btdjl Privacy Policy — How We Protect Your Personal Data

Welcome to the btdjl Privacy Policy. btdjl operates the online betting and casino platform accessible at btdjl.io (the "Platform"). This Privacy Policy describes how btdjl collects, uses, stores, shares, and protects the personal data of individuals who access or use the Platform, including registered account holders and visitors who browse the site without creating an account.

This Privacy Policy should be read together with the btdjl Terms & Conditions, which are incorporated by reference. By registering an account on the Platform or by continuing to use the Platform after this Policy has been published or updated, you acknowledge that you have read this Privacy Policy and that you consent to the data practices described herein.

btdjl is committed to handling your personal data responsibly, transparently, and in a manner consistent with applicable data protection principles. Our Platform is designed for adult players aged 21 and above located primarily across Bangladesh — including Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, and Mymensingh — and all data practices described in this Policy are carried out with those users in mind.

If you have any questions about how btdjl handles your personal data, please contact our support team at [email protected] at any time. Our support team operates 24 hours a day, 7 days a week, in Bangladesh Standard Time (UTC+6).

btdjl collects the following categories of personal data from users of the Platform. We collect only what is necessary for the stated purposes and do not collect sensitive personal data beyond what is required for identity verification.

btdjl collects personal data through the following channels and mechanisms:

• Direct submission: Data you provide when creating an account, completing KYC, submitting a deposit or withdrawal request, contacting our support team, or responding to promotional communications.
• Automated technical collection: Data collected automatically when you visit or interact with the Platform, including IP address, browser fingerprint, session data, and device identifiers captured via server logs and analytics tools.
• Cookies and tracking technologies: Cookies, web beacons, and local storage objects placed on your device when you browse the Platform. See Section 7 for full details on our cookie practices.
• Payment providers: Confirmation and transaction reference data received from bKash, Nagad, Rocket, and Upay when you initiate a deposit or withdrawal through those services.
• Identity verification services: Where btdjl uses a third-party KYC verification partner, that partner may return identity verification results (pass/fail, document authenticity status) to btdjl.
• Third-party fraud and AML screening tools that cross-reference account activity against known risk indicators.
• Game providers such as Pragmatic Play, Evolution Gaming, NetEnt, and Microgaming, who may return gameplay and RTP data to btdjl for account management purposes.

btdjl relies on the following legal bases to process your personal data. We process your data only where at least one of the following bases applies:

• Contractual necessity: Processing required to fulfil our obligations under the btdjl Terms & Conditions — including account management, payment processing, and customer support.
• Legal obligation: Processing required to comply with applicable laws and regulations, including anti-money-laundering obligations, age verification requirements, and fraud prevention duties.
• Legitimate interests: Processing carried out for btdjl's legitimate business interests, including fraud prevention, platform security, service improvement, and responsible gaming monitoring, where those interests are not overridden by your data protection rights.
• Consent: Processing carried out on the basis of your explicit consent — primarily for the sending of direct marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

btdjl uses your personal data for the following specific purposes:

• To create and manage your btdjl account, including verifying your identity and age before granting access to real-money features.
• To process deposits and withdrawals via bKash, Nagad, Rocket, and Upay, and to maintain accurate transaction records in BDT.
• To detect and prevent fraud, money laundering, collusion, multi-accounting, and other forms of prohibited conduct as defined in the Terms & Conditions.
• To administer bonus offers and promotions, verify eligibility, and enforce wagering requirements fairly and consistently.
• To provide customer support through our 24/7 English-language support team and to maintain records of support interactions for quality and dispute resolution purposes.
• To monitor your gaming activity in relation to responsible gaming obligations and to proactively apply protective tools where signs of problem gambling are detected.
• To personalise your Platform experience, including displaying relevant promotions and game recommendations based on your activity history.
• To send transactional communications such as deposit confirmations, withdrawal notifications, KYC status updates, and security alerts.
• To send marketing communications about btdjl promotions, seasonal offers, and BPL / IPL / T20 World Cup betting specials — only where you have provided explicit consent.
• To maintain the technical security and performance of the Platform, diagnose faults, and carry out scheduled maintenance.
• To comply with any lawful request from a competent authority, court order, or regulatory body.

