bijeli Privacy Policy

bijeli ("we", "us", "our") is committed to protecting the privacy and personal data of every player who registers and uses the bijeli platform at bijeli.app (the "Platform"). This Privacy Policy sets out in clear and plain English the categories of personal data we collect, the purposes for which that data is processed, the circumstances under which it may be shared with third parties, the measures we take to keep it secure, and the rights you hold as a data subject.

By registering an account on the bijeli Platform, you acknowledge that you have read and understood this Privacy Policy in full. This Policy forms part of bijeli's overall Terms & Conditions and should be read alongside our Responsible Gaming Policy. If you have any questions about how your personal data is handled, please contact us at support [at] bijeli.app.

1. Data Controller

For the purposes of this Privacy Policy, bijeli acts as the data controller in respect of personal data collected through the bijeli Platform. As data controller, bijeli determines the purposes and means by which your personal data is processed. bijeli operates the Platform specifically for players based in Bangladesh, and all data processing activities described in this Policy are carried out in connection with providing online casino and sports betting services to Bangladeshi players.

2. Data We Collect

bijeli collects personal data from you through several channels: directly when you register an account or contact support; automatically as you use the Platform; and from third-party payment processors when you make a deposit or withdrawal. The categories of data we collect are detailed below.

2.1 Registration and Identity Data

When you create a bijeli account, we collect your full legal name, date of birth, residential address (including district and division within Bangladesh), email address, and a contact mobile number. This information is required to create and maintain your account, to verify your identity in compliance with know-your-customer (KYC) obligations, and to confirm that you meet the minimum age requirement of 18 years.

2.2 Payment and Transaction Data

bijeli collects data related to deposits and withdrawals processed through bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank, Visa, and Mastercard. This includes the payment method type, the mobile wallet number or card identifier (partial — full card numbers are never stored by bijeli), transaction amounts in BDT, transaction reference numbers, and timestamps. This data is processed to facilitate payments, to comply with anti-money-laundering obligations, and to resolve payment disputes.

2.3 Identity Verification Documents (KYC)

As part of our identity verification process, bijeli may request and retain copies of government-issued identity documents such as your National Identity Card (NID), passport, or driving licence; proof of address such as a utility bill or bank statement; and confirmation of the mobile wallet or bank account used for transactions. These documents are stored securely and processed solely for the purpose of identity verification and regulatory compliance.

2.4 Usage and Activity Data

bijeli automatically collects data about how you use the Platform, including: game sessions played (game title, provider, stake amounts, outcomes, session duration); sports bets placed (market type, event, odds, stake, settlement result); login timestamps and session durations; pages and sections of the Platform visited; search queries entered within the Platform; and responsible gaming tool activations (e.g., deposit limit changes, self-exclusion requests). This data helps bijeli improve the Platform, personalise your experience, and detect unusual or potentially fraudulent activity.

2.5 Technical and Device Data

When you access the bijeli Platform, we collect certain technical data from your device automatically. This includes your IP address, browser type and version, operating system, device type (mobile, tablet, desktop), screen resolution, referring URL, and the pages you access within the Platform together with access timestamps. This data is used for security monitoring, fraud prevention, and to ensure the Platform renders correctly across devices commonly used in Bangladesh, including entry-level Android smartphones.

2.6 Communications Data

If you contact bijeli support by email or live chat, we retain records of that correspondence, including the content of your messages, the date and time, and any attachments you provide. This data is used to resolve your enquiry, to train our support team, and to maintain a record of interactions for dispute resolution purposes.

The table below summarises the categories of data collected and their primary processing purposes:

3. How We Use Your Data

bijeli processes your personal data only where we have a lawful basis for doing so. The primary lawful bases on which bijeli relies are: (a) contractual necessity — processing required to provide the gaming and betting services you have requested; (b) legal obligation — processing required for bijeli to comply with applicable anti-money-laundering, age verification, and responsible gaming obligations; (c) legitimate interests — processing that serves bijeli's legitimate business interests (such as fraud prevention and Platform security) where those interests are not overridden by your privacy rights; and (d) consent — where you have given specific, informed consent for a specific processing activity (such as receiving marketing communications).

3.1 Service Delivery

bijeli uses your personal data to create and manage your account, process deposits and withdrawals in BDT, settle game outcomes and sports betting markets, administer bonus and promotional offers, and provide customer support. Without this processing, bijeli cannot deliver the core service to you.

