batjile Privacy Policy

This Privacy Policy applies to all personal data collected, processed, and stored by batjile ("we", "us", "our", "the Platform") in connection with the operation of the batjile website and any associated mobile-optimised interfaces. batjile acts as the data controller for all personal information collected from players and visitors who access the Platform from Bangladesh and any other permitted jurisdiction.

This Policy applies to:

• All registered account holders on batjile, regardless of whether the account is currently active, dormant, or suspended
• All visitors to the batjile website, including those who browse without creating an account
• All individuals who contact batjile via email, live chat, or any other supported communication channel
• All individuals who interact with batjile promotional materials distributed through third-party affiliate channels

This Policy does not apply to third-party websites, platforms, or services that may be linked to or integrated with batjile. Each of those third parties operates its own privacy policy, and batjile accepts no responsibility for the data practices of any external platform. Players are encouraged to read the privacy documentation of any third-party service they use in connection with their batjile activity, including payment providers such as bKash, Nagad, and Rocket.

By creating an account or continuing to use the batjile Platform, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection and processing of your personal data as described herein. If you do not consent, you should not register an account and should cease using the Platform immediately.

batjile collects personal data through several channels: directly from players during registration and account use, automatically through technical systems as you navigate the Platform, and from third-party sources such as payment processors and fraud-prevention partners. The categories of personal data we collect are described below.

Data you provide directly

• Registration data: full legal name, date of birth, residential address (including city — Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, or Cox's Bazar), email address, and mobile phone number
• Identity verification (KYC) data: copies of government-issued identity documents such as your National Identity Card (NID) or passport, proof of address documents, and payment method confirmation
• Financial data: deposit and withdrawal transaction records, payment method identifiers (mobile wallet numbers for bKash/Nagad/Rocket/Upay, masked card numbers for Visa/Mastercard), and transaction history within the Platform
• Communication data: the content of messages sent to the batjile support team via live chat or email, including enquiries, complaints, and responsible gaming self-disclosures
• Preferences and settings: language preferences, communication opt-in/opt-out choices, responsible gaming limit settings, and account notification preferences

Data collected automatically

• Device and browser data: IP address, device type, operating system, browser version, and screen resolution
• Usage data: pages visited, time spent on each page, games launched, bet amounts placed, session start and end times, and navigation paths through the Platform
• Cookie data: session identifiers, authentication tokens, and preference cookies as described in Section 5 of this Policy
• Geolocation data: approximate geographic location derived from your IP address, used for eligibility verification and fraud prevention

batjile processes personal data only for specific, documented purposes. We do not process personal data in a manner that is incompatible with the purposes stated at the time of collection. The primary purposes for which we process your personal data are:

• Account management: creating and maintaining your player account, verifying your identity at registration and during ongoing KYC checks, and managing your account settings and preferences
• Transaction processing: processing deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, and Mastercard; maintaining an accurate transaction history; and issuing receipts or statements upon request
• Fraud prevention and security: detecting and preventing fraudulent activity, money laundering, multiple account creation, and bonus abuse; verifying that all players meet the age and eligibility requirements described in the Terms & Conditions
• Regulatory compliance: fulfilling obligations under applicable international gaming regulations, including anti-money laundering (AML) and know your customer (KYC) requirements
• Responsible gaming monitoring: identifying behavioural patterns that may indicate problem gambling, applying player-requested limits and exclusions, and proactively reaching out to players who may benefit from responsible gaming support
• Platform improvement: analysing aggregated and anonymised usage data to improve the performance, content, and user experience of the batjile Platform
• Customer support: responding to enquiries, resolving disputes, and maintaining a record of support interactions for quality assurance purposes
• Marketing communications (with consent only): sending promotional emails, SMS notifications, and in-platform messages about bonuses, new games, and seasonal promotions — only where you have explicitly opted in to receive such communications

batjile does not sell, rent, or trade your personal data to any third party for commercial purposes. We share personal data with external parties only where it is strictly necessary to operate the Platform, comply with legal obligations, or protect the Platform and its players from harm. The categories of third parties with whom we may share data are set out below.

• Payment processors: bKash, Nagad, Rocket, Upay, Visa, Mastercard, and partnered local banks (Dutch-Bangla Bank, City Bank, BRAC Bank) receive the minimum transaction data required to process your deposit or withdrawal. Each payment partner operates under its own privacy policy and data protection obligations
• Game providers and technology partners: licensed game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi receive anonymised session identifiers necessary for game delivery and fair-play verification. These providers do not receive your name, payment details, or contact information
• Identity verification services: specialist KYC verification providers may process copies of identity documents on behalf of batjile as part of the account verification process. All such providers are bound by strict data processing agreements
• Fraud prevention and security services: third-party fraud detection platforms may receive technical data (IP addresses, device fingerprints, behavioural signals) to assist in identifying suspicious account activity
• Regulatory and legal authorities: batjile may disclose personal data to law enforcement agencies, regulatory bodies, or courts of competent jurisdiction where required by applicable law or where necessary to protect the rights and safety of the Platform or its players
• Analytics providers: anonymised and aggregated usage data may be shared with analytics platforms to help batjile understand Platform performance. No individually identifiable data is shared for analytics purposes

All third-party data processors engaged by batjile are required to handle personal data in accordance with applicable data protection standards and are prohibited from using player data for any purpose beyond the specific service they provide to batjile. batjile remains responsible for ensuring that third-party processors meet their data protection obligations.

batjile uses cookies and similar tracking technologies to enable core Platform functionality, maintain your logged-in session, remember your preferences, and collect anonymised analytics data. This section explains the types of cookies we use and how they operate.

