Privacy Policy — batjlii

When you interact with the batjlii platform — whether by registering an account, making a deposit, placing a wager, or simply browsing the site — we may collect certain categories of personal and non-personal information. This section details exactly what those categories are and how the data is gathered.

1.1 Information You Provide Directly

When you create a batjlii account or update your profile, you provide us with:

• Full legal name (as it appears on your government-issued identification);
• Date of birth (used to confirm the 18+ age requirement);
• Valid email address;
• Bangladeshi mobile number (required for bKash, Nagad, Rocket, and Upay wallet linking);
• Residential address in Bangladesh;
• Government-issued identification documents submitted during KYC verification (Bangladesh NID, passport, or driving licence);
• Payment method details (mobile wallet numbers, bank account references, or card details as applicable);
• Any communications you send to our support team via email or live chat.

1.2 Information Collected Automatically

When you visit or use batjlii.net, our systems automatically record certain technical information, including:

• IP address and approximate geolocation (country and city level);
• Device type, operating system, and browser version;
• Pages visited, time spent on each page, and navigation paths through the site;
• Session timestamps and login/logout activity;
• Game activity records, including bets placed, game rounds played, and wager amounts in BDT;
• Deposit and withdrawal transaction logs;
• Cookie and similar tracking technology data (see Section 4 for full details).

1.3 Information from Third Parties

In limited circumstances, batjlii may receive information about you from third parties, including:

• Payment providers (bKash, Nagad, Rocket, Upay, Visa, Mastercard, and banking partners) — transaction confirmation and wallet ownership data used to verify deposits and process withdrawals;
• Identity verification and KYC service providers — results of automated document and biometric checks where applicable;
• Fraud prevention and anti-money-laundering screening databases — risk signals associated with your device fingerprint, IP address, or identity credentials;
• Game studios and platform providers — gameplay session data passed to us from integrated third-party game clients (Pragmatic Play, Evolution Gaming, Spribe, NetEnt, Microgaming, Ezugi, and others).

batjlii processes personal data only for the specific, lawful purposes described in this section. We do not use your data for purposes that are incompatible with those originally communicated to you at the point of collection. Our primary legal bases for processing player data are: performance of a contract (your player account agreement with us), compliance with a legal obligation, protection of vital interests (fraud prevention), and — where applicable — your explicit consent.

2.1 Account Management & Service Delivery

We use the information you provide to create and maintain your player account, authenticate your identity at login, process deposits and withdrawals in BDT, deliver game content from our integrated studio partners, and provide customer support in response to your queries. Without this processing, we cannot provide you with access to the batjlii platform.

2.2 Legal & Regulatory Compliance

As an online gaming platform serving players in Bangladesh, batjlii is required to conduct Know Your Customer (KYC) checks, retain transaction records for audit purposes, screen players against applicable sanctions and watchlists, and report suspicious activity in accordance with anti-money-laundering obligations. These processing activities are mandatory and cannot be opted out of while a player account remains active.

2.3 Platform Security & Fraud Prevention

We analyse device fingerprint data, IP addresses, login patterns, betting behaviour, and payment transaction logs to identify and prevent fraudulent activity, including multi-accounting, bonus abuse, money laundering, and unauthorised account access. Where suspicious activity is detected, we may restrict account access pending investigation and share relevant data with law enforcement or financial intelligence bodies as required.

2.4 Personalisation & Player Experience

With your consent, batjlii may use your game history and platform navigation data to personalise your casino lobby (for example, surfacing games you have previously enjoyed or recommending relevant promotions). You may withdraw consent for personalisation at any time via your account settings without affecting your ability to use the platform.

2.5 Marketing Communications

batjlii will only send promotional communications — such as bonus offer notifications, BPL season promotions, Eid cashback offers, or tournament announcements — to players who have explicitly opted in to receive such messages during registration or via their account communication preferences. You may unsubscribe from marketing communications at any time by clicking the unsubscribe link in any marketing email or by contacting [email protected]. Unsubscribing from marketing does not affect essential transactional communications (e.g., deposit confirmations, withdrawal notifications, account security alerts).

batjlii does not sell, rent, or trade your personal information to third parties for commercial gain. We share player data only where necessary to deliver our services, meet legal obligations, or protect the interests of our players and the platform. The following categories of third parties may receive your data under strictly controlled conditions.

