Data & Privacy
Privacy Policy — bdtjal Platform
We are committed to protecting your personal data. This policy explains what we collect, how we use it, and the rights you hold as a bdtjal player in Bangladesh.
📅 Effective: January 2026
🔒 256-bit SSL
🌐 English Language
Last updated and effective: 1 January 2026
This Privacy Policy ("Policy") describes how bdtjal ("Company", "we", "us", "our") collects, uses, stores, shares, and protects the personal information of individuals ("you", "Player", "User") who access or use the bdtjal platform at bdtjal.app. By registering an account or using any service on the bdtjal platform, you acknowledge that you have read, understood, and accepted the practices described in this Policy.
bdtjal takes your privacy seriously. As an online casino and sports betting platform serving over 2.4 million registered players across Bangladesh — including Dhaka, Chittagong, Sylhet, Rajshahi, Khulna, Barisal, Rangpur, Mymensingh, and Cox's Bazar — we handle substantial volumes of personal data on a daily basis. We apply bank-grade 256-bit SSL encryption to all data in transit and enforce strict internal access controls to limit who within bdtjal can view your personal information.
This Policy applies to all personal data collected through your use of bdtjal's website, mobile platform, customer support channels, and promotional communications. It does not apply to third-party websites or services that may be linked to or accessible from the bdtjal platform — those parties operate under their own privacy terms.
bdtjal
reserves the right to update this Policy periodically. Material changes will be communicated to registered players via the contact details held on their account. Your continued use of the platform following such notification constitutes acceptance of the revised Policy. We encourage you to review this page regularly to stay informed about how we protect your data.
1. Information We Collect
bdtjal collects personal information that is necessary to provide our services, verify player identity, process transactions, and comply with applicable legal and regulatory obligations. The categories of data we collect include the following.
1.1
Registration & Identity Data
When you create a bdtjal account, we collect:
- Full legal name as it appears on your national identity document.
- Date of birth (to verify you meet the 21+ age requirement).
- Mobile phone number registered in your name.
- Email address (if provided during registration).
- Residential address, district, and division within Bangladesh.
- Username and encrypted account password.
1.2
Identity Verification Documents
During account verification or when processing withdrawal requests above defined thresholds, bdtjal may request copies of:
- National ID card (NID) — front and back.
- Passport (bio-data page).
- Proof of payment method ownership (e.g., screenshot of registered bKash or Nagad account).
- Selfie or live photo for liveness verification.
These documents are stored securely and used solely for identity verification and anti-fraud purposes.
1.3
Financial & Transaction Data
We record all financial transactions conducted on the bdtjal platform, including:
- Deposit amounts, timestamps, and payment method references (bKash, Nagad, Rocket, Upay, Visa, Mastercard).
- Withdrawal requests, approval records, and processing timestamps.
- Bet history, wagering amounts, game results, and bonus utilisation records.
- Account balance history and transaction statements.
Financial transaction data is retained for a minimum of seven years in accordance with standard financial record-keeping obligations.
1.4
Technical & Device Data
When you access bdtjal, our systems automatically collect certain technical information:
- IP address and approximate geolocation.
- Device type, operating system, and browser version.
- Session start and end times, pages visited, and features used.
- Referral URL (the page you visited immediately before arriving at bdtjal).
- Cookie identifiers and local storage values (see Section 5 — Cookies).
1.5
Communications Data
If you contact bdtjal via email, live chat, or other support channels, we retain records of those communications — including the content of messages, timestamps, and any attachments — to help us resolve disputes, improve service quality, and maintain a complete customer service history.
2. How We Use Your Data
Lawful basis: bdtjal processes your personal data only where a lawful basis exists — including contract performance, legal obligation, legitimate interest, or your explicit consent.
2.1
Account Management & Service Delivery
We use your registration and identity data to create and manage your bdtjal account, verify your identity, enforce the 21+ age restriction, process deposits and withdrawals, and provide access to all sportsbook and casino features on the platform.
2.2
Transaction Processing
Financial data is used to process deposits received via bKash, Nagad, Rocket, Upay, Visa, and Mastercard, and to execute withdrawal requests to the player's registered payment method. Transaction records also support our internal reconciliation, fraud monitoring, and anti-money laundering (AML) compliance processes.
2.3
Fraud Prevention & Security
Technical and device data — including IP addresses, device fingerprints, and session behaviour — is analysed to detect suspicious activity, prevent account takeover, identify bonus abuse, and protect the integrity of the platform for all players. Where fraud is confirmed, relevant data may be shared with law enforcement authorities.
2.4
Responsible Gaming Monitoring
bdtjal analyses betting patterns, session frequency, and deposit behaviour to identify players who may be exhibiting signs of problem gambling. This analysis is conducted in the interest of player wellbeing and may trigger outreach from our responsible gaming team, or automatic application of protective limits where a player's behaviour warrants intervention.
2.5
Marketing & Promotional Communications
With your prior consent, we may send you promotional offers, bonus notifications, cricket and football match alerts, and seasonal promotions (for example, BPL season offers, Eid specials, or Pohela Boishakh promotions) via SMS or email. You may withdraw consent at any time by emailing
[email protected]. Withdrawal of marketing consent does not affect your ability to use the platform.
