bsji Privacy Policy

This Privacy Policy is issued by bsji, an online casino and sports betting platform accessible at https://bsji.pro ("bsji", "we", "us", or "our"). bsji is operated as a safe and reliable platform secured by SSL encryption and fair play certification, providing online gaming and cricket betting services to players in Bangladesh.

For the purposes of this Privacy Policy, bsji acts as the data controller in respect of the personal data it collects from registered and prospective players. This means bsji determines the purposes and means by which your personal data is processed.

If you have any questions or concerns about how your personal data is handled, you may contact our support team at: [email protected]. All data-related enquiries will be acknowledged within five (5) business days and resolved within thirty (30) calendar days.

This Privacy Policy applies to all personal data collected through the bsji website, mobile-optimised browser interface, customer support channels, and any other service operated under the bsji brand. It does not apply to third-party websites or services that may be linked to from the bsji platform — those entities operate their own independent privacy policies.

bsji collects personal data from you in the following ways: directly when you register an account or interact with our platform; automatically when you use our services; and from third-party service providers such as payment processors and identity verification agencies. The categories of personal data we collect include:

bsji does not collect sensitive personal data such as racial or ethnic origin, religious beliefs, political opinions, health data (beyond problem gambling self-assessments submitted by the player), or biometric data. The only health-adjacent information we may hold is any responsible gaming self-assessment or self-exclusion request that you voluntarily submit.

bsji processes your personal data only for the specific, legitimate purposes described below. We do not use your data for any purpose that is incompatible with the original reason for collection without seeking your additional consent.

• Account Creation and Management: To register your account, maintain your player profile, authenticate your identity at login, and manage your account settings and preferences.
• Age and Identity Verification: To confirm you are at least 21 years of age and to verify the authenticity of the identity documents you submit as part of the KYC process, in compliance with responsible gaming obligations.
• Payment Processing: To process deposits and withdrawals via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, and other supported payment methods, and to maintain accurate financial records of your transactions.
• Provision of Gaming Services: To make casino games and sports betting markets available to you, to record the outcomes of your wagers, to calculate and credit winnings, and to resolve any disputes relating to game or bet outcomes.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, money laundering, collusion, bonus abuse, and unauthorised access to player accounts. This includes monitoring unusual betting patterns and transaction behaviour.
• Responsible Gaming: To identify patterns of gambling behaviour that may indicate problem gambling, to apply self-imposed limits and self-exclusion requests, and to reach out proactively to players who may need support.
• Legal and Regulatory Compliance: To comply with applicable laws, to respond to requests from law enforcement or regulatory authorities, and to maintain records for audit purposes.
• Customer Support: To respond to your enquiries, resolve complaints, and maintain records of our communications with you.
• Platform Improvement: To analyse anonymous aggregated usage data in order to improve the bsji platform, fix technical issues, and develop new features.
• Marketing Communications: Where you have given explicit consent, to send you promotional offers, bonus notifications, and tournament announcements by email. You may withdraw marketing consent at any time by contacting [email protected] or adjusting your account notification settings.

• Contractual Necessity: Processing that is necessary to perform the contract between you and bsji — primarily account management, payment processing, and the provision of gaming services — is carried out on this basis.
• Legal Obligation: Processing required to comply with applicable laws — including identity verification, anti-money laundering checks, and record-keeping obligations — is carried out on this basis.
• Legitimate Interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and anonymous analytics is carried out on the basis of bsji's legitimate business interests, where those interests are not overridden by your privacy rights.
• Consent: Processing for direct marketing communications and the use of non-essential cookies is carried out only where you have provided explicit, informed consent. You may withdraw this consent at any time.

bsji does not sell, rent, or trade your personal data to any third party. We share your data only in the following limited and controlled circumstances:

