bdaeej Privacy Policy — Your Data, Protected

1. Introduction

bdaeej is an online casino and sports betting platform built exclusively for players based in Bangladesh. As part of delivering our services — including cricket betting, live casino, slots, and mobile wallet payment processing — we necessarily collect and process certain personal data about our players. We take this responsibility seriously and are committed to handling all personal data in a lawful, fair, and transparent manner.

This Policy sets out in clear, accessible terms exactly what personal data bdaeej collects, the purposes for which it is used, the legal basis on which it is processed, how long it is retained, with whom it may be shared, and the rights that every player holds in respect of their own data. If you have any questions about this Policy or about how your personal data is handled, you may contact us at any time using the details set out in Section 16.

2. Data Controller

For the purposes of applicable data protection law, bdaeej is the data controller in respect of all personal data collected through the bdaeej platform. As data controller, bdaeej determines the purposes and means of processing personal data and is responsible for ensuring that all processing activities comply with applicable legal obligations.

Our designated data protection contact can be reached at: [email protected]

3. Data We Collect

bdaeej collects the following categories of personal data:

3.1 Registration and Identity Data

• Full legal name
• Date of birth (used for age verification — 18+ requirement)
• Residential address including city (Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, Cox's Bazar, or other)
• Email address
• Mobile phone number
• Chosen username and encrypted password

3.2 Identity Verification (KYC) Data

• Government-issued photographic identification (National ID card, passport, or driving licence)
• Proof of address documentation (utility bill, bank statement, or official correspondence)
• Proof of payment method ownership (screenshot or confirmation from bKash, Nagad, Rocket, Upay, or bank account)
• Selfie or live photo where required for enhanced verification

3.3 Financial and Transaction Data

• Deposit and withdrawal transaction records including amounts, dates, and payment method references
• Mobile wallet identifiers (bKash account number, Nagad account number, Rocket account number, Upay account number)
• Bank account details where bank transfer is used
• Account balance history and bonus credit records

3.4 Gaming and Betting Activity Data

• Betting history including markets, stake amounts, odds, and outcomes
• Casino game session data including games played, session duration, and results
• Responsible gaming tool usage (deposit limits set, self-exclusion requests, cooling-off periods)
• Bonus and promotional offer uptake and wagering progress

3.5 Technical and Device Data

• IP address at time of registration and each subsequent login
• Device type, operating system, and browser type
• Session timestamps and login history
• Geolocation data at the country and city level where permitted by your device settings

3.6 Communications Data

• Records of customer support interactions via Live Chat, email, and WhatsApp
• Feedback and complaint submissions
• Responses to surveys or promotional communications where you have opted in

4. How We Collect Your Data

bdaeej collects personal data through the following channels:

• Directly from you — when you complete the registration form, submit KYC verification documents, make a deposit or withdrawal, contact our support team, or participate in a promotion.
• Automatically — when you access and use the Platform, we automatically collect technical data including your IP address, device identifiers, session data, and interaction logs through cookies and server-side logging systems.
• From third parties — where required for identity verification, we may receive data from third-party KYC and anti-fraud service providers. Where you make a payment, our payment processing partners (bKash, Nagad, Rocket, Upay) may provide us with transaction confirmation data.

5. How We Use Your Data

bdaeej uses the personal data it collects for the following purposes:

Purpose	Data Categories Used
Account registration and management	Registration data, identity data
Age verification (18+ compliance)	Date of birth, KYC documents
Processing deposits and withdrawals	Financial data, identity data
Anti-money laundering (AML) compliance	Financial data, KYC data, transaction history
Fraud detection and prevention	Technical data, financial data, betting activity
Responsible gaming monitoring and player protection	Betting activity, session data, communications
Customer support and dispute resolution	Communications data, account data, transaction data
Platform security and technical operation	Technical data, device data, IP address
Personalisation of gaming experience	Betting activity, session data
Marketing communications (where consented)	Registration data, communication preferences

6. Legal Basis for Processing

bdaeej processes personal data on the following legal bases:

• Contractual necessity — processing required to fulfil our obligations under the Terms & Conditions, including account management, payment processing, and game delivery.
• Legal obligation — processing required to comply with applicable legal requirements including anti-money laundering regulations, age verification obligations, and responsible gaming duties.
• Legitimate interests — processing for the purposes of fraud prevention, platform security, responsible gaming monitoring, and service improvement, where our legitimate interests are not overridden by your fundamental rights and freedoms.
• Consent — processing for marketing communications and certain cookie-based data collection, where you have provided explicit opt-in consent. You may withdraw this consent at any time by contacting [email protected] or adjusting your account communication preferences.

