Privacy Policy — badjile

badjile collects personal data only when it is necessary to provide our services, comply with legal obligations, prevent fraud, and maintain the security of our platform. We collect information in three primary ways: information you provide directly, information generated by your use of the platform, and information received from trusted third-party partners such as payment providers and identity verification services.

Information You Provide Directly

When you register for a badjile account, you are required to provide the following categories of personal data:

• Identity data: Full legal name, date of birth, gender (optional), and nationality.
• Contact data: Email address, mobile phone number (used for SMS verification and account security alerts), and residential address.
• Identity verification documents: Scanned copies or photographs of government-issued ID (National ID card, passport, or driving licence) and proof of address documents submitted during the KYC process.
• Financial data: Payment method details including your registered bKash, Nagad, Rocket, or Upay mobile number, and where applicable, bank account details for bank transfer transactions.
• Communications data: Content of messages you send to our support team via live chat, email, or WhatsApp, and any feedback or survey responses you submit voluntarily.

Information Generated Automatically

When you access and use badjile, we automatically collect certain technical and behavioural data:

• Device and technical data: IP address, browser type and version, operating system, device model, screen resolution, and time zone setting.
• Usage data: Pages visited, games played, bets placed, session duration, clickstream data, and features used within the platform.
• Transaction data: Deposit and withdrawal amounts, transaction timestamps, payment reference numbers, and bonus usage history.
• Log data: Server-side access logs recording the date, time, and nature of each request made to the badjile platform, retained for security audit purposes.

Information from Third Parties

We may receive supplementary personal data from the following third-party sources to assist with identity verification, fraud prevention, and payment processing:

• Identity verification service providers who confirm the authenticity of documents submitted during KYC.
• Payment processors including bKash, Nagad, Rocket, and Upay, who share transaction confirmation data (reference numbers, timestamps, and amounts) necessary to credit your account.
• Fraud prevention and anti-money-laundering (AML) screening services that cross-reference account data against publicly available watchlists.

badjile uses the personal data we collect for specific, documented purposes. We do not use your data in any manner that is incompatible with the purpose for which it was originally collected. The table below summarises our primary data use purposes and the legal basis for each.

Marketing Communications

badjile will send you promotional emails, SMS notifications, or platform messages about bonuses, seasonal promotions (such as Eid offers, Pohela Boishakh specials, or BPL cricket tournament promotions), and new game launches only if you have explicitly opted in to receive such communications during registration or via your account settings. You may withdraw consent at any time by updating your communication preferences in your account or by contacting support at support@badjile. Withdrawing marketing consent does not affect your ability to use the platform or receive essential account notifications.

Automated Decision-Making

badjile uses automated systems to flag accounts for fraud review, responsible gaming intervention, and AML screening. These automated processes may result in temporary account restrictions while a human compliance officer conducts a manual review. Where an automated decision has a material impact on your account, you have the right to request a human review of that decision by contacting our support team.

badjile does not sell your personal data. We share your data only in the limited circumstances described below, and only to the minimum extent necessary to fulfil the relevant purpose.

Service Providers and Data Processors

We engage carefully vetted third-party service providers who process personal data on our behalf and under our instruction. These include:

• Payment processors: bKash, Nagad, Rocket, and Upay receive the transaction details necessary to execute deposits and withdrawals. These providers operate under their own privacy policies and are responsible for the security of data processed through their respective networks.
• Identity verification providers: Third-party KYC vendors receive document images and identity data to perform automated and manual verification checks.
• Cloud infrastructure providers: badjile uses secure cloud hosting services to store platform data. All infrastructure partners are contractually bound to maintain equivalent data protection standards.
• Customer support platforms: Live chat and support ticketing systems may process communications data to facilitate customer service operations.
• Analytics providers: Aggregated, anonymised usage data may be processed by analytics tools to help us understand platform performance. No personally identifiable data is shared for analytics purposes.

Legal and Regulatory Disclosure

badjile may disclose personal data to competent authorities, regulatory bodies, or law enforcement agencies where we are required to do so by applicable law, court order, or lawful governmental request. This includes disclosure for the purposes of:

• Anti-money-laundering (AML) investigations and suspicious transaction reporting.
• Fraud investigations and co-operation with financial crime authorities.
• Compliance with orders issued by a court of competent jurisdiction.

Where legally permitted, badjile will notify the affected account holder before disclosing personal data to authorities. Where prior notification is prohibited by law (for example, in cases involving tipping-off restrictions under AML legislation), we will comply with the legal restriction without notification.

Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of badjile's business assets, personal data held by badjile may be transferred to the acquiring entity as part of that transaction. In such circumstances, affected users will be notified via the email address registered to their account prior to any such transfer, and any acquiring entity will be required to handle personal data in accordance with a privacy policy that provides equivalent or greater protections than this one.

badjile uses cookies and similar tracking technologies to ensure the platform functions correctly, to remember your preferences, and to analyse how players interact with our services. This section explains what cookies we use, why we use them, and how you can control them.

What Are Cookies?

Cookies are small text files placed on your device by a website when you visit it. They allow the website to recognise your device on return visits, remember your preferences, and maintain session continuity (such as keeping you logged in). Cookies do not contain executable code and cannot access other data stored on your device.

Types of Cookies We Use

Managing and Disabling Cookies

You can control and delete cookies through your browser settings. Most modern browsers allow you to block all cookies, block only third-party cookies, or delete existing cookies. Please be aware that disabling essential cookies will prevent you from logging into your badjile account and using core platform features. Disabling preference cookies means your settings will not be saved between sessions. Disabling analytics cookies will not affect your ability to use the platform but will limit our ability to identify and fix usability issues.

For guidance on managing cookies in your specific browser, consult your browser's help documentation. badjile does not currently respond to Do Not Track (DNT) signals from browsers, as there is no consistent industry standard for interpreting these signals.

badjile implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security programme is reviewed and updated on an ongoing basis to address evolving threats.

Technical Security Measures

• Transport Layer Security (TLS): All data in transit between your browser or app and our servers is encrypted using TLS 1.2 or higher.
• Data encryption at rest: Sensitive personal data including identity documents and financial records is encrypted at the storage layer using AES-256 encryption.
• Password hashing: Account passwords are never stored in plaintext. We use industry-standard one-way hashing with salting to protect password data.
• Two-factor authentication (2FA): Players are encouraged to enable 2FA on their accounts for an additional layer of login security.
• Penetration testing: badjile engages independent security researchers to conduct periodic penetration tests and vulnerability assessments of our platform infrastructure.
• Access controls: Access to personal data within badjile's internal systems is restricted to authorised personnel on a strict need-to-know basis, with all access activity logged and audited.

Data Breach Response

In the unlikely event of a personal data breach that poses a risk to your rights and freedoms, badjile will notify affected users without undue delay via the email address registered to their account. Notifications will include a description of the nature of the breach, the categories of data affected, the likely consequences, and the measures taken or proposed to address the incident. We will also take all reasonable technical and organisational steps to contain the breach and prevent recurrence.

badjile retains personal data only for as long as it is necessary to fulfil the purpose for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. When personal data is no longer needed, we securely delete or anonymise it in accordance with our data retention schedule.

Retention Periods by Data Category

Where badjile is required to retain data beyond the standard period due to an ongoing investigation, legal proceedings, or regulatory inquiry, we will retain the relevant data until the matter is fully resolved and any applicable legal hold is lifted. Following closure of your account, residual data retained for legal compliance purposes is stored in a restricted archive and is not used for any operational purpose.

As a data subject, you hold the following rights in relation to the personal data badjile holds about you. These rights are available to all registered users, including players based in Bangladesh. To exercise any of these rights, contact our support team at support@badjile with the subject line "Data Subject Request". We will acknowledge your request within two business days and respond in full within five business days (Bangladesh Standard Time, UTC+6).

badjile will not charge a fee for processing data subject requests in standard circumstances. If a request is manifestly unfounded or excessive, we reserve the right to charge a reasonable fee or decline the request, in which case we will explain our reasoning in writing.

badjile reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform features. When material changes are made, we will notify registered users via the email address associated with their account at least 7 days before the updated policy takes effect. The "Last Reviewed" date at the top of this page will be updated to reflect the most recent revision.

Continued use of badjile following the effective date of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with any changes to this policy, you may request account closure by contacting our support team before the effective date of the revision.

This Privacy Policy is governed by and interpreted in accordance with its English text. In the event of any conflict between this English version and any translated version, the English version shall take precedence.

How to Contact Us About Privacy

For all privacy-related enquiries, data subject access requests, or concerns about how badjile handles your personal data, please contact our privacy team using the details below. All correspondence should be in English. We aim to respond to all privacy enquiries within five business days (Bangladesh Standard Time, UTC+6).

If you believe that badjile has not handled your personal data in accordance with this Privacy Policy or applicable data protection law, you have the right to raise a complaint directly with our privacy team as a first step. We take all complaints seriously and will investigate thoroughly. If you are not satisfied with our response, you may seek further recourse through any competent authority or independent dispute resolution body available in your jurisdiction.