batjdb Privacy Policy

This Privacy Policy ("Policy") is published by batjdb ("we", "us", "our", "the Platform"), the operator of the English-language online gaming platform accessible at batjdb.app. This Policy applies to all registered users, visitors, and any individual who interacts with the batjdb Platform, whether via desktop browser, mobile browser, or any other access method.

batjdb is committed to handling your personal data responsibly, transparently, and securely. This Policy explains in formal terms what personal data we collect about you, why we collect it, how we use it, who we share it with, how long we keep it, and what rights you have in relation to your data.

By registering an account on the batjdb Platform, you confirm that you have read, understood, and consent to the data practices described in this Policy. This Policy should be read alongside our Terms & Conditions and our Responsible Gaming policy, which together form the complete framework governing your use of the Platform.

batjdb collects personal data that is necessary for operating a secure, compliant, and responsible online gaming platform. The categories of personal data we collect are described in the table below.

batjdb collects personal data through the following means:

Direct Collection

• Account Registration: When you create a batjdb account, you provide your name, date of birth, email address, mobile number, and residential address directly through the registration form.
• KYC Submission: When you submit identity verification documents (NID, passport, proof of address, payment method screenshots) via the KYC portal in your account dashboard.
• Deposit and Withdrawal Requests: When you initiate a transaction, financial data associated with the selected payment method (bKash, Nagad, Visa, etc.) is recorded.
• Support Interactions: When you contact batjdb via live chat or email, the content of those communications is recorded and associated with your account record.
• Responsible Gaming Tools: When you configure deposit limits, session time-outs, or self-exclusion settings, those preferences are stored against your account.

Automated Collection

• Cookies and Local Storage: The batjdb Platform uses cookies and browser local storage to maintain your login session, remember preferences, and collect anonymised analytics data. See Section 7 for full details.
• Server Logs: Our servers automatically log IP addresses, access timestamps, pages visited, HTTP request types, and response codes for every interaction with the Platform. These logs are used for security monitoring, fraud detection, and technical troubleshooting.
• Gaming Engine Data: Every bet placement, game round, spin, and live casino hand is logged automatically by the Platform's gaming engine and third-party game providers (Pragmatic Play, Evolution Gaming, Spribe, Ezugi, etc.).

Third-Party Collection

• Payment Processors: When you transact via bKash, Nagad, Rocket, Upay, Visa, Mastercard, or bank transfer, those payment providers independently collect and process transactional data under their own privacy policies. batjdb receives only the confirmation and reference data required to credit or debit your BDT balance.
• KYC Verification Providers: Where automated KYC is in use, a third-party identity verification service provider may process your document data on batjdb's behalf under a data processing agreement.

batjdb processes your personal data strictly for the purposes set out below. We do not process personal data for any purpose not listed here without first obtaining your explicit consent or being required to do so by applicable law.

batjdb processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual Necessity: Processing required to perform the contract between you and batjdb — specifically, to operate your account, process transactions in BDT, provide gaming services, and deliver customer support. Without this processing, batjdb cannot provide its services to you.
• Legal Obligation: Processing required to comply with applicable legal and regulatory obligations, including anti-money-laundering (AML) requirements, age verification obligations, identity verification, and fraud reporting duties.
• Legitimate Interests: Processing carried out for batjdb's legitimate business interests, where those interests are not overridden by your rights and interests. This includes fraud prevention, Platform security, service analytics, and responsible gaming monitoring. batjdb has conducted legitimate-interest assessments for all data processing activities in this category.
• Consent: Where batjdb relies on your consent as the legal basis for processing — specifically for optional marketing communications — you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

batjdb does not sell, rent, or trade your personal data to third parties for their own marketing or commercial purposes. We share personal data only as described below:

Service Providers (Data Processors)

batjdb engages trusted third-party service providers to perform specific functions on our behalf. These providers process your data under written data processing agreements and are not permitted to use your data for any purpose beyond the contracted service. Categories of service providers include:

• Payment processors: bKash, Nagad, Rocket, Upay, Visa/Mastercard acquiring banks, Dutch-Bangla Bank (for bank transfers), and other financial institutions that process your BDT deposits and withdrawals.
• KYC / identity verification providers: Third-party services that assist with automated verification of Bangladesh NID, passport, and address documents.
• Game providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other certified studios that supply gaming content. These providers receive anonymised player session data (not full identity data) for game-round integrity purposes.
• Cloud infrastructure and hosting providers: Secure data centre and cloud storage providers that host the batjdb Platform and its databases.
• Customer support platform providers: Live chat and ticketing software providers that power our 24/7 support function.
• Analytics providers: Anonymised and aggregated analytics services used to understand Platform usage patterns and improve the user experience.

Legal and Regulatory Disclosure

batjdb may disclose your personal data to law enforcement agencies, regulatory authorities, courts, or other government bodies where required by applicable law or where batjdb has a good-faith belief that such disclosure is necessary to:

• Comply with a legal obligation or lawful request from a competent authority.
• Investigate and report suspected financial crime, fraud, money laundering, or terrorist financing.
• Protect the rights, property, or safety of batjdb, its users, or the public.
• Enforce batjdb's Terms & Conditions and defend against legal claims.

The batjdb Platform uses cookies, pixel tags, and browser local storage to deliver core functionality and to improve the user experience. By continuing to use the Platform after your first visit, you consent to the use of cookies in accordance with this Policy.

You may manage cookie preferences through your browser settings. Blocking strictly necessary cookies will prevent the Platform from functioning correctly and you will be unable to log in or place bets. Blocking functional or analytics cookies will not prevent access but may reduce the quality of your experience.

batjdb retains personal data for as long as is necessary to fulfil the purposes for which it was collected, to comply with legal retention obligations, and to resolve disputes or enforce agreements. The following retention periods apply:

• Active account data (identity, contact, account credentials, financial data): Retained for the duration of the account's active status plus a minimum of five (5) years after account closure, in accordance with anti-money-laundering record-keeping obligations.
• KYC documents (NID scans, passport copies, proof of address): Retained for a minimum of five (5) years from the date of submission or from account closure, whichever is later.
• Transaction records (deposit and withdrawal history in BDT): Retained for a minimum of seven (7) years from the date of each transaction, consistent with financial record-keeping requirements.
• Gaming activity logs (bet history, game session logs): Retained for a minimum of three (3) years from the date of each logged event.
• Support and communications records: Retained for three (3) years from the closure of the relevant support interaction or dispute.
• Server access logs and IP logs: Retained for twelve (12) months from the date of collection, unless required for an active fraud or security investigation.
• Marketing consent records: Retained for the duration of the account plus two (2) years after consent withdrawal or account closure, as evidence of lawful marketing.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be linked to an identifiable individual.

batjdb implements a multi-layered technical and organisational security framework designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Key security measures include:

• SSL / TLS Encryption: All data transmitted between your device and the batjdb Platform is encrypted using industry-standard TLS 1.2 or higher. This applies to account login, deposit and withdrawal transactions, KYC document upload, and all other Platform interactions.
• Password Hashing: Account passwords are never stored in plain text. They are processed using a strong adaptive hashing algorithm (bcrypt) with a unique per-account salt. batjdb staff cannot view or retrieve your password.
• Database Encryption: Sensitive fields within batjdb's databases — including NID numbers, financial account identifiers, and KYC document references — are encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data is restricted to authorised batjdb personnel on a strict need-to-know basis. All staff with access to personal data operate under confidentiality obligations and receive regular data protection training.
• Fraud Monitoring: Automated fraud detection systems monitor login activity, deposit patterns, IP addresses, and bet placement behaviour in real time to identify and respond to suspicious activity affecting your account.
• Incident Response: batjdb maintains a documented security incident response plan. In the event of a data breach that poses a risk to your rights and freedoms, batjdb will notify affected users without undue delay and will take immediate steps to contain the breach and mitigate harm.

As a user of the batjdb Platform, you have the following rights in relation to your personal data. To exercise any of these rights, please contact our Data Support team as described in Section 14.

