bdjai Privacy Policy

This Privacy Policy ("Policy") describes how bdjai ("we", "us", "our") collects, uses, stores, and protects personal information provided by users ("you", "your", "Player") who access or use the bdjai online betting and casino platform at https://bdjai.io and all associated mobile interfaces, subdomains, and applications (collectively, the "Platform").

By registering an account on bdjai, completing the bdjai login process, or otherwise using the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you must not use the Platform.

This Policy applies to all registered and guest users of the bdjai Platform, regardless of the device or browser used to access the site. It covers data collected through the Platform only — it does not apply to third-party websites or services that may be linked to or integrated with the Platform.

bdjai collects personal data across several categories depending on how you interact with the Platform:

• Registration Data: When you create a bdjai account, we collect your full name, date of birth, mobile phone number, email address (where provided), and your preferred payment method.
• Identity Verification Data: To comply with our Know Your Customer (KYC) obligations, we may collect copies of government-issued identification documents such as your National Identity Card (NID), passport, or driving licence, together with a selfie or video verification image.
• Financial Data: Records of deposits, withdrawals, and transaction histories associated with your bdjai account. Payment method identifiers (such as your bKash or Nagad mobile number) are stored in hashed form. Full card numbers are never stored by bdjai.
• Gameplay and Betting Data: Records of your betting activity, game play sessions, wager amounts, winnings, bonus usage, and responsible gaming tool settings such as deposit limits and session time limits.
• Device and Technical Data: Your IP address, browser type and version, operating system, device identifiers, time zone, and referring URL. This data is collected automatically when you access the bdjai Platform.
• Communications Data: Records of your interactions with the bdjai customer support team via live chat or email, including the content of messages and the time and date of contact.
• Marketing Preferences: Your stated preferences regarding receipt of promotional communications from bdjai, including bonus notifications and platform updates.

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health information, unless you voluntarily provide such information in the context of a responsible gaming self-exclusion or problem gambling support request.

bdjai processes your personal data for the following purposes:

• Account Management: To create, maintain, and administer your bdjai account, including processing your bdjai login requests and keeping your account details accurate and up to date.
• Payment Processing: To facilitate BDT deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard, and to maintain accurate transaction records for your account history.
• Identity Verification: To verify your identity and age (21+) as required for regulatory compliance, and to prevent fraud, money laundering, and underage gambling on the Platform.
• Customer Support: To respond to your enquiries, resolve disputes, and provide technical assistance via our 24/7 live chat and email support channels.
• Responsible Gaming: To monitor gameplay patterns, implement responsible gaming tools you have requested, and reach out proactively where data indicates potential gambling harm.
• Platform Improvement: To analyse anonymised usage data and improve the functionality, performance, and user experience of the bdjai Platform.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates where you have opted in to receive such communications. You may withdraw consent at any time by contacting [email protected].
• Legal Compliance: To comply with applicable legal and regulatory obligations, respond to lawful requests from authorities, and enforce our Terms & Conditions.

bdjai processes your personal data on the following legal bases:

• Contract Performance: Processing necessary to perform our obligations under the Terms & Conditions you accepted on registration — including account management, payment processing, and game delivery.
• Legitimate Interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and analytics, where these interests do not override your fundamental privacy rights.
• Legal Obligation: Processing required for identity verification (KYC), anti-money laundering checks, and responding to lawful authority requests.
• Consent: Processing for direct marketing communications, where you have explicitly opted in. You may withdraw consent at any time without affecting the lawfulness of prior processing.

bdjai does not sell, rent, or trade your personal data to third parties. We share data only where necessary and only with the following categories of recipients, all of whom are contractually bound to process your data in accordance with this Policy and applicable data protection law:

• Payment Service Providers: bKash, Nagad, Rocket, Upay, Visa, and Mastercard, for the purpose of processing your BDT deposits and withdrawals. Only the minimum data required to complete each transaction is shared.
• Identity Verification Partners: Third-party KYC and age verification service providers who assist bdjai in confirming the identity and eligibility of registered players.
• Game Studio Providers: Licensed game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi, who may receive anonymised session data to support game functionality and fairness auditing.
• Technology and Hosting Providers: Cloud infrastructure and platform hosting providers who store Platform data in secure, encrypted environments. These providers act as data processors under bdjai's instructions only.
• Legal and Regulatory Authorities: Where required by applicable law, court order, or regulatory direction, bdjai may disclose personal data to relevant authorities. We will notify you of any such disclosure unless prohibited from doing so by law.

