Privacy Policy
At obdjil, protecting the personal data of every Bangladeshi player on our platform is a responsibility we take seriously. This Privacy Policy explains exactly what information we collect, how we use it, who we share it with, and the rights you hold over your own data.
SSL Encryption
All data transmitted between your browser and the obdjil platform is protected using industry-standard 256-bit SSL encryption. Your personal and financial information is never sent over unencrypted connections.
No Data Selling
obdjil does not sell, rent, or trade your personal information to third-party marketers or data brokers under any circumstances. Your data is used solely to operate and improve our platform and to comply with legal obligations.
Player Control
You retain the right to access, correct, and request deletion of your personal data at any time. Our support team processes data rights requests within 30 days of receipt — usually much faster for Bangladeshi players.
Transparent Cookie Use
We use cookies strictly for session management, security, and platform analytics. We do not deploy third-party advertising cookies or cross-site tracking pixels. Full details are in the Cookies section below.
Payment Data Protection
Your bKash, Nagad, Rocket, and Upay account details are handled with strict security protocols. We never store full mobile wallet credentials on our servers — payment verification is processed through encrypted channels only.
Defined Retention Periods
obdjil retains your personal data only as long as necessary to provide our services and meet legal obligations. Account data is held for a minimum of 5 years following account closure to satisfy anti-money-laundering requirements.
Information We Collect
obdjil collects personal data from you in several ways: directly when you register an account or interact with our platform, automatically when you browse and use the site, and from third parties such as payment processors and KYC verification services. The categories of personal data we collect are described in detail below.
1.1 Registration & Account Data
When you create an obdjil account, we collect the following information as part of the registration process:
- Full legal name as it appears on your government-issued identity document.
- Date of birth — collected to verify that you meet the 18+ age eligibility requirement.
- Residential address, including city (for example, Dhaka, Chittagong, Sylhet, Khulna, or Rajshahi), district, and postal code.
- Email address — used for account communications, transaction receipts, and security alerts.
- Mobile phone number — used for two-factor authentication and account recovery.
- Username and encrypted password.
1.2 KYC & Identity Verification Data
To comply with our anti-money-laundering obligations and to verify that all players are aged 18 or above, we collect the following verification documents when you submit a withdrawal request or when a compliance check is triggered:
- National Identity Card (NID) — the primary KYC document for Bangladeshi players.
- Passport biographical data page (if NID is unavailable).
- Proof of address: utility bill, bank statement, or mobile wallet statement dated within the last 90 days.
- Payment method verification: a screenshot or confirmation of the bKash, Nagad, Rocket, or Upay account used to deposit, confirming it is registered in your own name.
1.3 Financial Transaction Data
When you make a deposit or withdrawal on the obdjil platform, we collect and retain the following transactional records:
| Data Type | Purpose | Retention Period |
|---|---|---|
| Deposit amount, method, and timestamp | Transaction reconciliation, fraud detection | 7 years minimum |
| Withdrawal amount, method, and timestamp | Payment processing, AML compliance | 7 years minimum |
| Mobile wallet reference numbers (bKash, Nagad, Rocket, Upay) | Payment verification, dispute resolution | 7 years minimum |
| Account balance history | Regulatory compliance, player dispute resolution | 5 years post-closure |
1.4 Gaming & Betting Activity Data
We record all gaming and betting activity carried out on your obdjil account, including game titles played, bet amounts, game outcomes, session start and end times, and bonus credit usage. This data is used for account management, responsible gaming monitoring, and dispute resolution purposes.
1.5 Technical & Usage Data
When you visit the obdjil website, our servers automatically record the following technical information:
- IP address and approximate geographic location (country and city level).
- Browser type and version, operating system, and device type (desktop, mobile, tablet).
- Pages visited, time spent on each page, navigation path, and referring URL.
- Session identifiers and authentication tokens.
How We Use Your Data
obdjil processes your personal data on one or more of the following legal bases: performance of a contract with you (operating your account and processing transactions), compliance with a legal obligation (KYC, AML, age verification), legitimate interests of obdjil (fraud prevention, platform security, responsible gaming monitoring), and your consent where applicable (marketing communications). The specific purposes for which we process your data are detailed below.
- Account Management: Creating and maintaining your obdjil player account, verifying your identity and age at registration and during the KYC process, and processing your account settings and preferences.
- Transaction Processing: Executing deposit and withdrawal requests via bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Visa, and Mastercard. All financial processing requires access to your payment method and transaction data.
- Regulatory Compliance: Fulfilling our obligations under applicable anti-money-laundering standards, including transaction monitoring, suspicious activity reporting, and mandatory record-keeping. This is a legal obligation that cannot be opted out of.
- Responsible Gaming Monitoring: Using gaming activity data and account usage patterns to identify players who may be exhibiting signs of problem gambling behaviour, to proactively offer responsible gaming tools including deposit limits, cooling-off periods, and self-exclusion, and to enforce any player-requested restrictions.
