bdtj Privacy Policy

1. Information We Collect

When you register an account, use the bdtj platform, or interact with our customer support team, we collect certain categories of personal information. The scope of data collected depends on your level of engagement with the platform and the services you use. We collect data through three primary channels: information you provide directly, information generated automatically through your use of the platform, and information we receive from trusted third-party service providers.

1.1 Information You Provide Directly

The following personal data is collected directly from you during account registration, identity verification, or when you contact our support team:

• Full legal name as shown on your government-issued identification document.
• Date of birth, used to verify that you are 18 years of age or older.
• Mobile phone number registered in Bangladesh.
• Email address used for account communications and notifications.
• Mobile financial service account details (bKash, Nagad, Rocket, or Upay) used for deposit and withdrawal processing.
• National Identity Card (NID) number or passport number submitted during KYC verification.
• Copies of identity documents, proof of address, and payment method ownership documents submitted for KYC purposes.
• Any correspondence, complaints, or support requests submitted to the bdtj support team.

1.2 Information Collected Automatically

When you access bdtj.org or use our platform, we automatically collect certain technical and behavioural data to operate the service securely and improve your experience:

• IP address and approximate geographic location derived from IP data.
• Device type, operating system, browser type, and browser version.
• Session data including login timestamps, session duration, and pages visited.
• Betting activity, game history, transaction records, and wagering patterns.
• Referral source (i.e., how you arrived at bdtj.org).
• Cookie identifiers and similar tracking technologies (see Section 4).

1.3 Information from Third Parties

In limited circumstances, bdtj may receive personal information about you from trusted third-party sources, including:

• Payment service providers (bKash, Nagad, Rocket, Upay) who confirm transaction status and account ownership during deposit and withdrawal processing.
• Identity verification and KYC service providers who assist in validating the authenticity of identity documents.
• Fraud prevention and anti-money laundering screening services that cross-reference user data against watchlists and risk databases.
• Analytics providers who supply aggregated, anonymised data about platform usage trends.

2. How We Use Your Data

bdtj processes your personal data for specific, defined purposes. We do not use your data in ways that are incompatible with the purposes listed below. The legal basis for each processing activity is identified alongside its purpose.

bdtj does not use automated decision-making or profiling that produces legal or similarly significant effects on users without human review. Where automated systems flag an account for fraud, bonus abuse, or responsible gaming intervention, a human member of the compliance team reviews the flag before any account action is taken.

3. Data Sharing & Disclosure

bdtj does not sell or rent your personal data to any third party. We share your data only in the specific circumstances described in this section, and only to the extent necessary for each stated purpose.

3.1 Service Providers and Technology Partners

bdtj engages a limited number of carefully vetted third-party service providers who process personal data on our behalf to help us deliver the platform. These providers are contractually bound to process data only in accordance with our instructions and to maintain appropriate data security standards. Categories of service providers include:

• Payment processing partners (bKash, Nagad, Rocket, Upay) for transaction execution and verification.
• Game software providers (including Pragmatic Play, Evolution Gaming, Spribe, and others) who power specific games available on the bdtj platform. These providers may receive session identifiers and game activity data for the purpose of game delivery and dispute resolution.
• Identity verification and KYC service providers who validate user identity documents.
• Cloud infrastructure and hosting providers on whose servers bdtj platform data is stored and processed.
• Analytics platform providers who process anonymised session and usage data.

3.2 Legal and Regulatory Disclosure

bdtj may disclose your personal data to law enforcement agencies, regulatory bodies, financial intelligence units, or courts of competent jurisdiction where we are legally required or compelled to do so. This includes disclosures required in connection with anti-money laundering investigations, fraud investigations, and official legal proceedings. In such cases, bdtj will disclose only the minimum personal data necessary to satisfy the legal requirement.

3.3 Business Transfers

In the event that bdtj undergoes a merger, acquisition, restructuring, or sale of all or substantially all of its assets, your personal data may be transferred to the acquiring entity as part of that transaction. We will notify affected users of any such transfer via the email address registered on their account, and the acquiring entity will be required to honour the terms of this Privacy Policy in relation to your data.

3.4 No Third-Party Advertising

bdtj does not share your personal data with advertising networks, social media platforms, or data aggregators for the purpose of displaying targeted advertising to you on other websites or applications. Any promotional communications you receive from bdtj are sent directly by bdtj and are not mediated through third-party advertising infrastructure.

4. Cookies & Tracking Technologies

bdtj uses cookies and similar tracking technologies on bdtj.org to operate the platform, maintain your login session, remember your preferences, and analyse how users interact with the site. This section explains what types of cookies we use and why.