3.1 Payment Service Providers

To process deposits and withdrawals, we share the minimum necessary payment and identity data with our integrated payment partners: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank (DBBL), BRAC Bank, City Bank, Islami Bank, Sonali Bank, Visa, and Mastercard. Each of these providers operates under their own privacy and data security policies, which we encourage you to review. batjlii is not responsible for the independent data practices of payment service providers once data has been passed to them for transaction processing.

3.2 Game Studio Partners

Integrated game studios — including Pragmatic Play, Evolution Gaming, Spribe, NetEnt, Microgaming, and Ezugi — may receive a pseudonymised player session token and game activity data to facilitate game delivery, resolve disputes, and ensure fair play certification. These providers do not receive your full identity data and are contractually prohibited from using session data for any purpose other than game service delivery.

3.3 Identity Verification & KYC Providers

batjlii uses specialist third-party KYC and identity verification providers to process document checks and, where applicable, biometric verification. These providers receive copies of your identification documents and process them in accordance with their own certified data security standards. All KYC providers engaged by batjlii are contractually bound to process data solely for the purpose of identity verification and to retain it only as long as required by applicable regulations.

3.4 Law Enforcement & Regulatory Authorities

batjlii may disclose player data to law enforcement agencies, financial intelligence units, or other regulatory authorities where we are legally required or compelled to do so — for example, in response to a court order, subpoena, or mandatory reporting obligation related to suspected money laundering or fraud. Where legally permitted, we will notify the affected player of any such disclosure.

3.5 Infrastructure & Technology Providers

batjlii's platform is hosted on secure cloud infrastructure. Our hosting, database, and CDN providers may have incidental technical access to data stored on their infrastructure but are contractually prohibited from accessing, reading, or using player data for any purpose. All infrastructure providers are required to maintain data security standards consistent with industry best practice.

batjlii uses cookies and similar tracking technologies (such as local storage tokens and session identifiers) to ensure the platform functions correctly, maintain the security of your session, and improve your overall player experience. This section explains what cookies we use, why we use them, and how you can manage your cookie preferences.

4.1 What Are Cookies?

Cookies are small text files stored on your device by your web browser when you visit a website. They allow the website to remember information about your visit — such as your preferred language, login session status, or game lobby layout — so that you do not have to re-enter it on your next visit. Cookies cannot execute code, deliver viruses, or access files stored elsewhere on your device.

4.2 Categories of Cookies We Use

• Strictly Necessary Cookies: These cookies are essential for the batjlii platform to function. They maintain your authenticated session, prevent cross-site request forgery (CSRF) attacks, and enable core cashier functionality. These cookies cannot be disabled without breaking core platform features.
• Functional Cookies: These cookies remember your account preferences — such as your preferred game category, display settings, and notification preferences — so that your experience is consistent across visits. They are activated based on your account settings choices.
• Analytics Cookies: batjlii uses privacy-respecting analytics tools to understand aggregate player behaviour on the platform — such as which games are most popular and which pages are most visited. Analytics data is processed at an aggregated, anonymised level and is never used to identify individual players.
• Security Cookies: These cookies support our fraud detection systems by recording device fingerprint signals and login consistency indicators. They help us identify suspicious login attempts and protect your account from unauthorised access.

4.3 Managing Your Cookie Preferences

You can manage or delete cookies at any time through your browser settings. Most modern browsers (Chrome, Firefox, Safari, Edge) allow you to block all cookies, allow only first-party cookies, or clear existing cookies from storage. Please note that disabling strictly necessary cookies will prevent you from logging in to your batjlii account. Disabling functional or analytics cookies will not affect your ability to access the platform but may reduce the personalisation of your experience.

batjlii takes the security of your personal and financial data with the utmost seriousness. We employ a multi-layered security architecture that combines technical, organisational, and procedural controls to protect player data against unauthorised access, accidental loss, alteration, or disclosure.

5.1 Technical Security Measures

• TLS/SSL Encryption: All data in transit between your device and batjlii.net is encrypted using Transport Layer Security (TLS 1.2 or higher). The padlock icon in your browser confirms that your connection is secure.
• Encryption at Rest: Sensitive personal data stored in our databases — including identity documents and payment references — is encrypted at rest using AES-256 encryption.
• Password Hashing: Player account passwords are never stored in plain text. They are processed using industry-standard one-way cryptographic hashing algorithms before storage.
• Firewalls & Intrusion Detection: Our infrastructure is protected by enterprise-grade firewalls and continuously monitored intrusion detection systems that alert our security team to anomalous access patterns in real time.
• Two-Factor Authentication: batjlii supports optional two-factor authentication (2FA) on player accounts for an additional layer of login security. We strongly encourage all players to enable 2FA via their account security settings.

