bdoj Privacy Policy — How We Collect, Use, and Protect Your Personal Data

bdoj is an online betting and casino platform operating at bdoj.io. bdoj serves players located in Bangladesh, offering cricket betting, live casino games, and a library of 500+ slot titles from internationally recognised game studios including Pragmatic Play, NetEnt, Microgaming, Evolution Gaming, Spribe, and Ezugi.

For the purposes of this Privacy Policy, bdoj is the data controller in respect of the personal data collected from players who register and interact with the platform. As data controller, bdoj determines the purposes for which and the manner in which personal data is processed.

All data-related enquiries, access requests, correction requests, and deletion requests should be directed to our dedicated privacy contact: [email protected]. Queries sent to this address are handled by bdoj's designated data officer and will receive a response within 30 days of receipt.

bdoj collects the following categories of personal data from players. The table below sets out each category, specific examples, and the primary reason for collection:

bdoj collects personal data through the following methods:

• Direct submission by the player: When you complete the Account registration form, submit KYC documents, make a deposit or withdrawal request, or contact our support team, you directly provide us with personal data.
• Automated technical collection: When you access the bdoj platform, our servers automatically log certain technical data including your IP address, device type, operating system, browser version, and session activity. This data is collected via server logs and, where applicable, first-party cookies.
• Payment processing partners: When you initiate a deposit or withdrawal via bKash, Nagad, Rocket, or Upay, our payment processing partner confirms the transaction reference, amount, and MFS account number associated with the transaction. bdoj does not receive your full MFS account PIN or password.
• Game data from studio partners: Game studios providing content on the bdoj platform may return session data — such as game rounds played, outcomes, and RTP records — to bdoj's systems for the purpose of bet settlement, dispute resolution, and responsible gaming monitoring.
• Fraud detection tools: bdoj employs third-party fraud detection technology that analyses device fingerprints, IP addresses, and behavioural patterns to identify suspicious activity. This process is automated and operates passively during platform use.

The personal data collected by bdoj is used exclusively for the following purposes:

• Account creation and management: To register your Account, maintain your player profile, authenticate your login sessions, and manage your Account settings throughout the lifecycle of your membership.
• Transaction processing: To process deposits received via bKash, Nagad, Rocket, and Upay, credit them to your Account balance, and to process approved withdrawal requests back to your registered MFS account.
• KYC and identity verification: To verify your identity, confirm that you meet the 21+ age requirement, and confirm that your registered MFS account belongs to you — all prior to processing any withdrawal.
• Fraud prevention and platform security: To detect and prevent unauthorised Account access, duplicate Account registrations, bot activity, collusion, money laundering, and other prohibited conduct as defined in the bdoj Terms & Conditions.
• Responsible gaming monitoring: To monitor betting patterns and session behaviour for indicators of problem gambling, and to apply responsible gaming tools (deposit limits, cool-off periods, self-exclusion) where requested or where patterns of concern are identified.
• Customer support: To respond to support requests submitted via [email protected], resolve disputes, and maintain a record of support interactions for quality assurance and legal compliance purposes.
• Legal and regulatory compliance: To maintain financial transaction records, respond to lawful requests from relevant authorities, and fulfil any other legal obligations applicable to the operation of the bdoj platform.
• Marketing communications (opt-in only): To send promotional messages, bonus alerts, and platform news via SMS or in-platform notification to players who have explicitly opted in to receive such communications. Marketing use of your data is always subject to your ongoing consent and can be withdrawn at any time.
• Platform improvement: To analyse aggregated, anonymised behavioural data for the purpose of improving game selection, platform performance, user experience design, and support response quality. No individually identifiable data is used for this purpose.

bdoj processes your personal data on the following legal bases, consistent with applicable data protection principles:

• Contractual necessity: Processing your identity data, contact data, financial data, and KYC documents is necessary to perform the contract between you and bdoj — specifically, to operate your Account and process your deposits and withdrawals.
• Legal obligation: Retaining transaction records, conducting KYC verification, and cooperating with lawful authority requests are processing activities required by applicable anti-money laundering, counter-terrorism financing, and financial record-keeping obligations.
• Legitimate interest: Processing technical data and behavioural data for fraud prevention, platform security, and responsible gaming monitoring reflects bdoj's legitimate interest in protecting the platform, its players, and the integrity of gaming operations.
• Consent: Processing your data for marketing communications — including promotional SMS, bonus alerts, and in-platform offers — is carried out solely on the basis of your freely given, specific, informed, and unambiguous consent. You may withdraw this consent at any time without consequence to your Account access.

6.1 General Principle. bdoj does not sell, rent, or trade player personal data to third parties for their own commercial purposes. Data is shared with third parties only to the extent strictly necessary to operate the platform and fulfil the purposes described in Section 4.

