beje Privacy Policy

1 Data We Collect

beje collects personal data through several channels: directly from you when you register an account or interact with the platform, automatically through your use of the website, and — in limited circumstances — from trusted third-party service providers who assist in the delivery of our services. The categories of personal data we collect are described in detail below.

1.1 Registration & Identity Data

When you create a beje account, we collect the following information as part of the registration process:

• Full legal name — as it appears on your government-issued identity document.
• Date of birth — to verify that you meet the 18+ age requirement mandatory for all beje players.
• Residential address — including district, city (e.g., Dhaka, Chittagong, Sylhet, Khulna), and postal code.
• Email address — used for account communications, transaction notifications, and support correspondence.
• Mobile phone number — used for account verification and, where applicable, linked to bKash or Nagad payment accounts.
• Username and encrypted password — your login credentials; passwords are stored using one-way hashing and are never readable by beje staff.

1.2 Identity Verification (KYC) Data

As part of our Know Your Customer (KYC) process — which is applied to all registered players in accordance with responsible gaming and anti-money laundering best practices — beje may request copies of the following documents:

• National ID Card (NID) — the primary accepted identity document for Bangladeshi players.
• Passport — valid Bangladeshi or international passport.
• Proof of address — a utility bill, bank statement, or other official document issued within the last three months confirming your registered residential address.
• Proof of payment method — confirmation that the bKash, Nagad, Rocket, Upay, or bank account used for deposits is registered in your name.

1.3 Financial & Transaction Data

beje records all financial activity associated with your account, including:

• Deposit amounts, dates, and payment methods (bKash, Nagad, Rocket, Upay, bank transfer, card).
• Withdrawal requests, amounts, processing dates, and destination payment accounts.
• Bonus credits, wagering activity, and redemptions via the Rewards programme.
• Taka (৳) balances, transaction history, and any adjustments made by beje compliance or support teams.

beje does not store full card numbers or mobile banking PINs. Payment processing is handled by accredited third-party payment processors; beje retains only the transaction reference data necessary for account management.

1.4 Gaming & Behavioural Data

beje automatically records data related to your use of games and platform features, including:

• Game sessions: which games were played, when, for how long, and with what stake amounts.
• Sports betting records: markets wagered on, odds accepted, settlements received.
• Session duration and frequency data — used by our responsible gaming team to identify patterns that may indicate problem gambling behaviour.
• Responsible gaming settings you have applied to your account, including deposit limits, cooling-off periods, and self-exclusion status.

1.5 Technical & Device Data

When you access the beje platform, our servers automatically log certain technical information:

Data Type	Purpose
IP address	Fraud detection, geographic access controls, security logging
Browser type & version	Platform compatibility optimisation
Device type & operating system	Mobile/desktop experience optimisation
Referring URL	Marketing attribution and affiliate tracking
Pages visited & click paths	UX improvement, funnel analysis
Session timestamps	Security auditing, responsible gaming monitoring

1.6 Communications Data

When you contact beje's support team — whether by email or live chat — we retain records of that correspondence. This includes the content of your messages, the date and time of contact, and any resolution actions taken by our support staff. These records are used to resolve disputes, improve service quality, and maintain an audit trail of player interactions.

2 How We Use Your Data

beje processes your personal data only for specific, defined purposes. We rely on one of the following legal bases for each processing activity: performance of a contract (operating your account), compliance with a legal obligation, protection of legitimate interests, or your explicit consent where required.

Primary Purposes

• Account creation and management — to register your account, verify your identity and age, and maintain the ongoing operation of your beje player account.
• Payment processing — to process deposits and withdrawals in Bangladeshi Taka (৳) via your chosen payment method, and to maintain accurate financial records.
• Game delivery — to provide access to casino games, live dealer tables, sports betting markets, poker, and crash games offered on the beje platform.
• Customer support — to respond to your enquiries, resolve disputes, and provide technical assistance via email at [email protected].
• Responsible gaming monitoring — to track session and wagering patterns that may indicate problem gambling behaviour, and to apply responsible gaming tools (deposit limits, self-exclusion) where requested or required.
• Fraud prevention and security — to detect, investigate, and prevent fraudulent activity, money laundering, bonus abuse, and unauthorised account access.
• Legal compliance — to fulfil obligations under applicable anti-money laundering, know-your-customer, and data protection frameworks.

Secondary Purposes (with Your Consent)

• Marketing communications — with your explicit consent, beje may send you promotional emails about new games, bonuses, seasonal offers (such as Eid promotions, Pohela Boishakh specials, BPL cricket season offers), and Rewards programme updates. You may withdraw this consent at any time by using the unsubscribe link in any marketing email or by contacting [email protected].
• Platform analytics and improvement — aggregate, anonymised behavioural data is used to improve the beje website, game lobby, payment flow, and overall user experience. This data cannot be used to identify individual players.

