
• Analytics and Platform improvement: Analysing aggregated and anonymised usage data to identify trends, improve Platform performance, enhance user experience, and guide product development decisions.

5 Legal Basis for Processing

bdjl processes your personal data on the following legal bases, depending on the purpose of each processing activity:

• Contract performance: Processing your account data, financial data, and gameplay data is necessary to fulfil bdjl's contractual obligations to you as a registered player under our Terms & Conditions.
• Legal obligation: Processing for identity verification, age verification, anti-money-laundering checks, and responses to lawful authority requests is required by applicable law and cannot be waived.
• Legitimate interests: Processing for fraud prevention, platform security, customer support quality assurance, and aggregated analytics is conducted on the basis of bdjl's legitimate business interests, provided these interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing for direct marketing communications (email, SMS, in-Platform push notifications) and for the use of non-essential cookies is conducted on the basis of your freely given, specific, informed, and unambiguous consent. You may withdraw this consent at any time without detriment to your account status.

6 Sharing Your Personal Data

bdjl does not sell, rent, or trade your personal data to unaffiliated third parties for their own marketing or commercial purposes. Your data is shared only in the limited circumstances set out below:

• Payment service providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, and BRAC Bank receive only the transaction-specific data required to process your deposit or withdrawal. They are contractually bound to process this data solely for payment fulfilment purposes.
• Identity verification partners: A third-party KYC provider receives your identity document images and personal details for the sole purpose of confirming your identity and age. KYC data is processed under a data processing agreement with strict confidentiality and retention obligations.
• Game studio providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other integrated studios receive your player session token and game-specific identifiers to facilitate gameplay and return results. These providers do not receive your full identity, contact, or financial data.
• IT and infrastructure providers: Hosting, server management, and cybersecurity service providers who maintain the technical infrastructure of the Platform. All such providers operate under data processing agreements that restrict use of your data to infrastructure maintenance purposes only.
• Legal and regulatory authorities: Where bdjl is required by law, court order, or the directive of a competent authority to disclose personal data, we will comply with that obligation. Where permitted by law, we will notify you of such disclosure.
• Business transfers: In the event that bdjl undergoes a merger, acquisition, or sale of all or part of its business assets, player data may be transferred to the acquiring entity as part of that transaction. You will be notified in advance of any such transfer and given the opportunity to request account closure.

7 Cookies and Tracking Technologies

7.1 What Are Cookies?

Cookies are small text files placed on your device by websites you visit. They are widely used to make websites work efficiently, to remember your preferences, and to provide analytical information to website operators. bdjl uses cookies and similar tracking technologies (including web beacons and local storage) on the Platform.

7.2 Types of Cookies Used by bdjl

• Strictly necessary cookies: These cookies are essential for the Platform to function. They enable core features such as session authentication, account security, and payment flow continuity. These cookies cannot be disabled without rendering the Platform non-functional.
• Functional cookies: These cookies remember your preferences and settings (such as your display language preference and responsible gaming limits) to provide a more personalised experience. They are session-persistent but do not track behaviour across third-party websites.
• Analytics cookies: These cookies collect anonymised data about how players navigate the Platform — which pages are visited most frequently, where users encounter errors, and how long sessions last. This data is used exclusively to improve Platform performance and user experience.
• Marketing cookies: Where you have consented, these cookies help bdjl deliver promotional content and bonus offers relevant to your gaming preferences. They may track which promotional banners you have viewed or interacted with on the Platform.

7.3 Managing Cookies

You can control and manage cookies through your browser settings. Most modern browsers allow you to refuse non-essential cookies, delete existing cookies, or receive a notification before a new cookie is placed. Please note that disabling certain cookies may impact the functionality of the Platform, including your ability to log in or complete transactions. bdjl's strictly necessary cookies cannot be deactivated via browser settings without preventing Platform access.

8 Data Retention

bdjl retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention guidelines apply:

• Active account data: Retained for the full duration of your active account registration and for a period of five (5) years following account closure, to enable dispute resolution and meet legal record-keeping obligations.
• Financial transaction records: Retained for a minimum of seven (7) years from the date of each transaction in accordance with applicable financial record-keeping requirements.
• Identity verification documents: Retained for the period of account activity and for five (5) years following account closure. Document images submitted via third-party KYC services are deleted by the KYC provider once verification is confirmed, typically within 30 days of submission.
• Support communications: Retained for three (3) years from the date of the most recent interaction, to support quality assurance and dispute resolution processes.
• Analytics and usage data (anonymised): Retained indefinitely in anonymised, aggregated form for Platform improvement purposes. Anonymised data cannot be linked back to any individual player.
• Self-exclusion records: Retained indefinitely to prevent re-registration during an active exclusion period and to honour voluntary self-exclusion requests made under our Responsible Gaming Policy.

Once a retention period expires, bdjl will securely delete or anonymise the relevant personal data using industry-standard deletion methods. Deletion is permanent and irreversible.