btdjl does not sell your personal data. We share personal data only with the following categories of recipients, and only to the extent strictly necessary for the stated purpose:

• Payment providers: bKash, Nagad, Rocket, and Upay receive transaction data necessary to execute your deposit and withdrawal instructions. Each provider operates under its own privacy policy.
• KYC and identity verification partners: Third-party services used to verify the authenticity of government-issued identity documents submitted during the KYC process.
• Fraud and AML screening services: External risk-intelligence tools that help btdjl detect suspicious patterns of activity and meet anti-money-laundering obligations.
• Game content providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive anonymised session data for technical integration and RNG audit purposes.
• Technology and hosting providers: Cloud infrastructure and server providers who store Platform data on btdjl's behalf under strict data processing agreements.
• Legal and regulatory authorities: Where required by a valid court order, law enforcement request, or applicable regulatory obligation, btdjl may disclose personal data to competent authorities.
• In the event of a merger, acquisition, or transfer of btdjl's business assets, personal data may be transferred to the acquiring entity subject to equivalent privacy protections.

All third parties with whom btdjl shares personal data are contractually required to handle that data securely, use it only for the specified purpose, and not retain it beyond the period necessary to fulfil that purpose.

btdjl uses cookies and similar tracking technologies to operate and improve the Platform. A cookie is a small text file placed on your device by the Platform. The following categories of cookies are in use:

You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies may prevent the Platform from functioning correctly. Analytics and functional cookies may be disabled without affecting core Platform access.

btdjl retains personal data for as long as is necessary to fulfil the purpose for which it was collected, and thereafter for as long as required by applicable legal, regulatory, or accounting obligations. The following retention periods apply as a general guide:

• Active account data: Retained for the full duration of your account's existence on the Platform.
• Closed account data: Financial records, KYC documentation, and transaction history are retained for a minimum of five years following account closure to meet anti-money-laundering and audit obligations.
• Support communications: Retained for up to three years from the date of the last communication to support dispute resolution.
• Technical and usage logs: Retained for up to 12 months and then anonymised or deleted, except where a security investigation is ongoing.
• Responsible gaming records (self-exclusion, deposit limit history) are retained for a minimum of five years to prevent reinstatement of a self-excluded account in error.
• Marketing consent records are retained for the duration of the consent and for two years thereafter to evidence lawful basis for any communications sent.

When personal data is no longer required and the applicable retention period has expired, btdjl will securely delete or irreversibly anonymise that data using industry-standard data destruction methods.

btdjl employs a multi-layered security architecture to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Key security measures in place include:

• 256-bit SSL/TLS encryption on all data transmitted between your browser or mobile device and the btdjl servers.
• Bcrypt password hashing ensuring that stored passwords cannot be retrieved or reversed even in the event of a data breach.
• Access controls and role-based permissions ensuring that btdjl staff can only access personal data relevant to their specific job function.
• Regular penetration testing and vulnerability assessments carried out on the Platform infrastructure by qualified security professionals.
• Intrusion detection systems that monitor the Platform network 24/7 for signs of unauthorised access attempts or anomalous activity.
• Encrypted data storage on servers located in secure, access-controlled data centres with physical security measures.
• Mandatory staff data-security training covering phishing, social engineering, and responsible data handling practices.

As a btdjl user, you hold the following rights in respect of your personal data. To exercise any of these rights, contact our support team at [email protected] with the subject line "Data Rights Request — [Your Username]". All requests are acknowledged within 5 business days and fulfilled within 30 calendar days.