3 Cookies & Tracking

beje uses cookies and similar tracking technologies to operate the platform, remember your preferences, maintain your login session, and gather aggregate analytics data. A cookie is a small text file stored on your device by your web browser when you visit a website.

Types of Cookies We Use

Cookie Type	Purpose	Retention
Strictly Necessary	Session management, login authentication, security tokens, payment flow continuity	Session / up to 24 hours
Functional	Language preference, game lobby layout, responsible gaming reminder settings	Up to 12 months
Analytics	Aggregate page view counts, navigation paths, device type distribution — used to improve the platform; data is anonymised	Up to 24 months
Marketing / Attribution	Affiliate referral tracking, campaign performance measurement — only placed with your consent	Up to 30 days

Managing Your Cookie Preferences

You may control and manage cookie settings through your web browser. Most modern browsers allow you to block all cookies, block third-party cookies only, or delete cookies that have already been stored on your device. Please note that blocking strictly necessary cookies will prevent you from logging in to your beje account and accessing platform features.

Instructions for managing cookies in the most common browsers used by Bangladeshi players:

• Google Chrome — Settings → Privacy and Security → Cookies and Other Site Data.
• Mozilla Firefox — Settings → Privacy & Security → Cookies and Site Data.
• Microsoft Edge — Settings → Cookies and Site Permissions → Cookies and Site Data.
• Safari (iOS / macOS) — Settings → Safari → Privacy & Security.
• Samsung Internet — Settings → Privacy → Sites and Downloads → Block Cookies.

4 Data Sharing

beje does not sell, rent, or otherwise commercially transfer your personal data to any third party. We share personal data only in the limited circumstances described below, and only to the extent strictly necessary for the stated purpose.

Service Providers

beje works with a small number of trusted third-party service providers who process personal data on our behalf under strict contractual data processing agreements. These providers include:

• Payment processors — bKash, Nagad, Rocket, Upay, and banking partners process transaction data to facilitate deposits and withdrawals in Bangladeshi Taka.
• KYC / identity verification providers — third-party verification services that assist in validating identity documents and conducting anti-money laundering checks.
• Game content providers — certified studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi supply game content to beje; these providers may process session data for game integrity and fairness certification purposes.
• Platform infrastructure providers — hosting, content delivery, and database services that underpin the beje platform's technical operation.

All service providers are selected on the basis of their data security standards and are contractually prohibited from using your personal data for any purpose other than the services they provide to beje.

Legal & Regulatory Disclosure

beje may disclose your personal data to competent authorities, regulators, or law enforcement bodies where required to do so by applicable law, court order, or regulatory requirement. In such cases, beje will disclose only the minimum personal data necessary to satisfy the legal obligation and will, where legally permissible, notify you of such disclosure.

Business Transfers

In the event that beje undergoes a merger, acquisition, or sale of all or a substantial portion of its assets, personal data held about registered players may form part of the transferred assets. In such an event, beje will ensure that the acquiring party is bound by privacy obligations no less protective than those set out in this Privacy Policy, and will notify affected players via email prior to any such transfer taking effect.

5 Data Security

beje takes the security of your personal data seriously and implements a layered set of technical and organisational measures to protect it against unauthorised access, accidental loss, disclosure, alteration, or destruction.

Technical Measures

• TLS/SSL encryption — all data transmitted between your browser and beje's servers is encrypted using Transport Layer Security (TLS). Look for the padlock icon in your browser's address bar when visiting beje.app.
• Encryption at rest — sensitive data including identity documents, payment records, and account credentials are encrypted in our database infrastructure using strong encryption standards.
• Password hashing — player passwords are stored as irreversible cryptographic hashes. beje staff cannot read your password; if you forget it, it must be reset rather than retrieved.
• Access controls — access to personal data within beje's systems is restricted to authorised personnel whose roles require it, governed by role-based access control policies and regular access reviews.
• Intrusion detection — beje's platform is monitored around the clock for suspicious activity patterns, unauthorised access attempts, and potential security incidents.

Organisational Measures

• Staff who handle personal data undergo training on data protection obligations and beje's internal privacy policies.
• Third-party service providers with access to personal data are subject to data processing agreements that impose security obligations consistent with this Privacy Policy.
• Regular security assessments and penetration testing are conducted on beje's platform infrastructure.

Data Breach Response

In the event of a personal data breach that poses a risk to the rights of registered players, beje will take immediate steps to contain the breach and assess its scope. Affected players will be notified without undue delay where the breach is likely to result in a high risk to their personal rights or freedoms. The notification will describe the nature of the breach, what data was affected, the likely consequences, and the measures beje has taken or proposes to take to address it.

