Privacy Policy — How bedjily Collects, Uses, and Protects Your Personal Data

bedjily collects personal data through several channels: directly from you during registration and account management, automatically as you interact with the platform, and from third-party identity verification and payment service providers. The categories of personal data we collect are described below.

Registration and account data: When you create a bedjily account, we collect your full legal name, date of birth, email address, mobile phone number, and the username and password you choose. This information is required to establish and maintain your account and to verify that you meet the minimum age requirement of 18 years.

Identity verification (KYC) data: To comply with our anti-money laundering (AML) and Know Your Customer (KYC) obligations, we collect copies of government-issued identity documents — typically a National Identity Card (NID) — and in some cases a selfie photograph for biometric comparison. This data is used exclusively for identity verification purposes and is handled with the highest level of security.

Financial data: When you make a deposit or withdrawal, we collect details of the payment method used — such as your bKash or Nagad mobile wallet number, bank account reference, or partial card number (for Visa/Mastercard transactions). We do not store full card numbers; these are handled by our PCI-DSS-compliant payment processors. We also retain records of all financial transactions on your account, including deposit amounts, withdrawal requests, and bet settlement records in Bangladeshi Taka (৳).

Usage and behavioural data: As you use bedjily, we automatically collect data about how you interact with the platform, including pages visited, games played, bet amounts and outcomes, session durations, login timestamps, and in-platform search queries. This data is used to personalise your experience, detect unusual activity, and improve platform performance.

Technical data: We collect your IP address, device type, operating system, browser type and version, screen resolution, and unique device identifiers. This information helps us ensure platform compatibility, detect multi-accounting, and support fraud prevention systems.

bedjily processes your personal data only for specific, clearly defined purposes. We do not use your data in ways that you would not reasonably expect given the nature of an online gaming and sports betting platform. The primary purposes for which we use your data are as follows:

• Account management: Creating, maintaining, and securing your bedjily account; processing your bedjily Login requests; updating your account details on request; and communicating essential account information such as password reset emails and security alerts.
• Identity verification: Confirming that you are who you claim to be, that you meet the 18+ age requirement, and that your payment methods belong to you. This verification is mandatory before any withdrawal is processed.
• Payment processing: Executing deposits and withdrawals via your selected payment method (bKash, Nagad, Rocket, Upay, bank transfer, or card); reconciling transaction records; and investigating any disputed or failed transactions.
• Platform personalisation: Tailoring the bedjily experience to your preferences, including surfacing relevant cricket markets during BPL and IPL seasons, recommending game categories based on your play history, and delivering bonus offers relevant to your account activity.
• Fraud and security: Detecting, investigating, and preventing fraudulent activity, money laundering, multi-accounting, and any other conduct that violates our Terms & Conditions or applicable law.
• Responsible gaming: Monitoring play patterns to identify signs of problem gambling; applying any deposit limits, time-out periods, or self-exclusion settings that you have activated; and contacting you if our responsible gaming monitoring system flags a concern.
• Legal and regulatory compliance: Satisfying our obligations under anti-money laundering regulations, our operating licence conditions, and any other applicable legal requirements, including responding to lawful requests from law enforcement or regulatory authorities.
• Platform improvement: Using aggregated and anonymised usage data to understand how players interact with bedjily, identify technical issues, test new features, and improve the overall quality of the platform.
• Marketing communications: Sending you promotional offers, bonus announcements, and seasonal campaign communications (such as Eid, Pohela Boishakh, or BPL season promotions) where you have opted in to receive such communications. You may opt out of marketing emails at any time by contacting [email protected].

bedjily does not sell, rent, or trade your personal data to any third party. We share your data only in the limited circumstances described in this section, and only with parties who are contractually obligated to handle it securely and in accordance with applicable data protection standards.

Payment service providers: To process your deposits and withdrawals, we share the minimum necessary financial and identity data with our payment partners, including mobile financial services providers such as bKash, Nagad, Rocket, and Upay, as well as card network processors for Visa and Mastercard transactions. These providers are subject to their own regulatory obligations and security standards.

Identity verification providers: We use third-party KYC service providers to assist with verifying the authenticity of identity documents and confirming player identities. These providers process your NID data and biometric data solely for verification purposes under a strict data processing agreement with bedjily.

