3bdjl Privacy Policy

1.1 Overview. 3bdjl collects personal information through several channels: directly from you when you register or use the platform, automatically through your device and browsing activity, and from trusted third-party sources such as identity verification providers. All collection is governed by the principle of data minimisation — we collect only what is genuinely necessary.

1.2 Registration & Account Data

When you create a 3bdjl account, we collect the following information:

• Full legal name (as it appears on your government-issued identity document);
• Date of birth (to verify that you are 18 years of age or older);
• Mobile phone number (used for account verification and two-factor authentication);
• Email address (used for account communications and transactional notifications);
• Residential address in Bangladesh (city, district, and postal code);
• Chosen username and encrypted password hash.

1.3 Identity Verification (KYC) Data

To comply with our anti-money laundering (AML) obligations and to confirm your age and identity, we collect:

• A copy of your Bangladesh National Identity Card (NID), passport, or birth registration certificate;
• A recent proof of address document (e.g., utility bill or bank statement dated within 90 days);
• A selfie or live photograph where required to match against your identity document;
• Source-of-funds documentation where transaction volumes or patterns require additional verification.

1.4 Financial & Transaction Data

Each deposit and withdrawal you make through bKash, Nagad, Rocket, Upay, or any other supported payment method generates a transaction record. We retain:

• The mobile wallet number or bank account identifier used for each transaction;
• Transaction amounts in Bangladeshi Taka (BDT);
• Transaction timestamps and reference numbers;
• Payment method type and provider.

We do not store full payment card numbers on our servers. Card-based transactions are processed via PCI-DSS-compliant third-party payment gateways.

1.5 Gameplay & Betting Data

We record a complete history of your activity on the platform, including:

• Bets placed, odds accepted, stakes, and outcomes across all sports and casino products;
• Game sessions including titles played, session duration, and amounts wagered;
• Bonus offers claimed, wagering progress, and bonus outcomes;
• Any messages exchanged with our player support team.

1.6 Technical & Device Data

When you access 3bdjl, our servers automatically log certain technical information:

• IP address and approximate geographic location (country and city level);
• Device type, operating system, and browser version;
• Referring URL and pages visited within the platform;
• Session timestamps and duration.

3.1 Principle of Minimum Sharing. 3bdjl shares personal data with third parties only where strictly necessary to deliver the platform's services, fulfil legal obligations, or protect the safety and integrity of the platform. We do not sell your personal data.

3.2 Categories of Third-Party Recipients

• Payment Processing Partners: bKash, Nagad, Rocket, Upay, and banking partners receive only the transaction data necessary to process your deposits and withdrawals. These partners operate under their own privacy policies and are bound by contractual data-handling obligations with 3bdjl.
• Game Content Providers: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive anonymised session identifiers to deliver gameplay. They do not receive your full name, NID, or financial account details.
• Identity Verification Services: KYC document verification may be handled by a third-party identity verification provider. These providers are contractually bound to use your documents solely for the purpose of identity confirmation.
• IT Infrastructure & Security Providers: Hosting, cloud infrastructure, cybersecurity monitoring, and content delivery services that are necessary to operate the platform securely.
• Analytics Providers: Aggregated, anonymised analytics data may be shared with service providers to help us understand platform usage patterns and improve the user experience.

3.3 Legal Disclosures

We may disclose your personal data to law enforcement agencies, regulatory authorities, or courts of competent jurisdiction where we are legally required to do so, or where we believe in good faith that such disclosure is necessary to prevent fraud, protect the safety of any person, or comply with a valid legal process.

3.4 Business Transfers

In the event of a merger, acquisition, or sale of all or a substantial portion of the Company's assets, personal data held by 3bdjl may be transferred to the acquiring entity. You will be notified via a prominent notice on the platform prior to any such transfer taking effect, and your rights under this Privacy Policy will continue to apply.

5.1 Technical Safeguards. 3bdjl implements a layered set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, disclosure, or destruction:

• 256-bit TLS/SSL Encryption: All data in transit between your browser and the platform is encrypted using industry-standard TLS 1.2 or higher.
• Password Hashing: Account passwords are stored exclusively as salted cryptographic hashes. The plain-text password is never stored or logged at any point.
• Access Controls: Internal access to personal data is restricted on a strict need-to-know basis. Staff who access player data are subject to confidentiality obligations and background screening.
• Two-Factor Authentication (2FA): Players are encouraged to enable 2FA on their accounts to add an additional layer of login security beyond the password.
• Intrusion Detection & Monitoring: The platform infrastructure is monitored continuously for unusual access patterns, potential intrusions, and data exfiltration attempts.
• Regular Security Audits: The platform undergoes periodic security reviews and penetration testing by qualified cybersecurity professionals.

5.2 Organisational Safeguards. All employees and contractors with access to personal data receive data protection training as part of their onboarding process and on an ongoing basis. We maintain a data breach response plan and will notify affected players within 72 hours in the event of a breach that poses a risk to their rights or freedoms.

5.3 No Absolute Guarantee. While 3bdjl takes all reasonable and practicable steps to protect your data, no method of internet transmission or electronic storage is 100% secure. Players are also responsible for maintaining the security of their own devices and account credentials.

7.1 Retention Principle. 3bdjl retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, to comply with our legal and regulatory obligations, and to resolve any disputes or enforce our agreements. Once data is no longer required, it is securely deleted or anonymised.

Data Category	Retention Period	Reason
Account registration data	Duration of account + 5 years after closure	AML / legal obligation
KYC identity documents	Duration of account + 5 years after closure	Regulatory compliance
Transaction records	Duration of account + 7 years after closure	Financial record-keeping obligation
Gameplay & betting history	Duration of account + 3 years after closure	Dispute resolution / responsible gambling
Support communications	3 years from last interaction	Dispute resolution
Technical / server logs	Up to 13 months from creation	Security monitoring
Marketing preferences	Until consent is withdrawn	Consent-based processing

7.2 Anonymisation. Where data no longer needs to be retained in identifiable form but has ongoing analytical value, we may anonymise it so that it can no longer be linked to any individual. Anonymised data is not personal data and falls outside the scope of this Privacy Policy.