Privacy Policy for bdtbaji

1. Information We Collect

When you register and use bdtbaji, we collect personal data from you in three principal ways: information you provide directly, information generated automatically by your use of the platform, and information received from third-party verification or payment partners. The categories of data we collect are described in detail below.

1.1 Information You Provide Directly

When you create a bdtbaji account or interact with our platform, you may be asked to provide:

• Identity data: Full legal name, date of birth, gender, and nationality.
• Contact data: Email address and Bangladeshi mobile phone number linked to your bKash, Nagad, Rocket, or Upay account.
• Verification documents: Copies of government-issued photo identification (such as a National ID card or passport) submitted during the know-your-customer (KYC) verification process.
• Financial data: Payment method details sufficient to process deposits and withdrawals (e.g., mobile banking account numbers, Visa or Mastercard details). Full card numbers are handled directly by our payment processing partners and are not stored on bdtbaji servers.
• Account preferences: Responsible gaming settings such as deposit limits, session time limits, and self-exclusion preferences that you configure within your account.
• Support communications: The content of any messages, emails, or live chat transcripts exchanged with our customer support team.

1.2 Information Collected Automatically

When you access bdtbaji, our systems automatically collect certain technical and behavioural data including:

• Device and browser data: IP address, device type, operating system version, browser type and version, screen resolution, and language settings.
• Usage data: Pages visited, games played, bet amounts placed, session duration, navigation paths, and click patterns within the platform.
• Transaction logs: A complete record of all deposits, withdrawals, bets placed, winnings credited, and bonus transactions associated with your account.
• Cookie and session data: Information stored in cookies and session tokens that keep you logged in and remember your preferences between visits. See Section 3 for full details on our cookie practices.

1.3 Information Received from Third Parties

In certain circumstances, bdtbaji may receive information about you from trusted third-party sources, including:

• Identity verification services that confirm the authenticity of documents you submit during KYC checks.
• Payment processors (including bKash, Nagad, Rocket, Upay, Visa, and Mastercard) who confirm transaction completion and flag potentially fraudulent payment activity.
• Fraud prevention and anti-money laundering screening services that check your details against sanctions lists and politically exposed persons (PEP) databases.

2. How We Use Your Data

bdtbaji uses the personal data we collect for clearly defined and lawful purposes only. The table below maps each data category to the specific purposes for which it is used on the platform.

bdtbaji does not use your personal data for automated decision-making that produces legal or similarly significant effects without human oversight. Where automated tools are used in fraud or responsible gaming monitoring, any flag generated is reviewed by a qualified member of our compliance team before action is taken.

We may also use aggregated, anonymised data — from which no individual player can be identified — to analyse platform performance, understand player behaviour at a population level, and improve our product and service offerings. Such anonymised data is not subject to this Privacy Policy as it does not constitute personal data.

3. Cookies & Tracking Technologies

bdtbaji uses cookies, local storage objects, and similar browser-based tracking technologies to deliver a functional, personalised, and secure experience. A cookie is a small text file placed on your device by a website you visit. The cookies used on bdtbaji fall into the following categories:

3.1 Strictly Necessary Cookies

These cookies are essential for the operation of bdtbaji and cannot be disabled without preventing the platform from functioning correctly. They include session authentication tokens that keep you logged in, CSRF protection tokens that prevent cross-site request forgery attacks, and cookies that remember your language and currency settings. No consent is required for strictly necessary cookies as they are required to provide the service you have requested.

3.2 Analytics Cookies

bdtbaji uses first-party analytics cookies to collect anonymised data about how players navigate the platform — which pages are visited most frequently, where users drop off, and how long sessions last on average. This information is used exclusively to improve platform design and user experience. The data collected by analytics cookies is aggregated and cannot be used to identify individual players.

3.3 Preference Cookies

Preference cookies remember choices you have made on the platform — such as your preferred display settings, notification preferences, and responsible gaming tool configurations — so that you do not have to re-enter them on each visit. These cookies do not track your activity outside of bdtbaji.

3.4 Managing Cookies

You can control and delete cookies through your browser settings at any time. Please be aware that disabling strictly necessary cookies will impair the functionality of bdtbaji and may prevent you from logging in or completing transactions. Most modern browsers provide detailed guidance on managing cookies in their help documentation.

4. Data Sharing & Third Parties

bdtbaji does not sell, rent, or trade your personal data to third parties for marketing or commercial purposes under any circumstances. We may, however, share specific and limited categories of personal data with trusted operational partners where such sharing is strictly necessary to deliver the services you have requested. All third-party partners with whom data is shared are contractually required to maintain data security standards consistent with this Privacy Policy.

