bj44 Privacy Policy — How We Protect Your Data

bj44 ("bj44", "we", "us", "our") operates the online casino and sports betting platform available at https://bj44.onl. We are committed to protecting the privacy and personal data of every individual who interacts with our platform, whether as a registered player based in Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, Cox's Bazar, or anywhere else in Bangladesh.

This Privacy Policy ("Policy") sets out the categories of personal data bj44 collects, the purposes for which that data is processed, the parties with whom it may be shared, the period for which it is retained, and the rights you hold as a data subject. This Policy is effective as of 1 January 2026 and supersedes all prior privacy notices published by bj44.

By registering an account on bj44, depositing funds, placing bets, or otherwise using the bj44 platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you must cease using the bj44 platform and may request closure of your account by contacting us at [email protected].

This Policy should be read alongside bj44's Terms & Conditions and Responsible Gaming Policy, both of which contain additional provisions relevant to your use of the platform and your rights as a player.

bj44 collects personal data through several channels: directly from you when you register an account or contact support, automatically when you browse or use the platform, and from third-party identity verification and payment processing partners. The categories of data we collect are described in the table below.

bj44 does not collect sensitive categories of personal data such as racial or ethnic origin, political opinions, religious beliefs, biometric data, or health information, except where a player voluntarily discloses such information in the context of a responsible gaming self-exclusion or support request.

bj44 processes personal data for the following clearly defined purposes. Each purpose is supported by an identified legal basis, described in Section 4 below.

• Account creation and management: To create, maintain, and administer your bj44 account, including verifying your identity and eligibility to use the platform (21+ age verification and KYC compliance).
• Service delivery: To provide access to casino games, sports betting markets, live dealer tables, slots, and all other features of the bj44 platform.
• Financial transactions: To process deposits via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, Visa, Mastercard, and other accepted payment methods, and to process withdrawal requests accurately and securely.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, money laundering, account takeovers, and any other prohibited conduct on the bj44 platform.
• Regulatory compliance: To meet obligations imposed by applicable anti-money-laundering regulations and other legal requirements, including record-keeping obligations.
• Customer support: To respond to your enquiries, complaints, and requests submitted via email or other support channels, and to maintain a record of those communications for quality assurance.
• Responsible gaming: To monitor gameplay patterns for indicators of problem gambling behaviour and to administer self-exclusion, deposit limit, and time-out arrangements requested by players.
• Marketing communications (with consent): To send promotional emails, SMS messages, or platform notifications about bonuses, new games, seasonal offers related to BPL, IPL, Eid, Pohela Boishakh, and other relevant promotions — but only where you have explicitly opted in to receive such communications.
• Platform improvement: To analyse aggregated, anonymised usage data to improve the bj44 platform, optimise game selection, and enhance the overall user experience.

bj44 does not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects, except for automated fraud scoring during deposit and withdrawal processing, which is subject to human review where a flag is raised.

Each processing activity carried out by bj44 is supported by one or more of the following legal bases:

• Contractual necessity: Processing required to perform the contract between bj44 and the account holder — including account administration, game access, and payment processing — is conducted on the basis that it is necessary to deliver the service you have contracted for.
• Legal obligation: Processing required to comply with applicable laws, including anti-money-laundering record-keeping requirements and age verification obligations, is conducted on the basis of legal compliance.
• Legitimate interests: Processing for fraud prevention, platform security, internal analytics, and responsible gaming monitoring is conducted on the basis of bj44's legitimate interest in operating a safe, secure, and sustainable platform, where those interests are not overridden by your fundamental rights.
• Consent: Processing for marketing communications is conducted only where you have given explicit, informed consent. You may withdraw your consent at any time by updating your account preferences or contacting [email protected]. Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.

bj44 may share your personal data with the following categories of third parties in the circumstances described:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard receive the minimum financial data necessary to process deposits and withdrawals on your behalf.
• Identity verification providers: Third-party KYC and AML compliance partners may receive copies of your identity documents and personal details for the purpose of verifying your identity and screening against sanctions lists.
• Game software providers: Licensed game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and similar providers may receive pseudonymised session and transaction data necessary to deliver their games and resolve any technical disputes.
• IT and infrastructure providers: Cloud hosting and content delivery providers that support the operation of the bj44 platform may process technical and transaction data as part of their service delivery, subject to binding confidentiality and data security obligations.
• Fraud and security services: Anti-fraud and cybersecurity vendors may receive technical data (such as IP addresses and device fingerprints) to assist in detecting and preventing fraudulent activity.
• Law enforcement and regulators: bj44 may disclose personal data to law enforcement authorities, regulatory bodies, or courts where required to do so by law, or where disclosure is necessary to protect the rights, property, or safety of bj44, its players, or the public.

