bdje Privacy Policy — How We Handle Your Personal Data

This Privacy Policy describes how bdje ("we", "us", "our") collects, uses, stores, protects, and shares personal data obtained from individuals ("you", "your", "Member") who access or use the bdje platform at https://bdje.io, including its associated services, betting markets, casino games, and customer support channels.

bdje is committed to handling your personal data with transparency, integrity, and respect. We recognise that the members who place their trust in our platform — across Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, and every corner of Bangladesh — deserve to know exactly how their information is being used. This policy is written in plain English to make that information as accessible as possible.

By registering for a bdje account, depositing funds, placing bets, or otherwise using the bdje platform, you confirm that you have read and understood this Privacy Policy and that you agree to the collection and use of your personal data as described herein. This Privacy Policy forms part of, and should be read alongside, bdje's Terms & Conditions and Responsible Gaming Policy.

bdje collects personal data through several channels, including direct registration, account activity, payment transactions, and automated technical means. The categories of personal data we collect are described below.

2.1 Data You Provide Directly

• Registration data: Full name, date of birth, email address, mobile phone number, residential address, and preferred username and password at the time of account creation.
• Identity verification (KYC) data: Copies of government-issued identification documents such as a National Identity Card (NID), passport, or driving licence; proof of address documents; and in some cases a photograph or selfie for biometric confirmation.
• Payment data: bKash account number, Nagad account number, Rocket account number, Upay account number, and partial card details (last four digits and card type) for Visa and Mastercard transactions. Full card numbers are not stored by bdje — they are processed directly by our PCI-DSS compliant payment partners.
• Communications data: Records of any messages, emails, or live chat conversations you have with bdje customer support, including the content of those communications and associated metadata such as timestamps and channel used.
• Responsible gaming data: Any deposit limits, session reminders, cooling-off periods, or self-exclusion requests you submit through your account settings or via our support team.

2.2 Data Collected Automatically

• Device and technical data: IP address, browser type and version, operating system, device type and model, screen resolution, and language settings.
• Usage data: Pages visited, time spent on each page, games played, bets placed, betting markets accessed, search queries entered, features interacted with, and session duration.
• Transaction data: Full records of all deposits, withdrawals, bets, game rounds, bonus credits, and account balance movements associated with your bdje account.
• Cookie and tracking data: Information collected through cookies, web beacons, pixels, and similar technologies as described in Section 6 of this policy.

2.3 Data Received From Third Parties

• Payment processors: Confirmation of transaction completion, payment method status, and fraud screening results from bKash, Nagad, Rocket, Upay, and card payment processors.
• Identity verification services: Results of automated document verification and identity cross-checking from third-party KYC providers.
• Fraud prevention services: Device fingerprinting scores, risk ratings, and flagged activity indicators from third-party fraud detection partners.

bdje uses the personal data we collect for the following specific purposes. We process your data only when we have a legitimate legal basis for doing so, as described in Section 4.

• Account management: To create, maintain, authenticate, and manage your bdje account, including verifying your identity and age as part of the KYC process.
• Payment processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, Mastercard, and other approved payment methods, and to maintain accurate records of all financial transactions on your account.
• Service delivery: To provide access to cricket betting markets, live casino games, slots, and all other features of the bdje platform.
• Customer support: To respond to account queries, resolve complaints, process responsible gaming requests, and communicate with you about your account.
• Legal and regulatory compliance: To comply with anti-money laundering (AML) obligations, fraud prevention requirements, age verification duties, and any other legal or regulatory obligations applicable to our operations.
• Fraud and security: To detect, investigate, and prevent fraudulent activity, account abuse, bonus misuse, and any other conduct that violates our Terms & Conditions or applicable law.
• Responsible gaming: To monitor gambling patterns for signs of problem gambling and to administer any responsible gaming tools or restrictions you have requested or that we are required to apply.
• Platform improvement: To analyse usage patterns, identify technical issues, and improve the performance, design, and functionality of the bdje platform.
• Marketing (with consent): To send you promotional offers, bonus notifications, news about new games or betting markets, and other marketing communications — but only where you have given explicit consent to receive such communications.
• Personalisation: To personalise your experience on the bdje platform, including displaying relevant game recommendations and promotions based on your activity history.

bdje processes your personal data only where a valid legal basis exists. The legal bases we rely upon are as follows:

• Contractual necessity: Processing that is necessary to perform the contract we have with you as a registered bdje member — including account creation, service delivery, and payment processing.
• Legal obligation: Processing that is required to comply with applicable laws and regulations, including AML obligations, age verification duties, and responses to lawful requests from competent authorities.
• Legitimate interests: Processing carried out in pursuit of bdje's legitimate business interests, including fraud detection, platform security, responsible gaming monitoring, and service improvement — provided those interests are not overridden by your rights and interests.
• Consent: Processing based on your explicit, freely given, informed consent — primarily for direct marketing communications and for the use of non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

bdje does not sell, rent, or trade your personal data to any third party. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate confidentiality and data protection obligations:

• Payment service providers: bKash, Nagad, Rocket, Upay, and card processing partners, for the purpose of processing deposits and withdrawals associated with your account.
• Identity verification providers: Third-party KYC and document verification services used to confirm your identity and age as required for account registration and ongoing compliance.
• Fraud prevention and security partners: Third-party fraud detection, device fingerprinting, and risk management service providers who help us identify and prevent fraudulent activity on the platform.
• Game content providers: Casino game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive limited technical data necessary for game delivery and fairness verification. These providers do not receive your financial or identity data.
• IT and infrastructure providers: Cloud hosting, content delivery, and cybersecurity service providers who support the technical operation of the bdje platform under binding data processing agreements.
• Legal and regulatory authorities: Where bdje is required by law, court order, or instruction from a competent authority to disclose personal data, we will do so to the extent required. We will notify you of any such disclosure where legally permitted to do so.
• Professional advisors: Legal counsel, accountants, and auditors who require access to personal data in connection with the services they provide to bdje, subject to professional confidentiality obligations.

bdje uses cookies and similar tracking technologies to ensure the platform functions correctly, to improve performance, and — with your consent — to deliver a more personalised experience. The following categories of cookies are used on the bdje platform:

• Strictly necessary cookies: These cookies are essential for the bdje platform to function. They enable core features such as session management, account authentication, security token validation, and payment form processing. These cookies cannot be disabled without severely impairing your ability to use the platform.
• Functional cookies: These cookies remember your preferences and settings — such as your preferred language, session time reminder settings, and responsible gaming tool configurations — to provide a more consistent experience across sessions.
• Analytical cookies: These cookies help bdje understand how members interact with the platform — including which pages are visited most frequently, where users encounter difficulties, and how long sessions typically last. This information is used to improve platform design and content. Analytical cookies are only deployed with your consent.
• Marketing and targeting cookies: These cookies are used to deliver relevant promotional content and to track the effectiveness of bdje's marketing campaigns. They are only deployed with your explicit consent and may be disabled at any time through your account settings or browser cookie preferences.

You may manage your cookie preferences at any time through your browser settings. Disabling certain cookies may affect the functionality of the bdje platform. For a complete list of the cookies used on the bdje platform and their individual purposes and retention periods, please contact [email protected].

bdje implements a comprehensive set of technical and organisational security measures to protect your personal data from unauthorised access, loss, disclosure, alteration, or destruction. Our security framework includes the following measures:

• SSL/TLS encryption: All data transmitted between your browser or device and the bdje platform is encrypted using SSL/TLS protocols, ensuring that your personal and financial data cannot be intercepted in transit.
• Encryption at rest: Sensitive data stored on bdje servers — including identity documents, payment details, and account credentials — is encrypted at rest using industry-standard encryption algorithms.
• Access controls: Access to personal data is restricted to bdje staff members and third-party service providers who require it to perform specific, authorised functions. All access is governed by role-based access controls and is logged for audit purposes.
• Two-factor authentication: bdje supports two-factor authentication (2FA) for member accounts to provide an additional layer of security beyond username and password.
• Regular security assessments: bdje conducts regular internal security reviews and, where appropriate, commissions independent penetration testing to identify and address vulnerabilities in our platform and infrastructure.
• Incident response: In the event of a data security incident that may affect your personal data, bdje has procedures in place to detect, contain, and assess the breach. Affected members will be notified promptly where required by applicable law.

bdje retains your personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention principles apply:

• Active account data: Personal data associated with an active bdje account is retained for the duration of the membership relationship and for a minimum of five years following account closure, in order to satisfy anti-money laundering record-keeping obligations.
• Transaction records: Full records of all financial transactions — including deposits, withdrawals, bets, and game rounds — are retained for a minimum of five years to comply with AML and financial reporting requirements.
• KYC and identity documents: Copies of identity documents submitted during the KYC process are retained for the same minimum five-year period following account closure.
• Support communications: Records of customer support interactions are retained for a period of three years from the date of the interaction, or longer where the communication relates to an unresolved dispute or legal matter.
• Marketing consent records: Records of your consent to receive marketing communications — including the date, time, and method by which consent was given — are retained for as long as we send you marketing material and for three years thereafter.
• Technical and usage data: Anonymised or pseudonymised usage and analytical data may be retained for longer periods for platform improvement purposes, provided it can no longer be used to identify you as an individual.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised using methods designed to prevent reconstruction of the original data.

As a bdje member, you have the following rights in relation to your personal data. To exercise any of these rights, please contact our data team at [email protected]. We will respond to all valid requests within 30 days.