7. Data Sharing and Disclosure

7.1 Service Providers

bdaeej shares personal data with carefully selected third-party service providers who assist in the operation of the Platform. These include:

• Payment processors — bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, and Islami Bank, solely for the purpose of processing your deposits and withdrawals.
• Identity verification providers — third-party KYC service providers used to verify player identity and age in compliance with our legal obligations.
• Game providers — Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other studio partners, who may process session data as part of game delivery.
• Customer support platform providers — third-party live chat and support ticketing service providers.
• IT and hosting providers — cloud infrastructure and server hosting partners responsible for maintaining platform availability and data storage security.

All third-party service providers are required to process personal data only for the specified purpose and in accordance with bdaeej's instructions, under binding data processing agreements that include appropriate technical and organisational security measures.

7.2 Legal and Regulatory Disclosure

bdaeej may disclose personal data to government authorities, law enforcement agencies, or regulatory bodies where we are legally required to do so, or where such disclosure is necessary to prevent fraud, money laundering, or other illegal activity. Such disclosures will be made strictly in accordance with applicable law and only to the extent required.

7.3 No Sale of Data

bdaeej does not sell, rent, lease, or trade personal data to any third party for their own marketing or commercial purposes under any circumstances.

8. Cookies and Tracking Technologies

8.1 What Are Cookies

Cookies are small text files placed on your device by the bdaeej platform when you visit. They allow the Platform to remember certain information about your session and preferences, enabling a smoother and more personalised experience.

8.2 Types of Cookies We Use

• Essential cookies — required for the Platform to function correctly, including session management, login state, and security verification. These cannot be disabled without breaking core Platform functionality.
• Functional cookies — used to remember your language preferences, display settings, and other optional personalisation choices.
• Analytics cookies — used to understand how players interact with the Platform, which pages are visited most frequently, and where technical issues occur. Analytics data is aggregated and does not identify individual players.
• Responsible gaming cookies — used to track session duration and support the delivery of responsible gaming alerts and time-out reminders.

8.3 Managing Cookies

You may manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may impair the functionality of the bdaeej Platform, including the ability to remain logged in during a session. Instructions for managing cookies in major browsers are available through each browser's help documentation.

9. Data Retention

bdaeej retains personal data for the periods set out in the table below. Where a legal obligation requires retention beyond the standard period, the longer period applies. Upon expiry of the applicable retention period, data is securely deleted or anonymised in accordance with our internal data management procedures.

Data Category	Retention Period	Basis
Account registration data	5 years after account closure	AML and responsible gaming legal obligations
KYC / identity verification documents	5 years after account closure	Legal obligation
Financial transaction records	7 years after transaction date	Financial record-keeping legal obligation
Betting and gaming activity logs	5 years after account closure	Dispute resolution and responsible gaming
Customer support communications	3 years after closure of the relevant support case	Legitimate interest — dispute resolution
Technical and device logs	12 months from collection	Platform security and fraud prevention
Marketing consent records	Until consent is withdrawn plus 1 year	Legal obligation to evidence consent

10. Data Security

bdaeej implements a range of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and our servers.
• Encryption of sensitive data at rest, including identity documents and financial records.
• Role-based access controls ensuring that personal data is accessible only to authorised personnel whose roles require it.
• Regular internal security audits and vulnerability assessments of Platform infrastructure.
• Secure data centres with physical access controls and environmental monitoring.
• Multi-factor authentication requirements for internal staff accessing systems containing player data.

While bdaeej takes all reasonable steps to protect your data, no online platform can guarantee absolute security. Players should also take responsibility for protecting their own account credentials and should report any suspected unauthorised account access to our support team immediately.

