Privacy Policy — bqji
How We Handle Your Personal Data

This Privacy Policy ("Policy") describes how bqji ("bqji", "we", "us", "our") collects, uses, stores, shares, and protects personal data relating to individuals ("Players", "Users", "you") who access or use the bqji website at https://bqji.io and all associated gaming services, sportsbook features, account management tools, promotional programmes, and customer support channels (collectively, the "Platform").

bqji is committed to handling personal data responsibly, transparently, and in accordance with internationally recognised data protection principles. This Policy is designed to give you clear, plain-language information about our data practices so that you can make informed decisions about using the bqji Platform.

This Policy applies to all bqji players regardless of how they access the Platform — whether via desktop browser, mobile browser, or any other access method. It applies to all personal data collected by bqji, whether provided directly by you, collected automatically through your use of the Platform, or received from third-party service partners.

For the purposes of this Privacy Policy, bqji acts as the data controller in respect of personal data collected from players using the Platform. As data controller, bqji determines the purposes and means by which personal data is processed.

All data-related enquiries, access requests, correction requests, and deletion requests should be directed to the bqji data team via the contact details provided in Section 15 of this Policy. bqji is committed to acknowledging all data rights requests within 48 hours and responding in full within 30 calendar days.

bqji collects personal data that is necessary and proportionate to the operation of a safe, compliant, and high-quality online gaming platform. The categories of personal data we collect are as follows:

bqji does not collect or store full payment card numbers. Where card-based payment methods are used, only tokenised identifiers are retained by bqji systems. Full card data is processed exclusively by our PCI-DSS compliant payment processor partners.

bqji collects personal data through several channels, each of which is described below:

• Direct provision by you: Data you voluntarily provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting our support team, or participating in a promotion.
• Automated collection: Technical and usage data collected automatically through cookies, pixel tags, log files, and similar tracking technologies when you access the Platform. See Section 8 for full details on cookies.
• Payment providers: Transaction confirmation data and payment method identifiers received from bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, and other integrated payment partners upon completion of a deposit or withdrawal.
• KYC and identity verification partners: Data received from third-party identity verification services used to validate the authenticity of documents submitted during the KYC process.
• Fraud detection systems: Risk-scoring data and device fingerprinting information generated by our fraud prevention partners to protect the integrity of the Platform and safeguard all players.
• Game providers: Game session data, round results, and RTP audit data received from integrated game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi.

bqji processes personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing required to perform the contract between bqji and the player — including account creation, payment processing, game delivery, and withdrawal fulfilment.
• Legal obligation: Processing required to comply with applicable legal and regulatory obligations, including anti-money laundering (AML) requirements, KYC obligations, and responsible gaming mandates.
• Legitimate interests: Processing carried out in the legitimate interests of bqji, including fraud detection, platform security, service improvement, and internal analytics — provided that such interests are not overridden by the player's fundamental rights and freedoms.
• Consent: Processing based on your freely given, specific, and informed consent — for example, the use of non-essential cookies and receipt of promotional communications. Consent may be withdrawn at any time by contacting [email protected], though withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

bqji uses the personal data it collects for the following specific purposes:

• Account registration and management: To create, maintain, and manage your bqji player account, including login authentication, account settings, and balance management.
• Identity verification (KYC): To verify your identity and age in compliance with responsible gaming and anti-money laundering requirements before processing withdrawals and at other points in the account lifecycle.
• Payment processing: To facilitate deposits and withdrawals via your registered payment method, reconcile transactions, and maintain accurate financial records.
• Game delivery and personalisation: To deliver casino games and sportsbook markets, track your game history, and personalise your in-platform experience based on your preferences and activity.
• Bonus and promotional management: To administer bonus eligibility, track wagering requirement completion, deliver promotional communications, and prevent bonus abuse.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, money laundering, collusion, bonus abuse, and other prohibited conduct on the Platform.
• Responsible gaming: To administer self-exclusion requests, deposit limits, cooling-off periods, reality checks, and other responsible gaming tools, and to identify players who may be displaying indicators of problem gambling.
• Customer support: To respond to your support requests, live chat enquiries, formal complaints, and data rights requests.
• Platform improvement: To analyse platform usage data, identify technical issues, and improve the quality, stability, and content of the bqji Platform.
• Legal and regulatory compliance: To meet record-keeping obligations, respond to lawful requests from authorities, and defend bqji's legal rights in dispute proceedings.