4.1 What Are Cookies?

Cookies are small text files that are stored on your device when you visit a website. They allow the website to recognise your device on subsequent visits and to remember certain information about your session. Cookies are widely used across the internet and are not inherently harmful. They do not contain executable code and cannot access other files on your device.

4.2 Types of Cookies Used by bdtj

4.3 Managing Cookies

You may configure your browser to block or delete cookies at any time. The method for doing so varies by browser — consult your browser's help documentation for specific instructions. Please note that disabling essential cookies will prevent you from logging in to your bdtj account and using core platform features. Disabling analytics or preference cookies will not affect your ability to use the platform but may result in a slightly degraded experience.

5. Data Retention

bdtj retains personal data for as long as is necessary to fulfil the purpose for which it was collected, and for as long as required by applicable legal and regulatory obligations. The following retention periods apply to the main categories of personal data we hold:

Following the expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be associated with any identified or identifiable individual. Anonymised and aggregated data may be retained indefinitely for statistical and analytical purposes.

6. Data Security

bdtj takes the security of your personal data seriously. We implement a range of technical and organisational security measures designed to protect your data against unauthorised access, disclosure, alteration, or destruction. These measures include, but are not limited to:

• 256-bit SSL/TLS encryption for all data transmitted between your device and bdtj servers.
• Encryption of sensitive data fields (including identity document data and payment credentials) at rest in our databases.
• Role-based access controls ensuring that bdtj staff can access only the personal data necessary for their specific job function.
• Multi-factor authentication (MFA) required for all staff access to systems containing personal data.
• Regular security assessments, penetration testing, and vulnerability scanning of our platform infrastructure.
• Automated monitoring systems that detect and alert on anomalous access patterns or potential security incidents in real time.
• Formal data breach response procedures with defined escalation paths and notification timelines.

While bdtj implements robust security measures, no platform can guarantee absolute security against all possible threats. You are also responsible for keeping your account credentials secure. If you believe your account has been accessed without your authorisation, contact the support team immediately at [email protected].

7. Your Privacy Rights

bdtj recognises and respects your rights in relation to your personal data. The following rights are available to all registered users of the platform. To exercise any of these rights, please submit a written request to [email protected]. We will acknowledge your request within 5 business days and provide a substantive response within 30 days of receipt.

7.1 Right of Access

You have the right to request a copy of all personal data that bdtj holds about you. This includes your account registration data, KYC records, transaction history, and support correspondence. We will provide this data in a commonly used electronic format upon receipt of a verified access request.

7.2 Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it. For minor corrections such as updating a contact number or email address, you may make changes directly within your account profile. For changes to identity data (name, date of birth), a formal rectification request and supporting documentation will be required.

7.3 Right to Erasure

You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where the data has been processed unlawfully. Please note that certain categories of data — particularly financial transaction records and KYC documentation — must be retained for legally mandated periods regardless of an erasure request. In such cases, we will inform you of the specific legal basis for retaining the data and will delete all other data that is not subject to a legal hold obligation.

7.4 Right to Restrict Processing

In certain circumstances, you have the right to request that bdtj restrict the processing of your personal data — for example, while the accuracy of data is being contested, or while an objection to processing is being assessed. During a processing restriction, we will continue to store your data but will not actively use it except for the purposes of storage and for establishing, exercising, or defending legal claims.

7.5 Right to Data Portability

Where bdtj processes your personal data on the basis of your consent or for the performance of a contract, and where that processing is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller.

7.6 Right to Object

You have the right to object to bdtj processing your personal data for direct marketing purposes at any time, with immediate effect. You also have the right to object to processing carried out on the basis of legitimate interests, though bdtj may continue processing if we can demonstrate compelling legitimate grounds that override your interests.

8. Policy Updates & Contact

8.1 Updates to This Policy

bdtj reviews and updates this Privacy Policy periodically to reflect changes in the platform, applicable law, or data processing practices. When we make material changes to this policy, we will notify registered users via the email address held on their account at least 14 days before the changes take effect. The effective date shown at the top of this document will be updated accordingly. Your continued use of the bdtj platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms.

For minor, non-material updates — such as corrections to typos, clarifications of existing practices that do not change your rights, or additions of new contact details — we may update the policy without advance notification, though the effective date will still be revised.

8.2 Children's Privacy

bdtj is strictly an adult platform. We do not knowingly collect, process, or store personal data belonging to individuals under the age of 18. If we become aware that an account has been registered by a person under 18, we will immediately close the account and permanently delete all associated personal data, except where retention is required by law. If you believe that a minor has registered an account on bdtj, please notify us immediately at [email protected].

8.3 Contact the Privacy Team

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way bdtj handles your personal data, please contact our privacy team using the details below. We are committed to resolving all privacy-related queries promptly, professionally, and in full compliance with applicable data protection principles.