bj33 Privacy Policy

1 Introduction

This Privacy Policy ("Policy") describes how bj33 — operating the online sports betting and casino platform accessible at bj33.im ("the Platform") — collects, uses, stores, and protects the personal data of individuals who access or use the Platform ("you", "your", "the player").

bj33 is committed to protecting your privacy and to processing your personal data in a fair, lawful, and transparent manner. This Policy is designed to give you a clear understanding of the data practices in place at bj33 and to inform you of the rights available to you in relation to your personal data.

This Policy applies to all personal data collected through the bj33 Platform, including data provided during account registration, collected automatically during your use of the Platform, or obtained from third parties for the purposes of identity verification and fraud prevention.

This Policy should be read in conjunction with the bj33 Terms & Conditions, which are incorporated by reference. If you have any questions about this Policy or about how bj33 handles your data, please contact us at [email protected].

2 Data We Collect

bj33 collects the following categories of personal data from players and prospective players:

• Identity Data: Including your full legal name, date of birth, gender, and government-issued identification numbers (such as National Identity Card number or passport number) provided during registration or KYC verification.
• Contact Data: Including your email address, mobile telephone number, and city or district of residence within Bangladesh (such as Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, or Cox's Bazar).
• Account Credentials: Your chosen username and an encrypted hash of your password. bj33 does not store passwords in plain text.
• Financial Data: Including your bKash, Nagad, Rocket, or Upay account identifiers; Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, or other linked bank account details; and a complete record of all deposit and withdrawal transactions processed through your bj33 account.
• Technical & Device Data: Including your IP address, device identifiers, browser type and version, operating system, time zone setting, and connection timestamps collected automatically when you access the Platform.
• Usage & Behavioural Data: Including records of games played, bets placed, bet amounts, outcomes, session durations, and platform navigation patterns, collected to support responsible gaming monitoring, fraud detection, and platform improvement.
• Verification Documents: Copies of identity documents, proof-of-address documents, and photographs submitted for KYC purposes.
• Communications Data: Records of your interactions with bj33 customer support, including live chat transcripts, email correspondence, and any feedback or complaints submitted.

3 How We Collect Your Data

bj33 collects personal data through several distinct channels:

• Direct Collection: Data you provide voluntarily when you create an account, complete identity verification, make a deposit or withdrawal request, contact customer support, or submit any form on the Platform.
• Automated Collection: Technical and usage data collected automatically through cookies, server logs, and similar tracking technologies as you navigate and interact with the Platform. See Section 9 for more detail on cookies.
• Third-Party Sources: Identity and fraud-risk data received from specialist KYC verification providers, payment processors (including bKash, Nagad, and partner banks), and fraud prevention services engaged by bj33 to verify player information and protect platform integrity.
• Publicly Available Sources: In limited circumstances, bj33 may consult publicly available sources — such as publicly accessible databases — to verify information provided by players during the KYC process.

4 How We Use Your Data

bj33 uses the personal data it collects for the following purposes:

• Account Management: To create, verify, maintain, and administer your bj33 player account, including processing your registration and managing your account settings.
• Service Delivery: To process your bets, casino game sessions, deposits, and withdrawal requests, and to deliver the full range of sports betting and casino services available on the Platform.
• Identity & Age Verification: To verify that you meet the 21+ age eligibility requirement and to confirm your identity in accordance with applicable know-your-customer obligations. bj33 maintains a strict zero-tolerance policy on underage gambling.
• Anti-Money Laundering Compliance: To monitor transactions for patterns consistent with money laundering, fraud, or other illegal financial activity, and to report suspicious activity to the relevant authorities where legally required.
• Responsible Gaming: To monitor your gameplay patterns and account activity to identify signs of problem gambling, and to administer any responsible gaming tools you have activated — such as deposit limits, loss limits, cool-off periods, and self-exclusion.
• Fraud Prevention & Security: To detect and prevent unauthorised access to your account, to identify fraudulent or abusive behaviour, and to maintain the integrity of the Platform.
• Customer Support: To respond to your support enquiries, resolve disputes, and maintain records of communications for quality assurance and compliance purposes.
• Communications: To send you transactional emails relating to your account (such as deposit confirmations, withdrawal notifications, and security alerts). bj33 will only send you promotional communications if you have opted in to receive them.
• Platform Improvement: To analyse usage patterns and technical data to improve the Platform's performance, user experience, and game offering.
• Legal Compliance: To comply with applicable laws, regulations, court orders, and the lawful requests of regulatory or law enforcement authorities.

