Privacy Policy — tbaej
Your privacy matters to us. This Privacy Policy explains exactly what personal data tbaej collects from players in Bangladesh, how that data is used, who it may be shared with, and the rights you hold over your own information. We are committed to handling your data with transparency, care, and the highest standard of security.
tbaej only collects data that is necessary to operate the platform, verify your identity, process payments, and keep your account secure. We never sell your personal data to third-party advertisers.
All data transmitted between your device and the tbaej platform is protected by 256-bit SSL/TLS encryption. Payment data and KYC documents are stored in encrypted vaults with restricted internal access.
You have the right to access, correct, or request deletion of your personal data at any time by contacting the tbaej support team. We respond to all data requests within 30 calendar days.
tbaej uses strictly necessary cookies to keep the platform functional, and optional analytics cookies to improve the user experience. You can manage cookie preferences via your browser settings at any time.
Financial transactions via bKash, Nagad, Rocket, Upay, Visa, and Mastercard are handled by our payment partners using their own certified security frameworks. tbaej does not store full card numbers on its servers.
tbaej does not knowingly collect or store personal data from individuals under 18 years of age. Any account found to belong to an underage user is immediately suspended and associated data is handled in accordance with our underage account closure procedure.
1. Information We Collect
tbaej collects personal information from you in several ways: directly when you register an account or contact our support team, automatically when you use the platform, and from third-party sources such as payment providers and identity verification services. The categories of personal data we collect are described below.
Registration and Account Data
When you create a tbaej account, we collect your full legal name, date of birth, residential address, email address, and mobile phone number. This information is required to create and manage your account, verify your identity, and comply with our anti-money-laundering (AML) obligations. You must ensure that all registration data is accurate and kept up to date.
Identity Verification (KYC) Data
Before processing your first withdrawal, or where our compliance team deems it necessary, we will request identity verification documents. Acceptable documents include a Bangladesh National Identity Card (NID), passport, or driver's licence. We may also request a selfie or a photograph of you holding your identity document. KYC documents are used solely for verification purposes and are stored in a secure, encrypted document vault with strictly limited internal access.
Financial and Transaction Data
We collect records of all deposits, withdrawals, wagers, bonus claims, and other financial transactions conducted on your tbaej account. We also collect the payment method identifiers associated with your transactions — for example, the registered mobile number linked to your bKash or Nagad wallet, or the last four digits of a Visa or Mastercard card. Full payment card numbers are never stored on tbaej servers; card payments are tokenised by our payment processing partners.
Usage and Technical Data
When you access the tbaej platform, our servers automatically record certain technical information, including your IP address, browser type and version, operating system, device type, screen resolution, referring URL, pages visited, session duration, and in-platform interaction events (such as games launched, bets placed, and navigation paths). This data is used for platform security, fraud prevention, and service optimisation.
Communications Data
If you contact tbaej support via email or live chat, we retain records of those communications — including the content of your messages and any attachments you send — for the purpose of resolving your query, improving our support quality, and maintaining a record of dispute history where applicable.
| Data Category | Examples | Purpose |
|---|---|---|
| Account Data | Name, date of birth, email, mobile number, address | Account creation, identity verification, communications |
| KYC Documents | NID, passport, driver's licence, selfie | Regulatory compliance, fraud prevention, age verification |
| Financial Data | Transaction history, payment method identifiers, balances | Payment processing, AML compliance, withdrawal verification |
| Technical Data | IP address, device type, browser, session logs | Security monitoring, fraud detection, platform analytics |
| Communications Data | Support emails, chat transcripts | Query resolution, dispute records, service improvement |
2. How We Use Your Information
tbaej processes your personal data only where we have a lawful basis for doing so. The primary bases on which we rely are: (a) the performance of a contract — processing necessary to provide you with the tbaej service you have signed up for; (b) legal obligation — processing required to comply with AML regulations, age verification requirements, and other applicable laws; (c) legitimate interests — processing for purposes such as fraud prevention, security monitoring, and service improvement, where those interests are not overridden by your own privacy rights; and (d) consent — where you have actively opted in to a specific processing activity such as receiving promotional communications.
We use your personal data for the following specific purposes:
- Account management: Creating, maintaining, and closing your tbaej account; processing login and authentication events; sending account-related notifications such as deposit confirmations and withdrawal updates.
- Identity and age verification: Confirming that you are who you say you are and that you meet the 18+ age requirement before permitting withdrawals or high-value deposits.
- Payment processing: Facilitating deposits and withdrawals via bKash, Nagad, Rocket, Upay, Visa, Mastercard, Dutch-Bangla Bank, and City Bank; reconciling transaction records; investigating payment disputes.
- Fraud prevention and security: Detecting and investigating suspicious account activity, multi-accounting, bonus abuse, money laundering, and other prohibited conduct; blocking unauthorised access attempts.
