Bitjali Privacy Policy – How We Protect Your Data

Bitjali is an online casino and gaming platform operating at bitjali.com, serving players primarily in Bangladesh. When this Privacy Policy refers to "Bitjali", "we", "us", or "our", it means the Bitjali platform and the team responsible for operating it.

Bitjali acts as the data controller for all personal information collected through the platform. This means we are responsible for deciding how and why your personal data is processed, and we are accountable for ensuring that processing is carried out lawfully and transparently.

If you have any questions about this Privacy Policy or about how Bitjali handles your personal data, you can reach our privacy team at [email protected] at any time.

Bitjali collects personal data in three main ways: information you provide directly, information generated automatically when you use the platform, and information received from third-party service providers such as payment processors.

Information you provide directly:

• Full name and date of birth
• Email address and mobile phone number
• Residential address
• Government-issued ID details (National ID, passport, or driving licence number)
• Payment method details (bKash, Nagad, or Rocket mobile number)
• Any information you provide when contacting Bitjali support

Information collected automatically:

• IP address and approximate geographic location
• Device type, operating system, and browser version
• Pages visited, time spent on each page, and navigation patterns
• Game activity including games played, bet amounts, and session duration
• Login timestamps and account activity logs
• Cookie and tracking data (see Section 6)

Information from third parties:

• Transaction confirmation data from bKash, Nagad, and Rocket
• Identity verification results from KYC service providers
• Fraud screening results from payment security providers

Bitjali uses the personal data we collect for the following purposes. We only use your data for purposes that are consistent with why it was collected in the first place.

Bitjali does not use your personal data to make fully automated decisions that have a significant legal or similarly significant effect on you without human review. Where automated tools are used — for example, in fraud screening — a human review is conducted before any account action is taken.

Bitjali processes your personal data on the following legal grounds depending on the specific purpose:

• Contract performance: Processing your registration data, payment information, and account activity is necessary to provide the Bitjali service you have signed up for.
• Legal obligation: Identity verification, anti-money laundering checks, and record-keeping are required by applicable law and regulatory requirements.
• Legitimate interests: Fraud prevention, platform security, and improving the Bitjali service are carried out on the basis of Bitjali's legitimate business interests, balanced against your privacy rights.
• Consent: Marketing communications and non-essential cookies are only processed where you have given clear, informed consent. You may withdraw this consent at any time.

Bitjali does not sell your personal data. We share your data only in the following limited circumstances, and only to the extent necessary for the specific purpose:

• Payment processors: bKash, Nagad, and Rocket receive transaction data necessary to process your deposits and withdrawals. These providers operate under their own privacy policies and are independently regulated.
• KYC and identity verification providers: Third-party identity verification services receive the documents and details you submit during the KYC process. These providers are contractually bound to process your data only for verification purposes.
• Fraud prevention services: Anonymised or pseudonymised data may be shared with fraud screening providers to protect the platform and all players from fraudulent activity.
• Legal and regulatory authorities: Bitjali will disclose personal data to law enforcement, regulatory bodies, or courts when required to do so by applicable law, a valid legal order, or to protect the rights and safety of Bitjali and its players.
• Business transfers: In the event of a merger, acquisition, or sale of Bitjali's business, player data may be transferred to the acquiring entity. Players will be notified of any such transfer and given the opportunity to close their account if they do not wish their data to be transferred.

Bitjali uses cookies and similar tracking technologies to operate the platform, remember your preferences, analyse usage patterns, and — where you have consented — deliver relevant promotional content.

Types of cookies used by Bitjali:

• Essential cookies: Required for the platform to function. These include session cookies that keep you logged in and security cookies that protect against cross-site request forgery. These cannot be disabled without breaking core platform functionality.
• Functional cookies: Remember your preferences such as language settings, preferred games, and display options. These improve your experience but are not strictly necessary.
• Analytics cookies: Collect anonymised data about how players use the Bitjali platform — which pages are visited most, where players encounter difficulties, and how navigation flows are used. This data helps Bitjali improve the platform over time.
• Marketing cookies: Used only with your consent to track your activity and deliver relevant promotional content. You can opt out of marketing cookies at any time through your browser settings or by contacting Bitjali support.

You can manage your cookie preferences through your browser settings. Note that disabling essential cookies will affect your ability to use the Bitjali platform. For detailed instructions on managing cookies in your specific browser, refer to your browser's help documentation.

Bitjali retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulatory obligations.

