Privacy Policy — bd jelly

When you interact with the bd jelly platform — whether by browsing as a guest, registering an account, making a deposit, or contacting support — certain categories of personal data are collected. This section describes those categories in full, along with the specific data points within each category and the primary reason each is collected.

Registration and identity data: When you create an account, you provide your full legal name, date of birth, email address, and chosen password. This information is necessary to create and secure your account, to verify that you meet the minimum age requirement of 18 years, and to ensure that the person registering is a real, identifiable individual. We do not accept registrations from anonymous or pseudonymous individuals for real-money play.

Know Your Customer (KYC) documentation: Before processing your first withdrawal — or at any point where our compliance procedures require identity verification — we may request copies of government-issued identity documents such as your Bangladesh National Identity Card (NID), passport, or driving licence. We may also request proof of address (a utility bill or bank statement dated within three months) and, where applicable, proof of payment method ownership. These documents are stored securely and used solely for identity verification and anti-money laundering (AML) purposes.

Financial transaction data: Every deposit and withdrawal you make on bd jelly generates a transaction record that includes the amount, currency (BDT), payment method used (bKash, Nagad, Rocket, Upay, Visa, or Mastercard), transaction timestamp, and the reference number assigned by the payment provider. This data is retained as required by financial regulations and is used to resolve disputes, investigate suspicious activity, and maintain accurate account balances.

Technical and device data: When you access bd jelly, our servers automatically log certain technical information: your IP address, browser type and version, operating system, device type (mobile or desktop), screen resolution, referring URL, and the pages or game categories you visit during each session. This data is collected passively via server logs and analytics tools and is used for platform security monitoring, fraud detection, and aggregate performance analytics.

Gameplay and betting data: Records are kept of all game sessions, bets placed, wagers completed, and outcomes achieved under your account. This data enables us to calculate account balances accurately, resolve game disputes, detect patterns of bonus abuse, and provide players with a complete transaction history on request.

Communications data: If you contact bd jelly support via email or live chat, the content of that communication — including your name, email address, and the subject of your query — is logged and retained to provide a consistent, informed service and to maintain a record of issues raised and their resolution.

bd jelly does not sell, rent, or trade your personal data to any third party under any circumstances. Disclosure of personal data to third parties is limited to the specific categories described below, each of which serves a necessary operational or legal function.

Payment service providers: To process your deposits and withdrawals, bd jelly shares the minimum necessary financial data with the payment provider you have selected — bKash, Nagad, Rocket, Upay, Visa, or Mastercard. The data shared typically includes your registered name, transaction amount, and the account or card reference associated with your payment method. Each of these providers operates under its own privacy policy and data security standards, which we encourage you to review independently.

KYC and identity verification partners: To fulfil our age verification and anti-money laundering obligations, bd jelly may engage specialist third-party KYC verification services. Identity documents and personal data submitted for verification purposes are shared with these partners solely for the purpose of verification and are not retained by them beyond what is necessary for that purpose.

Game technology providers: The games on bd jelly are hosted and operated by certified third-party studios — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers receive technical session data (such as a session token and bet values) necessary to operate the game. They do not receive your full identity or payment data unless separately required by their own compliance processes, which they manage independently.

Regulatory and law enforcement authorities: bd jelly will disclose personal data to government authorities, law enforcement agencies, or regulatory bodies where required to do so by applicable law, a valid court order, or a formal regulatory request. Where legally permissible, we will notify the affected player of such a disclosure.

Professional advisers: In limited circumstances, personal data may be shared with bd jelly's legal advisers, auditors, or accountants for the purpose of obtaining professional advice or in connection with legal proceedings. These parties are bound by strict professional confidentiality obligations.

Business transfers: In the event of a merger, acquisition, or sale of all or a material part of bd jelly's assets, personal data held by bd jelly may be transferred to the acquiring entity as part of that transaction. Players will be notified of any such transfer and of any material changes to the way their data is processed as a result.

bd jelly retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, to comply with applicable legal obligations, or to resolve any disputes or enforce our agreements. Once data is no longer required for any of these purposes, it is securely deleted or anonymised in accordance with our internal data lifecycle procedures.

The following retention periods apply to the principal categories of data we hold:

• Account and registration data: Retained for the duration of your active account relationship with bd jelly, plus a further five years from the date of account closure. This period reflects our obligations under applicable financial and AML regulations.
• KYC documents: Retained for five years from the date of submission or from the date of account closure, whichever is later. Where a regulatory authority requires a longer retention period, that period applies.
• Financial transaction records: Retained for a minimum of five years from the date of the transaction, in compliance with standard financial record-keeping requirements.
• Gameplay and betting records: Retained for three years from the date of the game session or bet. Older gameplay data is anonymised and aggregated for statistical purposes only.
• Communications and support records: Retained for two years from the date of the most recent communication in a support thread, or longer if the communication is related to an ongoing dispute or investigation.
• Security and fraud logs: IP address logs and device fingerprint records associated with a security event are retained for up to three years to support ongoing investigations and pattern analysis.
• Marketing preferences: Records of your consent to or opt-out from marketing communications are retained indefinitely to demonstrate compliance with your stated preference, even after all other data associated with your account has been deleted.

When the applicable retention period expires, your data is either permanently deleted from our active systems and backups, or it is irreversibly anonymised such that it can no longer be linked to you as an individual. Anonymised, aggregated data may be retained indefinitely for statistical and business analytics purposes.

bd jelly takes the security of your personal data seriously. We implement a range of technical and organisational measures designed to protect your data against unauthorised access, accidental loss, alteration, disclosure, or destruction. While no system can guarantee absolute security, our layered approach is designed to reduce risk to the lowest practicable level.

Encryption in transit: All communications between your browser or mobile device and the bd jelly platform are encrypted using TLS (Transport Layer Security) with a minimum of 256-bit encryption. This prevents interception of your login credentials, payment details, and personal data as they travel across the internet.

Encryption at rest: Sensitive data stored in our databases — including passwords (stored as salted cryptographic hashes, never in plain text), financial records, and KYC documents — is encrypted at rest using industry-standard encryption algorithms. Encryption keys are managed separately from the data they protect.

Access controls: Access to personal data within bd jelly's internal systems is governed by a strict role-based access control (RBAC) policy. Only staff members with a legitimate, documented need to access specific categories of data are granted that access. All access events are logged and reviewed regularly. Administrative access to production systems requires multi-factor authentication (MFA).

Infrastructure security: The bd jelly platform is hosted on secure, professionally managed server infrastructure with physical access controls, network-level firewalls, intrusion detection systems, and regular penetration testing by independent security specialists.

Incident response: In the event of a data security incident that is likely to result in a risk to your rights and freedoms, bd jelly will notify affected players without undue delay and will take all reasonable steps to contain the incident, assess its scope, and prevent recurrence.

Your responsibility: You also play a role in keeping your account secure. You should choose a strong, unique password for your bd jelly account, keep that password confidential, and contact [email protected] immediately if you suspect that your account has been accessed without your authorisation. bd jelly staff will never ask you for your password by email or chat.