bdaji Privacy Policy
How We Protect Your Data
At bdaji, your privacy is not an afterthought — it is a foundation of how we operate. This Privacy Policy explains exactly what personal information we collect, why we collect it, how we use and protect it, and what rights you hold as a player on our platform.
Privacy Built into Everything We Do
bdaji handles every piece of player data with the same care we apply to platform security. These six principles guide every data-related decision we make .
Minimal Collection
We collect only the data strictly necessary to run your account and process your transactions.
No Data Selling
Your personal information is never sold, rented, or traded to third-party marketers under any circumstances.
Secure Storage
All stored data is protected with industry-standard AES-256 encryption and access-controlled servers.
Your Rights First
You can access, correct, or request deletion of your data at any time by contacting our support team.
Full Transparency
We tell you clearly what we collect, why we collect it, and with whom we may share it.
Regular Review
This policy is reviewed and updated regularly to reflect changes in our services and applicable data laws.
Introduction
This Privacy Policy ("Policy") describes how bdaji ("bdaji", "we", "us", "our") collects, uses, stores, discloses, and protects the personal information of all individuals ("Player", "User", "you") who access or use the bdaji platform, including all games, betting markets, payment services, promotions, and support services available at bdaji.io and its associated subdomains and mobile applications (collectively, the "Platform").
By registering an account, making a deposit, placing a wager, or otherwise using the Platform, you confirm that you have read this Policy and that you consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you must not use the Platform.
bdaji recognises that trust is the cornerstone of our relationship with every player. We are transparent about the data we collect, we limit collection to what is genuinely necessary, and we put robust technical and organisational safeguards in place to keep your information secure at all times.
Data We Collect
bdaji collects personal data across several categories, depending on how you interact with the Platform. The table below summarises the key categories of data we collect and the context in which each is gathered.
| Category | Data Collected | When Collected |
|---|---|---|
| Identity Data | Full legal name, date of birth, National ID / Passport number, profile photo (if submitted for KYC) | Registration and identity verification |
| Contact Data | Email address, mobile phone number, residential address | Registration and account updates |
| Financial Data | bKash / Nagad / Rocket / Upay account numbers, bank account details, transaction history, deposit and withdrawal records | Deposit, withdrawal, and KYC processes |
| Technical Data | IP address, device type, browser type and version, operating system, session duration, time-zone (BST UTC+6) | Automatically on Platform access |
| Usage Data | Games played, bets placed, bet amounts, win/loss records, bonus usage, feature interactions | During active gameplay and betting sessions |
| Communications Data | Live chat transcripts, email correspondence, support ticket content | When you contact customer support |
| Responsible Gaming Data | Deposit limit settings, cooling-off periods, self-exclusion status, reality check preferences | When responsible gaming tools are activated |
2.1 Data You Provide Voluntarily
The majority of personal data we hold is information you provide directly — during registration, when completing identity verification, when contacting support, or when updating your account profile. You are in control of this data and can update most of it directly from your account settings.
2.2 Data Collected Automatically
When you visit or use the Platform, certain technical and usage data is collected automatically via cookies, server logs, and analytics tools. This includes your IP address, device identifiers, browser information, and a record of the pages and features you interact with. This data helps us maintain platform security, diagnose technical issues, and improve the overall player experience.
2.3 Data from Third Parties
In some cases, bdaji may receive data about you from third parties, including identity verification service providers (who help us confirm the authenticity of KYC documents), payment processors (who confirm transaction status), and fraud prevention services. We only use third-party data in conjunction with data you have already provided, and only for the purposes described in this Policy.
How We Use Your Data
bdaji uses the personal data we collect exclusively for legitimate purposes directly related to the operation of the Platform and the delivery of a safe, fair, and enjoyable gaming experience. We do not use your data for any purpose unrelated to the operation of bdaji.
- Account creation and management: To register your account, verify your identity, maintain your profile, and manage your account settings and preferences.
- Payment processing: To securely process deposits and withdrawals via your chosen payment method (bKash, Nagad, Rocket, Upay, Visa, Mastercard, BRAC Bank, City Bank, or other supported channels) in Bangladeshi Taka (BDT).
- Gameplay and betting: To provide access to casino games and sports betting markets, record game outcomes, settle bets, and maintain accurate transaction histories.
- Fraud prevention and security: To detect and prevent fraudulent activity, money laundering, multi-accounting, bonus abuse, and other prohibited conduct as defined in our Terms & Conditions.
