bijje Privacy Policy — How We Collect, Use, and Protect Your Personal Data

1. Introduction and Scope

This Privacy Policy ("Policy") describes how bijje ("bijje", "we", "us", or "the Platform") collects, uses, stores, shares, and protects the personal data of individuals ("Players", "Users", or "you") who access or use the bijje online casino and sports betting platform available at https://bijje.io.

This Policy applies to all personal data collected through the bijje website, account registration process, payment transactions, customer support interactions, and any other means by which you provide information to bijje. It should be read in conjunction with bijje's Terms and Conditions and Responsible Gaming Policy, both of which form part of the overall legal framework governing your use of the bijje platform.

By registering an account or using the bijje platform, you acknowledge that you have read, understood, and agree to the collection and use of your personal data as described in this Policy. If you do not agree with any part of this Policy, you should not use the bijje platform.

2. Data Controller Identity

bijje operates as the data controller in respect of personal data collected from Players using the bijje platform. As data controller, bijje determines the purposes and means by which your personal data is processed. For all data protection enquiries, you may contact bijje directly at [email protected]. bijje is committed to responding to all data-related enquiries within 30 calendar days of receipt.

3. Personal Data We Collect

bijje collects the following categories of personal data from Players. The table below summarises each category, specific data points collected, and the primary purpose for collection:

Category	Data Points	Primary Purpose
Identity Data	Full legal name, date of birth, gender, National Identity Card (NID) number or passport number	Account registration, KYC verification, age verification
Contact Data	Mobile number, email address, residential address (division, district, upazila)	Account communications, withdrawal processing, support
Financial Data	bKash / Nagad / Rocket / Upay wallet numbers, Visa / Mastercard last four digits, deposit and withdrawal history	Payment processing, fraud prevention, AML compliance
Technical Data	IP address, device type and model, operating system, browser type and version, session identifiers	Platform security, fraud detection, responsible gaming monitoring
Usage Data	Games played, wager amounts, session duration, betting history, win/loss records	Responsible gaming, bonus management, platform improvement
Communications Data	Support chat and email transcripts, voluntary feedback submissions	Customer support, dispute resolution, service improvement
Marketing Preferences	Opt-in/opt-out status for promotional emails and SMS notifications	Delivering personalised offers where consent has been given

bijje does not knowingly collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data beyond what is strictly required for identity verification purposes under applicable KYC regulations.

4. How We Collect Your Data

bijje collects personal data through the following means:

• Direct Submission: Data you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting support, or participating in a promotion.
• Automated Collection: Technical and usage data collected automatically as you interact with the bijje platform, including through cookies, server logs, and session tracking technologies.
• Third-Party Sources: Identity and fraud-risk data received from KYC verification service providers, payment processors, and fraud-detection partners where necessary to verify your identity or assess risk.
• Public Sources: In limited circumstances, bijje may verify identity information against publicly available databases or records, such as electoral rolls or court records, where required by anti-money laundering obligations.

5. Purposes and Legal Bases for Processing

bijje processes your personal data for the following purposes, each supported by a recognised legal basis:

• Contract Performance: To create and maintain your account, process deposits and withdrawals, deliver games and sports betting services, and manage bonuses and promotions. Processing for these purposes is necessary for the performance of the contract between you and bijje.
• Legal Obligation: To conduct KYC verification, meet anti-money laundering (AML) obligations, respond to lawful requests from regulatory or law enforcement authorities, and maintain required financial records. Processing for these purposes is necessary to comply with bijje's legal obligations.
• Legitimate Interests: To prevent fraud, detect and investigate security incidents, protect the integrity of the bijje platform, conduct responsible gaming monitoring, and improve the platform through aggregated usage analytics. Processing for these purposes is based on bijje's legitimate interests, which do not override your fundamental privacy rights.
• Consent: To send you personalised marketing communications via email or SMS about bijje promotions, new games, and special offers. You may withdraw this consent at any time by contacting [email protected] or by using the unsubscribe mechanism in any marketing communication.

