bdjlt Privacy Policy

bdjlt is committed to protecting the privacy and personal data of every player who registers an account, makes a deposit, places a bet, or otherwise interacts with the bdjlt platform. This Privacy Policy has been prepared in accordance with recognised international data protection principles and is intended to give players across Bangladesh — including those in Dhaka, Chittagong, Sylhet, Rajshahi, Khulna, Barisal, Rangpur, Mymensingh, and Cox's Bazar — a clear and complete picture of how their personal information is handled.

This Privacy Policy applies to all personal data collected through the bdjlt website at https://bdjlt.io, through the mobile-optimised platform, through correspondence with the bdjlt support team, and through any other channel by which a player or prospective player provides personal data to bdjlt. It applies to all players regardless of the payment method used — whether bKash, Nagad, Rocket, Upay, Visa, or Mastercard.

This policy should be read in conjunction with bdjlt's Terms and Conditions, which are available at /terms-conditions, and the Responsible Gaming policy available at /responsible-gaming. Together, these documents set out the full framework governing your use of the bdjlt platform.

For the purposes of this Privacy Policy, bdjlt acts as the data controller in respect of all personal data collected from players through the platform. As data controller, bdjlt determines the purposes for which personal data is collected and the manner in which it is processed.

All data protection enquiries, access requests, correction requests, deletion requests, and complaints should be directed to the bdjlt data protection contact at [email protected]. Please clearly identify the subject of your enquiry as a "Data Protection Request" in your correspondence to ensure it is routed to the appropriate team member without delay.

bdjlt collects personal data across three broad categories: data you provide directly, data collected automatically during your use of the platform, and data received from third-party service providers involved in the operation of the platform.

Data You Provide Directly:

• Registration data: Full legal name, date of birth, residential address, email address, and mobile phone number provided during account creation.
• Identity verification data: Copies of government-issued identification (national identity card, passport, or driving licence), proof of address documents (utility bills, bank statements), and selfie or liveness verification images where required as part of the KYC process.
• Payment data: Mobile wallet numbers (bKash, Nagad, Rocket, Upay), card details (Visa/Mastercard — processed securely via PCI-DSS compliant payment gateways; bdjlt does not store full card numbers), and transaction history including deposit and withdrawal records.
• Support correspondence: Any personal data contained in messages, emails, live chat transcripts, or other communications you send to the bdjlt support team.
• Responsible gaming declarations: Information you provide when setting deposit limits, requesting cooling-off periods, or applying for self-exclusion.

Data Collected Automatically:

• Device and technical data: IP address, device type, operating system, browser type and version, screen resolution, and device identifiers.
• Session and usage data: Pages visited, time spent on each page, navigation path, game sessions initiated, bets placed, game outcomes, and session duration.
• Cookie data: Information stored in cookies and similar tracking technologies, as described in Section 7 of this policy.
• Geolocation data: General geolocation data (country and city level) derived from your IP address to assist with jurisdiction verification and platform localisation.

Data Received from Third Parties:

• Payment provider confirmation: Transaction confirmation data received from bKash, Nagad, Rocket, Upay, Visa, and Mastercard confirming the status of deposit and withdrawal transactions.
• KYC verification services: Identity verification outcomes from third-party KYC service providers where bdjlt uses such providers to assist with document authentication.
• Fraud and risk data: Risk scoring and fraud alert data from third-party fraud prevention services used to protect the integrity of the platform and the security of player accounts.

bdjlt uses the personal data it collects for the following purposes. Each purpose is tied to a specific legal basis as described in Section 5 of this policy.

bdjlt does not use personal data for automated decision-making that produces legal or similarly significant effects without human oversight, except where such processing is necessary for fraud prevention in which case affected players may request human review of any automated decision that impacts their account.

bdjlt processes personal data on the following legal bases:

• Contract performance: Processing that is necessary to fulfil bdjlt's obligations to you under the Terms and Conditions, including account creation, processing of deposits and withdrawals, and delivery of gaming services.
• Legal obligation: Processing that is required to comply with applicable laws, including anti-money laundering regulations, identity verification requirements, and responsible gaming obligations.
• Legitimate interest: Processing that is necessary for bdjlt's legitimate business interests where those interests are not overridden by your fundamental rights and freedoms. This includes fraud prevention, platform security, analytics, and the improvement of bdjlt's services.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent. This applies primarily to marketing communications. You may withdraw consent at any time by contacting [email protected] or using the unsubscribe mechanism in any marketing email. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

bdjlt does not sell, rent, or trade personal data. Personal data may be shared with the following categories of third parties solely to the extent necessary for the stated purpose:

• Payment service providers: bKash, Nagad, Rocket, Upay, Visa, Mastercard, and associated payment gateway operators receive transaction data necessary to process deposits and withdrawals to and from your registered account.
• KYC and identity verification providers: Third-party identity verification services receive copies of identity documents and verification images solely for the purpose of confirming player identity in compliance with applicable anti-money laundering and age verification obligations.
• Fraud prevention and security services: Risk and fraud detection service providers receive device data, IP addresses, and transaction metadata to assist bdjlt in identifying and preventing fraudulent activity on the platform.
• Game content providers: Third-party game studios including Evolution Gaming, Ezugi, Pragmatic Play, NetEnt, Microgaming, and Spribe may receive a pseudonymous player identifier and session token to enable delivery of live casino and slot game content. These providers do not receive your full name, contact details, or payment information.
• IT infrastructure and cloud service providers: Hosting, database, and content delivery service providers that form part of bdjlt's technical infrastructure may process personal data as data processors operating under binding data processing agreements with bdjlt.
• Legal and regulatory authorities: bdjlt may disclose personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by applicable law or by a binding legal order. bdjlt will notify affected players of such disclosures where it is legally permitted to do so.

All third parties with whom personal data is shared are required to implement appropriate technical and organisational security measures and are prohibited from using the data for any purpose other than that for which it was disclosed.

bdjlt uses cookies and similar tracking technologies on the platform to ensure the website functions correctly, to recognise returning users, to analyse platform usage, and where you have consented, to deliver relevant promotional communications. The following categories of cookies are used:

• Strictly necessary cookies: These cookies are essential to the operation of the bdjlt platform and cannot be disabled. They include session management cookies that keep you logged in during an active betting session and security cookies that protect against cross-site request forgery.
• Functional cookies: These cookies remember your preferences and settings, such as your language preference and display options, to provide a more personalised experience on return visits.
• Analytics cookies: These cookies collect anonymised data about how players interact with the platform — including pages visited, time on site, and navigation paths — to help bdjlt improve the platform's design and content. bdjlt uses privacy-respecting analytics tools that do not share individual-level data with advertising networks.
• Marketing cookies: Where you have given explicit consent, marketing cookies allow bdjlt to track your engagement with promotional content and to tailor future promotional communications to your stated preferences. These cookies are not activated without your prior consent.

You may manage or disable non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the bdjlt platform, including your ability to maintain an active logged-in session.

bdjlt retains personal data for as long as is necessary to fulfil the purposes set out in this Privacy Policy and to comply with applicable legal and regulatory obligations. The following retention periods apply as a general guide:

• Active account data: Personal data associated with an active player account is retained for the duration of the account's active status and for a minimum of five (5) years following account closure, to meet anti-money laundering record-keeping requirements.
• Transaction records: Records of all deposits, withdrawals, bets, and game outcomes are retained for a minimum of five (5) years from the date of each transaction.
• KYC and identity verification documents: Copies of identity documents are retained for a minimum of five (5) years following account closure in compliance with applicable anti-money laundering regulations.
• Support correspondence: Records of customer support interactions are retained for three (3) years from the date of the interaction.
• Marketing consent records: Records of marketing consent and withdrawal of consent are retained for the duration of the account relationship and for three (3) years thereafter.
• Self-exclusion records: Records of self-exclusion requests are retained indefinitely to prevent re-registration by excluded players.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification. Where data must be retained beyond these standard periods due to an ongoing legal dispute, regulatory investigation, or legal hold, it will be retained for the duration of the relevant proceeding.

As a bdjlt player, you hold the following rights in respect of your personal data. To exercise any of these rights, please contact [email protected] with the subject line "Data Rights Request" and include your registered email address and a description of the right you wish to exercise. bdjlt will respond to all data rights requests within thirty (30) days of receipt.

