btji Privacy Policy —
Your Data, Handled With Care

Introduction

This Privacy Policy ("Policy") describes how btji ("btji", "we", "us", "our") collects, processes, stores, and protects the personal data of individuals ("you", "your", "the Player") who register for an account on the btji platform located at btji.io, or who otherwise interact with our website, mobile interface, or customer support channels.

btji is committed to handling your personal data with the highest standards of care, transparency, and security. We recognise that players across Bangladesh entrust us with sensitive personal and financial information, and we take that responsibility seriously. This Policy is designed to give you a clear and complete picture of our data practices so that you can make informed decisions about your use of the btji platform.

By registering a btji account, depositing funds, placing a wager, or otherwise using any part of the btji service, you acknowledge that you have read and understood this Policy and that you consent to the collection and processing of your personal data as described herein. If you do not agree with any aspect of this Policy, please discontinue your use of the btji platform and contact our support team to close your account.

Data We Collect

btji collects personal data from you in three principal ways: data you provide directly, data generated automatically through your use of the platform, and data obtained from trusted third-party sources as part of our identity verification and fraud-prevention obligations.

2.1 Data You Provide Directly

• Registration data: Full name, date of birth, gender, email address, mobile number, and residential address (including city, district, and postcode) provided when you create a btji account.
• KYC verification documents: Copies of your National ID Card (NID), passport, driving licence, or utility bill submitted as part of our identity verification process.
• Financial data: Mobile financial service account numbers (bKash, Nagad, Rocket, Upay) and bank account details provided for deposit and withdrawal purposes. btji does not store full card numbers or payment credentials on our own servers; these are handled by our PCI-DSS compliant payment processors.
• Communications data: The content of messages you send to our support team via live chat, email, or any other communication channel, including details of any complaint or query you raise.
• Preferences and settings: Language preferences, notification settings, responsible gaming limits, and marketing communication preferences you configure within your account dashboard.

2.2 Data Generated Automatically

• Usage data: Pages visited, games played, betting history, session duration, clicks, scrolls, and other interactions with the btji platform interface.
• Device and technical data: IP address, browser type and version, operating system, device type (mobile/desktop/tablet), screen resolution, and time zone setting.
• Transaction data: A full record of all deposits, withdrawals, bonus claims, wagers placed, and game outcomes associated with your btji account.
• Cookie and tracking data: Data collected via cookies and similar technologies as described in Section 6 of this Policy.

2.3 Data from Third Parties

• Identity verification providers: Where btji uses a third-party KYC or age-verification service to confirm the accuracy of the documents you submit, that provider may return a verification result and a confidence score to btji.
• Payment processors: bKash, Nagad, Rocket, Upay, and bank partners may share transaction confirmation data with btji to reconcile deposits and withdrawals on your account.
• Fraud prevention agencies: btji may check your details against industry-standard fraud-prevention databases as part of our AML and responsible gaming obligations.

How We Use Your Data

btji uses the personal data it collects for the following specific and legitimate purposes:

1. Account creation and management: To register your btji account, maintain your account profile, authenticate your identity when you log in, and enable you to access the games and services available on the platform.
2. Identity verification and KYC compliance: To verify that you meet the minimum age requirement of 21 years, confirm that the personal details you have provided are accurate, and satisfy our ongoing obligations under applicable anti-money laundering (AML) and know-your-customer (KYC) regulations.
3. Payment processing: To process your deposit and withdrawal requests, reconcile transactions with our payment partners including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, and BRAC Bank, and maintain accurate financial records for your account.
4. Service delivery and platform improvement: To operate the btji platform reliably, deliver the games and sports betting markets you access, fix bugs and technical issues, and analyse aggregate usage data to improve the user experience for all players in Bangladesh.
5. Customer support: To respond to your queries, complaints, and requests submitted via live chat, email, or any other support channel, and to maintain records of support interactions for quality assurance purposes.
6. Responsible gaming: To monitor your account activity for indicators of problem gambling behaviour, enforce any deposit limits, loss limits, or self-exclusion restrictions you have set, and proactively reach out to players who may be at risk. Your wellbeing is a priority at btji.
7. Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, multiple-account registration, bonus abuse, money laundering, and other prohibited conduct as defined in the btji Terms & Conditions.
8. Marketing communications: Where you have opted in to receive promotional communications, to send you information about btji bonuses, promotions, new games, seasonal offers (including Eid specials, BPL season promotions, and Pohela Boishakh bonuses), and VIP programme updates. You may opt out of marketing communications at any time via your account settings or by contacting support.
9. Legal and regulatory compliance: To comply with applicable laws, respond to lawful requests from regulatory or law enforcement authorities, and exercise or defend legal claims.

btji will not use your personal data for any purpose that is incompatible with the purposes listed above without first notifying you and, where required by applicable law, obtaining your consent.

