Privacy Policy for bdlj — Your Data, Handled With Care

This Privacy Policy ("Policy") describes how bdlj ("bdlj", "we", "us", "our") collects, uses, stores, and protects the personal data of individuals ("you", "Player", "User") who access or use the bdlj online casino and sports betting platform at bdlj.io. This Policy applies to all registered players, prospective players who have initiated but not completed registration, and visitors to the bdlj website.

bdlj takes the privacy of its players seriously. We are committed to handling all personal data with transparency, integrity, and in accordance with applicable data protection principles. We collect only what is necessary to operate the platform, process transactions, verify identities, and comply with our legal obligations. We do not sell your personal data to third parties for marketing or advertising purposes.

This Policy should be read alongside bdlj's Terms & Conditions and Responsible Gaming Policy, both of which are published on the bdlj platform and incorporated into the overall legal framework governing your relationship with bdlj. If you have any questions about this Policy or about how your data is handled, please contact our support team at [email protected].

bdlj collects personal data across several categories, depending on your level of engagement with the platform. The categories of data we may collect include:

bdlj collects personal data through a combination of direct interactions with you, automated technical systems, and trusted third-party service providers. The primary collection methods are as follows:

• Direct Submission. You provide data directly when you complete the registration form, submit identity verification documents, make a deposit or withdrawal request, update your account profile, or contact our support team via live chat or email.
• Automated Platform Data. When you access the bdlj website or mobile platform, our servers automatically record technical data including your IP address, device identifiers, browser configuration, and session activity. This data is collected via server logs and analytics tools.
• Cookies and Tracking Technologies. bdlj uses cookies and similar technologies to maintain session state, remember preferences, detect fraud, and analyse platform usage patterns. A full description of our cookie practices is provided in Section 9 of this Policy.
• Payment Providers. When you transact via bKash, Nagad, Rocket, Upay, or a linked bank account, the relevant payment provider confirms the transaction to bdlj. bdlj receives only the confirmation data necessary to credit or debit your account — not your full payment credentials.
• Identity Verification Partners. bdlj works with third-party KYC (Know Your Customer) and AML (Anti-Money Laundering) service providers who assist in verifying the identity documents you submit. These providers process your identity data strictly under instruction from bdlj.
• Game Studios. Certified game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may share aggregated game session data with bdlj for the purpose of resolving disputes and managing game integrity.

bdlj processes your personal data for specific, clearly defined purposes. We do not process personal data in ways that are incompatible with the purpose for which it was originally collected. The primary purposes for which bdlj processes personal data are:

• Account Registration and Management. To create, maintain, and administer your bdlj player account, verify your identity, and ensure continued eligibility in accordance with our Terms & Conditions.
• Transaction Processing. To process deposits, withdrawals, and bonus credits through your chosen payment method — bKash, Nagad, Rocket, Upay, or a linked Bangladeshi bank account — and to maintain an accurate and auditable record of all financial activity on your account.
• Age and Identity Verification. To verify that you are at least 21 years of age and that your account details correspond to a real, verifiable individual, in compliance with our 21+ age restriction policy.
• Legal and Regulatory Compliance. To fulfil our obligations under applicable anti-money laundering laws, fraud prevention requirements, and any other legal obligation to which bdlj is subject, including responding to lawful requests from competent authorities.
• Customer Support. To respond to your enquiries, complaints, and support requests, and to maintain records of communications for quality assurance and dispute resolution purposes.
• Responsible Gaming. To monitor gameplay patterns for signs of problem gambling behaviour, to action responsible gaming requests (such as deposit limits and self-exclusion), and to comply with our obligations under our Responsible Gaming Policy.
• Platform Security and Fraud Prevention. To detect, investigate, and prevent fraudulent activity, cheating, money laundering, multi-accounting, and any other prohibited conduct on the bdlj platform.
• Service Improvement. To analyse aggregated usage data in order to improve platform performance, expand game offerings, and enhance the overall player experience for our Bangladeshi user base.
• Marketing Communications. Where you have given your consent, to send you promotional offers, bonus notifications, and news about upcoming events on the bdlj platform. You may withdraw this consent at any time. See Section 12 for full details.