• Active account data: Retained for the duration of your account and for a period of 5 years after account closure, in accordance with standard financial record-keeping requirements.
• KYC and identity documents: Retained for a minimum of 5 years after account closure as required by anti-money laundering regulations.
• Transaction records: Retained for 5 years after the date of the transaction.
• Support correspondence: Retained for 2 years after the resolution of the relevant support case.
• Marketing data: Retained until you withdraw consent or for 2 years of inactivity, whichever comes first.
• Analytics data: Anonymised analytics data may be retained indefinitely as it cannot be linked back to individual players.

When data is no longer required, Bitjali securely deletes or anonymises it in accordance with our internal data disposal procedures.

As a Bitjali player, you have the following rights in relation to your personal data. To exercise any of these rights, contact Bitjali support at [email protected]. We will respond to all valid requests within 30 days.

Bitjali takes the security of your personal data seriously and implements a range of technical and organisational measures to protect it against unauthorised access, loss, alteration, or disclosure.

Security measures in place at Bitjali include:

• SSL/TLS encryption for all data in transit between your device and Bitjali servers.
• AES-256 encryption for sensitive data stored at rest, including identity documents and payment details.
• Multi-factor authentication options for player accounts.
• Role-based access controls limiting internal access to player data on a strict need-to-know basis.
• Regular independent security audits and penetration testing.
• 24/7 monitoring of platform infrastructure for suspicious activity.
• Secure data disposal procedures for data that is no longer required.

Despite these measures, no online platform can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, Bitjali will notify affected players without undue delay and will take immediate steps to contain and remediate the breach.

You also play a role in keeping your account secure. Use a strong, unique password for your Bitjali account, do not share your login credentials with anyone, and contact Bitjali support immediately if you suspect unauthorised access to your account.

The Bitjali platform is strictly for adults aged 18 and over. Bitjali does not knowingly collect personal data from anyone under the age of 18. Age verification is conducted as part of the account registration and KYC process to enforce this requirement.

If Bitjali becomes aware that personal data has been collected from a person under the age of 18, that account will be closed immediately, all data will be deleted, and any funds held in the account will be returned to the payment method used for deposit.

If you believe that a minor has registered an account at Bitjali, please contact us immediately at [email protected] so we can investigate and take appropriate action.

Bitjali's primary servers and data storage infrastructure are located in secure data centres. In some cases, your personal data may be processed by service providers located outside Bangladesh — for example, KYC verification providers or fraud screening services that operate internationally.

Where personal data is transferred internationally, Bitjali ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under applicable data protection law. These safeguards include contractual data processing agreements with all third-party service providers who handle Bitjali player data.

By registering an account at Bitjali, you acknowledge that your personal data may be transferred and processed in countries outside Bangladesh as described in this section.

Bitjali may send you promotional emails, SMS messages, and in-platform notifications about bonuses, new games, special offers, and platform updates. We will only send you marketing communications if you have opted in to receive them during registration or through your account settings.

You can opt out of marketing communications at any time by:

• Clicking the unsubscribe link in any marketing email from Bitjali.
• Replying STOP to any marketing SMS from Bitjali.
• Updating your communication preferences in your Bitjali account settings.
• Contacting Bitjali support at [email protected] and requesting removal from marketing lists.

Opting out of marketing communications will not affect your receipt of essential account notifications such as deposit confirmations, withdrawal updates, security alerts, and support responses. These transactional communications are necessary for the operation of your account and cannot be disabled.

Bitjali reviews and updates this Privacy Policy periodically to reflect changes in our data practices, legal requirements, or platform features. When material changes are made, we will notify registered players via email and/or an in-platform notification before the changes take effect.

The effective date at the top of this page will always reflect when the policy was last updated. We encourage you to review this page periodically so you stay informed about how Bitjali protects your privacy.

Your continued use of the Bitjali platform after any update to this Privacy Policy constitutes your acceptance of the updated policy. If you do not agree with any changes, you should stop using the platform and contact support to close your account.

If you have any questions, concerns, or requests relating to this Privacy Policy or to how Bitjali handles your personal data, please get in touch with us through any of the following channels:

• Email: [email protected] — privacy-related requests are handled within 5 business days.
• Live Chat: Available directly on the Bitjali platform, 24 hours a day, 7 days a week.

When submitting a data rights request, please include your registered email address and a brief description of your request so we can locate your account and respond efficiently. We may need to verify your identity before processing certain requests to protect your account security.