Privacy Policy for brojeet

Information We Collect

brojeet collects personal information from users in order to provide a safe, personalised, and legally compliant betting and gaming experience. We collect data in three main ways: information you provide to us directly, information generated automatically through your use of the platform, and information obtained from trusted third-party sources as part of our verification processes.

1.1 Information You Provide Directly

When you register an account, make a deposit or withdrawal, contact our support team, or participate in a promotion, you may provide us with the following categories of personal data:

1.2 Information Collected Automatically

When you browse or use the brojeet platform, certain technical data is collected automatically through cookies, log files, and analytics tools:

• Device & Technical Data: IP address, browser type and version, operating system, device type (mobile/desktop), screen resolution, and language settings.
• Usage Data: Pages visited, games played, bets placed, session duration, click patterns, and navigation paths within the platform.
• Location Data: Approximate geographic location inferred from your IP address, used to apply regional access rules and present localised content.
• Cookie Data: Session identifiers, preference settings, and analytics tracking identifiers. See Section 4 (Cookies) for full details.

1.3 Information from Third Parties

We may receive supplementary identity and fraud-screening data from third-party KYC verification providers, payment processors (including bKash, Nagad, Rocket, and Upay), and fraud detection services. This information is used solely for the purposes of verifying your identity, processing transactions, and protecting the security of the platform.

How We Use Your Data

brojeet processes your personal data on several lawful bases depending on the specific purpose. We use your data to operate the platform, meet our legal obligations, protect the interests of our users, and — where you have given consent — to communicate promotional content. The table below summarises the primary purposes for which we process your data and the lawful basis for each.

We do not use your personal data to make fully automated decisions that produce significant legal effects without human review. Our responsible gaming monitoring systems may flag accounts for manual review, but a human team member will always make the final decision on any account-level action such as suspension or self-exclusion enforcement.

Data Sharing & Third Parties

brojeet does not sell or rent your personal data to third parties for their own independent marketing or commercial purposes. We share your data only in the limited and specific circumstances described below, and only to the extent necessary to fulfil the stated purpose.

3.1 Service Providers & Technology Partners

We work with carefully selected third-party service providers who process data on our behalf under strict contractual data processing agreements. These include:

• Payment Processors: bKash, Nagad, Rocket, Upay, Visa, and Mastercard — to process financial transactions.
• KYC & Identity Verification Providers: To verify user identity and age during account registration and before processing large withdrawals.
• Game Content Providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other licensed studios — limited technical session data is shared to facilitate game delivery.
• Analytics Providers: Anonymised usage data is shared with analytics platforms to help us understand user behaviour and improve the platform experience.
• Fraud Prevention Services: Risk-scoring data including device fingerprints and transaction patterns is shared with fraud detection partners.
• Cloud Infrastructure Providers: Our hosting and data storage partners operate under data processing agreements that include strict access controls and confidentiality obligations.

3.2 Legal Disclosure

We may disclose your personal data to competent legal authorities, regulators, or law enforcement agencies where we are required to do so by applicable law, court order, or regulatory directive. In such cases, we will disclose only the minimum data required to satisfy the legal obligation and, where permitted, will notify you of the disclosure.

3.3 Business Transfers

In the event of a merger, acquisition, or sale of substantially all assets of brojeet, your personal data may be transferred to the acquiring entity as part of that transaction. We will notify affected users prior to any such transfer and will ensure that the acquiring entity commits to honouring the privacy protections described in this policy.

Cookies & Tracking Technologies

brojeet uses cookies and similar tracking technologies to make the platform function correctly, to remember your preferences, and to understand how users interact with the site so we can continue improving it. A cookie is a small text file placed on your device by a web server. Cookies cannot execute programs or deliver viruses to your device.

4.1 Types of Cookies We Use

4.2 Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to refuse cookies, delete existing cookies, or receive a notification before a new cookie is set. Please note that disabling strictly necessary cookies may prevent the platform from functioning correctly and may prevent you from logging in to your account.

Instructions for managing cookies in commonly used browsers can typically be found in the browser's "Help" section. If you use a mobile browser on Android or iOS, consult your device's settings menu for cookie controls.

