Privacy Policy — How bdjai Protects Your Personal Data

1 Introduction & Scope

This Privacy Policy describes how bdjai ("we", "us", "our") collects, processes, stores, and protects the personal information of individuals ("you", "your", "player") who access or use the bdjai platform at bdjai.app, including all associated games, sports betting markets, promotional services, and customer support channels.

By registering an account, depositing funds, or otherwise using the bdjai platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal information as described herein. If you do not agree with any part of this Privacy Policy, you should discontinue use of the platform and contact support@bdjai.app to request account closure.

This Privacy Policy applies to all personal data collected through:

• The bdjai website at bdjai.app and all associated subdomains.
• Mobile-optimised versions of the bdjai platform accessed via any browser on any device.
• Email, live chat, and telephone communications between you and the bdjai support team.
• Third-party identity verification and payment processing services used in connection with your bdjai account.

This policy does not apply to third-party websites or services that may be linked from within the bdjai platform. bdjai is not responsible for the privacy practices of any third-party provider, and we encourage you to review the privacy policies of any external service you interact with.

2 Data We Collect

bdjai collects personal information in two primary ways: data you provide directly when interacting with the platform, and data collected automatically as you use the service. The categories of personal data we collect are described below.

Data you provide directly:

• Registration data: Full legal name, date of birth, email address, mobile phone number, and residential address provided when opening a bdjai account.
• Identity verification (KYC) data: Copies of government-issued identity documents such as your National ID card, passport, or driver's licence; proof of address documents; and, where required, source-of-funds documentation.
• Payment data: Mobile wallet account numbers (bKash, Nagad, Rocket, Upay), bank account details, and card information provided when making deposits or withdrawals. Full payment card numbers are processed by our PCI-DSS compliant payment partners and are not stored on bdjai's servers.
• Communications data: Records of your correspondence with the bdjai support team via live chat, email, or any other channel, including the content of those communications and metadata such as timestamps.
• Responsible gaming data: Self-exclusion requests, deposit limits, time-out periods, and any other responsible gaming preferences you set within your account.

Data collected automatically:

• Device and technical data: IP address, browser type and version, operating system, device identifiers, screen resolution, and time zone settings.
• Usage data: Pages visited, games played, bets placed, session duration, click paths, search queries within the platform, and feature interactions.
• Transaction data: Full records of all deposits, withdrawals, wagers, game outcomes, bonus claims, and account balance changes associated with your bdjai account.
• Cookie and tracking data: Information collected via cookies, web beacons, pixel tags, and similar technologies as described in Section 5 of this policy.

3 How We Use Your Data

bdjai uses the personal data we collect for the following purposes. Where a specific legal basis for processing applies, it is noted alongside each purpose.

• Account creation and management: To create, verify, and maintain your bdjai account, including processing deposits and withdrawals. (Basis: contractual necessity.)
• Identity verification and KYC compliance: To verify your identity, confirm your age as 18 or above, and meet our legal obligations under anti-money laundering and responsible gaming regulations. (Basis: legal obligation.)
• Transaction processing: To process deposits, withdrawals, bonus credits, and all other financial transactions associated with your account. (Basis: contractual necessity.)
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, money laundering, bonus abuse, and other prohibited conduct as described in the Terms & Conditions. (Basis: legitimate interest; legal obligation.)
• Customer support: To respond to your queries, complaints, and requests submitted via live chat, email, or other support channels. (Basis: contractual necessity; legitimate interest.)
• Responsible gaming: To apply and enforce deposit limits, time-out periods, self-exclusion requests, and other responsible gaming measures you have activated, and to identify patterns of play that may indicate problem gambling. (Basis: legal obligation; legitimate interest.)
• Platform improvement: To analyse player behaviour, game performance, and site usage in order to improve the quality, reliability, and relevance of the bdjai platform. Data used for this purpose is aggregated and anonymised wherever possible. (Basis: legitimate interest.)
• Marketing communications: To send you promotional offers, bonus notifications, and platform updates via email or SMS, where you have opted in to receive such communications. You may unsubscribe at any time from your account notification settings or by contacting support@bdjai.app. (Basis: consent.)
• Legal compliance: To comply with applicable laws, respond to lawful requests from regulatory authorities, and enforce our legal rights. (Basis: legal obligation.)

