Privacy Policy
How bdjle Protects Your Data

Throughout this Privacy Policy, the following terms carry the meanings set out below. Capitalised terms not defined here carry the meaning given to them in the bdjle Terms & Conditions.

• "Personal Data" means any information relating to an identified or identifiable natural person, including name, date of birth, contact details, financial information, and device identifiers.
• "Processing" means any operation performed on Personal Data, including collection, storage, retrieval, use, disclosure, erasure, or destruction.
• "Data Controller" means bdjle, the entity that determines the purposes and means of processing your Personal Data.
• "Data Processor" means any third-party organisation that processes Personal Data on behalf of bdjle under a written data processing agreement.
• "Platform" means the bdjle website at https://bdjle.io, including all associated sub-pages, account portals, game interfaces, and mobile-optimised views.
• "Player" / "You" means any individual who accesses the Platform, whether as a registered Account holder or as an unauthenticated visitor.
• "KYC" means Know Your Customer — the identity and age verification procedures applied by bdjle to registered Players.
• "Cookies" means small text files placed on your device by the Platform for the purpose of recognising returning visitors, maintaining session state, and collecting anonymous usage analytics.

bdjle collects Personal Data from Players through several channels: directly from you when you register or interact with the Platform, automatically through technical systems as you browse, and from third-party service providers involved in payment processing and identity verification.

Data collected directly from you:

Data collected automatically:

bdjle does not collect sensitive special-category personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data beyond what is strictly necessary for age and identity verification, or health data beyond what you voluntarily provide through responsible gaming tools.

bdjle uses the Personal Data collected from Players only for the purposes described below. We do not sell Personal Data to any third party, and we do not use Personal Data for purposes incompatible with those stated at the time of collection.

• Account administration: Creating and managing your Player Account, verifying your identity and age (21+), and maintaining the accuracy of your registration details.
• Service delivery: Enabling access to games, sports betting markets, live dealer products, and all other features of the bdjle Platform.
• Payment processing: Facilitating deposits and withdrawals via bKash, Nagad, Rocket, Upay, and card payment networks; maintaining an accurate financial ledger for your Account.
• Fraud prevention and security: Detecting and preventing unauthorised account access, duplicate account creation, bonus abuse, match-fixing, money laundering, and other forms of prohibited conduct described in our Terms & Conditions.
• Regulatory compliance: Fulfilling anti-money-laundering (AML) obligations, responding to lawful requests from authorities, and retaining records as required by applicable standards.
• Responsible gaming: Monitoring gameplay patterns to identify potential problem gambling behaviour, administering self-exclusion periods, enforcing deposit limits and session time controls you have set.
• Customer support: Responding to your enquiries, resolving complaints, and improving the quality of our support service.
• Platform improvement: Analysing aggregated, anonymised usage data to understand how Players interact with the Platform, identify technical issues, and prioritise new features.
• Marketing communications: Sending you promotional offers, bonus notifications, and event updates — but only where you have not opted out of such communications. You may withdraw consent to marketing at any time through your Account settings.

bdjle processes your Personal Data on one or more of the following legal bases depending on the purpose of processing:

• Contractual necessity: Processing that is necessary to perform the contract between you and bdjle — specifically to create and administer your Account, process deposits and withdrawals, and deliver the games and services you have requested.
• Legal obligation: Processing required to comply with applicable laws and regulations, including anti-money-laundering controls, age verification requirements, and record-keeping obligations.
• Legitimate interests: Processing carried out in pursuit of bdjle's legitimate business interests — including fraud prevention, platform security, responsible gaming monitoring, and platform analytics — where those interests are not overridden by your rights and freedoms.
• Consent: Processing based on your freely given, specific, and informed consent — principally for direct marketing communications and for any optional data collection activities that go beyond what is strictly necessary for service delivery. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

bdjle does not sell, rent, or trade your Personal Data to any third party for their own marketing or commercial purposes. Your data may, however, be shared with the following categories of recipient where strictly necessary:

• Payment service providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, and card network processors receive the minimum financial data necessary to process your deposit and withdrawal transactions. These providers operate under their own privacy policies and regulatory obligations.
• Identity verification providers: Third-party KYC and AML service providers receive identity documents and verification data to confirm your age (21+) and legal identity on behalf of bdjle. All such providers are contractually bound to process data only for verification purposes.
• Game and platform technology providers: Software studios and platform infrastructure providers (including game RNG certification bodies) may receive anonymised session data or aggregated usage statistics for quality assurance and certification purposes. No directly identifiable data is shared unless contractually necessary.
• Customer support platforms: Our third-party support ticketing and live-chat providers process the content of your support interactions and your contact details for the sole purpose of resolving your enquiry.
• Legal and regulatory authorities: bdjle may disclose Personal Data to law enforcement agencies, courts, regulators, or other competent authorities where required to do so by applicable law, court order, or in connection with an investigation into fraud, money laundering, or other serious criminal conduct.
• Business transfers: In the event of a merger, acquisition, or sale of all or a part of bdjle's business assets, Personal Data held by bdjle may be transferred to the acquiring entity as part of that transaction. Players will be notified of any material change in data controller identity via a prominent Platform notice.

All third-party Data Processors engaged by bdjle are required to enter into a written data processing agreement that prohibits them from using your Personal Data for any purpose beyond what is necessary to perform the service for which they have been engaged, and requires them to maintain security standards commensurate with those applied by bdjle.

bdjle uses cookies and similar tracking technologies to operate core Platform functionality, maintain session state across your visit, and collect anonymised performance analytics. The following categories of cookies are used on the Platform:

bdjle does not use advertising or third-party behavioural tracking cookies to profile your browsing activity across other websites. You may manage cookie preferences through your browser settings; however, disabling strictly necessary cookies may impair the functionality of the Platform, including your ability to log in or access games.

bdjle retains your Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply as a general guide:

• Active Account data: Retained for the full duration of your registered Account on bdjle and for a minimum of five (5) years following the permanent closure of your Account, to satisfy anti-money-laundering record-keeping requirements.
• KYC and identity verification documents: Retained for a minimum of five (5) years from the date of verification, or longer where required by applicable regulatory standards.
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction, in accordance with financial record-keeping standards applicable to online payment processing in Bangladesh.
• Customer support communications: Retained for a minimum of two (2) years from the date of the final communication in any given support interaction.
• Analytics and usage data: Anonymised and aggregated usage data may be retained indefinitely for Platform improvement purposes, as it no longer constitutes Personal Data once anonymisation is complete.
• Marketing consent records: Retained for as long as your marketing consent is active, and for one (1) year following withdrawal of consent as evidence of the consent history.

Where retention beyond these periods is required by a court order, ongoing legal proceedings, or an active regulatory investigation, data will be retained until that obligation is resolved.

Beyond encryption in transit, bdjle applies the following security measures to protect Personal Data at rest and within our systems:

• Access to Personal Data within bdjle's systems is restricted on a strict need-to-know basis. Only staff whose role requires access to specific data categories are granted the necessary permissions.
• All internal access to Player Personal Data is logged and subject to periodic audit review.
• Payment card data is processed and tokenised by PCI-DSS compliant payment processors; bdjle does not store raw card numbers or CVV codes on its own infrastructure.
• bKash, Nagad, and Rocket transaction credentials are processed exclusively through the respective providers' secure APIs; bdjle does not store mobile banking PINs or one-time passwords.
• Database backups containing Personal Data are encrypted and stored in geographically separated locations with access controls matching those of the primary production environment.
• bdjle conducts regular security testing and vulnerability assessments of the Platform infrastructure.

Despite these measures, no online platform can guarantee absolute security against all possible threats. If you have reason to believe that your Account has been compromised, you should change your password immediately and contact bdjle support without delay. bdjle will notify affected Players of any confirmed data breach that is likely to result in a high risk to their rights and interests, within a reasonable timeframe following our becoming aware of the incident.

As a Player on the bdjle Platform, you hold the following rights in relation to your Personal Data. To exercise any of these rights, contact bdjle's support team using the details in Section 13. bdjle will respond to valid requests within thirty (30) days of receipt.

