Privacy Policy for bdtjlapp

bdtjlapp collects personal information from you in several ways — directly when you register and use the platform, automatically as you browse and play, and in limited circumstances from third-party sources as part of our verification processes. The categories of personal data we collect are described below.

Information you provide directly:

• Registration data: Full legal name, date of birth, gender, email address, mobile phone number, and residential address when you create a bdtjlapp account.
• Identity verification documents: Copies of government-issued photo ID (National ID card, passport, or driving licence), proof of address documents, and payment method screenshots submitted as part of our KYC process.
• Financial data: Your bKash, Nagad, Rocket, or Upay mobile number and transaction references associated with deposits and withdrawals. We do not store full bank account numbers or card numbers on our own servers.
• Communications: Messages, complaints, and support tickets you submit to our customer service team via email or live chat.
• Preference settings: Responsible gaming limits, self-exclusion preferences, marketing opt-in status, and notification settings you configure within your account dashboard.

Information collected automatically:

• Device & technical data: IP address, browser type and version, operating system, device model, screen resolution, and time zone setting.
• Usage data: Pages visited, games played, session duration, bet amounts and outcomes, navigation path through the site, and feature interactions.
• Cookies and tracking data: Session cookies, persistent cookies, and similar technologies as described in the Cookies section of this Policy.
• Location data: Approximate geographic location derived from your IP address, used to enforce regional access controls and ensure compliance with applicable laws.

bdtjlapp does not sell, rent, or exchange your personal data with third-party advertisers or data brokers under any circumstances. We may, however, share your data with carefully selected categories of third parties where it is necessary to operate the platform, fulfil our legal obligations, or protect the rights and safety of our players.

Categories of third parties with whom data may be shared:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, and other financial service providers receive transactional data necessary to process your deposits and withdrawals. These providers operate under their own privacy policies and are subject to applicable Bangladeshi financial regulations.
• Game software providers: Third-party game studios (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) may receive an anonymised player session token to facilitate game play. These providers do not receive your full name, contact details, or financial information.
• Identity verification services: We use third-party KYC and AML screening services to validate the identity documents you submit. These providers process your data strictly on our behalf and are bound by confidentiality agreements.
• IT infrastructure and hosting providers: Our platform is hosted on secure cloud infrastructure. Hosting providers have access to server-level data but are contractually prohibited from accessing or using your personal data for any purpose other than providing infrastructure services.
• Regulatory and law enforcement authorities: bdtjlapp will disclose personal data to government bodies, regulators, or law enforcement agencies where required to do so by applicable law — for example, in response to a valid legal order, a court subpoena, or a regulatory request related to anti-money laundering investigations.

In the event that bdtjlapp undergoes a merger, acquisition, or sale of all or part of its business assets, your personal data may be transferred as part of that transaction. We will notify you in advance via email or an on-site notification if such a transaction materially affects the way your data is processed, and you will be given the opportunity to request deletion of your data before the transfer completes.

bdtjlapp retains your personal data for no longer than is necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by applicable law or legitimate business necessity. The following retention guidelines apply:

• Active account data: Retained for the full duration of your account's active status plus a minimum of five years after account closure, in line with anti-money laundering (AML) and financial record-keeping obligations.
• KYC and identity documents: Retained for a minimum of five years from the date of submission, or longer if required by a regulatory authority's instruction.
• Transaction records: Retained for a minimum of five years from the date of each transaction in accordance with financial compliance requirements.
• Customer support communications: Retained for three years from the date of resolution, to enable reference in the event of a related future complaint or dispute.
• Marketing opt-in records: Retained for the duration of your marketing consent, plus three years thereafter as evidence of your consent decision.
• Analytics data: Anonymised analytics data may be retained indefinitely as it cannot be linked back to any individual player.

All personal data stored by bdtjlapp is held on secure servers. Physical access to our servers is restricted to authorised personnel only. Digital access is controlled via role-based access management, multi-factor authentication, and regular security audits. Data backups are encrypted and stored in geographically separate locations to protect against loss due to hardware failure or natural disaster.

When your personal data is no longer required, bdtjlapp will securely delete or anonymise it in a manner that renders it irrecoverable. If you request deletion of your data before the end of the applicable retention period, we will restrict processing of that data to the minimum required for compliance purposes and will delete it as soon as the legal retention obligation expires.

bdtjlapp takes the security of your personal data seriously. We implement a layered approach to data security that combines technical, organisational, and procedural safeguards designed to protect your information against unauthorised access, accidental loss, destruction, or disclosure.

Technical safeguards in place include:

• 256-bit SSL/TLS encryption on all data in transit between your browser and our servers.
• AES-256 encryption for sensitive data at rest, including identity documents and financial records stored in our databases.
• Multi-factor authentication (MFA) required for all administrative access to production systems.
• Web Application Firewall (WAF) to detect and block common attack patterns including SQL injection, cross-site scripting (XSS), and brute-force login attempts.
• Continuous intrusion detection monitoring with automated alerts for anomalous access patterns or data exfiltration attempts.
• Regular penetration testing carried out by independent security specialists to identify and remediate vulnerabilities before they can be exploited.

Organisational safeguards include:

• Role-based access controls ensuring that team members can only access the data they need to perform their specific job function.
• Mandatory data protection and security awareness training for all staff who handle personal data.
• A documented incident response plan that sets out the steps to be taken in the event of a data breach, including notification of affected players within 72 hours where required.