Privacy Policy — demojili

demojili collects personal data through several channels: directly from you when you register, interact with, or transact on our platform; automatically through cookies and tracking technologies as you browse; and from trusted third-party sources used for identity verification and fraud prevention. The specific categories of data we collect are described below.

1.1 Registration and Account Data

When you create a player account on demojili, we collect the following information:

• Full legal name (as it appears on your government-issued identity document)
• Date of birth (for mandatory age-verification purposes)
• Residential address in Bangladesh
• Email address (used for account communications and verification)
• Mobile phone number (used for OTP-based two-factor authentication and SMS notifications)
• Username and encrypted password
• Preferred currency (Bangladeshi Taka, BDT)
• Preferred language (English or Bengali)

1.2 Identity Verification Data (KYC)

As part of our Know Your Customer (KYC) obligations and age-verification requirements, we may request and process copies of the following documents:

• National Identity Card (NID) issued by the Bangladesh Election Commission
• Valid passport (biographical data page)
• Bangladesh Driving Licence (front and back)
• Proof of residential address (utility bill, bank statement, or mobile financial service statement dated within 90 days)
• Proof of payment method ownership (screenshot or statement from bKash, Nagad, Rocket, Upay, or bank account)
• Source-of-funds documentation for high-value transactions where required by our anti-money-laundering (AML) policy

1.3 Financial Transaction Data

When you make a deposit or request a withdrawal, we collect and retain records of:

• Deposit and withdrawal amounts in BDT (৳)
• Payment method used (bKash, Nagad, Rocket, Upay, Visa, Mastercard, or bank transfer)
• Transaction timestamps and unique transaction reference numbers
• Partial payment-method identifiers (e.g., last four digits of a card, or the mobile number registered to your bKash/Nagad account)
• Running account balance history

1.4 Gaming Activity Data

• Games played, bet amounts, and game outcomes
• Session start and end times, session durations, and frequency of play
• Bonus claims, wagering progress, and loyalty points accumulated
• Sports betting selections, odds accepted, and bet settlement results
• Responsible gaming tool usage (deposit limits, session limits, self-exclusion requests)

1.5 Technical and Device Data

We automatically collect certain technical data when you access demojili:

• IP address and approximate geolocation (country and city level, derived from IP)
• Device type, operating system, and browser type and version
• Screen resolution and device language settings
• Referring URL (the page you navigated from to reach demojili)
• Pages visited, features accessed, and time spent on each section of the platform
• Cookie identifiers and session tokens (see Section 4 for full cookie details)

1.6 Communications Data

When you contact our support team via live chat, email, or any other channel, we retain records of the content and metadata of those communications for quality-assurance and dispute-resolution purposes. This includes the date and time of contact, the nature of the query or complaint, and any resolution reached.

demojili does not sell, rent, or trade your personal data. We share personal data with third parties only where strictly necessary for the operation of our platform or where required by law. The categories of third parties with whom data may be shared are described below.

3.1 Payment Service Providers

To process deposits and withdrawals, we share the minimum necessary financial data with our payment partners, which include bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard. These providers process your transaction data solely for the purpose of completing your payment instruction and are contractually prohibited from using your data for any other purpose.

3.2 Identity Verification and KYC Partners

We use trusted third-party identity verification services to assist with the processing of KYC documents and age verification. These partners act as data processors on our behalf and may only use the data shared with them for the specific verification task for which they have been engaged. All such partners are bound by strict data-processing agreements and are required to maintain equivalent standards of data security.

3.3 Game Software Providers

To deliver the games on our platform — including those supplied by Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — limited technical session data (such as a pseudonymous player identifier and game-session token) is shared with the relevant game studio. This data enables the game to function correctly and to record bet and win outcomes for settlement purposes. Game providers do not receive your full name, NID details, or payment information.

3.4 Regulatory and Law-Enforcement Authorities

demojili may be required by law, court order, or regulatory direction to disclose personal data to competent authorities. Where such a requirement arises, we will disclose only the data specifically requested and will, where legally permissible, notify the affected player of the disclosure request. We will not disclose data to any authority that does not have a valid legal basis for requesting it.