- Responsible gaming: Monitoring betting patterns to identify signs of problem gambling; enforcing self-exclusion arrangements, deposit limits, and cooling-off periods you have set on your account.
- Customer support: Responding to your queries and complaints; maintaining support records; escalating issues to specialist teams where required.
- Platform improvement: Analysing aggregate usage data to understand how players use the tbaej platform, which features are most valued, and where the experience can be improved. This analysis is conducted on anonymised or pseudonymised data wherever possible.
- Marketing communications: Sending promotional emails and messages about bonuses, new games, and seasonal offers — but only where you have opted in to receive such communications. You may opt out at any time by contacting [email protected].
- Legal and regulatory compliance: Meeting obligations under applicable anti-money-laundering laws, reporting suspicious transactions to relevant authorities, and responding to lawful information requests from law enforcement agencies.
If you no longer wish to receive promotional communications from tbaej, you can opt out at any time by sending a request to [email protected] with the subject line "Unsubscribe". Opting out of marketing does not affect the sending of transactional account notifications, which are necessary for the operation of your account.
3. Data Sharing and Third Parties
tbaej does not sell, rent, or trade your personal data to third-party advertisers or data brokers. We may, however, share your personal data with carefully selected third-party service providers and in specific legally required circumstances, as described below.
Payment Processing Partners
To facilitate deposits and withdrawals, tbaej shares necessary transaction data — such as your registered payment method identifier and transaction amount — with our payment processing partners including bKash, Nagad, Rocket, Upay, Visa, and Mastercard. These partners process your payment data under their own privacy policies and security frameworks, which meet the standards required for financial institutions operating in Bangladesh and internationally.
Identity Verification Providers
tbaej works with third-party KYC and identity verification service providers to validate the identity documents you submit. Your identity data is shared with these providers solely for the purpose of verification and is not retained by them beyond the period necessary to complete the verification check.
Technology and Platform Infrastructure Providers
tbaej uses third-party cloud hosting, database management, and content delivery infrastructure providers to operate the platform. These providers have access to your data only to the extent necessary to provide their infrastructure services and are bound by strict data processing agreements.
Game Content Providers
Where you play games powered by third-party game studios — such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, or Ezugi — limited session and wagering data may be transmitted to those studios' platforms to facilitate gameplay. Game studios receive only the data necessary to deliver the game experience and settle game outcomes; they do not receive your full profile data or payment details.
Law Enforcement and Regulatory Bodies
tbaej may disclose your personal data to law enforcement agencies, financial intelligence units, or other regulatory bodies where required to do so by applicable law, where we receive a valid legal request, or where disclosure is necessary to prevent serious harm or criminal activity. We will notify you of any such disclosure where we are legally permitted to do so.
tbaej does not and will not sell your personal data to third-party marketers, data aggregators, or advertising networks. Any third party that receives your data does so only as a service provider acting on our instructions, or as required by law — never for their own independent commercial purposes.
4. Cookies and Tracking Technologies
tbaej uses cookies and similar tracking technologies to keep the platform functioning correctly, remember your session preferences, and gather anonymised analytics data to help us improve the platform experience for all players.
A cookie is a small text file placed on your device by a website you visit. Cookies are widely used across the internet and are an essential part of how most online platforms — including betting and gaming sites — operate. tbaej uses the following categories of cookies:
| Cookie Type | Purpose | Can Be Disabled? |
|---|---|---|
| Strictly Necessary | Keep you logged in, remember your session state, protect against CSRF attacks, enable secure payment flows | No — required for the platform to function |
| Functional | Remember your language preferences, game lobby display settings, and responsible gaming limits you have set | Yes — via browser settings |
| Analytics | Collect anonymised data on pages visited, session duration, and feature usage to help tbaej improve the platform | Yes — via browser settings |
| Security | Detect anomalous login patterns, flag suspicious session activity, and support our fraud prevention systems | No — required for account security |
You can manage or delete cookies at any time through your browser settings. The exact steps vary by browser — consult your browser's help documentation for instructions. Please note that disabling strictly necessary or security cookies will affect your ability to log in to and use the tbaej platform.
tbaej does not use third-party advertising cookies or retargeting pixels. We do not share cookie data with advertising networks for the purpose of targeting you with ads on other websites.
5. Data Security and Retention
tbaej takes the security of your personal data seriously and implements a range of technical and organisational measures to protect it against unauthorised access, accidental loss, destruction, or disclosure. These measures include:
- 256-bit SSL/TLS encryption on all data transmitted between your device and the tbaej platform.
- Encrypted storage for KYC documents and sensitive account data, with access restricted to authorised personnel on a strict need-to-know basis.
- Two-factor authentication (2FA) available for all player accounts and required for internal staff access to systems containing personal data.
