Privacy Policy — How tbajee Protects Your Personal Data

This Privacy Policy ("Policy") describes how tbajee ("tbajee", "we", "us", or "our") collects, processes, stores, shares, and protects personal information relating to individuals ("you", "Player", or "User") who access or use the tbajee platform, including the website at tbajee.bar, all associated games, betting markets, account services, promotions, and any other features made available through the platform (collectively, the "Service").

tbajee is committed to handling your personal data responsibly, transparently, and in accordance with applicable data protection principles. We collect only the information that is necessary for the purposes described in this Policy and we do not sell your personal data to third parties under any circumstances.

By registering an account with tbajee or by continuing to use the Service, you acknowledge that you have read this Policy in full and that you consent to the collection and use of your personal information as described herein. If you do not agree with the practices set out in this Policy, you should discontinue use of the Service and contact us to close your account.

This Policy should be read alongside the tbajee Terms & Conditions, which govern the overall relationship between you and tbajee. In the event of any conflict between this Policy and the Terms & Conditions on a data-protection matter, this Policy prevails.

We may update this Policy from time to time. Where changes are material, we will notify you via email to your registered address or via an in-platform notification. The effective date at the top of this page will be updated accordingly. Continued use of the Service following the publication of an updated Policy constitutes your acceptance of the revised terms.

tbajee collects personal data through several channels: information you provide directly when registering or using the Service, information generated automatically by your use of the platform, and in limited circumstances, information obtained from trusted third-party sources for identity verification purposes.

tbajee processes your personal data only for specific, legitimate purposes. We do not use your data in ways that are incompatible with the purposes for which it was originally collected. The primary purposes for which we process your personal data are as follows:

• Account creation and management: To register your account, verify your identity, maintain your account profile, and provide you with access to the Service.
• Transaction processing: To process deposits, withdrawals, and any other financial transactions conducted through your tbajee account, including liaison with payment providers such as bKash, Nagad, Rocket, and Upay.
• KYC and fraud prevention: To verify that you meet the eligibility requirements set out in the Terms & Conditions (including the 21+ age requirement), to detect and prevent fraud, money laundering, and other financial crimes, and to comply with applicable anti-money laundering obligations.
• Customer support: To respond to your queries, complaints, and requests, to investigate and resolve disputes, and to provide ongoing customer service.
• Responsible gaming: To monitor your gaming activity for signs of problem gambling, to administer self-exclusion and deposit limit requests, and to ensure that the platform is used in a responsible manner.
• Service improvement: To analyse usage patterns, conduct research, test new features, fix bugs, and generally improve the quality and reliability of the tbajee platform.
• Marketing communications: Where you have given explicit consent, to send you promotional offers, news, and updates about tbajee. You may withdraw this consent at any time by contacting support.
• Legal compliance: To comply with applicable laws, regulations, court orders, and requests from competent authorities.

tbajee does not use automated decision-making processes that produce legal or similarly significant effects on individual players without human review. Where automated systems flag an account for review (for example, for suspected fraud), a member of the tbajee compliance team reviews the matter before any account action is taken.

In the course of operating the tbajee platform, your personal data may be shared with the following categories of third parties, each of whom is required to handle your data in accordance with data protection standards no less stringent than those applied by tbajee:

• Payment processors: bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, BRAC Bank, Islami Bank, Sonali Bank, Visa, and Mastercard — shared solely to facilitate deposit and withdrawal transactions.
• Identity verification providers: Third-party KYC service providers who assist with document verification and identity authentication as part of our compliance obligations.
• Game software providers: Providers such as Evolution Gaming, Ezugi, Pragmatic Play, NetEnt, Microgaming, and Spribe may receive your player ID and game session data to facilitate gameplay and resolve game disputes. These providers do not receive your full identity details.
• IT infrastructure providers: Cloud hosting, server infrastructure, and cybersecurity service providers who process data on our behalf under strict contractual data processing agreements.
• Legal and regulatory authorities: Law enforcement agencies, courts, and regulatory bodies when we are required by law, court order, or binding legal process to disclose information, or when disclosure is necessary to protect the rights, property, or safety of tbajee, its players, or the public.
• Professional advisors: Legal counsel, auditors, and other professional advisors who are subject to confidentiality obligations and who require access to data in the course of providing professional services to tbajee.