4 Data Sharing & Third Parties

bdjai does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may, however, share your personal information with the following categories of third parties where it is necessary to operate the bdjai platform or comply with our legal obligations:

• Identity verification providers: Third-party KYC and age verification services used to confirm the identity and eligibility of players. These providers process identity documents and biometric data under strict confidentiality agreements and are prohibited from using your data for any purpose other than the verification service they provide to bdjai.
• Payment processing partners: Licensed payment service providers who process deposits and withdrawals on behalf of bdjai, including bKash, Nagad, Rocket, Upay, and banking partners such as BRAC Bank, City Bank, Dutch-Bangla Bank, and others. These providers receive only the payment data necessary to complete the transaction.
• Game software providers: Third-party game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi whose games are integrated into the bdjai platform. These providers may receive technical data such as your account identifier and game session data in order to deliver and log game results.
• Fraud detection and security services: Third-party providers that assist bdjai in detecting suspicious account activity, preventing fraud, and identifying potential money laundering. These providers process transaction data and technical identifiers under data processing agreements.
• Customer support platforms: Third-party live chat and helpdesk software providers used to deliver bdjai's 24/7 support service. Support conversation records may be stored on these providers' infrastructure under data processing agreements.
• Legal and regulatory authorities: Competent government authorities, law enforcement agencies, and courts where bdjai is required by law to disclose personal data. bdjai will only disclose data in response to a lawful request and will, where legally permissible, notify the affected player of such a request.
• Corporate successors: In the event of a merger, acquisition, or sale of assets, personal data held by bdjai may be transferred to the acquiring entity as part of that transaction, subject to the same privacy protections described in this policy.

All third-party service providers with whom bdjai shares personal data are required to implement appropriate technical and organisational security measures and to process personal data only on bdjai's documented instructions.

5 Cookies & Tracking Technologies

bdjai uses cookies and similar tracking technologies — including web beacons, pixel tags, and local storage objects — to operate the platform, maintain your session, remember your preferences, and understand how players use the site. This section explains the types of cookies we use and how you can manage them.

Types of cookies used by bdjai:

• Strictly necessary cookies: These cookies are essential for the bdjai platform to function. They maintain your login session, remember items in your bet slip, and enable core security features. These cookies cannot be disabled without affecting your ability to use the platform.
• Performance and analytics cookies: These cookies collect anonymised data about how players navigate the bdjai platform, which pages are visited most frequently, and where errors occur. This information is used exclusively to improve the quality and reliability of the platform.
• Functional cookies: These cookies remember your preferences — such as your preferred language, display settings, and notification options — so that you do not need to re-enter them on each visit.
• Fraud detection cookies: These cookies help bdjai identify and prevent fraudulent account activity by tracking behavioural patterns and device fingerprints across sessions.

bdjai does not use third-party advertising cookies or tracking pixels that share your data with external advertisers or ad networks.

Managing your cookie preferences: You can control non-essential cookies through your browser settings. Most modern browsers allow you to block or delete cookies, though disabling strictly necessary cookies will impair your ability to log in and use the bdjai platform. Please refer to your browser's help documentation for instructions on managing cookie settings.

6 Data Retention & Storage

bdjai retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, including compliance with legal, regulatory, accounting, and reporting obligations. The specific retention periods that apply to different categories of personal data are described below.

• Account and identity data: Retained for the duration of your account plus a minimum of 5 years following account closure, in compliance with anti-money laundering record-keeping requirements.
• Transaction and betting records: Retained for a minimum of 5 years from the date of each transaction to satisfy financial record-keeping obligations.
• KYC and verification documents: Retained for a minimum of 5 years following account closure or the date of the last transaction, whichever is later.
• Customer support communications: Retained for 3 years from the date of the last interaction, unless a longer period is required for the resolution of a dispute or legal matter.
• Marketing preferences and consent records: Retained for the duration of your account and for 3 years following account closure as evidence of consent or opt-out.
• Technical and usage logs: Retained for up to 12 months from the date of collection, after which they are anonymised or deleted.

All personal data is stored on servers protected by industry-standard physical and logical security controls. Where data is no longer required and the retention period has expired, it is securely deleted or anonymised in accordance with bdjai's data disposal procedures.

