bdjoy Privacy Policy — How We Protect Your Data
Your privacy matters. bdjoy is committed to handling your personal information with transparency, security and respect — in full accordance with our data protection obligations.
Introduction
This Privacy Policy ("Policy") describes how bdjoy ("we", "us", "our") collects, uses, stores, shares and protects personal data submitted by or collected from users ("you", "Player") who access or use the bdjoy website at bdjoy.bio and any associated services, features or content (collectively, the "Platform"). This Policy is incorporated by reference into, and forms an integral part of, the bdjoy Terms and Conditions. By registering an account or using any part of the Platform, you acknowledge that you have read and understood this Policy and consent to the data practices described herein.
bdjoy operates as an online casino and sports betting platform serving adult players across Bangladesh. We understand that personal data entrusted to us by players in Dhaka, Chittagong, Sylhet, Khulna and across all divisions of Bangladesh is sensitive and warrants careful stewardship. This Policy explains precisely what we collect and why, giving you the information you need to make informed decisions about your engagement with the Platform.
Your Privacy at a Glance
SSL Encryption
All data transfers between your device and bdjoy are protected by SSL encryption.
No Data Selling
bdjoy never sells your personal data to third-party advertisers or data brokers.
Access Rights
You may request a copy of all personal data bdjoy holds about you at any time.
Deletion Rights
Subject to legal retention obligations, you may request deletion of your personal data.
Cookie Control
bdjoy uses essential and analytical cookies. Non-essential cookies can be declined.
Contact Us
All privacy enquiries can be directed to [email protected] and will be addressed within 48 hours.
1. Information We Collect
When you register for a bdjoy account, complete the KYC verification process, make deposits or withdrawals, or contact our support team, you provide us with personal data that we collect and process. This includes:
- Identity data: your full legal name, date of birth, and nationality as provided during registration and KYC verification. Government-issued photo identification documents and proof of residential address submitted for KYC purposes are collected and stored securely for the duration required by applicable regulations.
- Contact data: your Bangladesh mobile number (used for account registration, OTP two-factor authentication, withdrawal notifications and support communications) and email address where voluntarily provided.
- Financial data: transaction records including deposit amounts, withdrawal amounts, payment method identifiers (such as the bKash or Nagad mobile number used for transactions), transaction timestamps and transaction reference numbers. bdjoy does not store full payment card numbers; card data is tokenised by our payment processor.
- Gaming data: your betting history, game session records, win/loss records, bonus utilisation history and responsible gaming tool settings (such as deposit limits and self-exclusion status). This data is maintained for audit, dispute resolution and responsible gaming compliance purposes.
- Support communications: records of any communications between you and the bdjoy support team, including chat transcripts, messages sent via the support channel and details of any complaints or disputes raised. These records are retained to ensure continuity of service and for dispute resolution.
When you access the bdjoy Platform via a web browser, we automatically collect certain technical and usage data that helps us operate, secure and improve the service. This includes:
- Device and browser data: device type (mobile, tablet or desktop), operating system version, browser type and version, screen resolution and network connection type. This data is used primarily for Platform optimisation — bdjoy is a mobile-first service and device data helps us ensure the best possible experience on Android and iOS devices used by players across Bangladesh.
- Log data: IP address (used for geolocation, fraud detection and regulatory compliance), access timestamps, pages visited within the Platform, session duration and referring URL. Log data is retained for a maximum of 90 days for security and operational purposes, after which it is automatically deleted or anonymised.
- Cookie and tracking data: session cookies essential for account authentication and Platform functionality, analytical cookies that measure aggregate usage patterns (page visits, feature engagement, session flow), and preference cookies that store your language and display preferences. See Section 8 for full cookie details.
2. How We Use Your Information
bdjoy processes your personal data only for clearly defined and lawful purposes. We do not process personal data in ways that are incompatible with the purposes for which it was originally collected. The primary purposes for which we process personal data are:
- Account creation and management: to register your account, verify your identity, maintain your account profile and process any changes to account settings including deposit limits, self-exclusion and communication preferences.
- Service delivery: to provide access to games, process bets and gaming sessions, calculate and credit winnings, process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa and Mastercard, and deliver all other Platform functionality to you in real time.
- Fraud prevention and security: to detect, investigate and prevent fraudulent transactions, unauthorised account access, bonus abuse, money laundering and other prohibited conduct as defined in the bdjoy Terms and Conditions. Automated risk-scoring systems analyse transaction patterns to flag unusual activity for human review.