Types of cookies used on batjile

batjile does not use third-party advertising cookies, retargeting pixels, or social media tracking scripts on any page of the Platform. The cookie set on batjile is limited to the categories described in the table above.

You may manage cookie preferences through your browser settings. Most modern browsers allow you to view, block, or delete cookies on a per-site basis. Note that disabling strictly necessary cookies will prevent you from logging in to your batjile account and using the Platform's core features. Disabling functional or analytics cookies will not affect your ability to play games or make transactions but may result in some preferences not being remembered between sessions.

batjile retains personal data only for as long as it is necessary to fulfil the purposes for which it was collected, or as required by applicable legal, regulatory, or contractual obligations. The following retention periods apply to the main categories of personal data held by batjile:

• Account and identity data: retained for the duration of your active account, plus a minimum of 5 years after account closure to comply with anti-money laundering record-keeping requirements
• Transaction records: all deposit, withdrawal, and wagering records are retained for a minimum of 5 years from the date of each transaction, in accordance with financial record-keeping obligations
• KYC verification documents: copies of identity documents submitted for KYC verification are retained for the duration of the account plus 5 years after closure, or longer if required by applicable regulations
• Support communication records: live chat transcripts and email correspondence are retained for 3 years from the date of the interaction, to support dispute resolution and quality assurance
• Analytics and usage data: anonymised and aggregated analytics data may be retained indefinitely as it contains no personally identifiable information; raw session logs containing IP addresses are deleted after 12 months
• Marketing consent records: records of your opt-in or opt-out choices for marketing communications are retained for the lifetime of the account plus 3 years, to demonstrate compliance with consent requirements

When personal data is no longer required for its original purpose and no legal obligation mandates its continued retention, batjile will securely delete or anonymise the data. Secure deletion means that data is overwritten or destroyed in a manner that renders recovery impossible. For paper documents, secure physical destruction is used.

Players who request account closure may also request the deletion of personal data held beyond the legally mandated retention period. Such requests will be assessed on a case-by-case basis, and batjile will confirm in writing which data has been deleted and which data must be retained to comply with applicable legal obligations.

As a player on batjile, you hold a number of rights in relation to your personal data. batjile is committed to respecting and facilitating these rights in a timely and transparent manner. The following rights are available to all registered account holders:

• Right of access: you have the right to request a copy of the personal data that batjile holds about you. This is commonly referred to as a Subject Access Request (SAR). batjile will respond to a SAR within 30 days of receipt, providing a structured summary of all personal data held in connection with your account
• Right to rectification: if any personal data held by batjile is inaccurate or incomplete, you have the right to request that it be corrected. You may update many details directly through the account settings panel; for changes to identity documents or critical account information, please contact the support team
• Right to erasure ("right to be forgotten"): you may request the deletion of personal data that is no longer necessary for the purposes for which it was collected. batjile will honour deletion requests where no overriding legal obligation requires continued retention. Note that transaction records and KYC data must be retained for the periods described in Section 6 regardless of a deletion request
• Right to restriction of processing: in certain circumstances, you may request that batjile restrict the processing of your personal data (for example, while a dispute about data accuracy is being resolved)
• Right to data portability: you may request a copy of the personal data you have provided to batjile in a structured, commonly used, machine-readable format (such as CSV or JSON), for the purpose of transferring it to another service provider
• Right to object: you have the right to object to the processing of your personal data for direct marketing purposes at any time, with immediate effect. You may also object to processing based on legitimate interests, though batjile may be able to demonstrate compelling grounds that override your objection in specific circumstances
• Right to withdraw consent: where processing is based on your consent (for example, marketing communications), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that occurred before the withdrawal

To exercise any of these rights, submit a written request in English to support@batjile. Please include your registered account username and a brief description of the right you wish to exercise. For access and portability requests, identity verification may be required before data is released.

Protecting the personal data of Bangladesh players is a primary operational responsibility at batjile. We have implemented a layered security architecture that combines technical controls, procedural safeguards, and ongoing monitoring to reduce the risk of unauthorised access, accidental loss, or unlawful destruction of personal data.

The key technical security measures currently in place include:

• Transport layer security (TLS 1.3): all data in transit between your browser or device and batjile servers is encrypted using TLS 1.3, the current industry standard for secure web communication
• Password hashing: account passwords are stored using bcrypt hashing with a per-account salt. Plaintext passwords are never stored and cannot be retrieved — not even by batjile staff
• Access controls: internal access to player personal data is restricted on a strict need-to-know basis. Staff members are granted the minimum level of data access required to perform their specific role, and all access is logged for audit purposes
• Two-factor authentication (2FA): all internal staff accounts that can access player data require 2FA. Players are also encouraged to enable 2FA on their batjile accounts for enhanced login security
• Intrusion detection and monitoring: automated systems continuously monitor Platform infrastructure for signs of unauthorised access, unusual traffic patterns, and potential security incidents. Alerts are escalated to the security team in real time
• Regular security assessments: batjile conducts regular internal security reviews and engages external specialists to perform periodic penetration testing of the Platform's infrastructure and web application layer

In the unlikely event of a personal data breach that poses a risk to the rights and freedoms of affected players, batjile will notify affected individuals as promptly as possible and take all reasonable steps to contain and remediate the breach. Notification will be provided via the registered email address on the affected account.

Players also have a role in keeping their account secure. We strongly recommend enabling two-factor authentication, using a unique and complex password for your batjile account, logging out after each session on shared devices, and never sharing your login credentials with any other person. If you believe your account has been accessed without your authorisation, contact the support team immediately at support@batjile.