3.5 Professional Advisors

In connection with corporate transactions, legal proceedings, or audits, demojili may share personal data with lawyers, accountants, auditors, and other professional advisors who are subject to binding confidentiality obligations. Data shared in this context is used solely for the professional services purpose for which it was provided.

demojili retains personal data only for as long as is necessary for the purposes set out in this Privacy Policy, or as required to comply with applicable legal, regulatory, tax, or accounting obligations. The following retention schedules apply:

• Active account data: Retained for the full duration of your account's active status plus a minimum of 5 years after the date of account closure, to satisfy AML record-keeping requirements.
• KYC and identity verification documents: Retained for a minimum of 5 years following the completion of verification or account closure, in line with financial-crime compliance obligations.
• Financial transaction records: Retained for a minimum of 5 years from the date of each transaction, as required for audit and regulatory purposes.
• Gaming activity logs: Retained for a minimum of 3 years from the date of each gaming session, used for dispute resolution and responsible gaming monitoring.
• Customer support communications: Retained for 2 years from the date of the last communication in each support thread, for quality assurance and complaint-handling purposes.
• Marketing preferences and consent records: Retained for the duration of your account plus 3 years following account closure, as evidence of the consent basis on which communications were sent.
• Analytics and technical data: Retained in anonymised or aggregated form for up to 13 months, after which individual-level data is deleted or further anonymised.

Once the applicable retention period has expired, personal data is securely deleted or irreversibly anonymised. Anonymised data — from which it is not possible to identify an individual — may be retained indefinitely for statistical and research purposes without restriction.

As a player registered on demojili, you have a number of rights in relation to the personal data we hold about you. These rights are described below. To exercise any of these rights, please contact our Data Privacy team via live chat or by emailing support@demojili with the subject line "Data Rights Request".

We will respond to all data-rights requests within 30 days of receipt. In complex cases, this period may be extended by a further 60 days, in which case we will notify you of the extension and the reason for it within the initial 30-day window. We will not charge a fee for handling data-rights requests unless they are manifestly unfounded or excessive.

Please note that certain rights are subject to exceptions. For example, the right to erasure does not apply where demojili is required by law to retain the data in question — such as the 5-year AML record-keeping obligation described in Section 5. Where an exception applies, we will explain the reason in our response.

18+  demojili is an adult-only gambling platform. Our services are strictly intended for individuals who are 18 years of age or older. We do not knowingly collect, process, or retain personal data from anyone under the age of 18.

As part of our mandatory age-verification process, all new players must confirm their date of birth during registration, and we require KYC documentation confirming that the account holder is aged 18 or above before any real-money gaming or financial transactions are permitted. Accounts for which age verification cannot be completed will be suspended pending receipt of valid documentation.

If demojili becomes aware that a person under the age of 18 has registered an account or provided personal data to us, we will immediately suspend that account, delete all associated personal data, and reverse any financial transactions made from that account where technically and legally possible. If you believe that a minor may have created an account on demojili, please contact us immediately at support@demojili so that we can take prompt action.

We encourage parents and guardians to make use of parental control software to prevent minors from accessing online gambling platforms. For more information on responsible gambling tools available to players and their families, please visit our Responsible Gaming page.

If you have any questions about this Privacy Policy, wish to exercise any of your data-subject rights, or have a concern about the way in which demojili has handled your personal data, please contact us through any of the following channels:

• Email: support@demojili (subject line: "Privacy / Data Rights Request")
• Live Chat: Available directly on the demojili platform, 24 hours a day, 7 days a week
• Response Time: Average first response within 2–5 minutes via live chat; email responses within 1–3 business days (Bangladesh Standard Time, UTC+6)

Our Data Privacy team is staffed by agents fluent in both English and Bengali, ensuring that all privacy-related queries from players across Bangladesh are handled clearly and effectively. We are committed to acknowledging all data-rights requests within 5 business days and providing a substantive response within the statutory 30-day window.

demojili takes all privacy complaints seriously. If you are dissatisfied with our handling of a privacy concern after raising it with our support team, you have the right to escalate the matter to the relevant data-protection authority in your jurisdiction.