3.2 Identity and Age Verification

bijeli is committed to ensuring that all registered players are aged 18 or above. We use your identity and KYC document data to verify your age and to confirm that the payment methods linked to your account are registered in your own name. This processing is both a contractual and a legal obligation, and bijeli cannot permit access to real-money gaming services without completing this verification.

3.3 Fraud Prevention and Security

bijeli uses your technical data, device data, IP address, transaction history, and activity data to detect, investigate, and prevent fraudulent activity, money laundering, bonus abuse, and multi-accounting. This processing is in bijeli's legitimate interest and in the interest of all platform users. Where fraudulent activity is detected, we may share relevant data with payment processors and relevant authorities as required by law.

3.4 Responsible Gaming Monitoring

bijeli uses your gameplay activity, deposit frequency, session length, and loss patterns to monitor for indicators of problem gambling. Where our systems or support team identify concerning patterns, we may proactively contact you to offer responsible gaming resources or apply protective account restrictions in accordance with our Responsible Gaming Policy. This processing is both a legal obligation and a legitimate interest of bijeli.

3.5 Marketing Communications

With your explicit consent, bijeli may send you promotional communications by email regarding new game releases, bonus offers, seasonal promotions (such as BPL cricket season deals, Eid special bonuses, or Pohela Boishakh promotions), and Platform updates. You may withdraw your consent to marketing communications at any time by contacting support [at] bijeli.app with the subject line "Unsubscribe". Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

4. Data Sharing & Disclosure

bijeli does not sell, rent, or trade your personal data to any third party for their own commercial or marketing purposes. Your data is shared only in the limited circumstances described below, and only to the minimum extent necessary for the stated purpose.

4.1 Payment Service Providers

bijeli shares payment-related data with our payment processing partners — including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank, Visa, and Mastercard — solely for the purpose of processing your deposit and withdrawal transactions. Each of these providers is bound by their own data protection obligations and is not permitted to use your data for any purpose other than processing the transaction in question.

4.2 Game Studios and Software Providers

To deliver casino games and sports betting markets, bijeli integrates with licensed third-party game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Play'n GO, Spribe, and Ezugi. Limited technical session data (such as a session token and stake amounts) may be transmitted to these providers to load game content and record round outcomes. No identity data (name, NID, address) is shared with game studios.

4.3 Legal and Regulatory Disclosure

bijeli may disclose personal data to competent authorities, law enforcement agencies, or regulatory bodies where required to do so by applicable law or by a valid legal order. Such disclosures may relate to anti-money-laundering investigations, fraud enquiries, or age verification audits. bijeli will notify affected users of any such disclosure where it is legally permitted to do so.

4.4 Service Providers and Processors

bijeli engages certain third-party service providers to assist in operating the Platform — for example, cloud hosting infrastructure providers, email delivery services, and analytics platforms. These providers act as data processors on bijeli's instructions and are contractually prohibited from processing your data for any purpose other than the specific service they provide to bijeli. All processors are required to maintain security standards equivalent to those applied by bijeli.

5. Cookies & Tracking

The bijeli Platform uses cookies and similar tracking technologies to ensure the Platform functions correctly, to remember your session and preferences, and to gather anonymised analytics data. Below is a summary of the categories of cookies used on bijeli.app:

5.1 Strictly Necessary Cookies

These cookies are essential for the Platform to function. They maintain your login session, remember your account state across page loads, and ensure that security features work correctly. Strictly necessary cookies cannot be disabled without breaking core Platform functionality. No consent is required for these cookies.

5.2 Performance and Analytics Cookies

bijeli uses anonymised analytics cookies to understand how players navigate the Platform — which pages are most visited, where users encounter errors, and how long sessions typically last. This data is aggregated and cannot identify you personally. It is used solely to improve the Platform's performance and user experience.

5.3 Functional Cookies

Functional cookies remember your preferences — such as your chosen language, display settings, or the last game you played — so that you do not have to reconfigure them on each visit. These cookies improve the convenience of using the bijeli Platform but are not required for core functionality.

5.4 Managing Cookies

You can control and delete cookies through your browser settings. Most modern browsers allow you to refuse all non-essential cookies, or to delete cookies that have already been set. Please note that disabling cookies may impair certain features of the bijeli Platform, including your ability to stay logged in between sessions. For guidance on managing cookies in your specific browser, refer to your browser's help documentation.

