bdbjoy Privacy Policy

01 Introduction

Welcome to the bdbjoy Privacy Policy. bdbjoy ("we", "us", "our") is deeply committed to protecting the personal data of every player who registers and uses the bdbjoy platform at https://bdbjoy.club. This Privacy Policy ("Policy") describes, in clear and transparent terms, what personal data we collect from you, why we collect it, how we use it, how long we keep it, and what rights you have in relation to it.

This Policy applies to all personal data processed in connection with your use of the bdbjoy website, mobile browser experience, account registration, deposits and withdrawals, game play, promotional participation, and customer support interactions. It applies to all players accessing bdbjoy from any location within Bangladesh, including Dhaka, Chittagong, Sylhet, Rajshahi, Khulna, Barisal, Rangpur, and Mymensingh.

By creating a bdbjoy account or continuing to use the bdbjoy platform after this Policy has been made available to you, you acknowledge that you have read and understood how your personal data is processed as described in this Policy. If you do not agree with any aspect of this Policy, please discontinue use of the bdbjoy platform and contact our support team to arrange account closure.

02 Data Controller

bdbjoy operates as the data controller in respect of all personal data collected from players using the bdbjoy platform. As data controller, bdbjoy determines the purposes and means of processing your personal data and is responsible for ensuring that such processing is carried out lawfully, fairly, and transparently in accordance with applicable data protection principles.

For all privacy-related enquiries, data subject requests, or complaints regarding the handling of your personal data, you may contact bdbjoy's designated privacy support contact at [email protected]. Our support team is available 24 hours a day, 7 days a week, on Bangladesh Standard Time (UTC+6).

03 Data We Collect

bdbjoy collects several categories of personal data in the course of providing its services to you. The categories are described below, together with examples of the specific data points within each category.

bdbjoy does not intentionally collect sensitive personal data categories such as racial or ethnic origin, religious beliefs, political opinions, health data, or biometric data beyond what is strictly required for mandatory identity verification purposes (e.g., a photograph on a submitted NID document).

04 How We Collect Your Data

4.1 Directly From You

The majority of personal data that bdbjoy holds about you is provided directly by you in the course of registering your account, completing identity verification, making a deposit or withdrawal, participating in a promotion, or contacting our support team. You are under no legal obligation to provide this data; however, without it, bdbjoy cannot provide you with a functional account or process transactions on your behalf.

4.2 Automatically During Platform Use

bdbjoy automatically collects certain technical and behavioural data each time you visit or interact with the bdbjoy website. This includes your IP address, device identifiers, browser characteristics, pages visited, time spent on each page, and clickstream data. This data is collected via server logs, session tracking technologies, and first-party cookies as described in Section 11 of this Policy.

4.3 From Third-Party Payment Providers

When you make a deposit or withdrawal via bKash, Nagad, Rocket, Upay, or a participating bank, the relevant payment provider may share transaction confirmation data with bdbjoy, including the registered mobile number or account number associated with the transaction, the transaction reference number, and the transaction amount in BDT. bdbjoy uses this data solely for the purpose of crediting your account and maintaining accurate financial records.

4.4 From Game Providers

Third-party game providers — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — may share aggregate or session-level game data with bdbjoy for the purposes of dispute resolution, responsible gaming monitoring, and financial reconciliation. No additional personal data beyond what is described in Section 3 is received from game providers.

05 How We Use Your Data

bdbjoy processes your personal data for the following purposes:

• Account Management: Creating, maintaining, and securing your bdbjoy account, including processing your bdbjoy login sessions and enforcing our one-account-per-person policy.
• Identity Verification: Verifying your identity and age (18+ only) to comply with responsible gaming obligations and to prevent fraudulent account creation.
• Payment Processing: Processing deposits and withdrawals in BDT via your chosen payment method (bKash, Nagad, Rocket, Upay, Visa, Mastercard, or bank transfer), and maintaining accurate financial records of all transactions.
• Game and Betting Services: Delivering casino games, sports betting markets, crash games, and all other platform features that constitute the bdbjoy service.
• Bonus and Promotions Administration: Assessing your eligibility for bonuses, tracking wagering requirement progress, and preventing bonus abuse as described in the bdbjoy Terms & Conditions.
• Responsible Gaming: Monitoring your gaming behaviour for indicators of problem gambling and, where appropriate, applying responsible gaming controls including deposit limits, cooling-off periods, or self-exclusion in accordance with bdbjoy's responsible gaming commitments.
• Fraud Prevention and Security: Detecting, investigating, and preventing fraudulent transactions, money laundering, account takeover attempts, and other security threats to the bdbjoy platform and its players.
• Customer Support: Responding to your support requests, resolving complaints, and maintaining a record of your support interactions for quality assurance purposes.
• Legal and Regulatory Compliance: Meeting any applicable legal obligations, responding to lawful requests from Bangladesh financial or law enforcement authorities, and maintaining records required by applicable law.
• Marketing Communications (with consent only): Sending you promotional offers, bonus notifications, and personalised game recommendations where you have opted in to receive such communications. You may opt out at any time by contacting support at [email protected].
• Platform Improvement: Analysing aggregated, anonymised usage data to improve the bdbjoy platform's performance, user experience, and game offering.

