badjle Privacy Policy — Your Data, Your Rights

badjle collects personal data through several channels: directly from you when you register an account or interact with our services, automatically when you use the platform, and in limited cases from trusted third-party sources as part of our verification and fraud prevention processes. The categories of data we collect are set out below.

Registration and Identity Data

When you create a badjle account, we collect your full legal name, date of birth, email address, Bangladeshi mobile number, and a username and password of your choosing. This information is required to create and maintain your account, verify your identity and age, and communicate with you about your account. Provision of accurate registration data is a condition of using the badjle platform; accounts created with false registration data are in breach of our Terms & Conditions and may be closed without notice.

Identity Verification (KYC) Data

As part of our Know Your Customer process, we may collect copies of government-issued identification documents — such as your Bangladesh National Identity Card (NID), passport, or driving licence — together with, where applicable, a proof of residential address dated within the last three months. KYC documents are processed and stored by badjle's verification team under strict access controls and are used solely for identity, age, and address verification purposes.

Financial and Transaction Data

We collect records of all financial transactions conducted through your badjle account, including deposit amounts, withdrawal requests, payment method identifiers (such as the mobile number associated with your bKash or Nagad account, or the last four digits of a payment card), transaction reference numbers, timestamps, and transaction statuses. Full payment card numbers are never stored on badjle's servers; card transactions are processed through PCI-DSS-compliant payment gateways.

Usage and Gameplay Data

We automatically collect data about how you interact with the badjle platform. This includes game session logs (games played, bet amounts, outcomes, session duration), sports betting history, pages visited, navigation paths, feature usage, and any interactions with our customer support team. This data is used to deliver, maintain, and improve the platform, to detect cheating or fraud, and to populate your account history.

Technical Device Data

When you access badjle, our servers automatically collect certain technical information about your device and connection, including your IP address, browser type and version, operating system, device type, screen resolution, referring URL, and session timestamps. This information is used for platform security, fraud detection, geolocation verification, and service optimisation purposes.

badjle processes personal data only for specified, explicit, and legitimate purposes. The table below sets out the primary purposes for which we use the data we collect, together with the legal basis on which that processing rests.

Where badjle relies on legitimate interests as the legal basis for processing, we have assessed that those interests are not overridden by your rights and interests as a data subject. Where we rely on consent, you may withdraw that consent at any time by contacting support or adjusting your account communication preferences. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

badjle does not sell, rent, or trade personal data to or with any third party. We share personal data with external parties only in the circumstances described below, and only to the minimum extent necessary for the stated purpose.

Game Content and Platform Technology Providers

To deliver the games available in the badjle lobby, we work with third-party game studios and platform technology partners including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive anonymised or pseudonymised session data necessary to deliver game content, verify bet outcomes, and generate RNG results. They do not receive your name, NID number, payment card details, or other directly identifying personal data unless required by a specific compliance obligation.

Payment Processing Partners

Transaction data is shared with our payment processing partners — including the operators of bKash, Nagad, Rocket, and Upay integrations, and our card processing gateway — strictly for the purpose of executing and reconciling financial transactions. These partners operate under their own privacy policies and are required by applicable financial regulation to maintain appropriate data security standards.

Identity Verification and Fraud Prevention Services

badjle uses trusted third-party KYC and fraud detection services to assist with identity verification, age checking, and real-time transaction risk scoring. Personal data shared with these providers is limited to the information strictly necessary to conduct the relevant check and is governed by contractual data processing agreements that prohibit secondary use of the data.

Legal Disclosures

badjle may disclose personal data to law enforcement agencies, courts, or regulatory authorities where we are legally required to do so, where disclosure is necessary to protect the rights, property, or safety of badjle, our players, or the public, or where we have a good-faith belief that disclosure is required to prevent or investigate suspected illegal activity including money laundering or fraud. In all such cases, we will disclose only the minimum information required to satisfy the legal obligation or protect the relevant interest.

badjle uses cookies and similar tracking technologies to operate and improve the platform. A cookie is a small text file placed on your device when you visit a website. The cookies we use fall into four categories:

• Strictly Necessary Cookies: These cookies are essential for the platform to function. They enable core features such as session authentication, secure login state management, and server-side load balancing. The platform cannot function correctly without these cookies and they cannot be disabled.
• Functional Cookies: These cookies remember your preferences — such as your selected language, preferred game view layout, and whether you have previously dismissed certain notices — so that you do not need to re-enter them on each visit. They enhance your experience but are not strictly required for the platform to operate.
• Analytics Cookies: We use analytics tools to collect aggregated, anonymised data about how players navigate and use the badjle platform. This data helps us identify usability issues, optimise page performance, and improve the overall player experience. Analytics cookies do not identify you personally.
• Marketing and Retargeting Cookies: With your consent, we may use cookies to track whether you have visited the badjle platform and to deliver relevant promotional content. These cookies are only activated where you have provided opt-in consent. You may withdraw this consent at any time.

