bji999 Privacy Policy

1 Introduction

This Privacy Policy ("Policy") describes how bji999 ("bji999", "we", "us", "our") collects, processes, stores, and protects the personal data of individuals ("you", "Player", "User") who access or use the bji999 website at https://bji999.biz and all associated services, including casino games, live dealer tables, sports betting, slots, and account management features (collectively, the "Platform").

bji999 is committed to handling all personal data responsibly and in accordance with applicable data protection principles. We believe that privacy is a fundamental right, and we have designed our data practices to be proportionate, transparent, and respectful of your interests as a bji999 player in Bangladesh.

By creating a bji999 account, making a deposit, or otherwise using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any aspect of this Policy, you should not use the Platform.

This Policy should be read alongside the bji999 Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference and form part of the overall agreement between you and bji999.

2 Data Controller

For the purposes of this Privacy Policy, bji999 acts as the data controller in respect of the personal data collected through the Platform. As data controller, bji999 determines the purposes for which and the means by which your personal data is processed.

All data-related enquiries, access requests, and complaints may be directed to the bji999 support team using the contact details set out in Section 13 of this Policy. bji999 commits to responding to all substantive privacy enquiries within fifteen business days of receipt.

3 Personal Data We Collect

bji999 collects several categories of personal data in order to operate the Platform safely, securely, and in compliance with applicable legal and regulatory obligations. The categories of data we collect are set out in the table below:

4 How We Collect Your Data

bji999 collects personal data through the following channels and mechanisms:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact our support team, or update your account settings.
• Automatically — through cookies, web beacons, server logs, and similar tracking technologies that record technical and usage data as you navigate the bji999 Platform. See Section 10 for further details on our use of cookies.
• From payment providers — when you initiate a deposit or withdrawal via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, or other payment partners, those providers may share transaction confirmation data with bji999 to facilitate the processing of your financial transactions.
• From identity verification services — bji999 uses third-party KYC and fraud-prevention service providers to assist with the verification of identity documents. These providers may return verification results to bji999 in connection with your KYC submission.
• From publicly available sources — in limited circumstances related to fraud prevention or legal compliance, bji999 may cross-reference information you have provided against publicly available records.

5 Purpose & Legal Basis for Processing

bji999 processes your personal data only where a valid legal basis exists for doing so. The primary purposes for which we process your data, together with the applicable legal basis for each, are described below:

• Account creation and management — processing is necessary for the performance of the contract between you and bji999 (i.e., the Terms & Conditions you agreed to at registration).
• Identity verification (KYC) and age verification — processing is necessary for compliance with legal obligations applicable to bji999 as an online gaming operator, including obligations relating to anti-money-laundering (AML), counter-terrorism financing (CTF), and the prevention of underage gambling (18+ only).
• Payment processing — processing is necessary for the performance of the contract, specifically to facilitate deposits and withdrawals in Bangladeshi Taka (৳) via bKash, Nagad, Rocket, Upay, and banking partners.
• Fraud detection and security — processing is necessary for the legitimate interests of bji999 in maintaining the security and integrity of the Platform, detecting and preventing fraudulent activity, and protecting the interests of all players.
• Customer support — processing is necessary for the performance of the contract and for the legitimate interest of bji999 in resolving player queries and complaints effectively.
• Responsible gaming monitoring — processing is necessary for bji999's legal and ethical obligations in relation to player protection, including identifying players who may be at risk of gambling-related harm and applying appropriate intervention measures.
• Promotional communications — where you have provided your consent (and have not subsequently withdrawn it), bji999 may use your contact details to send you information about bonuses, promotions, and platform updates. You may opt out at any time by updating your account notification settings or contacting support.
• Legal and regulatory compliance — processing is necessary to comply with applicable law, including responding to lawful requests from regulatory authorities and law enforcement agencies.

6 Data Sharing & Disclosure

bji999 does not sell, rent, or otherwise transfer your personal data to unaffiliated third parties for their own commercial or marketing purposes. Personal data may be shared with the following categories of recipient only where strictly necessary and for the purposes described in this Policy:

• Payment service providers — bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard, solely to facilitate deposit and withdrawal transactions.
• KYC and fraud-prevention providers — third-party identity verification and fraud-screening services engaged by bji999 to assist with compliance obligations. These providers process data only on bji999's instructions and are contractually bound to maintain appropriate security standards.
• Game software providers — studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive limited technical data (e.g., session tokens, game round results) to facilitate the delivery of their games on the bji999 Platform. No personal financial data is passed to game studios.
• IT and infrastructure providers — cloud hosting, content delivery, and cybersecurity service providers who process data on bji999's behalf under strict data processing agreements.
• Legal and regulatory authorities — bji999 will disclose personal data to law enforcement agencies, courts, or regulatory bodies where required to do so by law, court order, or binding regulatory instruction, or where bji999 reasonably believes such disclosure is necessary to prevent fraud, money laundering, or serious harm.

