djbaji Privacy Policy

1.1 Registration Data

When you create a djbaji account, we collect the following information:

• Full legal name;
• Date of birth (to verify you are 21 years of age or older);
• Mobile phone number and/or email address;
• City or region of residence (e.g., Dhaka, Chittagong, Sylhet, Rajshahi, Khulna);
• Username and hashed password (your password is never stored in plain text).

1.2 Identity Verification Data

Where djbaji requires identity verification — either as part of our standard onboarding process or in response to a specific account activity — we may collect:

• National Identity Card (NID) number and a copy of the NID document;
• Passport number and copy, where applicable;
• A selfie photograph or live facial image for document-matching purposes;
• Proof of address document (utility bill, bank statement, or equivalent).

Identity documents are processed securely and retained only for the period required by applicable law or our own internal compliance obligations, after which they are deleted or anonymised.

1.3 Payment and Transaction Data

To process deposits and withdrawals in Bangladeshi Taka (৳), djbaji collects:

• Mobile wallet numbers associated with bKash, Nagad, Rocket, or Upay accounts registered in your name;
• Transaction reference numbers and confirmation codes from payment providers;
• Deposit amounts, withdrawal amounts, and timestamps;
• Cumulative transaction history for your djbaji account.

djbaji does not store full payment card numbers. Card transactions, where supported, are handled exclusively through PCI-DSS-compliant payment gateways.

1.4 Platform Usage and Behavioural Data

As you use the djbaji Platform, we automatically collect technical and behavioural data including:

• IP address and approximate geolocation derived from IP;
• Device type, operating system, and browser or app version;
• Pages visited, features used, session duration, and click-path data;
• Game history, bet amounts, bet types, and outcomes;
• Login timestamps and session activity logs.

This data is used for platform security, fraud prevention, responsible gaming monitoring, and improving the overall djbaji player experience.

1.5 Customer Support Communications

When you contact djbaji support via email at [email protected] or through any in-platform support channel, we retain the content of your communications, including any attachments, for the purpose of resolving your query, maintaining a record of interactions, and improving our support processes. Support communications are retained for a period of three years from the date of the interaction.

3.1 What Are Cookies

Cookies are small text files placed on your device by a website when you visit it. djbaji uses cookies and similar tracking technologies (such as local storage tokens) to ensure the Platform functions correctly, to maintain your login session, and to collect the anonymised analytics data described in Section 1.4 above.

3.2 Types of Cookies Used

• Essential Cookies: Required for the Platform to function. These cannot be disabled. They manage session authentication, maintain your logged-in state, and protect against cross-site request forgery.
• Analytics Cookies: Used to collect anonymised data on how players navigate the Platform. This helps djbaji identify performance issues and improve the user experience. No personally identifiable information is included in analytics data.
• Preference Cookies: Store your selected preferences such as language or display settings so the Platform remembers them on your next visit.

3.3 Managing Cookies

You can control non-essential cookies through your browser settings. Most modern browsers allow you to block, delete, or receive notifications about cookies. Please note that disabling essential cookies will prevent you from logging in to your djbaji account and will impair core Platform functionality. djbaji does not currently respond to browser "Do Not Track" signals, as there is no consistent industry standard for interpreting such signals.

4.1 Payment Service Providers

To process BDT transactions, djbaji shares necessary transaction data with our payment partners: bKash, Nagad, Rocket, and Upay. The data shared is limited to the information required to execute and confirm each transaction (e.g., your mobile wallet number, transaction amount, and a djbaji-issued reference code). Each payment partner operates under its own privacy policy and is independently responsible for the data it handles.

4.2 Game Software Providers

Live casino and slots games on the djbaji Platform are powered by third-party game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive anonymised session identifiers to facilitate game loading and round settlement. They do not receive your name, contact details, or payment information.

4.3 Cloud Infrastructure and Technology Providers

djbaji uses reputable cloud hosting and technology service providers to operate the Platform. These providers process data on our behalf under strict data processing agreements that prohibit them from using player data for their own purposes. All cloud services used by djbaji store data in geographically appropriate data centres with industry-standard security certifications.

4.4 Legal and Regulatory Disclosure

djbaji may disclose personal data to law enforcement agencies, regulatory authorities, or courts where required to do so by applicable law, or where such disclosure is necessary to protect the rights, property, or safety of djbaji, its players, or the public. Where permitted by law, djbaji will attempt to notify affected players of such a disclosure request prior to complying.

5.1 Technical Security Measures

djbaji implements the following technical measures to protect your personal data:

• TLS/SSL encryption for all data in transit between your device and the Platform;
• AES-256 encryption for sensitive data stored in our databases;
• Hashed and salted password storage — plain-text passwords are never retained;
• Regular penetration testing and vulnerability assessments of the Platform infrastructure;
• Automated threat detection and real-time alerting for suspicious access patterns.

5.2 Organisational Security Measures

Access to player personal data within djbaji is restricted to employees and contractors who require it to perform their job functions. All personnel with data access are subject to confidentiality obligations. djbaji conducts regular internal privacy and security reviews and maintains an incident response plan for data breach scenarios.

5.3 Data Breach Notification

In the event of a confirmed personal data breach that is likely to result in a risk to your rights and freedoms, djbaji will notify affected players without undue delay via the contact details associated with their account. The notification will describe the nature of the breach, the categories of data affected, the likely consequences, and the measures taken or proposed to address the breach.

Right of Access

You have the right to request a copy of the personal data that djbaji holds about you, along with information about how it is being used. This is sometimes referred to as a Subject Access Request (SAR). djbaji will provide a structured, commonly used, and machine-readable format where requested.

Right to Rectification

If any personal data djbaji holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update many details directly through your djbaji account settings, or by contacting support.

Right to Erasure

You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent, or where the data has been processed unlawfully. Please note that djbaji may be required to retain certain data (such as transaction records) for a defined period under applicable financial record-keeping law, which may limit the scope of an erasure request.

Right to Object to Marketing

You may opt out of marketing communications from djbaji at any time by updating your communication preferences in your account settings, or by contacting [email protected]. Opting out of marketing does not affect your ability to continue using the Platform or to receive essential transactional communications (such as deposit confirmations and security alerts).

7.1 Retention Periods

djbaji retains personal data for the following periods, after which data is securely deleted or anonymised:

• Active account data: Retained for the duration of your account and for five (5) years following account closure;
• Transaction records: Retained for a minimum of five (5) years from the transaction date in accordance with financial compliance obligations;
• Identity verification documents: Retained for five (5) years from the date of verification or account closure, whichever is later;
• Support communications: Retained for three (3) years from the date of the interaction;
• Session and analytics logs: Retained for up to thirteen (13) months from the date of collection before being aggregated or deleted.

7.2 Secure Deletion

When personal data reaches the end of its defined retention period, djbaji securely deletes or anonymises it in a manner that prevents reconstruction or re-identification. Backup copies of data are subject to the same deletion schedule, with purges applied during scheduled backup rotation cycles.

How to Reach Us

All privacy-related queries, data access requests, rectification requests, erasure requests, and concerns about this Privacy Policy should be directed to the djbaji support team:

Email: [email protected]

We endeavour to respond to all privacy queries within fourteen (14) business days (Bangladesh Standard Time, UTC+6). For complex requests, we may require up to thirty (30) days and will notify you if an extension is needed.