• Right of access: You have the right to request a copy of the personal data that bdje holds about you, together with information about how it is being processed.
• Right to rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold about you. Many basic details can be updated directly through your account settings.
• Right to erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where processing is unlawful. This right is subject to our legal obligation to retain certain data as described in Section 8.
• Right to restriction of processing: You have the right to request that bdje restricts the processing of your personal data in certain circumstances, such as while a dispute about the accuracy of the data is being resolved.
• Right to data portability: You have the right to receive a copy of the personal data you have provided to bdje in a structured, commonly used, machine-readable format.
• Right to object: You have the right to object to the processing of your personal data where bdje relies on legitimate interests as the legal basis for processing, and to object to direct marketing at any time.
• Right to withdraw consent: Where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of prior processing.

The bdje platform is strictly intended for adults aged 21 and above. bdje does not knowingly collect, store, or process personal data belonging to individuals under the age of 21. Our registration process includes mandatory age verification steps to prevent underage access to the platform.

If bdje discovers or is notified that it has inadvertently collected personal data from an individual under the age of 21, we will take immediate steps to delete that data, close the associated account, and return any funds deposited in accordance with our verification procedures.

If you are a parent or guardian and believe that a minor under your care has registered on the bdje platform, please contact us immediately at [email protected] with relevant details. We will investigate and act promptly.

The bdje platform may, from time to time, contain references to or integrations with third-party services — such as game content providers, payment processors, and identity verification tools. While bdje carefully selects its third-party partners, we do not control the privacy practices of these independent organisations.

This Privacy Policy applies solely to data collected and processed by bdje directly. When you interact with a third-party service provider's systems — for example, when completing a bKash or Nagad payment — you are also subject to that provider's own privacy policy and terms of service. bdje encourages you to review the privacy policies of any third-party services you use in connection with your bdje account.

bdje accepts no responsibility or liability for the privacy practices, content, or security of any third-party service or website. The inclusion of any third-party integration on the bdje platform does not constitute an endorsement of that party's privacy practices.

bdje may send you promotional and marketing communications — including information about bonuses, new games, cricket betting promotions, BPL and IPL seasonal offers, Eid promotions, and platform updates — but only where you have given your explicit, informed consent to receive such communications.

Marketing communications may be sent via the following channels, subject to your consent preferences:

• Email to your registered email address
• SMS to your registered mobile number
• Push notifications via any bdje mobile application, if installed
• In-platform notifications displayed when you are logged into your bdje account

You may update your marketing communication preferences at any time through your account settings dashboard. Alternatively, each marketing email includes an unsubscribe link that you may use to opt out of future email communications. To opt out of SMS marketing, follow the instructions in the SMS message or contact [email protected].

Please note that opting out of marketing communications does not affect transactional communications — such as deposit confirmations, withdrawal processing updates, account security alerts, or support responses — which are sent as part of our contractual obligation to you as a bdje member.

bdje operates primarily in the Bangladesh market, and the majority of the personal data we collect is stored and processed within secure data centre facilities. However, certain third-party service providers — including cloud infrastructure partners, game content providers, and fraud detection services — may process data in jurisdictions outside Bangladesh.

Where personal data is transferred to a third country or international organisation, bdje ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that provided under applicable data protection principles. Such safeguards may include:

• Binding data processing agreements that require the recipient to protect your data in accordance with applicable data protection standards.
• Standard contractual clauses or equivalent transfer mechanisms that provide legally enforceable protections for transferred data.
• Transfers to recipients located in jurisdictions recognised as providing an adequate level of data protection.

For further information about the safeguards bdje relies upon for international data transfers, please contact us at [email protected].

bdje reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or the services we offer. The most current version of this Privacy Policy will always be available at https://bdje.io/privacy-policy, and the effective date at the top of the document will be updated accordingly.

Where bdje makes a material change to this Privacy Policy — such as a significant change to the categories of data we collect, the purposes for which we use your data, or the third parties with whom we share your data — we will endeavour to notify active Members by email to their registered address, or by displaying a prominent notice on the platform, prior to the change taking effect.

Your continued use of the bdje platform after the effective date of any amendment to this Privacy Policy constitutes your acknowledgement of the updated policy. If you do not agree with the amended policy, you should stop using the bdje platform and contact support to discuss closing your account.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way bdje handles your personal data, please contact our support team using the details below. We are committed to responding to all privacy-related enquiries promptly and transparently.

• Email: [email protected]
• Subject line for data rights requests: "Data Rights Request"
• Subject line for privacy enquiries: "Privacy Policy Enquiry"
• Support hours: 24 hours a day, 7 days a week
• Response time: We aim to acknowledge all privacy enquiries within 3 business days and to provide a full response within 30 days.
• Time zone: Bangladesh Standard Time (BST, UTC+6)

bdje takes all privacy enquiries seriously. If you are not satisfied with our response to your privacy concern, you may have the right to escalate your complaint to an applicable supervisory authority or independent dispute resolution body in your jurisdiction.