- Responsible gaming compliance: to enforce deposit limits, session reminders and self-exclusion settings elected by you; to identify gaming patterns that may indicate problem gambling behaviour; and to contact you with responsible gaming information where our analysis suggests it may be appropriate.
- Customer support: to respond to your enquiries, resolve complaints and disputes, and maintain records of support interactions for quality assurance and regulatory audit purposes. bdjoy support is available 24/7 in both English and Bangla.
- Service improvement and analytics: to analyse aggregate, anonymised usage data in order to improve Platform performance, game selection, payment processing speed and user experience for players across Bangladesh. bdjoy does not use individual player data for personalised advertising or sell it to advertising networks.
3. Legal Basis for Processing
bdjoy processes personal data on one or more of the following legal bases depending on the specific processing activity:
- Contractual necessity: processing that is necessary for the performance of the contract between you and bdjoy — including account registration, game delivery, payment processing and customer support.
- Legal obligation: processing required for compliance with applicable law, including age verification and KYC obligations, anti-money laundering record-keeping requirements and cooperation with law enforcement or regulatory enquiries.
- Legitimate interests: processing that serves bdjoy's legitimate business interests where these are not overridden by your privacy rights — including fraud detection, security monitoring, service optimisation and analytics conducted on aggregated anonymous data.
- Consent: where processing is based on your freely given, specific, informed and unambiguous consent — for example, the setting of non-essential analytical cookies or the receipt of promotional communications. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
4. Sharing Your Information
bdjoy does not sell, rent or trade your personal data to any third party. We share personal data only in the limited circumstances described below, and only to the extent necessary for each purpose:
- Payment processors and mobile banking partners: transaction data is shared with bKash, Nagad, Rocket, Upay, Visa and Mastercard processors as necessary to execute deposits and withdrawals. These providers operate under their own privacy policies and regulatory frameworks and handle data only to the extent required to process the specific transaction.
- Game content providers: in delivering live casino and slot games supplied by third-party studios such as Evolution Gaming, Pragmatic Play and Ezugi, limited session and account identifiers may be shared with the relevant game provider to facilitate game delivery. These providers do not receive your full identity data or financial account information.
- Regulatory and law enforcement authorities: where required by applicable law, court order or legitimate regulatory request, bdjoy will disclose personal data to the relevant authority. bdjoy will notify you of any such disclosure unless prohibited from doing so by law or the terms of the request.
- Service providers acting as data processors: bdjoy engages certain trusted third-party service providers to support Platform operations — including hosting infrastructure providers, cybersecurity monitoring services and customer support platform tools. These providers act as data processors under bdjoy's instructions and are contractually prohibited from using your data for any purpose other than delivering the specific service for which they are engaged.
5. Payment Data and Financial Information
bdjoy takes the security of financial data with particular seriousness given the nature of the Platform. All deposit and withdrawal transactions on bdjoy are processed in Bangladeshi Taka (BD T) via regulated payment channels. bdjoy does not store full Visa or Mastercard card numbers on its own servers — card numbers are tokenised at the point of entry by our PCI-compliant payment processor and only a masked token is retained by bdjoy for the purposes of identifying the payment method for future withdrawal matching. bKash, Nagad, Rocket and Upay mobile wallet numbers associated with your transactions are stored in encrypted form.
Transaction records are retained for a minimum of 5 years from the date of the transaction to comply with applicable anti-money laundering record-keeping requirements. Players who close their bdjoy account should be aware that financial transaction records will be retained for this minimum period regardless of account closure, after which they will be securely deleted.
6. Data Retention
bdjoy retains personal data for the minimum period necessary to fulfil the purpose for which it was collected, subject to any longer retention period required by law. Our general retention periods are as follows: active account data is retained for the duration of the account relationship plus 5 years following account closure; KYC identity documents are retained for 5 years from the date of verification or account closure, whichever is later; gaming session and transaction records are retained for 5 years from the date of the relevant session or transaction; support interaction records are retained for 2 years from the date of the interaction; server log data is retained for a maximum of 90 days.
When the applicable retention period expires, personal data is securely deleted or anonymised so that it can no longer be associated with any identifiable individual. Where data is anonymised rather than deleted, the resulting anonymised data may be retained indefinitely for aggregate statistical and analytical purposes, as it no longer constitutes personal data.