• Payment Processors: We share the financial data necessary to process your deposits and withdrawals with our payment partners (including bKash, Nagad, Rocket, Upay, and integrated banking partners). These partners act as independent data controllers for their own services and are subject to their own privacy policies.
• Identity Verification Providers: We use regulated third-party KYC service providers to verify the identity documents you submit. These providers process your identity data solely for the purpose of verification and are contractually prohibited from using it for any other purpose.
• Game Studios: Game providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive your player identifier (but not your full personal details) in order to manage your game sessions, maintain game logs, and handle jackpot processing. Full personal data is not transferred to game studios.
• Customer Support Tools: Our customer support operations use third-party helpdesk software. Communications data (support transcripts) may be stored within these systems, which are operated under strict data processing agreements with bsji.
• Analytics Providers: We use anonymous, aggregated analytics to understand how players use the bsji platform. No personally identifiable information is shared with analytics providers.
• Law Enforcement and Regulatory Authorities: We will disclose your personal data to police, financial intelligence units, or other competent authorities where we are legally required to do so or where we are responding to a lawful court order or regulatory directive.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of bsji's operations, player data may be transferred to the acquiring entity. You will be notified of any such transfer and the applicable data protection arrangements via the registered email address on your account.

All third-party data processors engaged by bsji are required to enter into a formal Data Processing Agreement (DPA) confirming that they will process your data only on bsji's documented instructions, implement appropriate security measures, and not engage sub-processors without bsji's prior consent.

bsji uses cookies and similar local storage technologies to operate and improve the platform. A cookie is a small text file stored on your device when you visit a website. The following categories of cookies are used on bsji:

You may manage or disable non-essential cookies through your browser settings at any time. Please note that disabling strictly necessary cookies will prevent you from logging in to your bsji account. For instructions on managing cookies in your browser, refer to your browser's help documentation.

bsji does not use fingerprinting techniques, supercookies, or any other tracking mechanism designed to circumvent your browser's privacy settings.

bsji retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply:

• Active Account Data: All personal data associated with an active player account is retained for the duration of the account's active status plus a minimum period of five (5) years following account closure, in accordance with anti-money laundering record-keeping requirements.
• KYC Documents: Identity and address verification documents are retained for a minimum of five (5) years from the date of the last transaction on the account, or longer if required by a specific regulatory directive.
• Financial Transaction Records: Deposit, withdrawal, and wagering records are retained for seven (7) years from the date of the transaction to support financial audit obligations.
• Customer Support Communications: Support chat transcripts and email records are retained for three (3) years from the date of the interaction, unless they relate to an unresolved dispute, in which case they are retained until the dispute is finally resolved.
• Marketing Consent Records: Records of your consent to receive marketing communications, and any subsequent withdrawal of that consent, are retained for five (5) years.
• Technical Logs: Server access logs and security event logs are retained for twelve (12) months on a rolling basis, after which they are permanently deleted or anonymised.
• Closed Accounts (Non-Suspicious): Where an account is closed at the player's request with no outstanding compliance flags, personal data is moved to a restricted archive and deleted after the applicable minimum retention period has elapsed.

Upon expiry of the applicable retention period, personal data is securely and permanently deleted or irreversibly anonymised so that it can no longer be associated with any individual.

• Encryption at Rest: All personal data stored in bsji's databases is encrypted using AES-256. Encryption keys are managed using a dedicated key management system with strict access controls and regular rotation schedules.
• Encryption in Transit: All data transmitted between your device and bsji's servers is protected using TLS 1.3. bsji enforces HTTPS across all pages and uses HTTP Strict Transport Security (HSTS) to prevent protocol downgrade attacks.
• Access Controls: Access to personal data within bsji's internal systems is restricted on a strict need-to-know basis. Employee accounts are governed by role-based access controls, and all administrative access is logged and audited.
• Multi-Factor Authentication: bsji's internal systems require multi-factor authentication for all staff with access to player data. Players are also encouraged to enable two-factor authentication (2FA) on their own accounts for additional security.
• Vulnerability Management: bsji conducts regular penetration testing and security assessments of its platform infrastructure. Critical vulnerabilities are patched within 48 hours of identification.
• Incident Response: bsji maintains a documented data breach response plan. In the event of a personal data breach that poses a risk to your rights and freedoms, affected players will be notified via their registered email address within 72 hours of bsji becoming aware of the breach, along with details of the data affected, the steps bsji has taken, and the recommended actions for the player.