- Fraud Prevention & Security: Monitoring login activity, transaction patterns, and game session data to detect and prevent fraudulent activity, unauthorised account access, and the abuse of promotional offers.
- Customer Support: Using your account data, transaction history, and communication records to respond to support queries, resolve disputes, and process complaints submitted to [email protected].
- Platform Improvement: Analysing aggregated, anonymised usage data to understand how players interact with the obdjil platform, identify technical issues, and improve the overall player experience for the Bangladeshi market.
- Marketing Communications: Sending promotional offers, bonus notifications, and seasonal promotions (for example, Eid, BPL season, T20 World Cup specials) to players who have opted in to marketing communications. You may withdraw this consent at any time by contacting support or updating your account preferences.
Data Sharing & Third Parties
obdjil does not sell your personal data to any third party. We share personal data with third parties only in the circumstances described below, and only to the minimum extent necessary to fulfil the stated purpose.
3.1 Payment Processing Partners
To process your deposit and withdrawal requests, obdjil shares the necessary transaction data with our payment processing partners. These partners include the mobile wallet infrastructure providers that power bKash, Nagad, Rocket, and Upay transactions in Bangladesh, as well as international card processors for Visa and Mastercard transactions. These partners are contractually bound to process your data solely for payment execution purposes and are prohibited from using it for any other purpose.
3.2 Identity Verification (KYC) Providers
To verify your identity and age as part of the KYC process, obdjil may use third-party identity verification service providers. These providers receive only the documents and data necessary to complete the verification and are contractually obligated to maintain strict data security standards. KYC data is not retained by third-party providers beyond the period necessary to complete the verification.
3.3 Game Software Providers
obdjil's platform integrates games and betting products from third-party software studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi, among others. These providers receive session and game result data necessary to operate their games correctly but do not receive your full personal profile, financial information, or identity documents.
3.4 Legal & Regulatory Disclosure
obdjil may disclose personal data to law enforcement agencies, regulatory authorities, or courts of competent jurisdiction where we are legally required to do so, or where such disclosure is necessary to protect the rights, safety, or property of obdjil, our players, or the public. We will notify affected players of any such disclosure where legally permitted to do so.
3.5 Business Transfers
In the event that obdjil undergoes a merger, acquisition, restructuring, or sale of all or part of its business assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and the privacy practices of the acquiring entity prior to the transfer taking effect where feasible.
Cookies & Tracking Technologies
The obdjil website uses cookies and similar tracking technologies to operate core platform functions, maintain your session security, and analyse how the platform is used. This section explains what cookies we use, why we use them, and how you can manage your cookie preferences.
4.1 What Are Cookies?
Cookies are small text files placed on your device by a website when you visit it. They allow the website to recognise your device on subsequent visits, maintain your session state, and store your preferences. Cookies are not executable programs and cannot carry viruses or malware.
4.2 Categories of Cookies Used by obdjil
| Cookie Category | Purpose | Can Be Disabled? |
|---|---|---|
| Strictly Necessary | Maintain your login session, prevent cross-site request forgery (CSRF), load-balance server requests. These are essential for the platform to function. | No — disabling these will prevent login and account access. |
| Functional | Remember your language preference, game lobby layout settings, and responsible gaming notification dismissal states. | Yes — disabling these will reset your preferences on each visit. |
| Analytics | Collect anonymised data on page views, navigation paths, game lobby usage, and device types to help improve the platform. Data is aggregated and not linked to your personal profile. | Yes — you may opt out via your browser settings. |
| Security | Detect unusual login patterns, prevent automated bot access, and flag suspicious transaction behaviour. | No — these are required for account security. |
4.3 Third-Party Cookies
obdjil does not deploy third-party advertising cookies, retargeting pixels, or social media tracking scripts on its platform. The only third-party cookies that may be set are those associated with the game software providers integrated into the obdjil platform (for example, Pragmatic Play and Evolution Gaming game launch environments). These cookies are strictly functional and are necessary for the games to operate correctly in your browser.
4.4 Managing Your Cookie Preferences
You may manage or disable non-essential cookies through your browser settings at any time. The process for managing cookies varies by browser; instructions for the most common browsers are available on the respective browser support pages. Please note that disabling strictly necessary or security cookies will impair your ability to log in and use the obdjil platform. obdjil does not respond to "Do Not Track" browser signals at this time, as there is no universally accepted standard for how such signals should be interpreted.
Data Retention
obdjil retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. The following retention periods apply to the main categories of data we hold.
- Active Account Data: For as long as your obdjil account remains open and active. This includes your registration details, account preferences, and gaming activity records.
- Financial Transaction Records: A minimum of 7 years following the date of each transaction, in accordance with internationally recognised anti-money-laundering record-keeping standards. This applies to all deposit and withdrawal records, including mobile wallet transaction reference numbers.
- KYC & Identity Documents: For a minimum of 5 years following the closure of your account, or for such longer period as may be required by applicable legal or regulatory obligations.
- Customer Support Communications: For a period of 3 years from the date of the last support interaction, to facilitate the resolution of any subsequent disputes or complaints relating to those interactions.
- Marketing Consent Records: For as long as your marketing consent remains active, plus 3 years following withdrawal of consent, to demonstrate compliance with applicable consent requirements.
- Technical Log Data (IP, session logs): For a maximum of 12 months, after which logs are either deleted or fully anonymised and aggregated for analytical purposes.
When personal data is no longer required under the applicable retention period, it is securely deleted or anonymised so that it can no longer be linked to an identifiable individual. Anonymised, aggregated data may be retained indefinitely for statistical and platform improvement purposes.
Security of Your Personal Data
obdjil implements a range of technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. These measures are reviewed and updated regularly to reflect current security best practices.
- Transport Encryption: All data transmitted between your browser and the obdjil platform is encrypted using TLS 1.2 or higher. HTTPS is enforced across the entire obdjil.net domain.
- Password Security: Account passwords are stored using industry-standard one-way hashing algorithms. obdjil staff cannot view your plain-text password and will never ask you to reveal it.
- Access Controls: Access to player personal data within obdjil's internal systems is restricted on a strict need-to-know basis. Staff with access to personal data are subject to confidentiality obligations.
- Payment Data Handling: Full mobile wallet credentials (bKash PINs, Nagad PINs) are never stored on obdjil servers. Transaction processing is handled through encrypted payment gateway integrations. obdjil does not store card numbers in full.
- Fraud Monitoring: Automated systems continuously monitor account activity for signs of unauthorised access, unusual transaction patterns, and other security anomalies. Suspicious activity triggers immediate alerts to our security team.
- Data Breach Response: In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of affected players, obdjil will notify affected individuals promptly and will take all reasonable steps to mitigate the impact of the breach.
While obdjil takes all reasonable steps to protect your personal data, no internet transmission or electronic storage system is completely secure. You are responsible for keeping your account login credentials confidential and for notifying obdjil immediately if you suspect your account has been compromised.
Your Privacy Rights
As a registered player on the obdjil platform, you hold the following rights with respect to your personal data. To exercise any of these rights, please contact our support team at [email protected] with the subject line "Privacy Rights Request — [Your Username]". We will acknowledge your request within 5 business days and will aim to complete it within 30 days of receipt.
- Right of Access: You have the right to request a copy of all personal data that obdjil holds about you. This includes your registration details, gaming history, transaction records, and any KYC documents on file.
- Right to Rectification: If any of the personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. Corrections to identity-related fields (name, date of birth) may require fresh KYC documentation to verify the change.
- Right to Erasure: You have the right to request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where the processing was unlawful. Please note that this right is subject to our legal retention obligations — financial and KYC records must be retained for the periods described in Section 5 and cannot be deleted on request during those retention periods.
- Right to Restrict Processing: You have the right to request that obdjil restricts the processing of your personal data in certain circumstances — for example, while you contest the accuracy of the data, or while a complaint about the processing is under investigation.
- Right to Data Portability: You have the right to receive a copy of the personal data you have provided to obdjil in a structured, commonly used, machine-readable format, and to request that this data be transferred to another controller where technically feasible.
- Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing carried out on the basis of obdjil's legitimate interests, in which case we will assess whether our interests are overridden by your rights and interests.
- Right to Withdraw Consent: Where processing is based on your consent (for example, marketing communications), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.
Policy Updates & Contact
obdjil reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable law, or improvements to our platform. When material changes are made to this Policy, registered players will be notified via the email address associated with their account or via a prominent notice on the obdjil platform prior to the changes taking effect.
- Continued use of the obdjil platform after a revised Privacy Policy takes effect constitutes your acceptance of the updated Policy. If you do not agree to the revised Policy, you should discontinue use of the platform and request account closure.
- Minor updates — including corrections to typographical errors or clarifications that do not materially alter your rights — may be made without prior notice. The effective date shown at the top of this page will be updated accordingly.
- Previous versions of this Privacy Policy are available on request by contacting [email protected].
Contact for Privacy Enquiries
If you have any questions about this Privacy Policy, wish to exercise any of your privacy rights, or have a concern about how obdjil handles your personal data, please contact our support team using the details below. All privacy-related enquiries are handled by our English-speaking support team and are treated as confidential.
This Privacy Policy was last reviewed and updated with effect from 1 January 2026. Players who registered prior to this date are encouraged to review this document in full and contact support if they have any questions about how the updated Policy applies to their account.
Your Data Is Safe With obdjil
Have questions about your account, our terms, or how to play responsibly? Our English-speaking support team is available 24/7.