Every instance of personal data processing by bdlj is grounded in a recognised legal basis. The principal legal bases on which bdlj relies are:

• Contractual Necessity. Processing that is necessary to perform the contract between you and bdlj — specifically, to operate your account, process your transactions, and deliver the gaming services you have requested — is carried out on the basis of contractual necessity.
• Legal Obligation. Processing carried out to comply with applicable law, including KYC, AML, and fraud prevention obligations, is performed on the basis of legal obligation.
• Legitimate Interests. Processing for purposes such as platform security, fraud detection, service improvement, and responsible gaming monitoring is carried out on the basis of bdlj's legitimate interests, provided those interests are not overridden by your rights and freedoms.
• Consent. Processing for direct marketing communications is carried out on the basis of your explicit consent. You may withdraw this consent at any time without affecting the lawfulness of processing carried out before withdrawal.

bdlj does not sell, rent, or trade your personal data to any third party for commercial gain. Data sharing is limited to the circumstances described below, and only to the extent strictly necessary for the stated purpose:

• Payment Processors. bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, and Sonali Bank receive the transaction data necessary to process your deposits and withdrawals. These providers operate under their own privacy frameworks and are responsible for the data they independently hold.
• KYC and AML Providers. Identity verification and anti-money laundering service providers receive your identity documents and associated data strictly for the purpose of verifying your identity and screening for financial crime. They act as data processors under instruction from bdlj.
• Game Studios and Technology Providers. Certified game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive your account identifier and game session data for the purposes of rendering games, recording results, and resolving game disputes. They do not receive your identity or financial data.
• IT Infrastructure and Security Providers. Cloud hosting, cybersecurity, and fraud prevention technology partners may process your data as part of delivering secure platform infrastructure. All such providers are bound by data processing agreements obligating them to protect your data.
• Legal and Regulatory Authorities. bdlj may disclose personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by applicable law, a court order, or other lawful legal process. bdlj will notify you of any such disclosure to the extent permitted by law.
• Business Transfers. In the event of a merger, acquisition, or sale of all or part of bdlj's business assets, your personal data may be transferred to the acquiring entity as part of that transaction, subject to the acquirer being bound by obligations no less protective than those set out in this Policy.

bdlj retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal or regulatory obligations. The following general retention periods apply:

• Active Account Data. Data relating to your active bdlj account — including identity, contact, financial, and gaming records — is retained for the full duration of your account relationship with bdlj.
• Post-Closure Retention. Following account closure, bdlj retains identity verification records, transaction history, and account data for a minimum period as required to comply with applicable legal, tax, and anti-money laundering obligations. This retention period is typically five years from the date of account closure, unless a longer period is required by law.
• Support Communications. Live chat transcripts and support email correspondence are retained for a period of two years from the date of the communication, or longer if required to resolve an ongoing dispute or complaint.
• Technical and Log Data. Server logs and automated technical data are typically retained for a period of 12 months, after which they are deleted or permanently anonymised.
• Marketing Data. If you have consented to receive marketing communications, your contact details are retained on our marketing list until you withdraw consent or request deletion.

When your data is no longer required for any legitimate purpose, it is securely deleted or permanently anonymised in a manner that prevents reconstruction of personally identifiable information.

bdlj implements a comprehensive, multi-layered approach to information security, designed to protect your personal and financial data from unauthorised access, disclosure, alteration, or destruction. Our security infrastructure includes the following measures:

• 256-Bit SSL/TLS Encryption. All data transmitted between your device and the bdlj platform is encrypted using industry-standard 256-bit SSL/TLS protocols, the same level of encryption used by leading international banking institutions.
• Encrypted Data Storage. Sensitive data fields — including passwords (stored as salted hashes), identity document references, and financial account details — are encrypted at rest using AES-256 encryption.
• Access Controls. Access to personal data within bdlj's operational systems is restricted on a strict need-to-know basis. All staff with access to player data are subject to confidentiality obligations and receive regular training on data protection responsibilities.
• Fraud Detection Systems. bdlj operates automated fraud detection and monitoring systems that flag unusual account activity, suspicious transaction patterns, and potential multi-accounting behaviour in real time.
• Regular Security Audits. Our platform infrastructure is subject to regular independent security assessments, penetration testing, and vulnerability scanning to identify and remediate potential weaknesses before they can be exploited.
• Incident Response. bdlj maintains a documented data breach response procedure. In the event of a security incident that poses a risk to your personal data, we will notify affected players and relevant authorities within the timeframes required by applicable law.

bdlj uses cookies and similar tracking technologies to ensure the platform functions correctly, to remember your preferences, to keep your session secure, and to understand how players interact with the platform in aggregate. The following cookie categories are used:

• Strictly Necessary Cookies. These cookies are essential for the bdlj platform to function. They manage your login session, maintain your account state between page views, and support core security functions. These cookies cannot be disabled without impairing the functionality of the platform.
• Functional Cookies. These cookies remember your preferences — such as your preferred language setting (English), display preferences, and recently accessed game categories — so that you do not need to reconfigure them on every visit.
• Analytics Cookies. bdlj uses anonymised analytics data to understand which sections of the platform are most popular, how players navigate between pages, and where technical issues arise. This data is used exclusively to improve the platform experience and is never linked back to individual identifiable profiles.
• Security and Fraud Prevention Cookies. These cookies assist our fraud detection systems by identifying unusual browsing patterns, detecting automated bot activity, and flagging account access from unexpected geographic locations.