Game software providers: bedjily's casino library is powered by third-party game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive limited technical data (such as session tokens and bet amounts) necessary to deliver their game content and settle game outcomes correctly. They do not receive your identity documents or payment details.

Fraud prevention and analytics: We may share technical and behavioural data with fraud prevention platforms and analytics service providers to support our security operations. Any such sharing is subject to data processing agreements that prohibit the provider from using your data for their own purposes.

Legal and regulatory authorities: bedjily will disclose personal data to law enforcement agencies, regulatory bodies, or courts when legally compelled to do so — for example, in response to a court order, a suspicious transaction report obligation, or a formal regulatory inquiry. We will notify you of such disclosure where we are legally permitted to do so.

Corporate transactions: In the event of a merger, acquisition, or sale of all or part of bedjily's business, player data may be transferred to the acquiring entity as part of the transaction. You will be notified of any such transfer and the privacy practices of the new entity before the transfer is completed.

bedjily uses cookies and similar tracking technologies to ensure the platform functions correctly, to remember your preferences, and to understand how players navigate and interact with the site. This section explains the types of cookies we use and how you can manage them.

What are cookies? Cookies are small text files stored on your device when you visit a website. They allow the site to recognise your device on subsequent visits, maintain your session while you are logged in, and store preferences such as language or display settings. Cookies set by bedjily.net are first-party cookies. We do not place third-party advertising cookies on your device.

Managing cookies: You can control and delete cookies through your browser settings. Most modern browsers allow you to block or delete cookies via the privacy or security settings panel. Please note that disabling strictly necessary cookies will prevent you from logging into your bedjily account, as session management depends on these cookies. Disabling functional or analytics cookies will not affect your ability to place bets or access games.

Local storage and session storage: In addition to cookies, bedjily may use browser local storage and session storage to cache game assets and platform data for performance purposes. These storage mechanisms do not transmit data to external servers and are cleared when you close your browser session (session storage) or when you clear your browser data (local storage).

bedjily retains your personal data for no longer than is necessary for the purposes for which it was collected, subject to our legal and regulatory obligations. The following retention periods apply to the main categories of data we hold:

• Account and identity data: Retained for the lifetime of your active account and for a minimum of five years following permanent account closure. This retention period is required by AML regulations and our operating licence conditions, which mandate that player records be available for audit and law enforcement purposes.
• Transaction and financial records: Retained for a minimum of five years from the date of each transaction, in accordance with financial record-keeping obligations. This includes all deposit and withdrawal records, bet placement logs, and bonus transaction histories.
• KYC documents: Identity documents are retained for the minimum period required by our KYC obligations — typically five years from the date of verification or account closure, whichever is later. After the retention period expires, documents are securely deleted from our systems.
• Usage and behavioural data: Retained for up to two years following your last login to your bedjily account. After this period, usage data is anonymised and may be retained in aggregate form for platform analytics indefinitely.
• Support communications: Records of communications with the bedjily support team — including emails, live chat transcripts, and dispute correspondence — are retained for three years from the date of the communication.

Storage location: bedjily's player data is stored on secure servers hosted by reputable cloud infrastructure providers. Data is stored using AES-256 encryption at rest and is accessible only to authorised bedjily personnel and approved service providers on a strict need-to-know basis. Server infrastructure is maintained with redundancy to ensure data availability and integrity.

Data deletion requests: Where you submit a valid request for erasure of your personal data and no legal obligation requires us to retain it, bedjily will securely delete or anonymise the relevant data within 30 days of confirming your identity and the validity of your request. We will notify you in writing when the deletion has been completed.