In addition to cookies, badjle may use web beacons, pixel tags, and device fingerprinting technologies for fraud detection, security monitoring, and analytics purposes. These technologies operate in accordance with the same data minimisation and purpose limitation principles that govern all other data processing activities described in this Privacy Policy.

badjle retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, to comply with applicable legal and regulatory obligations, or to resolve disputes and enforce our agreements. The retention periods we apply are set out below.

• Account and registration data: Retained for the duration of your active account and for a period of 5 years following permanent account closure, to meet anti-money laundering record-keeping obligations and to resolve any post-closure disputes.
• KYC and identity verification documents: Retained for a minimum of 5 years from the date of verification, in accordance with applicable financial crime prevention legislation. In some cases, regulatory requirements may mandate a longer retention period.
• Financial transaction records: Retained for a minimum of 5 years from the date of each transaction, consistent with standard financial record-keeping practices and regulatory requirements applicable to online payment processing.
• Gameplay and betting history: Retained for 3 years from the date of each session, for dispute resolution, responsible gaming monitoring, and platform analytics purposes.
• Customer support records: Retained for 3 years from the date the support ticket was closed, to maintain a history of player interactions for quality assurance and dispute management purposes.
• Marketing consent records: Retained for the duration of the consent plus 2 years after withdrawal, to demonstrate that marketing communications were sent on a valid consent basis.
• Analytics data: Anonymised analytics data with no remaining link to individual players may be retained indefinitely for platform improvement purposes.

Upon expiry of the relevant retention period, personal data is securely deleted or irreversibly anonymised using methods appropriate to the sensitivity of the data category. Players may request early deletion of their personal data in accordance with the data subject rights described in Section 7, subject to the limitations imposed by legal retention obligations.

badjle takes the security of your personal data seriously and maintains a range of technical and organisational measures designed to protect data against unauthorised access, accidental loss, alteration, disclosure, or destruction. The key measures we apply are described below.

While badjle implements robust security measures, no online platform can guarantee absolute security. You play an important role in keeping your account secure by choosing a strong, unique password, enabling 2FA, and never sharing your login credentials with any other person. badjle will never ask for your password via email, telephone, live chat, or any other channel.

As a badjle account holder whose personal data we process, you hold the following rights. To exercise any of these rights, please submit a written request to [email protected] with the subject line "Data Subject Request". We will acknowledge your request within 5 business days and provide a substantive response within 30 calendar days of receipt.

• Right of Access: You have the right to request a copy of all personal data that badjle holds about you, together with information about the purposes for which it is processed, the categories of data held, and the third parties with whom it has been shared. We will provide this information in a clear, readable format free of charge for the first request in any 12-month period.
• Right to Rectification: If any personal data that badjle holds about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. Basic account details such as your email address and mobile number can be updated directly via your account settings. Changes to identity-verified fields such as your legal name require documentary evidence and will be reviewed by our verification team.
• Right to Erasure ("Right to be Forgotten"): You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent (and no other legal basis applies), or where the processing was unlawful. Please note that this right is subject to limitations — we are required to retain certain categories of data (such as KYC records and transaction logs) for defined periods under applicable financial and anti-money laundering regulations, and these records cannot be deleted early regardless of a valid erasure request.
• Right to Restriction of Processing: You may request that badjle restricts the processing of your personal data in specific circumstances — for example, where you contest the accuracy of the data, or where you have objected to processing and a determination is pending. During a period of restriction, badjle will continue to store your data but will not actively process it beyond what is required by law.
• Right to Data Portability: You have the right to receive a copy of the personal data you have provided to badjle in a structured, commonly used, and machine-readable format (such as CSV or JSON), and to request that this data be transmitted directly to another controller where technically feasible. This right applies to data processed on the basis of your consent or for the performance of a contract.
• Right to Object: You have the right to object to the processing of your personal data where badjle relies on legitimate interests as the legal basis. You also have an absolute right to object to the processing of your data for direct marketing purposes, including profiling for marketing purposes. Upon receipt of a valid marketing objection, processing for that purpose will cease immediately.
• Right to Withdraw Consent: Where badjle processes your data on the basis of your explicit consent, you may withdraw that consent at any time without detriment. Withdrawal does not affect the lawfulness of any processing that took place before the withdrawal.

If you have any questions, concerns, or complaints relating to the way badjle collects, uses, or manages your personal data, or if you wish to exercise any of the data subject rights described in Section 7, please contact our privacy team using the details below.

badjle is committed to resolving all privacy-related queries and complaints in a fair, transparent, and timely manner. If you are dissatisfied with the outcome of a privacy complaint submitted to badjle, you may escalate the matter through any dispute resolution mechanism available to you under applicable law in Bangladesh.

This Privacy Policy was last reviewed and updated in January 2026. badjle reserves the right to amend this policy at any time to reflect changes in our data processing practices, changes in applicable law, or improvements to our platform's data handling procedures. Material changes will be communicated to registered players via email notification and an in-platform notice at least 7 days before the revised policy takes effect. Continued use of the badjle platform after the effective date of any amendment constitutes acceptance of the updated Privacy Policy. We encourage you to review this page periodically.

For matters relating to your account's Terms & Conditions, please refer to the separate Terms & Conditions document. For guidance on responsible gambling tools and self-exclusion options, please visit our Responsible Gaming page.