• Right of Access: You have the right to request a copy of all personal data that batjdb holds about you (a "Subject Access Request"). batjdb will provide this information within 30 days of receiving a verified request.
• Right to Rectification: You have the right to request that batjdb corrects any inaccurate or incomplete personal data held about you. Minor contact details (email address, phone number) can be updated directly in your account dashboard. Changes to identity data (name, date of birth, NID) require a formal request supported by documentary evidence.
• Right to Erasure ("Right to Be Forgotten"): You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent (for consent-based processing), or where the data has been processed unlawfully. This right is subject to override where batjdb is required by law to retain the data (e.g., AML record-keeping obligations — see Section 8).
• Right to Restriction of Processing: You have the right to request that batjdb restricts the processing of your data in certain circumstances — for example, while you contest the accuracy of data we hold, or while a dispute is pending.
• Right to Data Portability: You have the right to receive a machine-readable copy of the personal data you have provided to batjdb in a structured, commonly used format (e.g., JSON or CSV), where processing is based on consent or contractual necessity.
• Right to Object: You have the right to object to processing based on batjdb's legitimate interests, including profiling. You also have an absolute right to object to processing for direct marketing purposes at any time, which batjdb will honour immediately.
• Right to Withdraw Consent: Where batjdb processes your data based on your consent (e.g., marketing communications), you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

batjdb will respond to all valid data rights requests within 30 days of receipt. In complex cases, this may be extended by a further 30 days, in which case you will be notified. batjdb will verify your identity before actioning any data rights request to protect against unauthorised data access.

Age verification is a mandatory step in batjdb's KYC process. All users are required to confirm their date of birth during registration and to provide documentary proof of age (Bangladesh NID, passport, or driving licence) upon request. Any account where the submitted date of birth is found to be falsified will be closed immediately.

batjdb supports and encourages the use of parental control software for households where minors may have access to internet-enabled devices. The Platform does not serve advertising to minors and does not collect data from minors for any purpose.

The batjdb Platform may, from time to time, reference or display the names of third-party partners including payment providers (bKash, Nagad, Rocket, Upay, Visa, Mastercard) and game studios (Pragmatic Play, Evolution Gaming, Spribe, etc.) in the context of describing available services and game content.

This Privacy Policy applies exclusively to personal data collected and processed by batjdb in connection with your use of the batjdb Platform. batjdb is not responsible for the data practices of any third-party service provider, payment processor, or game studio. When you interact directly with a third-party service — for example, when initiating a bKash transfer — you do so under that provider's own privacy policy and terms of service.

batjdb does not include links to external websites on the Platform beyond those required for functional payment processing. We strongly encourage you to review the privacy policies of any third-party services you use in connection with your batjdb account.

batjdb reserves the right to update or amend this Privacy Policy at any time. Changes may be made to reflect updates in applicable law or regulation, changes in our data processing practices, new product or service features, or feedback from users and regulatory bodies.

When material changes are made to this Policy, batjdb will notify registered users by one or more of the following methods:

• A prominently displayed notice on the batjdb Platform homepage and account dashboard upon your next login.
• An email notification sent to the email address registered to your account.
• An in-Platform notification visible within the account notifications panel.

The updated Policy will display a revised effective date at the top of the document. Your continued use of the batjdb Platform after the effective date of any changes constitutes your acceptance of the revised Policy. If you do not agree with the revised terms, you should cease using the Platform and contact our support team to request account closure.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights as described in Section 10, or wish to report a suspected data protection concern, please contact batjdb's Data Support team using the details below:

• Email: [email protected]
• Live Chat: Available 24/7 through your batjdb account dashboard
• WhatsApp: +880 1700 000000
• Support Hours: Around the clock, Bangladesh Standard Time (UTC+6)
• Response Time: Data rights requests acknowledged within 5 business days; resolved within 30 days

When submitting a data rights request, please include your registered email address, username, and a clear description of your request. batjdb will verify your identity before processing any request that involves access to, amendment of, or deletion of personal data.