• Right of access: You have the right to request a copy of the personal data bdjlt holds about you, together with information about the purposes for which it is processed, the categories of data involved, and the recipients with whom it has been shared.
• Right to rectification: You have the right to request the correction of any inaccurate or incomplete personal data bdjlt holds about you. Please note that corrections to KYC data will require re-verification of the amended information.
• Right to erasure: You have the right to request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (and no other legal basis applies), or where the data has been unlawfully processed. This right is subject to overriding legal obligations — bdjlt may be required to retain certain data for anti-money laundering and regulatory compliance purposes notwithstanding a deletion request.
• Right to restriction: You have the right to request that bdjlt restricts the processing of your personal data in certain circumstances, including where you contest the accuracy of the data or where you have objected to processing pending verification of bdjlt's legitimate interests.
• Right to data portability: Where processing is based on your consent or on the performance of a contract, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to object: You have the right to object to the processing of your personal data where such processing is based on bdjlt's legitimate interests. bdjlt will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests, or unless the processing is necessary for the establishment, exercise, or defence of legal claims.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to the withdrawal.

The bdjlt platform is strictly intended for adults aged 21 years and above. bdjlt does not knowingly collect personal data from any individual under the age of 21. Age verification is a mandatory component of the account registration and KYC process, and bdjlt reserves the right to request documentary proof of age at any stage.

If bdjlt becomes aware that personal data has been collected from an individual under the age of 21, that data will be deleted as expeditiously as possible, the relevant account will be permanently closed, and any funds held in the account will be handled in accordance with applicable legal requirements.

Parents and guardians who believe that a minor in their care has registered an account on bdjlt or has accessed the platform using an existing account are strongly encouraged to contact [email protected] immediately. bdjlt takes reports of underage access with the utmost seriousness and will act promptly on any such report.

bdjlt implements a comprehensive set of technical and organisational security measures designed to protect personal data against unauthorised access, accidental loss, destruction, and disclosure. Key measures include:

• 256-bit SSL/TLS encryption applied to all data in transit between player devices and bdjlt servers.
• At-rest encryption for all databases containing personal data and payment records.
• Role-based access controls that restrict employee and contractor access to personal data on a strict need-to-know basis.
• Multi-factor authentication required for all internal system access by bdjlt staff and contractors.
• Regular penetration testing conducted by independent third-party security firms to identify and remediate vulnerabilities before they can be exploited.
• Continuous security monitoring with automated alerts for anomalous access patterns, unusual transaction volumes, and potential account compromise events.
• Incident response procedures that govern the detection, containment, investigation, and notification processes in the event of a data security incident.

While bdjlt employs industry-standard security practices, no security system can guarantee absolute protection against all threats. Players are encouraged to use strong, unique passwords for their bdjlt accounts and to contact [email protected] immediately if they suspect unauthorised access to their account.

The bdjlt platform may contain references to third-party game providers whose game interfaces are rendered within the bdjlt environment. While bdjlt takes care to work with reputable third-party providers, bdjlt does not control and is not responsible for the data practices of these providers in respect of any data they may independently collect through their own systems.

Players are encouraged to review the privacy policies of any third-party game providers whose content they access through the bdjlt platform. Where a provider's privacy practices give rise to concern, players should contact [email protected] so that bdjlt can review the relevant provider relationship.

bdjlt reserves the right to update this Privacy Policy at any time to reflect changes in applicable law, changes in our data processing practices, or changes in the services we offer. Where changes are material — particularly changes that affect the categories of data collected, the purposes for which it is processed, or the rights available to players — bdjlt will provide advance notice via the email address registered to your account and will display a prominent notice on the platform prior to the changes taking effect.

The effective date at the top of this Privacy Policy identifies the version currently in force. We encourage you to review this policy periodically. Your continued use of the bdjlt platform following the effective date of an updated policy constitutes your acknowledgement of the changes described therein. If you do not accept the updated policy, you may close your account by contacting [email protected].

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by bdjlt, please contact us using the details below. All data protection correspondence should clearly identify the nature of the enquiry to ensure it reaches the appropriate team member.

• Email: [email protected] (plain text — not a clickable link)
• Subject line for data requests: "Data Protection Request — [Your Registered Email]"
• Live Chat: Available 24 hours a day, 7 days a week via the bdjlt platform
• Response time: All written data protection enquiries are acknowledged within 48 hours and responded to in full within 30 calendar days

bdjlt's support team is available in English and serves players from across Bangladesh. Whether you are based in Dhaka, Chittagong, Sylhet, Rajshahi, Khulna, Barisal, Rangpur, Mymensingh, or Cox's Bazar, you are entitled to the same level of data protection and the same access to your data rights.