5 Legal Basis for Processing

bj33 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual Necessity: Processing that is necessary to perform the contract between you and bj33 — including account registration, service delivery, and payment processing.
• Legal Obligation: Processing that is required to comply with applicable legal obligations, including anti-money laundering regulations, age verification requirements, and record-keeping obligations.
• Legitimate Interest: Processing carried out for bj33's legitimate business interests where those interests are not overridden by your data protection rights — including fraud prevention, platform security, responsible gaming monitoring, and analytics.
• Consent: Where bj33 relies on your consent for specific processing activities (such as sending you marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

6 Data Sharing & Disclosure

bj33 does not sell, rent, or trade your personal data to any third party for their own marketing or commercial purposes. Your data may be shared in the following limited and controlled circumstances only:

• Payment Processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, and other banking partners — solely for the purpose of processing your financial transactions. These partners are bound by their own regulatory obligations and data protection standards.
• KYC & Identity Verification Providers: Specialist third-party providers engaged by bj33 to verify your identity and age. These providers process only the minimum data required for verification and operate under strict contractual confidentiality obligations.
• Fraud Prevention Services: Third-party fraud detection and risk assessment services that help bj33 identify suspicious activity and protect the Platform from abuse.
• Game Software Providers: Technology providers such as Evolution Gaming, Ezugi, Pragmatic Play, NetEnt, Microgaming, and Spribe may receive limited technical session data (such as game session identifiers) necessary for delivering their game products. They do not receive your full identity or financial data.
• Legal & Regulatory Authorities: bj33 may disclose personal data to law enforcement agencies, regulatory authorities, or courts where required to do so by law, or in response to a valid legal order. bj33 will, where legally permitted, inform you of any such disclosure.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of bj33's business, personal data may be transferred to the relevant third party as part of that transaction. Affected players will be notified in advance of any such transfer and their data protection rights will be preserved.

All third parties with whom bj33 shares personal data are required to maintain appropriate technical and organisational security measures and to process your data only for the specific, defined purposes for which it was shared.

7 Data Retention

bj33 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulatory obligations.

• Active Account Data: Personal data associated with an active bj33 account is retained for the duration of the account and for a minimum period of 5 years following account closure, in accordance with standard anti-money laundering record-keeping requirements.
• Financial Transaction Records: All records of deposits, withdrawals, and bets are retained for a minimum of 5 years following the date of each transaction.
• KYC & Verification Documents: Identity and address verification documents are retained for a minimum of 5 years following account closure, or longer where required by applicable law.
• Support Communications: Customer support records are retained for 3 years following the resolution of the relevant enquiry or complaint.
• Technical & Log Data: Server log and technical access data is typically retained for 12 months, after which it is deleted or anonymised.

Upon expiry of the relevant retention period, personal data is securely deleted or anonymised so that it can no longer be associated with any individual. If you request account closure before the expiry of a legally mandated retention period, bj33 will retain only the minimum data required to satisfy that legal obligation and will cease all other processing of your data.

8 Data Security

bj33 implements a comprehensive range of technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. These measures include:

• SSL Encryption: All data transmitted between your device and the bj33 Platform is encrypted using industry-standard SSL/TLS protocols. Look for the padlock icon in your browser address bar when using bj33.
• Password Hashing: Account passwords are stored as salted cryptographic hashes. bj33 does not store or have access to your plain-text password at any time.
• Access Controls: Access to personal data is restricted on a strict need-to-know basis. Only authorised bj33 personnel with a legitimate operational requirement are granted access to player data.
• Secure Infrastructure: bj33's platform infrastructure is hosted in secured data centre environments with physical access controls, redundant systems, and regular security auditing.
• Fraud Monitoring: Automated systems continuously monitor account activity and transaction patterns for signs of unauthorised access or fraudulent behaviour. Suspicious activity triggers immediate review by the bj33 security team.
• Staff Training: All bj33 personnel with access to personal data receive regular training on data protection obligations and security procedures.

While bj33 takes every reasonable precaution to protect your data, no internet transmission or electronic storage system is completely secure. You also play an important role in keeping your account secure — please ensure that your password is strong, unique to bj33, and kept strictly confidential. Contact [email protected] immediately if you suspect any unauthorised access to your account.

9 Cookies & Tracking Technologies

bj33 uses cookies and similar tracking technologies (such as web beacons and local storage) to operate the Platform effectively and to improve your user experience. Cookies are small text files placed on your device when you visit the Platform.

bj33 uses the following categories of cookies:

• Essential Cookies: Required for the Platform to function correctly. These include session management cookies that keep you logged in during your visit, security cookies, and load-balancing cookies. Essential cookies cannot be disabled without impairing Platform functionality.
• Functional Cookies: Used to remember your preferences — such as your preferred language settings or display options — to provide a more personalised experience on subsequent visits.
• Analytics Cookies: Used to collect aggregated, anonymised data on how players use the Platform — including pages visited, session duration, and click paths — to help bj33 identify areas for improvement. This data does not identify you personally.
• Security & Fraud Prevention Cookies: Used by bj33 and its fraud prevention partners to detect and prevent suspicious activity, including bot traffic and account takeover attempts.

