boji Privacy Policy — How We Collect, Use, and Protect Your Personal Data

01 About This Policy

This Privacy Policy ("Policy") describes how boji ("we", "us", "our") collects, uses, stores, discloses, and otherwise processes personal data relating to individuals ("you", "your") who access or use the boji online betting and casino platform, including the website at https://boji.pro and all associated pages and services (the "Platform").

boji is an English-language online betting and casino platform built specifically for the Bangladesh market, serving players across Dhaka, Chittagong, Sylhet, Khulna, Rajshahi, Barisal, Rangpur, Mymensingh, Cox's Bazar, and throughout the country. By registering an account, visiting the Platform, or using any of our services, you acknowledge that you have read and understood this Policy and that your personal data will be handled as described herein.

This Policy should be read alongside our Terms and Conditions, which govern the contractual relationship between you and boji. Capitalised terms used in this Policy but not defined here carry the meanings given to them in our Terms and Conditions.

02 Data We Collect

We collect several categories of personal data in the course of operating the Platform. The specific data we collect depends on how you interact with boji and what services you use.

2.1 Identity and Registration Data

When you register a boji account, we collect the following information:

• Full legal name
• Date of birth (to verify you are 21 years of age or older)
• Email address
• Mobile phone number
• Username and encrypted password
• Residential address (city, district)

2.2 Identity Verification Documents

To comply with know-your-customer (KYC) and anti-money laundering (AML) requirements, we may request copies of government-issued identity documents, including:

• National Identity Card (NID)
• Passport
• Driving licence or other government-issued photo ID
• Proof of address (utility bill, bank statement dated within 3 months)

2.3 Financial and Transaction Data

When you make deposits or withdrawals, we collect the information necessary to process those transactions, including:

• Mobile banking account numbers (bKash, Nagad, Rocket, Upay)
• Bank account details (Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, and others)
• Card type and last four digits (Visa, Mastercard — full card numbers are not stored by boji)
• Transaction amounts, dates, and reference numbers
• Wallet balance history and wagering activity records

2.4 Technical and Device Data

When you access the Platform, our servers and analytics systems automatically collect certain technical data, including:

• IP address
• Device type, operating system, and browser type and version
• Screen resolution and language settings
• Pages visited, time spent on each page, and navigation paths
• Session duration and session timestamps
• Referring URL (the page you visited immediately before arriving at boji)

2.5 Communications Data

If you contact our customer support team, submit a complaint, or communicate with us by any means, we retain records of that correspondence, including:

• Email content and metadata
• Live chat transcripts
• Support ticket history and resolution notes

03 How We Collect Your Data

3.1 Directly From You

The majority of personal data we hold is provided directly by you when you register an account, complete identity verification, make a deposit or withdrawal, claim a bonus or promotion, contact our support team, or respond to a survey or feedback request.

3.2 Automatically Via Technical Systems

When you browse or use the Platform, we automatically collect technical and behavioural data via server logs, cookies, and similar tracking technologies. This data collection occurs in the background and does not require any action on your part. Please see Section 7 (Cookies & Tracking) for full details.

3.3 From Third-Party Service Providers

We may receive certain data about you from trusted third-party partners who assist us in operating the Platform, including:

• Payment processors — confirmation of deposit and withdrawal transactions from bKash, Nagad, Rocket, Upay, and banking partners.
• Identity verification providers — results of automated document and liveness checks where applicable.
• Fraud detection services — risk scoring and device fingerprinting data to protect the Platform and its users.
• Game content providers — game session data and round outcomes from studios including Evolution Gaming, Ezugi, Pragmatic Play, and NetEnt.

04 How We Use Your Data

We use the personal data we collect for the following purposes:

4.1 Account Management and Service Delivery

To create, verify, and manage your boji account; to process deposits and withdrawals; to provide access to betting markets, casino games, and promotional offers; and to communicate important account and service updates to you.

4.2 Identity Verification and Compliance

To verify that you meet the minimum age requirement of 21 years; to perform KYC checks as required; to comply with anti-money laundering obligations; and to investigate and prevent fraud, collusion, or other prohibited conduct as defined in our Terms and Conditions.

4.3 Platform Security and Integrity

To protect the Platform and its users from unauthorised access, fraud, and abuse; to detect and investigate suspicious activity; to enforce our Terms and Conditions; and to maintain the fairness and integrity of all betting and gaming products.

4.4 Customer Support

To respond to your queries, complaints, and support requests in a timely and effective manner; to maintain records of support interactions for quality assurance and training purposes; and to follow up on unresolved issues.