6.2 Categories of Third Parties. The following categories of third-party organisations may receive limited personal data from bdoj in the course of platform operations:

• Payment processing partners (bKash, Nagad, Rocket, Upay): Transaction data including your MFS mobile number and transaction reference is shared with these providers solely to facilitate deposits and withdrawals. These providers operate under their own privacy policies and regulatory frameworks applicable to Bangladesh Mobile Financial Services.
• Game studio partners (Pragmatic Play, NetEnt, Microgaming, Spribe, Evolution Gaming, Ezugi): Session identifiers and bet reference data are exchanged with game studios to facilitate game delivery, bet settlement, and dispute resolution. Studios do not receive your full identity or financial data.
• Fraud detection and cybersecurity service providers: Technical data including IP addresses, device fingerprints, and session patterns may be processed by specialist fraud detection tools operating under data processing agreements with bdoj.
• KYC and identity verification services: Where bdoj uses a third-party identity verification service to assist with KYC document review, your submitted identity documents are shared with that service provider under a data processing agreement that prohibits independent use of your data.
• Legal and regulatory authorities: bdoj will disclose personal data to law enforcement agencies, financial intelligence units, or other competent authorities where required to do so by a lawful order, subpoena, or applicable legal obligation. bdoj will notify the affected player of such disclosure where legally permitted to do so.

6.3 Data Processing Agreements. All third-party service providers who process personal data on behalf of bdoj are required to enter into a data processing agreement confirming that they will process player data only in accordance with bdoj's instructions, will apply appropriate technical and organisational security measures, and will not use player data for their own independent purposes.

7.1 What Are Cookies. Cookies are small text files placed on your device by a website. bdoj uses first-party cookies — cookies set directly by the bdoj domain — to maintain login sessions, remember player preferences, and support platform security functions. bdoj does not use third-party advertising cookies or cross-site tracking technologies.

7.2 Types of Cookies Used.

• Session cookies (strictly necessary): These cookies are required for the platform to function. They maintain your authenticated login session while you are active on the platform and expire automatically when you close your browser. Disabling these cookies will prevent you from logging in to your bdoj Account.
• Preference cookies (functional): These cookies remember your language and display preferences so you do not need to re-configure them on each visit. They persist for up to 30 days.
• Security cookies (strictly necessary): These cookies support CSRF protection, bot detection, and other platform security mechanisms. They are essential for keeping your Account secure.
• Analytics cookies (performance): Where used, analytics cookies collect anonymised, aggregated data on how players navigate the platform — such as which pages are visited most frequently and where technical errors occur. This data is used solely to improve platform performance and does not identify individual players.

7.3 Managing Cookies. You may adjust your browser settings to refuse or delete cookies. Please note that disabling strictly necessary cookies will impair your ability to use the bdoj platform, including preventing you from logging in. Instructions for managing cookies are available in your browser's help documentation.

8.1 Retention Periods. bdoj retains personal data for the periods set out below, after which data is securely deleted or anonymised:

• Account and identity data (active accounts): Retained for the duration of the Account's active life, plus a minimum of five (5) years following Account closure, in accordance with financial record-keeping obligations.
• KYC documents: Retained for a minimum of five (5) years following Account closure or the completion of the relevant transaction, whichever is later, in accordance with anti-money laundering obligations.
• Transaction records (deposits and withdrawals): Retained for a minimum of five (5) years from the date of each transaction.
• Support correspondence: Retained for three (3) years from the date of the most recent communication in each support thread.
• Technical and session data (IP logs, device data): Retained for twelve (12) months from the date of collection, unless retained for longer as part of an active fraud or security investigation.
• Marketing consent records: Retained for the duration of the Account's active life and for three (3) years following Account closure, to evidence the basis on which marketing communications were sent.

8.2 Early Deletion Requests. You may request deletion of your personal data at any time by contacting [email protected]. bdoj will fulfil deletion requests for all data that is not subject to a mandatory legal retention obligation. Where data cannot be deleted due to a legal obligation, bdoj will inform you of the specific obligation preventing deletion and the expected date on which the data will be eligible for deletion.

9.1 Technical Measures. bdoj implements the following technical security measures to protect player personal data:

• TLS/SSL encryption on all data transmitted between player devices and bdoj servers
• Encrypted storage of passwords and sensitive authentication credentials using industry-standard hashing algorithms
• Encrypted storage of KYC documents at rest, with access restricted to authorised personnel only
• Firewall protection, intrusion detection systems, and regular vulnerability scanning on all production infrastructure
• Automated session timeout and forced re-authentication after periods of inactivity

9.2 Organisational Measures. bdoj limits internal access to player personal data on a strict need-to-know basis. Staff members with access to personal data are required to operate under confidentiality obligations and receive training on data protection responsibilities. Access logs are maintained and reviewed regularly.