The security of your financial data is a top priority for bdjai. The following protections are in place for all payment-related data processed on the Platform:

• All payment data transmitted between your device and the bdjai Platform is protected using SSL/TLS encryption (minimum TLS 1.2).
• bdjai does not store full Visa or Mastercard card numbers. Card data is tokenised by our payment processor and the token alone is retained by bdjai for future transaction matching.
• bKash, Nagad, Rocket, and Upay mobile number identifiers associated with your account are stored in hashed, non-reversible form.
• Withdrawal requests are matched against your verified payment identity before processing, ensuring funds are returned only to accounts registered in your own name.
• All financial transaction records are retained for a minimum of seven (7) years to comply with applicable financial record-keeping requirements.

bdjai uses cookies and similar tracking technologies on the Platform. Cookies are small text files stored on your device that help the Platform function correctly and allow us to understand how players use the site. The following categories of cookies are used:

• Essential Cookies: Strictly necessary for the Platform to function. These include session cookies that maintain your bdjai login state, security tokens, and load-balancing identifiers. These cannot be disabled without preventing core Platform functionality.
• Functional Cookies: Remember your language preference (English), display settings, and responsible gaming tool configurations across sessions.
• Analytical Cookies: Collect anonymised data about how players navigate the Platform — pages visited, session duration, and error occurrences — to help us improve the user experience. No personally identifiable information is included in analytical cookie data.

bdjai does not use advertising cookies, cross-site tracking cookies, or third-party retargeting pixels. You can manage cookie settings through your browser's privacy controls. Disabling essential cookies will prevent you from completing the bdjai login and using the Platform.

bdjai retains your personal data for only as long as necessary to fulfil the purposes described in this Policy, subject to the following specific retention periods:

• Account Data: Retained for the duration of your active bdjai account, plus a period of five (5) years following permanent account closure, to comply with anti-money laundering and financial compliance obligations.
• Identity Verification Documents: Retained for five (5) years from the date of verification, or for the duration of your account plus five (5) years from closure, whichever is longer.
• Transaction Records: Retained for seven (7) years from the date of each transaction, in compliance with applicable financial record-keeping requirements.
• Customer Support Communications: Retained for three (3) years from the date of the last communication, to support dispute resolution and quality assurance.
• Gameplay and Betting Records: Retained for five (5) years for responsible gaming monitoring, dispute resolution, and regulatory compliance purposes.
• Marketing Consent Records: Retained for two (2) years from the date of your last interaction with a marketing communication, or until consent is withdrawn.

Following the expiry of the applicable retention period, personal data will be securely deleted or anonymised so that it can no longer be associated with any individual account.

As a bdjai player, you have the following rights in relation to your personal data:

• Right of Access: You may request a copy of the personal data bdjai holds about you, together with information about how it is processed. Requests will be fulfilled within 30 days.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data held in your bdjai account.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to Restrict Processing: You may request that bdjai restrict the processing of your personal data in certain circumstances, for example where you contest its accuracy or where processing is unlawful.
• Right to Data Portability: You may request a copy of your personal data in a structured, machine-readable format where processing is based on your consent or contract performance.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw consent at any time by contacting [email protected]. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
• Right to Object: You may object to processing based on legitimate interests, including profiling for responsible gaming monitoring, where your individual circumstances justify such objection.

To exercise any of the above rights, submit a written request to [email protected]. bdjai will respond within thirty (30) days of receiving a valid request. We may require you to verify your identity before actioning data rights requests.

bdjai implements a comprehensive suite of technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, alteration, or disclosure. These measures include:

• SSL/TLS encryption for all data in transit between your device and the bdjai Platform.
• AES-256 encryption for sensitive personal and financial data stored in our systems.
• Role-based access controls ensuring that only authorised bdjai personnel with a verified need can access player personal data.
• Regular internal and third-party security audits and penetration testing of the bdjai Platform infrastructure.
• Automated intrusion detection and real-time security monitoring of Platform systems.
• Staff training on data protection and information security best practices.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, bdjai will notify affected players without undue delay by email to your registered address and will take all reasonable steps to mitigate the impact of the breach.

The bdjai Platform is strictly for adults aged 21 years and above. bdjai does not knowingly collect personal data from any person under the age of 21. If you are under 21 years of age, you must not attempt to register an account, use the bdjai login, or otherwise access the Platform.

If bdjai becomes aware that personal data has been collected from a person under 21 years of age, that account will be immediately suspended, any associated balances will be reviewed in accordance with our Terms & Conditions, and the personal data will be deleted as promptly as possible. If you believe a minor has registered on the bdjai Platform, please report this immediately to [email protected].

bdjai reserves the right to update this Privacy Policy at any time. Material changes will be communicated to registered players by email to their registered address and via a prominent notice on the bdjai Platform at the time of the next bdjai login following the update. The effective date at the top of this document will be revised accordingly.

Your continued use of the bdjai Platform following publication of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not accept the changes, you must cease using the Platform and may request account closure in accordance with the Terms & Conditions.

For any questions, concerns, or requests relating to this Privacy Policy or the personal data bdjai holds about you, please contact our Data Support team: