Privacy Policy — borojet

1 Data Controller & Scope

This Privacy Policy applies to borojet ("we", "us", "our", "the Platform"), the operator of the online casino and sports betting website accessible at borojet. borojet acts as the data controller in respect of all personal data collected from users ("you", "your", "the User") who access or use the Platform, whether via desktop browser, mobile browser, or any other device.

This Policy covers all personal data collected through the borojet website, including during account registration, identity verification (KYC), deposit and withdrawal transactions, gameplay, customer support interactions, promotional participation, and general browsing of the Platform.

This Policy does not apply to third-party websites, services, or platforms that may be linked to or from borojet. We are not responsible for the privacy practices of any third party, and we encourage you to review the privacy policies of any external service you access.

By creating a borojet account or by continuing to use the Platform after this Policy has been published or updated, you acknowledge that you have read this Privacy Policy and consent to the data practices described herein. If you do not agree with this Policy, please discontinue your use of the Platform and contact us at support@borojet to request account closure.

2 Personal Data We Collect

borojet collects personal data from you in three primary ways: data you provide to us directly, data we collect automatically as you use the Platform, and data we receive from third-party service providers such as payment processors and identity verification partners. The categories of data we collect are described in detail in the table below.

3 How We Use Your Data

borojet uses your personal data strictly for the purposes described in this Policy. We do not use your data for any purpose that is incompatible with the reasons for which it was originally collected. The primary purposes for which we process your personal data are as follows:

• Account Management: To create, maintain, and administer your borojet account, including processing your registration details, verifying your identity, and enabling you to log in securely.
• Service Delivery: To provide the core borojet services, including processing deposits and withdrawals via bKash, Nagad, Rocket, Upay, and bank transfer; settling sports bets and casino game outcomes; crediting bonuses; and maintaining accurate account balances in BDT (৳).
• Identity Verification (KYC): To verify that you meet the minimum age requirement of 18 years, to confirm the legitimacy of your payment methods, and to comply with our Anti-Money Laundering (AML) obligations.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent transactions, unauthorised account access, bonus abuse, collusion, and other prohibited conduct as described in our Terms & Conditions.
• Responsible Gaming: To monitor gameplay patterns for signs of problem gambling behaviour, to enforce deposit limits and self-exclusion requests, and to ensure that the Platform is used responsibly by adults aged 18 and above only.
• Customer Support: To respond to your enquiries, complaints, and dispute submissions via email (support@borojet), and to maintain records of support interactions for quality assurance and legal compliance purposes.
• Platform Improvement: To analyse usage patterns, game preferences, and navigation behaviour in order to improve the borojet user experience, fix technical issues, and develop new features and products.
• Marketing Communications: To send promotional offers, bonus notifications, and event announcements (such as BPL, IPL, T20 World Cup, Eid, or Pohela Boishakh promotions) to users who have explicitly opted in to receive such communications. You may opt out at any time.
• Legal Compliance: To meet our obligations under applicable law, including responding to lawful requests from regulatory or law enforcement authorities and maintaining financial records for the legally required retention period.

4 Legal Basis for Processing

borojet processes your personal data on the following legal grounds, depending on the specific purpose of the processing activity:

• Contractual Necessity: Processing that is necessary to perform the contract between you and borojet — specifically, to operate your account, process transactions, settle bets, and deliver the services you have signed up for.
• Legal Obligation: Processing required to comply with applicable legal obligations, including KYC/AML regulations, age verification requirements, financial record-keeping mandates, and lawful requests from competent authorities.
• Legitimate Interests: Processing necessary for borojet's legitimate business interests, including fraud prevention, Platform security, technical improvement, and responsible gaming monitoring — where these interests are not overridden by your fundamental privacy rights.
• Consent: Processing based on your explicit, freely given consent — specifically for optional marketing communications and non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of prior processing.

5 Data Sharing & Third Parties

borojet does not sell or rent your personal data to third parties. We may, however, share your data with carefully selected third-party service providers and partners where it is necessary to operate the Platform, fulfil our legal obligations, or protect the security of the service. Any third party with whom we share data is required to process it only for the specified purpose and to maintain appropriate security standards.

The categories of third parties with whom borojet may share your personal data include:

• Payment Processors: bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, and Sonali Bank — for the purpose of processing deposits and withdrawals in BDT (৳). These providers receive only the financial data necessary to complete your transaction.
• Identity Verification Partners: Third-party KYC and AML compliance providers who assist borojet in verifying user identities, confirming minimum age, and screening against sanctions lists.
• Game Content Providers: Providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi may receive anonymised session and gameplay data to facilitate game delivery, RNG certification, and technical support. These providers do not receive your identity or financial data.
• IT & Infrastructure Providers: Cloud hosting, server management, and cybersecurity partners who provide the technical infrastructure on which borojet operates. These providers act as data processors under contractual data processing agreements.
• Analytics Providers: Third-party analytics tools used to measure Platform performance and user behaviour. Where possible, data shared with analytics providers is anonymised or pseudonymised.
• Legal & Regulatory Authorities: Law enforcement agencies, financial intelligence units, and other competent authorities — where borojet is required by law to disclose data, or where disclosure is necessary to protect the rights, property, or safety of borojet, its users, or the public.

borojet will never share your personal data with third-party advertisers, data brokers, social media platforms, or marketing aggregators without your explicit prior consent.