bqji does not share personal data with third parties except in the circumstances described below. All third-party service providers with whom bqji shares data are contractually required to process it only for the specified purpose, to maintain appropriate security measures, and to handle it in a manner consistent with this Privacy Policy.

bqji will never share your personal data with third-party advertisers, data brokers, or marketing aggregators. In the event of a business restructuring, merger, or acquisition involving bqji, player data may be transferred to the successor entity subject to the same privacy protections described in this Policy, and players will be notified of any material change to data controller identity.

bqji uses cookies and similar tracking technologies to operate and improve the Platform. A cookie is a small text file placed on your device by the Platform when you visit. Cookies enable bqji to recognise your browser, remember your preferences, maintain your login session, and gather analytics data about how the Platform is used.

The categories of cookies used by bqji are as follows:

• Strictly Necessary Cookies: Essential for the Platform to function correctly. These include session management cookies that keep you logged in and security cookies that protect against cross-site request forgery. These cookies cannot be disabled without impairing core platform functionality.
• Functional Cookies: Used to remember your preferences, such as language settings, and to personalise your gaming experience. Disabling these cookies may reduce personalisation features.
• Analytics Cookies: Used to collect aggregated, anonymised data about how players navigate and interact with the Platform, enabling bqji to identify areas for improvement. Analytics data does not identify you personally.
• Fraud Prevention Cookies: Used by bqji's integrated fraud detection systems to identify unusual behaviour patterns and protect platform integrity.

You may manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will prevent you from logging into your bqji account. bqji does not use third-party advertising cookies or track your activity across external websites.

bqji implements a comprehensive range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security programme includes the following measures:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the bqji Platform is encrypted in transit using industry-standard TLS protocols, ensuring that your information cannot be intercepted.
• AES-256 Encryption at Rest: Sensitive personal data stored on bqji servers — including identity documents, financial records, and account credentials — is encrypted using AES-256 standards.
• Access Controls: Strict role-based access controls ensure that only authorised bqji personnel who require access to personal data for their specific job function are permitted to view or process it.
• Regular Security Audits: bqji's infrastructure and codebase undergo regular independent penetration testing and security audits to identify and remediate vulnerabilities before they can be exploited.
• Secure Password Storage: Player passwords are stored as salted cryptographic hashes. bqji staff cannot view your password in plain text and will never ask for it.
• Fraud Monitoring: Real-time automated fraud monitoring systems scan for unusual login activity, payment anomalies, and suspicious gaming patterns, triggering alerts and protective account actions where necessary.

While bqji maintains robust security measures, no online platform can guarantee absolute security. Players are responsible for maintaining the confidentiality of their own login credentials and for notifying bqji immediately at [email protected] if they suspect any unauthorised access to their account.

bqji retains personal data for the periods set out below. These retention periods are determined by the purpose for which the data was collected, applicable legal obligations, and bqji's legitimate interests in maintaining accurate records for dispute resolution and fraud prevention purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be associated with an individual player. bqji does not retain data beyond what is necessary or legally required.

As a player whose personal data is processed by bqji, you hold the following rights in respect of your personal data. To exercise any of these rights, please contact [email protected] with the subject line "Data Rights Request — [Right Type]".