11. Your Rights

As a player whose personal data is processed by bdaeej, you hold the following rights in respect of your data:

• Right of access — you may request a copy of all personal data that bdaeej holds about you. We will respond to access requests within 30 calendar days.
• Right to rectification — you may request that inaccurate or incomplete personal data held by bdaeej be corrected or completed without undue delay.
• Right to erasure — you may request that bdaeej delete your personal data where it is no longer necessary for the purpose for which it was collected, subject to legal retention obligations that may require us to retain certain data.
• Right to restriction of processing — you may request that bdaeej restrict the processing of your data in certain circumstances, for example while a correction request is being reviewed.
• Right to data portability — you may request a copy of your personal data in a structured, commonly used, machine-readable format where processing is based on your consent or on a contract.
• Right to withdraw consent — where processing is based on consent (for example, marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing that occurred prior to withdrawal.
• Right to object — you may object to processing carried out on the basis of legitimate interests, including profiling for responsible gaming purposes. bdaeej will review all objections and respond within 30 calendar days.

To exercise any of the above rights, please contact our support team at [email protected] with the subject line "Data Rights Request" and a description of your request. We may require you to verify your identity before processing a data rights request.

12. Children's Privacy

The bdaeej Platform is strictly intended for individuals aged 18 years and above. We do not knowingly collect personal data from individuals under the age of 18. If we become aware that an Account has been registered by or on behalf of a person under 18, we will immediately suspend the Account, investigate, and securely delete any associated personal data in accordance with our responsible gaming obligations. If you believe that a person under 18 has registered on bdaeej, please notify us immediately at [email protected].

13. Third-Party Services and External Links

The bdaeej Platform integrates with third-party game providers including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi to deliver casino game content. When you play a game delivered by a third-party provider, that provider's software may collect certain technical session data as part of normal game operation. This data collection is governed by the respective provider's own data protection policies. bdaeej is not responsible for the data practices of third-party game providers beyond the contractual obligations we impose on them as processors acting on our behalf.

The bdaeej Platform does not contain links to external third-party websites. Should any external links be present for operational reasons, bdaeej is not responsible for the privacy practices of those external sites and recommends that you review their privacy policies independently.

14. Marketing Communications

bdaeej may, with your explicit consent, send you marketing communications including promotional offers, bonus notifications, sports betting tips, and seasonal event promotions (for example, BPL cricket season offers, Eid promotions, or Pohela Boishakh bonuses). Marketing communications are sent via your registered email address or mobile number.

You may opt out of marketing communications at any time by:

• Clicking the "unsubscribe" link included in any marketing email.
• Updating your communication preferences within your bdaeej Account settings.
• Contacting our support team at [email protected] with a request to be removed from marketing lists.

Opting out of marketing communications does not affect the delivery of transactional messages relating to your Account, such as deposit confirmations, withdrawal notifications, KYC requests, or important service updates. These service messages are not marketing and will continue to be sent regardless of marketing consent status.

15. Amendments to This Privacy Policy

bdaeej reserves the right to amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, our data processing practices, or the services we offer. Where amendments are material — meaning they significantly affect the way in which we use your personal data or the rights available to you — we will notify registered players via their registered email address or mobile number at least 14 days before the revised Policy takes effect.

Non-material amendments, such as typographical corrections or clarifications that do not change the substance of processing activities, will be published on this page with an updated effective date. We encourage players to review this Policy periodically to remain informed about how their data is handled. The version of this Policy published on the bdaeej Platform at any given time is the current operative version.

16. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way in which bdaeej processes your personal data, please contact us through any of the following channels:

• Email: [email protected]
• Live Chat: Available 24/7 directly from any page on the bdaeej Platform
• WhatsApp: +880 1700 000000
• Support Hours: 24 hours a day, 7 days a week, Bangladesh Standard Time (BST, UTC+6)

For matters relating to responsible gaming and player self-protection tools, please visit our Responsible Gaming page. For a full understanding of your rights and obligations as a player, please also review our Terms & Conditions.