You can manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will affect your ability to log in and use core platform features. bdlj does not use third-party advertising cookies or cross-site tracking technologies that serve ads on external websites.

As a bdlj account holder, you hold a number of rights with respect to the personal data that bdlj processes about you. bdlj is committed to honouring these rights in a timely and transparent manner. Your rights include:

• Right of Access. You have the right to request a copy of all personal data that bdlj holds about you, along with information about how it is being used and with whom it has been shared.
• Right to Rectification. If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated without undue delay.
• Right to Erasure. In certain circumstances, you have the right to request that bdlj delete all personal data we hold about you. Note that this right may be limited where bdlj is required to retain your data to comply with a legal obligation — for example, AML record-keeping requirements.
• Right to Restriction of Processing. You may request that bdlj restrict the processing of your data in certain circumstances — for example, while a dispute about the accuracy of your data is being resolved.
• Right to Data Portability. Where processing is carried out by automated means on the basis of your consent or contractual necessity, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Object. You have the right to object to bdlj's processing of your personal data where that processing is based on legitimate interests, including for the purposes of direct marketing.
• Right to Withdraw Consent. Where bdlj processes your data on the basis of your consent (primarily for marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing that took place before withdrawal.

To exercise any of the above rights, please contact the bdlj support team via live chat or by emailing [email protected]. bdlj will acknowledge your request within five business days and will endeavour to respond substantively within 30 days. Where a request is complex or numerous, this period may be extended by a further 30 days, with prior notification.

The bdlj platform is strictly intended for adults aged 21 years and above. bdlj does not knowingly collect, process, or retain personal data belonging to any individual under the age of 21. This age restriction applies without exception to all players accessing the platform from Bangladesh or any other jurisdiction.

If bdlj discovers or has reasonable grounds to believe that personal data has been collected from an individual under the age of 21 — whether through fraudulent registration or any other means — the following steps will be taken immediately:

• The relevant account will be suspended pending investigation.
• All personal data associated with the account will be deleted from bdlj's systems as promptly as technically practicable, subject to any legal retention requirements.
• Any net deposits remaining in the account will be returned to the payment method used, subject to verification that the account holder is the rightful owner of that payment method.
• Any winnings accrued will be forfeited in full.

If you are a parent or guardian and believe that your child has registered an account on bdlj, please contact us immediately at [email protected] with the subject line "Underage Account Report". We will investigate and resolve the matter promptly.

bdlj may send you promotional communications about bonuses, seasonal offers, new game launches, sporting event promotions (such as BPL, IPL, and T20 World Cup), and other platform news. All marketing communications from bdlj are sent in English and are targeted at players in the Bangladesh market.

Marketing communications are sent only where you have given your explicit consent, either at the point of registration or subsequently through your account settings. The channels through which bdlj may send marketing communications include:

• Email to the address registered on your bdlj account.
• SMS to the Bangladeshi mobile number registered on your bdlj account.
• Push notifications via the bdlj platform, if you have enabled notifications.

You may withdraw your consent to receive marketing communications at any time by updating your account preferences, clicking the unsubscribe link included in any marketing email, or contacting our support team at [email protected]. Withdrawal of marketing consent does not affect your ability to use the bdlj platform or receive service-related communications such as transaction confirmations, security alerts, and support responses.

bdlj will never use your contact details to send unsolicited third-party advertising. All promotional communications originate from bdlj and relate exclusively to the bdlj platform.

bdlj reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or operational requirements. All updates are published on this page at bdlj.io/privacy-policy and take effect immediately upon publication, unless otherwise stated.

Where a change to this Policy is material — meaning it significantly affects how we collect, use, or share your personal data — bdlj will notify registered players via email or a prominent notice on the platform at least 14 days prior to the change taking effect. Continued use of the bdlj platform following that notice period constitutes your acknowledgement of the updated Policy.

We encourage you to review this Privacy Policy periodically to stay informed about how bdlj protects your data. The effective date displayed at the top of this page will always reflect the date of the most recent revision.

If you have any questions, concerns, or complaints about this Privacy Policy, about the way bdlj handles your personal data, or if you wish to exercise any of your data rights as described in Section 10, please contact the bdlj Data Support Team using the details below:

bdlj will acknowledge all privacy-related enquiries within five business days. Substantive responses to formal data rights requests will be provided within 30 days of receipt, with the possibility of a single extension of a further 30 days where the request is particularly complex.