The categories of third parties with whom bdtbaji may share your data include:

• Payment processors: bKash, Nagad, Rocket, Upay, Visa, and Mastercard require sufficient transactional data to process your deposit and withdrawal requests. Only the minimum data required to complete each transaction is shared.
• Identity verification providers: Third-party KYC services may receive copies of identity documents you submit during the verification process in order to confirm their authenticity. These providers are prohibited from using your data for any purpose beyond the specific verification task.
• Game content providers: Game studios and providers such as Pragmatic Play, Evolution Gaming, Spribe, Ezugi, Microgaming, and NetEnt may receive a player session token and game-relevant data to deliver their games within the bdtbaji environment. They do not receive your full identity or financial details.
• Fraud prevention and AML services: In order to fulfil our legal anti-money laundering and counter-terrorism financing obligations, we may submit player data to regulated screening services that check against sanctions lists and PEP databases.
• Legal and regulatory authorities: bdtbaji will disclose personal data to law enforcement agencies, regulatory bodies, or courts of competent jurisdiction when required to do so by applicable law, or when such disclosure is necessary to protect the rights, property, or safety of bdtbaji, its players, or the public.

5. Data Retention & Storage

bdtbaji retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following retention periods apply to the principal categories of data we hold:

• Account and identity data: Retained for the duration of your account and for a period of five years following account closure, in order to comply with anti-money laundering record-keeping obligations.
• Transaction records: All deposit, withdrawal, and betting transaction records are retained for a minimum of five years following the date of the transaction.
• Support communications: Retained for two years from the date of the last communication, or longer if the communication relates to an open dispute or legal matter.
• KYC documents: Retained for five years following account closure or the date of the last transaction, whichever is later.
• Analytics and usage data: Anonymised analytics data may be retained indefinitely as it cannot be linked to any individual player. Identifiable usage logs are deleted or anonymised within 12 months.
• Cookie data: Session cookies expire when your browser session ends. Persistent preference cookies expire within 12 months of their last renewal.

All personal data stored by bdtbaji is held on servers located within secure data centres. Data is encrypted at rest and access is restricted to authorised personnel on a strict need-to-know basis. When data reaches the end of its retention period, it is securely and irreversibly deleted or anonymised.

6. Your Privacy Rights

As a registered player on bdtbaji, you hold the following rights with respect to your personal data. To exercise any of these rights, please contact our support team at support@bdtbaji with the subject line "Privacy Rights Request". We will respond to all valid requests within 30 days.

• Right of access: You may request a copy of all personal data that bdtbaji holds about you. We will provide this in a clear, structured format free of charge.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected without undue delay.
• Right to erasure: In certain circumstances, you may request that bdtbaji delete your personal data. This right is subject to limitations where we are required to retain data to comply with a legal obligation (for example, anti-money laundering record-keeping requirements).
• Right to restrict processing: You may request that bdtbaji suspend the processing of your personal data in specific circumstances — for example, while the accuracy of data is being contested.
• Right to data portability: Where data is processed on the basis of your consent or a contract, you may request that it be provided to you in a commonly used, machine-readable format.
• Right to object: You may object to the processing of your personal data where that processing is based on bdtbaji's legitimate interests, unless we can demonstrate compelling legitimate grounds that override your interests.

7. Security Measures

bdtbaji implements a layered, defence-in-depth approach to data security. The technical and organisational measures we maintain include, but are not limited to, the following:

• Transport Layer Security (TLS): All data in transit between your browser or mobile device and bdtbaji's servers is protected by TLS 1.2 or higher encryption, preventing interception by third parties.
• Encryption at rest: Sensitive data fields — including identity document data, payment credentials, and account passwords — are encrypted at rest using industry-standard encryption algorithms. Passwords are stored as one-way cryptographic hashes; they are never stored or transmitted in plain text.
• Access controls: Access to systems that hold personal data is restricted to authorised personnel only, using role-based access control (RBAC) and multi-factor authentication (MFA). All access is logged and reviewed regularly.
• Intrusion detection: Our infrastructure is monitored continuously by automated intrusion detection and prevention systems that flag unusual access patterns and potential threats in real time.
• Regular security reviews: bdtbaji conducts periodic security assessments and vulnerability testing to identify and remediate potential weaknesses in our systems before they can be exploited.
• Staff training: All staff members with access to personal data receive regular training on data protection obligations, phishing awareness, and secure data handling practices.

While bdtbaji takes all reasonable precautions to protect your personal data, no online platform can guarantee absolute security against all possible threats. In the unlikely event of a data breach that affects your personal data, bdtbaji will notify affected players and relevant authorities in accordance with applicable legal obligations, without undue delay.

8. Contact & Policy Updates

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way in which bdtbaji handles your personal data, please contact our dedicated data privacy support team using the details below. We treat all privacy enquiries with urgency and will acknowledge your message within 48 hours and provide a substantive response within 30 days.

Support and privacy enquiries:
Email (plain text, not a link): support@bdtbaji
Subject line for privacy requests: "Privacy Policy Enquiry" or "Privacy Rights Request"

8.1 Policy Updates

bdtbaji reserves the right to update this Privacy Policy at any time. When we make material changes that affect how your personal data is processed, we will notify registered players through the platform's in-account notification system and update the "Last Updated" date at the top of this page. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

Your continued use of bdtbaji following the publication of any update to this Privacy Policy constitutes your acceptance of the revised policy. If you do not agree with any updated terms, you should discontinue your use of the platform and contact us to request account closure and data deletion where applicable.