Privacy Policy — bitjilli

1. Data We Collect

bitjilli collects personal data from players in Bangladesh through several channels: directly when you create and manage an account, indirectly through your use of the platform, and from third-party service providers who assist in identity verification and payment processing. The categories of personal data we collect are described below.

1.1 Registration & Identity Data

When you create a bitjilli account, we collect the personal information required to establish and verify your identity. This includes your full legal name, date of birth, residential address (including city, district, and postcode), email address, and mobile phone number. This data is used to create your account record and to fulfil our Know Your Customer (KYC) obligations.

1.2 Identity Verification Documents

In accordance with standard financial compliance practices, bitjilli may request copies of government-issued photo identification (such as a National Identity Card or passport), proof of residential address (such as a utility bill or bank statement), and proof of payment method ownership. These documents are collected and stored securely and are used solely for identity verification and fraud prevention.

1.3 Financial Data

We collect information about the payment methods you use to transact on bitjilli. For mobile financial services such as bKash, Nagad, Rocket, and Upay, this includes your registered mobile number and transaction reference identifiers. For bank transfers, this includes your account number and bank name. For card payments via Visa or Mastercard, we receive only masked card details (last four digits and expiry date) from our payment processor — we do not store full card numbers on our servers.

1.4 Technical & Usage Data

When you access bitjilli, our servers and analytics systems automatically collect certain technical data. This includes your IP address, device type, operating system, browser type and version, screen resolution, time zone (Bangladesh Standard Time, UTC+6), pages visited, session duration, click paths, and game activity logs. This data is used for platform security, fraud detection, performance optimisation, and to improve the overall user experience.

1.5 Communications Data

If you contact our support team via live chat, email, or any other channel, we retain records of those communications, including the content of your messages and the date and time of contact. This data is used to resolve your query, to improve our support quality, and to maintain an audit trail for compliance purposes.

2. How We Use Your Data

bitjilli processes personal data only where there is a lawful basis for doing so. The primary purposes for which we use your personal data are set out in the table below. Each purpose is matched to the legal basis under which processing occurs.

2.1 Responsible Gaming Monitoring

bitjilli uses player activity data — including deposit frequency, session length, wagering patterns, and game selection — to monitor for signs of problematic gambling behaviour. Where our systems identify patterns of concern, we may proactively contact a player to offer responsible gaming resources, apply temporary account restrictions, or refer the matter to our responsible gaming team. This processing is carried out in the player's genuine interest and is a core part of our duty of care.

2.2 Marketing Communications

We will only send you promotional emails, SMS messages, or in-platform notifications if you have explicitly opted in to receive them during registration or through your account preferences. Every marketing communication includes a clear and easy unsubscribe mechanism. Withdrawing marketing consent does not affect your ability to use the platform or access any feature.

3. Data Sharing & Disclosure

bitjilli does not sell or rent personal data to any third party. We share personal data with third parties only in the specific circumstances described in this section. In all cases, data is shared on a need-to-know basis and under binding contractual obligations that require the recipient to maintain appropriate data protection standards.

3.1 Payment Service Providers

To process deposits and withdrawals, we share the minimum necessary financial and identity data with our payment partners, which include bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, and card processing networks operated by Visa and Mastercard. Each payment partner processes data under their own privacy terms and applicable financial regulations.

3.2 Game Software Providers

Our casino game library is powered by third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers may receive anonymised session identifiers and game event data to facilitate game delivery, RNG certification audits, and jackpot processing. Providers do not receive your full personal profile or payment details.

3.3 Identity Verification Partners

To fulfil our KYC obligations, we may share identity document data with specialised verification service providers. These partners process identity data exclusively for the purpose of verifying your identity and returning a verification result to bitjilli. They are contractually prohibited from retaining or using your data for any other purpose.

3.4 Legal and Regulatory Disclosure

bitjilli may be required to disclose personal data to law enforcement agencies, courts, financial intelligence units, or other public authorities where required by applicable law or in response to a lawful order. We will notify affected players of such disclosures where we are legally permitted to do so.

4. Cookies & Tracking

bitjilli uses cookies and similar tracking technologies to operate the platform correctly, remember your preferences, maintain your session security, and analyse how the platform is used. This section explains the types of cookies we deploy and how you can manage them.

4.1 Essential Cookies

These cookies are strictly necessary for the platform to function. They enable core features such as account login session management, security token validation, language and currency preferences, and game state persistence. Essential cookies cannot be disabled without significantly impairing your ability to use the platform.

4.2 Analytics Cookies

We use analytics cookies to understand how players navigate bitjilli — which pages are visited most, where players drop off, and how performance can be improved. Analytics data is aggregated and anonymised wherever possible. These cookies do not identify you personally but help us build a better product for all users.

4.3 Marketing and Preference Cookies

With your consent, bitjilli may set cookies that remember your promotional preferences and help us deliver relevant offers. These cookies are opt-in and are only activated if you have consented to marketing communications. You may withdraw this consent at any time through your account preferences.

