bijje Privacy Policy
— How We Protect Your Personal Data

1 Information We Collect

bijje collects personal data through several channels: directly from you when you register an account or contact support, automatically when you interact with the platform, and from trusted third-party partners where permitted. The categories of data we collect are described below.

1.1 Registration & Identity Data

• Full legal name as it appears on your government-issued identity document.
• Date of birth, used to verify that you meet the 18+ minimum age requirement.
• Email address, used as your primary account identifier and communication channel.
• Mobile phone number, used for two-factor authentication and account security alerts.
• Residential address in Bangladesh (district, division, and postcode), collected during Know Your Customer (KYC) verification.
• Copies of identity documents submitted during KYC verification, such as your Bangladesh National ID card (NID) or passport.

1.2 Financial & Transaction Data

• bKash, Nagad, Rocket, or Upay mobile wallet numbers associated with deposits and withdrawals.
• Bank account details where bank transfer payments are used (Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank).
• Transaction history, including all deposit and withdrawal amounts in Bangladeshi Taka (৳), timestamps, and payment method used.
• Source of funds documentation submitted in response to enhanced due diligence requests.

1.3 Usage & Technical Data

• IP address and approximate geographic location derived from IP at the time of login.
• Device type, operating system version, and browser type and version.
• Session duration, pages visited within the bijje platform, and in-platform navigation patterns.
• Game history, including games played, wager amounts, win/loss outcomes, and bonus interactions.
• Sports betting activity, including markets selected, odds accepted, stakes placed, and settlement outcomes.

1.4 Communications Data

• Content of live chat, email, and support ticket conversations you initiate with bijje customer support.
• Records of your consent to or opt-out from promotional email and SMS communications.
• Feedback, survey responses, and voluntary information you provide in any bijje research or satisfaction survey.

2 How We Use Your Data

bijje processes your personal data for specific, legitimate purposes. We do not use your data for any purpose incompatible with the reason it was originally collected. The table below sets out the primary purposes for which we use your data and the legal basis for each.

Where bijje relies on your consent as the legal basis for processing (for example, sending promotional communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal. To withdraw consent, update your communication preferences from within your bijje account dashboard or contact [email protected].

3 Data Sharing & Third Parties

bijje does not sell your personal data to any third party. We share personal data with carefully selected third parties only where necessary to operate the platform, comply with legal obligations, or protect the safety and integrity of our services. All third-party processors engaged by bijje are bound by contractual obligations that restrict their use of your data to the specific purposes for which it was shared.

3.1 Categories of Third-Party Recipients

• Payment Processors: bKash, Nagad, Rocket, Upay, and partner banks receive the minimum financial data necessary to process your deposit or withdrawal transaction. These providers operate under their own privacy policies and are independently regulated.
• Game Software Providers: Studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive anonymised session and game-result data for the purpose of game integrity verification, RTP auditing, and technical support. Your identity is not disclosed to game providers.
• Identity Verification Services: Third-party KYC and anti-fraud vendors may process your identity documents on bijje's behalf solely for the purpose of age and identity verification. These vendors are required to delete submitted documents once verification is complete.
• Analytics Providers: Aggregated, anonymised usage data may be shared with analytics platforms to help bijje understand platform performance. No personally identifiable information is included in these data transfers.
• Legal and Regulatory Authorities: bijje will disclose personal data to law enforcement agencies, courts, or regulatory bodies where required to do so by a valid legal order, court directive, or regulatory request. bijje will notify affected players of such disclosures to the extent permitted by law.

3.2 International Data Transfers

bijje's primary data infrastructure is hosted on servers located outside Bangladesh. Where your personal data is transferred to servers or third-party processors in other countries, bijje ensures that appropriate safeguards are in place, including contractual data protection clauses consistent with recognised international data protection standards. By using the bijje platform, you acknowledge and consent to this international processing of your data.

4 Cookies & Tracking Technologies

bijje uses cookies and similar tracking technologies (including local storage and session tokens) to operate the platform correctly, maintain your logged-in session, remember your preferences, and analyse aggregate usage patterns. A cookie is a small text file placed on your device by a website; it allows the site to recognise your device on return visits.

4.1 Types of Cookies We Use

You can manage your cookie preferences at any time through your browser settings. Note that disabling strictly necessary cookies will prevent you from logging in to your bijje account and using core platform features. Most modern browsers allow you to view, delete, and block cookies on a per-site basis; consult your browser's help documentation for specific instructions.

