Privacy Policy — How brojit Protects Your Data
Your privacy matters to us. This Privacy Policy explains exactly what personal information brojit collects from players in Bangladesh, why we collect it, how we use and store it, and what rights you hold over your own data. We are committed to handling your information with transparency and care.
How We Safeguard Your Privacy
brojit applies multiple layers of protection to ensure your personal data is handled responsibly, securely, and in accordance with your rights as a player.
SSL Encryption
All data transmitted between your device and the brojit platform is protected using industry-standard SSL/TLS encryption. Your login credentials, payment details, and personal information travel through a secure, encrypted channel at all times.
No Data Selling
brojit does not sell, rent, or trade your personal information to any third party for marketing purposes. Your data is used solely to operate your account, process transactions, fulfil legal obligations, and improve your experience on the platform.
KYC & Identity Control
We collect identity documents only to verify your age and identity as required for responsible gaming and anti-money laundering compliance. KYC documents are stored securely and accessed only by authorised compliance personnel.
Transparent Cookie Use
We use cookies only for session management, security, and platform analytics. We do not use behavioural tracking cookies from third-party ad networks. You may manage or withdraw your cookie preferences at any time through your browser settings.
Defined Retention Periods
We do not hold your data indefinitely. Retention periods are defined by the purpose for which data was collected and applicable legal requirements. Account data is held for the duration of your account relationship plus a defined post-closure period.
Your Rights Respected
You have the right to access, correct, or request deletion of your personal data at any time. Requests are handled by our support team within 30 days. We will confirm the action taken or explain why a request cannot be fulfilled in a given case.
1 Information We Collect
brojit collects personal information from you in a number of ways — directly when you register and use the platform, automatically as you interact with our services, and in some cases from third-party sources such as payment providers and identity verification services. The categories of information we collect are described in detail below.
1.1 Information You Provide Directly
When you create an account or interact with the brojit platform, you provide us with information including but not limited to:
- Registration data: Full legal name, date of birth, residential address in Bangladesh, email address, and mobile phone number.
- Identity verification documents: National Identity Card (NID), passport, or other government-issued identification documents required for KYC compliance.
- Payment information: Mobile Financial Service account details (bKash, Nagad, Rocket, Upay), bank account details, or card details as required to process deposits and withdrawals. Card numbers are not stored on our servers — they are processed directly through our payment partners' secure systems.
- Communications: Messages, queries, and other content you send to our support team via live chat or email.
- Responsible gaming preferences: Any deposit limits, time-out settings, or self-exclusion requests you submit through the platform.
1.2 Information Collected Automatically
When you access and use the brojit platform, we automatically collect certain technical and behavioural data, including:
- Device and browser data: IP address, device type, operating system, browser type and version, screen resolution, and language settings.
- Usage and activity data: Pages visited, games played, bets placed, session duration, click patterns, and navigation paths within the platform.
- Transaction logs: Records of all deposits, withdrawals, bonuses claimed, wagers placed, and game outcomes associated with your account.
- Cookies and session data: As described in Section 4 of this Policy.
1.3 Information from Third Parties
We may receive information about you from third parties in limited circumstances, including:
- Payment providers: Confirmation of transaction status, account holder name verification, and fraud signals from bKash, Nagad, Rocket, Visa, Mastercard, and partner banks.
- Identity verification services: Results of automated or manual identity checks performed against government databases as part of our KYC process.
- Game providers: Technical game session logs from studios such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi, used solely for dispute resolution and audit purposes.
| Data Category | Examples | Source | Required? |
|---|---|---|---|
| Identity Data | Name, date of birth, NID number | You / KYC provider | Yes — account registration |
| Contact Data | Email address, mobile number | You | Yes — account registration |
| Financial Data | bKash/Nagad account, bank details | You / payment provider | Yes — deposits & withdrawals |
| Technical Data | IP address, device type, browser | Automatic collection | Yes — security & fraud prevention |
| Usage Data | Games played, bets placed, session logs | Automatic collection | Yes — platform operation |
| Communications Data | Support chat transcripts, emails | You | When you contact support |
2 How We Use Your Information
brojit uses the personal information we collect for specific, defined purposes. We do not use your data in ways that are incompatible with the purposes described here. Our primary legal bases for processing your data are performance of a contract (operating your account), compliance with legal obligations, legitimate business interests, and — where required — your explicit consent.