• Right of Access: Request a copy of all personal data btdjl holds about you, along with information about how it is being used.
• Right to Rectification: Request correction of any personal data that is inaccurate, incomplete, or out of date.
• Right to Erasure: Request deletion of your personal data where it is no longer necessary for the purpose it was collected, subject to btdjl's legal retention obligations.
• Right to Restriction: Request that btdjl restrict the processing of your personal data in certain circumstances, for example while a rectification request is under review.
• Right to Data Portability: Request that btdjl provide your personal data in a structured, machine-readable format so that it can be transferred to another service provider.
• Right to Object: Object to processing carried out on the basis of legitimate interests, including profiling for marketing purposes.
• Right to Withdraw Consent: Where processing is based on your consent, withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.
• Right to Human Review: Request that any automated decision significantly affecting your account be reviewed by a human member of the btdjl team.

btdjl will not charge a fee for fulfilling a data rights request unless the request is manifestly unfounded, repetitive, or excessive. In such cases, btdjl reserves the right to charge a reasonable administrative fee or to refuse the request, providing written reasons for that decision.

The btdjl Platform is strictly for adults aged 21 years and above. btdjl does not knowingly collect personal data from individuals under the age of 21. If btdjl discovers that personal data has been collected from a person under 21, that account will be immediately suspended, all data pertaining to the account will be deleted, and any balance on the account will be handled in accordance with the Terms & Conditions.

If you are a parent or guardian and believe that your child has created a btdjl account or provided their personal data to the Platform without your consent, please contact us immediately at [email protected]. We will investigate and take prompt action to remove any such data from our systems.

btdjl may send you promotional communications about new games, seasonal bonuses, BPL cricket specials, Eid promotions, and other btdjl offers — but only where you have given your explicit consent to receive such communications at the point of registration or subsequently through your account preferences.

You may opt out of marketing communications at any time by:

• Clicking the "unsubscribe" link included in every marketing email sent by btdjl.
• Updating your communication preferences in your btdjl account dashboard settings.
• Contacting the support team at [email protected] and requesting removal from all marketing lists.

Opting out of marketing communications will not affect the delivery of transactional communications such as deposit confirmations, withdrawal notifications, KYC status updates, and security alerts. These are essential operational communications and cannot be disabled while your account is active.

The btdjl Platform integrates with a number of third-party services to deliver the full range of games, payment options, and security features available to users. These include game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi; payment providers including bKash, Nagad, Rocket, and Upay; and technical infrastructure providers supporting Platform hosting and performance.

Where your use of the Platform involves interaction with a third-party service — for example, initiating a bKash deposit or loading an Evolution Gaming live casino table — that third party may process personal data in accordance with its own privacy policy. btdjl is not responsible for the data practices of third-party services and encourages users to review the privacy policies of those services independently.

All third-party processors engaged by btdjl are required to enter into a data processing agreement that restricts their use of your personal data to the specific purpose for which it was shared and obligates them to maintain appropriate security standards.

btdjl reserves the right to update or replace this Privacy Policy at any time in response to changes in applicable law, regulatory guidance, business practices, or Platform features. The effective date displayed at the top of this Policy will be updated to reflect the date of any material revision.

Where a material change is made to this Policy — for example, a change that affects how we use your data or introduces a new category of data collection — btdjl will notify registered users by email to the address on file or through an on-screen notification upon your next login to the Platform. You are encouraged to review this Policy periodically to stay informed of how btdjl protects your data.

Continued use of the Platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not accept the revised Policy, you must cease using the Platform and request account closure by contacting [email protected].

If you have any questions, concerns, or complaints about this Privacy Policy or about the way btdjl handles your personal data, please contact our dedicated privacy support team using the details below. All privacy-related enquiries are handled by a designated team member and responded to within 5 business days.

• Email (privacy enquiries): [email protected] — use the subject line "Privacy Enquiry — [Your Username]" for fastest routing.
• Data rights requests: [email protected] — use the subject line "Data Rights Request — [Your Username]".
• Support hours: 24/7, Bangladesh Standard Time (UTC+6).
• Serving users across: Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, and Mymensingh.

If you are not satisfied with btdjl's response to a privacy complaint, you may escalate the matter through appropriate consumer protection or data protection channels available in Bangladesh. btdjl takes all privacy complaints seriously and is committed to resolving disputes fairly and promptly.