Privacy Policy — batjali

1 Data We Collect

batjali collects personal data that is necessary to provide you with a safe, compliant, and functional online gaming experience. We collect data through three primary channels: information you provide directly during registration and account management; information generated automatically by your use of the platform; and information we receive from trusted third-party partners and payment providers.

1.1 Registration and Account Data

When you create a batjali account, we collect the following categories of information:

• Full legal name as it appears on your official identity document.
• Date of birth, used to verify that you are aged 18 or above.
• Email address, used for account communications and notifications.
• Username and hashed password (passwords are never stored in plain text).
• Mobile phone number, where provided for two-factor authentication purposes.
• Residential address, collected as part of the Know Your Customer (KYC) verification process .

1.2 Identity Verification (KYC) Documents

To comply with anti-money laundering (AML) standards and to protect players from identity fraud, batjali may request copies of the following documents during the verification process:

• National Identity Card (NID) — the primary accepted document for Bangladesh players.
• Valid passport or driver's licence, where NID is not available.
• Proof of address — a recent utility bill, bank statement, or official correspondence dated within the last three months.
• Proof of payment method — a screenshot or statement showing that the bKash, Nagad, Rocket, or bank account used for deposits belongs to the registered player.

KYC documents are stored on secure, access-controlled servers. They are used solely for the purposes of identity verification and fraud prevention, and are not shared with third parties except as required by law or as described in Section 3 of this policy.

1.3 Financial and Transaction Data

batjali records all financial transactions carried out on the platform, including but not limited to: deposit amounts and timestamps, withdrawal requests and processing status, bonus allocations and wagering activity, and game round results where these involve a financial stake. This data is retained to support dispute resolution, regulatory compliance, and responsible gaming monitoring.

1.4 Technical and Usage Data

When you access batjali, we automatically collect certain technical data from your device and browser. This includes your IP address and approximate geographic location, browser type and version, operating system, device type (desktop, mobile, or tablet), session duration and pages visited, and referring URL where applicable. This data is used for platform security, fraud detection, and aggregated analytics to improve service quality.

Data Category	Examples	Primary Purpose
Registration Data	Name, email, date of birth, address	Account creation and KYC compliance
Identity Documents	NID scan, proof of address	Age and identity verification
Financial Data	bKash number, deposit history, withdrawal records	Payment processing and AML compliance
Technical Data	IP address, browser, device type	Security, fraud detection, analytics
Behavioural Data	Pages visited, session length, game history	Platform improvement and responsible gaming
Communications Data	Support chat transcripts, email exchanges	Customer service and dispute resolution

2 How We Use Your Data

batjali processes your personal data only where we have a lawful basis for doing so. The principal lawful bases we rely upon are: fulfilment of a contract (providing you with the services you have signed up for), compliance with a legal obligation (KYC, AML, and age verification requirements), legitimate business interests (fraud prevention, platform security, and service improvement), and, in limited cases, your explicit consent (for example, for optional marketing communications).

2.1 Service Delivery

We use your account data to create and maintain your batjali player account, process deposits and withdrawals via your preferred payment method (bKash, Nagad, Rocket, Upay, or bank transfer), display your current balance and transaction history, and award bonuses and promotional credits in accordance with the applicable promotion terms.

2.2 Identity and Age Verification

batjali is a platform reserved exclusively for players aged 18 and above. 18+ We are obligated to verify the age and identity of all players before processing withdrawals and, in some cases, before allowing continued gameplay. Your KYC documents are processed solely for this purpose and are not used in any commercial context.

2.3 Fraud Prevention and Platform Security

We analyse transaction patterns, login behaviour, and device fingerprints to detect and prevent fraud, bonus abuse, money laundering, and unauthorised account access. Where suspicious activity is identified, we may temporarily restrict account access pending investigation. This processing is carried out under our legitimate interest in maintaining a secure and fair platform for all players.

2.4 Responsible Gaming Monitoring

batjali monitors player behaviour — including deposit frequency, session duration, and loss patterns — to identify signs of potentially harmful gambling behaviour. Where such indicators are detected, our responsible gaming team may reach out to offer support or to enforce deposit and session limits. This processing is conducted in your interest as a player and in fulfilment of our duty of care obligations.