4.4 Managing Cookies

Most modern web browsers allow you to view, manage, and delete cookies through the browser's settings menu. Please note that blocking essential cookies may prevent certain features of bitjilli from working correctly. For guidance on managing cookies in your specific browser, refer to your browser's official help documentation.

5. Data Retention

bitjilli retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and financial compliance obligations. The retention periods set out below represent our standard practice. Where a specific legal requirement mandates a longer retention period, that requirement takes precedence.

• Active account data: Retained for the full duration of your account and for a minimum of 5 years following account closure, in accordance with financial record-keeping requirements.
• Identity verification documents: Retained for a minimum of 5 years from the date of verification, or longer if required by applicable anti-money-laundering regulations.
• Transaction records: Retained for a minimum of 5 years from the date of each transaction to satisfy financial audit requirements.
• Customer support communications: Retained for 2 years from the date of the last interaction, unless the communication relates to an unresolved dispute or legal proceeding.
• Marketing consent records: Retained for the duration of the consent and for 1 year following withdrawal of consent, for audit purposes.
• Technical and usage logs: Retained for up to 12 months in identifiable form. Anonymised aggregated analytics data may be retained indefinitely.

At the expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents reconstruction of the original data. Players who request early erasure of their data will be informed of any legal retention obligations that prevent immediate deletion.

6. Your Privacy Rights

As a player on bitjilli, you hold a number of rights with respect to your personal data. bitjilli is committed to honouring these rights promptly and without undue obstruction. To exercise any of the rights described in this section, please contact our support team in English at support@bitjilli.

6.1 Right of Access

You have the right to request confirmation of whether bitjilli processes personal data about you and, if so, to receive a copy of that data along with information about the purposes for which it is processed, the categories of data involved, and the parties with whom it has been shared.

6.2 Right to Rectification

If any personal data held by bitjilli is inaccurate or incomplete, you have the right to request that it be corrected. We will action rectification requests promptly and will notify any third parties with whom the inaccurate data was shared, where practicable.

6.3 Right to Erasure

In certain circumstances, you have the right to request that bitjilli delete the personal data we hold about you. This right applies where the data is no longer necessary for the purpose it was collected, where you withdraw consent and there is no other lawful basis for processing, or where you object to processing and there are no overriding legitimate grounds. Where a legal retention obligation prevents immediate deletion, we will inform you clearly of the applicable period.

6.4 Right to Restriction of Processing

You may request that bitjilli restrict the processing of your personal data in circumstances where the accuracy of the data is contested, where processing is unlawful but you do not wish the data to be erased, or where you have objected to processing pending verification of whether legitimate grounds override your objection.

6.5 Right to Object to Marketing

You have an absolute right to object to the processing of your personal data for direct marketing purposes at any time. Upon receipt of such an objection, bitjilli will cease all marketing processing without requiring you to provide a reason for the objection.

7. Data Security

bitjilli implements a comprehensive set of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, and misuse. Our security framework includes the following controls:

• Transport encryption: All data in transit between your device and our servers is encrypted using TLS 1.2 or higher. HTTPS is enforced across the entire bitjilli platform.
• Data at rest encryption: Sensitive personal data stored on our servers is encrypted at rest using AES-256 encryption standards.
• Access controls: Access to personal data is restricted to staff and contractors who have a genuine operational need. All access is authenticated, logged, and subject to regular review.
• Intrusion detection: Our infrastructure is monitored continuously for suspicious activity. Automated alerts are triggered by anomalous access patterns or potential breach indicators.
• Penetration testing: bitjilli conducts regular security assessments and vulnerability testing to identify and remediate potential weaknesses in our systems.
• Staff training: All staff with access to personal data receive data protection and security awareness training as part of their onboarding and on an ongoing basis.

7.1 Data Breach Response

In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of affected players, bitjilli will notify affected individuals without undue delay. Notifications will be delivered in English to the email address registered on your account and will describe the nature of the breach, the data affected, the likely consequences, and the steps taken to mitigate those consequences.

8. Policy Updates & Contact

8.1 Changes to This Policy

bitjilli reserves the right to update this Privacy Policy at any time. When we make material changes to this document, we will update the effective date shown at the top of the page and, where appropriate, notify registered players by email. Continued use of the platform following the publication of an updated Privacy Policy constitutes acceptance of the revised terms. We recommend reviewing this page periodically to stay informed of how we protect your personal data.

8.2 Contact Our Privacy Team

If you have any questions, concerns, or requests relating to this Privacy Policy or the way bitjilli handles your personal data, please contact our privacy team in English. Our support team is available 24 hours a day, 7 days a week, and will direct your query to the appropriate person.

Privacy enquiries: support@bitjilli — please include "Privacy Request" in your message subject line so that your enquiry is routed promptly.