9.3 Data Breach Response. In the event of a personal data breach that poses a risk to affected players, bdoj will notify affected players as promptly as practically possible, describing the nature of the breach, the categories of data affected, the likely consequences, and the measures taken or proposed to address the breach.

9.4 Player Responsibility. The security of your bdoj Account also depends on you maintaining the confidentiality of your login credentials. bdoj strongly recommends using a unique, strong password for your bdoj Account and not reusing it on any other service. If you suspect that your Account credentials have been compromised, contact [email protected] immediately.

As a player whose personal data is processed by bdoj, you hold the following rights in respect of your data:

• Right of Access: You have the right to request a copy of all personal data that bdoj holds about you. bdoj will provide this in a structured, commonly used format within 30 days of receiving a verified request.
• Right to Rectification: If any personal data bdoj holds about you is inaccurate or incomplete, you have the right to request that it be corrected. Contact [email protected] with details of the correction required.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (for consent-based processing), or where you object to processing and no overriding legitimate interest applies. Deletion requests will be fulfilled within 30 days except where a legal retention obligation prevents deletion.
• Right to Restrict Processing: You may request that bdoj restricts the processing of your personal data in certain circumstances — for example, while the accuracy of data you have disputed is being verified.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity, and is carried out by automated means, you have the right to receive your personal data in a structured, machine-readable format and to transmit it to another controller.
• Right to Object: You have the right to object to the processing of your personal data where that processing is based on bdoj's legitimate interests. bdoj will cease that processing unless it can demonstrate compelling legitimate grounds that override your interests, or unless the processing is necessary for the establishment or defence of legal claims.
• Right to Withdraw Consent: Where processing is based on consent — in particular, marketing communications — you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

11.1 Age Restriction. The bdoj platform is strictly for adults aged 21 years or older. bdoj does not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory step in the KYC process, and Accounts found to be registered by individuals under 21 will be immediately suspended and their data deleted.

11.2 Reporting Underage Access. If you are a parent or guardian and you believe that a minor under your care has registered or accessed the bdoj platform, please contact [email protected] immediately with details. bdoj will investigate promptly and take all necessary steps to close the Account, delete associated data, and reverse any transactions where appropriate.

11.3 Parental Controls. bdoj recommends that parents and guardians install parental control or content filtering software on shared devices to prevent access to online gambling platforms by minors. bdoj does not provide parental control software but recommends consulting your device manufacturer's built-in parental control features.

12.1 Game Studio Platforms. Games delivered on the bdoj platform are hosted and operated by third-party studios including Pragmatic Play, NetEnt, Microgaming, Evolution Gaming, Spribe, and Ezugi. Each of these studios has its own privacy practices governing the session data they process in the course of game delivery. bdoj is not responsible for the privacy practices of its game studio partners beyond the scope of its data processing agreements with them.

12.2 Mobile Financial Services. Deposit and withdrawal transactions are facilitated through bKash, Nagad, Rocket, and Upay. These MFS providers are independent businesses regulated under Bangladesh Bank guidelines. Their handling of your financial data is governed by their own privacy policies and by applicable Bangladesh Bank regulations, not by this bdoj Privacy Policy.

12.3 No Third-Party Advertising Networks. bdoj does not integrate third-party advertising networks, social media tracking pixels, or cross-site behavioural advertising technologies into its platform. Any behavioural data collected by bdoj is used solely for the internal purposes described in Section 4 of this Policy.

13.1 Right to Update. bdoj reserves the right to update or modify this Privacy Policy at any time. The revised Policy will be published on this page with a new "Last Updated" date. Continued use of the bdoj platform following publication of a revised Privacy Policy constitutes acceptance of the revised terms.

13.2 Notification of Material Changes. Where a change to this Privacy Policy materially affects how bdoj processes your personal data or materially affects your rights as a data subject, bdoj will notify registered Account holders via in-platform notification prior to the change taking effect. We recommend reviewing this page periodically to stay informed of how bdoj protects your data.

All privacy-related enquiries, data access requests, rectification requests, erasure requests, and consent withdrawal notices should be directed to bdoj's privacy contact. Please use the contact details below:

• Privacy and Data Rights Queries: [email protected] — responses within 30 days of receipt
• General Support (Account, Deposits, Withdrawals, KYC): [email protected] — available 24/7 at Bangladesh Standard Time (BST, UTC+6)
• Responsible Gaming Requests: [email protected] — mark subject line "Responsible Gaming Request" for priority handling
• Reporting Underage Access: [email protected] — mark subject line "Underage Access Report" for immediate escalation

bdoj serves players across all divisions of Bangladesh — Dhaka, Chittagong, Sylhet, Rajshahi, Khulna, Barisal, Rangpur, and Mymensingh — and our support and privacy teams are staffed to assist players around the clock at Bangladesh Standard Time.