5 Data Retention & Storage

bijje retains personal data only for as long as necessary to fulfil the purpose for which it was collected, plus any additional period required to satisfy legal, regulatory, or dispute-resolution obligations. The table below summarises our standard retention periods by data category.

Upon expiry of the applicable retention period, personal data is either securely deleted from bijje's systems or irreversibly anonymised so that it can no longer be linked to an identifiable individual. Anonymised and aggregated data may be retained indefinitely for statistical and analytical purposes.

6 Security Measures

bijje implements a multi-layered security architecture to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our technical and organisational security measures include the following.

• Transport Layer Security (TLS 1.3): All data transmitted between your device and bijje servers is encrypted in transit using TLS 1.3, preventing interception by third parties.
• AES-256 Encryption at Rest: Personal data stored in bijje databases is encrypted using AES-256, an industry-standard symmetric encryption algorithm. Encryption keys are stored separately from the data they protect, under strict access controls.
• Two-Factor Authentication (2FA): bijje strongly recommends enabling 2FA on your account. 2FA requires a one-time code in addition to your password at login, significantly reducing the risk of unauthorised account access.
• Access Controls: Access to production databases containing personal data is restricted on a strict need-to-know basis. bijje staff with data access privileges undergo regular security training and are subject to confidentiality obligations.
• Intrusion Detection and Monitoring: bijje's infrastructure is monitored around the clock for anomalous activity. Automated alerts and a dedicated security team ensure rapid response to any potential incident.
• Penetration Testing: bijje conducts periodic security assessments and penetration tests conducted by independent security specialists to identify and remediate vulnerabilities before they can be exploited.
• Data Breach Response: In the event of a personal data breach that is likely to result in risk to affected individuals, bijje will notify affected players promptly and take immediate remediation steps. Incident reports will be prepared and retained as part of bijje's security governance obligations.

7 Your Privacy Rights

As a bijje account holder, you have a number of rights with respect to the personal data we hold about you. bijje is committed to honouring these rights and will respond to all verified requests within 30 calendar days of receipt. Where a request is complex or voluminous, this period may be extended by a further 30 days with written notice provided to you.

7.1 Your Rights Explained

• Right of Access: You may request a copy of all personal data that bijje holds about you, along with information about how it is being used. This is sometimes referred to as a Subject Access Request (SAR).
• Right to Rectification: If any personal data bijje holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update many details directly from within your bijje account dashboard.
• Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purpose it was collected, where you have withdrawn consent, or where you believe the data has been processed unlawfully. Note that bijje may be required to retain certain data to comply with legal obligations even where an erasure request is made.
• Right to Restriction: You may request that bijje restrict the processing of your personal data in certain circumstances — for example, while the accuracy of the data is being contested.
• Right to Data Portability: Where processing is based on your consent or on contract performance, you may request that bijje provide your personal data in a structured, commonly used, machine-readable format so that you can transfer it to another service provider.
• Right to Object: You have the right to object to processing of your personal data where bijje relies on legitimate interests as its legal basis. You also have an unconditional right to object to processing for direct marketing purposes at any time.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that occurred prior to the withdrawal.

7.2 How to Exercise Your Rights

To exercise any of the rights listed above, please submit your request in writing to [email protected] with the subject line "Privacy Rights Request". Your request must include sufficient information to verify your identity — typically your registered email address and a description of the specific right you wish to exercise. bijje will not charge a fee for processing rights requests unless a request is manifestly unfounded or excessive, in which case a reasonable administrative fee may apply.

8 Policy Updates & Contact

8.1 Changes to This Privacy Policy

bijje reviews this Privacy Policy periodically and will update it to reflect changes in our data practices, platform features, or applicable legal requirements. When we make material changes to this Privacy Policy, we will notify registered players via the email address associated with their account and by posting a prominent notice on the bijje platform for a period of at least 14 days prior to the changes taking effect. The "Effective" date shown at the top of this page will be updated each time the Policy is revised.

Your continued use of the bijje platform following the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you disagree with any material change to this Policy, you should stop using the platform and contact bijje support to request account closure.

8.2 Contact Information

If you have any questions, concerns, or complaints about this Privacy Policy or about bijje's handling of your personal data, please contact the bijje Data Protection team at [email protected]. We aim to respond to all privacy enquiries within five business days. Support is available around the clock, every day of the year including Bangladesh public holidays, aligned to Bangladesh Standard Time (BST, UTC+6).

Where you are not satisfied with bijje's response to a privacy complaint, you may have the right to lodge a complaint with the data protection authority or consumer protection body applicable in your jurisdiction.