btjali Privacy Policy

1. Who We Are

btjali ("we", "us", "our", "the Platform") operates the online gambling platform accessible at btjali.net, which provides cricket betting, live casino games, slots, card games, and related services to players located in Bangladesh and other permitted jurisdictions. btjali acts as the data controller in respect of all personal data collected from registered players and website visitors in connection with the use of its services.

Any questions, requests, or complaints relating to the use of your personal data under this Privacy Policy should be directed to our support team by email at [email protected]. Our team will acknowledge all privacy-related correspondence within 48 hours and aim to resolve enquiries within 30 calendar days.

2. Personal Data We Collect

btjali collects personal data across several categories depending on your level of interaction with the platform. The following table summarises the categories of data we collect and the contexts in which each category arises:

Category	Examples	Context
Identity Data	Full legal name, date of birth, nationality, NID/passport number	Account registration & KYC verification
Contact Data	Email address, mobile phone number, residential address	Account registration, correspondence
Financial Data	bKash/Nagad/Rocket/Upay account numbers, bank account details, transaction history	Deposits, withdrawals, fraud prevention
Account Data	Username, encrypted password, account balance, bonus balance, wagering history	Platform access & account management
Technical Data	IP address, device type, browser type, operating system, session duration	Security monitoring, fraud detection
Usage Data	Pages visited, games played, bet amounts, login timestamps, click patterns	Platform improvement, responsible gaming monitoring
Communications Data	Live chat transcripts, support email content, feedback submissions	Customer support, dispute resolution
Marketing Preferences	Email/SMS opt-in or opt-out status, preferred contact method	Promotional communications

btjali does not knowingly collect or process any special categories of sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric identifiers unless specifically required by law and with your explicit consent.

3. How We Collect Your Data

btjali collects personal data through the following channels:

3.1 Direct Collection

The majority of your personal data is collected directly from you when you: register a btjali account; complete identity verification (KYC); make a deposit or request a withdrawal; contact the btjali support team via live chat or email; respond to a survey or promotion; or submit any form on the btjali.net platform.

3.2 Automated Collection

When you visit btjali.net or use the platform, certain technical and usage data is collected automatically through cookies, web beacons, server logs, and similar tracking technologies. This automated collection begins as soon as your device establishes a connection with btjali's servers and continues throughout your session. See Section 7 for full details of our cookie practices.

3.3 Third-Party Sources

In limited circumstances, btjali may receive personal data about you from third-party sources, including: payment processors (bKash, Nagad, Rocket, Upay) who confirm transaction details; identity verification service providers used in the KYC process; fraud detection and anti-money-laundering screening services; and game providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi) in connection with the operation of their games on the btjali platform.

4. How We Use Your Personal Data

btjali uses the personal data it collects for the following clearly defined purposes:

• Account management: To create, authenticate, and maintain your registered btjali account, including processing your login credentials, account balance, and preferences.
• Payment processing: To facilitate deposits and withdrawals via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Visa, Mastercard, and other accepted payment methods.
• Identity verification (KYC): To verify your identity, age, and address in compliance with responsible gaming obligations and anti-money-laundering best practices.
• Fraud prevention and security: To monitor for suspicious account activity, detect and prevent unauthorised access, identify potential money laundering, and protect the integrity of the btjali platform.
• Responsible gaming: To monitor gameplay patterns for indicators of problem gambling behaviour, apply self-imposed limits and exclusions requested by players, and respond to responsible gaming support requests.
• Customer support: To respond to your enquiries, resolve disputes, and maintain records of communications for quality and compliance purposes.
• Legal compliance: To fulfil legal, regulatory, and contractual obligations applicable to btjali's operations, including responding to lawful requests from competent authorities.
• Platform improvement: To analyse aggregated usage data in order to improve the performance, features, and user experience of the btjali platform.
• Marketing communications: To send you promotional emails, SMS notifications, and bonus offers — but only where you have consented to receive such communications. You may withdraw consent at any time.