Legal Basis for Processing

For each category of personal data we process, btji relies on one or more of the following lawful bases:

• Contractual necessity: Processing your registration data, financial data, and transactional data is necessary for btji to perform the contract it has with you — namely, operating your account and delivering the services you have signed up to use.
• Legal obligation: Processing your KYC documents and financial transaction records is required by applicable anti-money laundering legislation and age-verification obligations. btji must retain these records for the periods specified by law regardless of whether your account remains active.
• Legitimate interests: Processing your technical and behavioural data for fraud prevention, platform security, and service improvement is in the legitimate interests of btji and its player community, provided that those interests are not overridden by your own data-protection rights and interests.
• Consent: Processing your data for marketing communications is based on your explicit opt-in consent, which you may withdraw at any time without affecting the lawfulness of processing carried out prior to withdrawal.

Where btji processes special-category data (such as information about problem gambling or self-exclusion that may indirectly relate to your health), we do so on the basis of substantial public interest in responsible gambling compliance, or with your explicit consent.

Sharing Your Data

btji does not sell, rent, or trade your personal data to any third party for their own commercial purposes. We share personal data with third parties only in the following circumstances and only to the extent strictly necessary for the stated purpose:

• Payment service providers: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, and Sonali Bank receive the transactional data required to process your deposits and withdrawals. These providers process your data as independent data controllers subject to their own privacy policies and applicable financial regulations.
• Game and technology providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other game studios integrated into the btji platform may receive a session token and your account identifier to deliver game content to your device. These providers do not receive your full personal profile.
• KYC and identity verification providers: Third-party verification services receive the identity documents you submit during KYC in order to return a verification result to btji. These providers are contractually bound to use your documents solely for verification purposes and to delete them once the verification process is complete.
• Analytics and platform infrastructure providers: Service providers who assist btji with hosting, cloud infrastructure, analytics, and IT security may process technical and behavioural data on btji's behalf as data processors under written data-processing agreements that bind them to btji's data-protection standards.
• Regulatory and law enforcement authorities: btji will disclose personal data to competent regulatory or law enforcement authorities where required by law, or where disclosure is necessary to protect the safety, rights, or property of btji or its players.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of the btji business, personal data held by btji may be transferred to the acquiring entity as part of the transaction, subject to equivalent data-protection commitments being assumed by the acquirer.

Cookies and Tracking Technologies

btji uses cookies and similar technologies (including local storage, session tokens, and pixel tags) to operate the platform efficiently and to understand how players use the site. The following types of cookies are used on btji.io:

• Strictly necessary cookies: These cookies are essential for the btji platform to function. They maintain your login session, remember items in your account dashboard, and enable core security features such as CSRF protection. These cookies cannot be disabled without impairing the functionality of the platform.
• Functional cookies: These cookies remember your preferences — such as your preferred language, selected responsible gaming limits, and notification settings — so that you do not need to re-enter them on every visit.
• Analytical cookies: btji uses privacy-respecting analytics tools to collect aggregate, anonymised data about how players navigate the site, which pages receive the most traffic, and where users encounter difficulties. This data is used solely to improve the btji platform and is not linked to your personal identity.
• Security and fraud-prevention cookies: These cookies help btji identify suspicious login attempts, bot activity, and unusual betting patterns that may indicate fraudulent behaviour, protecting both your account and the integrity of the platform.

btji does not use advertising cookies or third-party retargeting trackers. We do not allow third-party advertising networks to place cookies on btji.io. You may manage or disable non-essential cookies through your browser settings at any time; however, disabling strictly necessary cookies will prevent you from logging in to your btji account.

Data Retention

btji retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, to comply with legal and regulatory retention obligations, and to resolve any disputes or enforce our agreements. The following retention periods apply as a general guide:

Upon expiry of the applicable retention period, btji will securely delete or anonymise your personal data such that it can no longer be associated with you as an identified individual. Where complete deletion is not immediately practicable due to backup or archival processes, we will ensure that the data is isolated from active processing until deletion can be carried out.

