bitjil Privacy Policy

01 Introduction

bitjil ("bitjil", "we", "us", "our") is committed to protecting the personal information of every player who accesses or registers on the bitjil platform at bitjil.net. This Privacy Policy describes our practices with respect to the collection, processing, storage, disclosure, and protection of personal data provided by users ("you", "Player", "User") in the course of using our online casino and sports betting services.

This Privacy Policy should be read together with the bitjil Terms & Conditions, which govern the contractual relationship between you and bitjil. By creating an account on the bitjil platform or by continuing to use it after this policy has been published or updated, you acknowledge that you have read and understood how your personal data will be handled as described herein.

02 Data Controller

bitjil operates as the data controller responsible for the personal data collected through the platform. As data controller, bitjil determines the purposes for which personal data is processed and the means by which that processing is carried out. All data protection inquiries, access requests, and erasure requests should be directed to the bitjil data protection contact listed in Section 14 of this policy.

bitjil operates as an internationally managed online gaming platform serving players in Bangladesh and other markets where access to online gambling is not expressly prohibited by local law. The platform is operated in compliance with internationally recognised data handling standards, and all server infrastructure is protected by enterprise-grade security protocols.

03 Data We Collect

bitjil collects only the personal data that is necessary to provide its services, comply with applicable legal obligations, and maintain the security and integrity of the platform. The categories of personal data we collect include the following:

3.1 Identity Data

• Full legal name as it appears on a government-issued identification document
• Date of birth (used for mandatory age verification — players must be 18 or older)
• Nationality and country of residence
• Copy of government-issued photo ID (national identity card or passport) submitted during KYC verification

3.2 Contact Data

• Email address (primary means of account communication)
• Mobile phone number (used for account security and transaction alerts)
• Residential address (collected during enhanced KYC checks)

3.3 Financial Data

• Mobile financial service account details (bKash, Nagad, Rocket, Upay wallet numbers)
• Bank card details where card payments are used (Visa, Mastercard) — card data is tokenised and not stored in plain text on bitjil servers
• Bank account details where bank transfer is the selected withdrawal method
• Transaction history: deposit amounts, withdrawal requests, bonus credits, and wager records

3.4 Technical Data

• IP address at time of registration and each subsequent login
• Device type, operating system, and browser version
• Geolocation data derived from IP address (not precise GPS location)
• Session timestamps, login and logout records
• Cookie identifiers and similar tracking technology data (see Section 10)

3.5 Behavioural Data

• Game history: games played, stakes placed, outcomes, and session duration
• Sports betting selections and betting market activity
• Responsible gaming interactions: deposit limit settings, self-exclusion requests, cooling-off activations
• Bonus and promotion redemption history
• Customer support interaction records including live chat transcripts and email threads

04 How Data Is Collected

bitjil collects personal data through the following channels:

• Direct submission: Information you provide when completing account registration, KYC verification, depositing funds, or contacting our support team.
• Automated collection: Technical data collected automatically through server logs, cookies, and session-tracking technology when you access or navigate the bitjil platform.
• Payment providers: Transaction confirmation data passed to bitjil by bKash, Nagad, Rocket, Upay, and card payment processors when you initiate a deposit or withdrawal.
• Third-party identity verification services: During enhanced KYC procedures, bitjil may use a third-party identity verification provider to cross-check document authenticity and confirm the accuracy of the details you have submitted.
• Fraud detection partners: Aggregated risk signals provided by anti-fraud and responsible gaming technology partners to help identify irregular account behaviour.

05 Purposes of Processing

bitjil processes personal data for the following specific and legitimate purposes:

06 Legal Basis for Processing

bitjil processes your personal data on the following legal bases, each applied to the relevant processing purpose:

• Contractual necessity: Processing required to fulfill the contract formed when you register an account and accept the Terms & Conditions — including account management, payment processing, and game provision.
• Legal obligation: Processing required to comply with applicable legal duties, including anti-money laundering regulations, age verification obligations, and responding to lawful requests from competent authorities.
• Legitimate interests: Processing carried out for fraud prevention, platform security, responsible gaming monitoring, and internal analytics — provided that these interests are not overridden by your fundamental rights and freedoms.
• Consent: Where you have provided explicit consent — for example, when opting in to receive promotional emails or SMS notifications — bitjil processes your contact data for direct marketing purposes. You may withdraw consent at any time by contacting support.