You can manage or disable non-essential cookies through your browser settings at any time. Most browsers provide options to block all cookies, to block third-party cookies, or to delete cookies already stored on your device. Please note that disabling certain cookies may affect the functionality and performance of the bj33 Platform.

10 Your Data Rights

Subject to applicable law and any overriding legal obligations, you have the following rights in relation to the personal data bj33 holds about you:

• Right of Access: You have the right to request a copy of the personal data bj33 holds about you, along with information about how it is being used. bj33 will respond to access requests within 30 days.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data bj33 holds about you. You can update many of your account details directly from within your bj33 account settings.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent. This right is subject to bj33's legal data retention obligations, which may require certain data to be retained for a minimum period.
• Right to Restriction: You have the right to request that bj33 restrict the processing of your personal data in certain circumstances — for example, while a dispute about data accuracy is being resolved.
• Right to Data Portability: Where processing is based on your consent or on a contractual necessity, you have the right to receive the personal data you have provided to bj33 in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing of your personal data that is carried out on the basis of legitimate interest, including profiling for responsible gaming monitoring purposes, where you believe your rights and interests outweigh bj33's grounds for processing.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

To exercise any of these rights, please contact the bj33 support team at [email protected] with your request. bj33 may need to verify your identity before processing certain requests to protect against fraudulent data subject access claims. bj33 will respond to all valid data rights requests within 30 days of receipt, or notify you if a longer period is required for complex requests.

11 Children & Minors

The bj33 Platform is strictly for adults aged 21 years and above. bj33 does not knowingly collect, process, or retain personal data from individuals under the age of 21. If bj33 discovers or has reasonable grounds to believe that an account has been registered by or on behalf of a person under 21 years of age, the account will be immediately closed, all associated data will be handled in accordance with applicable legal requirements, and any funds deposited will be dealt with under the terms set out in the bj33 Terms & Conditions.

If you are a parent or guardian and believe that your child has registered on the bj33 Platform, please contact [email protected] immediately. bj33 will investigate and take appropriate action promptly.

12 International Data Transfers

bj33 primarily serves players based in Bangladesh and processes the majority of personal data within secured infrastructure. In some cases, data may be transferred to or accessed by third-party service providers located outside Bangladesh — for example, KYC verification providers, fraud prevention services, or game software partners operating from other jurisdictions.

Where such international transfers occur, bj33 takes reasonable steps to ensure that your personal data receives an adequate level of protection, including by requiring third-party recipients to maintain appropriate technical and organisational security measures and to process the data only for the specified purposes under binding contractual terms.

By using the bj33 Platform and providing your personal data, you acknowledge that your data may be processed by bj33's trusted service partners in other jurisdictions, subject to the safeguards described in this Policy.

13 Third-Party Links

The bj33 Platform may contain references to game studios and software providers by name (such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi). bj33 does not link to or embed third-party websites operated by these providers within the Platform in a way that would expose your personal data to their independent data collection practices.

Should the Platform ever contain a navigable link to an external website, bj33 is not responsible for the privacy practices or content of that third-party site. You should review the privacy policy of any external website you visit independently. This Privacy Policy applies solely to personal data collected and processed by bj33 in connection with the bj33.im Platform.

14 Changes to This Privacy Policy

bj33 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or Platform functionality. The most current version of this Policy is always accessible on the bj33 Platform at bj33.im/privacy-policy.

When material changes are made to this Policy, bj33 will notify active players via the email address associated with their account and will display a prominent notice on the Platform for a reasonable period following the update. The date of the most recent revision is shown at the top of this Policy.

Your continued use of the bj33 Platform following notification of any changes to this Privacy Policy constitutes your acceptance of those changes. If you do not agree with any updated version of this Policy, you must stop using the Platform and may request account closure by contacting [email protected].

15 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way bj33 handles your personal data, please contact our support team using the details below. We are committed to responding to all privacy-related enquiries promptly and thoroughly.

• General Support: [email protected]
• Responsible Gaming & Data Protection Enquiries: [email protected]
• Platform: bj33.im

bj33 aims to resolve all privacy enquiries within 5 business days of receipt. For formal data subject rights requests (such as data access, rectification, or erasure requests), bj33 will respond within 30 days as described in Section 10.