badjali Privacy Policy

badjali processes your personal data for specific, legitimate purposes. We do not use your data for purposes incompatible with those for which it was originally collected. The primary purposes for which we process your personal data are set out below.

2.1 Account Management and Service Delivery

We use your identity and contact data to create and maintain your badjali account, verify your identity, authenticate your login sessions, and deliver the core betting and gaming services you have requested. Without this processing, we cannot operate your account or provide the platform to you.

2.2 Transaction Processing

Your financial data is processed to facilitate deposits via bKash, Nagad, Rocket, Upay, Visa, and Mastercard, and to execute withdrawal requests to your registered payment method. Transaction records are retained in accordance with applicable financial regulations, which may require us to hold certain records for an extended period following account closure.

2.3 Identity Verification and Fraud Prevention

badjali is committed to operating a safe and compliant platform. We use identity, financial, and technical data to verify that you are who you say you are, to detect and prevent fraud, to identify potential money laundering activity, and to enforce the one-account-per-player policy. This processing is a legal obligation and a legitimate interest of badjali.

2.4 Responsible Gaming Monitoring

We analyse behavioural data — including wagering patterns, session frequency, and deposit volumes — to identify signs of problem gambling. Where our systems detect behaviour that may indicate gambling harm, we may proactively contact you with responsible gaming resources or apply account-level protective measures. This processing is carried out in your vital interest and in the public interest of promoting responsible gambling.

2.5 Platform Improvement and Analytics

Technical and behavioural data is used in aggregated, anonymised form to understand how players interact with the badjali platform, identify areas for improvement, optimise game loading performance, and develop new features. Individual players cannot be identified from the aggregated analytics data we generate for this purpose.

2.6 Marketing Communications

Where you have provided explicit consent, we may use your contact data to send you promotional emails, SMS alerts, and in-platform notifications about new games, deposit bonuses, BPL cricket betting promotions, and special seasonal offers such as Eid and Pohela Boishakh campaigns. You may withdraw your consent at any time. We do not send marketing communications to players who have opted out or who are subject to an active self-exclusion order.

2.7 Legal Compliance

badjali may process and disclose your personal data where required to do so by applicable law, court order, or the lawful request of a competent regulatory or law enforcement authority. In such cases, we will disclose only the minimum data necessary to comply with the legal obligation.

3.1 Payment Service Providers

To process your deposits and withdrawals, badjali shares necessary financial data with our integrated payment partners, including bKash, Nagad, Rocket, Upay, and the relevant card processing networks for Visa and Mastercard transactions. Each payment partner operates under their own privacy policy and data security standards. Data shared with payment partners is limited to the minimum required to complete the transaction.

3.2 Game Providers

badjali hosts games developed by third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and others. When you launch a game, a session token and anonymised player reference may be shared with the relevant game provider to authenticate your session and record game outcomes. Game providers do not receive your full name, contact details, or financial information.

3.3 Identity Verification Partners

For KYC verification, badjali may use third-party identity verification services. These providers receive copies of the identity documents you submit — such as your National ID card or passport — and process them solely for the purpose of confirming your identity. Verification providers are contractually bound to use your data only for this purpose and to delete it once verification is complete.

3.4 Legal and Regulatory Authorities

badjali will disclose personal data to law enforcement agencies, financial intelligence units, or other regulatory bodies where we are legally compelled to do so, or where disclosure is necessary to prevent or investigate fraud, money laundering, or other criminal activity. We will notify you of such a disclosure wherever we are legally permitted to do so.

3.5 Corporate Transactions

In the event that badjali undergoes a merger, acquisition, or sale of assets, your personal data may be transferred to the successor entity as part of that transaction. We will notify registered players in advance of any such transfer and ensure that the receiving entity is bound by privacy obligations at least as protective as those set out in this Policy.