5.2 Organisational Security Measures

Access to player data within the batjlii organisation is governed by a strict role-based access control (RBAC) policy. Only personnel with a documented, legitimate operational need are granted access to personal player records. All staff with access to player data are subject to confidentiality obligations and regular data security training. Access logs are maintained and reviewed periodically by our compliance team.

5.3 Data Breach Response

In the event of a data security breach that poses a risk to the rights and freedoms of affected players, batjlii will take immediate containment action, conduct a full root-cause investigation, and notify affected players without undue delay, providing details of what data was involved, what steps have been taken, and what action (if any) affected players should take to protect themselves. We take our incident response obligations seriously and maintain a documented breach response plan reviewed annually by our security team.

batjlii respects your rights over your personal data. The following rights are available to all registered players. To exercise any of these rights, submit a written request to [email protected] with the subject line "Data Rights Request" and include the email address associated with your batjlii account for identity verification purposes. We aim to respond to all data rights requests within 30 calendar days of receipt.

6.1 Right of Access

You have the right to request a copy of all personal data that batjlii holds about you. We will provide this in a structured, commonly used, machine-readable format (such as CSV or JSON) at no charge for standard requests. We may charge a reasonable administrative fee for manifestly excessive or repetitive requests.

6.2 Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update most account details directly in your batjlii account settings. For changes to identity-linked fields (such as legal name or date of birth), you will be required to submit supporting documentation to our KYC team for verification before the change is applied.

6.3 Right to Erasure

You may request that batjlii delete your personal data. This right is subject to legal limitations: we are required by anti-money-laundering regulations to retain certain transaction and identity records for a minimum period after account closure (see Section 7 — Data Retention). Records falling within mandatory retention obligations cannot be deleted until the retention period has elapsed, even upon request. All other data not subject to retention obligations will be deleted promptly upon a verified erasure request.

6.4 Right to Restriction & Objection

You have the right to request that we restrict the processing of your data in certain circumstances — for example, while you contest the accuracy of data we hold, or where processing is no longer necessary but you require data to be retained for a legal claim. You also have the right to object to processing carried out on the basis of legitimate interests, including fraud prevention profiling, where you believe your specific circumstances warrant an override of our legitimate interest assessment.

6.5 Right to Data Portability

Where processing is based on your consent or on contract performance, you have the right to receive your personal data in a portable format and to request that it be transmitted directly to another controller where technically feasible.

batjlii retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, and contractual obligations. Once data is no longer required for any active purpose or mandatory retention period, it is securely deleted or anonymised.

7.1 Retention Periods by Data Category

The following retention periods apply to the main categories of personal data held by batjlii:

• Account registration data (name, email, mobile number, date of birth, address): Retained for the duration of the active account relationship, plus a minimum of 5 years following account closure, in accordance with standard gaming platform compliance requirements.
• KYC identity documents (NID, passport, driving licence copies): Retained for a minimum of 5 years from the date of verification or account closure, whichever is later, in compliance with anti-money-laundering record-keeping obligations.
• Transaction records (deposits, withdrawals, bet logs in BDT): Retained for a minimum of 5 years following the date of each transaction.
• Customer support communications: Retained for 3 years from the date of the most recent communication in a support thread.
• Analytics and technical logs (IP addresses, session logs, device fingerprints): Retained for a maximum of 12 months from the date of collection, after which they are anonymised or deleted.
• Marketing consent records: Retained for 3 years from the date of consent, or until consent is withdrawn, whichever is earlier.

7.2 Post-Retention Deletion

Upon expiry of all applicable retention periods for a given player record, batjlii will securely delete or irreversibly anonymise the data in question. Anonymised data (from which no individual can be identified or re-identified) may be retained indefinitely for statistical and analytical purposes without restriction.

batjlii reserves the right to update or revise this Privacy Policy at any time. When material changes are made — particularly changes that affect how we collect, use, or share your personal data — we will notify registered players via the email address on file at least 14 days before the changes take effect. For minor clarifications or corrections that do not materially affect player rights, we may update the policy without advance notice, updating the "Last Updated" date at the top of this page.

Your continued use of the batjlii platform following the effective date of any revision constitutes your acceptance of the updated Privacy Policy. If you do not accept a material change to this policy, you should discontinue use of the platform and contact [email protected] to initiate account closure before the effective date of the change.

We encourage all players to review this Privacy Policy periodically to stay informed about how batjlii protects your personal data. The most current version of this policy is always available at batjlii.net/privacy-policy.