4.5 Responsible Gaming

To monitor betting and gaming patterns for signs of problem gambling; to apply responsible gaming tools such as deposit limits, cooling-off periods, and self-exclusion where requested or where we have reasonable grounds for concern; and to fulfil our duty of care to all users of the Platform.

4.6 Platform Improvement and Analytics

To analyse aggregated and anonymised usage data to understand how the Platform is being used; to identify technical issues, performance bottlenecks, and opportunities for improvement; and to develop new features and products that better serve our users across Bangladesh.

4.7 Marketing and Promotions

Where you have given your consent, we may use your contact details to send you information about relevant promotions, bonuses, new game launches, and seasonal offers (for example, BPL match-day specials or Eid promotions). You may withdraw your consent to marketing communications at any time by contacting [email protected].

05 Legal Basis for Processing

We process your personal data on one or more of the following legal grounds:

• Contractual necessity: Processing is necessary to perform the contract we have with you — i.e., to operate your account, process transactions, and provide the services described in our Terms and Conditions.
• Legal obligation: Processing is necessary to comply with applicable legal and regulatory obligations, including KYC, AML, and responsible gaming requirements.
• Legitimate interests: Processing is necessary for our legitimate interests in operating a safe, secure, and commercially viable platform, provided those interests are not overridden by your rights and interests.
• Consent: Where we rely on your consent (for example, for marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

06 Sharing Your Data

boji does not sell, rent, or trade your personal data. We share data only in the limited circumstances described below and only with parties who are bound by appropriate confidentiality and data protection obligations.

6.1 Payment Service Providers

We share the financial and identity data strictly necessary to process your deposit and withdrawal transactions with our payment partners, including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, and card processing networks. These partners process data only as instructed by boji and are not permitted to use your data for their own purposes.

6.2 Identity Verification and Fraud Prevention Services

We may share identity document data and device data with third-party KYC and fraud prevention providers to verify your identity and to protect the Platform from fraudulent activity. The results of these checks are used by boji internally and are not shared further.

6.3 Game Content Providers

When you play games supplied by third-party studios (including Evolution Gaming, Ezugi, Pragmatic Play, NetEnt, Spribe, and others), a minimal set of session data (such as a pseudonymous player identifier, game session ID, and stake/outcome information) is transmitted to those studios to enable the game to function and to settle results correctly. These providers are bound by contractual data protection obligations.

6.4 Legal and Regulatory Authorities

We may disclose personal data to law enforcement agencies, regulatory authorities, or other public bodies where we are required to do so by law, court order, or binding regulatory instruction, or where we believe disclosure is necessary to prevent fraud, money laundering, or other serious criminal activity.

6.5 Business Transfers

In the event that boji undergoes a merger, acquisition, or sale of all or a material part of its business assets, personal data held by boji may be transferred to the acquiring entity as part of that transaction. We will provide reasonable advance notice of any such transfer and the new entity will be required to honour this Privacy Policy.

07 Cookies & Tracking Technologies

boji uses cookies and similar tracking technologies to operate the Platform, personalise your experience, maintain session security, and analyse usage patterns. By continuing to use the Platform, you consent to the use of cookies as described in this section.

7.1 What Are Cookies?

Cookies are small text files placed on your device by a website you visit. They are widely used to make websites work efficiently, to remember your preferences, and to provide information to the site owner. Cookies set by boji are first-party cookies; cookies set by our service providers are third-party cookies.

7.2 Types of Cookies We Use

7.3 Managing Cookies

You can control and manage cookies through your browser settings. Most modern browsers allow you to refuse, delete, or be notified when cookies are set. Please note that disabling strictly necessary cookies will impair the functionality of the Platform — you may not be able to log in or maintain a session if these cookies are blocked. Disabling functional or analytics cookies will not prevent you from using the core features of boji but may affect your personalised experience.

08 Data Security

boji takes the security of your personal data seriously and employs a range of technical and organisational measures to protect it against unauthorised access, disclosure, alteration, or destruction.

8.1 Technical Measures

• SSL/TLS encryption: All data in transit between your device and boji's servers is encrypted using SSL/TLS. Look for the padlock icon in your browser's address bar when using the Platform.
• Encrypted password storage: User passwords are stored as salted cryptographic hashes — we never store passwords in plain text and our staff cannot read your password.
• Access controls: Access to personal data is restricted on a strict need-to-know basis. Only authorised personnel with a legitimate operational need can access user records.
• Server security: Our servers are hosted in secure data centres with physical access controls, network firewalls, intrusion detection systems, and regular security patching.
• Regular security audits: We conduct periodic security reviews and vulnerability assessments to identify and address potential weaknesses in our systems.