7 Data Retention

bji999 retains personal data for no longer than is necessary for the purposes for which it was collected, subject to any legal or regulatory obligation to retain data for a specified minimum period. The following general retention periods apply:

• Account and identity data — retained for the duration of your account relationship with bji999 plus a minimum period of five years following account closure, in line with AML record-keeping obligations.
• Financial transaction data — retained for a minimum of five years from the date of the transaction, in accordance with applicable financial crime prevention requirements.
• KYC documents — retained for the duration of your account plus five years following account closure. Documents are stored in encrypted form with access restricted to authorised compliance personnel.
• Communications data (support correspondence) — retained for a maximum of three years from the date of the last interaction, unless a longer period is required for the resolution of a dispute or legal claim.
• Technical and usage data — anonymised or aggregated within twelve months of collection. Raw log data is retained for a maximum of twelve months for security and fraud-detection purposes.
• Marketing preference data — retained until you withdraw your marketing consent, at which point your preference record is updated and future marketing communications cease.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where anonymisation is not technically feasible within the relevant system, data is pseudonymised and access restricted pending scheduled deletion.

8 Security Measures

bji999 implements a comprehensive range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Key security measures in place include:

• SSL/TLS encryption — all data transmitted between your browser or mobile device and bji999 servers is encrypted using industry-standard TLS 1.2 or higher protocols.
• Encryption at rest — sensitive personal and financial data stored in bji999's databases is encrypted at rest using strong symmetric encryption algorithms.
• Access controls — access to personal data within bji999's systems is restricted on a strict need-to-know basis. Staff members are granted access only to the data required to perform their specific roles, and all access is logged and audited.
• Two-factor authentication — bji999 encourages all players to enable two-factor authentication (2FA) on their accounts to provide an additional layer of protection against unauthorised login.
• Regular security testing — bji999's Platform undergoes periodic vulnerability assessments and penetration testing conducted by qualified security professionals.
• Staff training — all bji999 staff who handle personal data are required to complete data protection and information security training on a regular basis.

Whilst bji999 takes all reasonable and practicable steps to protect your personal data, no transmission over the internet or electronic storage system can be guaranteed to be 100% secure. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, bji999 will notify you without undue delay using the contact details associated with your bji999 account.

9 Your Data Rights

As a bji999 player, you hold a number of rights in relation to the personal data that bji999 holds about you. These rights are described below, along with guidance on how to exercise them:

To exercise any of the above rights, please contact the bji999 support team at [email protected]. bji999 will acknowledge your request within five business days and provide a substantive response within fifteen business days. In some cases, bji999 may need to verify your identity before processing a data rights request.

10 Cookies & Tracking Technologies

bji999 uses cookies and similar technologies (web beacons, pixel tags, local storage) to enhance your experience on the Platform, maintain session security, and collect analytical data about how the Platform is used. The categories of cookies used by bji999 are described below:

• Strictly necessary cookies — these cookies are essential for the operation of the Platform and cannot be disabled. They include session cookies that maintain your logged-in state, security tokens, and cookies that remember your language and region preferences.
• Performance and analytics cookies — these cookies collect anonymous information about how visitors interact with the Platform, including which pages are visited most frequently, how long sessions last, and whether any errors occur. This data helps bji999 improve the Platform over time.
• Functional cookies — these cookies remember choices you make (such as your preferred game category or display settings) and personalise your experience on return visits.
• Marketing and preference cookies — where you have consented, these cookies track your activity across the Platform to enable bji999 to deliver relevant promotional content and personalised bonus offers. You may withdraw this consent at any time via your account settings.

You can manage or delete cookies via your browser settings. Please note that disabling strictly necessary cookies will impair the functionality of the bji999 Platform and may prevent you from accessing certain features, including account login.

11 Minors

The bji999 Platform is strictly intended for adults aged 18 and above. bji999 does not knowingly collect, process, or retain personal data belonging to individuals under the age of 18. Age verification is conducted as part of the KYC process for all registered accounts.

If bji999 becomes aware that it has inadvertently collected personal data from an individual who is under 18 years of age, that data will be deleted promptly, the account will be suspended, and any deposits made by the underage individual will be handled in accordance with bji999's underage gambling policy set out in the Terms & Conditions.

12 Changes to This Privacy Policy

bji999 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. When material changes are made, bji999 will update the effective date displayed at the top of this page and, where reasonably practicable, notify registered players via the email address associated with their account or via an in-platform notification.

It is your responsibility to review this Privacy Policy periodically. Your continued use of the bji999 Platform following the publication of a revised Privacy Policy constitutes your acknowledgement of and agreement to the updated terms. If you do not agree with any revision, you should cease using the Platform and may request account closure by contacting support.

The most current version of this Privacy Policy is always available at bji999.biz/privacy-policy. Previous versions may be requested from our support team.

13 Contact & Complaints

If you have any questions, concerns, or requests regarding this Privacy Policy or the way in which bji999 processes your personal data, please contact our support team through the channel below:

bji999 is committed to resolving all privacy-related concerns promptly and fairly. If you submit a formal data rights request or a complaint relating to the processing of your personal data, bji999 will provide an acknowledgement within five business days and a full substantive response within fifteen business days.

If you are not satisfied with bji999's response to a privacy complaint, you may have the right to escalate the matter to the relevant data protection authority in your jurisdiction. bji999 will cooperate fully with any such regulatory investigation.