6. Data Sharing and Third Parties

bijje does not sell, rent, or trade your personal data to any third party for commercial purposes. bijje may share your personal data with the following categories of third parties, strictly on a need-to-know basis and only to the extent necessary for the stated purpose:

• Payment Service Providers: bKash, Nagad, Rocket, Upay, Visa, and Mastercard processing partners receive the financial data necessary to process your deposits and withdrawals. These providers operate under their own privacy policies and are bound by applicable financial regulations.
• KYC and Identity Verification Providers: Third-party services that assist bijje in verifying the identity and age of Players as required by applicable regulations. These providers are contractually bound to process your data solely for the purposes specified by bijje.
• Game Studio Providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, Habanero, and other game providers receive session identifiers and wager data necessary to deliver and audit game sessions. They do not receive your full identity or financial data.
• Fraud Prevention and Security Services: Specialised services that assist bijje in detecting and preventing fraudulent activity, account takeovers, and money laundering. Data shared is limited to technical and financial risk signals.
• Legal and Regulatory Authorities: bijje may be required to disclose personal data to law enforcement agencies, financial intelligence units, or other regulatory bodies in response to a lawful request, court order, or regulatory requirement. bijje will notify affected Players of such disclosures to the extent permitted by law.
• Professional Advisors: Lawyers, auditors, and compliance consultants who provide professional services to bijje, subject to confidentiality obligations.

Where bijje engages third-party processors, it does so under written data processing agreements that require those processors to implement appropriate technical and organisational security measures and to process data only on bijje's documented instructions.

7. Cookies and Tracking Technologies

bijje uses cookies and similar tracking technologies to operate the platform, enhance your experience, and support security and analytics functions. The following types of cookies are used on the bijje platform:

• Essential Cookies: Required for the bijje platform to function correctly. They enable core features such as account login sessions, security tokens, and session state management. Essential cookies cannot be disabled without breaking core platform functionality.
• Functional Cookies: Store your preferences such as language settings, display preferences, and responsible gaming notification settings to personalise your experience across sessions.
• Analytics Cookies: Collect aggregated, anonymised data about how Players interact with the bijje platform — such as which games are most popular, average session lengths, and navigation paths. This data helps bijje improve the platform and user experience.
• Security Cookies: Support fraud detection and platform integrity by identifying unusual patterns of access or behaviour that may indicate account compromise or coordinated fraudulent activity.

You may manage your cookie preferences through your browser settings. Blocking essential cookies will impair your ability to use the bijje platform. Blocking analytics or functional cookies will not prevent you from using core platform features. Most modern browsers allow you to view, manage, and delete cookies through the browser's privacy or settings menu.

8. Data Retention

bijje retains your personal data for as long as is necessary to fulfil the purposes set out in this Policy, to comply with applicable legal obligations, and to resolve disputes. The following retention guidelines apply:

• Active Account Data: Retained for the full duration of your account's active status plus a minimum of five years following voluntary account closure or termination, to comply with AML record-keeping requirements.
• Transaction and Financial Records: Retained for a minimum of seven years from the date of the transaction, in accordance with applicable financial record-keeping regulations.
• KYC Verification Documents: Retained for a minimum of five years following account closure or the date of the last transaction, whichever is later.
• Customer Support Communications: Retained for a minimum of three years from the date of the last interaction, to support dispute resolution and service improvement.
• Marketing Consent Records: Retained for the duration of your consent plus three years following withdrawal of consent, to demonstrate compliance with consent obligations.
• Technical and Usage Logs: Typically retained for 12 to 24 months, after which they are anonymised or deleted unless required in connection with an active investigation or dispute.

When personal data is no longer required, bijje will securely delete or anonymise it in a manner that prevents reconstruction. Backups containing personal data are subject to the same retention and deletion schedules as primary data stores.