While bsji implements industry-leading security measures, no online platform can guarantee absolute security. Players are responsible for maintaining the confidentiality of their own account credentials and should never share their password with any third party. If you suspect unauthorised access to your bsji account, contact [email protected] immediately.

As a player on the bsji platform, you have the following rights in respect of your personal data. To exercise any of these rights, please contact us at [email protected] with your full name, registered email address, and a clear description of your request. We will respond within thirty (30) calendar days.

• Right of Access: You have the right to request a copy of all personal data that bsji holds about you, along with information about how it is being used. This is commonly known as a Subject Access Request (SAR).
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it without undue delay.
• Right to Erasure: Also known as the "right to be forgotten", this right allows you to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (and there is no other legal basis), or where the data has been unlawfully processed. Note that this right is subject to bsji's legal retention obligations — data that must be retained for regulatory compliance cannot be deleted before the applicable retention period has elapsed.
• Right to Restrict Processing: You have the right to request that bsji temporarily suspends processing of your personal data in certain circumstances — for example, while the accuracy of the data is being contested.
• Right to Data Portability: You have the right to receive a copy of the personal data you have provided to bsji in a structured, commonly used, machine-readable format (such as JSON or CSV), and to request that we transmit this data directly to another controller where technically feasible.
• Right to Object: You have the right to object to processing of your personal data carried out on the basis of legitimate interests, including profiling. You also have an unconditional right to object to direct marketing at any time.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of any processing carried out prior to the withdrawal.

bsji will not charge a fee for exercising any of the above rights in normal circumstances. However, if a request is manifestly unfounded or excessive (for example, repetitive requests), bsji reserves the right to charge a reasonable administrative fee or to decline the request, providing clear written reasons for doing so.

bsji implements robust age verification measures as part of the account registration and KYC process. Any player found to have misrepresented their age will have their account permanently banned, all balances (real-money and bonus) forfeited, and the matter may be reported to relevant authorities.

If you are a parent or guardian and believe that a minor in your care has registered an account on bsji, please contact us immediately at [email protected]. We will investigate and act promptly to close the account and remove the relevant data.

bsji supports parental control tools and filtering software that can be used to block access to online gambling platforms. We recommend that parents and guardians in Bangladesh make use of available internet filtering tools to prevent underage access to gambling services.

bsji is a platform primarily serving players in Bangladesh (Bangladesh Standard Time, UTC+6). The majority of personal data processing takes place on infrastructure located within or serving the Asia-Pacific region. However, some of bsji's third-party service providers — including certain game studios, KYC verification agencies, and cloud infrastructure providers — may process data in jurisdictions outside Bangladesh.

Where personal data is transferred internationally, bsji ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that described in this Privacy Policy. These safeguards may include:

• Standard contractual clauses incorporated into Data Processing Agreements with the relevant service providers.
• Transfers to providers located in jurisdictions that have been assessed as offering an adequate level of data protection.
• Binding corporate rules where data is transferred within a multinational corporate group that has implemented group-wide data protection standards.

You may request details of the specific safeguards in place for any given international transfer by contacting [email protected].

bsji reserves the right to update or amend this Privacy Policy at any time. When we make material changes — such as introducing new categories of data collection, new purposes for processing, or new categories of third-party recipients — we will notify you by sending an email to your registered account address and/or displaying a prominent notice on the bsji platform upon your next login.

Minor updates, such as corrections to wording, formatting improvements, or clarifications that do not affect the substance of the policy, may be made without individual notification. The "Effective Date" at the top of this document will always reflect the date of the most recent update.

Your continued use of the bsji platform following notification of a material change constitutes your acceptance of the revised Privacy Policy. If you do not agree with the changes, you should close your account and cease using the platform. Any data collected under the previous version of the Privacy Policy will continue to be governed by the terms of that version until the applicable retention period expires.

We recommend reviewing this Privacy Policy periodically, even in the absence of a notification, to stay informed about how bsji protects your information.

Last Updated: 1 January 2026