bbdji Privacy Policy

bbdji collects personal data through several channels: directly from you when you register or transact on the platform; automatically through your use of the website; and, in limited circumstances, from verified third-party sources such as KYC verification providers and payment processors. The categories of data we collect are described below.

Registration and Account Data

When you create a bbdji account, we collect the following information as part of the registration process:

• Full legal name as it appears on your government-issued identity document
• Date of birth (to verify that you are 18 years of age or older)
• Residential address, including city, district, and postcode
• Mobile phone number (a Bangladeshi number is required for bKash, Nagad, or Rocket verification)
• Email address, used for account communications and promotional messages where consent has been given
• Username and password (password is stored in hashed, non-recoverable form — bbdji staff cannot read your password)

Identity Verification (KYC) Data

Before withdrawals are processed, bbdji is required to verify your identity in accordance with applicable Know Your Customer (KYC) obligations. During KYC, we may collect:

• A copy or photograph of your Bangladesh National Identity Card (NID), valid passport, or other government-issued photo identification
• Proof of address documentation (e.g., a recent utility bill, bank statement, or official letter addressed to your registered residential address)
• Payment method verification documents (e.g., confirmation that the bKash or Nagad wallet used for deposits is registered in your name)
• A selfie or live photograph for biometric identity matching, where required

Transaction and Financial Data

bbdji records all financial transactions conducted through your account. This includes deposit amounts, withdrawal requests, bonus credits, wager amounts, winnings, and any adjustments made by our compliance team. We do not store full payment card numbers. For mobile financial services such as bKash, Nagad, Rocket, and Upay, we record only the registered wallet phone number and transaction reference — not your mobile banking PIN or password.

Usage and Technical Data

When you access the bbdji platform, our servers automatically collect certain technical information, including:

• IP address and approximate geographic location derived from it
• Device type, operating system version, and browser type
• Pages visited, features used, session duration, and navigation paths
• Game session logs, including game titles played, bet amounts, and outcomes
• Error logs and crash reports generated by the platform during your session

This technical data is used for fraud detection, platform security, performance monitoring, and responsible gaming compliance. It is not used to build advertising profiles or sold to third parties.

bbdji does not sell your personal data. We share data with third parties only in the specific, limited circumstances described below. In every case, data is shared under contractual safeguards that restrict its use to the purpose for which it was disclosed.

Service Providers

bbdji works with a small number of carefully selected third-party service providers who process personal data on our behalf in order to operate the platform. These include:

• Payment processors — bKash, Nagad, Rocket, Upay, and partnered Bangladeshi banks (City Bank, BRAC Bank, Islami Bank, Sonali Bank) receive transaction data necessary to process your deposits and withdrawals.
• KYC and identity verification providers — Receive copies of your identity documents for the purpose of verifying your age and identity as required before withdrawal processing.
• Game suppliers — Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other certified providers receive a unique player session token to deliver game content. They do not receive your full name, NID details, or financial account information.
• Platform infrastructure and hosting providers — Cloud and server providers that host bbdji's systems may have physical access to server environments in which your data is stored. These providers are bound by strict data processing agreements.

Legal and Regulatory Disclosure

bbdji may disclose personal data to competent authorities, law enforcement agencies, or regulatory bodies where required to do so by applicable law, court order, or regulatory directive. In such cases, bbdji will disclose only the minimum data required to comply with the specific legal obligation and, where permitted by law, will notify you of such disclosure.

Business Transfers

In the event that bbdji undergoes a merger, acquisition, or sale of all or part of its business assets, your personal data may be transferred as part of that transaction. In such circumstances, the acquiring entity will be required to honour the terms of this Privacy Policy, and you will be notified of any material change to how your data is handled as a result of the transaction.

What We Never Do

• We never sell your personal data to data brokers or marketing companies.
• We never share your NID, passport details, or KYC documents with game providers.
• We never provide your data to social media platforms for advertising targeting.
• We never transfer your payment account PINs or OTPs — we do not collect them in the first place.

bbdji applies a multi-layered approach to data security, combining technical controls, organisational policies, and staff training to protect your personal information from unauthorised access, loss, alteration, or disclosure. The key security measures in place are described below.

• SSL/TLS encryption in transit: All data exchanged between your browser or app and bbdji's servers is encrypted using Transport Layer Security (TLS 1.2 or higher). This protects your login credentials, personal data, and payment information while it travels across the internet.
• Encryption at rest: Sensitive personal data stored in bbdji's databases — including identity documents, KYC records, and payment references — is encrypted at rest using AES-256 encryption.
• Password hashing: Account passwords are never stored in plain text. bbdji uses a strong, salted cryptographic hashing algorithm to store passwords. Even in the event of a security incident, your password cannot be recovered or read by any party.
• Access controls: Access to systems that contain personal data is restricted to authorised bbdji personnel only, on a strict need-to-know basis. All internal access is logged and subject to periodic review.
• Fraud detection systems: Automated systems monitor account activity, login patterns, transaction behaviour, and gameplay in real time to detect and flag anomalous activity consistent with fraud, account takeover, or money laundering.
• Data breach response: In the event of a confirmed data breach that affects your personal data, bbdji will notify affected account holders promptly and take immediate remedial action to contain and address the breach.

Your Role in Account Security

While bbdji takes extensive measures to protect your data on the platform side, account security also depends on how you manage your own credentials. You should use a strong, unique password for your bbdji account, never share your login details with anyone, and contact support immediately if you suspect unauthorised access to your account. bbdji support staff will never ask you to reveal your password.