7 Your Privacy Rights

As a bdjai player, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact our support team via live chat or at support@bdjai.app. We will acknowledge your request within 5 business days and respond in full within 30 days. In exceptional cases where a request is complex or numerous, this period may be extended by a further 30 days, of which we will notify you in advance.

• Right of access: You have the right to request a copy of the personal data that bdjai holds about you, together with information about the purposes for which it is processed, the categories of data held, and the third parties with whom it has been shared.
• Right to rectification: You have the right to request that bdjai correct any inaccurate or incomplete personal data we hold about you. Many details — such as your contact email, mobile number, and notification preferences — can be updated directly from within your account settings.
• Right to erasure ("right to be forgotten"): You have the right to request that bdjai delete your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn your consent (and no other legal basis applies), or where the data has been unlawfully processed. Note that certain data must be retained to comply with legal obligations, even following an erasure request.
• Right to restriction of processing: You have the right to request that bdjai restrict the processing of your personal data in specific circumstances — for example, while the accuracy of the data is being contested, or while an objection to processing is being assessed.
• Right to data portability: Where bdjai processes your personal data on the basis of consent or contractual necessity, and that processing is carried out by automated means, you have the right to receive a structured, machine-readable copy of your data and to request that it be transferred to another service provider where technically feasible.
• Right to object: You have the right to object to bdjai's processing of your personal data where that processing is based on legitimate interest, including profiling for responsible gaming purposes. bdjai will cease processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where bdjai processes your personal data on the basis of your consent — for example, for marketing communications — you have the right to withdraw that consent at any time without affecting the lawfulness of processing that occurred before withdrawal.

8 Data Security Measures

bdjai implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security programme includes the following controls:

• Encryption in transit: All data transmitted between your device and bdjai's servers is encrypted using TLS 1.2 or higher (HTTPS). This ensures that your login credentials, payment details, and personal information cannot be intercepted during transmission.
• Encryption at rest: Sensitive personal data stored on bdjai's servers — including identity documents and payment details — is encrypted at rest using strong encryption algorithms. Passwords are stored only as salted cryptographic hashes and are never stored or transmitted in plain text.
• Access controls: Access to personal data within bdjai's systems is strictly limited to staff members and service providers who require it to perform their duties. Role-based access controls and multi-factor authentication are enforced for all administrative systems.
• Security monitoring: bdjai's systems are continuously monitored for anomalous activity, potential intrusions, and security incidents. Automated alerts are in place to detect and respond to threats in real time.
• Penetration testing and security audits: bdjai engages independent security professionals to conduct regular penetration tests and security audits of the platform and its underlying infrastructure.
• Incident response: In the event of a data breach that is likely to result in a risk to your rights and freedoms, bdjai will notify affected players without undue delay and take immediate steps to contain and remediate the breach.
• Staff training: All bdjai staff who handle personal data receive regular training on data protection principles, secure data handling procedures, and the recognition of social engineering and phishing attacks.

While bdjai takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security. You play an important role in protecting your own data by maintaining a strong, unique password for your bdjai account and enabling two-factor authentication.

9 Changes to This Policy

bdjai may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or the services we offer. The most current version of this policy will always be available at bdjai.app/privacy-policy, and the effective date at the top of the document will be updated to reflect the date of the most recent revision.

Where a change to this Privacy Policy is material — meaning it significantly affects the way we collect, use, or share your personal data — bdjai will make reasonable efforts to notify registered players via email or in-platform notification at least 14 days before the change takes effect. For non-material changes such as minor clarifications or formatting updates, the revised policy will take effect immediately upon publication.

Your continued use of the bdjai platform after any update to this Privacy Policy constitutes your acknowledgement of the revised policy. If you do not agree with any revised terms, you should stop using the platform and may request account closure by contacting support@bdjai.app.

If you have any questions, concerns, or complaints about this Privacy Policy or about how bdjai processes your personal data, please contact our support team at support@bdjai.app. We take all privacy enquiries seriously and will respond promptly in English to any concern you raise. If you are not satisfied with our response, you may have the right to lodge a complaint with a relevant data protection authority in your jurisdiction.