bjliv Privacy Policy — How We Protect Your Personal Data

1 Information We Collect

bjliv collects personal data from players through several distinct channels: directly from you when you register an account, make a deposit or withdrawal, submit a KYC document, contact customer support, or participate in a promotion; automatically from your device and browser when you interact with the platform; and in limited cases from third-party payment processors and identity verification services used to facilitate account operations.

The categories of personal data we collect are described in the table below. We collect only what is necessary for the specific purpose identified, and we do not retain data beyond the period required for that purpose.

bjliv does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, genetic data, or biometric data. We do not collect data from persons under the age of 18 knowingly, and any such data discovered will be deleted promptly.

• Lawful basis: All data collection is grounded in contractual necessity, legal obligation, or legitimate platform interest.
• No children's data: bjliv does not knowingly collect data from persons under 18. Discovered underage accounts are closed and their data deleted.
• Accuracy: You are responsible for ensuring that the personal data you provide to bjliv is accurate and kept up to date.

2 How We Use Your Data

bjliv processes your personal data only for specific, clearly defined purposes. We do not use your data for any purpose beyond those listed below without obtaining your explicit prior consent. For each use, we rely on one of the following lawful bases: performance of a contract (i.e., providing the services you signed up for), compliance with a legal obligation, protection of legitimate interests, or your express consent.

• Account management: Creating, maintaining, and securing your bjliv account, including identity verification and password recovery processes.
• Payment processing: Facilitating deposits and withdrawals via bKash, Nagad, Rocket, Upay, and bank transfer, and maintaining transaction records as required by financial regulations.
• KYC and AML compliance: Verifying your identity and monitoring account activity to meet know-your-customer and anti-money-laundering obligations.
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent transactions, multi-accounting, and unauthorised access to player accounts.
• Responsible gaming: Monitoring gameplay patterns to identify signs of problem gambling and, where necessary, applying deposit limits, cooling-off periods, or self-exclusion measures.
• Customer support: Responding to enquiries, resolving disputes, and providing technical assistance via email support at [email protected].
• Platform improvement: Analysing aggregated and anonymised usage data to improve game performance, user interface design, and the overall bjliv player experience.
• Promotional communications: Sending bonus offers, tournament notifications, and seasonal promotions to players who have opted in to receive marketing communications. You may opt out at any time.

3 Data Sharing & Third Parties

bjliv does not sell your personal data to any third party under any circumstances. We share your data only with a limited set of trusted service providers and regulatory bodies, and only to the extent strictly necessary for the purposes identified in this Privacy Policy. All third parties with whom we share data are required to handle it in accordance with applicable data protection standards and are prohibited from using it for any purpose beyond the specific service they provide to bjliv.

The categories of third parties who may receive your personal data are as follows:

• Payment processors: bKash, Nagad, Rocket (Dutch-Bangla Bank), Upay, and partner banks receive the minimum financial data required to process your deposit or withdrawal transaction. bjliv has no control over these providers' own privacy practices; please review their individual policies.
• Identity verification providers: Third-party KYC service providers receive identity documents and personal data solely for the purpose of verifying your identity and age in compliance with our platform obligations.
• Game software providers: Casino game providers such as Pragmatic Play, Evolution Gaming, Spribe, and Ezugi may receive anonymised session data (e.g., game round IDs, stake amounts) necessary for game delivery, RNG auditing, and dispute resolution. They do not receive your name, contact details, or payment information.
• IT and hosting providers: Cloud infrastructure and server hosting partners who provide the technical environment in which bjliv operates. These providers access data only as required for system maintenance and are bound by strict data processing agreements.
• Regulatory and law enforcement authorities: Where required by applicable law, court order, or regulatory instruction, bjliv will disclose personal data to the relevant authority. We will notify you of any such disclosure where we are legally permitted to do so.
• Anti-fraud networks: In cases of confirmed fraud or money laundering, anonymised fraud indicators may be shared with industry anti-fraud networks to protect other platforms and their players.

bjliv does not transfer your personal data to parties located outside your region except where required for the delivery of game content from internationally headquartered software providers. In all such cases, appropriate contractual safeguards are in place to ensure your data receives an equivalent level of protection.

4 Cookies & Tracking Technologies

bjliv uses cookies and similar lightweight tracking technologies on its website to ensure the platform functions correctly and to maintain a secure, personalised experience for each player. A cookie is a small text file placed on your device by our web server when you visit bjliv.net. Cookies do not contain executable code and cannot access other data stored on your device.

bjliv uses three categories of cookies:

• Strictly necessary cookies: These are essential for the platform to function. They maintain your login session, preserve your language and currency preferences, and enable secure page transitions during payment flows. These cookies cannot be disabled without breaking core platform functionality.
• Performance and analytics cookies: These cookies collect anonymised data about how players navigate the bjliv website — which pages are visited most frequently, how long sessions last, and where users encounter errors. This data is used exclusively to improve the platform. No personally identifiable information is collected via these cookies.
• Security cookies: These cookies support bjliv's fraud detection and account security systems by identifying unusual patterns of navigation or login behaviour that may indicate account compromise or bot activity.

bjliv does not deploy advertising cookies, retargeting pixels, social media tracking cookies, or any third-party behavioural profiling technology on its website. You will not be tracked across other websites based on your bjliv browsing activity.

You may control and delete cookies through your browser settings. Please note that disabling strictly necessary cookies will impair your ability to log in and use the bjliv platform. Disabling analytics or security cookies will not affect your ability to play but may reduce the quality of fraud protection applied to your account.

5 Data Retention & Storage

bjliv retains your personal data only for as long as it is necessary for the purpose for which it was collected, or as required by applicable law. Our standard data retention periods are set out below. After these periods have elapsed, data is either permanently deleted from our systems or anonymised so that it can no longer be attributed to any individual.