If you believe your beje account has been compromised or you have observed suspicious activity, please contact us immediately at [email protected].

6 Your Privacy Rights

As a registered player on beje, you hold a set of rights in relation to the personal data we hold about you. beje is committed to honouring these rights in a timely and transparent manner. To exercise any of the rights described below, please contact [email protected] with the subject line "Privacy Rights Request" and a description of the right you wish to exercise.

Right of Access

You have the right to request a copy of the personal data beje holds about you. We will provide this in a commonly used, machine-readable format within a reasonable timeframe following verification of your identity. There is no charge for a first access request; subsequent requests within a 12-month period may be subject to a reasonable administrative fee.

Right to Rectification

If any personal data held on your beje account is inaccurate or incomplete, you have the right to request that it be corrected. For routine account details (address, phone number), you may be able to update these directly through your account settings panel. For identity-related corrections that affect your KYC status, please contact [email protected].

Right to Erasure

You may request the deletion of your personal data where: the data is no longer necessary for the purposes for which it was collected; you withdraw consent (where processing was based on consent); or you object to processing and there are no overriding legitimate grounds for us to continue. Please note that beje is subject to legal obligations to retain certain financial and KYC records for defined minimum periods; in such cases, the right to erasure may be limited to the extent of those obligations.

Right to Data Portability

Where beje processes your personal data on the basis of your consent or for the performance of your player account contract, and where that processing is carried out by automated means, you have the right to receive a copy of your data in a structured, commonly used, machine-readable format and to transmit it to another service provider.

Right to Object to Marketing

You have the right to object to receiving direct marketing communications from beje at any time. You may exercise this right by clicking the unsubscribe link in any marketing email, by updating your communication preferences in your account settings, or by contacting [email protected]. beje will action opt-out requests within three business days.

Right to Withdraw Consent

Where beje processes your personal data based on your explicit consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal. Withdrawing consent for essential processing — such as KYC verification — may result in restrictions on your ability to use certain platform features.

7 Data Retention

beje retains personal data for the period necessary to fulfil the purposes described in this Privacy Policy and to comply with applicable legal obligations. The specific retention periods applied to different categories of data are set out below.

Data Category	Retention Period	Basis
Account registration data	Duration of account + 5 years after closure	Legal obligation, dispute resolution
KYC identity documents	Duration of account + 5 years after closure	AML compliance obligations
Financial transaction records	Duration of account + 7 years after closure	Financial record-keeping obligations
Gaming session data	Duration of account + 3 years after closure	Responsible gaming audit, dispute resolution
Support correspondence	3 years from last interaction	Service quality, dispute audit trail
Marketing consent records	Until consent withdrawn + 1 year	Consent audit trail
Analytics data (anonym ised)	Up to 24 months on a rolling basis	Platform improvement

When a retention period expires, beje will securely delete or irreversibly anonymise the personal data in question. Anonymised data — which cannot be used to identify any individual — may be retained indefinitely for aggregate statistical analysis and platform improvement purposes.

Account Closure and Data

If you choose to close your beje account, we will initiate the data retention wind-down process described in the table above. During the applicable retention periods following closure, your data will remain accessible only to authorised compliance and legal personnel and will not be used for any operational purpose such as marketing, game delivery, or customer support (except in relation to pre-closure disputes).

To request account closure, please contact [email protected] with the subject line "Account Closure Request". Please note that accounts with an outstanding balance, unresolved bonus wagering requirements, or active self-exclusion periods may be subject to additional process steps before closure can be finalised.

8 Contact & Complaints

beje is committed to resolving any privacy-related concerns promptly and transparently. If you have a question about this Privacy Policy, wish to exercise any of your data rights, or believe that beje has not handled your personal data in accordance with this Privacy Policy, please contact us using the details below.

Privacy Contact

Complaints Process

If you are not satisfied with beje's response to a privacy complaint, you have the right to escalate your complaint to the relevant data protection authority in your jurisdiction. beje encourages players to contact us directly in the first instance so that we have the opportunity to resolve the matter internally before escalation.

Updates to This Privacy Policy

beje reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform services. When material changes are made, beje will:

• Update the "Last Updated" date at the top of this Privacy Policy.
• Send a notification email to all registered players with an account email address on file.
• Display a prominent notice on the beje platform for a minimum of 14 days following the update.

Your continued use of the beje platform following the effective date of an updated Privacy Policy constitutes your acknowledgement of the revised terms. If you do not agree with material changes to this Privacy Policy, you have the right to close your account by contacting [email protected] before the updated policy takes effect.