8.2 Organisational Measures

• All boji staff who handle personal data are trained on data protection obligations and confidentiality requirements.
• Third-party service providers are vetted for their data security practices and are contractually bound to maintain appropriate security standards.
• We maintain an incident response plan to manage any data breaches promptly and effectively.

8.3 Data Breach Notification

In the event of a personal data breach that poses a risk to your rights and freedoms, boji will notify affected users without undue delay, providing clear information about what happened, what data was affected, and what steps you should take to protect yourself. We will also notify relevant authorities as required.

09 Data Retention

boji retains personal data for as long as necessary to fulfil the purposes for which it was collected, to maintain an accurate record of your account history, and to comply with applicable legal and regulatory obligations.

When data reaches the end of its retention period, it is securely deleted or irreversibly anonymised so that it can no longer be associated with any individual. Anonymised, aggregated data (from which individual identities cannot be reconstructed) may be retained indefinitely for statistical and analytical purposes.

10 Your Rights Over Your Personal Data

As a user of boji, you have the following rights in relation to your personal data. To exercise any of these rights, please contact us at [email protected] with the subject line "Data Rights Request". We will respond within a reasonable timeframe.

10.1 Right of Access

You have the right to request a copy of the personal data we hold about you. We will provide this in a clear, structured format. We may ask you to verify your identity before processing this request to ensure we are not disclosing your data to an unauthorised party.

10.2 Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it. For certain data (such as your registered name), we may require supporting documentation before making any change.

10.3 Right to Erasure

You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn your consent, or where you believe the processing is unlawful. Please note that we may be unable to fulfil erasure requests where we are required by law to retain certain data (for example, financial transaction records).

10.4 Right to Restrict Processing

You may request that we restrict the processing of your personal data in certain circumstances — for example, while a dispute about the accuracy of that data is being resolved.

10.5 Right to Data Portability

Where processing is based on your consent or on a contract, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.

10.6 Right to Object to Marketing

You have the right to object to the use of your personal data for direct marketing purposes at any time. To unsubscribe from boji marketing communications, email [email protected] with the subject "Unsubscribe from Marketing". We will action your request promptly.

11 Children & Minors

The boji Platform is strictly intended for adults aged 21 years and above. We do not knowingly collect, process, or store personal data relating to any person under the age of 21. If you are under 21 years of age, you must not register an account or use the Platform in any way.

If we become aware that we have inadvertently collected personal data from a person under 21 years of age, we will immediately suspend the associated account, delete the personal data in question, and take appropriate action in accordance with our underage gambling prevention procedures. If you are a parent or guardian and believe that a minor in your care has registered an account with boji, please contact us immediately at [email protected] and we will investigate without delay.

We encourage parents and guardians to make use of parental control and content-filtering software to prevent underage access to online gambling platforms. More information about responsible gaming and age protection is available on our Responsible Gaming page.

12 Third-Party Links and Services

The boji Platform may contain references to third-party services, including game content supplied by studios such as Evolution Gaming, Ezugi, Pragmatic Play, NetEnt, Spribe, and others. While we take care to work with reputable partners, boji is not responsible for the privacy practices of any third party. We encourage you to review the privacy policies of any third-party services you interact with.

boji does not include external hyperlinks to third-party websites in its main navigation or content areas. Any game content embedded in the Platform that is provided by a third-party studio operates within boji's secure environment and under our contractual data protection requirements.

13 Updates to This Privacy Policy

boji reserves the right to update, amend, or replace this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. When we make material changes to this Policy, we will:

• Update the "Last Updated" date displayed at the top of this page.
• Where practically possible, notify registered users by email or by a prominent notice on the Platform.
• In the case of significant changes, provide a reasonable notice period before the new Policy takes effect.

Your continued use of the Platform following publication of a revised Privacy Policy constitutes your acceptance of the updated terms. It is your responsibility to review this Policy periodically. If you do not agree with any change to this Policy, you should cease using the Platform and may request account closure by contacting [email protected].

14 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way boji processes your personal data, please contact our support team using the details below. We are committed to resolving all privacy-related inquiries promptly and transparently.

Please include your registered email address and a clear description of your inquiry when contacting us. For data rights requests, we will ask you to verify your identity before processing the request. We treat all privacy inquiries with strict confidentiality.