9 Data Security

bdjl takes the security of your personal data seriously and applies a layered approach to protecting information held on the Platform. Our security measures include, but are not limited to:

• 256-bit SSL/TLS encryption on all data transmitted between your device and bdjl's servers. This applies to account login, deposit and withdrawal flows, and all API communications with game studio and payment providers.
• Encrypted storage for all sensitive data fields, including passwords (stored as salted cryptographic hashes — plain-text passwords are never stored), financial account identifiers, and identity document references.
• Access controls: Personal data is accessible only to bdjl staff and contractors who have a documented operational need to access it. Access is governed by role-based permissions and is logged for audit purposes.
• Intrusion detection and monitoring: bdjl's infrastructure is monitored continuously for unusual activity, attempted unauthorised access, and data breach indicators. Security patches are applied on a rolling basis.
• Staff training: All bdjl personnel with access to personal data receive regular training on data protection obligations and security best practices.

While bdjl takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security against all possible threats. In the event of a data breach that is likely to result in risk to your rights or freedoms, bdjl will notify affected players and relevant authorities in accordance with applicable data breach notification obligations.

10 Your Data Rights

As a bdjl player, you hold the following rights in relation to your personal data. To exercise any of these rights, contact the bdjl support team at support@bdjl.lat with the subject line "Data Rights Request" and a description of the right you wish to exercise. bdjl will respond within 30 days of receipt.

Where a rights request is declined — for example because fulfilling it would conflict with a legal retention obligation — bdjl will explain the reason clearly and in full. You have the right to escalate unresolved complaints to a relevant data protection authority.

11 Minors and Age Gating

The bdjl Platform is strictly for adults aged 21 years and above. bdjl does not knowingly collect, store, or process personal data relating to any individual under the age of 21. Where bdjl discovers or is notified that personal data belonging to a minor has been collected — whether because a minor misrepresented their age during registration or for any other reason — bdjl will immediately suspend the associated account, delete the personal data in question, and return any deposited funds to the originating payment method.

Parents and guardians who believe that a minor may have registered on the Platform are encouraged to contact bdjl immediately at support@bdjl.lat. bdjl takes all such reports seriously and will act on them without delay. We also recommend that parents and guardians install internet filtering software on devices accessible to minors in order to restrict access to gambling websites at the network level.

12 Direct Marketing Communications

bdjl may send you promotional communications about bonus offers, new game releases, cricket and sports betting markets (including BPL, IPL, and T20 fixtures), seasonal promotions tied to Bangladeshi cultural events (such as Eid and Pohela Boishakh), and other Platform updates. These communications will be sent only where you have explicitly opted in to receive them during registration or via your account settings.

You may withdraw your consent to direct marketing at any time by:

• Updating your communication preferences in your bdjl account settings panel.
• Clicking the unsubscribe link included at the footer of every promotional email sent by bdjl.
• Sending a withdrawal-of-consent request to support@bdjl.lat with the subject line "Marketing Opt-Out".

Withdrawal of marketing consent will take effect within 5 business days. It will not affect any transactional communications that bdjl is required to send you for account management purposes (e.g., deposit confirmations, withdrawal notifications, security alerts, and policy update notices). These operational messages are sent regardless of marketing opt-in status and cannot be disabled while your account is active.

13 International Data Transfers

bdjl's primary server infrastructure is located in data centres with strong data protection standards. In limited circumstances, personal data may be processed by service providers whose infrastructure is located in other countries — for example, game studio API servers operated by Pragmatic Play, Evolution Gaming, or Microgaming may be hosted outside Bangladesh.

Where personal data is transferred internationally, bdjl ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that described in this Policy. These safeguards include contractual data processing agreements with all international service providers that impose binding obligations regarding data security, confidentiality, and processing restrictions.

By using the Platform, you acknowledge and consent to these limited international data transfers where they are necessary for the delivery of Platform services.

14 Changes to This Privacy Policy

bdjl reviews this Privacy Policy periodically and will update it to reflect changes in our data practices, legal obligations, or Platform functionality. The effective date at the top of this Policy will be updated each time a revision is made.

Where changes are material — meaning they significantly affect how your data is collected, used, or shared — bdjl will notify you via email (to the address registered on your account) and via a prominent in-Platform notification at least 14 days before the revised Policy takes effect. Continued use of the Platform after the effective date of a revised Policy constitutes your acceptance of the updated terms.

Where changes are minor or administrative in nature (such as correcting typographical errors, updating contact details, or clarifying existing language without altering the substance of any provision), bdjl may update the Policy without advance notice beyond updating the effective date shown at the top of this page. We encourage you to review this Policy periodically to stay informed of how bdjl protects your personal data.

If you object to any changes in a revised Privacy Policy, you should cease using the Platform and may request account closure by contacting support@bdjl.lat. Your data will be retained following account closure only to the extent required by the retention periods described in Section 8.

15 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way bdjl handles your personal data, please reach out to our support team. We are committed to resolving all data-related enquiries promptly, professionally, and in full compliance with our obligations.

Our support team is available around the clock, seven days a week, including during Bangladeshi public holidays. Response times may be slightly longer during major sporting events such as BPL or ICC T20 World Cup fixtures, but all data rights requests will be processed within the 30-day window regardless of Platform activity levels.

This Privacy Policy was last reviewed by the bdjl compliance team on 1 January 2026 and is effective from that date.