5. Legal Basis for Processing

btjali processes personal data only where a valid legal basis exists. The primary legal bases relied upon are as follows:

• Contractual necessity: Processing required to fulfil the Terms & Conditions agreement between you and btjali — including account creation, payment processing, and game delivery.
• Legal obligation: Processing required to comply with applicable laws — including identity verification, transaction record-keeping, and reporting obligations.
• Legitimate interests: Processing carried out for btjali's legitimate business interests, including fraud prevention, platform security, and service improvement — where such interests are not overridden by your own rights and interests.
• Consent: Processing carried out on the basis of your freely given, specific, and informed consent — most commonly in respect of direct marketing communications. Consent may be withdrawn at any time without penalty by contacting [email protected].

6. Data Sharing and Disclosure

btjali does not sell your personal data. We share personal data with third parties only in the following defined circumstances:

6.1 Payment Processors

Financial data (including mobile banking account numbers and bank account details) is shared with payment processors such as bKash, Nagad, Rocket, and Upay solely to facilitate the processing of your deposit and withdrawal transactions. These processors are contractually required to use your data only for payment processing purposes and to apply appropriate data security standards.

6.2 Identity Verification Providers

During the KYC verification process, identity documents and personal details may be shared with third-party identity verification service providers. These providers verify document authenticity and cross-reference data against legally permitted databases. They are prohibited from using your data for any other purpose.

6.3 Game Providers

When you play games powered by third-party providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Ezugi, limited technical data (such as your player ID, session token, and bet history within that game) is shared with the relevant provider to enable gameplay and settle results. Game providers are not permitted to use this data for marketing or profiling purposes.

6.4 Legal and Regulatory Authorities

btjali may disclose personal data to competent governmental, law enforcement, or regulatory authorities where required to do so by law, court order, or binding regulatory directive. In such cases, btjali will disclose only the minimum data necessary to comply with the legal requirement.

6.5 Business Transfers

In the event that btjali undergoes a merger, acquisition, restructuring, or sale of all or part of its business, your personal data may be transferred to the successor entity as part of the transaction. You will be notified of any such transfer and the privacy terms applicable to your data under the new entity.

7. Cookies and Tracking Technologies

btjali uses cookies and similar technologies to ensure the proper functioning of the platform, measure performance, and improve the overall player experience. The following categories of cookies are used:

7.1 Essential Cookies

These cookies are strictly necessary for the btjali platform to operate correctly. They enable core functions such as user authentication, session management, and security token validation. Essential cookies cannot be disabled without preventing you from using the platform. No consent is required for essential cookies as they are necessary for the legitimate operation of the service.

7.2 Performance and Analytics Cookies

These cookies collect anonymised or pseudonymised information about how visitors use btjali.net — including which pages are visited most frequently, how long sessions last, and where errors occur. This data helps btjali identify technical issues and improve platform performance. These cookies do not track individual players for commercial purposes.

7.3 Functional Cookies

Functional cookies remember your preferences and settings — such as your language preference, display settings, and whether you have acknowledged a site notice — in order to provide a more personalised and consistent experience across sessions.

7.4 No Advertising Cookies

btjali does not deploy cross-site advertising or behavioural tracking cookies. We do not share browsing data with advertising networks or use retargeting pixels from third-party ad platforms. Your on-site activity remains private to btjali and is not used to build advertising profiles.

You may manage cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from accessing the core btjali platform, though some preference-based features may be affected.

8. Data Security

btjali takes the security of your personal data seriously and implements a multi-layered approach to information security:

• Encryption in transit: All data exchanged between your device and btjali's servers is encrypted using 256-bit SSL/TLS protocols. The btjali.net domain maintains an active, valid SSL certificate at all times.
• Encryption at rest: Sensitive personal data stored in btjali's databases — including identity documents, financial details, and account credentials — is encrypted at rest using industry-standard encryption algorithms.
• Access controls: Access to personal data is restricted on a strict need-to-know basis. Only authorised personnel whose roles require access to specific categories of data are granted permission, and all access is logged and auditable.
• Password security: Account passwords are stored using one-way cryptographic hashing with a unique salt per account. btjali never stores or has access to passwords in plaintext form.
• Fraud and anomaly detection: btjali's security systems continuously monitor account activity for anomalies indicative of unauthorised access, credential compromise, or suspicious financial behaviour. Accounts exhibiting such patterns may be temporarily restricted pending investigation.
• Incident response: In the event of a data security incident that poses a material risk to the rights of affected players, btjali will notify affected account holders without undue delay and take immediate remedial action.