In the event that tbajee undergoes a merger, acquisition, restructuring, or sale of substantially all of its assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and of any material changes to data handling practices that result from it.

tbajee uses cookies and similar tracking technologies to operate and improve the Service. A cookie is a small text file placed on your device when you visit the tbajee platform. Cookies allow us to recognise your device across sessions, remember your preferences, maintain your login session, and gather analytics data about how the platform is used.

tbajee uses the following categories of cookies:

• Strictly necessary cookies: These cookies are essential for the platform to function. They enable core features such as account login, session management, and security controls. You cannot opt out of these cookies without disabling the Service.
• Functional cookies: These cookies remember your preferences — such as language settings and display preferences — to personalise your experience on the platform.
• Analytics cookies: These cookies collect anonymised data about how players use the platform, which pages are most visited, and where errors occur. This information helps us improve the Service. Analytics data is aggregated and does not identify individual players.
• Security cookies: These cookies support fraud detection and platform security functions, helping us identify and block suspicious activity.

You can control cookie behaviour through your browser settings. Most browsers allow you to block or delete cookies. However, disabling certain cookies may affect the functionality of the tbajee platform and may prevent you from accessing some features of the Service. tbajee does not use cookies to serve third-party advertising or to track your browsing activity on websites other than tbajee.bar.

tbajee retains your personal data for as long as your account is active and for such period thereafter as is required to fulfil the purposes described in this Policy, to comply with legal and regulatory obligations, to resolve disputes, and to enforce our agreements.

The following general retention periods apply:

• Account and identity data: Retained for the duration of your account and for a minimum of five years following account closure, in order to comply with anti-money laundering and record-keeping obligations.
• Transaction records: Retained for a minimum of five years from the date of the transaction.
• Communications records: Support tickets, emails, and chat transcripts are retained for three years from the date of the communication.
• Technical and device data: Log files and session data are retained for up to 12 months and then deleted or anonymised.
• Marketing consent records: Retained for as long as you remain subscribed to marketing communications and for three years following withdrawal of consent, as evidence of your consent.

When personal data is no longer required, tbajee deletes it securely or anonymises it so that it can no longer be associated with an identifiable individual. Anonymised and aggregated data may be retained indefinitely for statistical and analytical purposes.

As a tbajee player, you have the following rights with respect to your personal data. To exercise any of these rights, contact the tbajee support team via email at [email protected] or via Telegram at @tbajee_support. tbajee will respond to all verifiable requests within 30 calendar days.

tbajee takes the security of your personal data seriously and maintains a comprehensive set of technical and organisational security measures designed to protect your information against unauthorised access, disclosure, alteration, or destruction.

Our key security measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and tbajee servers.
• AES-256 encryption for sensitive data stored at rest, including identity documents and financial records.
• Multi-factor authentication options for player accounts.
• Regular penetration testing and security audits conducted by independent third-party specialists.
• Strict access controls ensuring that only authorised tbajee personnel with a legitimate business need can access player data.
• Continuous monitoring of platform activity for suspicious behaviour, with automated alerting and incident response procedures.
• Secure, redundant server infrastructure with regular backups.

Despite these measures, no online platform can guarantee absolute security. In the event of a data security incident that affects your personal data and poses a risk to your rights, tbajee will notify you promptly and take all reasonable steps to contain and remediate the incident. You play an important role in keeping your account secure — please use a strong, unique password and never share your login credentials with anyone.

tbajee takes its age verification obligations seriously. As part of the KYC process, all players are required to provide documentary proof of age before their account is fully activated and before any withdrawal is processed. Acceptable documents include a Bangladesh National Identity Card (NID) or a valid passport showing a date of birth that confirms the player is 21 years of age or older.

If you are a parent or guardian and you believe that a minor has opened an account with tbajee using false age information, please contact us immediately at [email protected]. We will investigate the matter promptly, close the account if the player is found to be underage, and return any deposits to the payment method from which they originated.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a concern about the way tbajee handles your personal data, please contact us using the following channels:

• Email: [email protected] (plain text — not a clickable link)
• Telegram: @tbajee_support

tbajee aims to acknowledge all privacy-related queries within 24 hours and to resolve them within 30 calendar days. Complex requests may take longer, and we will keep you informed of progress. If you are not satisfied with tbajee's response to a privacy complaint, you may escalate the matter in writing to the senior management team for a final review.

tbajee is committed to resolving all privacy concerns fairly and transparently. We treat every data rights request with the same seriousness as a formal complaint and maintain a log of all requests received and the actions taken in response.