2.6
Platform Improvement
Aggregated and anonymised usage data is used to analyse platform performance, identify popular features, improve the user experience, and inform product development decisions. This analysis does not use personally identifiable information and cannot be used to identify individual players.
3. Data Sharing & Third Parties
bdtjal does not sell your personal data. We share information only in the specific, limited circumstances described below, and always subject to confidentiality obligations or legal requirements.
3.1
Payment Processors
To process your deposits and withdrawals, bdtjal shares the minimum necessary transaction data with payment service providers including bKash, Nagad, Rocket, Upay, Visa, and Mastercard. These providers are contractually bound to use your data solely for payment processing purposes and may not use it for any other purpose.
3.2
Identity Verification Partners
Where bdtjal uses third-party identity verification services to validate National ID documents or conduct liveness checks, the minimum required data is shared with those providers under strict data processing agreements. Verification data is not retained by these providers beyond the period necessary to complete the verification check.
3.3
Game Content Providers
Live casino and slot game providers (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) receive anonymised session tokens to facilitate game play. These providers do not receive your name, mobile number, payment details, or any directly identifying personal information.
3.4
Legal & Regulatory Disclosure
bdtjal will disclose personal data to law enforcement agencies, courts, or regulatory bodies when legally required to do so — for example, in response to a lawful court order, formal government request, or in connection with an investigation into fraud, money laundering, or other criminal activity. We will notify affected players of such disclosures where legally permitted.
4. Your Data Rights
As a bdtjal player, you hold the following rights in relation to your personal data. To exercise any of these rights, contact us at [email protected]. We will respond to all verified requests within 30 days.
👁️
Right of Access
You may request a copy of all personal data bdtjal holds about you, along with information about how it is being used.
✏️
Right to Rectification
If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it promptly.
🗑️
Right to Erasure
You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to our legal retention obligations (e.g., financial records must be retained for seven years).
⛔
Right to Object
You may object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing carried out on the basis of bdtjal's legitimate interests.
📦
Right to Data Portability
You may request that we provide your personal data in a structured, commonly used, machine-readable format so that you can transfer it to another service provider.
⏸️
Right to Restrict Processing
In certain circumstances — for example, while a rectification request is being assessed — you may request that bdtjal restrict the processing of your data to storage only.
5. Cookies & Tracking
5.1
What Are Cookies?
Cookies are small text files placed on your device by the bdtjal platform when you visit. They allow the platform to recognise your device across sessions, remember your login state, and personalise your experience. bdtjal also uses similar technologies such as local storage and session storage for equivalent purposes.
5.2
Types of Cookies We Use
- Essential cookies: Required for the platform to function. These include session authentication tokens and security cookies. They cannot be disabled without breaking core functionality.
- Functional cookies: Store your preferences such as language settings, preferred payment method, and last-visited game category to improve your experience on return visits.
- Analytics cookies: Collect anonymised data about how players use the bdtjal platform — for example, which pages are visited most frequently and where players exit. This data informs platform improvements.
- Marketing cookies: Where you have given consent, these cookies help us deliver relevant promotional content and track the effectiveness of our marketing campaigns.
5.3
Managing Cookies
You may control cookie preferences through your device's browser settings. Note that disabling essential cookies will prevent you from logging into your bdtjal account. Disabling analytics or marketing cookies will not affect your ability to use any platform feature but may mean you see less relevant promotional content.
6. Retention, Security & Contact
6.1
Data Retention Periods
bdtjal retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. As a general guide:
- Account registration data: retained for the lifetime of the account, plus five years after closure.
- Financial transaction records: retained for a minimum of seven years.
- Identity verification documents: retained for the duration of the account relationship and for five years after closure.
- Customer support communications: retained for three years.
- Marketing consent records: retained until consent is withdrawn plus one year.
6.2
Security Measures
bdtjal maintains a comprehensive information security programme that includes: 256-bit SSL/TLS encryption for all data in transit; AES-256 encryption for sensitive data at rest; multi-factor authentication for internal administrative access; regular penetration testing and vulnerability assessments; and a formal data breach response procedure that includes mandatory notification to affected players within 72 hours of a confirmed breach being identified.
6.3
Children & Minors
bdtjal's services are strictly for adults aged 21 and above. We do not knowingly collect personal data from individuals under the age of 21. If we become aware that a minor has registered on the platform or provided us with personal data, we will immediately close the account, void all associated balances, and securely delete the minor's personal data from our records.
6.4
Contact & Privacy Complaints
For any questions, concerns, or formal complaints regarding this Privacy Policy or the handling of your personal data, please contact bdtjal's support team at
[email protected]. We acknowledge all privacy-related enquiries within 48 hours (Bangladesh Standard Time, UTC+6) and aim to resolve complaints within 14 business days.
⚠️
Policy Updates: bdtjal may revise this Privacy Policy at any time. The effective date at the top of this page reflects the most recent update. Registered players will be notified of material changes via SMS or email.