7. Your Rights
bdjoy respects your rights in relation to your personal data. The following rights are available to you as a bdjoy account holder:
- Right of access: you may request a copy of all personal data bdjoy holds about you. bdjoy will provide this information within 30 days of a verified request. There is no charge for a first request within any 12-month period; repeat requests within that period may be subject to a reasonable administrative fee.
- Right to rectification: if any personal data bdjoy holds about you is inaccurate or incomplete, you have the right to request that it be corrected or completed. Identity data corrections may require re-submission of KYC documentation to verify the corrected information.
- Right to erasure: you may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where you object to processing based on legitimate interests and your interests override ours. This right is subject to bdjoy's legal obligation to retain certain data for specified minimum periods as described in Section 6.
- Right to restrict processing: you may request that bdjoy restricts the processing of your personal data in certain circumstances — for example, while a rectification request is being assessed, or while an objection to processing is being evaluated. Restricted data will be stored but not otherwise processed until the restriction is lifted.
- Right to object: you have the right to object to processing of your personal data that is carried out on the basis of legitimate interests. bdjoy will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests, or the processing is necessary for the establishment, exercise or defence of legal claims.
To exercise any of the rights listed above, please contact the bdjoy support team at [email protected] with the subject line "Data Rights Request". We will acknowledge your request within 48 hours and complete it within 30 days. We may need to verify your identity before processing your request to protect against fraudulent data access attempts.
8. Cookies and Tracking Technologies
bdjoy uses cookies and similar local storage technologies to operate the Platform and improve user experience. Cookies are small text files placed on your device by the Platform when you visit. We use three categories of cookies: essential cookies (required for the Platform to function — these include session authentication tokens and security cookies; these cannot be disabled without preventing access to the Platform); analytical cookies (used to measure how players interact with the Platform in aggregate — for example, which pages are visited most often and how long sessions last; this data is anonymised and used only to improve the Platform); and preference cookies (used to store your language preference and display settings between sessions).
You may control non-essential cookies through your browser settings. Most modern browsers allow you to refuse cookies, delete existing cookies, or be notified when a new cookie is set. Note that disabling essential cookies will prevent you from logging in to your bdjoy account. bdjoy does not use cross-site tracking cookies or third-party advertising cookies of any kind.
9. Data Security
bdjoy implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction or disclosure. These measures include: TLS/SSL encryption for all data in transit between your device and our servers; encryption at rest for sensitive personal data including identity documents and financial data; role-based access controls ensuring that bdjoy staff can only access personal data that is necessary for their specific role; regular security audits and penetration testing of Platform infrastructure; and multi-factor authentication requirements for all administrative access to systems that process personal data.
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, bdjoy will notify affected players without undue delay and in any event within 72 hours of becoming aware of the breach. The notification will describe the nature of the breach, the categories of data affected, the likely consequences and the measures taken or proposed to address the breach and mitigate its effects.
10. Minors and Age Restrictions
The bdjoy Platform is strictly for adults aged 21 years and over. bdjoy does not knowingly collect, store or process personal data from persons under the age of 21. Age verification is conducted as part of the KYC process, and any account found to have been registered by a person under the age of 21 will be closed immediately, all funds will be returned to the source payment method, and all personal data associated with that account will be deleted. If you believe that a person under the age of 21 has registered an account on bdjoy, please contact us immediately at [email protected].
11. Changes to This Privacy Policy
bdjoy reserves the right to update or amend this Privacy Policy at any time. When material changes are made, bdjoy will notify registered players via the registered mobile number or a prominent notice on the Platform prior to the changes taking effect. The "Last updated" date at the top of this page will be revised to reflect the date of the most recent update.
Your continued use of the bdjoy Platform following the posting of a revised Privacy Policy constitutes your acceptance of the revised Policy. We encourage you to review this Policy periodically. If you do not agree with any changes to this Policy, you should stop using the Platform and may request account closure by contacting [email protected].
12. Contact and Privacy Enquiries
If you have any questions, concerns or requests relating to this Privacy Policy, your personal data or your data protection rights, please contact the bdjoy support team. We aim to respond to all privacy-related enquiries within 48 hours (Bangladesh Standard Time, UTC+6), 7 days a week including Eid and public holidays.
Privacy Contact Email: [email protected]
Questions About Your Privacy?
Our FAQ covers common questions about data, security and your account. Or log in to bdjoy and manage your privacy settings directly.