- Responsible gaming: To monitor for signs of problem gambling behaviour and to administer responsible gaming tools including deposit limits, cooling-off periods, and self-exclusion as requested by you.
- Customer support: To respond to your queries, resolve disputes, and provide technical assistance via live chat and email.
- Promotions and communications: To send you information about promotions, bonuses, and platform updates that are relevant to your account — only where you have consented to receive such communications.
- Legal and regulatory compliance: To comply with applicable anti-money-laundering (AML) obligations, record-keeping requirements, and any lawful requests from regulatory authorities.
- Platform improvement: To analyse aggregated, anonymised usage data to improve the Platform's features, performance, and user experience.
Legal Basis for Processing
bdaji processes your personal data on one or more of the following legal bases, depending on the specific processing activity:
- Contractual necessity: Processing that is required to perform the contract between you and bdaji — namely, the Terms & Conditions you agree to upon registration. This includes creating and managing your account, processing payments, and settling bets.
- Legal obligation: Processing that is necessary for bdaji to comply with applicable legal and regulatory requirements, including anti-money-laundering laws, age verification obligations, and record-keeping requirements.
- Legitimate interests: Processing carried out for the legitimate interests of bdaji or its players — including fraud detection, platform security, responsible gaming monitoring, and anonymised analytics — where those interests are not overridden by your privacy rights.
- Consent: Processing based on your specific, informed consent — primarily for marketing communications. Where consent is the basis for processing, you have the right to withdraw that consent at any time without affecting the lawfulness of prior processing.
Data Sharing and Disclosure
bdaji does not sell, rent, or trade your personal data to any third party. We share your personal information only in the limited circumstances described below, and only to the extent strictly necessary for the stated purpose.
5.1 Service Providers
bdaji works with a small number of carefully selected third-party service providers who assist in the operation of the Platform. These include payment processing partners (such as mobile financial service operators and bank partners), identity verification providers, cloud hosting and infrastructure providers, and customer support technology vendors. All service providers are contractually bound to process your data only on bdaji's instructions and to maintain appropriate security standards.
5.2 Game Providers
Where you play games supplied by third-party studios — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — certain technical data (such as your session token and game outcomes) is transmitted to the game provider's systems to facilitate gameplay. These providers process game-session data strictly for the purpose of delivering the game experience and are not permitted to use this data for independent marketing or profiling purposes.
5.3 Legal and Regulatory Disclosures
bdaji may disclose your personal data to law enforcement agencies, regulatory bodies, or other public authorities where we are legally required to do so, or where we reasonably believe disclosure is necessary to prevent illegal activity, protect the safety of players, or comply with a legal obligation. In such cases, bdaji will disclose only the minimum data required to satisfy the relevant legal requirement.
5.4 Business Transfers
In the event that bdaji undergoes a business reorganisation, merger, acquisition, or sale of assets, player data may be transferred as part of that transaction. You will be notified of any such transfer and any changes to this Policy that result from it.
Cookies and Tracking Technologies
bdaji uses cookies and similar tracking technologies to operate the Platform, improve your experience, and maintain account security. A cookie is a small text file placed on your device by the Platform when you visit. The types of cookies we use are described below.
| Cookie Type | Purpose | Essential? |
|---|---|---|
| Strictly Necessary | Maintain your login session, remember account preferences, prevent CSRF attacks, load-balance requests | Yes — cannot be disabled |
| Functional | Remember your language preference, game display settings, responsible gaming reminder intervals | No — can be disabled |
| Analytics | Understand how players navigate the Platform, identify pages with technical issues, measure feature adoption | No — can be disabled |
| Security | Detect suspicious login behaviour, flag unusual geographic access patterns, support fraud prevention systems | Yes — cannot be disabled |
You can manage your cookie preferences through your browser settings. Please note that disabling non-essential cookies will not affect your core ability to use the Platform, but may result in a reduced or less personalised experience. Strictly necessary and security cookies cannot be disabled as they are essential for the safe and functional operation of your account.
Data Retention
bdaji retains your personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The table below outlines our standard retention periods for key categories of data.
| Data Category | Retention Period | Reason |
|---|---|---|
| Account and identity data | Duration of account + 5 years after closure | AML compliance and legal record-keeping |
| Transaction records | 7 years from transaction date | Financial record-keeping obligations |
| KYC documents | 5 years from account closure | Regulatory compliance |
| Support communications | 3 years from last interaction | Dispute resolution and quality assurance |
| Technical and usage logs | 13 months from collection | Security monitoring and fraud detection |
| Marketing preferences | Until consent is withdrawn | Consent-based processing |
When your data is no longer needed for any of the above purposes, bdaji will securely delete or anonymise it so that it can no longer be linked to your identity. Anonymised, aggregated data may be retained indefinitely for statistical and analytical purposes.