9. Data Security

bijje implements a comprehensive set of technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit TLS/SSL encryption for all data in transit between your device and bijje's servers.
• Encryption of sensitive data at rest, including financial data and identity documents.
• Role-based access controls that restrict access to personal data to authorised bijje personnel on a strict need-to-know basis.
• Multi-factor authentication requirements for all bijje staff accounts with access to Player data.
• Regular security assessments, vulnerability scanning, and penetration testing of bijje's infrastructure.
• Incident response procedures to detect, contain, and report data security incidents in accordance with applicable notification obligations.

While bijje takes all reasonable steps to protect your personal data, no digital platform can guarantee absolute security. In the event of a data security incident that is likely to result in a risk to your rights and freedoms, bijje will notify affected Players without undue delay and provide guidance on protective steps you can take.

10. Your Data Rights

As a bijje Player, you hold the following rights in respect of your personal data. To exercise any of these rights, contact bijje at [email protected] with the subject line "Data Rights Request" and a description of your request. bijje will acknowledge your request within 72 hours and respond substantively within 30 calendar days.

• Right of Access: You may request a copy of all personal data bijje holds about you, together with information about how it is being processed.
• Right to Rectification: You may request that bijje correct any inaccurate or incomplete personal data held about you.
• Right to Erasure: You may request that bijje delete your personal data where it is no longer necessary for the purposes for which it was collected, subject to bijje's legal obligation to retain certain records (see Section 8).
• Right to Restriction: You may request that bijje restrict the processing of your personal data in certain circumstances, such as while a rectification request is under review.
• Right to Data Portability: You may request a copy of the personal data you have provided to bijje in a structured, commonly used, machine-readable format.
• Right to Object: You may object to processing based on legitimate interests or direct marketing at any time. Where you object to direct marketing, bijje will cease processing your data for that purpose immediately.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

11. Marketing Communications

bijje may send you promotional communications about new games, seasonal offers, deposit bonuses, and platform updates by email or SMS if you have provided your consent at the time of registration or at any subsequent point through your account settings.

You may opt out of marketing communications at any time by:

• Clicking the "Unsubscribe" link at the bottom of any bijje marketing email.
• Replying "STOP" to any bijje marketing SMS.
• Contacting [email protected] with the subject line "Marketing Opt-Out".

Please allow up to five business days for your opt-out request to take effect across all communication channels. Opting out of marketing communications does not affect transactional communications related to your account, such as deposit confirmations, withdrawal notifications, and security alerts — these are sent regardless of marketing preferences as they relate to the operation of your account.

12. Children and Minors

The bijje platform is strictly for adults aged 21 and above. bijje does not knowingly collect, process, or store personal data from any person under the age of 21. If bijje discovers or is notified that personal data has been collected from a person under the age of 21, that data will be deleted immediately and the associated account will be permanently closed.

If you believe that a minor has registered on the bijje platform or that bijje has inadvertently collected personal data from a person under 21, please notify bijje immediately at [email protected] with the subject line "Minor Account Report". bijje takes such reports with the utmost seriousness and will investigate and act upon them without delay.

13. Amendments to This Policy

bijje reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or platform functionality. Material changes to this Policy will be communicated to registered Players via email to the address on their account or via a prominent notice on the bijje platform, with a minimum of seven days' advance notice before the amended Policy takes effect.

The date of the most recent revision to this Policy is displayed at the top of this document. Your continued use of the bijje platform after the effective date of any amendment constitutes your acceptance of the revised Policy. If you do not accept an amendment, you must cease using the bijje platform and may request account closure as described in the bijje Terms and Conditions.

14. Contact and Complaints

For all privacy-related enquiries, data rights requests, or complaints regarding bijje's handling of your personal data, please contact the bijje data protection team through the following channel:

• Email: [email protected] (plain text — not a clickable link)
• Subject Line: Use "Privacy Enquiry", "Data Rights Request", or "Privacy Complaint" as appropriate to ensure priority routing to the correct team.
• Response Time: bijje acknowledges all privacy-related enquiries within 72 hours and aims to resolve the majority of requests within 30 calendar days.

bijje is committed to resolving all privacy complaints promptly and fairly. If you are not satisfied with bijje's response to your complaint, you may have the right to escalate your complaint to the relevant data protection authority in your jurisdiction.