06 Legal Basis for Processing

bdbjoy relies on the following legal bases to process your personal data lawfully:

• Contractual Necessity: Processing that is required to perform the contract between you and bdbjoy — i.e., to provide you with a functioning bdbjoy account, process your transactions, and deliver the gaming and betting services you have requested.
• Legal Obligation: Processing required to comply with applicable laws and regulations in Bangladesh, including anti-money laundering (AML) obligations, age verification requirements, and lawful requests from competent authorities.
• Legitimate Interests: Processing necessary for bdbjoy's legitimate business interests — including fraud prevention, platform security, responsible gaming monitoring, and internal analytics — where those interests are not overridden by your fundamental rights and freedoms.
• Consent: Where bdbjoy relies on your consent as the legal basis for processing (for example, for direct marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

07 Data Sharing

bdbjoy does not sell, rent, or trade your personal data to third-party marketers or data brokers under any circumstances. Your personal data is shared only in the following limited and controlled contexts:

7.1 Payment Service Providers

Transactional data is shared with your chosen payment service provider — such as bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, or City Bank — solely to the extent necessary to process your deposit or withdrawal request. Each payment provider is bound by its own privacy and data security obligations.

7.2 Game Technology Providers

Game session data is shared with the relevant certified game provider (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Ezugi) for the purpose of delivering and auditing game outcomes. These providers operate under strict data processing agreements and are prohibited from using your data for any purpose other than delivering the contracted game service to bdbjoy.

7.3 Legal and Regulatory Authorities

bdbjoy will disclose personal data to Bangladesh law enforcement agencies, financial intelligence authorities, or other competent regulatory bodies where required to do so by law, court order, or lawful regulatory request. In all such cases, bdbjoy will disclose only the minimum personal data required to satisfy the specific legal obligation.

7.4 Fraud Prevention and AML Partners

bdbjoy may share limited identity and transaction data with third-party fraud detection and anti-money laundering compliance services. These services operate as data processors under bdbjoy's instructions and are contractually prohibited from using your data for any purpose beyond the specific fraud prevention or AML service they provide to bdbjoy.

08 Data Retention

bdbjoy retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, including satisfying any applicable legal, accounting, or reporting obligations. The following general retention periods apply:

• Account Data (active accounts): Retained for the full duration of your bdbjoy account and for a period of five (5) years following permanent account closure.
• Financial and Transaction Data: Retained for a minimum of seven (7) years following the date of each transaction, in accordance with standard financial record-keeping obligations applicable in Bangladesh.
• Identity Verification Documents: Retained for five (5) years following account closure or the date of the last verification review, whichever is later.
• Support Communications: Retained for three (3) years from the date of the last communication in a given support interaction.
• Marketing Preference Data: Retained until you withdraw consent or request erasure, plus a short period thereafter to document the withdrawal of consent.
• Technical and Log Data: Retained for up to twelve (12) months, after which it is anonymised or deleted.

When personal data is no longer required for any of the above purposes and no legal obligation requires its continued retention, bdbjoy will securely delete or irreversibly anonymise it.

09 Security Measures

bdbjoy employs a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-Bit SSL/TLS Encryption: All data transmitted between your device and the bdbjoy platform is encrypted using industry-standard 256-bit SSL/TLS protocols, the same level of encryption used by Bangladesh's leading commercial banks.
• Encrypted Data Storage: Sensitive personal data — including identity documents and payment credentials — is stored in encrypted form at rest. Encryption keys are managed under strict access controls and rotated on a regular schedule.
• Access Controls: Access to personal data within bdbjoy's internal systems is strictly limited to those staff members and service providers who require access to perform their specific role. All internal access is logged and subject to regular audit review.
• Password Security: Account passwords are hashed using a strong one-way hashing algorithm. bdbjoy staff cannot view your password in plain text. Players are encouraged to use a unique, strong password for their bdbjoy account and to avoid reusing passwords from other services.
• Incident Response: bdbjoy maintains a documented data breach response procedure. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, bdbjoy will notify affected players promptly.