Data Security

btji implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include, but are not limited to:

• Encryption in transit: All data exchanged between your device and btji.io is protected by TLS 1.2 or higher. Our SSL certificate is maintained at all times and regularly renewed.
• Encryption at rest: Sensitive data fields stored in our databases — including passwords, payment account identifiers, and KYC document references — are encrypted using AES-256 or equivalent standards.
• Access controls: Access to personal data within btji is restricted on a strict need-to-know basis. Staff members with access to player data are subject to confidentiality agreements and receive regular data-protection training.
• Two-factor authentication: btji offers SMS OTP two-factor authentication (2FA) for all player accounts and enforces 2FA for all internal staff access to systems that process personal data.
• Penetration testing and vulnerability management: btji conducts regular security assessments and penetration tests to identify and remediate vulnerabilities before they can be exploited.
• Incident response: btji maintains a documented data breach response plan. In the event of a security incident affecting your personal data, we will notify you via your registered email address without undue delay, describing the nature of the incident, the data involved, and the steps taken to address it.

While btji takes every reasonable precaution to protect your data, no online platform can guarantee absolute security. You can significantly reduce the risk to your account by using a strong, unique password, enabling 2FA, and never sharing your login credentials with anyone else. If you suspect your account has been compromised, contact our support team immediately via live chat.

Your Rights

As a btji player, you have the following rights over your personal data. To exercise any of these rights, please contact our support team at [email protected] (plain text — not a clickable link) or via live chat. btji will respond to all data rights requests within 30 days of receipt, and in complex cases will provide an interim acknowledgement within 5 business days.

• Right of access: You have the right to request a copy of all personal data that btji holds about you, along with information about how it is being used and with whom it has been shared.
• Right to rectification: You have the right to ask btji to correct any personal data that is inaccurate or incomplete. For basic profile data (name, address, contact details), you can make corrections directly within your account dashboard.
• Right to erasure: You have the right to request that btji delete your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose for which it was collected, or where you withdraw consent and there is no other lawful basis for processing. Note that btji is required by law to retain certain categories of data (such as KYC documents and financial records) for a minimum period regardless of a deletion request.
• Right to restriction: You have the right to ask btji to restrict the processing of your data while a dispute about its accuracy or lawfulness is resolved.
• Right to data portability: Where processing is based on consent or contractual necessity and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to object: You have the right to object to the processing of your personal data for direct marketing purposes at any time, and to object to processing based on legitimate interests where your particular circumstances warrant it.
• Right to withdraw consent: Where btji processes your data on the basis of your consent (for example, marketing emails), you may withdraw that consent at any time by updating your preferences in your account dashboard or by contacting support. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

Children's Privacy

The btji platform is strictly intended for adults aged 21 years and above. btji does not knowingly collect personal data from any person under the age of 21. Our registration process includes date-of-birth verification and KYC identity checks specifically designed to prevent underage access to the platform.

If btji becomes aware that personal data has been collected from a person under the age of 21 — whether through a fraudulent registration or any other means — we will immediately suspend the relevant account, delete the associated personal data to the fullest extent permitted by our legal retention obligations, and return any deposited funds to the payment source used.

If you are a parent or guardian and you believe that a person under the age of 21 in your care has registered a btji account or provided personal data to btji, please contact our support team immediately at [email protected] so that we can take prompt remedial action.

International Data Transfers

btji's primary operations and data storage are designed to serve players in Bangladesh. However, some of our third-party service providers — including certain game studios, analytics tools, and cloud infrastructure partners — may process data on servers located outside Bangladesh.

Whenever personal data is transferred to a third party located in a jurisdiction that may not offer the same level of data protection as Bangladesh, btji takes appropriate safeguards to ensure that your data remains protected to a standard equivalent to that described in this Policy. Such safeguards include entering into contractual data-processing agreements with the receiving party that incorporate appropriate data-protection obligations.

You may request details of the specific international transfer safeguards applicable to your data by contacting our support team.

Changes to This Privacy Policy

btji reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data-processing practices, updates to applicable law, or improvements to our platform and services. When we make material changes to this Policy, we will notify you by posting a prominent notice on the btji platform and, where appropriate, by sending a notification to your registered email address at least 14 days before the changes take effect.

The "Last updated" date displayed at the top of this Policy will always reflect the date of the most recent revision. We encourage you to review this Policy periodically so that you remain informed about how btji protects your personal data. Your continued use of the btji platform after the effective date of any revised Policy constitutes your acceptance of the updated terms.

If you disagree with any material change to this Policy, you have the right to close your account before the changes take effect by contacting our support team. btji will process your account closure request and return any eligible account balance in accordance with the btji Terms & Conditions.

Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to btji's handling of your personal data, please contact our Data Protection team using the details below. We are committed to addressing all privacy-related enquiries promptly, professionally, and in plain English.

• Email: [email protected] (plain text — not a clickable link)
• Live chat: Available 24/7 via the btji platform at btji.io
• Response time: We aim to acknowledge all privacy enquiries within 2 business days and to provide a full response within 30 calendar days.
• Language: All communications are handled in English. Support is available around the clock for players across Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, and Cox's Bazar.