• Right of Access: You may request a copy of the personal data that bqji holds about you, together with information about how it is being used. bqji will provide this within 30 calendar days of receiving a valid request.
• Right to Rectification: If any personal data bqji holds about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. Minor corrections such as address updates may be made directly via your account settings.
• Right to Erasure ("Right to be Forgotten"): In certain circumstances, you may request the deletion of your personal data. This right is subject to bqji's legal retention obligations — for example, AML records may be retained for the mandatory period regardless of a deletion request.
• Right to Restriction of Processing: You may request that bqji restricts the processing of your personal data in specified circumstances, for example while a correction request is being assessed.
• Right to Data Portability: Where processing is based on consent or contractual necessity, and is carried out by automated means, you may request a copy of your personal data in a structured, machine-readable format.
• Right to Object: You may object to processing carried out on the basis of bqji's legitimate interests, including profiling. bqji will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (for example, receipt of promotional communications), you may withdraw that consent at any time by contacting [email protected]. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

bqji is strictly an adult-only platform. The bqji Platform is not directed at, and must not be used by, any person under the age of 21. bqji does not knowingly collect, store, or process personal data belonging to individuals under the age of 21. Age verification is a mandatory component of the bqji KYC process, and accounts that cannot be verified as belonging to a player aged 21 or above will be suspended pending verification or permanently closed.

If bqji becomes aware that personal data has been collected from a person under the age of 21 without appropriate parental or guardian consent, that data will be deleted immediately and the associated account will be permanently closed. Any funds deposited by an underage player will be returned to the originating payment method following identity verification of the account holder.

bqji strongly encourages parents and guardians to make use of parental control software to prevent minors from accessing online gambling platforms. Responsibility for monitoring minor access to online gambling services is shared between platform operators and households.

In operating the bqji Platform, personal data may be transferred to and processed by service providers and partners located in countries outside the jurisdiction in which you reside. Such transfers may occur, for example, when cloud infrastructure, game providers, or fraud detection systems are hosted in data centres outside Bangladesh.

Wherever personal data is transferred internationally, bqji ensures that appropriate safeguards are in place to protect your data to a standard at least equivalent to the protections described in this Privacy Policy. These safeguards include:

• Contractual clauses: Data processing agreements and standard contractual clauses that impose binding data protection obligations on all third-party processors who receive transfers of personal data from bqji.
• Adequacy assessments: Prior to transferring data to any new third-party processor, bqji conducts a data transfer impact assessment to evaluate the adequacy of data protection standards in the recipient country or organisation.
• Encryption in transit: All international data transfers are conducted over encrypted channels using TLS 1.2 or higher, regardless of destination, to ensure data cannot be intercepted during transmission.
• Minimum data transfers: bqji applies a data minimisation principle to international transfers — only the data strictly necessary for the specified processing purpose is transferred to any third-party processor outside Bangladesh.

You may request information about the specific safeguards in place for any international transfer of your personal data by contacting [email protected] with the subject line "International Transfer Enquiry".

bqji reserves the right to update, amend, or replace this Privacy Policy at any time in order to reflect changes in applicable law, regulatory guidance, Platform functionality, or bqji's internal data practices. The "Last Updated" date at the top of this Policy will be revised whenever a material change is made.

Where a change to this Policy is material — meaning it significantly affects how bqji collects, uses, or shares your personal data — bqji will provide advance notice to registered players via the email address associated with their account, with a minimum notice period of 14 days before the change takes effect.

Non-material changes, such as corrections of typographical errors, clarifications of existing practices that do not alter their substance, or updates to contact information, may be made without advance notice. The revised Policy will be effective immediately upon publication at https://bqji.io/privacy-policy.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or need to report a data security concern, please contact the bqji data protection team using the details below. All contact information is provided as plain text — these are not clickable links.

• General Privacy Enquiries: [email protected] — subject line: "Privacy Enquiry"
• Data Access / Portability Request: [email protected] — subject line: "Data Rights Request — Access"
• Data Deletion Request: [email protected] — subject line: "Data Rights Request — Erasure"
• Data Correction Request: [email protected] — subject line: "Data Rights Request — Rectification"
• Underage Account Report: [email protected] — subject line: "Underage Account Report"
• Data Breach / Security Concern: [email protected] — subject line: "Security Concern"
• Support Hours: 24/7 via live chat on the Platform; email responses within 24 hours (Bangladesh Standard Time, BST UTC+6)

bqji is committed to resolving all privacy-related enquiries fairly, promptly, and with full transparency. Our data protection team will acknowledge your request within 48 hours and provide a substantive response within 30 calendar days. We value your trust and take every data rights request seriously.