07 Data Sharing & Third Parties

bitjil does not sell, rent, or trade your personal data to any unaffiliated third party for marketing or commercial purposes. Personal data is shared only in the following limited circumstances:

7.1 Payment Processors

Deposit and withdrawal transactions require the sharing of necessary financial identifiers with the relevant payment provider (bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, BRAC Bank). bitjil shares only the minimum information required to complete the transaction. Payment providers operate under their own privacy policies and security standards.

7.2 Identity Verification Providers

During KYC procedures, bitjil may transmit document images and personal details to a contracted third-party identity verification service. These providers are bound by data processing agreements that restrict their use of your data solely to the purpose of verification on behalf of bitjil.

7.3 Game Software Providers

Games available on the bitjil platform are provided by third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. When you play a live dealer or RNG game, limited session data (such as a pseudonymous player token) may be passed to the game provider to manage the game session. These providers do not receive your full personal profile.

7.4 Legal and Regulatory Disclosure

bitjil may disclose personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by law, legal process, or in order to protect the rights, property, or safety of bitjil, its players, or third parties. Such disclosures will be limited to what is strictly necessary and proportionate.

7.5 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of substantially all of bitjil's assets, personal data held by bitjil may be transferred to the acquiring entity. Players will be notified by email if such a transfer materially affects how their data is processed.

08 Data Retention

bitjil retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable legal obligations. The following general retention periods apply:

• Active account data: Retained for the full duration of your account relationship with bitjil and for a period of five (5) years following account closure, to comply with anti-money laundering and audit requirements.
• Transaction records: Retained for a minimum of five (5) years from the date of the transaction, in accordance with financial record-keeping obligations.
• KYC documents: Retained for five (5) years from the date of submission or from the date of account closure, whichever is later.
• Support correspondence: Retained for three (3) years from the date of the last interaction, to enable resolution of any follow-up disputes or regulatory inquiries.
• Marketing consent records: Retained until consent is withdrawn and for one (1) year thereafter, as evidence of the consent having been freely given.
• Technical and behavioural logs: Typically retained for thirteen (13) months in rolling form for security analysis and platform improvement purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to an identifiable individual.

09 Security Measures

bitjil implements a layered set of technical and organisational security measures designed to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. Key measures include:

• 256-bit SSL/TLS encryption on all data transmitted between player devices and bitjil servers, ensuring that no data is intercepted in transit.
• Tokenisation of financial data: Card payment details are processed through PCI-DSS compliant tokenisation — raw card numbers are never stored on bitjil infrastructure.
• Access controls: Internal access to personal data is restricted to authorised personnel on a strict need-to-know basis. Access is logged and audited.
• Password hashing: Account passwords are stored using a modern, one-way cryptographic hashing algorithm. bitjil staff cannot retrieve plain-text passwords.
• Intrusion detection: The platform is continuously monitored for anomalous access patterns, brute-force attempts, and other security threats.
• Regular security assessments: bitjil conducts periodic internal security reviews and engages independent security professionals to assess the robustness of the platform's data protection posture.

Notwithstanding these measures, no internet-based system can guarantee absolute security. Players are encouraged to use a strong, unique password for their bitjil account and to report any suspected unauthorised access immediately to [email protected].

10 Cookies & Tracking Technologies

The bitjil platform uses cookies and similar technologies to deliver a functional, personalised, and secure user experience. A cookie is a small text file placed on your device by a web server. Cookies used by bitjil fall into the following categories:

bitjil does not use third-party advertising cookies or cross-site tracking cookies for the purpose of serving targeted advertisements on external websites. You may manage cookie preferences through your browser settings; however, disabling strictly necessary cookies will prevent you from logging in or using core platform features.

11 Your Data Rights

Subject to applicable law, you have the following rights in relation to the personal data bitjil holds about you. To exercise any of these rights, contact us at [email protected] with the subject line "Data Rights Request". bitjil will respond within 30 days of receiving a verified request.