2.1 Account Management & Service Delivery
The most fundamental use of your data is to create and maintain your brojit account, authenticate your identity when you log in, process your deposits and withdrawals, credit bonuses to your account, and deliver the gaming and betting services you have requested. Without this processing, we cannot operate your account.
2.2 Identity Verification & KYC Compliance
We are required to verify the identity and age of all players before processing withdrawals and at other compliance checkpoints. Your identity documents and personal data are used to complete these verification checks. This processing is necessary to comply with applicable anti-money laundering and responsible gaming obligations.
2.3 Fraud Prevention & Security
We use technical data, transaction logs, and behavioural patterns to detect, investigate, and prevent fraud, money laundering, bonus abuse, and other prohibited conduct. This includes automated screening of account activity against known risk indicators and, where necessary, manual review by our compliance team. These measures protect both the platform and its genuine players.
2.4 Customer Support
When you contact our support team, we use your account information and the content of your communications to respond to your queries, resolve disputes, and improve the quality of our support services. Support interactions are logged and may be reviewed for quality assurance and training purposes.
2.5 Platform Improvement & Analytics
Aggregated and anonymised usage data is used to understand how players interact with the platform, identify technical issues, optimise game performance, and develop new features. This analytics processing does not identify you personally — it uses anonymised or pseudonymised data sets.
2.6 Responsible Gaming Monitoring
We are committed to player welfare. We use your activity data, deposit history, and session patterns to identify potential signs of problem gambling and to apply any responsible gaming restrictions you have voluntarily set. Where our systems identify concerning patterns, our responsible gaming team may contact you proactively.
2.7 Marketing Communications
With your consent, we may send you promotional emails or SMS messages about new games, bonuses, seasonal offers (such as Eid promotions or BPL cricket specials), and platform updates. You may withdraw your marketing consent at any time by updating your account preferences or contacting support. Withdrawal of marketing consent does not affect the lawfulness of prior processing.
3 Data Sharing & Third Parties
brojit does not sell or rent your personal information to any third party. We share your data only in the limited circumstances described below, and only to the extent necessary to fulfil the stated purpose.
3.1 Payment Service Providers
To process your deposits and withdrawals, we share the minimum necessary financial and identity information with our payment partners, including bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, BRAC Bank, City Bank, Islami Bank, Sonali Bank, Visa, and Mastercard. These providers act as data processors on our behalf and are contractually required to use your data only for payment processing purposes.
3.2 Identity Verification Providers
Your identity documents and personal data may be shared with third-party KYC and anti-money laundering verification services to validate your identity during the account verification process. These providers are bound by strict confidentiality obligations and data protection standards.
3.3 Game Providers
To deliver casino and live dealer games, a pseudonymised player identifier and session token are shared with our game studio partners (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and others). These identifiers do not include your full name, payment details, or contact information. Game providers use this data only to deliver the game session and generate outcome records.
3.4 Legal & Regulatory Authorities
We may be required to disclose your personal information to law enforcement agencies, regulatory bodies, or other governmental authorities in response to a valid legal request, court order, or where we are legally obligated to report suspected criminal activity including money laundering or fraud. In such cases, we will disclose only what is legally required and will notify you unless we are legally prohibited from doing so.
3.5 Business Transfers
In the event that brojit undergoes a corporate restructuring, merger, acquisition, or sale of all or part of its assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and any resulting change to this Privacy Policy in advance of the transfer taking effect.
5 Data Retention & Storage
brojit retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. We do not retain data indefinitely. The table below summarises our standard retention periods by data category.
| Data Category | Retention Period | Reason |
|---|---|---|
| Account registration data | Duration of account + 5 years post-closure | AML and legal compliance requirements |
| Identity verification documents | Duration of account + 5 years post-closure | KYC and regulatory audit obligations |
| Transaction records | 7 years from date of transaction | Financial record-keeping and AML obligations |
| Support communications | 3 years from last interaction | Dispute resolution and quality assurance |
| Game session logs | 3 years from session date | Dispute resolution and game integrity audit |
| Marketing preferences | Until consent is withdrawn | Consent-based processing |
| Analytics data (anonymised) | Up to 24 months | Platform improvement; no personal identification |
5.1 Secure Deletion
When a retention period expires, personal data is either permanently deleted from our systems or irreversibly anonymised so that it can no longer be associated with any individual. Deletion is carried out on a scheduled basis and applies to both live databases and backup systems, subject to a reasonable backup rotation window of up to 90 days.
