Privacy Policy — brojit

1.1 Identity and Contact Data

• Full legal name as it appears on official identification documents
• Date of birth (to verify that you meet the 21+ age requirement)
• Residential address, including city, district, and postal code
• Email address used for account registration and communications
• Mobile phone number used for account security and notifications
• Copies of government-issued identity documents (e.g., National ID card, passport) submitted during KYC verification

1.2 Financial and Transaction Data

• Mobile banking account numbers or wallet identifiers for bKash, Nagad, Rocket, and Upay
• Bank account details for Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, and similar institutions
• Card details (card type, last four digits) for Visa and Mastercard transactions — full card numbers are never stored by brojit
• Deposit and withdrawal amounts, dates, and transaction reference numbers
• Account balance history and betting or wagering activity records

1.3 Technical and Usage Data

• IP address and approximate geographic location at the time of login or transaction
• Device type, operating system, browser type, and version
• Pages visited, time spent on each page, and navigation paths through the platform
• Game sessions played, bet amounts, and outcomes (retained for fairness auditing purposes)
• Login timestamps and session duration records
• Error logs and crash reports generated during your use of the platform

1.4 Communications Data

• Content of emails, live chat transcripts, and other communications sent to our support team
• Records of complaints or disputes raised through the platform
• Records of your marketing communication preferences and opt-in or opt-out history

2.1 Account Management and Service Delivery

We use your identity and contact data to create and maintain your account, verify your eligibility to use the platform, process deposits and withdrawals, deliver your betting and gaming activity, and provide customer support when you contact us.

2.2 Identity Verification and Fraud Prevention

As part of our Know Your Customer (KYC) obligations and our commitment to preventing fraud and money laundering, we use your identity documents and financial data to verify that you are who you claim to be, that your funds are from legitimate sources, and that your account is not being used for any unlawful purpose. This processing is a necessary condition of providing the service.

2.3 Responsible Gaming Monitoring

We analyse your gameplay patterns, deposit frequency, session duration, and account activity to identify potential signs of problem gambling behaviour. Where such signs are identified, we may take proactive steps — including contacting you directly, applying account restrictions, or triggering a responsible gaming review — in order to protect your wellbeing. This processing is carried out in your vital interests and in the public interest.

2.4 Platform Security and Integrity

Technical and usage data — including IP addresses, device fingerprints, and login records — is processed to detect and prevent unauthorised access, account takeover attempts, bot activity, and other security threats. This data is also used to investigate any suspected breach of our Terms & Conditions.

2.5 Marketing and Promotional Communications

With your consent, we may use your contact data and gameplay history to send you personalised promotional offers, bonus notifications, and news about new games or features on the brojit platform. You may withdraw your consent to receive marketing communications at any time by contacting our support team at [email protected]. Withdrawal of marketing consent does not affect the lawfulness of processing carried out prior to that withdrawal.

2.6 Legal and Regulatory Compliance

We may process and retain your personal data to the extent necessary to comply with applicable laws, respond to lawful requests from competent authorities, and to establish, exercise, or defend legal claims arising from your use of the platform.

2.7 Platform Improvement and Analytics

Aggregated and anonymised usage data is analysed to understand how players interact with the platform, identify areas for improvement, test new features, and measure the effectiveness of our promotional campaigns. This data cannot be used to identify any individual player.

3.1 Payment Processors

To process your deposits and withdrawals, we share the minimum necessary financial data with our payment partners, including bKash, Nagad, Rocket, Upay, and card processing networks (Visa, Mastercard). These providers process your data solely for the purpose of executing your requested transaction and are contractually bound to protect your data in accordance with applicable standards.

3.2 Game Content Providers

Game studios whose content is available on the brojit platform — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Ezugi, and Spribe — may receive technical identifiers (such as a session token or anonymised player ID) necessary to run their games. These providers do not receive your full name, contact details, or financial data unless a specific integration requires it, in which case a data processing agreement is in place.

3.3 Identity Verification Services

We use accredited third-party KYC and identity verification providers to assist in verifying the documents you submit. These providers process your data on our behalf and are bound by strict confidentiality and data processing obligations. They retain your data only for as long as is necessary to complete the verification process.

3.4 Legal and Regulatory Authorities

We may disclose your personal data to law enforcement agencies, regulatory bodies, or other competent authorities where we are required to do so by law, by court order, or where we have a good-faith belief that such disclosure is necessary to prevent fraud, protect national security, or protect the safety of any person. We will notify you of such disclosures where we are legally permitted to do so.

3.5 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of the brojit business, your personal data may be transferred to the relevant successor entity as part of that transaction. You will be notified of any such transfer and of any material change to the terms under which your data is held, with a reasonable period to object before the transfer takes effect.

4.1 What Are Cookies?

Cookies are small text files stored on your device when you visit a website. They help the site remember your preferences, maintain your login session, and collect anonymised analytics data. brojit uses cookies and similar tracking technologies — including local storage and session tokens — to keep the platform functioning correctly and to improve your experience.

4.2 Types of Cookies We Use

• Essential Cookies: Required for the platform to function. These include session authentication tokens that keep you logged in and security cookies that protect against cross-site request forgery. These cookies cannot be disabled without breaking core platform functionality.
• Analytics Cookies: Used to collect anonymised information about how visitors use the platform, which pages are visited most frequently, and where errors occur. This data helps us improve the platform over time.
• Preference Cookies: Store your display preferences, such as language settings and notification preferences, so you do not need to re-enter them on each visit.
• Fraud Prevention Cookies: Help us detect suspicious activity, such as login attempts from unfamiliar devices or locations, and protect your account from unauthorised access.

4.3 Managing Cookies

You may manage or delete cookies through your browser settings at any time. Please note that disabling essential cookies may prevent you from logging in or using core features of the brojit platform. Disabling analytics or preference cookies will not affect your ability to bet or play games. We do not use third-party advertising cookies or cross-site tracking cookies of any kind.

brojit retains your personal data for as long as your account remains active and for a defined period after account closure, as set out below:

• Account and Identity Data: Retained for a minimum of five (5) years following account closure to satisfy our anti-money laundering and fraud prevention obligations.
• Financial Transaction Records: Retained for a minimum of five (5) years following the date of each transaction in accordance with standard financial record-keeping requirements.
• Gameplay and Betting Records: Retained for three (3) years following the date of each session for fairness auditing and dispute resolution purposes.
• Support Communications: Retained for two (2) years following the closure of each support ticket or complaint, unless the matter involves an ongoing legal dispute.
• Marketing Preference Records: Retained for the duration of your account and for one (1) year following account closure as evidence of your consent history.
• Technical and Usage Logs: Retained for twelve (12) months on a rolling basis, after which they are anonymised or deleted.

Where data is no longer required for any of the above purposes, it will be securely deleted or anonymised so that it can no longer be linked to you as an individual.

🔍 Right of Access

You have the right to request a copy of the personal data we hold about you, along with information about how it is being used, who it has been shared with, and how long it will be retained.

✏️ Right to Rectification

If any of the personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it. You may also update certain details directly through your account settings page.

🗑️ Right to Erasure

You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn your consent, or where the data has been processed unlawfully. This right is subject to our obligations to retain certain data for legal and regulatory compliance purposes, as described in Section 5.

⏸️ Right to Restrict Processing

You have the right to request that we restrict the processing of your personal data in certain circumstances — for example, while a dispute about the accuracy of the data is being resolved, or while you are objecting to our use of the data for a particular purpose.

📦 Right to Data Portability

Where processing is based on your consent or on the performance of a contract, you have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format so that it can be transferred to another service provider if you wish.

🚫 Right to Object

You have the right to object to the processing of your personal data for marketing purposes at any time, with immediate effect. You also have the right to object to processing carried out on the basis of our legitimate interests, though we may continue such processing where we can demonstrate compelling legitimate grounds that override your interests.

brojit takes the security of your personal data seriously. We implement a range of technical and organisational measures to protect your data against unauthorised access, accidental loss, alteration, or disclosure. These measures include, but are not limited to:

• SSL/TLS encryption for all data in transit between your device and our servers
• Encryption of sensitive data at rest, including stored passwords and financial identifiers
• Role-based access controls that limit staff access to personal data on a need-to-know basis
• Regular internal security reviews and vulnerability assessments
• Automatic session timeout features to protect inactive logged-in accounts
• Two-factor authentication options available to all registered players
• Monitoring systems that detect and alert on unusual login activity or transaction patterns

Despite these measures, no data transmission over the internet or data storage system can be guaranteed to be 100% secure. If you become aware of any actual or suspected security breach affecting your account, please notify us immediately at [email protected] so that we can take prompt action.

The brojit platform is strictly for individuals aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. During the registration process, all users are required to confirm that they meet the minimum age requirement. Where we have reasonable grounds to believe that a registered user is under 21, we will suspend the account immediately, initiate a verification process, and delete any personal data collected if the age restriction is confirmed to have been breached.

Parents and guardians are encouraged to use parental control software to prevent minors from accessing online gambling platforms. If you believe that a minor has registered an account on brojit using false information, please contact us immediately at [email protected] so that we can investigate and take the necessary action.

brojit reserves the right to update or amend this Privacy Policy at any time to reflect changes in our practices, legal obligations, or the services we offer. The most current version of this Policy will always be available at brojit.app/privacy-policy, and the date of the most recent update will be indicated at the top of the document.

Where changes to this Policy are material — for example, where we introduce a new purpose for processing your data or a new category of data sharing — we will take reasonable steps to bring these changes to your attention, such as by displaying a notice on the platform or by sending a notification to your registered email address. Continued use of the platform following the publication of an updated Policy constitutes your acceptance of the changes.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way in which brojit processes your personal data, please contact our support team using the details below. We are available around the clock to assist you.

• Email: [email protected] (plain text — not a clickable link)
• Support Hours: 24 hours a day, 7 days a week, Bangladesh Standard Time (BST, UTC+6)
• Response Time: We aim to respond to all privacy-related queries within 48 hours

When submitting a data rights request, please include your registered account username and a brief description of your request so that we can locate your records and respond efficiently. We may ask you to provide proof of identity before processing certain requests, to ensure that data is not disclosed to an unauthorised person.