- Regular security audits and penetration testing of the tbaej platform infrastructure.
- Access logging for all administrative access to personal data, with anomaly detection alerts for unusual access patterns.
- Data minimisation — we collect and retain only the data that is necessary for the stated purpose, and delete or anonymise data when it is no longer needed.
Data Retention Periods
tbaej retains your personal data for as long as your account remains active, and for a period thereafter as required by applicable law and our internal compliance obligations. The general retention principles we follow are:
- Account registration data and KYC documents are retained for a minimum of five (5) years following account closure, in accordance with standard anti-money-laundering record-keeping requirements.
- Transaction records (deposits, withdrawals, wagers) are retained for a minimum of five (5) years following the date of the transaction.
- Support and communications records are retained for two (2) years following the resolution of the relevant query or dispute.
- Analytics and usage data in anonymised or aggregated form may be retained indefinitely as it no longer constitutes personal data once anonymised.
When your personal data is no longer required to be retained, tbaej will securely delete or permanently anonymise it. If you request deletion of your personal data before the end of the applicable retention period, we will inform you of any legal obligations that prevent immediate deletion and provide an estimated timeline for when deletion can be completed.
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, tbaej will notify affected players via their registered email address as soon as reasonably practicable. We will provide details of what data was affected, the likely consequences of the breach, and the steps we are taking to address it and prevent recurrence.
6. Your Privacy Rights
As a tbaej player, you have the following rights in relation to your personal data. To exercise any of these rights, contact our support team at [email protected] with the subject line "Privacy Rights Request". We will respond to all requests within 30 calendar days.
You have the right to request a copy of the personal data tbaej holds about you. We will provide this in a structured, commonly used, machine-readable format (such as a PDF or CSV export) free of charge.
If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. You can update basic account details directly via your account settings; more significant corrections should be requested via [email protected].
You have the right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent, or where you object to processing based on legitimate interests. This right is subject to legal retention obligations that may require us to retain certain data for a defined period.
You have the right to object to tbaej processing your personal data where processing is based on legitimate interests or for direct marketing purposes. Where you object to direct marketing, we will stop processing your data for that purpose immediately.
Where processing is based on your consent or on the performance of a contract and is carried out by automated means, you have the right to receive your personal data in a portable format and to request that it be transferred directly to another service provider where technically feasible.
You have the right to request that tbaej restricts the processing of your personal data in certain circumstances — for example, while we investigate a rectification request or an objection to processing. During a restriction period, we will store your data but will not actively process it beyond what is necessary.
7. Children and Underage Users
The tbaej platform is strictly for adults aged 18 and above. tbaej does not knowingly collect, process, or retain personal data from any individual under the age of 18. Our registration process includes date-of-birth verification, and our KYC procedure includes age verification as a mandatory step before the first withdrawal is permitted.
If tbaej discovers or receives a credible report that an account belongs to a person under 18 years of age, we will immediately suspend the account, void any balances held in it, and initiate our underage account closure procedure. Any personal data associated with an underage account will be deleted as soon as the closure procedure is complete and our legal retention obligations do not require it to be kept.
If you are a parent or guardian and believe that a minor in your care has accessed or created a tbaej account, please contact us immediately at [email protected] with the subject line "Underage Account Report". We will treat your report with the highest priority and respond within 24 hours.
tbaej has a zero-tolerance approach to underage gambling. We invest in age-verification technology and KYC procedures specifically to prevent minors from accessing our platform. Parents and guardians are encouraged to use internet parental control tools alongside our own safeguards to prevent underage access.
8. Changes to This Privacy Policy
tbaej reserves the right to update or amend this Privacy Policy at any time. Changes may be made to reflect updates to our data processing practices, changes in applicable law, improvements to the platform, or the addition of new services. The "Last updated" date at the top of this page will always reflect when the most recent revision was made.
Where a change to this Privacy Policy is material — meaning it significantly affects how we collect, use, or share your personal data — tbaej will notify you via your registered email address at least seven (7) days before the change takes effect. For minor or clarificatory amendments, we may update the policy without direct notification, and your continued use of the tbaej platform following the update will constitute acceptance of the revised policy.
We encourage you to review this Privacy Policy periodically to stay informed about how tbaej protects your data. If you have questions about any aspect of this policy or about how your personal data is handled, contact our support team at [email protected] — support is available 24/7 in English.
All privacy-related requests and enquiries should be directed to the tbaej support team at [email protected] with the subject line "Privacy Enquiry" or "Privacy Rights Request". We are committed to responding to all privacy requests within 30 calendar days of receipt.
Now that you understand how tbaej handles your personal data, explore our full range of cricket betting, live casino games, and slots — all on a platform built for Bangladesh players with security and fair play at its core.