10 Your Rights

As a player whose personal data is processed by bdbjoy, you have the following rights in relation to that data. To exercise any of these rights, please contact bdbjoy's support team at [email protected]. bdbjoy will respond to all verified rights requests within 30 days of receipt.

• Right of Access: You have the right to request a copy of the personal data that bdbjoy holds about you, together with information about how that data is used and shared.
• Right to Rectification: If any personal data that bdbjoy holds about you is inaccurate or incomplete, you have the right to request that it be corrected or supplemented.
• Right to Erasure ("Right to be Forgotten"): You may request that bdbjoy delete your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where you object to processing and there is no overriding legitimate interest. This right is subject to bdbjoy's legal retention obligations, which may require certain data to be kept for a defined period after account closure.
• Right to Restriction of Processing: In certain circumstances, you may request that bdbjoy restrict the processing of your personal data — for example, while a dispute about accuracy or lawfulness is being resolved.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity and is carried out by automated means, you may request that bdbjoy provide your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing of your personal data where bdbjoy relies on legitimate interests as the legal basis, and you believe your interests, rights, or freedoms override those legitimate interests. You also have an unconditional right to object to processing for direct marketing purposes at any time.
• Right to Withdraw Consent: Where bdbjoy processes your data on the basis of your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

11 Cookies

bdbjoy uses first-party cookies and similar session-tracking technologies to operate and improve the bdbjoy platform. Cookies are small text files placed on your device when you visit the bdbjoy website. bdbjoy uses the following categories of cookies:

• Strictly Necessary Cookies: Required for the bdbjoy platform to function. These cookies enable your bdbjoy login session to remain active, ensure secure navigation between pages, and support payment processing workflows. These cookies cannot be disabled without preventing core platform functionality.
• Performance and Analytics Cookies: Used to collect anonymised data about how players navigate the bdbjoy website — including which pages are visited most frequently, how long sessions last, and where errors occur. This data is used solely to improve the platform experience and is not used to identify individual players.
• Functionality Cookies: Used to remember your preferences and settings — such as your preferred display language and notification preferences — so that you do not need to re-enter them on each visit.

bdbjoy does not use third-party advertising cookies or cross-site tracking technologies. You may manage or delete cookies through your browser settings at any time. Please note that disabling strictly necessary cookies will affect the functionality of your bdbjoy account and may prevent you from completing transactions.

12 Minors

As part of the account registration process, all applicants are required to confirm that they are at least 18 years of age. bdbjoy reserves the right to request documentary evidence of age at any stage of the account lifecycle. Where bdbjoy discovers or has reasonable grounds to believe that a registered account belongs to a person under the age of 18, it will immediately suspend the account, delete all personal data associated with it to the extent permitted by applicable law, void all transactions, and forfeit any remaining balance.

Parents and guardians who believe that their child has registered a bdbjoy account are encouraged to contact bdbjoy immediately at [email protected] so that the account can be investigated and closed without delay.

13 Changes to This Policy

bdbjoy reserves the right to update, amend, or replace this Privacy Policy at any time to reflect changes in our data processing practices, applicable laws, or operational requirements. When a material change is made, bdbjoy will provide reasonable advance notice to registered players via the email address associated with their account and/or via a prominent notice on the bdbjoy platform.

The "Last updated" date displayed at the top of this page indicates when the current version of the Privacy Policy took effect. We encourage you to review this Policy periodically. Your continued use of the bdbjoy platform following the effective date of any updated Policy constitutes your acknowledgement of, and agreement to, the revised terms. If you do not agree with any changes, you should contact bdbjoy to arrange account closure in accordance with the process described in our Terms & Conditions.

14 Contact Us

If you have any questions about this Privacy Policy, wish to exercise any of your data subject rights, or want to raise a concern about how bdbjoy handles your personal data, please get in touch with our support team. All privacy-related enquiries are handled in English and are addressed within 30 days of receipt for formal data rights requests, or within 24 hours for general support enquiries.

bdbjoy is committed to resolving all privacy-related concerns promptly and transparently. Where a concern cannot be resolved at the first-contact level, it will be escalated to bdbjoy's senior compliance team. A written resolution decision will be provided within 7 business days of any formal escalation.