While btjali implements robust technical and organisational security measures, no data transmission over the internet or storage system can be guaranteed to be 100% secure. You are responsible for maintaining the confidentiality of your own btjali login credentials and for notifying btjali immediately if you suspect unauthorised access to your account.

9. Data Retention

btjali retains personal data for no longer than is necessary for the purposes for which it was collected, subject to the following minimum retention periods:

• Account and identity data: Retained for a minimum of five (5) years from the date of account closure, in compliance with anti-money-laundering record-keeping requirements.
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction.
• KYC documents: Retained for the duration of the account's active life plus five (5) years from account closure.
• Customer support communications: Retained for three (3) years from the date of the last communication, after which they are securely deleted unless required for ongoing dispute resolution or legal proceedings.
• Cookie and technical log data: Retained for a maximum of thirteen (13) months from collection.
• Marketing preference records: Retained for as long as your account is active, or until you withdraw consent, whichever is earlier.

Upon expiry of the applicable retention period, personal data is securely and irreversibly deleted from btjali's systems. Where deletion is not technically feasible for a specific record, btjali will instead anonymise the data so that it can no longer be associated with any individual.

10. Your Data Rights

As a btjali account holder, you have the following rights in relation to your personal data. To exercise any of these rights, please contact our support team at [email protected] with the subject line "Data Rights Request" along with your registered username and a description of the request:

• Right of access: You have the right to request a copy of the personal data that btjali holds about you, along with information about how it is being used and on what legal basis.
• Right to rectification: If any personal data that btjali holds about you is inaccurate or incomplete, you have the right to request that it be corrected or updated.
• Right to erasure: In certain circumstances — for example, where data is no longer necessary for the purpose it was collected and no legal retention obligation applies — you may request deletion of your personal data. This right does not apply where btjali has an overriding legal obligation to retain the data.
• Right to restrict processing: You may request that btjali temporarily restrict the processing of your personal data in specific circumstances, such as while a rectification request is being assessed.
• Right to data portability: Where processing is based on your consent or on the performance of a contract, you have the right to receive your personal data in a structured, machine-readable format and to have that data transferred directly to another service provider where technically feasible.
• Right to withdraw consent: Where btjali processes your data on the basis of your consent — in particular for marketing communications — you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
• Right to object to marketing: You may opt out of receiving direct marketing communications from btjali at any time by clicking the unsubscribe link in any marketing email or by contacting support.

btjali will respond to all data rights requests within 30 calendar days of receipt. Where a request is complex or btjali receives a high volume of requests, this period may be extended by a further 30 days, in which case you will be notified of the extension and the reason for it.

11. Children's Privacy

The btjali platform is strictly restricted to adults aged 18 years and above. btjali does not knowingly collect personal data from any person under the age of 18. All registration submissions are subject to age verification checks, and accounts found to belong to a person under 18 will be immediately closed, with all associated balances voided.

If you have reason to believe that a minor has submitted personal data to btjali or has gained access to a registered account, please notify us immediately at [email protected]. btjali takes the protection of minors extremely seriously and will act on all such reports without delay.

Parents and guardians are encouraged to make use of parental control software to prevent minors from accessing online gambling platforms. btjali supports and endorses the use of such tools as part of its broader responsible gaming commitment.

12. Changes to This Privacy Policy

btjali reserves the right to update, revise, or replace this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we provide. Where changes are material — for example, where we change the legal basis on which we process your data, introduce a new category of data collection, or add a new third-party data sharing arrangement — we will notify registered account holders by email at least 14 days before the changes take effect.

For minor, non-material changes — such as clarifications of existing language or corrections of typographical errors — the updated Privacy Policy will be published at btjali.net/privacy-policy with the effective date revised accordingly, without individual notification. The effective date displayed in the page header indicates which version of this Privacy Policy is currently in force.

Your continued use of the btjali platform following the effective date of any revised Privacy Policy constitutes your acknowledgement of the changes. If you do not agree with the revised Privacy Policy, you should cease using the platform and contact support to request account closure in accordance with the Terms & Conditions.

The current version of this Privacy Policy is always available at btjali.net/privacy-policy. If you have any questions about this Privacy Policy or about how btjali handles your personal data, please contact us at [email protected] — our privacy team is available seven days a week.