Data Security
bdaji employs a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security framework includes the following controls:
- SSL/TLS encryption: All data transmitted between your browser or app and bdaji's servers is encrypted using industry-standard TLS 1.3 protocols. The padlock icon in your browser confirms this encryption is active during every session.
- Data encryption at rest: Sensitive stored data — including payment details and identity documents — is encrypted using AES-256 encryption on bdaji's servers.
- Access controls: Access to personal data within bdaji's systems is strictly limited to authorised personnel who require it to perform their specific job functions. All internal access is logged and audited.
- Two-factor authentication: bdaji supports and encourages two-factor authentication (2FA) on player accounts to add an additional layer of login security.
- Regular security testing: bdaji conducts regular penetration testing and security assessments of its platform infrastructure to identify and remediate vulnerabilities proactively.
- Incident response: In the event of a data security incident that poses a risk to player data, bdaji has a formal incident response procedure in place, including player notification where required.
Your Rights
As a player on the bdaji Platform, you have the following rights in relation to your personal data. To exercise any of these rights, please contact our support team at [email protected] or via live chat.
Right of Access
You have the right to request a copy of all personal data bdaji holds about you. We will provide this within 30 days of your verified request.
Right to Rectification
If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it without undue delay.
Right to Erasure
You may request deletion of your personal data where we no longer have a legal or contractual basis to retain it, subject to our regulatory obligations.
Right to Restrict Processing
In certain circumstances, you may request that we pause processing of your data while a dispute is being resolved or a correction is being made.
Right to Data Portability
Where processing is based on your consent or a contract, you may request your data in a structured, machine-readable format for transfer to another service.
Right to Withdraw Consent
Where processing is based on your consent (such as marketing emails), you may withdraw that consent at any time without affecting prior lawful processing.
Children and Minors
The bdaji Platform is strictly intended for adults aged 21 years and over. bdaji does not knowingly collect, process, or store personal data relating to individuals under the age of 21. If you are under 21, you must not use the Platform or submit any personal data to bdaji.
If bdaji becomes aware that personal data has been collected from an individual under the age of 21, we will take immediate steps to delete that data and close the associated account. If you believe that a person under 21 has registered an account or submitted data to bdaji, please contact us immediately at [email protected].
Third-Party Links
The bdaji Platform may contain references to third-party services such as payment providers (bKash, Nagad, Rocket, Upay) and game studios (Pragmatic Play, Evolution Gaming, Spribe, etc.). While bdaji takes care in selecting its partners, we are not responsible for the privacy practices or content of third-party websites or applications. If you visit or interact with any third-party service linked from the Platform, we encourage you to review that service's own privacy policy.
This Privacy Policy applies exclusively to data collected and processed by bdaji in connection with your use of the bdaji Platform. It does not extend to data collected independently by third-party services, even where those services are integrated into the Platform for game delivery or payment processing purposes.
Policy Updates
bdaji reserves the right to update or amend this Privacy Policy at any time. When material changes are made — for example, changes that significantly affect how we use your data or the rights available to you — we will notify registered players via the email address associated with their account and will update the "Last Updated" date at the top of this page.
Minor updates, such as typographical corrections or clarifications that do not materially affect your rights, may be made without direct notification. We encourage you to review this Policy periodically to stay informed of how bdaji is protecting your data. Continued use of the Platform following the publication of an updated Policy constitutes your acceptance of the revised terms.
Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy or the way bdaji handles your personal data, our dedicated support team is available 24/7 to assist you.
You may reach us by email at [email protected]. Please include your registered username and a clear description of your query or request so we can assist you as efficiently as possible. For data access, rectification, or erasure requests, we may need to verify your identity before processing your request — this is to ensure the security of your account and prevent unauthorised data disclosures.
bdaji aims to respond to all privacy-related requests within 30 calendar days of receipt. In complex cases where additional time is required, we will notify you of the extension and provide an estimated resolution date. All communications relating to data rights requests will be conducted in English via the email address registered to your account.
Ready to Play on Bangladesh's Trusted Platform?
Your data is protected. Your experience is our priority. Jump into 500+ games, live sports betting, and fast BDT payments — all in one place.