Data Retention

brojeet retains your personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply as a general guide:

• Account Data (identity, contact): Retained for the duration of your account plus 5 years following account closure, in line with standard anti-money laundering record-keeping requirements.
• Financial Transaction Records: Retained for a minimum of 5 years from the date of the transaction to satisfy financial record-keeping obligations.
• KYC Documents: Retained for 5 years following account closure or the completion of the last transaction, whichever is later.
• Communications Data (support chat, emails): Retained for 2 years from the date of the last interaction, for quality assurance and dispute resolution purposes.
• Analytics and Usage Data: Aggregated and anonymised after 24 months. Anonymised data may be retained indefinitely as it can no longer identify individual users.
• Marketing Preferences: Retained for as long as your account is active or until you withdraw consent, whichever is earlier.

After the applicable retention period has expired, your personal data will be securely deleted or anonymised so that it can no longer be associated with you as an individual. In cases where data is subject to an ongoing legal dispute, regulatory investigation, or account appeal, retention may be extended until the matter is fully resolved.

Data Security Measures

The security of your personal data is a core operational priority at brojeet. We implement a multi-layered security architecture to protect your information against unauthorised access, alteration, disclosure, or destruction.

• Transport Security: All data in transit between your device and our servers is encrypted using TLS 1.2 or higher (256-bit SSL). This includes account login, deposits, withdrawals, and support communications.
• Data at Rest: Personal data stored on our servers is encrypted at rest using AES-256 encryption. Financial data and identity documents are stored in isolated, access-controlled environments.
• Access Controls: Internal access to personal data is restricted to authorised staff on a strict need-to-know basis. All staff access is logged, audited, and subject to regular review.
• Two-Factor Authentication: We strongly recommend enabling two-factor authentication (2FA) on your brojeet account for an additional layer of login security.
• Penetration Testing: Our platform undergoes regular third-party security assessments and penetration testing to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: In the event of a confirmed data breach that affects your personal data, brojeet will notify affected users and relevant authorities within the timeframes required by applicable law.

Your Rights as a User

As a user of the brojeet platform, you have a number of rights with respect to your personal data. We are committed to honouring these rights promptly and without undue obstruction. To exercise any of the rights listed below, contact our support team at support@brojeet with the subject line "Data Rights Request" and include your registered account email address for identity verification.

• Right of Access: You have the right to request a copy of the personal data we hold about you. We will provide this in a commonly used, machine-readable format within a reasonable timeframe following identity verification.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it without undue delay.
• Right to Erasure ("Right to Be Forgotten"): You may request the deletion of your personal data where it is no longer necessary for the purpose it was collected, where you withdraw consent (if consent was the lawful basis), or where the data has been processed unlawfully. Note that we may retain certain data where required by law, such as financial transaction records.
• Right to Restrict Processing: You can request that we limit the way we use your personal data in certain circumstances — for example, while a rectification request is being assessed.
• Right to Data Portability: Where processing is based on your consent or contract performance and carried out by automated means, you have the right to receive your personal data in a structured, commonly used format.
• Right to Object: You have the right to object to processing based on our legitimate interests, including direct marketing. If you object to marketing communications, we will cease processing your data for that purpose immediately.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing emails), you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of any processing carried out before the withdrawal.

We aim to respond to all verified data rights requests within 30 calendar days. In cases of complexity or a high volume of requests, this period may be extended by up to an additional 60 days, with prior notification provided to the requesting user.

Changes to This Policy

brojeet reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or platform features. When we make material changes, we will update the "Last Updated" date at the top of this page and, where appropriate, notify registered users via email or an in-platform notification.

Your continued use of the brojeet platform following the posting of any revised Privacy Policy constitutes your acknowledgment of the changes. We encourage you to review this page periodically to stay informed about how we are protecting your personal information.

If you have any questions, concerns, or complaints about this Privacy Policy or about the way your personal data is handled by brojeet, please reach out to us:

• Email: support@brojeet (plain text — not a clickable link)
• Subject Line: "Privacy Policy Enquiry" or "Data Rights Request"
• Live Chat: Available 24/7 within the brojeet platform
• Response Time: Within 24 hours by email; typically under 2 minutes via live chat