• Right of access: You have the right to request a copy of the Personal Data that bdjle holds about you, together with information about how it is being processed.
• Right to rectification: You have the right to request correction of any Personal Data that is inaccurate or incomplete. For basic Account details, you may update information directly through your Account profile.
• Right to erasure: You have the right to request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where processing is unlawful. This right is subject to bdjle's legal obligation to retain certain records for a minimum period as described in Section 7.
• Right to restrict processing: You have the right to request that bdjle restricts the processing of your Personal Data in certain circumstances, such as where you contest the accuracy of the data or have objected to processing based on legitimate interests.
• Right to data portability: You have the right to receive a copy of Personal Data you have provided to bdjle in a structured, commonly used, and machine-readable format, and to transmit that data to another service provider where technically feasible.
• Right to object: You have the right to object at any time to processing of your Personal Data for direct marketing purposes. You also have the right to object to processing based on bdjle's legitimate interests, on grounds relating to your particular situation.
• Right to withdraw consent: Where processing is based solely on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of prior processing.

Please note that certain rights may be limited where bdjle is required to retain or process data to comply with a legal obligation, or where the exercise of a right would adversely affect the rights and freedoms of another individual. bdjle will explain the grounds for any limitation clearly in its response to your request.

If bdjle becomes aware or has reasonable grounds to suspect that Personal Data has been collected from an individual who is under the age of 21, the Company will immediately suspend the relevant Account, conduct an age verification review, and, if the suspicion is confirmed, permanently delete the associated Personal Data and close the Account. Any funds held in the Account at the time of closure will be handled in accordance with applicable legal requirements.

If you are a parent or guardian and you believe that your child under the age of 21 has provided Personal Data to bdjle without your consent, please contact our support team immediately at [email protected] so that we can investigate and take appropriate action without delay.

The bdjle Platform integrates with third-party services to deliver its full feature set. These include payment gateways (bKash, Nagad, Rocket, Upay, Visa, Mastercard), game software providers (including studios such as Pragmatic Play, Evolution Gaming, Spribe, and Ezugi), and identity verification services. Each of these third-party providers operates under its own privacy policy and data processing terms, which are independent of this Privacy Policy.

bdjle is not responsible for the privacy practices or content of any third-party service. When you interact with a third-party payment gateway or game provider interface embedded within the Platform, you are also subject to that provider's privacy terms. bdjle recommends that you review the privacy policies of any third-party service you interact with.

The bdjle Platform does not contain links to external websites for general browsing purposes. Any integration with a third-party service is strictly for the purpose of delivering a function within the Platform (e.g., processing a bKash payment or launching a game title) and does not constitute an endorsement of the third party's broader privacy or business practices.

bdjle reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the features and services offered on the Platform. When material changes are made, bdjle will notify registered Players by displaying a prominent notice on the Platform home screen or by sending a notification to registered Account holders. The "Last Updated" date at the top of this document will be revised each time a new version is published.

Your continued use of the bdjle Platform after the publication of a revised Privacy Policy constitutes your acknowledgement of the changes. If you do not agree with any revised terms, you must discontinue use of the Platform and may request Account closure as described in the Terms & Conditions.

bdjle recommends that you review this Privacy Policy periodically and whenever you access the Platform, to ensure that you remain informed of the current data processing practices in effect.

If you wish to exercise any of the rights described in Section 9, have a question about this Privacy Policy, or want to raise a concern about how bdjle processes your Personal Data, please contact our support team. All privacy-related requests are handled by our dedicated data team and will receive a substantive response within thirty (30) days of receipt, in accordance with applicable standards.

When submitting a data access or erasure request, please include your registered username and the email address associated with your Account so that we can locate your records and verify your identity before processing the request. bdjle may request additional verification information where the identity of the requester cannot be confirmed from the details provided.

For responsible gaming concerns — including requests to activate self-exclusion or deposit limits — please visit our Responsible Gaming page or contact the support team directly. These requests are treated as high priority and will be actioned as quickly as possible.