All third-party service providers engaged by bj44 are required to process personal data only for the specific purposes for which it is shared, to maintain appropriate technical and organisational security measures, and to delete or return data when the purpose for sharing has been fulfilled.

bj44 uses cookies and similar tracking technologies to operate the platform effectively, remember your preferences, maintain your authenticated session, and gather anonymised analytics data to improve the service. The following categories of cookies are used:

• Strictly necessary cookies: These cookies are essential for the bj44 platform to function. They enable core features such as secure login sessions, game loading, and deposit processing. The platform cannot operate correctly without them, and they cannot be disabled.
• Functional cookies: These cookies remember your preferences such as your preferred deposit method, game display settings, and language selection, so you do not need to reconfigure them on each visit.
• Analytics cookies: bj44 uses anonymised analytics data to understand how players navigate the platform, which games are most popular, and where usability improvements can be made. This data is aggregated and does not identify individual users.
• Security cookies: Short-lived security tokens are used to detect and prevent fraudulent sessions, bot activity, and account takeover attempts.

You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will prevent core platform functionality from operating correctly. Disabling functional cookies will result in your preferences not being saved between sessions.

bj44 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law. The following retention periods apply as a general guide:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with an identified individual. Anonymised, aggregated data may be retained indefinitely for statistical and analytical purposes.

bj44 implements a layered approach to data security designed to protect personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. Our security measures include, but are not limited to:

• Encryption in transit: All data transmitted between your device and the bj44 platform is protected by TLS 1.2 or higher, ensuring that your personal and financial information cannot be intercepted during transmission.
• Encryption at rest: Sensitive personal data stored on bj44's servers is encrypted using AES-256 encryption. Passwords are hashed using a strong one-way cryptographic algorithm and are never stored in plain text.
• Access controls: Access to personally identifiable information is restricted to authorised personnel whose job functions specifically require it. Role-based access controls and multi-factor authentication are enforced for all internal systems that process personal data.
• Penetration testing: bj44 conducts regular security assessments and penetration tests to identify and remediate vulnerabilities before they can be exploited.
• Incident response: bj44 maintains a documented data breach response plan. In the event of a security incident that poses a risk to your rights and freedoms, we will notify affected account holders without undue delay.

While bj44 takes all reasonable technical and organisational measures to protect your data, no internet-based platform can guarantee absolute security. You are also responsible for maintaining the security of your own account credentials and for logging out of the bj44 platform after each session, particularly when using a shared or public device.

As a data subject, you hold the following rights in respect of your personal data held by bj44. To exercise any of these rights, please contact us in writing at [email protected] with the subject line "Data Rights Request". bj44 will respond within a reasonable timeframe and in any event within 30 days of receiving a valid request.

Please note that certain rights are subject to conditions and exceptions. For example, bj44 may be unable to erase data that it is legally required to retain for anti-money-laundering compliance purposes. Where a right cannot be exercised in full, bj44 will explain the reason clearly and advise on any available alternatives.

bj44 operates a strict 21+ age policy. Age verification is a mandatory step in the account registration and KYC process. If bj44 discovers or has reasonable grounds to believe that an account is held by a person under 21 years of age, the account will be suspended immediately, access to all funds will be frozen pending investigation, and any bonus amounts credited to the account will be forfeited.

Any personal data collected from an individual who is subsequently found to be under 21 years of age will be deleted promptly following account closure, subject only to any minimum retention periods required by applicable law. Genuine deposits made by the underage account holder will be returned to the original payment source after the investigation is concluded.

If you are a parent or guardian and believe that a minor in your care has registered an account on bj44, please contact us immediately at [email protected]. We will treat such reports as a high priority and respond without delay.

The bj44 platform may contain references to or integrations with third-party services, including licensed game studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. While these providers operate within the bj44 platform environment under contractual data security obligations, they maintain their own privacy practices in respect of data processed within their proprietary game engines.

bj44 is not responsible for the privacy practices of third-party service providers operating within or alongside the bj44 platform. We recommend reviewing the privacy policies of any third-party providers whose services you use in connection with the bj44 platform. bj44 does not endorse and is not responsible for the content, products, services, or privacy practices of any external websites that may be referenced in our communications.

bj44 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the services we offer. When material changes are made, bj44 will provide notice to registered account holders via the email address associated with their account and will post a prominent update notice on the bj44 platform.

The effective date displayed at the top of this page will be updated each time the Policy is revised. Where changes are significant, bj44 will provide a summary of the key changes alongside the full updated Policy text. Your continued use of the bj44 platform following the publication of an amended Policy constitutes your acceptance of the changes. If you do not agree with any amendment, you must cease using the platform and may request account closure by contacting [email protected].

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way bj44 processes your personal data, please contact us in writing. All privacy-related correspondence should be addressed to the bj44 Data Protection team to ensure it is directed to the appropriate personnel.

Support email: [email protected]

Subject line for data rights requests: "Data Rights Request — [Your Full Name]"

Subject line for privacy queries: "Privacy Policy Query"

Support availability: 24 hours a day, 7 days a week, including Bangladesh public holidays. Bangladesh Standard Time (BST, UTC+6).

bj44 aims to acknowledge all privacy-related correspondence within two (2) business days and to provide a substantive response within thirty (30) days of receipt. Where a request is complex or involves a large volume of data, we will notify you within the initial 30-day period if an extension of up to a further 30 days is required.