6 Cookies & Tracking Technologies

borojet uses cookies and similar tracking technologies (such as web beacons and local storage) to enhance your experience on the Platform, maintain your session, remember your preferences, and gather anonymised analytics data. A cookie is a small text file placed on your device by a web server when you visit a website. Cookies do not contain executable code and cannot access other data on your device.

The types of cookies used on borojet are described below:

You can manage or disable optional cookies through your browser settings. Please be aware that disabling functional cookies may affect the personalisation of your experience on borojet, and disabling analytics cookies will not affect your ability to use any core Platform feature. Instructions for managing cookies are available in the help documentation of all major browsers.

7 Data Retention & Deletion

borojet retains your personal data for as long as is necessary to fulfil the purposes described in this Privacy Policy, or as required by applicable legal obligations. We do not keep your data for longer than necessary. Our standard data retention periods by category are outlined below:

• Account & Identity Data: Retained for the duration of your active account relationship with borojet, plus a minimum of 5 years after account closure, in accordance with financial services record-keeping requirements and AML obligations.
• Transaction & Financial Data: Retained for a minimum of 7 years from the date of each transaction, as required by financial compliance standards applicable to payment processing and anti-money laundering record-keeping.
• Gameplay & Betting Records: Retained for 5 years from the date of each game session or bet settlement, to support dispute resolution, responsible gaming monitoring, and regulatory audit requirements.
• Customer Support Communications: Retained for 3 years from the date of the last support interaction, to support quality assurance, training, and ongoing dispute resolution.
• Marketing Preferences & Consent Records: Retained for the duration of your account relationship plus 3 years after account closure, to demonstrate compliance with consent requirements.
• Technical & Usage Data (Logs): Retained for up to 12 months in identifiable form, after which logs are anonymised or deleted. Anonymised aggregate analytics data may be retained indefinitely.

When the applicable retention period expires, your personal data will be securely deleted or irreversibly anonymised. If you request deletion of your account before the end of the retention period, we will close your account and restrict active processing of your data — however, we may retain it in archived form for the legally required minimum period before deletion.

8 Data Security Measures

borojet takes the security of your personal data seriously. We have implemented a comprehensive set of technical and organisational measures designed to protect your data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security infrastructure includes the following measures:

• Transport Layer Security (TLS): All data transmitted between your device and borojet is encrypted using TLS 1.2 or higher. Our SSL certificate is maintained and renewed to ensure continuous protection.
• Encryption at Rest: Sensitive personal and financial data stored on borojet servers is encrypted at rest using AES-256 or equivalent encryption standards.
• Password Security: User passwords are never stored in plain text. borojet uses a strong cryptographic hashing algorithm with individual salt values to store password data securely.
• Access Controls: Internal access to personal data is strictly limited to authorised personnel who require it to perform their job function. All staff with data access undergo background checks and receive regular data protection training.
• Intrusion Detection: borojet operates 24/7 network monitoring and intrusion detection systems to identify and respond to potential security threats in real time.
• Regular Security Audits: The Platform undergoes regular independent security assessments and penetration testing to identify and remediate vulnerabilities before they can be exploited.

Despite these measures, no data transmission over the internet or data storage system can be guaranteed to be 100% secure. In the event of a data security incident that poses a risk to your rights and freedoms, borojet will notify affected users promptly and take all reasonable steps to contain and mitigate the impact of the breach.

9 Your Privacy Rights

As a borojet user, you hold the following rights in relation to your personal data. To exercise any of these rights, please submit a written request in English to support@borojet. We will acknowledge your request within 5 business days and provide a substantive response within 30 calendar days. In complex cases, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reason for it.

• Right of Access: You have the right to request a copy of the personal data borojet holds about you, along with information about how it is being processed and the purposes for which it is used.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold about you. You may also update certain account information directly through your account dashboard.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you withdraw your consent and there is no other legal basis for processing. This right is subject to our legal obligations to retain certain categories of data for minimum periods.
• Right to Restriction: You have the right to request that we restrict the processing of your personal data in certain circumstances — for example, while we investigate a disputed data accuracy claim.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity, you have the right to receive your personal data in a structured, commonly used, machine-readable format (such as CSV or JSON), and to transmit it to another service provider where technically feasible.
• Right to Object: You have the right to object to processing carried out on the basis of borojet's legitimate interests, including profiling for responsible gaming purposes. You also have an absolute right to object to processing for direct marketing purposes at any time.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal will not affect the lawfulness of processing that took place before your withdrawal.

10 Changes to This Policy

borojet reserves the right to update or modify this Privacy Policy at any time. Changes may be made to reflect updates to our data practices, new legal requirements, new services or features introduced on the Platform, or feedback from users and regulatory guidance. We will always publish the revised Policy on this page with a new "Last Updated" date at the top.

Where changes to this Policy are material — meaning they significantly affect how we collect, use, or share your personal data — we will notify registered users by email to their registered address at least 14 days before the changes take effect. For minor or clarificatory changes, the updated Policy will be published on this page without prior notice, and your continued use of the Platform after the updated date constitutes acceptance of the revised terms.

We encourage you to review this Privacy Policy periodically to stay informed about how borojet protects your personal data. If you have any questions about any change to this Policy, please contact us at support@borojet before the effective date of the change.