As a bedjily player, you have meaningful rights over the personal data we hold about you. bedjily is committed to honouring these rights promptly and transparently. The following rights are available to all registered players:

• Right of access: You may request a copy of all personal data that bedjily holds about you. We will provide this information in a structured, commonly used, and machine-readable format within 30 days of receiving a verified request.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. For account details such as email address and mobile number, you may update these directly via your account settings after bedjily Login. For identity data, contact support to initiate a formal correction.
• Right to erasure: You may request that bedjily delete your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent and no other legal basis applies, or where the data has been processed unlawfully. This right is subject to our legal retention obligations as described in Section 5.
• Right to restrict processing: You may request that bedjily limits how it uses your personal data in certain circumstances — for example, while a dispute about the accuracy of your data is being resolved.
• Right to data portability: You may request that bedjily provides your personal data to you or to another service provider in a portable format, where technically feasible and where the legal basis for processing is consent or contractual necessity.
• Right to withdraw consent: Where bedjily processes your data based on your consent — such as for marketing communications — you may withdraw that consent at any time without affecting the lawfulness of processing that took place before withdrawal. To opt out of marketing emails, contact [email protected].
• Right to object: You may object to bedjily processing your personal data for legitimate interest purposes, including profiling for platform personalisation. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.

To exercise any of the above rights, please contact bedjily by emailing [email protected] with the subject line "Privacy Rights Request — [Your Username]". We will acknowledge your request within 48 hours and provide a substantive response within 30 calendar days. Where a request is complex or involves a large volume of data, we may extend this period by a further 30 days and will notify you accordingly.

bedjily will never charge a fee for a legitimate privacy rights request. However, where requests are manifestly unfounded, repetitive, or excessive, we reserve the right to either charge a reasonable fee or decline the request, with written explanation of our reasons.

bedjily takes the security of your personal data seriously and implements a layered set of technical and organisational measures to guard against unauthorised access, accidental loss, alteration, or disclosure. No system is completely immune to security threats, but we maintain robust controls designed to minimise risk.

• Transport security: All data transmitted between your browser or device and bedjily.net is encrypted using TLS 1.2 or higher. Our SSL certificate is maintained and renewed on schedule. You can verify our encryption status via the padlock icon in your browser's address bar.
• Data at rest: Stored personal data — including identity documents, financial records, and account credentials — is encrypted at rest using AES-256 encryption. Encryption keys are managed separately from the encrypted data and are rotated regularly.
• Access controls: Access to systems holding player personal data is restricted to authorised bedjily personnel based on a strict need-to-know principle. All staff access is logged, and privileged access is subject to multi-factor authentication requirements.
• Password security: Player account passwords are stored as salted cryptographic hashes. bedjily staff cannot view your plaintext password and will never ask you to share it. We strongly encourage you to use a unique, strong password for your bedjily account and to enable two-factor authentication (2FA) from your account settings.
• Penetration testing: bedjily's platform infrastructure undergoes periodic penetration testing and vulnerability assessments conducted by independent security professionals. Critical findings are remediated on a priority basis.
• Incident response: In the event of a data security incident that poses a risk to your personal data, bedjily will notify affected players and relevant authorities within the timeframe required by applicable data protection obligations. Notification will include a description of the incident, the categories of data affected, and the steps bedjily is taking in response.

Your responsibilities: The security of your bedjily account also depends on actions you take. You are responsible for keeping your login credentials confidential, logging out of your account when using shared devices, and promptly reporting any suspected unauthorised access to [email protected]. bedjily is not liable for security breaches that result from your failure to maintain reasonable precautions over your own credentials.

bedjily may update this Privacy Policy from time to time to reflect changes in our data processing practices, changes in applicable law, or improvements to our platform operations. The effective date and version number at the top of this page will always reflect the current version. We maintain an internal archive of previous versions and can provide earlier versions on request.

Notification of material changes: Where a change to this Privacy Policy is material — meaning it affects how we collect, use, share, or protect your personal data in a way that is significantly different from the practices described in the version you previously accepted — we will notify you by email to your registered address at least 14 days before the updated policy takes effect. The notification will summarise the key changes and provide a link to the full updated policy.

Minor updates: Non-material changes — such as clarifications of existing practices, corrections of typographical errors, or reorganisation of content without change in substance — may be made without advance notification. The effective date will be updated to reflect the change.

Your choices following an update: Your continued use of bedjily following the effective date of an updated Privacy Policy constitutes acceptance of the updated practices. If you do not agree with the updated policy, you may close your account by contacting [email protected] before the effective date. bedjily will process any outstanding withdrawals from your verified balance before completing the account closure.

For any questions or concerns about this Privacy Policy or about how bedjily handles your personal data, please contact us at: [email protected] — include "Privacy Policy Enquiry" in the subject line and we will respond within two business days.