2.5 Customer Support

When you contact batjali via live chat or email, we record the content of your communications to enable our support team to assist you effectively and to maintain a log for quality assurance and dispute resolution purposes. Support transcripts are retained for a minimum of two years from the date of the interaction.

2.6 Marketing Communications

With your explicit consent, batjali may send you promotional emails or in-platform notifications about new games, seasonal promotions (such as BPL and IPL betting specials, Eid and Pohela Boishakh offers), and exclusive bonus offers. You may withdraw your consent to marketing communications at any time by updating your notification preferences in your account settings or by contacting support at support@batjali. Withdrawal of marketing consent does not affect the lawfulness of processing carried out prior to withdrawal.

3 Data Sharing & Third Parties

batjali does not sell, rent, or trade your personal data to any third party for commercial or marketing purposes. We share your data only in the limited circumstances described below, and only to the extent necessary for the specified purpose.

3.1 Payment Processors

To process your deposits and withdrawals, batjali shares the minimum necessary financial data with payment service providers including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard. Each of these providers operates under its own privacy and data security policies. batjali is not responsible for the data handling practices of third-party payment processors once data has been transmitted to them for the purpose of executing a transaction.

3.2 Game Providers

batjali integrates games supplied by third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. To enable game session tracking and fair-play auditing, your player identifier and game activity data may be transmitted to the relevant game provider's systems. No name, contact detail, or payment information is shared with game providers.

3.3 KYC and Identity Verification Partners

batjali may engage trusted third-party identity verification services to assist with the processing of KYC documents. Any such partner is contractually bound to process your documents solely for the purpose of identity verification and to delete them once verification is complete or the engagement is terminated.

3.4 Legal and Regulatory Disclosure

batjali may disclose your personal data to law enforcement agencies, regulatory bodies, or courts where required to do so by applicable law, by a valid legal order, or where disclosure is necessary to protect the rights, property, or safety of batjali, its players, or the public. We will notify affected players of such disclosures where permitted to do so by law.

4 Cookies & Tracking

batjali uses cookies and similar tracking technologies to operate core platform functions, remember your preferences, and analyse aggregate usage patterns. A cookie is a small text file placed on your device by your web browser when you visit the platform. Cookies do not contain executable code and cannot carry viruses.

4.1 Types of Cookies We Use

Cookie Type	Purpose	Can Be Disabled?
Strictly Necessary	Maintain your login session, protect against CSRF attacks, load balance traffic	No — required for the platform to function
Functional	Remember your language preference, display settings, and responsible gaming limits	No — required for personalised settings
Analytical	Aggregate, anonymised data on page performance, traffic sources, and feature usage	Yes — via browser cookie settings
Security	Device fingerprinting for fraud detection and unusual login detection	No — required for account security

4.2 Managing Cookies

Most modern browsers allow you to view, block, or delete cookies through the browser's settings menu. Please note that disabling strictly necessary or functional cookies may significantly impair your ability to use the batjali platform, including preventing you from remaining logged in during a session. Analytical cookies may be disabled without affecting core platform functionality.

4.3 Local Storage and Session Storage

In addition to cookies, batjali may use browser local storage and session storage to retain temporary data such as your current game state, preferred deposit amount, and session timer data for responsible gaming features. This data is stored locally on your device and is not transmitted to our servers in the same manner as cookies. You may clear local storage and session storage through your browser's developer tools or privacy settings.

5 Data Security

batjali employs a range of technical and organisational measures designed to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. While no online platform can guarantee absolute security, we maintain the following safeguards as standard practice.