Managing Your Cookie Preferences

You can control and delete cookies through your browser settings at any time. Most modern browsers allow you to block or delete cookies on a site-by-site basis. Please note that disabling strictly necessary cookies will prevent you from logging into your badjali account and will impair core platform functionality. Disabling analytics cookies will not affect your ability to use the platform but will prevent badjali from collecting data used to improve the service.

badjali does not deploy third-party advertising cookies or cross-site behavioural tracking technologies. We do not participate in advertising networks that profile you across different websites.

badjali retains your personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following retention principles apply:

• Active account data — retained for the full duration of your active badjali account relationship.
• Transaction and financial records — retained for a minimum of five years following the date of the transaction, in accordance with standard financial record-keeping obligations.
• KYC and identity verification documents — retained for a minimum of five years following account closure or the completion of the KYC process, whichever is later.
• Customer support communications — retained for up to three years following the resolution of the relevant support query.
• Marketing preferences and consent records — retained for the duration of your account and for up to two years following account closure, to demonstrate compliance with consent obligations.
• Anonymised analytics data — may be retained indefinitely, as it cannot be used to identify any individual player.
• Self-exclusion records — retained indefinitely to prevent re-registration by players who have requested permanent exclusion.

Upon the expiry of the applicable retention period, badjali will securely delete or anonymise your personal data. Where deletion is not immediately possible due to technical constraints, the data will be isolated from active processing and scheduled for deletion at the earliest practicable opportunity.

badjali takes the security of your personal data seriously and employs a layered set of technical and organisational measures to protect it against unauthorised access, disclosure, alteration, or destruction. Key security measures currently in place include:

6.1 Encryption in Transit and at Rest

All data transmitted between your browser or device and the badjali platform is encrypted using TLS 1.2 or higher, enforced by our 256-bit SSL certificate. Personal data stored on our servers is encrypted at rest using AES-256 encryption. Player passwords are stored as salted bcrypt hashes and are never accessible in plain text to any member of the badjali team.

6.2 Access Controls

Access to player personal data within badjali's internal systems is restricted on a strict need-to-know basis. Staff members are granted only the minimum level of data access required for their specific role. All internal access to personal data is logged and audited. Administrative accounts are protected by multi-factor authentication.

6.3 Network and Infrastructure Security

badjali's platform infrastructure is protected by firewalls, intrusion detection systems, and regular vulnerability scanning. We conduct periodic security assessments and penetration tests to identify and remediate potential weaknesses before they can be exploited.

6.4 Data Breach Response

In the event of a confirmed personal data breach that is likely to result in a risk to your rights and freedoms, badjali will notify affected players within 24 hours of becoming aware of the breach, where it is technically and operationally feasible to do so. Our notification will describe the nature of the breach, the categories of data affected, the likely consequences, and the steps we are taking to address it.

6.5 Your Role in Security

While badjali takes all reasonable steps to protect your data, the security of your account also depends on your own actions. You should choose a strong, unique password for your badjali account, never share your login credentials with any third party, and notify us immediately if you suspect that your account has been accessed without your authorisation.

8.1 Changes to This Privacy Policy

badjali may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or the structure of the platform. When a material change is made, we will notify registered players via the email address associated with their account and will post a prominent notice on the Platform for a minimum of 14 days following the update. The effective date at the top of this Policy will be updated accordingly.

Your continued use of the badjali platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the revised Policy, you should close your account before the revised Policy takes effect.

8.2 Contacting Us About Privacy

If you have any questions, concerns, or complaints about how badjali handles your personal data, or if you wish to exercise any of your privacy rights as described in Section 7, please contact our Data Privacy team. You can reach us at:

Email: support@badjali (plain text — not a clickable link)

We aim to acknowledge all privacy-related enquiries within 48 hours and to provide a substantive response within 30 calendar days of receipt. For complex requests, we may extend this period by a further 30 days, in which case we will notify you of the extension before the initial 30-day period expires.

8.3 Minors and Age Restriction

badjali is strictly an adults-only platform. We do not knowingly collect personal data from individuals under the age of 18. If we become aware that a player under 18 has created an account and provided personal data, we will close the account immediately and delete all associated personal data without undue delay. If you believe that a minor has registered on badjali, please notify us immediately at the contact address above.