• Active account data: Retained for the full duration of your account's active status plus five years following account closure, in compliance with financial record-keeping obligations.
• Transaction records: Deposit, withdrawal, and bet history records are retained for a minimum of five years following each transaction to satisfy AML and financial audit requirements.
• KYC documents: Identity verification documents are retained for five years following account closure or the last transaction date, whichever is later, in accordance with financial crime prevention regulations.
• Customer support records: Support correspondence is retained for two years following the resolution of each ticket to facilitate follow-up and quality assurance reviews.
• Technical and usage logs: IP logs and session data are retained for 90 days, after which they are automatically purged from live systems and archived in anonymised form for aggregate analytics.
• Marketing preferences: Your opt-in or opt-out choice for marketing communications is retained for the lifetime of your account and updated immediately upon any change to your preference.

All personal data is stored on servers that are access-controlled, regularly audited, and protected by encryption at rest. bjliv's data storage practices are reviewed annually by the internal data protection team to ensure continued compliance with evolving security standards.

6 Your Privacy Rights

As a bjliv player, you hold a number of rights in relation to the personal data we hold about you. bjliv is committed to honouring these rights promptly and without charge. To exercise any of the rights described below, please submit a written request to [email protected] with the subject line "Privacy Rights Request" and include your registered account username and the specific right you wish to exercise. bjliv will respond within 14 calendar days of receiving your request.

• Right to access: You may request a copy of all personal data that bjliv holds about you. We will provide this in a clear, structured format within 14 days of your request.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Minor corrections (e.g., phone number updates) can be made by contacting support directly.
• Right to erasure: You may request that bjliv delete your personal data. This right applies where the data is no longer necessary for the purpose it was collected, where you withdraw consent (where consent was the lawful basis), or where the data has been unlawfully processed. Note that erasure requests cannot be fulfilled for data we are legally required to retain (e.g., AML transaction records).
• Right to restrict processing: In certain circumstances you may request that bjliv temporarily suspend the processing of your data while a rectification or erasure request is being reviewed.
• Right to data portability: You may request that bjliv provide your personal data in a machine-readable format (CSV or JSON) so that it can be transferred to another service provider of your choice.
• Right to withdraw marketing consent: If you have opted in to receive promotional communications from bjliv, you may withdraw that consent at any time by emailing [email protected] or by following the unsubscribe instructions in any marketing email you receive from us.
• Right to object: You may object to bjliv processing your data on the basis of legitimate interest. We will review your objection and cease processing unless we can demonstrate a compelling legitimate ground that overrides your rights.

7 Data Security Measures

bjliv employs a multi-layered security architecture to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security programme encompasses technical controls, organisational policies, and regular independent testing to ensure that data protection remains robust as threats evolve.

• TLS/SSL encryption in transit: All data transmitted between players and bjliv's servers is encrypted using TLS 1.2 or higher. HTTPS is enforced across every page of the bjliv platform without exception.
• Encryption at rest: Sensitive personal data stored in bjliv's databases — including identity documents and financial records — is encrypted at rest using AES-256 encryption.
• Access controls: Access to personal data is restricted on a strict need-to-know basis using role-based access control (RBAC). All staff access to player data is logged and audited.
• Two-factor authentication (2FA): bjliv strongly encourages all players to enable 2FA on their accounts. Staff access to internal systems containing personal data requires mandatory 2FA without exception.
• Penetration testing: bjliv's platform and data infrastructure undergo regular penetration testing by independent security professionals to identify and remediate vulnerabilities before they can be exploited.
• Incident response: bjliv maintains a documented data breach response procedure. In the event of a breach affecting player data, affected players will be notified by email within 72 hours of bjliv becoming aware of the incident, along with details of the data affected and the steps taken to contain the breach.
• Staff training: All bjliv staff with access to personal data undergo mandatory data protection training upon joining and annually thereafter. Phishing simulation exercises are conducted regularly to maintain staff vigilance.

While bjliv takes every reasonable precaution to secure your personal data, no internet-based platform can guarantee absolute security. Players are encouraged to maintain strong, unique passwords for their bjliv account, enable 2FA, and avoid accessing their account over unsecured public Wi-Fi networks. If you suspect your account has been compromised, contact [email protected] immediately.

8 Policy Updates & Contact

bjliv reviews this Privacy Policy at least once every twelve months and whenever a material change to our data processing practices occurs. When we make substantive updates — such as adding a new category of data collection, introducing a new third-party service provider, or changing our retention periods — we will notify all registered players via the email address associated with their account at least 14 days before the change takes effect. The "Last Updated" date at the top of this document will also be revised to reflect the effective date of the new version.

Minor updates that do not materially affect players' rights — such as correcting typographical errors, clarifying existing practices without changing them, or updating formatting — may be made without individual notification, though the "Last Updated" date will be revised accordingly. We recommend reviewing this Privacy Policy periodically to stay informed of how bjliv protects your data.

Your continued use of the bjliv platform following the effective date of any revised Privacy Policy constitutes your acknowledgement of the updated terms. If you do not agree to the revised policy, you should cease using the platform and request account closure as described in the Terms & Conditions.

For any questions, concerns, or requests relating to this Privacy Policy or bjliv's data protection practices, please contact our data protection team. All privacy-related enquiries are handled by a dedicated member of our compliance team and will receive a response within 14 calendar days.

• Policy review cycle: This Privacy Policy is reviewed and updated at least annually or whenever practices materially change.
• Notification of changes: Material changes are communicated via email to registered players at least 14 days before they take effect.
• Response time: Privacy enquiries and data rights requests are responded to within 14 calendar days of receipt.
• Contact method: Written requests only, submitted to [email protected]. Phone requests for data access cannot be accepted for security reasons.