Privacy Policy

bj22 ("we," "us," "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy describes how we collect, use, disclose, and safeguard information when you visit our website at bj22.vu, register for an account, or use any of our gaming and betting services (collectively, the "Platform").

This Privacy Policy applies to all users of the bj22 Platform, including visitors, registered players, and former account holders. It should be read in conjunction with our Terms & Conditions, available at /terms-conditions, which govern your use of the Platform.

By accessing or using the bj22 Platform, you acknowledge that you have read, understood, and agree to the data practices described in this Privacy Policy. If you do not agree with any part of this policy, you must immediately discontinue use of the Platform.

For the purposes of applicable data protection laws, bj22 is the data controller responsible for your personal information. This means we determine the purposes and means of processing your personal data collected through the Platform.

Our designated contact for privacy-related inquiries is:

• Email: [email protected]
• Subject Line: Privacy Inquiry / Data Protection Request
• Response Time: We aim to respond to all privacy inquiries within 48 hours

We collect several categories of personal information to provide, maintain, and improve our services. The types of data we collect include:

3.1 Information You Provide Directly

• Registration Data: Full name, date of birth, gender, residential address, email address, mobile phone number, username, and password.
• Identity Verification Data: Government-issued photo identification (national ID card, passport, driving licence), utility bills, bank statements, and selfie photographs for KYC verification.
• Payment Information: bKash/Nagad/Rocket account details, bank account numbers, transaction records, deposit and withdrawal history.
• Communications: Customer support correspondence, live chat transcripts, emails, feedback, and survey responses.
• Responsible Gaming Data: Deposit limits, self-exclusion preferences, reality check settings, and timeout durations you configure.

3.2 Information Collected Automatically

• Device Information: IP address, device type, operating system, browser type and version, screen resolution, language preferences.
• Usage Data: Pages visited, games played, betting history, session duration, click patterns, timestamps, referral sources.
• Location Data: Approximate geographic location derived from IP address to ensure compliance with jurisdictional restrictions.
• Cookies & Tracking Technologies: Session cookies, preference cookies, analytics cookies, and similar technologies as detailed in Section 9.

3.3 Information from Third Parties

• Payment Processors: Transaction confirmations, payment method verification, and fraud screening data from bKash, Nagad, Rocket, and banking partners.
• Game Providers: Game outcomes, RTP statistics, and play patterns from Pragmatic Play, Evolution Gaming, Net Ent, and other certified game suppliers integrated into the bj22 platform.
• Identity Verification Partners: Results from third-party KYC and AML screening services used to verify your identity and comply with regulatory requirements.
• Analytics Providers: Aggregated behavioural data from analytics platforms used to understand Platform performance and user experience.

bj22 uses your personal information only for legitimate, clearly defined purposes. We do not sell your personal data to third parties. Our primary purposes for processing your data are as follows:

• Account Management: Creating, maintaining, and securing your bj22 account, including password resets, account recovery, and profile updates.
• Service Delivery: Processing deposits and withdrawals via bKash, Nagad, and Rocket; enabling access to casino games, cricket betting, slots, and live dealer tables; and settling bets and distributing winnings.
• Identity Verification & KYC Compliance: Verifying your age and identity to ensure you are at least 18 years old and meet our eligibility criteria, and to comply with anti-money-laundering regulations.
• Fraud Prevention & Security: Detecting, investigating, and preventing fraudulent activity, multi-account abuse, bonus misuse, money laundering, and other prohibited conduct through automated and manual monitoring systems.
• Customer Support: Responding to your inquiries, resolving disputes, processing complaints, and providing technical assistance.
• Responsible Gaming: Monitoring play patterns to identify potential problem gambling behaviour and enforcing deposit limits, self-exclusion requests, and other responsible gaming measures you have activated.
• Legal & Regulatory Compliance: Meeting our obligations under applicable laws and cooperating with regulatory bodies, law enforcement agencies, and licensing authorities when legally required.
• Platform Improvement: Analysing usage data and gaming trends to improve the bj22 platform, fix technical issues, and develop new features.
• Marketing Communications: Sending you promotional offers, bonuses, and news about new games or features — but only where you have opted in to receive such communications. You may opt out at any time.
• Personalisation: Tailoring your gaming experience, including game recommendations and promotional offers relevant to your preferences.

bj22 processes your personal data on the following legal bases under applicable data protection legislation:

• Contractual Necessity: Processing required to fulfil our contractual obligations to you under the Terms & Conditions, including account creation, payment processing, and service delivery.
• Legal Obligation: Processing necessary for compliance with applicable laws, including KYC requirements, anti-money-laundering regulations, tax reporting obligations, and cooperation with regulatory authorities.
• Legitimate Interests: Processing carried out for bj22's legitimate business interests, including fraud prevention, platform security, network and information security, and business analytics — provided these interests are not overridden by your rights and freedoms.
• Consent: Processing carried out based on your explicit consent, including marketing communications and optional personalisation features. You may withdraw consent at any time without affecting the lawfulness of prior processing.
• Vital Interests: In rare circumstances, processing may be necessary to protect your vital interests or those of another person, such as in cases involving problem gambling or safeguarding concerns.

bj22 does not sell, trade, or rent your personal information to any third party. We share your data only in the following limited circumstances:

• Payment Service Providers: We share necessary transaction information with bKash, Nagad, Rocket, and banking partners to process deposits and withdrawals securely. These providers are bound by contractual obligations to protect your data and may only use it for payment processing purposes.
• Identity Verification Services: We share identity documents and verification requests with certified KYC and AML screening providers to fulfil our regulatory obligations. These providers operate under strict data processing agreements.
• Game Providers: Technical gaming data (such as session tokens and bet instructions) is shared with licensed game suppliers to facilitate gameplay. No unnecessary personal information is transmitted.
• Analytics & Technology Partners: We may share anonymised or aggregated technical data with analytics platforms to measure performance and improve user experience. This data cannot identify you individually.
• Legal & Regulatory Authorities: We will disclose your personal data to law enforcement agencies, regulatory bodies, courts, or other government authorities where we are legally required to do so or where disclosure is necessary to protect the rights, property, or safety of bj22, our players, or the public.
• Business Transfers: In the event of a merger, acquisition, sale of assets, or restructuring, your personal data may be transferred to the acquiring entity, subject to equivalent privacy protections.
• Group Companies: We may share data within our corporate group for internal business purposes, always subject to the same protections described in this Privacy Policy.

We retain your personal data only for as long as necessary to fulfil the purposes described in this Privacy Policy, or as required by applicable law. Our standard retention periods are:

After the applicable retention period expires, your data will be securely deleted or anonymised so that it can no longer be linked to you. Anonymised data may be retained indefinitely for statistical and analytical purposes.

bj22 takes data security extremely seriously and implements a comprehensive range of technical and organisational measures to protect your personal information against unauthorised access, disclosure, alteration, or destruction:

• SSL/TLS Encryption: All data transmitted between your device and the bj22 Platform is encrypted using 256-bit SSL/TLS encryption, the same standard used by major international banks.
• Data Encryption at Rest: Sensitive personal data, including payment details and identity documents, is encrypted in our databases using industry-standard encryption algorithms.
• Access Controls: Access to personal data is restricted on a strict need-to-know basis. All staff with access to personal data are bound by confidentiality obligations and undergo regular data protection training.
• Multi-Factor Authentication: Critical internal systems require multi-factor authentication for staff access.
• Regular Security Audits: We conduct regular penetration testing, vulnerability assessments, and third-party security audits of our Platform and infrastructure.
• Fraud Monitoring Systems: Automated systems continuously monitor for suspicious account activity, unusual transaction patterns, and potential data breaches.
• Incident Response: We maintain a formal data breach response plan. In the event of a security incident affecting your personal data, we will notify affected users and relevant regulatory authorities within the timeframes required by applicable law.

While we take all reasonable steps to protect your data, no online platform can guarantee absolute security. We encourage you to use a strong, unique password for your bj22 account and to enable any available two-factor authentication features.

bj22 uses cookies and similar tracking technologies to enhance your experience on our Platform, analyse usage patterns, and ensure the security and proper functioning of our services. A cookie is a small text file placed on your device when you visit a website.

Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the Platform to function correctly. They enable core features such as account login, session management, and security controls. These cannot be disabled without breaking the Platform.
• Performance & Analytics Cookies: Help us understand how users interact with bj22 by collecting anonymised data on pages visited, time spent, and errors encountered. We use this information to improve the Platform.
• Functionality Cookies: Remember your preferences, such as language settings, preferred games, and display options, to personalise your experience.
• Security Cookies: Support our fraud detection and prevention systems by identifying unusual device or behavioural patterns.

Managing Cookie Preferences

You can control non-essential cookies through your browser settings. Most browsers allow you to refuse, delete, or be notified when cookies are set. Please note that disabling certain cookies may affect the functionality of the bj22 Platform, including your ability to log in and access account features.