6. Data Retention

bijeli retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The general retention periods applied by bijeli are as follows:

• Active account data (identity, contact, payment details): retained for the duration of your account registration plus a minimum of 5 years following account closure, to comply with anti-money-laundering record-keeping obligations.
• KYC verification documents (NID scans, passport copies, address proof): retained for a minimum of 5 years following account closure or the date of the last transaction, whichever is later.
• Transaction records (deposit and withdrawal history, bet records, game round data): retained for a minimum of 5 years from the date of the transaction.
• Communications data (support chat logs, email correspondence): retained for 3 years from the date of the last communication in a given thread.
• Technical and device data (IP logs, session logs): retained for 12 months from the date of collection, after which they are anonymised or deleted.
• Marketing consent records: retained until you withdraw consent, plus 1 year thereafter to evidence the consent state.

Upon expiry of the applicable retention period, bijeli will securely delete or anonymise your personal data so that it can no longer be attributed to you as an identifiable individual.

7. Your Privacy Rights

As a registered bijeli player, you hold the following rights in respect of your personal data. To exercise any of these rights, please contact support [at] bijeli.app with the subject line "Privacy Request" and your registered email address. bijeli will respond to all valid requests within 30 days of receipt.

7.1 Right of Access

You have the right to request a copy of the personal data bijeli holds about you. This is sometimes called a Subject Access Request (SAR). bijeli will provide a structured summary of your data in a readable format, free of charge, within 30 days of receiving a valid request.

7.2 Right to Rectification

If any personal data bijeli holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update certain details (such as your contact email address) directly within your bijeli Account Settings. For corrections to identity data or KYC records, please contact support directly with supporting documentation.

7.3 Right to Erasure

You may request that bijeli delete your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent and no other lawful basis exists, or where the data has been unlawfully processed. Please note that bijeli cannot action erasure requests where retention is required by law — for example, transaction records subject to anti-money-laundering retention obligations cannot be deleted before the statutory retention period has elapsed.

7.4 Right to Restriction of Processing

You have the right to request that bijeli restricts the processing of your personal data in certain circumstances — for example, while a dispute about data accuracy is being resolved, or pending the outcome of an objection to processing. Where processing is restricted, bijeli will continue to store your data but will not actively process it until the restriction is lifted.

7.5 Right to Data Portability

Where bijeli processes your data on the basis of your consent or a contract with you, and that processing is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format (such as JSON or CSV) and to request that bijeli transmit it directly to another data controller where technically feasible.

7.6 Right to Object

You have the right to object to bijeli processing your personal data where that processing is based on legitimate interests. bijeli will cease the relevant processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms. You have an unconditional right to object to processing for direct marketing purposes at any time, with no requirement to justify your objection.

8. Data Security

bijeli employs a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and bijeli's servers, ensuring that your login credentials, payment data, and personal information cannot be intercepted in transit.
• Encrypted storage of sensitive data fields — including NID numbers, bKash and Nagad wallet numbers, and KYC document files — at rest, using industry-standard encryption algorithms.
• Access controls limiting access to personal data to bijeli staff and contractors who have a legitimate need to access it for the performance of their duties. All staff with access to personal data are subject to confidentiality obligations.
• Regular security assessments of the Platform infrastructure, including vulnerability scanning and penetration testing conducted on a periodic basis.
• Incident response procedures enabling bijeli to identify, contain, and respond to data security incidents promptly. In the event of a breach that is likely to result in a risk to your rights and freedoms, bijeli will notify affected users without undue delay.

While bijeli takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security. You are responsible for maintaining the security of your own bijeli account credentials. Do not share your password with anyone, and contact support [at] bijeli.app immediately if you suspect that your account has been accessed without your authorisation.

8.1 Changes to This Privacy Policy

bijeli reserves the right to update or amend this Privacy Policy at any time. Any changes will be published on this page with an updated "Last updated" date. Where changes are material, bijeli will notify registered users by email at the address associated with their account. Your continued use of the bijeli Platform following publication of an updated Privacy Policy constitutes your acceptance of the revised terms. We encourage you to review this page periodically to stay informed of how bijeli protects your data.