5.1 Technical Safeguards

• SSL/TLS Encryption: All data transmitted between your browser and batjali servers is encrypted using Transport Layer Security (TLS). Look for the padlock icon in your browser address bar to confirm the secure connection.
• Password Hashing: Passwords are never stored in plain text. We use industry-standard cryptographic hashing algorithms with salting to protect your login credentials at rest.
• Access Controls: Internal access to player data is restricted on a need-to-know basis. Staff members with access to sensitive data are subject to background checks and regular security training.
• Firewall and Intrusion Detection: Our servers are protected by enterprise-grade firewalls and intrusion detection systems that monitor for unusual access patterns in real time.
• Regular Security Audits: batjali conducts periodic security assessments of its infrastructure to identify and remediate vulnerabilities before they can be exploited.

5.2 Organisational Safeguards

Staff who handle personal data are required to complete data protection training and are bound by confidentiality agreements. Data breaches — where they occur — are subject to an internal incident response procedure. Affected players will be notified of any breach that poses a material risk to their rights or interests within a reasonable timeframe of the breach being confirmed.

6 Data Retention

batjali retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulatory obligations. The following retention periods apply as general guidelines.

Data Type	Retention Period	Reason
Account Registration Data	Duration of account + 5 years post-closure	AML compliance and audit requirements
KYC Identity Documents	Duration of account + 5 years post-closure	Regulatory obligations
Financial Transaction Records	Minimum 5 years from transaction date	AML, tax, and dispute resolution
Support Communications	2 years from last interaction	Quality assurance and dispute records
Technical and Usage Logs	13 months from collection	Security monitoring and analytics
Marketing Consent Records	Until consent is withdrawn + 3 years	Evidence of lawful marketing basis

Following the expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our internal data destruction procedures. Anonymised, aggregate data that no longer identifies any individual may be retained indefinitely for statistical and business intelligence purposes.

7 Your Privacy Rights

As a player on batjali, you hold a number of rights in relation to your personal data. We are committed to honouring these rights in a timely and transparent manner. To exercise any of the rights described below, please contact our Data Protection team at support@batjali with the subject line "Privacy Rights Request".

7.1 Right of Access

You have the right to request a copy of the personal data that batjali holds about you. We will provide this information in a structured, commonly used, machine-readable format within 30 days of receiving a verified request. The first copy is provided free of charge; subsequent requests within a 12-month period may attract a reasonable administrative fee.

7.2 Right to Rectification

If you believe that any personal data held by batjali about you is inaccurate or incomplete, you have the right to request that it be corrected. Minor account details such as your email address or contact number may be updated directly through your account settings. Changes to identity-related data such as your legal name require supporting documentation and will be processed by our verification team.

7.3 Right to Erasure

You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent (and there is no other lawful basis for processing), or where the data has been unlawfully processed. Please note that batjali is legally required to retain certain categories of data — particularly financial transaction records and KYC documents — for the periods described in Section 6, regardless of erasure requests. We will always inform you of any data that cannot be deleted and the reason why.

7.4 Right to Data Portability

Where processing is based on your consent or on a contractual obligation, and is carried out by automated means, you have the right to receive your personal data in a structured, machine-readable format and to have it transmitted to another data controller where technically feasible.

7.5 Right to Object

You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing carried out on the basis of legitimate interests, though batjali may continue such processing where we can demonstrate compelling legitimate grounds that override your interests or where the processing is necessary for legal claims.

8 Policy Updates & Contact

batjali reserves the right to update or revise this Privacy Policy at any time. When material changes are made, we will notify registered players by email to the address associated with their account and by posting a prominent notice on the platform. The "Effective" date at the top of this document will be updated to reflect the date on which the revised policy comes into force.

Continued use of the batjali platform after the effective date of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with any revision, you should cease using the platform and contact our support team to initiate account closure in accordance with the Terms & Conditions.

We encourage you to review this Privacy Policy periodically so that you remain informed about how batjali collects, uses, and protects your personal information. Previous versions of this policy are available on request.

8.1 Contact Our Data Protection Team

For all privacy-related enquiries, requests, or concerns, please contact the batjali Data Protection team using the details below. Please note that the email address below is displayed as plain text only and is not a clickable link.

batjali is committed to resolving all privacy concerns amicably and transparently. If you feel that your concerns have not been adequately addressed, you retain the right to escalate your complaint through appropriate legal channels in your jurisdiction.