5.2 Storage Location
Your personal data is stored on secure servers operated by and for the brojit platform. All servers are protected by firewalls, intrusion detection systems, and access controls that restrict data access to authorised personnel only. Data at rest is encrypted using AES-256 encryption.
6 Your Privacy Rights
As a player on the brojit platform, you hold a number of rights in relation to the personal data we hold about you. These rights are described below. To exercise any of these rights, please contact our support team at . We will respond to all valid requests within 30 calendar days.
6.1 Right of Access
You have the right to request a copy of the personal data we hold about you. Upon a valid access request, we will provide you with a summary of the categories of data held, the purposes for which it is processed, the third parties with whom it has been shared, and the retention period applicable to each category.
6.2 Right to Rectification
If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it. You may also update certain details (such as your contact email or mobile number) directly through your account settings. Changes to identity data (name, date of birth) require supporting documentation for verification purposes.
6.3 Right to Erasure
In certain circumstances, you have the right to request that we delete your personal data — for example, where the data is no longer necessary for the purpose for which it was collected, or where you withdraw consent for consent-based processing. This right is not absolute: we may be required to retain certain data to comply with legal obligations (such as AML record-keeping), in which case we will explain the basis for retention when responding to your request.
6.4 Right to Restriction of Processing
You may request that we restrict the processing of your personal data in certain circumstances — for example, while you contest the accuracy of the data, or while an objection to processing is under review. During a restriction period, we will continue to store the data but will not actively process it beyond what is necessary for legal compliance.
6.5 Right to Object to Processing
You have the right to object to our processing of your personal data where that processing is based on our legitimate interests. If you object, we will cease processing unless we can demonstrate compelling legitimate grounds that override your interests. You may always object to processing for direct marketing purposes, and such objections will be honoured unconditionally.
6.6 Right to Withdraw Marketing Consent
Where we process your data for marketing purposes on the basis of your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal. To opt out of marketing communications, update your account preferences or contact support at .
7 Data Security Measures
brojit employs a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures are reviewed and updated regularly in line with evolving security standards.
7.1 Technical Safeguards
- SSL/TLS encryption: All data in transit between your browser and our servers is encrypted using TLS 1.2 or higher.
- AES-256 encryption at rest: Sensitive data stored on our servers, including identity documents and payment records, is encrypted at rest using AES-256 encryption.
- Firewall and intrusion detection: Our infrastructure is protected by enterprise-grade firewalls and continuously monitored intrusion detection systems.
- Access controls: Access to personal data is restricted on a strict need-to-know basis. All staff with data access undergo background checks and regular security training.
- Multi-factor authentication: Administrative access to data systems requires multi-factor authentication. We encourage players to enable any additional account security features available on the platform.
7.2 Organisational Safeguards
- All employees and contractors with access to personal data are bound by confidentiality obligations.
- We conduct regular internal security reviews and vulnerability assessments.
- Data access logs are maintained and reviewed regularly for anomalous activity.
- Incident response procedures are in place to address any data security events promptly.
7.3 Data Breach Notification
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, brojit will notify affected players without undue delay once the breach has been identified and assessed. The notification will describe the nature of the breach, the categories of data affected, the likely consequences, and the steps we are taking to address it.
8 Changes to This Policy
brojit reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, platform functionality, applicable laws, or regulatory requirements. When material changes are made, we will update the "Last updated" date at the top of this page and, where the changes are significant, notify registered players by email to the address on their account.
8.1 How to Stay Informed
We encourage you to review this Privacy Policy periodically to stay informed about how your data is being protected. The most current version of this Policy will always be available at brojit.net/privacy-policy. Your continued use of the platform following the publication of any updated Policy constitutes your acceptance of the revised terms.
8.2 Contact Us About Privacy
If you have any questions, concerns, or requests relating to this Privacy Policy or our data practices, please contact the brojit privacy and support team. Our team is available 24 hours a day, 7 days a week and can be reached via:
- Live chat: Available after login through the platform support icon.
- Email: — please include "Privacy Request" in the subject line for faster routing.
All support is provided in English and Bengali. We aim to respond to all privacy-related enquiries within 2 business days (Bangladesh Standard Time, UTC+6).
Your Privacy Is Protected — Enjoy the Platform
Now that you understand how brojit handles your data, explore our full range of games and betting markets. From cricket to slots, live dealer tables to Lucky Dice — all protected by the security standards outlined in this Policy.