For more information on managing cookies in your browser, please refer to your browser's help documentation.

Subject to applicable data protection laws, you have the following rights in relation to your personal data held by bj22:

• Right of Access: You have the right to request a copy of the personal data we hold about you, together with information about how it is processed.
• Right to Rectification: You can request that we correct any inaccurate or incomplete personal data. For account details, you can also update some information directly through your account settings.
• Right to Erasure ("Right to be Forgotten"): You may request the deletion of your personal data where it is no longer necessary for the purpose it was collected, where you withdraw consent, or where processing is unlawful. This right is subject to our legal retention obligations — we may need to retain certain data for compliance purposes even after an erasure request.
• Right to Restrict Processing: You can ask us to pause processing of your data in certain circumstances, such as while the accuracy of the data is contested or while a complaint is being investigated.
• Right to Data Portability: Where processing is based on your consent or contractual necessity and carried out by automated means, you may request a structured, machine-readable copy of your personal data.
• Right to Object: You can object to processing based on our legitimate interests or for direct marketing purposes. We will cease processing unless we can demonstrate compelling legitimate grounds that override your rights.
• Right to Withdraw Consent: Where we process data based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

To exercise any of the above rights, please contact our support team at [email protected] with the subject line "Data Rights Request." We will respond within 30 days of receiving your request. We may need to verify your identity before processing your request.

The bj22 Platform integrates with a number of third-party service providers to deliver its full range of features. While we take care to select reputable partners, each third-party provider operates under its own privacy policy and data practices. We are not responsible for the privacy practices of third parties.

Key third-party integrations on the bj22 Platform include:

• Payment Gateways: bKash, Nagad, and Rocket process payment transactions under their respective privacy policies. We encourage you to review their policies before making deposits or withdrawals.
• Game Providers: Licensed software providers including live dealer studios and slot developers receive minimal technical data (such as session tokens) necessary to operate their games. They do not receive your full personal profile.
• KYC & Compliance Services: Third-party identity verification platforms process the documents you submit for age and identity verification. These providers are bound by strict contractual and regulatory confidentiality requirements.
• Customer Support Tools: Live chat and helpdesk software used to manage support interactions may store conversation histories on their servers. We select providers that meet high data security standards.

All third-party data processors engaged by bj22 are required to enter into data processing agreements that mandate appropriate security measures and restrict the use of your data to the purposes specified by bj22.

The bj22 Platform is strictly intended for adults aged 18 and over. We do not knowingly collect personal data from individuals under the age of 18. Our registration process includes date-of-birth collection and age verification checks specifically to prevent minors from accessing our services.

If we become aware that we have inadvertently collected personal data from a person under the age of 18, we will take immediate steps to delete that information and close the associated account. All funds associated with underage accounts will be forfeited in accordance with our Terms & Conditions.

bj22 operates internationally, and as a result, your personal data may be transferred to and processed in countries other than Bangladesh. These countries may have different data protection laws from those in your home jurisdiction.

Where we transfer your personal data outside your country of residence, we take the following measures to ensure that your data continues to receive adequate protection:

• Entering into standard contractual clauses or data transfer agreements with data processors and recipients that provide equivalent data protection safeguards.
• Ensuring that recipient countries or organisations provide an adequate level of data protection recognised under applicable privacy frameworks.
• Implementing additional technical safeguards, such as encryption, for data in transit across borders.
• Conducting transfer impact assessments where required by applicable law to evaluate the risks associated with specific transfers.

By using the bj22 Platform and providing your personal data, you acknowledge that your data may be transferred internationally as described in this section.

bj22 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. We will notify you of material changes by:

• Displaying a prominent notice on the bj22 Platform for a reasonable period following the update.
• Sending an email notification to your registered email address where the changes are significant.
• Updating the "Last Updated" date at the top of this Privacy Policy.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your data. Your continued use of the Platform after any changes to this Privacy Policy constitutes your acceptance of the updated policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data, please reach out to our dedicated support team:

• Email: [email protected]
• Live Chat: Available 24/7 on the bj22 Platform
• Response Time: Within 48 hours for email, instant for live chat
• Website: bj22.vu

For formal data rights requests (access, erasure, portability, etc.), please use the subject line "Data Rights Request" so we can prioritise your inquiry and assign it to our data protection team. We are committed to resolving all privacy-related concerns fairly, transparently, and within the timeframes required by applicable law.